{"type": "bundle", "id": "bundle--543265af-a79e-4cf2-baa5-84e2511df314", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--48f7b216-aaed-4081-9a42-4499416f5dbb", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--1672506e-9b8e-43c0-9891-83b3142c3e82", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--18d481e2-b984-43f7-bdec-40c3b878b752", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--5bdc331e-5949-4115-8312-eb66f59c49ea", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae03a9de-77ce-4f57-a2be-ce337818eb6a", "relationship_type": "located-at", "source_ref": "infrastructure--5bdc331e-5949-4115-8312-eb66f59c49ea", "target_ref": "location--48f7b216-aaed-4081-9a42-4499416f5dbb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--481ebfca-8258-49b8-983d-c67844b34e60", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f21aade-ffdd-4d35-8e6e-6dc6e928b140", "relationship_type": "located-at", "source_ref": "infrastructure--481ebfca-8258-49b8-983d-c67844b34e60", "target_ref": "location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--0278d08f-119b-4391-b736-d7ea9f6f9911", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--9beaeb2c-b4c8-4d31-b1f0-b0a316293f1f", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3839b684-a752-49eb-b071-63ce41746038", "relationship_type": "located-at", "source_ref": "infrastructure--9beaeb2c-b4c8-4d31-b1f0-b0a316293f1f", "target_ref": "location--1672506e-9b8e-43c0-9891-83b3142c3e82", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--5e8cc15b-75a9-493b-a0c6-e0aba009a79d", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c0fb33a-6e9f-4912-8190-bd5a40b79872", "relationship_type": "located-at", "source_ref": "infrastructure--5e8cc15b-75a9-493b-a0c6-e0aba009a79d", "target_ref": "location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--59365971-9aff-4d45-9779-fde5e05a902b", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--75f6c9bb-ba02-407b-83a1-2b2e2c44bc30", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--e0c5c0c3-2afc-484f-9c71-65705a5c9c36", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--bda676fa-f8a6-45b6-9c11-85202656290a", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--dedbba31-b3b9-4b96-919d-d87d06c5c1e9", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b505ec45-9b32-4a39-9713-652fd61e3b42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.14.110.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ae4b7c-a53b-46ef-b0b7-a6733b9a84e4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.162.129.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754219ba-5632-4b4c-9c9e-754f91dad198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.162.64.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48424e21-8ff2-450f-b963-0bb777decc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.164.111.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4f656b-6454-449d-a51d-32f613a7137a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.164.71.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de521365-f1c4-4466-8894-a00c4991376e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.171.161.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bbfae2-30a6-424a-b9dc-c46825821f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.177.63.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0541eb18-d7b0-431f-b95d-38760fb13671", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.214.214.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e745908-cb1e-4643-9d2d-b25b0ce3eefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe903d6-218d-4b7a-aad6-a043206fa2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcbec72-7629-4c84-89f8-53a6843fa6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b811594-0310-4fcf-aba1-cb85a51d518b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2769a8b-3903-4797-b7d2-36b40135213a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.32.57.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2528fe4c-80a2-489d-ba11-e6796d57283f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbef0cd-bfff-49dc-8c12-1b4f0f28803e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.92.123.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffea2686-161b-4311-987d-30419a71351b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.223.16.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b29dcd-71af-4d39-bf28-c765d6c187c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.27.223.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46adc723-32e6-4989-bf97-d165700ec876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44b1545-9054-4240-b0ac-1395a293a69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.191.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3012ad52-01e2-4aab-9433-1fc8d898857e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1c7799-dfcf-4266-9f2c-06b115fe474c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cd1310-379f-487a-aa6d-739fb9fc5ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2e715a-0db3-46a6-8b2a-0a6875c592d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320eb954-e443-44ea-a3cf-3e209c1842f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896f650e-0e26-41ee-84ce-f50343202b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a52a328-15a2-4b4b-81a1-2e9676314315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3721fc-cac7-42f7-90fe-0dc2f9d95a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c704ae-30fd-461d-8471-acf08320d9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696815cf-a248-432b-bb4b-543bde0dba30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219ed898-adf7-475a-bd72-a7d85b8f2a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e86e41-42a6-4766-835c-6793e135097c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6caaaa3-2c94-4df3-8c5f-43cb084e1c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd8bbf5-ab46-4760-b94f-5d666da77681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f47c4a7-b2c8-434a-8389-4e953e277eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6472d6af-18a2-483a-b54e-a0d2240c5c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e287ea22-012b-45fc-a2d0-a8f734f45a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6919e9b0-17f4-47e9-86be-4a48432abdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025a710b-7985-412e-a13d-89f5ebc14bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fce92b2-0b6a-40fe-b4bc-c270ee784bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5a703e-b40d-4032-94a8-751e57d1a9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197aec22-d812-4863-ac0a-9ee0e5627a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168dcbeb-c186-4838-9be7-6e455b96cca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db631e2-cfc4-44ac-8328-cf07109a704c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e30a379-1a97-44be-96b9-b554c8555f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb73fe2-0951-4992-9dd5-9954177a6ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb28af5-95b7-407e-8261-ea485ea7e4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde279a0-e770-4df9-bf16-d06e3788f1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92a46ac-7b9f-4253-9a8c-2725512243a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac0f078-aaef-49eb-87b2-d42117ceb305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8590c9a0-b6f7-452b-844e-b71dfb0fada6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a39a7b-7477-4316-840b-59f12688a9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268a884b-ec45-45e7-8bd1-ec794c527984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cd31fd-e3c6-404b-b4c3-a72952ec9699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0de000-fe28-4095-8a4e-b117a91f7a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a283303-f50c-4023-9709-e654d5cf863c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04fb1fe-3a7a-40c3-9e21-db591cc9894d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bad2246-e99c-4822-b5f7-c34a43268ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7887cf67-d723-4cb5-b73f-6449204a4851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b7840b-2b11-4835-9df6-6aa53bc729a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca969b5e-bde3-45bb-b5a9-192bdf3ba16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2290d6-0859-4a41-8dc9-9656cea6d460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4f4b09-626c-4c75-a8a5-3b1f38d2d624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea924662-a8c6-4644-8b71-c20eb7fe31fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6502b00b-81ed-44fd-b8c0-4e24393882ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbe2337-d517-4171-946f-e8d5f64158db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75364750-03de-4715-afbb-48d32f9b12bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.6.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bc0385-7b94-4de6-9d8f-f88c738448aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.52.14.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c0c1bd-0321-4556-b014-778174de60cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.58.129.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c82c25-5508-4d43-847b-1b40c04f8948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.26.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e2ff44-0a5a-4e4a-9828-47850fc82a6a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.55.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f1254b-5830-45fc-95c9-abba2dc5c3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.127.144.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474a91af-d476-4353-b584-ad46bec68afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.104.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce46f1e-1a12-433f-86d0-44a3318f778b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.245.111.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a4d129-3cfe-4e71-9fed-68b258bc8f20", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.254.159.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd8576c-12eb-40bc-864d-6521c050bbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.15.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646a53fc-13c1-4ac3-b6be-15d52fcec91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.208.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23daa41f-0dd3-4dfd-85a2-8dcc4a2ac3b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.244.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebd05bd-a4f2-4214-b8fe-03971d391097", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.104.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8af1fd1-6338-4e18-8387-a169173ad3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de69f102-c7c1-422e-b0e6-655e7e8c4d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf94004-5f3e-495a-89c5-6ca2e80ac2e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3f355e-8d22-45f1-b6ee-75969bbf90cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f9e61d-e9ff-4d34-8449-77b29a5e8e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709a239a-58be-4bb7-8b7c-d4236d3e78ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef0e39b-ff6e-46f7-bcba-b1baf890286a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be927951-54ff-4772-b7ad-2fb5ed4f3b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31505a76-305b-4e10-beac-60b512f02f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8fc994-0cf5-4f79-84c6-f5ec0e8b7528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f92e248-34b4-4a93-ba45-e7000a69d0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.109.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32ec99b-f4a8-4466-b2f4-ecd58cd5d091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bcab43-7201-438a-92b2-c5e8df96db11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c2d25c-fbd1-47ca-9353-a134485f9f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd8368f-3b13-42de-b66f-91034914b7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac4ff53-1298-4a5d-881d-6506eb093076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f564b4a4-744a-4454-b88c-135a204d9111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.116.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053517d6-f873-4fce-96ed-ac8b698e21fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa03ab0-8b13-4235-a2ef-d4f25fcefc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9694eae-78f9-4d54-89cc-899a0dd30678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84148847-bcd5-4dab-a2fc-a7fe5de127da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074919c6-81c4-436e-b2c2-8e3e3561c388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.122.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e188004-394d-499e-8a0c-95b030b4a25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a59c83-42e8-49bf-b2c1-a10639aafdb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6741d9da-fce8-4926-9480-18ba869495ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c693fa09-96e9-4c87-bdfb-ce38c918cded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811f26fd-2f6b-4854-b0aa-8e345296811c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a05014f-88a6-4c7d-ae14-5f0c429bbc47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cd5a4b-7733-4ca0-a0f2-4b1104ffe83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a348bf20-490b-4695-be44-26d792112946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfa7fe0-570e-4d5b-9a87-09fd4b1e97b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.42.41.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf3eafb-e613-4c0e-bfca-7250ad1d9487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.43.12.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91afb03-f3f6-45b5-8c03-1b0cd578a094", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.156.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f81abb-fbb2-4cef-8ed1-03cbe5e272c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.67.136.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c6c74e-bf07-4f96-8542-e426495b5d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.68.6.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4befab-e986-4e2f-abd9-5dde4290a25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.87.55.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849f4345-144a-48f3-beb0-c703953b1fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.201.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27c6c50-bfd7-4a5f-88bc-fef30928949a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.215.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad73a1a-01f7-4368-ac21-b88c03b6fcae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223b2744-3a04-4212-864b-f9f29ca6d403", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.223.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fdeadc-1986-4ece-945a-eea58aa4867c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.141.211.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b812c2-f693-453f-8a48-c5a40ece4470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.165.127.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b18a76-bc32-4851-b271-e12d1687e413", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.208.240.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05c9ea5-d066-4da9-a98b-e1f0120e181c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.210.148.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbbbad1-ac0b-48f1-b4c3-ddb6b68a1c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.216.169.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4216e1-5042-4f5a-94cc-d8e1cdb6a409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5ba1ec-cc08-42c1-a427-885b19546663", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.87.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcc8c69-6abf-486b-b2cc-93e68e1bde35", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.23.122.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b79cfb-93ac-4003-a837-79c99ad481e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.67.141.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5291f043-25d0-488e-9880-d38209fd3973", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.137.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580580d2-204c-4cca-9fea-7f0bba40c7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.137.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d7325a-dd48-4819-b9e4-2967fe774ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0632f591-d328-429a-b680-e24799c17a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.97.218.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f33b59-eaca-4fd4-86a9-0b48d64092e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e64e6b-5c27-4472-b7a7-6c82a0b7606e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f10b9c-79c3-4678-a6b2-dddd2e2e20ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.84.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5fc6c4-36af-464e-be38-7b0d52db3c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.107.115.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c13a806-bffc-4b46-8cf4-725757bfc0df", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.11.78.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d9633f-7887-4100-84bd-26200ebf3f03", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.115.128.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1402d2ad-6b11-46cb-a16b-eb7caf3d5bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.116.108.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f043d22a-3b0d-4e6e-90bf-2f4149f7f5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.28.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29782777-dfde-466e-a6f9-4736cdad258a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.28.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7be80d-4bb3-412b-8cb8-89dc1dfec299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.29.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b29139e-34b5-4f35-8c6b-7bad1597bf17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.189.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78d8109-ee2c-423d-aa3b-20d9442b0325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e73b5c-c0b3-4727-873e-fa8582491373", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.247.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fe792b-bcec-4c56-8742-c7715f147719", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03252686-22f6-469a-910c-5add6d989336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.131.61.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1caede79-3068-4b9c-910a-01ec60ae73e7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.236.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3874a5-f185-40e7-8054-5166ed66c122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.137.111.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ce24f1-9ce0-44b3-a123-144707b743e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.138.189.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a027b48-99b4-4ed3-9b14-aca69497a987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3b9b4e-49c3-4bd9-9216-a89346184009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33e58a9-3558-4b1d-949e-e36387a74bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.141.5.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa64ebd-62a6-44d2-a89f-42044e06854c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.143.10.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90db2a10-0ccc-4d7a-8d07-78bb970c6dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1b2f25-6c0f-49c1-9c59-4a8f7c9deb2a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.147.159.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0a94c7-e047-48d2-b4aa-7c1e2669fef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.147.182.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8797b299-5fca-4e01-9a71-fef6e728c723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3285bebb-2825-43de-be95-757bf731ae23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f418ba96-5dd4-4ddc-ae28-2015e2c1c491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5161fbcb-86c4-43a3-9920-c8e53b655087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c3422c-12de-459a-ab83-b77b52f5be5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.113.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff66dc23-8d02-45e9-9a8e-8268468c1fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.113.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4760a862-dbda-4a68-932e-4e7128475361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.159.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78194477-7efa-41f1-a312-400ac715382e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.183.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ced1ea0-e4a9-413f-914b-ac1b2e3cfe34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561ef881-3ba3-449e-ba6b-8a4e23c24861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.69.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d655028f-67d5-4f51-bfe9-70ec5235cc69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.154.241.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3cb084-4155-4675-97e8-9976bdbac98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.157.248.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9b13c7-2ae5-40e3-ae9b-e5bf9704a751", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.158.29.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886a7cf5-2569-48ce-9b3c-96ef9c013b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.197.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68d040b-7d18-44b7-8762-5b6c2a31b9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.197.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d50fbd-969d-4322-90d4-64e9c343b25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ffa2a0-4a44-4687-88dd-9b6018610010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.162.31.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99ddce1-751c-4433-ba51-d7149f775670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.166.150.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd62fa5-85d4-4e9a-9ebe-8628447f9fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.89.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297fed5a-2cf1-4b4d-9e8b-f1ded1c1972c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.171.129.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e85718c-bc72-4a6e-9d59-8a45e05276d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.26.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4906fa61-647b-4ea1-9fdc-804938d81e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7060817b-bddc-4c19-8a9b-44b80c23c3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01237b7-05bd-45bd-893a-22b7ad57f50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c3510b-eccd-4074-b8be-4d46dd245910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bae3586-ae05-42f4-bb04-4f94f746a6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.174.38.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d01f2f-59f2-4df5-98ec-49a2ff828808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1019653a-662c-48fa-87ab-f9b05ddb131b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.90.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fcf200-db44-4b85-8ff1-95b143863d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.177.33.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a60191-7b47-448c-b0d3-2537faec2b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.178.121.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1126d03-150d-47c0-a106-27aae8c33ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.179.172.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fde374-3f63-464d-b11d-eb5e98681b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.179.182.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee15698e-8eef-4d3a-be5e-8fad80622fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.179.198.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011a5a6d-4a56-49c1-a1bb-080f596ff5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805700f6-9809-4824-9eae-b1b2bcd3eca9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.182.234.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e1739e-f4c9-4513-881c-f82f4d48603e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.0']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2317da34-1c21-4b02-9779-05d628483257", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8d018a-7cb0-43fb-85c7-44496dcace96", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c394f822-1ae2-4cdf-b955-522522409d56", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.183.62.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce625a9-74d0-489b-819f-031970ba377f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.190.178.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1874e24b-7b8f-4898-ae91-ec37aed64160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.2.134.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e11b37-4a01-433c-8227-dbb9287241f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.226.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d558a00-b5ee-4026-8604-074537307951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.56.0']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a1939e-1ebe-482f-b5f2-545b5ff99531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.56.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15cf6cf-61b9-4704-bea6-f57c96f4fc50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc6038a-ddef-4c0c-a60e-fed1de1c01af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de7fb31-8593-45de-87bd-55b1641178cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f58f25-9831-4c71-ac89-8cf927e405d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4059dfd7-b06a-4413-91c1-c8722bc19943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0608c9-57f1-4246-a562-45d2b7899c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7b69fd-6180-4239-b569-16e3844a97dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4442b388-d749-41fc-9c1f-16d36e85d943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.204.13.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ab2c05-d869-48b9-b105-6d40436237ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.206.147.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbac7b6-b743-4e5f-9bfc-72a46e628aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.207.5.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24305050-3e6d-442a-9cbe-6c3b2e189f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58d2364-41fc-470e-9aa5-1a08df81fa46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255b4249-1588-4fa1-9763-a9374f6ca80d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.212.187.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13d6025-faa8-453f-9dd5-fedbb1618efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.114.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9e9125-e8da-48d7-997a-13b899640b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.127.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8fb7b1-9ce1-4fbc-8210-7a12084f80c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.240.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1fbd77-6f2d-43e5-9e9a-34a6aadec12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d875ad-0bd6-4834-b97b-1c64c14cca56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.219.170.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2410795-9859-4975-aa09-0fed3c4d5460", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.221.220.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31f936c-e28f-411d-a5e9-515665469cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.221.246.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63542c0-0172-42d9-a6ff-663f33df3edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.225.87.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b636bf8b-055f-468c-86db-2d63707f523c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.226.25.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977f95de-ed06-4e69-9590-8b7e76c7d799", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.232.213.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d159e6-2dff-43db-8a88-9c816666f208", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.233.254.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8ebb42-433f-4e89-b263-6b81e54656d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42996e1c-99e2-4577-8105-6a7eb9067537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec145a4-a0d0-4743-a3c5-477f6ed4afba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c374d4ae-e495-4110-9176-3e8a0e76984e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5dfe887-d137-42e7-ad35-654cef5545c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9327400-b676-4b96-909b-30cd3c19c96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4feb41-19c8-4b1b-91d0-99425530dbc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcfa2a6-e888-425a-8963-7f0b45987a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c19909-f0ea-4e78-a4c9-ec803a38e34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd321486-5620-4dcf-a61a-32124c8e255a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b549fb-5155-4af6-b6d4-f3f902bae9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2f2dd1-0ee2-4c1f-b77a-d04f877136ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b094cd-fd60-46b4-bb3c-5b7209bcdb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36408354-728f-4ee1-8f3c-d9ae21d4fa78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e63e41-7076-4cf4-859b-987a1788685d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ca0803-137b-4ffb-8ebd-e49e8e02ca8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddeac08-b895-4323-b96d-4dfbd4b73011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f024da-92ef-48dd-8f8b-34037d12d69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc72cc6-1e73-45ab-a287-38013717bc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640557c9-e6b0-4a8c-a786-596cc9bf3678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402715c5-7d98-462f-8e5c-6baa1ca3a80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc8f83d-1f3c-4b78-809a-a6c852526308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371b043d-4502-49a6-a4b9-3bfbd3313c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d825d6-251c-4d98-b812-8bec86b1db44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61400dae-5f17-4622-b95e-d22996b435d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2292368-b8a5-4d4a-8973-a5e9f69fb1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790a1979-da10-40db-84d8-816e0824628b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336965bf-2165-4014-b9ca-3d097d5f9b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.236.132.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef085de-a40d-4f62-a313-a23c185354c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.237.157.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--addb0958-4075-406c-95be-a34f67838892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.243.171.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230f0784-7d07-488f-9110-5802f74a72bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.227.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96287d0-6a3e-4c73-916d-1815f87a16c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.88.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3229bcf7-06cc-468d-9b62-0fbca5c10914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.88.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51662d9c-f353-4a10-aabd-cdf8cb3e1b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.244.91.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d58adeb-026c-4dbd-b076-597987a96220", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.248.120.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee343de-30f4-4073-875b-0703d67e8c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.250.11.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9387e6-bedb-4a6b-8297-9627c9dc4a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.252.90.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9223615-2355-442e-9cd0-04fcd8c22c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.82.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44109239-cc8d-4a78-afb3-cf5195738c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.83.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75d3abc-cc87-4007-b2ca-175479fdcb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2bbd120-1ff7-412c-afe5-44e1a187a2a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dae5fc-e788-4e2c-9173-9dd2ecac7540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1181c5-bbbd-4c68-89ce-4b6a7aaf1fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.77.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dfff25-063e-409f-af41-3540027f76f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.3.164.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21910862-0d0d-40b2-97c0-0233b15968a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.31.249.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9321e7f-3776-46d8-8dce-354db198af2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.42.182.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8a7ef7-b6d5-4733-bbb2-1b1361247a07", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.48.192.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c4c8e0-ca03-4326-bc37-78af6620e922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129562fe-ab73-4d19-a598-59f00b76fca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.224.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707def81-19b0-4242-9e11-15341581c34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.156.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb16d63c-c869-461a-b295-ebd5b8a31491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.60.12.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b421569-ffe0-4da8-aed2-c9c308a6c089", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.61.123.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9787fd84-706e-46e5-9fed-66830fb4b6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.68.68.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca38ce4b-ef5c-4539-bfbf-50d83233828d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.189.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df51fae1-624c-4745-a9c5-a77c0b97587f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49360069-4ff7-40c6-8968-04420b5640c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3958335-e922-4348-a72f-2dfd7055f405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.172.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c4c08d-c9eb-4c1e-9ecb-99b12a3494a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff1440d-45c1-4316-8b77-cffd083b1066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8631e418-151c-43b7-9cd4-dd3e39582cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.246.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153bb94d-e45f-4bd7-9a94-42347b90cb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.0.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d7a071-743a-4bb9-a23b-664977f7ebaf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.1.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfaccdc-0511-4404-9d57-6ac0067032eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.8.238.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5624aa1c-0384-47ce-a98b-eda335715594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.81.170.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a31f6f-5f5b-4e3b-92e8-688903e16779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b02be0-c64f-4746-9712-bdbb9df7c314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f415345-09dc-40c9-827c-7e7bb8838ac1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.83.91.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6672a3b-8eb5-4f64-bc1f-9a1e64c0a3f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.84.236.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb40fe5-78b0-484a-a647-69690aac1e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb672e1-437f-4648-9dcf-3201a2a3eab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2795e6-306d-44f4-86aa-ba49ee1df0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a12712-6597-449b-a8aa-4dd17950da23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cec62fd-7e77-41f7-95a6-2f223defa4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1902c711-1f42-43be-97f5-832c8851cb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fed5922-dd75-4bca-a665-49873a102f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122bd7c1-58e9-493d-b924-3a002f31603a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb099c4-e588-4536-9710-f6546a0025e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c292d58a-64ad-4e16-ad31-b36869afbeba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.206.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a57a777-e67c-430c-b2af-22367b764e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8699cd06-b420-4669-856e-87d9bf38c779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.148.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e13445-d209-4742-bf3e-907b3b7ee483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.128.144.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee4a71e-d4c7-4e83-9559-604bf4876390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.187.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68236feb-b588-4590-ae1b-46883799a653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b16c53-5268-4eca-ba89-602eeeff9b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d73623-4c48-48bd-9ccf-c5ea8006c29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1b5046-ab79-473b-af55-5d3571ff24c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27dce1ec-6ce7-40d6-9055-c71fd4b42353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418d582c-8b6f-4413-a10b-24d291a796cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be356eec-9805-4782-885e-45f94ca960c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e521371-0b9b-4309-9b65-4b81babefd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2faba260-d3db-4fb0-ac19-0f1b752959aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e53a0bf-eec9-4841-9dcc-6fef1942d463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a484581c-19cc-4d0b-8009-c9c5b9d54e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7d60b5-3c9b-4e9e-80a6-12a686e22e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfc2e66-3ef4-4dbe-8439-cb7eea5fecb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3841ec0-5d79-40c9-b2d4-b5f8e704c90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce444d78-e41f-49b9-8dad-56ff6e24a2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996718e7-2372-4268-990d-f3ec517a2f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a80bdb-ef37-4277-825f-80b39fbbbd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31000c5-18b4-49e5-9f32-d3e1b39daaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86671908-e9c8-40a3-b50c-389ab37bbce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6330e008-9ad3-4b9c-9fd2-2ae056fc4906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a828cb-ae38-4cdb-9560-b58b679e0e36", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.48.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c43637-e120-4734-ae07-35afd6e1e36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.64.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7351500f-84b9-4732-b104-1c14970f731f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.132.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74dbf966-9a1d-4528-b0c2-d5cb5758976a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.138.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f036a6af-c955-46e8-a0ec-187ca2c60b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.156.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a8395b-6e49-4434-aec5-e5324a399ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.145.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ade2fcd-9626-4cb2-93f6-0f9211c857bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.147.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2e783d-fdb3-4e3c-a012-ac63f705f91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.9.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc6696f-979d-4222-96fb-221a87527dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.196.42.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c04e3a-2fba-4017-a0bd-ca2295bef818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.187.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00915d8-42dc-4346-9ab8-b7aa92415a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.29.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a69fb10-18a3-4490-882b-7a974a0410b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.90.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc27298-3e03-42ac-afe8-b57080e31604", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355df8c4-736b-409b-be64-559daee08e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.211.244.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1741e9a-e90b-40a8-befd-635196e1c74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.164.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c789714-4532-4fe1-a5e9-25149ca60c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.164.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65dc725e-c436-4a91-ab18-65ef6997e71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.219.248.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17b2b7f-5946-424d-ad03-41f58db3c6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.223.21.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8bf872-3433-4888-9b45-0a5c29fbf299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.224.31.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1b3ec8-0b11-4495-bbb1-d9b0cf669bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5868f0ec-e9bc-464b-8a1a-0030cde8d87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc5898c-b187-4465-b4af-a7ff61cdac98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.219.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b24814-46a4-4a54-ab8e-fb88acc94aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.66.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e257d9-3f3b-462f-8978-9c0d988c2016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.93.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526b6696-8d37-407d-914c-824dcfe95b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4b0438-0e4e-48f0-8ba9-6d30f9b79295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fb9e5f-dc8a-4530-b7af-4a740c0b17d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b10add-e91b-4aac-b47c-69d10d475abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.151.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f636ec2-1597-4c9c-88ee-e916053ddd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856002a9-0dfc-43a7-b0b8-5ba81f7819ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239c41b9-7c4e-4178-89f3-cd430e5aa465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b262715-570e-457a-b1cb-a9ceb668d0ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f402b9fe-c604-4626-884c-b61089d0cb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ac8ec9-55a5-4f18-9c55-a64bed614546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bd8105-ad0c-4041-8537-80a258db3a0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.153.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621b49e6-13aa-4972-8ecf-57d3defc8f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d891aec1-87ea-4487-bb80-513af9dfc2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.173.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246d96d3-4402-4996-a031-3a3cfcce6acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.177.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f6c273-8812-4c47-9efe-3b64e7262cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e981f496-27ce-42ae-8c78-1636618fb69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7942d15e-6b35-497b-b309-ee7782aa53eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9a7046-a1a9-4ab9-8fc3-a5c5ec0fb7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.181.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ba9ae3-c16d-45e5-8b90-43e5385430b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.29.148.0']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f8e7e8-95c2-4a86-8dfd-1f688dde5156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.29.159.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20665a7-fb9f-41b2-a7c6-0f8afbe608e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.104.222.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b19ae60-cdd5-4717-b47b-fa8eadc4f616", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.156.28.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ec0278-4694-4df2-85b7-3048a7d72528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.184.162.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8781ac-f577-4834-8f98-c8672a1e9346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.224.118.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d9bead-bf97-4f12-84ed-f0aa2ffef496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.110.208.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4614033-9381-46f3-9d34-e9d54b332ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.112.22.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a301495-29b0-45e3-bdec-6817a3454016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.106.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c585855c-6be0-4825-9aaf-c287455f2098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.109.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afb9ccc-6331-48b4-83e1-6d1ef55d9f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.117.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9940494d-6abd-48f5-bf54-40e93d1cd3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.161.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134e8645-600b-4445-8002-54c5d6062018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.86.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1a197a-3bdf-4064-aa0a-21e02c58674e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.120.240.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0aca80-b743-42c1-802a-1d7102a0cee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.121.10.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7e0049-9188-40f9-ac0a-4c82b0a862fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.227.75.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129025d8-3efb-4a50-b945-d3fc813c329e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.255.24.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a074a6-ec9e-4769-b603-055d55e2e99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.41.51.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d1037f-24ef-4c49-b8f7-b1a696d05727", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.237.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef88eacd-c4f5-48e5-8b7d-7ebcbf092b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.137.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e682d2f-c8e5-4ba4-857b-6a97b38cba45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b38a4e8-c040-443f-9d59-dd0593f935c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64743bb6-48cc-49d6-9cd8-bbe4517e1e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200d9b2b-ada1-46d0-b549-6752a72fb9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e74549-444d-4dd8-9b93-fe34bf62b870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf726d5-5cc2-44ce-99e7-a9225329469b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807b62a2-adb8-48e8-82d1-c4cc8683c738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9995a547-44cd-41aa-946a-5d417949db88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac597b3-3c10-4611-b93c-4fd152384e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8d7747-54c4-4fa6-b842-fe0e1344fecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dc9993-ba43-4c4a-bd6b-e686ca6dafc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3d9284-1bc7-4127-9d2b-923082993b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ada2de4-ebe8-42ac-9101-af96573557ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.184.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fc7d34-3e8d-420b-8d81-1df6b2ac3618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.185.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fce2a0-13c2-4907-8c8a-859a920e35fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.188.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9777e4-a0cf-4f2e-9d25-4263d3561f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a85afd-4ebe-4231-9761-d160e8e7f1b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.189.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5281157-00bd-4755-89d5-8f7007c19641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537b8420-26d0-43b3-bcd5-7480aa87dd6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.148.49.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222dd149-6df4-4602-b705-340220be9584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f15237d-7264-4ebb-aba5-a7d57f2b84d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3e030a-0222-472c-a35f-2b358a7072c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1163d11f-dcda-48c1-8b4f-f5d7927de92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a9ee74-1471-4f2c-b0a1-4b3f58e09ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35a6fb5-d640-43e0-8813-7f4fbf2b0750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5336ea9e-85b0-4c9f-ba0c-76e1c451964d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b4c14b-d97c-48ce-a9d7-85af329e36ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa4c30c-edd1-4d94-9579-e538fe516db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3e14a4-454c-488c-9059-e6e9b03c677c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27017d7e-4ef8-425c-bd86-91bc6c3e662c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25012e86-9202-4f23-97a0-1d7265301200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcd4f3c-083e-4ffa-bcf3-7a08a7b05fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5606f4f6-f773-4cd3-9efb-1fe1cd0f438b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ab1632-48c7-45b3-8495-dab7437a279c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27dbec8-09f9-4c77-a730-aea2cb716cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeabef0c-6d61-44ba-b6aa-1735d00218d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b87c74c-c76c-448d-be13-719263c337bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3991370f-2fec-4698-8f3c-ccec5f700b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d435c9-1982-43f1-9071-401912185389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e2e4f7-3551-46df-9a61-6f86228d15e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478a7bb6-475c-408d-880e-1a81d8a15328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0cd751-87e4-45b9-9117-78a68cdbfb8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf302aa-17fe-49bc-9ad0-7aee672a9d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a86ca0a-2b10-409e-a3e0-c6b3236e7f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.106.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196ad346-f12f-4466-87a5-f36fd2f3f509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16dd2e4b-2144-40c3-a8a8-708b57aaa475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268437bd-2dca-4fa4-a803-69bdf89240bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1872610-c19b-4d81-a586-2b23c5eb3598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc98bbc-1cb9-494c-be31-9535c861199c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b634f2-83b6-4b70-9fdd-57fcbd73149e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de641ed4-482e-49c6-b521-0c704685bc81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a77f72-0068-493b-9b37-cc8349def56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bb90fe-35a2-4903-8730-6041b5644e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2dcccf-6d64-41b7-a0d0-90a2adbb2e93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da1a077-e15e-4482-a9f6-d1fd61d8874b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048aa377-ab18-4ca5-91e0-b3fc8f671e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.31.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59cbb1e-ef77-47ce-a042-625677aeec3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bd4c68-7cad-4f2d-a41e-fc8f51a48880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c062b30-b3c2-49f3-8620-4c117edcefb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9cc50a-62d6-4205-88c2-e46b34c641b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e0a6a8-63f9-4b2b-9bfe-b184402914b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a11c17-05cf-457d-8024-d811ceb2f013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd073b1-0fb4-4864-b01f-70b8a93ec315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5ef180-02e3-4da1-b9b5-a27fbfc95191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15708be5-9282-4fdb-9383-2a5649918617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190eb467-9fb2-4fae-80ca-15277b05066b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f53434-a144-4b61-b549-5d3b85dd8da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdcaed5-8fa8-4459-88af-d032936ea92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5183ac55-7e6c-4d0c-9837-913313eb8a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8cce9f8-4869-425b-8496-260881ba91c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2d282c-b330-43f6-82c0-cd464333c499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e06e58-c56d-41b8-9bf2-8f4a9d4feaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22922768-0152-4859-b2f7-a36b7759064d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d746770f-4432-49db-9383-4c8ef481da06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2571e3-1eb9-41cd-aba7-ec0cf439949e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8209917a-119a-4b53-9132-2c2b9610a25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2afc6e6-e00e-42ad-8024-71ce4092c682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.152.44.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954962d3-8fa8-4137-b286-52fbdad88afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.48.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96038f33-6d7d-41ee-addd-8ef97b11b509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6e9b02-2fd6-48de-90cd-835ec1c3cc3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.2.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcd64b1-7ec0-41e8-8cbb-f5d2945a4bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77b1ffc-1838-4fc2-af8e-01e3fa2518e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.100.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33e5227-c250-4025-b722-8038d460fcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.127.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008aee8a-22af-4c7d-a7e5-110ecb12b9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.252.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3b668a-c423-475e-8557-16e11eaa27e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.252.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6269c16-03cd-4c49-a70b-7c5daa6b8c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.80.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d30547-7498-4d1e-9480-5b4395ff976d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.87.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3292c8-f823-43b1-9fd5-299d919af491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.88.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb18a3f7-3512-4fe7-ad4d-20a8fb5fc657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.95.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a0bdbb-7fc3-41bd-9069-d2b63ebd4d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.85.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6230e33-d907-414b-a861-15924b42016a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.79.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6b8fc3-b523-4e43-9995-3fb17c3b5014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.90.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39551a19-52f3-4dd3-9caa-139c41d64698", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.156.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455a6723-fa55-4156-9405-d00f02ff2e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.233.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8feddf67-ef28-4d3a-b144-088c3f33b76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.32.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968d13c6-060a-4ecf-9adf-fb6ba6106102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.34.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccb3324-0200-4e5e-a33d-3406c6675772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.19.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6244d785-bd24-47c3-87f4-79b1a1c27079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.24.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37efb970-61ec-4ea8-9db3-cddef73914f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.27.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a395e9-e09e-4db6-a732-8bcac037edc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.163.157.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471594b4-ecfa-45a0-be5a-340c53c65fe4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7783a8c7-187e-4b0f-860c-38cc1530ad4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.7.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75b4323-1a61-4c2d-901d-c26c6c73bba7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.63.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98911b49-0ba9-48dc-9383-534c4ea9edf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.6.166.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4bf3609-4d09-44bd-9714-ecc6c1c279d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.61.229.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17218df3-e406-4049-ac60-48f4c32690c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d2ed22-6529-4df9-b782-4c8f7e6dbd31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be960f00-c4c2-4ede-a0db-b027a1454947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0868413-c8b6-401b-9df1-df6913c51613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd17045d-0690-4178-90a5-9568094a8788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcf3f47-408a-4485-9416-45fd900a95df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d58ca7b-2eed-499e-8b73-25b3c9912af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9555a6-d854-4b06-941e-0c90f2de73a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37ca6bd-f41b-44cc-9417-093f1c62078e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43245ae8-9efd-411a-8fb5-25b54362eb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37371fe-2e2d-4278-a70d-75f52776f5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e49190-cbbb-48f6-8324-b16af2f3d622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ea6df2-29be-4872-bb71-9f5e74bdb526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b233ca08-0ee3-4696-bbe8-988f590935e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4b37b9-bc0a-4715-925b-f03d9286be7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb595a5-42aa-40f7-be87-3cd36bd4ab17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615768eb-6a0d-4502-94fc-49da51a7bcfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7385c202-42b3-4e35-ad06-40e310119ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.110.170.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dee1d9-6f17-4660-b132-ce80df42cc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.237.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a205ea-368c-4893-a500-da7645604f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a62c22c-fa34-440b-8bd5-91c30a9fdfce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6f1667-cfa3-4f86-a1ca-cd4760130905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.201.152.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a143159-b7a4-4f4f-a7a8-0204e615aecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55bba14-2f37-409c-97ae-7435ad7756e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb93b739-718e-4567-a139-d66d6c192d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869973c9-359b-49e2-a5af-14bebc2b7914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.86.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff391592-92ba-4ad5-9f87-9122a6cc9c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80b580c-75c0-462a-b55b-d9df747928df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.239.132.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7defddd6-f4b1-46a7-9bf2-889d4e31abd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.244.159.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c52036-2bca-483b-b3e0-2418a6c0aba3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.50.185.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337032b2-cf32-4f95-b512-f40beb133d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.57.201.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffe1d3e-3aaf-4b73-8b38-5279c8f2ada1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.70.186.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec7945d-c387-4dc2-a397-fead558bf39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.70.186.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cc9480-e2a1-497a-94fd-e7dc686eb630", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bafd867-5a37-4fd1-88b5-176e7537eb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.14.190.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0704fbea-163f-4531-a105-d4f0793c7a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.39.228.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb489a0-ce10-465b-b86d-979343014e11", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.40.203.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d079546-4a22-430b-ad36-bb8374b1ed38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.49.3.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90ce91d-57e2-42f4-b5b1-c3cc9efe4f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.84.78.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5cb8b6-d755-4525-a7e3-f18412557a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.93.224.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c1835c-6f02-4d85-b878-5b87685dd06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aef0e29-8c3d-460e-9a85-04e5412de68a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.170.172.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1182e2b-af40-42bd-a27f-1203efe54715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.176.100.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276b6289-47af-42c0-b284-a07a213cc965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.176.75.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681ecb7a-5050-4024-ba98-940f30986e56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.148.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152c97d1-63bb-4586-8066-c6510058ed16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.149.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3409566-40a1-4383-beba-c891c49ee42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.57.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8a2c49-260d-4638-8df9-5aa2b4d2af49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.231.164.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0a6ee1-b2e1-4fe9-a384-f609d1d2c70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.3.27.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffa295d-2eb9-4a89-a97c-83a57a02c443", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.30.42.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714a7a24-fdb4-48bc-8e1a-917378d0552b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.59.63.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8d58c0-61dd-4173-81cf-70fba4aeb54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.61.20.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8a9769-9643-4597-9a2e-1b4dcb6d003f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.68.110.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1cbd94b-2bb8-4ce6-af64-2918a4559e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.92.88.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae90e52-1920-48ee-a143-7c60bf4f425d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.102.87.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5ca02e-2f1b-49dc-8fc7-f445e93d6927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.128.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378c901f-5f1c-4b5a-bceb-54b1499bcc48", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.129.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a34e4f-1ae9-4f7c-9c37-210f36ab3437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.130.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc37fad-2379-422a-9452-671a1b87b041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.135.207.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a90177-e995-46b7-99df-4aeebd3ce561", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.151.178.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39283b71-3ead-4a4e-b10e-50071b958a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.185.130.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbdbfda-de6b-458b-9922-68067cd15217", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.198.128.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c563b854-78e3-462c-9ae5-fd23c633a594", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.208.161.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950dc678-6997-4b5b-950a-d68bf65dc4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.215.65.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae53606-0552-423b-abb2-a747910461f8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.219.151.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aff1537-5f74-46db-9468-d06c5eed2d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.224.193.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e974b11-d8d0-4b9a-975e-42efa1b3a714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.235.40.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedc28fd-5094-4a6d-ba2d-1e1f6fef338b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.245.148.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502d1a98-8532-4369-ada4-25388430172a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.213.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67631e92-2c1b-4704-800e-79166d1022c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.214.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5976b64-a828-4a2d-831b-0b89892d7d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceef2203-f2b9-4cae-874c-f43b9bed6108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50305ff5-af5b-47d3-9961-3f2d22a7052d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bfa26f-aad4-42a9-8b65-fb8a4f35fa3e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad1af25-71cd-4141-9dbd-289e89de4c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c29ee3f-6759-476c-8e27-3397e6bf751e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8f25aa-fae8-4971-8e6c-b1ea45a27b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae46723-3203-45ab-a639-b6f641615c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b2802e-4600-4361-841a-d135628c537e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86af5a19-542d-467d-b5e5-8032c51f9dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925e8720-ceaa-4aa0-a1b7-2fe0fb7baf66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6581c1-bed0-47b0-a542-8772c5041521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.5.66.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3e95b3-2786-4f50-a8c5-ad0e7f8485f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.6.212.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c777a61-9762-4a2b-8681-d5467f3428f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.225.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90efdef3-71b5-42e3-b249-42e21e5dbab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260fb4ff-ae57-4038-beeb-ad9d483ad5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32e6ab4-cf70-4502-8875-2f22671b6331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.94.252.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052c0516-aa75-4d46-baf7-233359fd090c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.131.182.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106d3057-2dda-481c-845b-45e2d67f035b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.131.201.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0a629b-ce68-4298-90b3-dda6d69b9ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.160.198.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8defbaa-4fb3-4411-81c5-3a43d555690f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.43.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9cca60-fd1b-4c8a-9bf3-9f255d60b437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.20.13.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db5fdab-481f-4c5d-b0f2-efea780b74c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.18.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18203f7-8ddd-4aea-ae53-bb2f0c380c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.24.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b411f9f-4cb9-4d2f-bd29-2c02c0ee9dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.75.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23747d3-5bf0-4934-956c-ad6de439e23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.229.189.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412720f3-7aef-4ef4-b440-ba3a62ffe472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.57.187.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c960058f-1fc7-4c33-843d-190a62f8f28e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.59.150.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e2bfdd-1ea0-474c-ac15-ed8a1820ecd3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.10.47.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d41b42-5005-4451-9001-d158fa45c9a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aeaaf39-1856-4ec1-be9a-9cb6cc8250b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3317d60-0df5-435f-8b08-960a930335af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a8b915-b264-438e-a2df-7d52b3d95c88", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b1c8ad-fe19-47df-b2cc-c7f8a4183235", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfd5bd6-d2a2-46f4-9bf7-2d3db5dd99e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05b1679-59c0-4d57-840a-03d4fbe9cfa0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.138.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1896a0-5f4a-4c5c-9f67-eeaee1a0d93c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.138.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbee765f-3a9a-4246-a4dc-a394415a9f96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fd12b8-66ee-4ff8-bfcd-3ab4d67cbd5f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ba3bc9-913d-4484-bfca-78816d4be429", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf18137-6088-4ec5-a310-324ffb6add7e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d614ce3-3db4-46fa-8095-d6224bb4e441", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936fcb27-28c9-4074-bc0b-4e9d1184233d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f40bad-48b8-40f3-92c0-c029719e94dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93016490-0e5f-4d61-844a-710bd8566129", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da58a8f0-dbcb-41f8-8f70-a8c13c782c51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.145.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09874975-0a6e-41a7-982a-8cffb20cf59e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbb4360-c9a4-4393-8c19-2728cf3dc3fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.149.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9992dae7-2dee-4c9c-8319-78e199bde8a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fc1e6f-5f78-40bc-8137-1308c1558d08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa06574a-47ed-4c44-93c9-3599393ca779", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5659bc9-47d4-4366-84be-93157bcf4ca4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe460c1-e69b-4b59-aa72-01f361cc55c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e971e9-4c86-4a64-8d33-ae9d12ea549a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9133fc0-c9b9-4b29-9c86-12f2ed1bd6c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccce082b-dc0e-4b34-8731-daec1b764db1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c213dc2-131a-4136-bdab-7f7dd96097d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53241cd-7ead-4cfa-ba2e-0e9bfa7771b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e85ca1d-1325-44f9-8d93-28a13a71469c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0102940-7d31-43a4-92ff-ecd978d0d333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.132.197.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a239ca0-f47a-4d2a-b44c-ba5243ccd3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.132.238.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1f3e79-380c-4c63-8ea8-932fb47a0591", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.138.97.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1bc726-865a-4d8e-88e4-a0f52f5bc875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.215.190.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de72ce1-2c0a-4b5d-8f2d-cf4b58909820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.225.246.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdb868a-aaf5-4895-9bd0-436c6a496b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.226.244.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae021be4-855d-4030-a4e7-bbca3f3099f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.249.237.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977aae94-2089-4bf7-9539-a02ea16fa4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.208.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe6c780-1c0d-4164-b997-cb23ce17a451", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b2c03e-5f44-4dbe-b909-1b746b442666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.41.3.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bcbe8c-bc63-4de0-bae6-a48ea9b9b03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.66.29.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b8f1e1-a09c-4f31-8ca5-af63c78709dc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.67.252.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59c5cc3-288b-4ddc-a40b-fd93ef7b86dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.96.145.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ba9f21-2a82-434a-b9a2-6d5329d68f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.154.133.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3d0f26-1297-459e-869c-9e320703b5e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.173.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b78f3aa-0899-42ee-9385-cb25550cb6cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac57485-09d7-4f43-83e2-dd7d60e350ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.97.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1d9c31-99ee-427f-ac60-471be28dea6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.224.170.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16efb84-f82d-4536-999d-a2cbe47ebc93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.227.26.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda0c59b-ec5f-4e1c-93a7-1a18a21296c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.206.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc0ee86-8f8d-40f7-ab93-5df796f7f139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab59bc9-a8a9-4daa-85c0-4b1eb81e9c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.246.10.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68c72f0-83e6-4707-a464-3232f0b2645e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.28.200.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46bbd18-8eed-431c-8133-d11ae0267044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.42.60.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f39a21-3533-4355-8388-9b2996b7d42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.42.75.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52d8ba7-5af5-400e-bebe-dc6f7d5a37ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.51.246.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85902de6-b667-4bd0-83bf-f15be0d782b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.91.48.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8a0c5f-b55d-4263-a874-dd796bc8e727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.103.230.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee449b1-347f-425b-8b9d-67c0e6c35a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.11.170.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff743d3-5852-4321-aabb-2d792cbd589b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.118.49.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88879712-76e8-4e6f-82d5-e719e2738d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.131.154.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d4a38b-7313-40f4-9561-f2736d831664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.172.251.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25eee2ff-92da-4a2e-8402-28f1567a9b04", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.217.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f553c2-3834-4ef7-871d-e15794e977d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4413c48b-3e28-47a9-ad8c-61b7efb3df5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04b0f46-1d6f-4475-9a09-afcdaac6ccea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca569ca8-31ee-4c6b-804c-e218f536e168", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da717735-bd9d-4f0f-a0b5-92b35bb92b1f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644f44b9-0bce-4fa1-8ea3-ffe3a70467a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219256ee-4d59-43c1-85af-e77c34ce5bb9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9388f7-9444-4732-b8ca-a43d66a6ee4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0da5b35-df0f-4edc-a0b0-3ae9561414c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40dcfd1f-cfe7-48a4-a6b9-1112ab85baca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f78fea-5369-453b-8dcd-0c097bbacb0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee02178-03ab-4017-8668-7c8d169775f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51bd4b5-dc4d-4bbe-a262-eda28c0846d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca602229-4978-4da9-a8e7-87e05417f44e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1c552f-7169-4536-8166-ae2918d05511", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673bc002-76b7-4012-8ed2-440aef408a6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc7da2e-bc20-42ff-9427-a568ce76dfd6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1285ca4c-a8fd-4e3f-84b1-3e103a8fa09b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe0a957-779e-4ebf-90c2-4f01689ddfc5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463fb5d6-e8d4-47e7-84d6-a2325144d003", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8bcba7-aa2c-487d-92d9-abaa7597a5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.204.175.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d29e09-2815-4c1a-a60a-228bb4061826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.204.186.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37616bac-c5a5-4a95-abe7-948d35efcf04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.206.125.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae79e9c-45f9-41f4-90c6-f8e7208cb004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.208.5.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5225fd4-f531-4317-94ef-67f1753ce540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.212.152.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3e5c41-6cfe-48ef-a067-d5a904693d00", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.249.149.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb8abf6-3a12-476b-ad7e-b7ce703086dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.255.235.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb58f15-6ee0-462f-a174-8746b2711e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.52.37.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b710e66b-9ded-4ffe-8939-57c73ccf484d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350ef393-0563-4fb8-bafc-d7adc5fd5fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.97.112.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4391be36-53ce-41ea-a606-709de068ff2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.11.88.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ecc217-116a-41e8-9c90-48c62d5c878f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.15.95.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7602f5c-0b0a-4253-b474-cd6759dbe37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.164.191.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3d8c18-f8be-46f9-b11b-bf65c32eb4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.175.51.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12fde62-f165-4a0c-b8e4-24c4eaa5a7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.187.180.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0505a534-5e0a-4967-920e-3019d5613873", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.207.41.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798a2f06-6769-422e-a0a4-f6b07b84a954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.239.132.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65ee373-6b0a-4b06-98d8-e5357d30abad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.250.205.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b66e38-265c-45c6-a6e4-8d2c98fa42ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.252.245.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e66a810-3196-4d4c-a0e2-22389e4402c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.29.104.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1dc708e-9669-4b8a-97e3-a65a13d0db1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.40.226.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a852c7a-0a1a-45c0-a13d-f9c906751d82", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.175.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9effd74-e3a8-40f8-ae6a-d20b6f1a1a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.63.9.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294b59a1-e111-44a8-894c-e12959175532", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.170.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a252e68-8059-44bd-a360-05c81d919e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.234.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af85f2da-25dc-425e-b15b-815e76c91873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.139.167.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a12785a-2f91-4793-a77a-918408eabacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.101.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a777ed-64cd-4cd3-81cc-a324bc6ed2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.246.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20a0a84-a982-4a31-b472-81a72641b145", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.179.155.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a20c3d-141b-4daa-93a2-e80552fd2c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab92d363-0fb9-42b3-ac45-d6a371634c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca80066b-b4b9-43c9-8d16-743b31253b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4a1045-1947-4919-87a7-b6a7dd7f9b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa4a660-b91c-4401-8516-7ffd70deba7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.35.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984dd005-415b-4dcd-bed3-4ac752742bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb34368-8b17-45fc-b89d-6a3b7d10ad6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b0eb2e-3941-4a9e-8927-c8bccd5d2792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98083fe1-8353-444b-88b7-e872197f277f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.37.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f7465c-9b09-423f-bfdb-451c13fee15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f849c0f7-4b86-4e4b-8014-cfc306b53756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1573491f-2c29-4c43-811c-8df0020fd7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd92ccb-c708-4248-81ce-c5fc65fda107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40789854-9113-44b5-aeb8-61f470da55d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b1705b-afbd-4e9a-801b-1c86ab526968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30de8f36-cf46-401e-ad6a-7323ca722ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8806a55-eff2-488a-be43-8b44fac11f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f42f27-b762-49cb-9c0f-9931072b4f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11657d5-c0e0-4726-b797-d83222c6cd5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5d43f1-40a7-4c80-83c3-fa4c461c78d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5359f355-afc0-4e78-996b-b4df28cfcbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed971ef-4bbe-4afb-811b-f0bda3d45eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481a8ee5-f13f-4751-bdef-f9ab9a23460e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1844b4e6-7ccc-443a-9e02-bc3858a5cb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c6a0f2-85c8-4382-bbdb-d82ea81cfd1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42062ebe-853e-40c1-bf39-3e31a4d7d531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb8d6ec-2abb-4e25-ab4f-ffcc5ed9ac6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9a1757-c1ec-4e09-930c-e450714855cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e81594-601f-4bee-a0ff-532ec5b7f660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1f358b-fb25-4d9c-aeed-9b3ac395e578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec33b40-8c57-4b96-a005-b07da567e1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc4b440-96e5-4482-8f0f-1a515e01f37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160bb4ce-7d29-4e60-b2a7-06dee90b8831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c8b9b0-872f-4001-96ad-70451742a984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec06ea64-2623-42e2-8cc6-281ff86081ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa770ec-6622-409f-b6ca-79af15759b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba37eef1-7809-4551-abad-391391f8b76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c561064-5f56-40f1-b55b-1ce4dd48f464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e5877a-0f82-4bb1-aee1-859b968d281e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e66466-0a67-454c-bc73-533a5495a878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac7cfb9-42fe-46aa-b5eb-f118907ebec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5a4dcb-e143-4578-9425-38c30395d677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33618fd-2b34-40ac-9143-132fce6776ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d59150-efa2-49db-b13a-0628907c49f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.68.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11621317-2951-47b1-88fd-91e7ae9269a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c8e0a7-de34-47ae-8852-d6b15779630b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.72.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594c3f6e-ab4c-4299-86a8-b8f6a0506242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6de93c8-d706-4ea6-b1d5-c52615974d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035099de-5370-40b1-98a6-a5f6c6347654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6687fdf4-2884-448c-875d-af8c6cc0cc88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de61547-1030-4c5f-baae-da0d8a17597b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75003949-b8f9-4998-957e-41e194b502a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a66f78-133d-4a09-961d-ed23a9792b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58878d7e-8f9c-4205-ada4-30fb30dcf875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941f49b4-f56c-44d7-b5cc-138374bccffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f620edb-0c55-4e67-a270-72135db82ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356373be-7ab6-4a93-bbe1-43c97ff50152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9854a8-07cb-4486-abd5-e976761054da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa60fd2-291b-49fc-bd54-3a8d75aab4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367e7014-014b-435b-b04d-712053637245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4091ec3f-bddb-49b9-ae88-23857b8d0f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3afe9f3-f38f-4c40-927a-891a4574fd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da826f9e-671f-40ed-a5b9-60022a51651d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c18a842-ff4f-4502-aaa7-21e98761449f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad29118-98b2-401e-817b-328cf696596b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220dffc5-e9a0-495a-8787-77dece814957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8538fe09-b524-4e6a-94d3-c00b174adf86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15428c5-3993-42ce-aef4-3aee888bc076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8577e71-7f1d-4e66-80db-23e44c5af807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3601828-0e0f-4a38-8c88-2e2038366810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81bf9e7-28f1-4eec-b484-86a9f042f01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8155bbb5-4de5-42ea-a139-700e96b78b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bd071a-9281-4528-82dc-976b940af4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f46f7c9-67ba-4e3e-a6ca-73759e6139ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c568f4f-9622-4d19-a59a-b8a811df5529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade6e84d-2c10-4619-a314-3ad78aa04d73", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.195.217.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f50092-ad38-47f3-bdbf-748e7cbd54ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.141.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4059d4d1-2115-4088-968e-492ad860c7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.30.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64ea689-44aa-4e46-82a8-2bb532dfc739", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.48.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1dc417-c196-478d-8a6e-0c9a0bc17dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.120.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da370e9f-1b0b-403c-8458-226152ad3e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.120.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d437ad-8179-41b3-a0f2-0b0071ca4686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.123.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c8697f-3ac6-4fef-a451-b33f83b8026c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.243.92.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabb68bf-4593-4202-a651-1bc76bc7ad67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.250.2.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5daf96-9157-499c-9d60-9a31cadf2ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7dcd2b-4267-4ac4-b8dd-d6d835f2ec2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f02614-5443-4223-935c-cd0458d115e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e789bed4-409f-4a54-9240-2b26b42c0307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3aa047-be0e-4bf5-8099-3d82fb631457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0ba7b9-c703-4843-a379-53a02d3d0023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b21d50-0f08-4f82-a1f4-5082b3e06c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50fb171-4fea-44c0-b2d2-9b660d9e7dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cb9c82-8ee0-4d40-8191-62808a849f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.110.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c32003-dbe3-4ddc-9cc8-e80d9bff4ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99c20dd-81ec-4c43-8a44-5f6da1540d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92388480-0a26-4798-ba05-0d448316c965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754d9a09-aa08-4425-bc0d-53ba268fe13f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.33.113.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98373cab-c3c8-4e21-9380-33bb9fc29618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20abf84-6b01-4b78-bfe2-bb91afa5dc5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.200.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5b0690-4ff6-4731-86be-c48fc8814e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.81.201.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6632c1f-68fe-4dba-81b9-b9fdbc81ef20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.13.82.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da394237-7326-4692-b80b-3e6cced90a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.152.229.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653ecdc5-bf7f-44c6-8f52-94912959f207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.203.100.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5253b92e-fa9b-4345-ba8d-ba1d1152e24c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afc8a50-8cdb-499e-8a8a-5da66d4a3412", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03720346-c77c-4b38-8280-590d537b76d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efab4198-c8d3-4716-8b81-6b04ce527008", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d758fac-2e04-4f85-aac9-3f0ca6196945", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.100.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62437340-f991-407a-a596-34700cf54a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.47.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6d9076-10fa-4839-81cc-253d3e22528f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.5.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2479e5db-e795-4cd8-bc86-960fcbcb9c1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.89.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a16350-bf3a-4b8e-984b-5b6e149442ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.243.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5360552-bf9b-4cd9-8e81-ce7065859327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.29.37.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6dde44-9ab0-417b-be3c-b9e08a12cfb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.36.199.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be66ff5-5522-4008-b31b-1e4fa3e65d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.47.179.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ec7607-576e-4799-9844-df4253586e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.23.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af32c57-38af-4fb8-b66a-b44595a00aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.68.228.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d71b234-77d8-487f-8b68-1bf6be3e3295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.79.116.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915493d1-33f9-4114-9549-ad4e3c38617e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.138.10.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0b8702-b57d-4425-aee9-dbc31c550f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.156.149.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bb18c6-d4c4-4528-8ce3-f46ef08182eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.211.32.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9445dae-0469-40a1-a7fd-666a691ffe83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.220.172.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4e66e6-2542-47af-a437-d411c7c76b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.229.159.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e41503f-fcf1-4c7d-920c-1cea9e5f5475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.230.6.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b6a6d1-977d-4393-88c6-0b2c71734bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.232.177.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80866ee-9b4e-4310-93fb-a8f0e22253ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.236.49.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ea6088-6579-44a3-a6e5-09ad69aeb887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.240.155.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f887fc-94a6-4ee8-b9ab-361929869235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.240.95.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d70c0e-940c-412f-a404-2d9846eba61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.210.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5840b016-1cf1-4a23-8bbe-fabd51253f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.46.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bcb9f1-c31f-4c1b-852b-c6c7a1f57055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.144.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95990b4-1850-4233-a237-a22438854dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.28.88.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5f94c4-5757-46b9-8db7-8f0ec60205ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.1.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56148601-1eb0-41d6-b1f7-e10adea0e947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.110.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673c4a76-18e4-47ec-8c6b-407e51485e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.135.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fac5c0c-3b43-4807-9449-39c7ef6adb4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.144.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712bae5b-fa09-41ac-b524-64f9f6454229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.175.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5020819-786b-4af0-abae-71f3972dbcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.26.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e393b980-b7c9-4e3a-ae66-b5c66195e30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.28.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb3eb42-8905-4817-a843-3b93086359fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.32.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f1aa0f-8bef-49c9-a23f-ddc2cbc2bd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.33.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7941ef90-f311-4d01-b260-3e666e78fbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.4.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b655e13b-cae1-4b14-8c0a-b8268e4b2a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.75.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab34061-256d-4b71-af98-a27d776a7cee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.82.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0d7771-e6c5-45e2-abc5-0e10b556b1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.97.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d13c01-6b73-427b-b9dd-6029d6309171", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.99.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebf2849-b896-413d-8412-41bdea734ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.50.18.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976bcd95-93a3-4cd7-b05f-27c26949319a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.76.116.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cb454b-1b54-4f0e-8593-798a3b1d5a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.76.158.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5ac317-93d9-45a7-a849-8dc43e9daba4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.77.251.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41877250-d4b0-4438-ba76-8ecb8a00e106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.78.78.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857795b2-70da-4b27-ad5b-0f88c98bd922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.99.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a890dfe-f561-4e27-95e5-272a007d71ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.122.243.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa320c0-1e13-4762-bf02-76f26e12978e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.127.33.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9362f72-bc1a-458d-b786-35a37c14ac74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.127.33.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ed4bc2-5745-44c8-84a3-e3c84dc38759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.127.33.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5e86c3-2c6a-4adf-9afa-77a28f2eb6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.127.33.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8289e8-6fb8-4586-afe0-b09f5d1cd810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.127.33.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6cefd8-53b1-4ee0-8778-25f0a6c22d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.127.33.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a9ccdd-aea4-4028-be7b-55bc9d434178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.127.33.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370d73b3-5893-4315-94a7-88222909befb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.127.33.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36300ae-c750-4941-a26f-a8ead4b11151", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.134.151.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d496ced1-280b-4f73-9a40-83a1ff0319a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.152.152.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495777e7-4cfc-4165-b67d-a5a418f76a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.165.84.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da583a85-7546-49a7-95ec-3b0aec02ef08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.17.107.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24fa16c0-a017-4742-acc5-d20b2ade6771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.178.101.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2326cf34-c437-4a36-b990-84d836a27931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.178.185.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364734b4-fafb-4a77-ba5e-3c9f05ae61a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.185.89.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c56d08-8b58-44b3-9ee8-6fcd81fb0d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.186.9.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4532de85-7569-4230-abe7-5c8950f754c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.197.0.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afb13cd-df9e-4717-8dcb-8154d009e5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.204.171.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1658d0b-f511-4327-b984-ad3cd372d0b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.229.156.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebae3783-ebca-48ba-a1bc-4a19413535f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b32fc5-423b-4af8-ac3e-7b2e232de296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.149.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9503f5fc-5e7e-4032-855f-36440c843cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df1e1c4-5f88-4c7f-9b09-232ab8196d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.36.108.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cb9bfb-513b-4fd7-adf6-a38a6598a0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.178.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7945ae3-25f9-4356-926d-eb5b20f8bf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.195.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4042e3d-6e05-44c5-a1a9-8c4a61fbd5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.239.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b024573-927a-44e8-8f9a-05185cc67988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.50.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d6faf8-02fb-441d-92b3-f5998f1f6fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.115.224.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18803301-dd8b-4b1b-87c4-7813c04e4929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.121.166.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5034d3b8-67b3-46fc-b34c-ce8748b8c66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.165.245.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98abcb19-520a-4a85-8c3f-ec62ced9c282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.169.114.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68028bf-af26-4bf8-8f22-5d60ed3d018d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.108.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77668f34-866b-47ba-a584-e8d5b3645e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.227.174.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36397fd7-b169-4c0d-8e8d-8ce7602ff340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.243.73.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cb7562-9c18-4fe8-93c5-5765f09318b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.246.28.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f38ab1-8cb4-4afb-bef5-b12234230b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.52.121.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20268ef6-4a14-4d69-981c-7a9f15664a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cffcfc8-8387-4b0f-bcd9-c3e1a61327a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441b1208-1e6a-4be4-8c6e-590cc2651e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49971d2-f374-42c4-ba74-a5c14136e88d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.137.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4eeb9f-5b18-4f92-9636-a4ae867f6f51", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.212.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4d1607-798d-4e6c-9fd8-e335932114ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.214.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475a3686-c0a0-4eff-83ee-414373067c32", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.12.227.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df288591-7e64-41f6-9033-972ebec908fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.139.244.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049f2015-d054-47e9-8174-9894ce60d206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.14.127.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bfc8e3-10b5-4601-8387-770f37f2e221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.146.42.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a418c46-ebb9-49d3-bfb4-98e165e76f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.146.82.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51de6c50-ce5d-4215-b68d-7b398ca46a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.147.68.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdab69f-97b1-4c0b-85ad-ec4cd0137cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.157.192.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ee141e-1127-4c55-8963-008670829c92", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.157.223.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcc95c9-e10a-4cab-93ca-53cc12216dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.16.178.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c944938a-c8f0-4d30-bc97-cfc870745c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.189.141.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b74dabf-5419-4de2-94f0-6b5347a160c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.20.159.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a5991c-831c-4325-8196-de89d89650a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.209.77.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f076b500-6765-4115-baf6-da8c9318b57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.234.3.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b82565e-5ddf-4f34-b5e7-8fc31d229ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.244.150.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7540c6-271d-4d0e-916b-b98c808d3529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d64eb19-7f0d-4028-8cd4-84206157b764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa32a23-4e6d-44fe-95ad-8a29089bf180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf034b17-3767-495d-a7ce-9c0399de267a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.25.225.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a950167-f06b-4fcb-b0f4-8acbabed391b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8653a676-89e0-4be6-88c3-452b362ea561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.4.237.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325af8b4-fda7-4519-b708-998ce660f145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.53.220.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbafb43-b044-4f9d-b610-b6488e97c3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.56.157.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec8f130-8ed7-4398-a650-3766d69c0a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.57.148.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fee353-79c5-45b5-a9ed-96cf3e1bf739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.196.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c85c56-21d8-4d34-8ea9-5f8c28cf9ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff24f37b-435f-40d6-8bd7-187c85f89d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa57fdfd-cc9a-4853-9539-005f2e03e7ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77583b66-bbfc-4068-bcf3-04dc1a7a0b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d4306d-90ff-4c3f-9663-110a2746dac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d99fc8e-7dec-42bb-b63e-d71fd3649357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086eb853-1ce7-406e-b15a-975e525e46b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed717d3-f569-4aaf-8a29-f8db5be330e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.210.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea1ab88-3571-46c1-b677-0ba54fbda487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5240ed58-81c7-4641-b3a9-e258399ef83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a011e3f2-5c2e-4da4-8910-77983ab651c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfca9fa-6895-4134-84e2-4c98682d574b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b265241a-c05b-4969-bd79-48bb070bc073", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332d3f1b-c540-498c-8e06-4edca4f75ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.9.223.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdbe70c-19e8-4f5c-aa96-a43040f6f3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.90.186.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b23cc5-9a39-4350-9618-ea52a3816423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.195.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b402ecd-6c3c-4aa2-8954-7f8044bd69d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.122.139.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900c322b-569f-487c-9026-dfbfc9ff1b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.128.247.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6637de7-76ec-4350-9467-448cfe518497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.206.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af30105-8101-4281-a4e4-4e7025b08f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.226.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d8348c-560c-4801-9b3f-9b352f6151c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.162.163.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e815ca-a232-46f9-b67d-c7ea7085386e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.167.22.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e63a13-9bf7-4aa1-8389-096fe59ac4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396b94d2-c4d7-4989-9778-eb878d3ab3a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.220.42.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3edb39-bdda-4e10-9ff3-fa2761d647af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.221.240.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4571c991-15e1-4be6-ada4-86ebb243425b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.222.230.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14077c9c-b2e3-4f28-b7fd-a67c5b898db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.207.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af00ae08-e86d-4310-bb4c-24a148e68b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.229.240.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd0389e-3ce0-4884-b985-9d8e1c15ab41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.238.34.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346d1ef5-0918-4050-af1c-0ca9cd37f036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.205.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7983d567-3944-401b-87b0-edaaab284204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.29.194.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbfa2b2-b903-4898-9ba9-2f52721253fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.29.214.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050e7d65-e28f-4761-85ad-c3565a34fcd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.105.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78ea1f5-302d-4f49-a46b-3b493d10e620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.19.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad73a07-654d-4c9e-a0ed-ba7b07ee23c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.71.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e0078c-52db-4c11-8f03-2726e18da98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.72.224.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8a1ef5-12d5-49c1-8ead-999eaf10f660", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.142.37.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bb9be0-f358-4c11-94f2-c4a9e9026c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.143.43.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c10936-8eeb-4be3-8c39-6b62680bb729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.189.98.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19558dea-4c30-404c-867d-045333da58ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.21.59.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909e151d-f5ef-456f-9cd7-d8b9f091d607", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.78.242.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e662294-f995-49d8-b140-79c5ab764dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f528297-7849-43cc-aeaf-c287e9e5d5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a8be80-0ab5-4ea7-b1e4-c350d0a12f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0704ef47-74b1-46ad-9214-7ecde66ed62e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8a5d97-0b09-4fa4-90cc-74348d3a6a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.46.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27554ffd-10af-4cf1-aec0-75774702f626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82395b1d-a17f-408a-ba8d-28b5316ec0c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd20a61-265b-4ac8-8791-133b671a53de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9a0ad9-27d5-4da9-9ae2-37e21028248b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22b6510-7c58-45d5-8ee0-8b66adf7f296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d683fd-7082-410b-881b-78f6de117129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c33e7be-f83e-4834-88d2-fb86e7a86d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e128418b-3e96-4c36-9f99-988ae48e8765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e5c960-9cfd-4339-8cb8-c5b99be1a004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a23263-b67f-443e-b6d3-2de15d715a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4816212d-cfa9-4960-80fd-95d0f2fa00c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f34eba-425a-4d4e-b6db-b9edb7df0a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.225.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e90d59-1eeb-474a-b383-121614fe8bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.255.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ceb0b1f-1019-4cca-864f-f00f1b9977b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefeb1b7-3817-4805-b3d6-38ad4e09cd81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a825a87a-3fa6-436a-b4d0-f86b8e76f552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4504b2d6-b24c-4f34-81b4-8d3280f8e886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.202.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363fe299-ba83-4a6d-81e5-72dc2ded433c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.202.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29059291-46dd-4595-94da-6b492106471f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.203.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4751ba9-937c-498e-810e-e70a38f0d65e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53d98e5-9b05-4c85-9901-52cd189a1353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e114f24-7b8c-45d4-8fd5-cb227454005a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dc0d12-a950-40ce-9877-9d5bff3a0373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.24.162.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0912b3-39fd-4b23-a0f8-6a5901772d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9d3a55-dc23-42d3-b846-c605f25b6cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.75.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a6bbba-d49f-426d-93e5-33a4b57ec1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.85.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33dcd24f-6a89-4008-857f-12169a1f9b26", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.109.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f370abda-0efb-4592-a3b8-ffea670e06f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.122.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b574f264-1cc3-4fe1-a9e9-936b68e46eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.20.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35877586-9ad4-4294-bd31-04da3c17c93b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.247.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49079228-ff9a-482e-945c-482f290daef9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.26.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a30825-496d-4915-bdf7-1ecfbaa5d3b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.47.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1d2619-bfb2-4203-9913-70aca7714dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.77.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651a3735-d67d-4c40-826d-5c457f8fe16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.146.97.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d3619c-1294-4e92-8122-edec34228442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.150.32.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f0476c-650b-4649-a127-6c4ab1e28c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.150.50.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b82a71-bd78-44bf-932b-f308dc92f8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.150.55.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bbc1fe-fa22-407b-b4c2-1e3d03406584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.151.121.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7877dd-9ecc-4094-97f8-557eaeda5380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.153.211.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c95a6f-f606-410e-94ee-68fed422b212", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.153.81.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6619c1ee-aca3-481e-92c9-6a6895a952cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.153.82.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbb93ac-8efd-49e3-acfe-849e1cca3c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.159.128.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d597aefa-ed77-4c03-8028-2d05285f9455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.212.239.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195ddf6a-b495-4305-9157-95d4fd2efc79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.213.158.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82406d8-4635-481e-bb9a-4ba52450e91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.213.83.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00542f86-e1e6-4c79-9bc6-42f83876a947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.209.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b60cbf6-c629-4ca9-95ed-e3b2941fcbbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.232.165.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8653907-cd0e-48e5-a38e-45352cd4faca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.125.7.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ca0c0b-bb19-4353-aee5-ce2e94e41d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.135.72.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510f60d7-88cf-4335-9f1c-8129b1bd8a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.140.175.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fc21dc-2b68-4b40-94dc-43a0f1298db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.217.95.0']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893c1f83-4596-4655-b7e7-6d0b9c8d5cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.1.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dfb5ad8-a7a1-4883-8e2a-f5b7528b66cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.223.3.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b918ada-4966-4845-a2ad-2f3ed8247a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.239.0.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e22962c-14c9-4956-978b-8126f0fd85e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.71.107.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13afc54c-af40-434d-82fe-835dbf16888a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.71.109.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7261b491-425e-4371-a1b2-40aff73c23e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.71.30.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8135f3-0f08-41d3-bfa9-b091ec454c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.71.36.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e54e3b2-2df5-477e-bcdd-41cd11c792ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.72.110.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c4a426-ae7c-4c9c-9a33-fd718f888338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.106.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6537fcf4-00f3-4871-8c58-affe937ea8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.112.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f57e28-6143-499b-9e90-131ff4903137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146bc0eb-1356-481a-9c2c-56f81b079302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9e6424-8e4a-453c-849b-485efd181f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe904ca-a305-4eaa-b7b5-402b5a4607b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac4bff3-99a6-49bf-8a89-2175fb39d90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448e0d72-69ef-4d46-b28c-52a42cdf98ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05691de9-82cd-44b9-a09d-78819d359dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863700dc-f3e8-406c-b8e0-cbed1a64f7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c084173-bcb5-4e8c-be21-49dd7e8c5f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d8a4a0-9904-495b-b8e9-b43d9481940b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f831de-5061-4354-85e1-c4579ce0f177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5248258b-7e47-4de6-aa28-974e6d859989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3a61b9-dfbf-4c81-9f16-8ade8b64ae37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8927697-ed50-42de-91d1-8d3b4ce734c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67b8cde-1746-4930-991d-641855af23ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fa50ba-28c6-4c08-8a64-f11f56b51d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e2bf5c-697c-477b-bf33-f000a0b0c962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462f77d9-bb28-49d0-9748-d788756e6c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2f1d05-045a-4b35-852b-748b3eb425cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e080ea5-34b4-4948-a163-fd4c300de396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a938b484-b91f-401d-bc83-aeb941037fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80e17eb-4f17-46c5-bafd-226f847ea51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2154cf3-8abf-45c1-b25e-eab89017f474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9bb9b4-f2c8-4d4f-9d8b-d82893b5237b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12915c4-5381-4a34-999f-a322ee979c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5605d2cd-5c77-4d54-8bcd-077e61e339ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2da99d2-d6fd-4267-bdd5-25812c4d9464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16168509-c937-49c0-9031-c9d5f5f22651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.163.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd93f43-f18d-4703-a6d2-906fdbdd9331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.211.100.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19690bb6-c069-4ed9-a781-083bfa14bb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.49.181.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d70506d-bc24-4a0e-ac00-cc2309050be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.110.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b27e908-b84b-4390-ad02-942a23ea04ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.113.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0182575-c10a-421a-8053-a287071b5123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.172.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92565ac5-4a3d-4bfb-8dae-821b543df6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.201.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453b9ecf-5145-40cf-8ba2-090081e0d4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.56.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b493176-e16f-43a5-bb26-48550920edb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.94.105.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95a74f5-beb8-448d-ba50-3d67220fb172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.94.112.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9707243a-8c53-4ddc-8183-af62fab865d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.143.214.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd1a6f4-edcb-4167-a58f-0aad0ff6de03", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.186.18.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5546645-79a8-413a-925d-7852eb3d2e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.72.173.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f863ae13-27d2-428b-8f68-b69d2cb55ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.145.81.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300c4321-1dcc-4eb4-8670-0c24ec69cc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.196.42.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7673ec85-1e1d-49a6-bd8f-0cde141c873d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.226.115.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3563749b-3541-4e8a-9b31-f90477442f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.226.212.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6396d4e0-10ee-483b-bcce-a33f842d4b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.18.167.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6b4c82-24fd-46ca-ad5b-c194ddaea01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.88.121.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643247af-db9c-4c4d-b728-75500c4c0a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.106.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617067d4-8c32-43ee-b950-22bc8a8bb23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337fa134-0c5d-44ce-8ab0-5174ca31309c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.130.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da72da58-29e2-4ed2-bee1-8257fa06f8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.30.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113f58c4-3be8-4ddd-9b45-162f87ae81e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.6.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af78a487-c7b1-4880-8f19-ff30cb722aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.78.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee2333e-6dbc-4e8e-9711-f5503e15cf49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.175.243.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea64ce8-6c35-48e2-8ae4-98c9d72b069f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.185.81.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0480f27a-98d1-43e6-b728-869cbc909a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.195.101.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df0eeef-e5b3-4f95-b50a-a0006d243794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.195.101.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbae1544-1bdc-4fbb-a52b-08d2b39a3289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.195.91.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7145bf-55fe-4e97-bdc5-c62cf1a8fe71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.148.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66a480f-8be1-4819-a052-4b27c5b78cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.167.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15654b2-00bb-4312-bdb1-02792e5d9040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.222.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb127fd4-651e-41c8-902f-1ac7906761a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.231.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4b93dc-8dac-4148-b58c-357dc30f32b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.161.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8329b384-0dd5-4d30-8395-c54c4ac5e943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.195.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738dd9eb-a685-4a30-91fa-25a98a5d7d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.249.11.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb54b0d7-cc02-4de8-a00d-ea5ffec79500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.66.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9772f251-1c0b-4ce1-bd86-5a351274a114", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.98.140.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54779d0-dc75-4d7b-b5f2-7ae2445b21a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38deb4c-6e84-462b-99c0-e6bdb75afb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa57c899-40e2-4b00-918a-4c9c57508fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cab0d6-93bc-4249-8b55-5caff05f6749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1852ecec-32ce-40c3-8850-369dd6c763d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602e13ee-727b-4486-8aea-8d78dbbcac7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.132.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5352f83-5d4a-4ff6-a56d-4724bbebe916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c34133-7bd5-45b5-8176-08cb0433e9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4decc9-dbbc-47f6-9445-52c3728f865b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.89.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d69e6f-3739-4d52-ac1a-4ea05221024a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40015d60-c340-43fd-b18c-0fa8b62f92f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.13.10.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b434395c-06f0-4416-aa9e-80f80d7921f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.13.21.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf91255-abbb-4709-b5cb-0ef71ec8fbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.13.28.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e209e0-f647-48ae-af2b-5aa5e656cd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.13.36.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120fc3ee-58af-4bee-ba7e-ddfe6a162336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.23.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5528b083-08e9-441b-a99e-88eeb3441ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.23.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5786fb-2ad2-4cfd-bb34-8e9a3ac176a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.232.177.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a69a81c-7a1d-469d-bf33-b4b3610e737c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.232.201.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41a3791-985e-4c8d-972a-1eb94f3a8535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81eeb6d-d047-4921-bc19-094391b9f204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bec7f7-ad54-47cc-9a7f-78eaa68c0632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f23b4d-96e1-4100-961e-4890445cdce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.96.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b99924-4a98-4e07-8ff4-0b038a0c472f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495c0ef3-0fc5-4d03-a780-37223c6c783c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5121a053-4392-4aa5-9b77-6b1e603a424d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d3da7e-9070-440c-90d5-14abd6129f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac6b758-7e76-47a7-818a-e98c3311855a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144532fa-782b-4565-83d3-e88d3b49d687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935413fa-f3aa-4aae-9ead-6788b78f90ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7560d7c5-5412-4011-9693-ca76e9e2eaad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11996c0-a820-4473-a675-d6339f264d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db50306e-fd98-419a-a494-fc6677bbf857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05431e0-d585-4e7b-8686-9fa542de7736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90f182b-dca1-4f2a-9ab8-ac93ee017192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccdfddd-fd7e-40bb-bef3-83560434479c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7afebf-5805-46df-be8f-4dd62c703d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd841fa7-4b15-49e2-82fe-3ebb2d43cfb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72c22b4-2ff4-4524-9913-17fb4c910399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0985987-ae28-43db-a66c-b04451f82e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d43113b-8f03-412e-aa6b-8514c229efb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c54d5c-f7aa-4e9b-b8df-7081fda3cb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f06bca0-e3a5-42ab-8046-7e9f8c1cc68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149c1210-9975-4e04-ad02-41835ef8798b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b86945-82d4-4852-980c-8b20f7248b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e30fb2-522a-4daa-9526-62e0afa08d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8594c0-8e78-484b-84d9-829d655c0d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3add21-f024-493b-8f4a-4f0eaf4a8648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3825afa-dc57-4244-a7ef-8da2f207ce02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37663c9d-b17e-41a7-851f-135523ef7040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cc3430-8597-4cb5-9086-64d3c8f1086a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6fb087-8f52-4b2e-8a36-89acbe4d0967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1789d706-0ed9-456b-b21f-60ff484897bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9e954b-e5e2-4838-8d8a-290d7908fea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c5c6e4-2e1a-49c0-aa10-ee59f274ad7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996e4075-0be9-4b74-9b16-95a35c99160f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e4d528-252f-47f3-9a15-d240ae9e1a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ca27b9-c415-428e-aa8d-2252fe001d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8ce7e0-322f-40bd-828d-e1f8005d9f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108f6893-2278-46a9-9eb2-85e7d48db310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c67e2ab-2c5d-44ff-b949-0ad565467fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399a23d6-b795-459b-81fa-9321bf5ea56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a195855f-a082-4ccc-b679-935a720bca4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.107.213.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305dab5b-3348-4094-accf-878fd87d0733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.110.13.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96af72cd-4d3a-4e4b-bdce-b549bc47359f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.110.37.0']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd56764-dbef-4b42-ae03-0e8f1e4746c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.116.213.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59161018-5303-47c0-b6f7-654772bf1e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.176.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64d3b28-128b-49c0-b9ba-272922fac661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.143.177.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641da955-f4c1-4551-ad26-20abfd6b37de", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.131.29.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36209676-7e9a-42e1-874d-0e9fd02dcaa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.121.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb7ac0a-3995-4a71-a54d-c07231be73d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.127.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2342b863-62f2-4454-8a4b-b2949d84bb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.226.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7abc92-a89e-43b6-bf6d-45c79cac40e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a3239b-97de-47e4-b288-0efda2696a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4e9f50-3059-4687-b108-8346ab9badeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.61.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180bf614-fe6f-41a6-b125-fca102ed334b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.76.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5df3397-1570-46f1-9151-48a81b0f9daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d91635a-97ab-4325-a089-bdd0869051f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.113.23.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1ee142-7b2c-4b06-aae3-8535e8f7a6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.124.242.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b06bbe7-58a8-489c-b9fc-6a5c0999f5fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.122.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c393888f-4ac2-44ca-9554-aaf008384f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008d559e-2423-4a25-8806-079a9efe5ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f6e147-10b3-4a17-a28f-1cb4b7258c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.165.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d37b023-31b1-48ee-98cd-166dd1e299ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.173.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9741d1df-c0d7-475b-9d00-5e64c0d3324d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.24.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a86bd5-a959-40b1-9b0b-54fecbfe1aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.109.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693cb6d8-fb8c-47af-a39d-7f5adb7afe9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.11.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93eb1378-8790-4b2d-a4e2-8d809070449e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.113.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f994455c-fd0d-429d-96ea-53f520f9f83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.117.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7f8eb6-bc38-46ba-a0eb-d36cc0eee038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.119.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88e01ff-b832-4c58-8809-dd09c0c0d4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.232.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b3f829-87a2-4845-9e6a-4e31c33170ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.25.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783563af-688c-4857-bc9c-d16531aef229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.74.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9db47a9-d02e-4105-9f84-08b6a3acdce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.77.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6a1345-f00d-4a27-85da-8d8937d3374c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.78.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2968f8-2fe7-421a-ab4d-046de5111432", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.89.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798ac7fc-9f76-49ef-815a-8e4967f5e49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b582d0b-73cd-418d-a720-1e44bf4839f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14613106-afc6-4962-b724-c82bc16331ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93d1fa8-1e86-447c-b49c-be7319bc0520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf8b344-b62f-44ae-8d20-76b3b8347237", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.255.30.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00f8e73-c78b-4e20-8e95-528dcdd115c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.153.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8071a2d1-cb70-4d3d-b5a9-814cee8f6679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.175.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7541d9f-e143-4b91-91b1-3920b59f2fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0302eed7-b935-4aff-b533-7749e7b8a3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.84.67.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a275df-67e4-4486-b1c3-8a54302f7294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.107.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0896c886-c4c3-4216-81b8-bee6253950ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.0.23.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dfc5f6-99d4-4863-a2c5-b1c025392e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.40.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ceea160-806f-48f8-8f0a-f8bc89de4faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009a5150-02f9-4218-9014-df1865814c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b0be69-da07-4f1c-a730-2f7768a31206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb1d4fe-12d8-42d0-8b8a-1113eed23ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5b2e2e-db65-4ac0-9fdf-20a726d45435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0418453c-4dab-4ef6-be6a-5867bf8bccca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca0278a-a077-4512-a8ca-07b939b0f7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd29cd30-0299-4429-88fb-b65bf33a0994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.78.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6d4698-1615-4961-9a94-a632c743cf9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.151.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ad6ea3-5e41-4d8c-af38-9da55dd33ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe412adf-837b-4de7-ac0a-4b86e27ae7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.69.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769ede93-7ff7-4621-b8ba-ebaf0dd55d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.224.132.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb891adb-0a42-4b47-840d-713333d51336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.227.161.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b55989-155a-4b90-adb9-68b0e937f661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.0.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50297e31-13bf-4302-bec2-8306d76f96f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.104.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e43b09-8882-45cc-a730-73594f032941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.11.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a0ea8f-f946-407d-bfbe-2c0b6e0624b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.152.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2f4b97-eee9-4db3-a2dc-40076832aac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b01d65-9125-4281-aa63-a0323c599aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.208.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d95f2b-eb43-4381-8aa7-b613ae885c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.236.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f5b40a-8a57-4f87-8bb1-f6ae216b1248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.37.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca92cde2-5bde-4ec5-a945-791107f05d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.69.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ec3e81-702b-4d6d-b010-d6bcdd463a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.82.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173b3022-cf0f-4cae-8e9a-e8fef8bd4916", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.60.163.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1860f5c9-522b-4cbc-a9e9-85ac854853f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.216.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8be2af-ece8-4783-93d4-71c920acf4b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.107.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5aad39d-f123-464c-99f1-e7ecbf638768", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.107.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d75c7b-f28f-4c49-993c-a330ae9de9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.107.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6574f0-eb13-4aca-8802-dcb784c17c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11654a7-3199-43e6-bcf5-0668131292cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974ebaee-de8b-4f70-83c7-d78055327495", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.116.219.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ed91a2-f5c8-4ff6-8c51-f204fd2f84e9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.161.0.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82baf63e-1253-4218-8c01-502ee1d3405b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.18.122.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4462d6-16bf-418a-b13f-e77ee3124d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.189.108.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d861bc7-1657-4e88-963c-fa46da29ad18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fceaed-9b95-48a2-858f-3ccd13a60516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.16.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c60b8f-3610-4c60-bd02-a57aca140bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.206.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04c4930-9fc1-47f3-8734-f265d83d981d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.229.227.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc33942-e5c2-4983-aeab-c1c6141f1224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.52.46.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e30fa6-2244-445b-8912-3b491b7f6542", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.55.31.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efa4a74-c52b-41e9-8837-dfb0deea025c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.112.30.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce443a6-de96-44bf-8052-55b2c952e8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59591fb-4245-489c-896c-b1e9aa35a6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.235.11.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aff3b34-accb-4137-b699-83a1d0df3154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.12.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0d7005-fd03-41fc-8095-6668b1675938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.142.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e36104a-f11a-4931-a3b3-893a82e76d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.153.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98081adf-5b0b-4056-9907-a835ff8ac269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.231.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c841db-c3df-496a-b175-0444841a4063", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.52.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77270c34-339f-444f-bbf9-20cb468fe1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.115.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496c8ad2-a5b4-4d67-9f5e-1676c2ac9f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.118.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c208e7ad-146a-4c24-8954-78fa3707eea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.40.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67483254-89f5-44d2-a2db-320748b08f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.245.45.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f62482-3d85-4328-b05b-3f2a76033918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.83.35.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32212b86-8054-4839-8db7-fe418063c2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.99.98.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba48aa7f-6c02-4fe4-9372-7432ead6ff46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.105.68.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bac371-a9fc-40b8-9541-4830fd527214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.103.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980f955f-6140-438f-a41f-94740e2b1028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.42.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba475ae-caf9-47ea-b9d9-b9c8cda80310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.46.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e475bf7-0e69-4166-85b9-67af0cc51c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.76.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e980bf-7a3b-48b9-bfd8-99cf14e88b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.87.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651d6aea-3aab-4b2b-b216-8033a529c4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.147.146.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1f7cc2-f53f-4c8f-907e-e5aa334fa9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.147.173.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8375abf6-e145-414a-960f-e0f04177150a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.148.130.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4e5a03-3145-4ab3-8160-657e17abf131", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.148.142.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44daf216-09c1-41bc-a43c-311a0e14b999", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.148.173.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbb0f0e-208a-4479-aa72-e78815586d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.148.201.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1195c2c5-dce0-4451-bd54-37aa2f8c19ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f608b8-d9fa-46ac-9cca-ac3acd1b47ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a7d397-e143-4668-a726-512105cea2a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.157.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccda27cc-24c5-4570-9b21-4ee52a6a521a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c06e42-c97f-4f0d-8ea0-5234620ceb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc4ecd4-2e18-4109-8bc5-e06df97b6999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.160.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f78ddb-c1d8-44c8-836b-390d651d35e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.164.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a7d7eb-4a63-4266-bcb6-4a0180226681", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.172.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8944128-faad-49de-aeb8-d08aba680dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.36.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946f5d6a-da04-4e10-a3c9-ecb2c866c760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.171.9.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2469fd7f-7d88-460f-a1be-c2fa49ff751f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.248.151.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c444c368-6066-4488-ae80-c38ad120e77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3656f37a-9acf-4baf-8a35-a943656243fa", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.123.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d473c021-e692-458d-8c79-4481f35b8299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.162.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c0e96b-b120-4f80-acd7-011ac177033e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.181.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13608048-3762-4734-b9ba-3984a186e533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.19.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcadae59-39f0-4f7d-ab81-2c64eddacb74", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.218.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41317110-2fa6-4ed4-9b1a-85261b49f1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4626cfa3-caf7-4a59-9bcc-bd24c0e45017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.116.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be427c3-75b4-40ed-baea-34ece4e685f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.116.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--facb406a-abf4-46f0-9788-faa354bf1f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.153.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fd72c3-f459-467d-bf29-af1c4a8b5f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.209.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e199d8b2-8284-4eef-bea1-0f68eb00045d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.40.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81dbbbf0-35bd-4f63-9cde-56246840ae9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.44.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1cf5db-61b1-4493-bd22-778b7adf2b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.62.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf5bddd-48f9-4292-b784-3d35a8e29dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.63.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298d2ade-cccc-428a-b626-cc6b0c3ff568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.20.185.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebab8f16-3429-4ad6-b1bb-e2267157e5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.202.210.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1052ba5-d425-4012-a792-2e4217a0d33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.140.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20110dd6-e81d-468f-a85b-034bb1995bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e036a2-a44c-4cd2-a352-4bd9805b33e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a9793e-b70e-42bc-8f4d-14ccad5fa972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef4f7ac-4673-4e74-8972-6519d05b41da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baae9c9-316a-4004-809e-b9c21cb09ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6ee64c-f72e-487c-ae23-f76556752620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde4661c-4311-43fe-8164-d90b6023528a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e646546-aa49-4b35-ab52-f5fd815e5758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b76be66-e4dd-4549-ab30-dcc95773cd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8334a2-3796-495d-8f65-caa6faf50b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecba18cf-6633-43b5-aecc-a6dd5b720b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7402e57e-e095-45a1-beea-8c72c9e715ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c22d635-86b7-4be8-82bf-ba02ab24f217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc665908-7749-4bdd-8388-d3f25fb5eaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526b5d3f-453e-4897-b161-2bec594f9dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86213e0-ff83-4de7-abb2-a81dc217817b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61a7c37-f50c-487b-8f5d-119235a7908d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e9d0ab-b048-4da4-91e8-b82ab0e072c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69800985-043a-4a86-a27d-dc74528cf045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b0ef0e-0f38-4eca-966f-d1558fa043e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e09541-af02-4f67-93be-432496e639a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b4ebfa-42f5-4973-a3f5-8e20512d9416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.227.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7c3ef5-b192-4617-a6f6-2ee95e0641f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1e4f8f-24ed-4d27-8a98-31dbb2e97c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817a3fd8-3be6-42c0-b1c9-b32baea08d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482ea2bd-bf64-4810-b24c-c364b09fb5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.124.222.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcff7ed-9cda-4dd9-94be-37b77e998ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.201.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9872509-229b-4b05-9692-cb0840252276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.228.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd36fac-15fe-4dfc-8236-9bb01a64e647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.91.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58f77b8-15eb-435d-819d-c2a5b1a99196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e1e08d-7947-42f4-90a3-2fd0869b91ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.22.171.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d276509-749c-4ddf-b7ab-1e16785fefe2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.22.201.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4764e8f8-f7ee-4ed4-a7fb-18f18b63d87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.22.231.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede60d22-5a91-4d12-aeb3-80f4c56832ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.225.124.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd41fabc-8f39-4268-9d66-e7f22458b15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.138.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a331a1d3-e231-4b0e-bd9d-aa61dadb59cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.250.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923f006c-cc68-4b7c-9f63-103079951b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.68.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b45d0a-3fdb-46c3-bc28-66ea62f72cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.90.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b65db93-7e21-4958-94ca-156e37fd016e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.96.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc77840b-568e-4314-9969-e19cf398721d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.34.232.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b46e8f-af1a-4898-9297-57116c953a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.52.48.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893fac71-21d3-4649-a0eb-f816cee92f65", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.56.0.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd49b0d1-a5c4-4243-8cd9-e0dd9d955646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf5110b-6ce3-4be4-abe6-9a54eb91a122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.241.124.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb15f7f-507d-4701-9958-5e078ce13edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.2.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c773f31-a351-4c0b-a54b-16c8fac9c438", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.174.183.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900a3707-8638-499c-8acc-9cf8060931e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.185.219.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e7a520-8799-4fd2-91b8-a241392d00bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe945389-f07d-4583-9e00-a3b54412e02b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.126.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4949c2eb-c279-4111-87ac-cccb9f409617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113d5082-9ef4-4ba0-a4c4-61fd95c65106", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.147.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27297e26-2778-4cce-a742-7d8d1518f5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.158.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e13da33-b4cf-4faa-87cc-4f8888b0f66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.172.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4437435a-77cc-4412-99fb-90e44e9b9826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.22.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6516ea4f-7169-4c7d-bffe-276b6bbaf4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.220.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef1d4e8-179a-4f9c-860a-632610e15f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.41.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f76ef1-952f-402f-b23d-ea86fead9671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.48.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa326c19-0f35-403d-bbb6-792a385224ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.59.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c88e817f-7903-449e-abfe-30d5ef8daecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.235.19.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b2e27c-db44-42bc-88f8-3568afac4a60", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.235.212.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18023c23-06f2-4e81-9427-72c8f2062d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.235.221.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e36d88-5ad4-4fec-aa6c-53585d172325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.101.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11324c37-4112-44e5-90b0-6042af679379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.111.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3bf482-cd4c-4ad0-8ecb-fe9a7e3c2b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.112.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2107b0a3-ffd3-41e2-a16d-44e4c034d020", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.112.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b64b59-d946-45b6-9d9a-07fc206ae655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.113.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0918e993-66e7-4b94-a12e-ce47743ca5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.158.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13efe3b-5171-4629-b513-88a307bc5df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.47.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdcebf6-cb95-4b71-9165-481bec44f4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.47.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee57c86-57a8-446f-af5b-90a0e48d0e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.101.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d03c97-874e-4d22-aedf-92d6a81f58f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1a9754-5fee-4487-b149-93087137e939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc91723-e1a4-4be6-a043-7984851e3711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcb11d2-86e1-497d-b5fd-c83783b38a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3d1c60-638e-4559-8593-5bd60e688e42", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fc3946-fc69-4f7e-9e94-38f0f87f4434", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f90f379-09ed-4613-8ccf-ac9f948ee559", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.241.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bf500a-12a2-4a25-9cb2-7e14a1e62e74", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.135.38.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac58e96a-a83b-41f4-ae8a-c1be5abf0e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.139.136.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8841ce-fd46-4909-98cf-a278de035e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.129.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f33b941-c916-424e-ac44-f13c33a23d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.150.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d50aefa-0e5a-4433-9fd5-9118ed0138ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.151.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcaf79e8-9eb9-4b83-8671-169c5288123a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.151.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920ccd2e-551f-4379-8536-dc389eac4d87", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.177.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ef81f8-bfee-42b2-a497-bc2c26b793fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.197.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d27477-d98e-46d4-bf1e-9ed3eaa2f675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.206.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7126cde7-8907-4586-9554-b0c17568e813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.225.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7788e759-a04c-4d57-b609-e8e605b64ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e40cb3-e0e0-42eb-b0ec-2cc5017ffde1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effbdb89-3ef4-4195-9274-1ed4e88f4a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5825fd18-3b71-4456-a916-e9f4196e9878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8f4c80-1c1c-4a11-8d7c-07626ab266e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dba47f-de6a-473e-aff9-c9de988385dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2fba1c-b041-4c37-af81-936e8cb96424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561a01e2-bb7b-437e-845f-25b82bc8c173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd78eca9-f025-48ee-ae15-36b6fbdc9710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d92212-2378-47f8-8433-99977baa5c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f3296d-4a8c-4e08-965d-92780661aad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f71df1-af6e-4753-a0dc-c233988f3f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d70f054-1367-42b6-90a1-66dc5cf4ed67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5e5717-e283-4a3b-a670-34669af69f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771efeb0-8302-4b92-9dc4-29bc22810896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e8f766-8250-4a8c-bc28-6755876c18a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a7cdc2-a14a-462b-ad78-e7d2dbd8bf03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca11799-1fcf-4bde-a30b-2ed8c91c8bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0473b28c-7b27-4fad-9013-bf7a52206fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb18a22-9565-4abe-9f37-b3d1c6eae2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a6cf31-ec7c-4f1e-bcfd-0b3b38d5a046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ed1c57-8517-4647-ab03-2bbb6720cbe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310f8c45-e536-4c58-b307-516cce7dcf60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8d7366-5f0e-4454-9479-73b548d6964b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27c11c7-df72-4dee-adff-5e0ef80c1f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69a28c2-6d8a-47ea-8eb4-d71e976bea0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a872df5f-a0e3-4708-9b38-a453eb49c926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d83016-91b2-4fc5-932d-96735a8b6698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96efb79f-e8b4-4dc4-b813-24367a1a8b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff16d5d-1050-48db-afc7-e1fa5d7921b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f6d78d-efce-4d79-936c-71926f7d87d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902f76d1-5007-4a00-b6cd-23d35d4192b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c288334a-4564-449d-a4ff-dc64c465982e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c480a1e1-7048-4585-9155-093b3080d0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe9ac7e-c3c3-451f-9dd2-7d12593d040f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d999fd7-3235-4655-9365-023d17771240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301c7261-c72a-42c3-9514-1d752a4a9a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb4ed8f-ca45-4b70-90b2-b63b09545f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86cf9a7-9650-4fc1-96e1-214d460998c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c277e4c-b867-4375-8e8b-ad132e11f368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2474d2-e416-4ab2-b331-4adc30bf8b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e321fb2f-f224-456f-a7ac-310543317313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4c8159-9ed4-4d22-89ad-201372e6871f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854c042a-86de-46c0-b98a-7eb66254f2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc27f4b-49bc-4e32-86b9-6f21c7dad2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220fc0c4-903d-4a41-a601-026c703b9f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7918c41-85f8-47d3-b5ef-7508f919678f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a86dd8-4005-487c-9aa4-04cc3a4a6331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8135a989-6c8d-4b8a-a14b-bd5783c4ee2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f4e840-75f4-48cf-b081-b3cc31193ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9e0294-c99a-4caf-a3ff-cee5db1e5355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edfea54-40db-4b83-b5ae-bc6a9bdec8ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa99a80-766b-4e52-b415-eca88971bd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6da2f18-b0eb-41cc-a3b5-ac25e8b4eed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baca0119-509d-4084-adde-b23e50067349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d796b4fc-69f7-4ac7-bc69-8d4f095a46cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fb897e-25fe-4c27-bcdc-ef4421f4c826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f9273d-8ead-40ac-9708-1ecb6e58cdbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f731070f-e5ed-4e13-b9fc-654a66070c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67f015c-8a41-4c3f-b092-2c2f8446a88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb52f750-8b88-4be5-997c-536ee96a0c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f226e9-be25-4b14-bf1a-b1139070f25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6fa672-ff31-4638-879f-2fc935ce8753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd886699-e074-4fd4-ae3d-2a28627c2c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903c84bd-7ad7-4e40-9bd9-0b665fdc17cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e68c6f7-0069-406f-9054-17fdc6b78bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec23c81-918f-44b1-a6d4-75ac871456cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156f675f-653c-495c-a38d-d501f0ba5901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029d1d28-4050-49d6-8d2f-6714cfcf0a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1894bf8d-5cd9-48ef-b70f-2804567d01d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c2fa78-edae-4a5c-85d0-e6500cb518e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40421da-8459-409e-80b3-e0a369c7b5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17751528-0cfc-4bae-bf44-8ee1e33f6240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f59b7c-84c5-4209-8f96-a2551def4bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b623178f-59fa-45b8-ad0b-ae109e0bbb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e050fe-aa55-4498-a126-0aa49e621333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464a03cb-ffa3-4283-bcd1-802eec1de2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583a596d-7ceb-4dc3-8ddb-6ff851698c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6ce960-ab75-4b52-9d61-90560647e56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7e52e8-bf9f-4904-a4d9-e783d64c4c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a14f1c-7b95-463d-b8f6-d8993c6dcfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9959fcf6-c568-413e-ab5c-633271e2f0e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f75a06-6716-4441-9a29-5a854070e908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c02517-ead5-4e31-b758-b9eb4c8e2bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73132554-4572-4746-8649-193e3e92e9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b172a423-e969-49dd-abf9-74c33518a72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cada2e90-9284-4548-937c-d044ca5baf65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40051f39-bc88-44f1-9e74-16afffc3a1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb299ff9-b82b-4e02-afab-a8d3c758781a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda7a037-1ed1-4f4d-a06e-6cdc2ba12b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2b3cb2-fb79-410f-8ea2-34400713fdf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30140a12-b40f-4698-96e7-48a8d7936e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffcab6d-a2b8-42e0-85d7-ce927217af61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b34dd0-67df-484a-b577-3a4200eb0893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcb3276-32e8-4c67-afb1-3a05195a422c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92032598-7c26-4ceb-bcd4-5c03256a4980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97c43e6-6622-49bf-8b8e-3d2d432d2c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed92191-e281-46c0-b259-a426d88d02ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e42283-5d49-4676-8951-37f455ef3f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401b98df-b5e6-457b-ad41-682b594638a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6e9ddd-8d18-44c2-8c24-b8c53c16a982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0631deb9-48a3-4d26-a598-496e435e796b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863b7604-a38a-443a-b041-0451ca5e4374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d463601-4ecb-45d2-b764-e9762c01f8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab9bb7c-ecdc-424d-b3b7-5cc56232f8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3936c28c-f33a-4a22-8797-89dd93009b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64be7a7e-84f8-4c5a-84a8-551021f26a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0575dec2-d666-4b75-9007-5e6455d4724b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc2aad7-e08e-4af7-af90-9e7f2f1171d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6725a53-ff62-4c1e-9703-1e1bcd43523c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5ed964-abf1-4d47-b1cd-cd4fa356f26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ced4f6f-3788-42cf-8b6c-d36aee5a2a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cbcdd5-ce81-4111-bcee-480bd6dc97e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3623c6ed-4020-4d4b-86b9-c47962a82b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66aae84d-7921-41ea-80f3-4da04ab1cf12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fccbce4-84eb-4adc-88fa-56114f599f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88275249-8efb-47c4-b26d-737177b3ddfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f8072f-227d-476e-ad3e-4375d3d12124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfedd79-5e53-4e46-ae3f-26860fcf7112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0af923-a754-4821-82a2-5d52f0609a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e33a7b-a6d8-4d11-b217-09e27ddd4994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b684fc-cefc-4949-9e57-5774a8ff0c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3115e75-ba5e-46d3-b4a4-10842dee9f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96f0297-422e-4a1d-bf13-9e03908d6471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c755335f-f8ea-49f2-91d5-f8369e3543fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1ada65-b38e-46b5-b94b-1df65199e626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a36e48f-2ad6-4a1f-a0e1-cc986e153205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a892c285-eee1-44cf-bf85-145800615254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52b4a88-8a1b-4846-bccf-bb14e917bccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0cc275-7bbb-4f76-91cd-4661c9d76d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d0f84d-9b52-434e-a113-c852f78ef986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b198007a-4917-430b-9b64-7918652609dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323b60f6-830b-43c2-a4d0-2b471f35a4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457b4ef4-90f2-46cb-b97f-8771ee4546fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479849cc-e009-43a0-93da-c5d030991832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76439b6a-7919-496d-8976-a1aa6b6e065f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b6e527-537f-4ca4-8451-31f1c23ce8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66085a2d-949e-4dad-9014-9cdafa30dfa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a01c34a-8967-4a60-84ae-f0e1962b3813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfcf48d-681b-43ef-8d40-95b9e21854be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d3119c-5b3a-4f8a-ba34-258c252f54dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f156e3c8-3f13-4c05-9d32-62fb17c3934c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5b7d6f-35fd-4818-bf8b-e86d7c9ede65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a451d0f-7114-4074-b2d9-45e49a93effd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5e3d90-5ab0-47cf-a7aa-8b4303ecd314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77655349-ebc2-4a2a-af92-ee380711af8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb5aa88-f1ff-4bb6-a57c-9777bd655bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9f0063-0965-44f3-a471-94a43652e053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a761a55-a02a-4eef-9ba9-e1a6baae2a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98fca2e-d999-45f3-a46c-0f4914d9cd51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec112ca-80b4-4aaf-8218-90f79b64082a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efa3271-f66d-49c2-8d77-a50e80fb653c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74cd3d6-549d-429b-9b07-1c3daf87ceec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a22343-5129-48c4-9385-80ad64080be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08d2e00-7ced-41bd-858e-31d0df38aea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26a66b7-f7ef-4c7c-a9b2-369ca4ddf203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3359f8e7-d9d2-4086-a0e1-92bfd28434f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5190a28f-8739-4320-af09-d327ff4d2dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afd694b-089f-48bf-b08e-7e2bc0bf5fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e135c31c-9240-4369-bbc6-21e2911025a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73250750-42ee-44cd-a6b3-2075852bc2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a28637e-3b9f-4975-ab89-b94ccbdc39a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57dec02a-0754-4148-a384-47e779935448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1476e6-f1d6-4f86-a76d-516b3fcca10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730be465-f728-4568-8034-e0205a1586cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886ae0d2-c678-4f93-afec-2effd9d2886d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc01bc9-6134-4101-b3e2-c6b052a1b0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d19589-e2bb-4945-9da5-a996b844c98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd09da01-afc1-444c-86ac-db449d17e01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b836ba9-b66f-4141-ac95-89c076916462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11f2eff-0c43-4cb4-8760-b209625cd1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d0db7e-8a9d-4235-9024-26eeffdd253d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801a8f92-c31d-4986-a9f5-2e494ccd269a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103c5978-0fe6-46c5-a53b-ae9bfd5e3e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12baa887-a655-439f-bc39-738c292c1d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bca207-2b8c-4b97-b8b1-110394fdbeb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4840230-e260-405c-b7be-9340b01706a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6be6beb-db26-4764-9eea-306b6baa7c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6932d041-982d-4dab-ae16-66f7fea4dcbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95132609-2aa5-4e4f-83c8-0f688292e7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e64910b-d7f7-45e2-9596-640381f82360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f196c5f7-69ac-44c1-8936-c5330cae9862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895893f6-8af2-46c8-bcd6-73c101cb2eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da99fddb-6534-43af-a45f-6f241b490c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f0551a-7a04-460f-aa02-4e65d1f82595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5102adec-8f33-4dcd-bef3-98e2977027e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560bec05-0a92-4be9-aed1-c92e74fb5fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a58287-892e-4162-847c-68ced058367d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b78c17-2fb3-4da4-bbfe-8b8d4058dbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba9ce1d-5966-4cf8-b624-59502b851789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a29c7c-70fe-4040-bd46-652d54923505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534948d6-bba8-469f-81eb-cf4890c2c7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b75d83-9479-4b1f-acfe-fcfb015f0433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba48bc40-0239-4190-a032-29d666188dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b4cc6a-ab9d-410b-af0a-585eaf34e083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0307f3-b5d2-4738-b794-c1c38fd3c789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a30363-c7de-42d6-bbfb-025b39369320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81def6d-11c7-471b-8113-d5f846dd9520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4b6784-17c7-469f-8969-95d518a5eec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e332fd00-f657-4d18-940b-7d68cdbe64f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474a89ee-82fb-4d52-804f-7bf9b6230658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bba85eb-97cb-4eaf-9351-3356ff3d1ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b0465d-7837-46eb-918c-ad052d29904e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7617127-d69c-4e41-965f-03748f9153b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ec8792-12e3-4792-a629-d2fd0a928add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7deb11-52ab-4321-9434-24b0683eadf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7527f88b-da10-4633-b9e4-2248d5370912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c265685d-e510-46ef-95f4-52625196eeea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f7e885-ec7e-4cb6-b212-c25a740edb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb5d8ee-a92b-410c-b17b-59708298ce8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54d898e-8a8a-4998-bc16-5da4bed50a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5cf079-49a3-482f-81af-8ea984764ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039bac7e-327c-4e3b-bf35-97d26b7a8270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac91d76-e895-4ca6-8773-b6d7cd9e0973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7d2daf-dfa1-45fb-b3df-d84e774be99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b577bc8c-262b-454a-b30a-d8fe6e440b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba545b5-caf6-4e9a-ac41-eae887c03448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022162b4-d33b-4d11-869a-c4169a4954a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8a4b03-d1cf-47df-9d2a-4e8eee9804cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456254ee-8995-414f-b6b7-e170735f17a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660a5702-f15a-48c8-966c-6d3fffcddc09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03719c19-011b-412e-903c-ff79e0715743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abf49ec-993c-4c81-88fc-3bfc284dd5ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61843ac-495d-4996-8f34-8484ec4bc83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e449b97-8d69-4db8-9311-bf133c4bd438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca440e9f-1a5b-460d-a56b-d20cc1e8379d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1ef7a3-a6f3-4172-8ab2-46826e5f64c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b21996-439a-460f-b0c9-de055048f8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd86cc8d-bbc8-4c3d-bfa2-6a1289b968b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a430ba-4a00-49e7-97bd-8a67230978e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b8c39b-d892-4111-972a-f9d84c1bc629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676881d4-1ea3-4c15-abfd-a4b1fd7eb1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198def6b-e267-40de-98c6-ebb6c417f6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3eb523-ee29-4e1a-b003-4781b7cdee41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3654373b-b4d4-4b36-8bb1-62284c8edcdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c366358-1740-400d-9562-6a845f51f815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53096258-e2f3-4789-9556-b4f3a02e1072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6e4d8b-635a-40e6-8a7b-ba51d0742f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35297631-7621-4ef1-8243-743c2a219d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87999de9-3867-469b-a11a-545f385184a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a48b6ca-1b26-4051-a6fb-8a0e7bd1c04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29984864-dc07-4257-adb3-16641bbffc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fe6807-3818-43ae-9ef9-f86b1e87d247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5e68b0-5797-4ab7-a9b8-ceb271060aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88461268-4593-4fc8-821e-0d07588eab0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffbb14f-a5a9-45ec-aa7d-06c573dd0380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effa1264-675a-4a5f-a748-1be811377d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd91b7cc-c19c-47fa-b631-e051ce4d2684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a68bc6-97c0-4941-9afd-d9ad54b7c96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293182e5-3fca-49d6-b828-70a839f99c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79c5632-09b0-49f7-9a87-8566d4d8985c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b6281e-5a63-4914-9800-632b2919be02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32387a59-9ed0-44fc-987d-9d2814bccd58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b355ec62-0b08-4d73-87c3-10937290503e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a439d8-808d-4435-98f4-5ce76db8c6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459b3712-27f6-470f-adc5-eddf548a3084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8490f3c-30ad-4fa3-ac57-b244afbae820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ff55f6-b52b-4e08-8e44-a6cd6ce8ae65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bfe9c4-200f-4f06-b05c-24f41232c3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1803ef5b-43c2-44a1-ba11-9c105007602a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e3fa7e-c0e1-4edc-a6e6-579625775834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6321a1f-3bb7-4e49-a26a-9891a3b15e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62600b3-6628-472a-9709-a3a30b958b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94bf2fc-088b-474c-86da-c175aedb08d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10c823b-7442-4bed-94ea-cd29c6b975e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ce1016-02e4-4218-a95d-d18133dcf227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d032941-5a5f-40dd-ae74-65b63e7ce6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0c8779-e31e-409e-bcb7-971f322e2cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d85c60-14c2-4249-bb1e-d4c398960b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae05508-a3d5-4f7e-a313-1dd035bf1043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.60.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e8e7cf-f6ba-4d56-8a86-da1daef37e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.78.161.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fe18f3-2653-4f2f-abb5-f0b0e9cd7fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.91.111.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17223ebe-29da-4971-928d-81990461122f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddb27e4-f57b-4612-a524-59427c171df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.183.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feff1f8f-91e5-4cd6-8e7e-85576b0441d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.190.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f17003f-b929-43ce-93c1-252bb16287e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.116.84.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117716c4-dfe5-415e-817d-d384dfa8ee6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7e83f3-0d88-4334-97b9-db222e25cb10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8b393b-f546-4878-be25-42291380713b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c09a00-598a-41ff-b1ac-686d6cd54435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4abccc-c8db-4cc6-85ea-b73e1f821db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4504fde-3e71-4a7e-9327-92f234c2f7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.245.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180f187a-b9b6-4d32-900d-07ae39914868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de03c1ae-22c7-4a2c-a79f-ef1d5dd0dd41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef19b7a-1ad9-4e71-8010-24c34e53a9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.5.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9634c80c-5b43-4514-ab67-3248f333521b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.78.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee04ce3c-33ce-49cf-b8ba-31cc0aa5735b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.90.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804f358f-d8eb-400b-8215-8a1b19157ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.28.49.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd6f64c-a73a-4726-b4b5-9857d73cac0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.34.198.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e46c6e5-36f2-4b6d-a9a4-4356ffc96732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.34.201.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b3e9f1-b030-43a9-ad3b-8d97880af06b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.34.48.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07024085-94de-40ae-b89f-418a6999f863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.50.101.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8153d62c-653d-4575-ac69-26c6935f8065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.122.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca86d08a-a4ac-477f-9ee8-547387e83cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.135.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23abd6af-579c-49f2-b84c-f68af4a37fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.165.197.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b717cf1e-a293-44eb-ad7f-5850d050d40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.129.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab32b766-7967-42e4-81d2-de6e24b9bd7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.143.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dade959-c3f9-471d-be0c-bb9350f8c744", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.165.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900e095b-7af7-4bd4-b373-e2088fe9fb32", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.184.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37882a1-4f9a-4ca1-afa6-ba5192ada743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.244.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef30fae-099a-42c1-8636-add98b48eb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.56.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d199dd8-cc43-4d8a-b6e4-b41273f2a81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.58.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4323c624-9f03-4fba-95b7-7710acab6667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.8.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff947d9a-a8b5-4009-92a2-fc76fd7a6ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae6079c-fd0d-4427-9b97-d7034f674272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.172.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a170b0-9117-4518-8b19-607a06213790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.218.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb27e905-61c8-451b-8625-70039a9340f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.56.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9049e28-0887-4ce0-8daa-d121544b5739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d76ff89-ea91-4798-9185-314f5b00766b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52928c30-0bc7-4214-afee-8f770575c0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8ba857-02b5-4ac4-ac30-ddf7ede33362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724f9efd-bc19-4c60-90ef-3a671aa4d2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eba23f1-852a-4453-8109-7975b4c504ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7096ff1-e55d-4c3f-8f44-b0cb2ed8c8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b02df5-4f13-4c0b-8f0f-bf69d278eb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfec285-8ae5-4106-ad91-421e3d4d6c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8382192e-2e3b-48cb-b8ac-27dc3bd9c7b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93282a5d-e700-4036-afa4-8566636dcb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290c1276-59b1-4ce0-81bb-fabfe2434852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8095687e-8588-47a4-a948-fe6eaa54d845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54bb46cd-e7f2-4fdc-a5de-a589d9a1c20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5341d3d4-992b-4631-9a8f-2cc42e7c2f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61df8507-fba3-416d-9dfb-9c3342d39f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4378b81a-f296-4151-b844-a8d3a36f941e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9aa2e44-0064-423a-ae40-2a5e127acce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdaa1036-d62d-45ba-bddd-951e1c8bc4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c40ff84-24d7-4f71-8042-1567562c13c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09492af5-884a-4a18-bb53-f6170745be1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae35a64-c873-446a-8529-6cb2e3bdeb8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4283624-7807-494a-adae-f141b59a8e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22889937-8c78-48a5-9c9e-e9958183ed06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b8533c-ada6-4c47-8517-fa82e42d2d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895c73c8-70d0-4881-9afa-deab2b7e1032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1049530-e0e9-4ad1-b1ac-6497348720c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a47beaa-f76a-4807-9d33-7d7f8f74ecfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67757df-b1d9-4f1c-a3eb-7b63ef07baf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3739a902-c159-48a0-9898-812ff5005a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f62e21d-a0a9-494e-9eb6-611a61c739ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100d2bee-ebee-4d07-b238-2faccf11cb3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f25bdc-4e87-49a8-b838-01f4fba23e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1e8573-0988-4daa-a72a-b68ff57f7ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5868d2c8-7fb6-4a55-8d6d-26cc643721d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0039ff81-0692-440d-945d-bf09553f1517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa8c5a0-0498-40e7-b9d3-87c78bd00ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b80d040-6df7-46f4-97d3-5b414be7339c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b17c96d-4ff1-462d-b559-0c0ee8f1f45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf1abc8-baa7-46b1-9a74-77ef6809ee2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d8e84a-b93f-415e-bd46-52ac00f1fb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db4edda-83b5-463e-b7bc-d1913e19f878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a109e661-caca-4b42-afcd-25089442652d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b44bef2-2bbb-484f-b146-f600a2cf3fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2f48f5-59b4-4d80-bff0-8840f625042e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d74a2d-5f4a-4907-a455-336221510562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4b2366-fb1b-4b78-868e-2c8a074045d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156ce5bf-475f-43ba-be75-cf3b5484cf94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751414ae-ade8-45e4-bf30-571d1b67902f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c8fa14-5ae9-4f98-83fd-29497655cd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57dc74b-e4fd-4286-9d6c-6b6006bfcdb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab0648f-76c3-4e61-83b6-94a32a670596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082409ff-ad08-4c8b-bd30-f82afdcf6de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df3b3e3a-dc4d-4237-bc20-0224f75347e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a9604c-b13b-4050-b816-c3d2abb2cbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6764a20f-a0a8-4d17-9912-b778a4d61e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c59ea64-635c-4a4c-ac79-8f9a23c32cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c681f47-b1e1-4e26-845c-857b7ecdb9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1435a167-f128-4811-9361-a9ee08bb002d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c001d3f3-3caa-4478-9c8f-a282aa41b027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3490503d-d73c-4745-b8cc-6a846b8af59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb91169-999e-4bd7-b060-0ce1796521f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6073215f-3d8d-484b-a1a8-35d11c57d27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5462631-4cc6-427b-a5a1-86079b7c8f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccb022b-c860-4e88-8a25-4c7f76ca3fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468fd94a-0ba4-4c67-ac0c-0b7cf80b68d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ec4e0b-e134-481a-8bd9-96860c6d31b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee106e7f-c889-4386-956e-ba189ff4b025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a55bcb2-2c61-47c5-a532-1b709d65efb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1c4b57-2b8c-47b3-8129-9b2abfd6b328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f308cf-2459-4d14-a86f-b28d1864eeee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.197.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827029ea-d9be-42c5-9700-07ed2c08f719", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.230.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b702650f-13fe-475d-b25f-75dfbaba42e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.136.214.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ae6890-de3f-499d-939c-a6ed4cd4054b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.136.227.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b21373-1d15-4a51-af95-472fff05359f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.136.62.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54e11f1-e50c-4edc-ac3e-aee5d26f79dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.136.89.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b59e14-10cf-46b0-a512-a741b27061f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.230.252.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46760250-1ee8-4ae9-af5c-4a407f6ce805", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.230.254.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b9ce9b-a7f3-4a65-a046-93f3c0ec00e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.230.35.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb8cbe5-a2bc-44b3-ad0c-13b20d615002", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.241.77.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0624e09d-12eb-4380-b1c0-ead71f33a200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.241.81.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57050c4f-c029-4627-9935-05cc30844b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.169.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77815d0d-8fa4-45dc-ac61-96ca0873135a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.115.150.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14577dfe-1db1-430b-b70f-39079f22573f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.115.167.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c9d7fa-9871-42ed-ab21-a96341e5a0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.145.75.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffa58ed-e673-4943-abb9-5499531ed150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.237.79.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecee485-2a1f-4a44-8920-7cbdd61e6258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.53.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66776659-defb-40ea-8356-505bdc03945f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.241.122.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13370914-de62-4eb8-9cbc-1fd3867d7a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.241.5.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9d3977-7e22-407a-9f24-125b227b9a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.242.227.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9c22b8-3202-469d-9a7b-9241466a2a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.242.30.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef1a334-99af-4fc1-8fad-4443d94d154a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.242.36.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419829f5-827f-4b55-ba6d-1a403f480f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.69.244.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644b0315-bc0e-4bfe-b197-5745d8935c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ed3dd6-3b64-4291-af18-f1bdd9d6ad4f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.200.205.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e531d38c-d5dc-4501-908f-ade6d1a75cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.233.30.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d435561-3236-49f3-a337-59f50ff03cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f6ea5a-97d2-4a4c-82ab-bad74dd43485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0786c6f8-3ef4-4ffc-a47e-57b87c095614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1edbe7f-39c8-4260-ae8c-e286185212fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61aa891b-3a49-497e-aeff-b423b62d92e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bdcc6b-9eb2-4f9c-a09a-ec79bc473f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8170bb3-c054-43eb-a233-e5ea70639b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea3ab56-6592-4617-8496-0f41be177c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.131.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99a2a73-2bdb-4f55-b7ad-c19eb09915ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8388036-3672-46da-8527-a5811b4afec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24f86e9-353a-40a4-99f5-4786357af73d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db743f8-74fb-40f6-a677-03caf1fe1bbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c6f3fc-ea03-43db-ac58-b3abc6c6798d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2fa0860-03e5-4800-ace0-1415ffe82a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa77928-7884-4731-bc8e-3414ea188eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759beda3-1ba6-47ae-bfcb-97488c514ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55d974b-6f73-45ce-8159-ae9b63a1ba7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6476db25-e918-454d-a00e-ae330b607c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b390fd2-a75f-4952-8d17-89c996db80b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659022fe-1018-4cd1-83ab-253c7a58779f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ffa77f-eb13-41d6-bf0a-88ce784ae89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822726dc-3016-4c08-bbae-fad31615c3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed976f41-45d4-4de2-86e5-3f015e081bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2158534c-0522-4e4b-8746-698ba36d7e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ffbce6-d4a2-44ea-8785-94368c3328de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa83249-42f0-4a5c-b4c5-c4eab0dd981b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca582567-8c22-4917-b4aa-651287938272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55278c5-52e2-4cbf-b434-117013e2983a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83784c57-4c5a-4336-aed5-705e4a160a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8739dcf-b21e-49de-a223-1440a4d95fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a90f486-2d80-460c-954b-6338717d4464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa2189a-d289-46f3-a05a-913b12ee33f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5310ee53-8a76-472d-ad2f-895405331d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b500b2-bdf6-4d62-80c4-23176d702ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e55c3f-6479-492f-a97d-4375bd69faa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d053cbd-a70d-4cdc-8929-650972ac901b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae17ab3-a8e4-48c9-8233-0743f52c089a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63aada88-4c1f-49bf-bddc-d68e09a95ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e587d8a4-2467-4373-8b4d-402ebeca5b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa32cbe-f7b9-48a2-9072-6782a34b2477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85630383-2cd0-4148-9492-1c598f5306a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bc8d50-897e-44b1-a461-d06bdf33b8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79907d51-8c0f-43ff-93f3-1d0b39a134e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59c1264-f0bc-4794-b0be-b8c68f39223e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83891001-3df8-4061-93f4-083b2acd5769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a8c600-313e-4d69-a918-f5d43df10764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3d41a4-7e18-48aa-9a17-4e78bdf25d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89cd72b1-ddb7-4051-98d5-3cbdb48c5203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf13be1-d80c-4dbe-b91a-8f1a74e6fa14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ef65fb-4afe-478c-a760-8e236a77023e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595c2f4a-0826-41b2-8006-c5bfa5c560f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccdea00-05a3-484d-8a6b-484584e075a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049d5ae7-89f7-4a38-848b-e7a40f477a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e025d96-dfb0-4039-bf6c-81e56db2806e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f671ff78-dd3b-4e04-8f46-acdea9ab9441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e857571-c4c0-4434-9611-8030d0d83496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d7adc4-8f0a-4131-a885-18dc8fae1f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4438ecc-aa9a-4d17-9d1d-63edd6354c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eacab30-904a-42eb-b74a-8742cf9cc954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4939a821-a91f-4349-921d-402e58f699df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e993c5ff-7dea-4850-a5bb-6494d71300ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19be3025-1a08-45f8-9f75-f4d40277f1f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.160.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9715d7-cf8b-47b9-906f-bc50c3e06cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.162.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee6c4f6-8ca5-4103-862a-7fe22db24328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733bf514-32e0-4d90-9cd5-692920db1c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fdfe241-0dbd-45ad-a136-417f02d24bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a015e23e-1e1b-487f-8d20-b8f8b016e3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf0f2fd-ad2d-4607-a996-b3b8ccda046c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f01b0ca-3323-4387-8779-5de555bc6d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256d1874-a8ef-479b-83ec-25ac1eec1daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49fcb21-b0b5-47c7-870d-56eae220f64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a3a83e-62d0-4e87-a06d-18cd2db9ae39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.176.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdc66e3-be90-4edd-aa4e-4667093f176a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.178.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7cd3962-f393-4f74-94e3-e6d278cdf653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464db98d-611e-42f4-8a83-231211bebed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa840ec2-13f2-44b3-a052-be95664bd948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff830b7-fa72-4a43-a85f-d935235196a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde8689f-2f62-491b-a70e-8eea6d4b293f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93fc6b6-eab6-460b-9fe7-caea8329b891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bb310e-6f68-4d45-a29f-6a24a2fc609e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d086bcd-6c9c-4264-9f8b-8bc488fc0b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc95a05-5f02-457f-bc3b-c9e8f9eef002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ec6eef-3695-49a9-9d0a-e67e15fe08b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef92c20f-f86b-45e6-8841-d71227c6ae93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbd7537-f683-4f8d-99c1-21c1c0b9e368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2767af6a-fad4-4a78-bf48-f17bceb2460d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b44ee4-3d89-4ea2-a9a1-a17f42361ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db45fbf0-a0a7-496c-9c49-2e4d514be3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650c821f-ad76-4f37-a134-4876ccad63a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611c011e-fb72-4698-8471-84870f9d2c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33d2f7d-6911-4b6c-aa9d-3209a184d919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4bb684-48f9-4b63-a395-758aa4e3de01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1008a0c3-c10d-40e2-a382-53d2e7924a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac16b65-3398-4167-82a8-8eb79759a053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc908904-4a8f-4e4b-9563-ea681c9f8146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0ea578-7e41-40a8-a4dd-bc56d7e6d275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe92bb6-1ddf-4e46-b52c-d687351c40f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8287120-f3bb-481e-a79f-70c90eac8dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f88a29-fd59-4737-b39e-45cf011538c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9a52c6-bb15-4e05-a2bb-334a10a8272a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac94a637-cd13-4689-8810-f41f5c79ee1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5d9450-bee3-42b5-a097-7cc3a85a4c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.204.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5a7043-2ed7-4079-acab-6ae897e5a993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fdfd84-679d-4509-b2c2-2e21713299bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d47bf25-2aa1-4251-b439-36804c89e953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a488e6-90a5-48db-8184-1b7306845b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88aa02a-52f8-4c10-baf1-6f79fe92768e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251891ce-cd4d-48cf-97cf-9152ddd6712b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a87f31-2a68-47d9-938b-fde3d929accd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa88090-d8aa-4226-a71f-d51df3398a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0544a89b-8353-4b4a-ac7c-488c69ea3f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97eb033b-e58b-48eb-8b1c-c71f76fff4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb931539-be1c-448c-b906-1f28ba64663b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a828e69-d21b-4ebe-8ee6-211256b56db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8278b1a2-4a18-42d9-bced-ccc592c3182f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac4913a-0791-4381-a498-651ba0a291cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8dd242-5eb7-4900-a69d-88104b46d184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821d96b2-4d5c-4b4f-a8d4-f720bc639c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3450b6-15e0-4ad0-bd35-756d922d6339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb1f19d-1a01-416e-b18e-ea080d4ee3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4b913e-2476-4d0a-8e5d-6b91bcfd0ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf47bc7-5c66-43b7-a476-61f54b901ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42797f2-058b-4490-9c5e-d0a8afee6b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3f8623-4076-4252-900d-f3727b1b4ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f487bbce-4655-4cf4-858d-48ef90383dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad86d67-5ab2-4425-8cdd-b405e33e688f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0db14f-5ed7-4cb6-b520-d330848789ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36878dcd-2b25-4ded-8306-216be765edc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86da62fa-ccf8-49cf-873d-effcada69dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b15411-97f7-4a2e-9fdf-b694f83e6248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.211.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0d1349-50da-4fd7-be11-5ebe78ecf55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596af8f2-5c33-4a5f-89ee-5595187cf540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd40a93-f69a-4092-af89-8e9f8b8db49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6616271c-0028-417b-b04c-cdebc107fa4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca1e48f-03c3-4722-8d81-b43ce5c90e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c291f7a9-0c6f-428d-af22-ab6a738cd643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7054598-bc48-424f-a45e-ee6afd11af6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc517cf-4f6c-4302-88ee-5f81ff8cc36e", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.216.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2ff2cf-8c46-47d4-bfe9-c710b2396328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8669af1-dbc8-488a-bf77-30b6336bb744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7d71ad-7d31-437d-bb74-34cdfe5abc00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cb736f-b3cb-453e-961a-498c87deefe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd4e1c6-c251-4c28-aa1a-94af3649fd0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37af24d4-bbbe-4797-bd6c-5312f79a91fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e532309c-05a6-4f4e-bddc-ffa5a361d485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cf7f96-2f0c-4224-852c-b2a3b310ccd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9b121f-f0bc-4b25-bd55-24c4ac1acb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc8f5c2-8ad1-44bb-abea-8c71f80b653a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6481b3f1-3ebb-41dd-8fa0-b15166808b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb8fe32-1cf0-4133-91a9-3f53491ee10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0407c1c9-c17e-4372-8b78-8100c195173b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aacf12b-013d-4d29-b94f-117ed37bffe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62accf95-a12f-4c76-8652-a276f670a812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042bf007-5526-4e16-b0ac-c7a547fabcf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef612c1-be2f-4081-8145-f19dbe7a09fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60aa01c6-5a9c-4d89-b5fe-cff939d49343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b58098-a366-4473-ae79-3e6334420c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c95269-479c-4f93-9535-e7ea957ab3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a6dcb6-e6b3-4375-a723-b9c7aedf3c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e10b800-782b-4962-9aa2-cfe37496632d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcddd554-ae13-47f1-9ab0-275e818fa9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24bd70b-dd94-4b02-bdd2-0a13ddbd846d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d4f8fc-f663-460a-883a-828900367ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c381a9-7d4f-4ca9-81f1-276a16721b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40420324-da48-49ad-ac20-62732e75daf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fe9b18-86ec-4474-b0b7-c49ffb48e152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3272631-a5b2-4532-86d1-b0f22d675d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d55ca5-9414-449b-ad43-e2171ce9570e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee12be9-d7f5-4e71-87cc-e8c6cb799a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63be117e-42c8-40b3-a44d-8ff422840b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf772db2-d2e2-4af9-960d-a437cba5d363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a2d05b-7a9b-4b08-975d-ef7870818831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020a0a2d-1060-4333-b05a-95dc91634cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da65672d-446a-4ff1-8c09-29c00f300730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5482d7e-7f28-4899-828c-19f6522c6ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8283bd32-9532-48ce-9d13-5479fbf7eb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a289b8-0344-4b81-9c00-38b2598256ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55952e73-89c7-4d0c-ae7e-4b9de5cfafc8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.254.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc167514-5454-491c-b5c8-379f05604f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.255.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e8da37-6923-4223-bc26-220d2a824c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.85.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe9bf77-5267-4778-859c-c736c8823a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.203.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fccb520-05af-4c20-b7f9-ce259e6f0153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.212.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edddc7d-873c-4e75-867a-3b7555fe9e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.228.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d55ccb-0030-494c-9c15-bee89d6326c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.243.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f341f0-b31f-497b-b5f3-7f15ab10dbaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdb642f-9c17-463e-95ab-5101166ae967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.197.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40857325-0ddc-4b1e-a923-ac7fd1d054e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d95066-d8d2-4097-bd83-772239427e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--194e03d6-8396-4bcb-8ecb-51110532eb43", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.122.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b907380b-124d-4174-8a56-f6cd5a34a02b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.129.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a254aa94-c5b5-4caf-9b36-4807f0b9be25", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.201.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7357dc8-7a03-46eb-a650-e6e1d03227ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.208.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba752a7e-12f9-43fe-b32b-6787d0f09289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.217.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9937e26-90ee-4dca-8284-feede82f68a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.67.83.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e3e1cb-f353-4d54-918f-503ca9c190b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.69.210.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b76355-5316-4f0b-8454-b5f3e7647912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.69.218.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5e0684-9c55-470a-921d-5b30b7db771e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.69.226.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c966692-db03-4814-a5d6-442a80a58cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.69.227.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e952b71-2fde-477d-a8b6-f80b844a2ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.69.233.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52bc450-c818-4f77-aacb-049c51e933f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.70.103.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d276f13a-356d-49a1-bbf0-d29d83a2f73c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.70.106.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e66030-13c9-4dbf-af12-8b2d717b1529", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.70.86.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1e0eaa-b8a7-4b3b-9692-1a8c985ee7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.70.92.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340e74fc-a5c5-4e5c-bcea-ff7f4a9a861b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.89.106.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92d9f8e-10ab-40dc-bbbd-7bb4c80e61c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.0.83.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b0f28a-7881-4711-b466-0ad6b9d56fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.13.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f306412-4077-4467-a20a-149c67fb5a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.34.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4552a38-13b4-423b-8d17-a0eb0ba91578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.199.40.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d43da83-c820-414b-b8d8-6ad3a6565a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840c17cb-1759-40be-abcd-df2df00b0bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.120.138.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb11a28c-8115-43ad-bdea-9e380c6a3a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.14.23.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141dde3a-7d3e-4b04-9729-83d00a43951c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.141.207.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c02e909-cc66-438c-bd28-8de6c70676dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8963ca8-c449-4728-a496-23df6021e8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c645058d-94e4-4a1b-9c81-61a3a9ae425b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.194.253.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56dd83ab-8118-4195-ace6-1f52c343ad1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7d662a-f430-45b0-a7cd-88c09514c77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82aad87-42d7-4881-ae11-585438becf02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c545a042-8cde-4a34-b93f-3a108e01c5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c56de37-147c-4c24-b767-79553a538fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d739142-2bf7-4282-a5fb-32fca2753461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65de7d4e-b282-41fb-838c-007703a6fdca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba1b3c2-3e9c-46c0-a381-6b12eb4f230c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bca6d3-4d93-4fb4-b407-c4340989921d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae85d232-e375-483c-96ac-2cb92ca3e4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78776c7-2ca0-4565-bbd6-ebfef8c7222b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ebbac1-d681-44b7-92e6-6ec3769e46f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b391f1e-a7f1-4592-bab2-f7b6287fd364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3362ef-f1a4-40a1-b7aa-23b6da58408e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.203.149.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2739930-08e6-4bd8-86c4-aae31a9ab503", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.205.134.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f8397b-4517-4ff2-9478-ea15bd3e9d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.209.132.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bfb326-ef04-4ec3-9f9a-e52cdac05bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.209.138.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858936be-f8a9-42bf-8211-f5673f787e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.211.37.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799246a4-252f-4b68-ba58-4a285606496b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.219.103.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934ea2c4-0b6b-4235-b0c9-aebb5baa06be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.219.121.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931fee1d-a989-498f-9922-b2c75661c468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.219.125.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f1d7ca-f45d-402d-9e9c-a09d074cb477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.222.25.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96623a2c-873c-433a-aa37-601d0f0cc991", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.36.186.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfbecf1-76ff-4384-8309-309cc8cad1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.43.52.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6ebb72-df10-4170-bfe3-e1c45c95b499", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.196.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5155a8a3-5182-468c-9f23-a2de5cbbf972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6faacc0d-7da4-46bf-939e-82c557a7ffc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a1580f-9157-48c7-b38e-316a21049783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd8039e-6886-4d9c-95fe-648537631b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c9aaaa-55b5-4fdc-acbf-f3ae511991be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2214eb3a-ff5b-450c-aa39-b11fa1eaff74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac302daf-b35e-409a-9188-39bff19ff171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce1e94e-a465-42e9-b5da-8756276578ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991bcb80-8305-495d-a2cd-5bad5670cdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8191dac5-aec5-4bff-b169-7a04214926b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8489f683-5a54-462c-b16a-92b64adb4500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ec7098-7c53-4aac-bd7a-d408b52c6ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd33f185-4b3c-44c5-815c-c679d62970d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8219ca23-0177-4439-84f9-17504383f20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be1a931-b467-4bf0-a425-31fa6da1620e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394963d5-e439-49ba-ac53-bd7446add436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da17d5c-8463-444b-9527-84832096b76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8fc91d-95e6-438b-ad79-392411b8731b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405821d0-ec4c-4a0d-baea-27f3acea7657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60455430-607b-4d33-a6c9-6c1a8f95647e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ddcf8e-0e0d-47e1-b517-54cbe5885c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ed1223-bad1-4316-b1ab-657ccb814fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522c3430-077a-461b-a7e9-d6e674877570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0435adf-3780-4981-a939-00f7eb91bba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e1cdb3-62fa-4ad0-8b3b-ee8e429ec7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f666fd-989e-4822-ba67-0dd6a85f3f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da572e43-74cd-4688-b482-c49342a180a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22837797-d139-4c14-8ee1-ddec1c2e99da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc840b1-9db9-4c9e-a05c-2cb1d1d77254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cd330f-5698-4928-a477-b2d16955f201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963b85b4-b1cd-4c43-a45b-22740df23941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71de108-383d-4edd-a3b9-767a7f835e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ccbb84-61f6-4824-8904-0f68c91c3e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40156b85-8d6d-4734-bb95-4f03820cc2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41a2a49-4161-4f80-a05e-d98ae58f1da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6066c2a8-69a9-4e98-bd05-ff865d9eac0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec3bb6f-effd-4dc4-be0b-b7f98252bdb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5557ee54-3564-4626-83b7-eff03b7c1ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530fda9b-171e-40ee-8549-11c55673cfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cbeaab-164d-4017-888b-99bba5039428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee967e85-fd7b-49a2-8fbf-0c1d1a814215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c4becc-58a3-4347-b5d6-2b958063c698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.208.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1642eb3-e7a0-49e7-b135-a33450101d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.91.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fba0f13-20b7-41b7-9c53-b39d5576456b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.98.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449db81a-dd9b-4294-b9e0-013c58df7324", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.84.153.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818e129f-6bd8-4c46-9004-4a6962a5fd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.86.119.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58731de-7027-4daf-8df4-df4134820b71", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.89.153.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca370f5-d21e-418a-a8c5-7692d5694ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.89.156.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96981bb-dff3-459c-9f3d-9b556953dbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.3.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f57538-b657-4106-887b-ed159e8b6fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.254.20.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad00366-a72b-4518-b908-9d1ed5e3e3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.146.38.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f61438-243e-4194-b36b-d61cc64599e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.226.170.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c4e69d-f34b-40a6-9a71-a6c568c4afcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0450c68-0bf1-4bec-b6f1-969750d31f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.16.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b3efab-aa9e-4a52-80ae-ef645ee296f9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.229.21.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103b1330-efd4-4f09-b1e4-6ffcfec2b78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.231.117.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3433b1b-4d20-4966-a9cc-ffe1d5c6b5f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.232.88.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc45612-e1ad-4a53-b6f3-2a6a88848676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.233.226.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f19d7d5-3126-49b8-9a4a-fbf0fa316839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.224.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4406674b-d30c-446d-a011-d19d3cbc4d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.229.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4c42f7-04ff-4bbe-9082-ca4151845245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.227.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491f63ba-3263-41c6-a5e7-acb6255428f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.41.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8e09e2-e000-42dd-b214-f2046066aab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.54.62.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f09c67-402c-4a95-8734-fda79c187034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19fed4f-1a44-46fc-9d4f-62f2055904c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.100.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a579581-6b2d-4e67-8122-7e24521f2346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119fd4a5-a95a-41d8-9b38-99672e3ebe4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.53.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165c433d-9869-428f-966d-a4a4005746cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.148.128.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f1031c-024a-4a32-85f0-b263c103af25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.100.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974c51c8-e9ef-4a22-84f4-1a804896fded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.18.176.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4838b03-0254-497a-b3ea-3d95d78855ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.211.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46e6029-8e2d-4c4e-beb7-e8eb4020b826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.229.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5d2c41-7ada-4780-a6d8-ab8f800b8603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.211.192.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11a9c4b-f064-4e02-a169-2fc41348e73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.129.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c3e4e0-61a3-4844-9212-abad3c9762a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.175.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59eed76c-3c7c-4000-9f02-3925b24386cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.239.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5109333f-1a42-4faf-9ed5-cf1241b9bb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.139.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8030d368-a4a2-4223-9fe1-a88a49463afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.203.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375758fc-2c5d-49ab-aec6-b91e51e581ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.213.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f97ccd7-8975-4078-809b-8912c75c7296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.243.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2777c3de-8c24-4256-bf2e-4ae032542ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ad3ffb-7742-4b32-8f27-f323b56a0f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78728bf6-c388-4a5f-b5f6-6616a5624ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.73.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4267bdb0-51c5-4b65-ac33-e0239eb7849e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.92.145.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0e4dc8-10de-465f-ac11-e2a65b44819f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.3.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ff2308-68db-4d61-b8d8-f4118171cdb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.67.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28715de6-3cac-414d-8d66-4bd0ac9bb9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.174.210.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794dd665-5f4a-4cee-9775-95699e4f9e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.130.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad318db-a854-42b3-8f88-d6ffdccb54be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.179.174.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ac1392-b088-4518-a5fb-1e2d92308c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.180.64.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2645d1e2-eb7b-48a4-8cdb-644b1b12fd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.180.88.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad639d66-f0f1-45b4-b4d6-61785ca8ede7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12736f04-f612-4289-9b31-cb62994fc9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.227.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c787880-1563-4f99-b71c-61276054a1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.210.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67825a43-f6f4-4176-ac3f-ddc84a060416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.100.243.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19362cee-f7f3-48ee-98d7-9df6e7a24b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.112.143.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55d9533-4b95-40a0-8193-ffb90993568b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.23.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d379667-872e-4121-a10d-9ae29a690af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.15.0']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90084be3-5fc6-4ad5-9e4c-5a301e648c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.44.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485a0556-91e2-49cb-99bf-aea1badde0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.57.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706e0d20-9cbe-457c-adf4-3ba254f12a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.148.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9bb7b9-9bcc-4c05-8d2a-4f6985d2f727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.157.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb93e51f-6ba4-4b84-a5b2-7362dbfe478e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.213.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bf6aec-3645-46dd-9c40-932029b9e73f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.217.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a544dbb5-ad1a-41ff-afcc-608551305170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.238.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a4c3ed-02e5-404d-b4f1-64abcc5e14cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.78.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ee70d6-991b-467d-9492-ff360d52e8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.26.101.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c979003d-83e9-45a3-bbcd-956ff6f5eebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.28.70.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6670ec37-b02c-4253-b337-7162368c22a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.54.165.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f1f8a6-f44e-492a-9092-13284bee1874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.54.181.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5413cd4f-355e-44b2-b3be-adf539fc92d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.120.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02964273-df9b-41d5-aac3-f2c9cc0e8623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.188.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4416177-804e-44a6-9843-6d4785f018b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.191.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932017a7-dab4-4859-add8-842df18ff1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.216.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240c9abf-fb91-4237-bf72-e5b01ba2479f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.240.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcecf58d-494f-4e62-8d03-0bc0311efff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.28.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685807b4-04ce-4189-9ec4-6103c774df1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.54.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af90c8e-75cc-4653-8a57-f9e430d14a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.120.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc3f4d6-6001-4195-964f-7dbd522da2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.226.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec26a3f7-1bc8-4f1b-91f0-c5b26f014d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.228.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc476aea-afee-42df-a2ef-852fabe04675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.39.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70bd96f-60f1-4460-9c22-63fb93341a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1c8d72-a749-4948-9085-4aee9c725752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.58.56.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7e16b8-f44a-4445-80a6-751185b057d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029c89e1-d782-4152-9198-01787a33e74c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290ae234-195f-44db-9e2e-337c30a4104f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d4e9d5-a62e-4b12-a72e-6c23be82a291", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1ab0f4-2147-46b4-bb8b-96bd85ee216a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.16.124.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f321431d-589e-4eda-8269-f83155857723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.16.241.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51f9e34-f3e4-41eb-879c-133777cbd218", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.180.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca6fe61-e066-40cd-8e9b-b54b39de0dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.40.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a3af6b-921a-4005-8b0a-bf5197999dff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.164.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237b37d4-4ff4-4197-9d0b-6183d481d693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.245.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135875cd-acc2-4e76-8ea8-3efac3db74c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.20.247.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba322a82-8e24-4add-a05e-c80ed8ed3ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.22.160.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305619f0-64a0-469f-b4d6-275eea5a3838", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.169.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ea2f8f-3d5f-415b-9c27-721b2b186d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.181.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9eb0c5-06c9-4129-88c2-cec43e4bdab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.30.192.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2ae5b3-0b1e-4c1e-bdb2-2fd8ad7c7bed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.10.68.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87a2b84-b104-4893-a4e7-3e75755ec7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac764165-6503-4e71-a0b2-5ccc4ad402a2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.33.206.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537afcdb-9363-46ba-9d4d-c61b0892df16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.33.24.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0159ae8-e21c-4850-8ab5-5488d4998c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.33.91.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89937b0e-ae14-4034-8feb-ab07e6dec02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.169.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceae323b-d221-4789-95fa-05ecbfc74781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.169.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3d0a74-a679-4eb0-ae3c-fad67da9dbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.190.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a44c26-2255-4f4b-9d4e-1dbbf7df031f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.220.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59465dc-6d78-4e85-bc54-d853df85e439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.230.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6893b6a6-4aab-4fc6-a626-9e76ea7291b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.233.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0b80e5-aa40-414a-8daa-3290220c9a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.236.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f670b162-aac6-4ffc-a7b0-10f1acc1a74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.3.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858f4a62-84f6-4242-8d9b-abf227249dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.5.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9a3797-9d4c-4ae0-ba55-2b93e39103d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.65.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc2f220-7a6c-44eb-89d2-586cf9ed5531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.85.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf8d23b-57c0-4b7e-ae47-23834a5ce5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.211.229.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fc8f43-27f7-4867-a4d7-d34539fe674b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.211.231.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d659909-6177-40f5-9428-9abcdc75f393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.98.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f71e17-b0cf-419e-b299-789ed9166b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.99.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c2af82-a95a-444b-ac8a-d34bc4ba149c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c73c6d-20c2-4a12-a572-3de9e0afd336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42534a1-b453-4703-a077-a42dd52ba674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbebcc59-bf06-4eee-afd5-ee4e7f293477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404ea64b-eb30-40ba-a8dc-94a4576c106e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668fc8fd-a326-466e-91ad-17ef7ea918a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a26145c-6fc7-418b-ba66-db0487b89ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2796529a-7405-4a65-a882-861471c95145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c7ab7a-7ae7-4bdc-ac87-945d38b14413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--282ec95c-be51-46e8-bb92-9237c342d8f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d88e5b-61b8-4a01-b5a7-76f6f10cd29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a6c9ad-e6a1-44d1-8c89-2e6cae218207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed21067-d40a-4441-83cc-e4f68775db93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f8f2d8-2c54-4c00-9d71-a586f6502681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb50f34-2e14-4811-bf13-4861cb13c2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8de381-2c45-48cf-971f-f572e10ef76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75a4bd5-4b62-46af-bcca-fbe5e0081c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38d4291-2a98-4554-a6ef-42a8b266300f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbea30a6-ad16-4243-b863-a2ac69c60da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1dfca47-05ec-452f-b017-95b921e809d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7aa255-715e-4715-8e9a-c6ba834e639f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55352a3-e11d-43fa-945f-5e5ec5762333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90bac05-bc6e-4314-92ee-da8e7031b340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b7b993-755b-410e-8c8a-80cfe9568e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a0e755-510e-4e84-bc30-ee7580f5de3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f2ee0a-c5d6-4cde-b37f-803eb796146b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2425ae00-4203-470a-9bc7-8c79bb56270d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a7062b-4695-4a8f-9f07-b8ddd1e25916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2e8ec8-87de-4f04-8b50-9563cc624fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89bba1c-23fc-44ff-ace3-80f4201b99ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cdf8f6-84f7-42d9-bab9-8bd3fb3f342f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0283f9c2-fe1c-408d-8e21-fb5fa5dd3542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65ea154-90ea-4776-8982-125061a1b86b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d5610e-e195-46de-a758-43dbee0e89fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74791f92-f6bb-4a99-a004-f35817f2a4e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3839f7b8-4c10-4b5f-9530-ce2f7008e99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8694948a-9013-43af-8f04-e6d41263b8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20e9cf3-bd55-43a0-bd5f-e3380e6f4191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3d3610-fbbb-48a3-a3bc-84be87b12af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d304f23-c2de-47e7-bd39-8d834b1973f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04995d2b-f310-4bd2-bef0-84996483f755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae3b5d4-b0bf-4a67-96e0-fafcf1d860b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7de905-f8aa-4be3-8605-0ed8744fbb99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643ebdd3-173b-43e6-b9e6-56717807099a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14993401-1f65-49a8-a0ee-e22a8d9a811c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b2d371-55fe-49aa-88f6-73a58bc4fa3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16c2693-0e21-49e6-a590-51ba94eb3ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81acc09e-e865-4533-9090-155c68ee3465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1082feeb-c80b-4818-9063-3835851e90f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b4aaed-0def-4f5c-9dc9-6b04b7b2a3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bf3c57-71ef-4992-b66e-c1f75c7de326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26556611-bfa0-4787-80b2-7a1f0e62811b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b71185a-cd91-478c-a8bd-aff95ee4ea71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46f5d58-cbf8-417e-bfe8-79531d161869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0adbbf4b-7449-493e-8316-fe2c55066279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c4f4ac-6e1e-4b31-951c-9c1b8e1778de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0373c37a-c213-4878-9963-7abf59214467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff7faa6-875f-46f9-ace1-a6301fb108c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fe8d45-7c9f-4de0-a91a-31d6a00aa8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f365de-7639-43a8-ae17-ed05d71e5844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd11ad7-78bd-4f6e-b3a2-76f51e3b0daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51b80cf-6b83-4f4a-9f89-d975f3087f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1492545a-32bd-4eed-b605-d2c983f6245e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4576f6-d173-447a-8e4a-170ec8dfa025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfd3efc-f355-4872-adbb-9c2bc8542b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28eee2cf-df4b-415b-b5c1-b9e38c06f42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce96ef6b-fc55-45f7-bb0a-c98404700b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bbf8e1-2d9a-4870-b284-0d38c13feea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a2035f-afd9-41f2-ad36-da56248364db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f68ed45-45b7-4981-9143-bc38b04937ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e95531-ba44-4f76-b355-d0e87606a97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74035121-cd25-4875-9635-64f5ab6c8287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dfb8b1-1a7c-4d0c-8db2-c100b730ce25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b31d03d-1863-42b8-9142-aeb9e33f7a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf28d43-1fd2-4f0a-b0ba-6539ec057d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f09d8f-30c7-42b9-9fe6-81017f1622ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111ca2dd-4080-4064-a94d-ba81e31798fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3aff12-d18a-48bb-94a2-54441d8de641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4618d4-7c1c-4586-878d-aae162d6d9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19aad48-bd89-4a0c-b630-8722c0b7d5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4ff11f-626d-4ff6-8573-b342ce6aa0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4234067e-6123-4b0d-8234-11ca3544619a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ab8555-1238-4e7d-9d29-fd881f664253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d014b63-ed98-4ec2-b1c1-1b36e3623135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb6ca5c-bf59-44ba-8b9a-a9f89e03a606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70b941d-8123-496c-9a54-92c4872821bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b536c9a3-a407-42a6-89a3-97d08968e694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5fce41-fcc6-4558-b80b-e1095dbe3820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe8dbdd-d07c-4794-a4aa-406f43fe3b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c6da03-d872-4307-b7da-249f72641dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6710f945-6593-45e5-9624-13e6cc4cf9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67d704b-e80d-4442-87c0-b80baedc41d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a398ce60-779d-4f68-a40e-b52bac1121da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecfb4b5e-e22d-41b0-b8cb-53fa51bd786a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed74621c-b2d8-4737-b44a-7cda2e3c2fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df00ab5-64e7-4bf7-9b8e-1732813a8ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6098f8d-9247-4780-892c-01ce709468a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b535701-78fa-4339-a6d5-a7ecc0f2b890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc1e0f4-31fe-471b-9a0b-2608ca651567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6e62f0-9620-4d09-bddf-125d0d505f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac478b5-9017-4d14-9136-74a0bc36a492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce33ba8-8fbd-4a78-9f03-bae87be3a228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a8bafe-d620-4ccd-8e3d-c72576c15012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3600e3-e203-4a05-aefc-bab9c553af8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbce4c22-d330-4f73-86c0-daf3cd91a214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae2cfe8-ef3a-4176-876c-458ba72e36c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9107a5a8-f813-454f-a096-38a8fe873bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e65b12-e6e1-4f6d-8ec6-68d82dae0628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c7bbbf-db09-4e8e-b838-3c34ba188328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abef815d-578c-4cfe-bf41-965e39560113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2076e36b-4aa8-4d3f-967f-14d069da4457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa0995f-c480-4a7a-8f30-5a6987f84e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286ad1ee-2ff5-44b1-a23a-e3f596c088ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac857453-175a-49f2-9c0e-ed9aee30a825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f6dbb9-affb-4660-bd78-70b458615ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df4f227-bcdf-467f-a276-1019f65be8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d0dc89-fe9e-44a2-b5e4-ca340f97a418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9de5b87-a711-4eaf-b3e8-0df5b3abed61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7be68c-d622-4894-95af-984f69243815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70f73de-0ba0-41d3-ad47-2a0a81177904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61799db-e8c5-47a8-8ad6-9f7d7748df4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f392c20a-876a-43a6-8609-e0026b4b881d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32a2234-ba54-4c94-926e-4f59826cf7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27acadcf-6c4d-474f-a2e3-b6d54b74be23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71580d35-1b5c-4a14-a622-cbe5f8ac2a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd87ea5f-854c-4251-8110-b4489d4b6564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b34072b-6bba-490a-b0da-b4bc2d02c1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc00f32b-d66e-4ca8-a2b5-fe1553d61872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d679e8-5356-42a8-94bc-2d091d6d2d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2065744e-293d-4a61-af53-3e4283c6fa22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40572bd-1fc1-4805-9dd1-9bdb0f2cb2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65db25f4-f68f-48aa-9d2b-f63df73422bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0fe775-1875-45f1-a05e-678c3314c7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5d04e5-1c7e-4751-8e5d-68ada06f630d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a365e3-1910-4cc7-a538-8384efbafa54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9c1c0c-9c6d-4260-a373-359e30d3ca40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d199f63-af4b-43aa-90a2-a41df45a4bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eecef33-3a06-476d-993b-c9ecf4fda71f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af18f23b-ac31-4a8b-b2d5-b0c8edf373a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c41e02b-0b3c-4be9-bf09-fb4734739e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94ad79c-6177-427d-bdf1-fc5b97eaa311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68fbdae-d0be-440e-aad7-effa355a41d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229eedbf-1c1c-4bea-a838-183e7bb9caf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d708ad-dc3f-4f2f-a8cc-35f0165405fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8776b3e3-7c71-41a2-9469-a054fd46174f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f03dd00-dee6-4f86-952b-d9c86c315817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880a74e8-2318-4ce9-ae59-811fec654aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff47d17b-4ed5-4b29-8395-a11efaa6cdfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec63f9d-4588-4ecf-8991-b34d4a06451c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc10a2fa-41ff-4b37-914e-79620153fe96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81ce2b5-6b4e-41c5-9d79-1d6fbd434174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aab38d6-bb88-47f4-a1fb-0ee3fdcca164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c870d25-90b7-4ada-9f9c-a4ea03bc7f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e123cb4-fd0d-45c7-8cdc-a8f6f1eca84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01254994-9cc8-4a3a-8b33-435d7bb57064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d168712-7cb6-4559-bf0a-8888ab1d12dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc91d29-4d2a-4a57-945c-2c65ead73b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6de72b-3d42-44e8-9a7a-fcbe2ef261c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98383c2b-61ee-485d-a65b-9df608f7b4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780f26c0-f45a-45a3-8e79-54d6980458a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6602fb5-b83d-4a64-b067-3e97499dbf8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7eaea25-539f-4df2-ab0b-606d0087ba9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101eb55e-f73d-4b1c-aa8d-bcc84d591161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df81705-d7d7-4e83-99c5-a12283c568ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035f98fa-51b2-464e-ac8c-064979394930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6cee52-0998-4e46-8b62-75cb55e42911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fe69db-b0eb-4799-8523-440b6e408d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db451a55-f5d3-4ea1-8b58-199549bb628d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a2119c-469b-41a2-b6c2-8bb90186b12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb0909d-c3c9-47af-84ee-fbe735c1602e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62097ff-6492-489f-86e1-6b06e23c0888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95530b71-1de0-4b46-9284-c846382edc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6121079f-34e0-437e-972a-4f4e31294e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeff1b0-0430-4753-ae0c-5803b1926072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bb7bee-9b60-4cc3-9238-1a19611d71a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ea09b5-3f69-4874-8bf3-00c1b512a0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a634389-cbe6-4ec0-ad6a-83ba5f05e803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5352c9-b76d-44e7-aff6-e74ce3a186b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a752050d-40b0-4801-924c-af67ed22f387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3689b7d8-1ef6-44e3-a2a0-1df77b5c3433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fdca360-1def-4fa6-81e3-32cfb4d48b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea707c4-7c1e-49d2-ad84-09877e2af7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92854985-ec61-40ea-8968-0ea21c28e584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d76992b-d68a-48aa-a242-eff7236f12dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771e49a1-2a41-4c2b-9d5e-ae9484a19d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cb5566-5029-4b73-8f8b-334a0c9ba4fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa0eec4-d70c-4ad9-986a-13c0568da78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf816bd-f73c-43dc-b18a-df3e35697e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c069c1d-e730-4038-8e2b-b1c481e82c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b759d301-8cf4-4516-85ac-45db617ad903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85d285f-7fcd-4742-940c-9698f12347d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1aa8ce-a505-401f-9f8e-a9c208963eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83eb6058-800a-4109-90de-329eb6daffb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0216edde-01b3-459a-b1b9-18482e0b345b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14725dd9-fdd5-454d-8bac-c20e954de9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d4492c-a99c-40f7-9b7c-89d1d9a9a680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6c5564-eaf1-4696-a8ed-41364f0f4c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfd5982-4873-4bb0-9640-af7e0c7dd264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229e6f50-f0c3-4879-93d8-f5fc36ce880a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a6039e-1e4e-4dd5-89fb-a5b54cd15a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1a4f82-96b3-4066-8524-51acc9ee2551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed49f088-d650-4777-a86a-2b494ca129df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce971ea1-8962-476e-bd7b-4045fd308330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f098a552-7573-4960-b687-254f633a6be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9ace66-1b39-4b50-ad31-4b12a6b19c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e42168-faad-4f5b-a975-a83c085a19f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9309a1b8-0856-4a3d-95c4-1754450a1cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37e398e-46a3-4f1c-ae74-e697388962a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e932f68-5cb0-47fd-95ed-78ae6f6355a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3070d5a-85ee-4c89-bf5b-fde418ee0d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85d88ac-e7cd-4cc1-bce6-6e7589c40a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee8be2a-3563-417d-bdf4-ba1980b694d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d239b7-bf86-41c8-8a16-4df213311cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79932179-5ae3-4ec3-99cd-a5baffb55aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6e8e8b-e167-413d-8395-3f63618d3be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d28670-73c2-4edb-b28f-6c16b2867f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e12b3f1-036d-45a2-a887-b663cd0d478c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4daea3-ca6f-4d6e-bafd-fdc74c9211c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f0f6c8-068f-471f-ab53-71b855f0e2cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986c2228-87fb-48b2-8600-b4dc0798a7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4a484f-aed3-4e30-ae42-bd21680323e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a135adc5-9adb-4617-ac73-a3b0fe01b178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7fb375-bcfd-4235-92bd-d3630e647f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3059f668-f224-4cca-b2bf-7f770ab70d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48b9337-21d6-4b3f-b6a6-6f7916572952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e1eb89-7362-461d-b27a-d44fc9a5f4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78465e65-2c26-4448-be1f-db0f9089a412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a719d3de-0b3e-4c7b-a9b7-e55043c71202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0c81b5-77bd-4b92-88be-4d3aa1b1f0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.174.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3fe06b-d5d5-4549-afd7-36c2e9d75cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.242.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bad6cff-7bb2-4de0-9a62-72bc2c034867", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.252.52.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4d9bbd-708b-4aa5-9ec1-537972e990ad", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.253.66.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b85f51b-fa1d-4f0d-8f0a-a9c2967ec858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.35.163.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a31c64-d44c-4ec9-b1e3-8ba8423334f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.120.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8809b86a-dadd-4775-9ca2-0854dd705ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d53cb89-d88a-4ebf-9520-cf71588857aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2841f51-c480-4e88-8c66-89082c87f126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.227.160.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d444242-80c8-475f-81a9-9b8c8fcea37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.30.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f98360-f17e-4ac0-bf1a-a9ce2bcda61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.31.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fba32a9-e3dd-42e8-a4bf-98ef7554a4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.31.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e289219c-6804-406a-84f7-4d84db3fd125", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.8.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1840cd93-e320-4ca8-ac0e-00497a2b6223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.138.221.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83821c6-2f32-4cb7-9a46-0a5e63d32ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.215.103.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964181fe-fdd4-47c8-af0e-0ea553e978aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.68.108.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d3cb96-4e1b-46b5-b6fa-fa046fd85463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.176.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392e3f93-7441-46fa-9d89-85d6b31e9b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.190.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686d0b0d-b2b7-493c-a2c9-61cc9f8e9b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.117.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74878b07-dea6-4f83-9fda-59c4ac598023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.138.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31593631-f80e-43d9-9493-8f1564abff9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.145.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a019ac-38c4-4f82-8ce6-a7a37ab19d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efc1e41-f29e-4ec8-9b3e-2feb7f55c160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.182.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45590e89-a747-4580-83c5-f5dc1c9f590c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.222.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f5f495-32e7-4aa7-b6a0-b0f6a6d2cf7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.245.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a1cb7f-732a-430c-bc0b-056642479c64", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.1.64.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb964c8-3a62-445a-b8d6-6b9e3c88f7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.1.70.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9ab998-3cac-4d9a-86b4-6be658eea5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241b9eb0-d8dd-4ee3-b639-749fa431b7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb97f52b-369d-465b-814c-1b6203a5e358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ce57b2-7348-463e-8960-a6e1cada38f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6c9c8d-86c8-49c8-b82c-61035f1bd042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c749aa84-3cf6-40d9-8e78-c8c889463227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18400488-8605-4228-ae9a-04a762c7235b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.105.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a465c456-8b3d-4627-8d59-7774785e2f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f682ba3-24a2-4056-8e55-933e17c0681e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54aeee83-9f15-4976-922b-5e9da4d843d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a66dec1-94f3-4ee1-8278-bc1946de75c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269583a6-f1c2-42f6-9362-70e390119ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a52e76-dc69-4a26-be92-1d87b1b217dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877ebaaa-c2e3-4678-b34a-12d406242ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75590a34-6bd6-4196-aa4d-7f4c8497db93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb3cd4b-11eb-4a22-b621-5da658469cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e20b501-3937-4b57-9561-9ad595d6c7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.118.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bed732a-fa1f-4a1c-898e-a9695ff0c894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59e0c33-a0f2-453b-885e-97ef9a098586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe16e57-6fa2-4d8e-a3b9-a51af24ef66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db62b81-226b-4e7d-847f-391338c4a0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0272e215-e9a4-43f0-ac53-7525c7d35833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a41060-ea23-42f1-8cb1-fbd64ccfd25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2683c546-61f3-4305-bf62-fd3be10f0544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e05f6b-3bb3-41d2-bb2f-ea47e33cbf2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad88a8d-3a41-4f29-bb2c-29a9ee30a2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edd0829-9d41-460f-b170-3a6e5ec15350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a668400-c1a2-4d09-8df7-b0ea02713b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72415827-35be-4aee-9403-ad21d6da94f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e83f2e-a871-4b2a-aaec-879662088964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20c46cf-5159-4f3b-abe0-a359f89a256f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ac77d9-f492-4bad-aecc-e6a9c27139d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e387d371-3733-42dd-98db-0f8f9e062c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d3d20b-c4ef-4142-9d5f-0379e5c7294d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075a20ae-7315-43fe-a85b-ab6b042878a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5019afd3-c83d-448f-b967-fabdb4f08883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfcd380-28fa-4494-91ee-6b75e9b435f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4aec7d6-b299-4323-b277-a85a52b3b9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bef7452-a49d-4b5a-a603-9d724d635f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bbc128-6914-413a-88d8-6d57bbe7842b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee59d1eb-d9f8-4aa4-9f3d-c67ca524b7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd7970a-a196-4162-83d6-95719889bde2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d7de05-2eb5-4044-82f4-d3e8f8908976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df75cab-f199-488d-93c9-21a0833d4df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68639f30-097b-4cc7-b2e9-2ce4091caebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831f4e87-9dcd-46ce-bc14-c8e1d6a8bb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f34fd3-d43b-4387-89c5-ba3422af0655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db535e39-e3de-4c1b-a3ec-6cae81766aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225a61e0-b900-4de9-a8d5-901ba43b05f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99a70e4-3ab6-4e33-ab43-fd1c7783eac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ce832a-5364-4952-9400-4c0634dd5b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a08ad9-3337-4e90-a407-23b2b3d9cf46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71005d3-d8bc-4e67-bf52-6791ab0e7fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8738b4-c7cd-44db-a971-c441f4d30919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.136.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b89163-c3ea-4613-a2ff-8b507db42b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f229b1-83d8-431d-ac97-9ba952c0ce0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149a37ac-1c81-433e-b8ec-3a68b91d8213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c130f5-9de6-4e1d-b328-614a67f74b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8cff57-ee27-4524-9639-0cc9fded0536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf83fb9b-ba92-462c-9b96-3cecb44cb980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3992ab5-4804-4a37-820f-4f91ef907b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed44522a-7d56-476a-b2ce-a14eff07bca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9b1b8a-92d5-4317-8a05-884e4a5398c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.152.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c7ce2b-53a0-4ddd-96fc-fc823721b7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcd164c-58dd-4ec5-92f0-d0223af11ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2ead92-3aed-431c-acc3-f18a1855a13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c286e7-2d2f-464b-af4a-70436f4023bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870e6758-a03b-4272-bc19-f5891782f5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebbeb90-51c8-4179-9aac-af5369e4a2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d742045e-5b39-435c-b158-3f336ff4afd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41415f2-d1cc-4fbb-a7d0-9a8a3fc1f002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04ffdbf-be8d-4fda-ab9c-fa0daeab4bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0276a1b5-3cee-4e6b-942d-ffa2f0d51c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc37aa87-bf2c-4f12-b113-0213b5706dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759d7b09-f0b1-4ad4-83d4-fc9ce507d462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b0c940-bb7f-4821-9fc6-402169138ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798060cd-0dce-4ad9-b485-ff5fa436a98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc73a3e4-946a-4037-83e7-dc5858a8b376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6802f6e0-ec87-42a5-aabf-84042f760859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29424767-2d99-434c-a316-3c4a68c8354f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb901a9-ae7e-458e-8082-adbb08fc327b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0810ce8f-7e1f-45ba-b98d-23ca7e1b5242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8a4274-1373-4ab7-a4cf-bd9292d786d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ef4dc1-0578-4e97-8898-f7d291de46ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561d7691-86ff-4286-b989-2882d6c3fb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c667afc-ed50-4c69-a029-b7a50ec1a92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a18a8ef-3eec-4d59-af49-98995f5e5621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8b207d-4a80-4ef5-ac6c-7f0a98dde697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247a6693-3371-4ed9-83d6-cdf0f1bfa1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ed0278-06f9-4068-b4c3-ea2f1ffae2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b483a8d-d213-496b-b478-664f1e461c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3cd938-d813-4d0b-8bed-0417fa647317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c18014-26ee-4aa5-a2c5-14ebe42d7ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2572b4-67f0-44eb-a489-22d584590d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000eac0f-5261-4edb-8a2c-d973d397fc21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9557ace3-cd4f-4055-a5a0-7003d9c5b472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c769e1b-4116-462f-9057-07e42b4fde73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63110d84-8196-4554-ad89-f04220bfa3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7c477f-fa18-4f63-95f5-0ab149fdab30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da05b64f-c939-4c76-a5db-044ae047419b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74db6ff6-0835-4511-abe3-6b429a182cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1cf0b82-b01f-4e80-a3c8-13e4298b4b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fda1a5-fc21-40d8-aecb-36d1a801f3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b0a14e-2706-4a4d-83d1-f900f52d36dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734435b0-f3d3-4025-a792-abb16856b006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f31c91-ad82-458d-be9f-f469ddf7f610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e533980-ef4e-46af-9eb3-a1acd44f73b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef00d126-a82a-44db-96a2-df15bb96da4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cb490d-b3fb-477b-a94b-4082d2c4ac64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0213352c-18d4-4f49-81fb-5d659263191b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd772a78-393f-4dff-87ec-a4e594fe5a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fc06e4-696f-45c0-9490-d1411b3267a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de75ae9c-25b0-45c8-a434-ebea007f836d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b32fa55-e6b1-4517-9371-fbb98c2364b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de46d86-b1a5-44f7-bc0d-0af268ae098a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bdd880-c0fb-473f-af04-e3f2f308aa02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece3bc25-c453-4cf3-b22d-90bf6b54f6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e571a59f-bbfd-4695-9e5a-4b4d94f23adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8e2252-e112-481e-a784-80f0c5cffcb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfffa350-d882-432b-a747-57835c1dfed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c07021f-ebc1-46e4-bd6f-64528dc48183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6abba6-e78c-4aa4-b8e8-235aaf93279f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eacf18ce-b1e1-4031-9fe5-03d813ad3f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9aaf0bd-89c6-46b1-a795-cab27ec94534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb212cf-3674-444d-938b-a919f8a6a2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8a675b-4c3c-4510-aa04-4fbd9011e6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30305ac3-8fb7-4c10-a894-66d2cfb6386b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270af45b-b46d-43ee-99e9-a96e5ad9a902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01a2c8c-492f-4720-a66c-5eb255d4079d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f67fd5c-1722-487e-9111-09baf9c41c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f5cf51-5199-4990-809f-e789accba6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea1ff03-1cd1-4ea3-b32a-01fcdbb2d119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8199a0c3-f2d9-4f4d-a86a-1fc23b1b390a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbd2f92-c09f-4fc4-b32c-9cc23a7b5074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215ac019-f921-45f1-a512-b9824db9fb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7b35d4-147e-423e-abc0-b1c0cd001ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c975c44b-1b7c-44d5-b12f-4a9021b592e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace07b9e-936a-4222-80d3-7ec5371b8864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b8b712-5c26-453d-a041-e7ecb7e83a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49caaea6-afb2-4af9-9b9c-83c030d8c0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f585151e-222c-43b4-9b51-4471bf20e425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9809e054-9edd-443a-8bdf-b8860ece518a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb82bdd7-c113-4a4f-8611-c6ae6887501d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3bfdf6-b0f4-45d2-9131-c1f3b2b88346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d48a6ba-9f97-402a-a51c-d25eb4fbabb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d7974a-56e5-4c0c-abb4-1074f4c40abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5227f0c1-ea7f-4ef0-ac74-f61fe27d9164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8705e708-8687-4ba6-ba60-8e9789452ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a60dff-4cc8-4a07-a7a5-a902b35ceac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b028fd0a-eb51-4bff-b87d-d01908ff70cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bd7ac5-73a7-43e8-915f-01dfec10eb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271fa86d-5aa6-4f5f-91ff-ea95e41b8014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdbaff2-4c9b-45e3-8d6a-563dfc44e356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73ee111-6710-41e7-adfc-6666da3d4a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee901b84-6e09-4b07-a359-949cdecb5d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df95e136-532c-4bb4-9b54-ac8c7872c8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd54d353-3033-4392-b2b3-bff918a3a67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4680a1-c648-4149-a3b3-823658215dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc7cfda-d06d-48d2-9821-ac66dbf6ddf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5490a6e2-6f20-44dc-818a-a15992df83c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53d01d2-9abf-4f19-bd6e-1cb7794b28b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.179.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8e7476-9b24-4414-b3ee-a5cd3f1c125a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.179.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5fc4ac-8b13-4aef-ae01-cfdb3b4fdc99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fae87cc-9a6b-4d47-8f0a-7990412d413f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e6270e-19c0-47dc-96c6-1573adc02e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d6b608-0e61-4682-ba9d-659961f50d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfa4825-65a5-4af0-b571-34a582ce01ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14909ba1-b257-4d56-9d38-449339998386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71aa7815-6f58-481c-9fd5-4369bd959c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3ab03e-d083-4017-8c88-ce6b6621d96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8320fee9-affe-40db-876f-2f7074d3b7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d03c969-0bfc-4410-80bd-71a50a123f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfafd45-5535-4e57-89ba-45d99a1e9dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889cb13c-f8a4-4aac-b586-50b2a04f6c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f304eb-c657-49e7-9adb-ecc0b66f80bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc532ce5-1fea-44a0-981e-84f31bcfdf5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d289d84-c10c-4796-93ec-2050109d3133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461967f5-fd8a-4b6d-9071-e382d0d42c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02135653-06c5-4295-8448-d074c0a6ddff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da05a37a-404d-4418-97a0-bea18d399f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3125a0-3239-442c-88ba-c7a5c1d7d65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a38ef8-8c2c-4bf8-81aa-4b1dcc0701b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e75d4e0-b2c3-4dfc-afe5-2aebd24bf57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e2c89d-8069-45be-ac25-86e2bc72e6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.200.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1153f1-c228-42c2-9cbd-60b95a1d92ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.200.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68cca0d6-15bb-4220-a25f-4c69df627d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcecbdcf-2742-41d4-bc60-d15b0c16f756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517f7d36-705c-429f-827a-f07dc8f8c65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66683818-165a-480a-8de7-f826ac990ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02381593-38a0-4838-b4c4-1cb2861b88e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842d6aef-6c27-47db-a364-a3de77cab44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee4b2c1-c8c1-44a8-a0c2-705c1c9a926b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975ce9b3-e742-4d19-a831-2bc53644b934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d78ef4-fb33-4cc3-8714-b994b1aff123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ab5d00-a11a-4cd4-b482-d33fa40350b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5dc537-013d-4861-96f3-826eebbbb115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683812be-ac39-4f2f-ac54-40b314fbbb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88edbef6-80ef-471e-9108-08567db346f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46df4253-79ec-4448-aae6-85aa1b922ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b34b578-8f58-4f00-8951-8000cdd993aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87828cd6-736f-4cfa-a368-0dd8eec10d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26348672-1b10-4759-9afb-3bc9a5755d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08990287-9470-49c5-8bfd-57f8cb3ac8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cea49f-6e85-4e2a-b104-9d9a9565acd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0265604-3b87-4c69-9339-e571d1f8a71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7456b7c9-cf9f-4293-acae-c3ceeff3a180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12c5126-a726-4e78-a34e-ca8a59e55c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bd2f3c-6185-427a-b829-51c104b0f984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75d5563-09fd-4628-8887-55f1959b9e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d886555c-aefe-4f6b-8604-73e582268862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d688ca-fc08-4d7b-89c7-00c0bf0c35c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef7072d-b7f9-49ab-81a8-f5aa302e8988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18aad387-51bc-42ea-a307-567f90f3400c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.221.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1811483-9317-4008-9d6b-4d1be354c88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1aa937e-99c8-4e09-aafe-eb98b56d9294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b7060f-2135-4d66-9807-22ef14d2c894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba12663-35f9-48f0-8e0b-11cd5838281c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f2ac47-29f2-4396-bcf8-4acd4e6903cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a3c966-4663-4583-96b7-7a454f495dbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8d0e43-b4d0-426a-9a0d-d0268fcdcd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5a140a-a729-45a3-9ea2-3bb86e032015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7cf21b-3c00-4fe7-88f6-e5d6c261cd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fefcdce-e025-4ba7-a25e-cc2cd6e54557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b17ecc-4aed-4067-8313-f8fe2454f1ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5993ab88-3bba-4808-a034-d43c5860006a", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eeb94e4-457a-4781-895a-27af271f83e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5facc4-dc51-4ec0-85f5-337513b257e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0589683-b7ef-4297-ad86-377c2c216fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49390a3-b46a-47bd-a75f-1c41ed52bf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d68172-acf8-4944-8bae-f972ae414f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18342592-326f-41f4-8556-d9470a8ce5db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532c6b6d-ebac-4392-85b5-ec23c8feebbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241691af-4ba7-4017-849e-bc8e1002a237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a83779-5dde-4d5a-b7b0-e58219440f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2b1d3b-8db1-4434-b50b-df3d8f87dc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf9131a-ced2-4d9f-af5e-c85ff51628ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272f5446-7fb4-4361-a354-0c76587df90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37eed7aa-a6b1-413c-9498-45d173540955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41b6719-a3d2-4d60-9336-9c986ee18a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67948e89-1048-42fd-b878-27456bc2b96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9d9734-3d2f-4d1b-bea6-5523c6688301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3993b237-b9c8-4dd0-bcdf-1df391359310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2ba66b-49b2-4559-9290-d6ed807a7d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b20a81-8636-490d-b7a3-cf916a0e96de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfeb20ef-7285-43fd-9525-eaeda5510cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a08df4-6c95-4661-b74a-e7c24fc092ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad06540b-c585-4de6-8f24-51774ddc2de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37acb1c-4307-40cd-b4ca-facdaff3ad48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae102536-67f6-4999-803b-a857049c6ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab518ad-859e-450c-be74-f11855be1d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886a2a14-6b2a-4cc1-86e5-de59f28247f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7724660b-3483-44cc-8b37-fe2b6ab78057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.115.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48493761-0a47-457e-8a25-b5ef2957881d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.47.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79190242-ca1d-4fdf-a97c-525181516b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.57.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e93ecff-abc4-4bc0-90c3-466208aa4fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.130.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd505c4-4067-4cfc-b2a3-9a68701fa754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.209.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76152059-3972-4aae-a693-0cf9d714fe32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.236.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c320110-ccca-4a41-b84e-e9d285ce19d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.47.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb762e36-ecd4-44ec-ac9d-415ef644ecba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.62.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4aaf8d-a8a6-48cf-8c14-e161d3bb6301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.118.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3be449-6b34-4a30-8652-ba7a8f86fa90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.145.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547b808f-2206-4524-b6b9-4342eb2caace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.154.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d7bbac-3cda-4e14-9afc-6c535bb143b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.33.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802caf03-2729-4d38-a4d2-c1ea70f1fcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.233.254.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a39bcf2-bf4f-4f63-bebe-5c4f68edb325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.176.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00330b0-720a-4c24-a3e5-09838a023468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.208.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ab3992-67df-4dd4-96de-c741c7085aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.226.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2985ac-40d2-42c4-a7f1-46cd834e8017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.248.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b843906f-5bc0-4040-82fa-92bfab3b826e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.108.229.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29745827-c7fa-4137-873d-3615b9530ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.88.2.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14299b1-4c4d-4c9c-9c73-6b393f41fc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.126.6.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa623d7-9634-4300-b406-28696f125475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.104.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9238201-3d85-418d-b900-449543abf9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.224.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6caa38e5-ce16-45cb-8de0-1370ad8009df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.34.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e81e6c-8a97-408b-9204-903b77f23edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.45.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8ab557-5399-406f-b5f4-2b96b43f38ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.76.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de922f0-e598-4c45-833d-702b43972da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.89.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8036a37d-3fdb-46ee-b2a2-9802dce64e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.205.0.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307d7bbd-e67c-4dc1-9ba4-fdb066d4f705", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.253.157.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd0d22e-b19f-499e-9312-17bf4f621684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.133.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da885110-8968-43ef-9e79-e3907cebe875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.16.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e6c7a1-b716-43ed-a01e-eb23a1c06636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9a8198-9f65-412e-8830-60f37f407672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.248.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ab988e-e034-4568-be5e-71f00d7a16d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.89.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068cb56f-f71c-4e4a-b8e2-926d83712de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.165.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e8994f-841d-4ee6-b788-b76aec46aab2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.88.48.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8730cb9-c44a-4f85-91b2-65674f429725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e2f054-6c4d-4f8c-97b8-dbdd8d7c3234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f7dbc7-b92a-42ed-a8bf-45d89f2c0177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fddee2fb-e3e1-423c-ba5d-76b333956ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d95373f-5d7c-4319-b304-20fd8077fe6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e78ac49-4465-4280-ae79-1eb06b2c0858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2b3ff9-1274-4cc7-84fe-c6b2331c9a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e375992-5814-48ac-915e-17aeadcd45a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37e7910-adaf-450b-994f-85236239c521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99b16d1-83c5-4b26-99fe-e609e8dcc9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a4528e-8720-4b11-9aaf-ed936dd1034a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9cee87-b257-4dd4-a24d-ac834b5930be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d98e179-e42d-4777-bbca-5b1efe0253fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62155911-808d-422d-be2b-02e5ad3db1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64d0811-ec45-40dc-9461-4a3d60719262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9c7cd0-11f9-4775-8f7a-27daf229818d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1ecdc7-3c53-40cc-9386-219122289da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a333d310-70ba-44fb-ab6d-2fa6a95c9d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4e87c1-28f8-4bea-bb6f-f2f04298b0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e4ea59-5aa7-4296-bcdb-2484c0771631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dfe654-c6a9-4315-bc61-3933c6753017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff24ace-c509-4efd-a96e-b5893178c41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4b829c-83f8-4370-8e82-e313f1010223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0d3103-0990-4e01-9381-90e104dde013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1c7649-b3b6-4dcf-ac9b-d8a3efc87b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43abd76-0adf-4732-8903-19f9cf3f406e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e4efc5-6614-47ae-88a7-98ecf4b5b72e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c110ac3-6047-40b4-af3f-e3667dbbc672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b78a160-4eea-4359-9189-b9ef9f8f8b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fab1d3-d2c8-4c83-9e15-16754b721555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93647e4d-f53f-4af5-a87b-9c328206e1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a40a38-235c-4b00-87d4-d899cb132e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb602a26-cc41-46dd-9f35-2793c44ec289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbe9e63-44fa-4dd2-88ed-3f615cb08ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2735307a-e880-44e3-86fa-d2a67bbd8ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95349b56-11e5-4d5a-ac96-0590d874bcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f20d6b0-9a1e-4dd8-823d-bcf585d0ca63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2ea829-e831-4e46-af36-e398ab0ae8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a7ff6a-4ed7-45da-bd33-9769faa00eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb8f5b0-fa86-4a27-883b-0ea2add822c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3beb49ca-d9ed-4296-9be9-7cbbdbd700b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204fabc1-54c0-4fcb-8e1a-137cb01a693e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1aa9714-605c-4bf8-bace-e6ab96c19c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972d4a50-69cd-4cf3-84c7-e05776290bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e98db1e-de53-4f28-9381-f7535a9f162d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bba940a-ebc4-403e-a397-041fa0466879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80ca0dc-1dd9-435c-a294-fb7802380816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6a32e5-5e4f-4eb3-ac4c-d695116cea2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9efde7-18e1-486b-8960-bb85d2988f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9287ca59-d472-4cf0-9d1b-e240b7de2a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea271f3-2e4b-48aa-8896-67825a86674d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1968f4f-78a9-4c7f-b811-f5158335c9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c3d165-220f-419a-a958-94a2451e3b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0553eb2b-9032-437d-9cd1-b8ee75a3c21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d677dc0-01b4-41e5-8427-012c8505a9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12bcc5ee-81e2-430f-af24-04231ca8c491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0aa0b5-ed6a-4417-b406-f741be0e283f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913f42da-a01a-4cca-ac0b-c881e23e6552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94d319f-723d-4381-927f-a99d99f53514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.1.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68110182-dd82-478a-8336-ea02f4c9b8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.152.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748b7208-a9a8-4a00-a8d0-9a1dfb635ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.229.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7365dc1-aab0-4e3e-a950-50518292d32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.232.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079d701a-bef0-4e15-8f9b-10a418a8f16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.54.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43e417b-5c04-4d84-82bb-ee9a033041c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.107.24.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31394c42-df77-4b16-9db4-39acbfbd1754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.107.35.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798028b7-d781-4b7b-87b2-a0857350993e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.107.45.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe55f89-cc3b-48b2-a781-e5f5da9ea0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.107.62.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e149d3-17b2-4fdc-9e05-202af3bb71fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.107.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e25ea1-a1d2-4aa7-9543-aba780ce7626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.114.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbd8bc1-9a8e-4984-b974-8d16fe38352f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4dc341-3f19-4765-8b2f-9494215bea8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.215.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696c5900-3776-42d0-a20d-018bcb8eee27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.216.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541cfdda-c80e-4200-beea-8f8ddbda2be1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.223.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2408a4a-cd63-4372-8e3d-86e4ee6da379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.58.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1504fcf-c74d-40ce-8260-4b71c6142f73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.61.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3b1b3c-4358-4334-bb68-39aa3c30f5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.147.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bae084-265e-41e4-9d22-eafd881aae5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.177.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc289cd0-fdce-4bd1-bf5e-d95e55f8f58f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.177.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792440bf-b6bd-44f6-bb49-a0127a5068d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.184.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7488ede1-4a17-4a64-9aac-42aefca9cf18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.190.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d28525b-9aeb-4730-9f9c-b765f4570fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.232.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a12e053-6554-4d96-8419-2e42b4756a66", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.90.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e0c579-96a9-42a6-9de5-f44e5e8be418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.131.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633938eb-04ff-4d5d-85bd-76fccc84c276", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.146.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22a7cb4-5f09-48b0-bca9-ac2941a6443d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.158.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540161b1-0d5c-4506-a094-e650c8a1c56b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.169.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a286262-3343-4e8e-b458-4fae58d83eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.188.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5d474a-5897-4e7e-9a65-035597bda99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.45.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8536e336-e017-46c2-834f-ab86b97e7ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.47.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3816b0d0-b598-4f9c-9e2d-2fc930384f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.81.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3509d23b-8493-439f-80da-087db65c0890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.95.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74081f5-393d-4ca7-9672-3b8c01116a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.167.72.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd82050b-a47c-45a6-8c3c-836abd60b796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46795f1b-ba26-4d9f-950d-b9146bb5e6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.197.250.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd64398-4d61-4d04-90b0-8262148ccbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.76.20.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e090bd10-0c72-483b-b7c6-9a61c84ca3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.197.113.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0381b05a-eada-4eef-b671-dcf106eba0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.228.66.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a43de89-585d-462d-9519-76be19a1705a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.22.253.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5aaefec-df18-4999-91b8-ae961a52f7c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.22.253.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0049d0-155e-42c8-bf38-733c6957b9a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.246.15.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db47e1d5-6945-4df5-814d-35c5eddd9ff8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.246.23.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e6df0c-4972-49d7-9d9e-39895be1ba39", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.105.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f8a1c4-c8de-412b-84eb-afdcfc1709e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.161.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081e1aad-c7e2-454e-9bd9-eee715e65a59", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.163.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17807612-f2bd-4805-8d02-e4c0ad37ce3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.163.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce3c9d3-dc7e-4949-972b-fefcbebfb823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.167.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d754f9-5538-4790-b7cc-e916ca141ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.180.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764407f2-ba9a-4fb2-b456-2471137555e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.181.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7582bb96-dae0-4304-8575-ba955174d87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.155.12.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcbd0cc-f0a0-4dc5-ad29-d3e30617ffc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d724ac-ae79-42ac-a800-d6cdb617bfce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9e74b2-fda0-443b-bb37-7eaa0d69ed10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8287478-c79c-41b9-b8ed-4e0d622e61e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47b561c-de16-4b0f-8dd1-9f22e9809872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1838cb62-cf28-4520-93e0-315bf719bee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8348abb5-c13f-4fdc-8fe4-7f9286c82873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57d130b-2e3c-4f7c-a388-102aa1f920d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49dd7389-a1aa-47f0-83d5-97abc0d044ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.249.217.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2648b6fd-d0b0-48d9-b67d-9bbbe1157d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.130.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d06b0c7-8a3b-43d7-acd2-baa85c7b0c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.148.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d35281d-3d1e-42f9-90e4-ea554e9cf2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c86275-3a47-493e-a778-818027ed9cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.167.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d819442a-2abb-4d4e-8c24-19c72d8e7494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.168.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18ceda6-b615-4905-ade2-072b39507885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.177.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fbd486-3c79-4181-979a-7d903e7dd5dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.181.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf1a14b-1b0a-4242-942b-8381f7b7de1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.207.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533e5dfd-f83e-498b-ac59-8a7d3799b60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.9.16.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbc8f3a-08fc-4bc8-bad7-94d144a943e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.225.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200046fc-af6b-4372-8d6e-6dfe34714d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.226.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e64dd9-66f7-44c5-aac1-bc99f355b6f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.226.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005cb49d-8448-4f83-b9ec-33859a9a2e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.221.207.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715b85d6-8ff5-487d-be6b-133143bc38c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.222.191.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6881a9a9-adef-4184-b974-ab3498374ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.190.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bc241b-c34f-410d-8ef0-7df107edd5c5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.233.234.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bba7712-5d54-4cc3-a554-4237f981695f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.143.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf126e4-f584-4616-bfaf-e4ac85ca2732", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.39.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fa3282-ffaf-48c5-9a86-01263e690683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.43.134.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6b0f94-b48e-44a0-b472-c4bd1dc5712f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.80.4.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afa1086-67d3-45c1-9fca-582aab71aa25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.83.51.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213fec48-ed5c-4948-82e0-8bb1c5d9e3c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2aa7db0-c4d4-47f5-92c5-d7cabc6aaa86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f4e4d6-f05b-4113-9cf0-18d9284e5585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9677de-3667-4f50-a3e3-fe6cc0f42ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.10.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8947aabe-21eb-4a31-805c-c7171e364f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.100.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65338c1-2d38-47a6-a1f8-662a40e8d316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53db5d35-40a1-4021-af73-8dc74e266805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176454ed-b55e-4bf3-ab20-1b002940ada9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9569531-c6b7-4427-8cfa-350f3abdfc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9756ebe-15c5-4525-8487-53afd220dfac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.214.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3dfe04-4bae-401b-883a-ff964040c7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b724a3d9-0c92-42e8-9550-e83b5f365a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22581088-e09f-40b5-a321-0c7936d6dab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6827aab5-d48b-47f3-884d-734f2eacc401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5e903e-cec9-46ef-b02e-c01c410afbc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.27.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e968438d-b861-41d6-862b-64e7390c7e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be1425a-6596-418d-a518-6cbe70de1def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.31.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412b6358-74d6-4eaf-b92f-e63fe0a4eaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86b1781-f2e2-4f49-9d94-f4417dd97104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3435071e-cf3f-4ee3-919b-af327326b0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123666ea-bfce-4b83-b80c-33b9198edd7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e0722b-7efd-4076-b26a-60a095e32434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.197.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6f8557-faf9-4dd8-ae98-4bfbbd43cb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932f08b4-32f5-4b93-a25b-4a9a59d8cd74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.255.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae90abd5-45b1-4d3d-9743-e0754923d103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.36.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b11cb3-0896-4648-9239-2c65fa9fd314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e7d9ea-6c94-4b8e-9a6c-a5eff5990835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.221.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721fe101-4a83-47da-87dd-aedfc2ecfdb4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa22307-b838-41ad-af06-f09a22ef0b48", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d287e40b-8b25-4426-9545-647559b0cda0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf69c61-eea7-4988-8726-264c6a5d9b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.112.208.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2672f3ff-75f6-4bcd-a802-b2c5c0030d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.241.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c1d275-5f31-4b5c-b744-e20b53189d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.171.243.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fe06b2-a981-442d-b7b5-aa8b9b7792fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.30.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c16604e-38fa-4269-a3bb-456467b91021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.30.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9e3234-d03e-45c3-a092-611003facd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b190b6f-681e-45b3-b986-ddbec43fc409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60e10cd-9735-4361-ae00-8b96a71133b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.234.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e9c681-2d82-4228-a532-717c1081ea8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94386e6-e9ac-4805-a17a-29b08187cb13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.250.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a765e7f5-ee6e-466a-9417-a7e166958dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef36b872-630c-4e2c-9137-1e2a48dbd9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2869811-e788-4ee9-b00a-57bbc73d4588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e52227-e261-45e5-a42f-02b419548cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4baa38-b786-49dd-a6ed-d6d2a1fbfbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0299ef-94e8-45f9-82a3-693e1aa5fd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a553b9-b8ce-4b35-8a67-28fc34398d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff1f0dc-8584-46a9-a11e-cb84a18f8e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5413cc66-25a6-44ed-80f6-e318c1960f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.114.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddfee9c-4ca4-4da6-a066-79d914e915ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda6f2d2-7322-4267-8205-87c221494548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14726ff-1b4f-4278-8e40-23f4232837d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9d161d-4b95-4e73-acc8-d6ffcc32343d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e773ac-04c2-48d2-ac94-f286529748d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8abfea-86ee-4f1e-a0d9-2ed8cef5721f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff638a1-74fb-44f3-b00e-72f9d196a6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25abb8ad-0a56-493c-a647-d3bce0da9e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c861b98d-e8e7-4fd9-a346-d6b706bae858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5abdc99-8017-459a-8542-7f9986b4aed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78f8532-7ad9-40aa-b6cc-2346cea82bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbeb887-46d5-46ac-b5d4-a53bfebbbd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e05095-a9eb-486d-9bad-037fa63e654e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8212a6f4-59e5-4943-9099-24a61dc69168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139ad3ee-e75f-4e23-ab39-d634a0390565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef35968-99f0-4d28-baa7-38e5682bc948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e65f6c-79de-4579-8371-2404bb627d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b1fd6e-38f8-4769-9162-23c4e42bf513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.216.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22ef399-4e96-4196-b489-cd6e68a48e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.224.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed689a2-b5b7-4b99-a3fa-1b1c018af2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.244.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3bf4018-1009-4226-ad78-d3907c6464ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b309695-ef9f-435c-8640-74a3b366b6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b88a9a-472f-4dc3-b1eb-a9f883b11ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f461b79a-2840-4ff8-a521-4ebcd1785c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.225.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344ecbe5-69ff-40a8-9ff6-7e6461b3831d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.65.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f7ba67-9a8f-4ea9-a4c2-6d6b00af28a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.68.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1a9453-1d8d-4e4d-bd3d-819edb9c1ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.68.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7806cc18-b436-4db9-8c25-4593892c0bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883b2c21-4752-48f6-8a43-d4241f5e7ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa6745b-e585-4486-9c5c-fbb05cf34ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f45189c-bbaf-4813-84fe-e3f19e5518a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3813679-2319-48ea-96af-b612bede75d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d27cf5-9fdd-48a5-89b1-739a8b5ab823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb689b4-2cc6-4665-b971-b92ee6aa6dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0c10d9-d911-4960-8db3-7326eaf98ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.137.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d96c36-a983-496a-8851-1af4666af3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c9c39a-f1dc-493d-a6c2-783b966b28b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28231f6-12d7-46d0-9fcb-9cee756ac561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa093e2d-d4c7-4e45-837a-0a9886586dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1ae652-6337-486f-9b42-67404f9bd125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7be8bf-82d7-4cba-955a-fd79aabf378a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f144b7-04ad-48c2-9d4e-e03674fd86b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8760e72e-75dc-4cdf-878f-336b1b7b776c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0a588f-f037-4186-851a-2b4e7352d6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5767644b-b972-4462-b2ea-370c0fc44264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a751a76c-a599-4ba3-a287-588356482f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc87f10-1075-4da2-845e-0c8cf07a530a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab9dc52-9d2a-48e4-b712-b25444116276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc59e8e8-ef4d-458f-a936-63f36bfbd86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3a5db4-edc6-4864-8fcb-5ba42f20cf9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fa5eb8-4b60-4aee-a0d2-3216032de3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acccee3f-a6fb-4a6b-8df3-5c1c25e1e595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.236.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304d98ad-22a9-4334-9a44-484db6207aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326bb3d2-23a3-4188-85af-0ef918b39adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e239c34e-f002-4451-98e9-781a5cd94e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287f71aa-8eea-408d-82ac-894e74912313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61a7f6a-0a3c-4028-b103-d8d4fe27f7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.84.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010712f7-1dfb-4d3a-8eec-e00464068409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee69205d-0a50-468e-b28c-1fe6cfc4b7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6de8e1-3722-4dba-a31e-f32445712f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe26fe6-2776-4af3-8949-cfde1dc96506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2bccea-6cd7-4568-948b-4b657008fbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a890a451-c9fe-40f4-af28-cbe03d5c2877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbf636e-7cb9-4a7d-9361-56f4a98ad02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0545ae0-f1d5-4aca-b91f-3ac44c56acb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d11553c-79de-415c-b6e1-50de2ef98538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c5afc9-b2de-492b-8620-f78fa16e89f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd57532d-a2cd-4b01-acb1-3978bf45c40f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e37c212-ab95-4aa3-ac3f-315693f9660f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd63d08c-82f2-464d-9285-6afa213d2319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0914601-9653-4786-9cc3-40bb17e4676f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1749a18b-4ba5-41a4-9c73-f055df04913e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0807f4-9ee3-4d57-a113-6fcba367546a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b60fe1-ba86-4270-81ad-374b6d8c44ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71860b86-5fb4-4a98-b658-4e25d2c3481a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d481d4d-a780-4a12-8614-33b40560bfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.239.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4c4ac0-87ff-471d-af29-3fa0f6945ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.254.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782240a8-ca4d-4a8e-a54f-20ff27ee3fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6405327f-2b00-4969-a038-4e91b75edccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86209788-f033-445b-afe7-97b4ed98b23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a895a1e-dfdf-4ce0-914c-18e707ce8647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ea2083-5a42-4209-9e55-838098c8648a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707a4a26-4527-4820-bb3d-605f950a03e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8251853-ce55-44a3-ab6a-4ed308b91f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347afd6a-eb94-4613-b2d6-6f20f441810a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beab4738-9995-4a0e-9f26-7fea0427e9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4083a9c-87f6-4f16-93cc-82243bce8459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c31f1be-6b28-4a79-897a-825d34e424fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd6d710-2159-43cd-87c1-80942e1c534e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.80.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33573b0e-75d1-4727-b8b7-a7a923806b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0e3e6d-f693-4b1d-accc-7009588291d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ed7758-2cd4-4f3a-87a8-c96cca66cf82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b64b76-f029-4773-b533-64c2f623f3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.232.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049ab0ba-b793-43ca-950f-3df1708991d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21feefc7-c6e3-4054-8590-77d4f5e15567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3368b0-70fa-4180-8641-0d6b69a53f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d1eef0-5b2a-471d-89be-eaee9a5de379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c8fbdf-8248-487a-b0e2-479bcd1e3769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b49be9c-ccdc-44da-9289-a74d2eaf0318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.18.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb3cdab-da44-4c9c-afb8-9d05b3dc6cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.225.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8deee7e-55fa-4e05-9622-8c72d5e9c703", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.252.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb711ebf-4334-426f-b062-505ebdffcce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.67.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36437b00-a368-4519-aa34-b1e7cd9366f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.247.189.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa31c65-37b0-433e-9570-75655b13e272", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.247.44.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7927b6-c0bb-429b-a20d-1df3b317b9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.252.125.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec210d90-45d0-49b7-8415-b49070283b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.58.0.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ae93cc-8919-472d-b09d-c9c7dc151dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.68.229.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be1301a-1ead-4279-b67f-c2b4150838d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.81.104.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802d5b94-cb5f-40ab-85bf-8e9f4ded85c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.81.111.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9608ad-e40b-4431-93de-59df212c6f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.102.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef7d85f-4da4-4168-9191-e2f67de2b274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.103.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e9faa1-a3ba-4048-bc47-7a8ef920fe37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.106.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a835563-2b17-4de9-8fd8-d6c3156420e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c63ecb3-e9e0-4b3d-a584-6b69c1c8fec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222bb9c4-8665-4a73-8381-8eec0c285b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.141.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e406a6-04b7-4d9c-88b6-aab7d9bfd37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.161.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a90ecf-9cd7-4481-9eda-a22a424cac28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.172.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747e77a0-226f-4160-a1d7-8dd1ab74c63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.99.149.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15077818-c500-4544-9b47-dcdef4ca3ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.99.149.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a343450-6693-45a0-a791-56e9ddc160c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa22c492-fc77-4d86-957a-2c853157502f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.197.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d8c7e8-3e0a-4eb8-8fe8-27d66459de82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def386c6-4a84-4763-a2ce-20413de74f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.219.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4f7941-3aa2-4ebe-b357-5aa97dd8f43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8661924-d3d6-4193-9d43-583f8b5b7ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.155.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcfbe64-97ba-4820-a754-7f829ed1874d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.208.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e64435-bb49-4e8e-bb45-2a7c9a279c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.53.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb02bc6-6c4e-4a43-a5ab-f30345f4878c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d103834-feb1-4652-8b67-100975dd6714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.212.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36cc2ca-8aa0-4091-a8c3-bc90faadcdaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef3dfd6-22d1-4793-b1fb-04fa9ff9a225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ed93e4-147e-482e-8c31-6df26271efea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61d3968-3382-45dd-8d87-860e6ee0bb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3710d730-826b-4a1a-a328-7459411cb1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efcb3e70-fcab-4ee9-8810-6a3e960f87fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b655d6-5c75-4359-9349-2197013bcdc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0779cda4-6492-4ecd-a33b-d54955986955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf832d74-3e4b-4078-aa56-f2c1f100785f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708e45dc-aad9-4461-bd36-b12014c15e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a624cafe-0ae4-4615-8762-6bb76dd2da6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d37db7-aef8-47ef-93d4-68302c6d5568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e417ed-1291-4d99-909f-c6f1cfc80b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.230.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70be00eb-bd97-4572-bd28-472d292e7d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.230.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13d50fc-ba88-4640-904b-59591747cc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa28d7d9-bf5b-4675-bf9a-8860482cfd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db11970c-6aa9-4837-aba5-0234b1d30143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95a4b4c-2407-4f03-910b-e64cfc104fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac0e351-90bb-444d-8f47-69698151fe83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76580c08-06bc-4e71-b566-f3519ef0c553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f210b76f-4bc4-42b2-9604-6e91ab861da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.235.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ba253d-8298-43d7-8524-2e0e1d763464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd14f588-97cd-4e10-ba88-88779a70787a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6445fb-408d-4237-9b3b-4bbbebb1890c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.247.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb896ce-de2b-4b24-9cf7-6cacd224e638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.248.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cffa083-ffd2-457a-aaa3-b576da5ad04b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.49.133.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9aacd3-14d9-470d-b6cd-5702c513a718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.17.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab85259-b108-4ac4-97dd-614f5aee0d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.44.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7374d0c1-a733-4841-87c8-3785d77811cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.80.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efe5fb4-898e-4047-8b82-4245a56e1581", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.142.205.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a1945e-fe58-4c51-937b-2d5ff39ff491", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.35.25.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cc2f32-bd8e-4c07-9fd5-0717672965b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.0.164.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c0fb0b-35cd-4957-b862-559381fa648e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.0.37.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ced70b-4073-4d27-bb55-5f6d77cc7923", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.10.49.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92442e48-b418-4240-bf55-77659e93e129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.100.42.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb932643-a20f-4b95-baf6-3b33c55be91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.1.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f150740-891d-4bf4-936f-a681ce909e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.205.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4820d40-426d-40b0-be30-f0e7f4c1c540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.127.147.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566a224f-97a3-41e3-a121-dc22f1b7e105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.165.155.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeadf32d-b46e-4592-9a0b-8b2a2d3d3a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.196.186.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306619c6-123b-4c99-b28e-6a228484701c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.198.62.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c7628c-1074-4d32-8220-9d0dd688a6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.203.61.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047dcca8-c1ce-4bb4-9d44-a32acfbce9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.209.246.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea408a2d-b3e7-4f65-b374-408fe250cf78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.214.54.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368d633f-649b-422d-9c6e-d486f35e7461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3298454-47e3-4515-9445-8e23f6b89cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.106.228.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5f26b2-c39b-48f9-a0a9-72e95ee8330d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.112.128.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc3ebf9-4370-4839-ba9a-e22c5b0af8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1919e72-5f1c-41b6-9bee-65fab943199f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.125.252.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0844fb-67f7-4959-a414-4eda025e3d4b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.236.186.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a602e9-9918-4743-bd4c-b6370c0b9a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.26.101.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5aea26f-cb8b-4ece-b2f4-76990d4d5c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b070b78-06c2-429a-97bf-82c851ae2f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1432ea7-d34d-4101-968e-3c53340cf33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d19c7d0-2685-446f-b2cc-8305b63225e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2b3e6a-f9a6-4197-8d02-73c7c1c7c2c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3ea200-bdab-43f2-a647-2e487f4ecb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fce150b-211a-40f9-8705-798f7617b419", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3397e7fe-e601-47d5-a00e-4982506f5343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c005cd-f13c-41a6-9cc9-f2a3b078b9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f765b7-a427-43af-bac9-55f6dbb49d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106fa1fa-e5f5-4e39-88c8-0479c606348e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aecf97a2-97ea-4ebe-aa1e-007ca3042c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77db8809-2948-4ee8-adfe-819153b4a9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9cb981-5a48-4956-acbe-2d6f18ce9991", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1282b1b7-b308-47b7-91cf-50eb9e28b50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd224bb4-a5c5-4569-b682-e2dbff52d4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ea7564-2004-4673-90c4-1d2bdb6f22a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1340000f-2e63-4df1-989d-60697c203909", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b1cd66-8098-4280-a2a3-e2b4bd9c2119", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd580c48-a398-4795-abb1-98180d5a4f1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bb8758-f450-4e19-a10c-aea6f1b1409b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f59eedf-d1cd-436b-a6d3-bd3068906540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52b702c-9595-4740-b323-54a080ed402e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b28841-d5c2-4d48-a010-850a5ffac9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788d6b83-f597-4668-b845-9d47c685b083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3f9bfd-8071-4802-a763-53a99d2f0af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e26dda-2051-45a0-916c-02a5698807c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d058b31-78c4-4853-ab90-9e6514147896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c39929-6a5f-4ba1-9cc4-2e39b3bef7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741e0e54-ac48-4bff-aa4f-daf0f9125716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34624a7-1e67-41eb-9f3f-51bb5b6308b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7404f506-f511-410c-99f0-dfc14224a8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc941e4-5693-48d5-9ebb-539728fe4e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8fa5eba-70c9-4476-bff1-d21c13e253d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798fc382-d4a0-486e-a535-759b32bbf322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c000f1-ff5b-4ba8-af78-dafff690995f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8398b20a-a762-478e-9189-91876641a0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1654aa99-8a48-41ad-b3de-0c4275b7b120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5592697-6708-4073-aee6-b46c5c42dd2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e238c8b1-392d-4b6c-ae98-381b925d015f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43796c07-abdc-45e0-abd7-fcb52668d644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2b8ba6-0e45-4c18-a1d8-f9960f5c44fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ff1d69-81b8-402f-afd9-abca4c1558c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f7ff04-5be2-424a-9121-87360cd54732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d555c856-bf97-455d-bee4-082cfd2cf552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f15877b-5de7-4665-8575-4ae72ff1e13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a4f37b-9611-41c1-9740-e8fc7028abc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff7d4ab-11a6-4859-bcca-8b162b43dca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0bb612-ae50-41b8-b4a2-96417c5e8efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcf1549-8400-49af-b93d-cbb414e9fad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a09bae-b4f7-4d49-94f0-342bbe7c6c8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bc4149-c741-46d5-9c0a-2e13ead31cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.9.111.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382d38ed-4a1b-4e5e-9e2f-8a47ea79e029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.10.108.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbe4112-9498-44e3-a5e3-09ba3659b4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.10.203.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6679ca5d-1f29-4419-903c-51ca03388b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.104.203.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10cd1bf-5261-4c19-af39-26ccb67c554c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.112.179.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec0ec3d-20e7-4605-abe7-c72492f97331", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.136.32.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c95980-4d01-4216-8d57-0a658b000a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.190.84.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8557a0b-749b-4df5-a80b-5011747bae99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.23.128.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc2dbe4-395d-4504-ac0d-998373c2db61", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.85.247.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e554e21-8d53-46fb-9d22-fc0951f0077e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.93.43.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5e815e-98af-40f3-b317-a9aa053416e4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.104.220.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893f6d83-7bb2-4f64-9139-bf48759cb56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.200.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc448626-1981-4f92-8039-4869288ac7da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.121.60.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2e4627-859c-4ed4-8280-44485bb50d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.112.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57afe65-7045-464f-a741-f4d5d462a191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.59.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5532d75e-d474-4955-8db3-473ae947a28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.84.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2feb125-4998-4938-8c11-c0c37c21ccde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.94.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd5b978-04fc-49d9-865a-225a9314875a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.130.128.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf6cef5-d51b-4737-862d-676da6c52cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.130.47.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99611186-6d3a-4b25-9cf1-d5e07569c6d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.52.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfff251d-2fb6-467a-b1dc-351d06067302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3846560f-beaa-4e66-8eda-4195cb8e68f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2fca03-5a5b-4420-8c23-efab24699d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82097e1-c739-469c-8653-2ea406f8cebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ba591b-b8bd-4583-b61d-f7f3903e8cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c68e396-ee30-4e96-aa35-40379a937ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2d8b2f-a3d1-43b7-a633-4d98a0df08ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.177.40.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d85faff-448b-42fd-b13f-f1da87ccbdd2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.185.136.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51383bee-dc4e-4168-bffd-9ffd76b48a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2667a931-e11d-4b20-89b8-24d1d7295189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edde3e43-7d5e-40b5-977b-81019a128f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d62699-3045-44e8-a1ea-389f457b0bfc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf8102c-9182-47fa-be2a-cc04af944db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.213.79.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9528242-3fe1-47a0-9a7d-984ef2fe7da5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.253.245.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42edb6ee-3801-4a41-8abc-42be44623c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.214.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759fbcab-0f17-458b-b125-1f7be40c6624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.216.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886b5f00-4c21-46aa-80bd-ff5c181c6600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.25.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7497c904-bf21-441d-b00b-91613ecac426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.63.71.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe5cc3e-37f9-4e46-bb11-7546794821c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.72.132.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759010a1-9a77-488e-af28-5964073e9dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.105.131.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10d7ca8-c137-46ad-a3db-722bac8d7781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.32.58.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f225c342-996f-436f-86cb-17a7b6c71d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.110.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16973d55-435d-4928-b876-73117ea0bc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4029c3-18a3-4c0b-aab5-4d000fe63564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.137.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9926719a-7432-4fba-a6e8-3188a530f985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e706afa3-8919-4a93-a5e1-6b5f9ae844e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f90fea2-af47-49b8-9f01-f297b7537e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e710a564-8be9-41ec-a04c-2a1be0da6252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e262e1-b4ca-46b8-88f5-b828b9a7c050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.212.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e65d5d-66ac-446c-81ec-90a96c20666b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.135.40.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78ca025-156d-48ff-a6a0-1ebc807cf78b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.143.235.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b028b7-4387-40e2-925a-eeae8436e93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.156.203.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372a4359-a03c-4e90-9a4c-fa20e6a99832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.156.226.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1c5a3f-5b18-4d5d-924b-aea29c4a3f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.162.112.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96ca869-4b2d-4d0d-8e58-d3df1cba2623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.170.207.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09d4dfe-96fb-4733-8e13-b26526e17aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.182.54.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ca8597-8d03-4b3f-85dd-53dcd86ed8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.183.252.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ba2fa1-91c7-474f-b283-71d3d4b2a54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee0f49f-d2c1-4741-aeec-b4b821ec510b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6fff66-3b23-4fd4-8f00-95146c4b92ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.204.243.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2d50a4-1e10-4926-aecd-ffb0fe496909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.234.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2ee7d2-0d54-466e-b8b8-c4dd88c086ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebb2fe8-5ffa-4d1f-8a0d-8656ac85cb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13b3666-39dd-4a68-82c5-2c1a7b7faee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06751e8-6d5c-4422-a163-bb72e3d71791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.111.30.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61093968-7d78-4299-bdba-c02732d35729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.111.30.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4ab0ee-4354-41a6-8663-35914c815292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.142.53.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5f171b-6d18-4940-8a03-548d9fe7d31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458bfc1b-7653-4043-8d44-2b1a7b2d49b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e89aca-4eae-4ddc-969f-f1757a20e4c7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee91e793-149e-48dc-a729-441917ce5c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4c8a1a-b7cd-4902-970b-0ceab542b139", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a50dead-1ead-4cd7-949a-150035a161e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b08e43a-e1a2-4a01-b254-d5e3332f709a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0b2068-2181-4a60-b0e5-9f38471a8cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7195ac-ca7c-4df3-a8f2-fca458ce8b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.178.56.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac4dd0a-0ec6-4a48-8c76-fdf8f8cd1d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.234.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9e5859-27ac-4fea-89d7-cfbb88654d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.191.49.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cb8eeb-bbca-4985-a335-8f489ec61600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.221.61.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09a1701-28f6-4d20-88b5-dd7e6c50dcb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.232.31.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5b0146-981b-42c2-859d-8ccc118e28b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.245.135.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da03b27b-b499-4e90-a220-a8514c04161d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.73.131.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca23e07-61fd-4575-92e5-e3c4b2fdd762", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.74.84.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e916826e-2575-4098-bc19-406124f97b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.168.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f877af1-b562-4204-b499-694a352c99f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.172.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a586bc-f9a0-42b4-899a-520cd8b714b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93091dc7-b58e-4bff-b363-ecfb06fdb125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fa249f-f3de-486e-a15d-1d95e821afd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.96.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2227ab41-1006-47de-b60b-f309958f7a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.138.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9445cf-b477-4e06-a177-947e69924cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.95.238.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2978dc9-67d3-4e9a-bb3d-6f7186be3c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.97.242.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e7f917-3b13-45de-b653-3967353583e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.192.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74f7052-4df6-4634-b588-cd100879c9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.121.20.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7503f4-d805-4e64-8707-eec1a8073bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.123.62.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbec6aa-7c00-4872-af10-68667de98efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.212.41.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e139478-e7b2-47dd-bd96-198707a757eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.233.91.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2d1eb1-a7af-4c09-8492-19ca64a11f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.78.45.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624f267c-d03f-4682-95e8-6766eb01c764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.91.108.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e1dc1d-128e-470b-80b8-1da3f0da7c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.105.123.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f910d9e8-2843-4537-a46c-59998b9d4d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.227.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9592099-cf91-486a-8497-90481f80d6a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f33a51-1f0c-4c1b-ba38-b1c5d2711aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ba9186-9217-40c3-b2df-5f83d209ccb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e03d3c-1e70-4926-b65b-d4e629441069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279123a3-f80e-495e-a2d6-9742152090cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.183.145.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad49543-5b54-4a21-b146-cdb67916b3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.190.186.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f4424e-3c18-4d0c-a409-b564f9010db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.204.158.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26de3ce0-efc3-4b65-a6a3-8026814813f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af55ada-06d6-41a5-a01f-7991603ed496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b88980-80af-4969-8388-e61495b7d236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a295f91-9c85-40f5-a0b4-69a8499560ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de62e0bb-ed99-48fc-9081-05693ebdce5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e0262f-06ab-4f5d-8fc6-f060b0e3c1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.244.178.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4397f3-3758-45bd-852a-6437da7623bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.246.6.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ea85b3-91f0-4d53-809e-03b31a53cf8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.34.208.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ebd554-99ba-4d6b-ace8-502374845c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a5be33-7722-48de-b4d5-0a5d9212ee46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5794aee9-8075-4b83-9f3e-8cba9fc16007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.68.167.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0828083-5a42-4c79-97c7-74551775fc49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.8.65.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06454acb-2871-4c96-838e-7885b2320e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.86.43.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073f9323-e7de-4a1c-9b19-9aedd893a3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.119.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18edf4ed-eb42-4b95-aa31-e1f1321cfeec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.50.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b799f8-599b-421b-9220-bd5f86a83422", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.131.109.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5c8a76-8dc9-40a7-95a5-8a975fb018bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.144.128.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c183da-f9eb-40c0-838d-659013b79363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.162.106.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d638c5c5-e503-4077-a5a5-d80e19fadf65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.178.44.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69940294-079d-4066-b649-412b48a35ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.192.19.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6965554-9394-4524-b5ac-7d86e93d0f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.236.7.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17359de-e7cd-4230-a397-f92f9c471bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.54.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0c9d67-8938-4b05-a40b-b00363fa5637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3f9c61-9f01-4531-9a9a-33fcb7507c58", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.56.183.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd15b3b-c303-4dfe-8c5a-24ad13450c0c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.56.251.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a355cba8-3748-452f-b869-7074b8cda92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.6.187.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f888211-5c78-4479-828a-48943a4940d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.6.26.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169cd78a-8b7a-4cbd-9070-90b876cd982e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.66.138.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb497b4-bfc9-4d57-a8ac-3598bc07a1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.107.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb64283f-0b6d-467c-b7fb-f82091c8b70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.119.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a79f65-e36e-4948-9b49-9e2da621ca64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.33.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6102e7-423c-4458-86e6-c575b5576b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.82.97.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d54dc9-2c82-4a1c-9359-d885e70f2ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.92.112.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def1e110-8ead-4e84-800e-85fa8ec6ceaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.99.37.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ce2d7d-215d-42d2-bc7c-065480cf8aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc1efc9-3623-4f13-883c-7b80ad554351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd0e5a77-8047-4521-9721-80ca394c6791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2c6298-2702-466f-abe9-cd8893166523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4dbef1-857e-44c3-814a-e828e88f92f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ac9f2c-3a74-4666-bad0-a025a529201c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05ccbc4-733f-4a8b-9e5d-39ef5a39c340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1662cb-63cb-4233-96d4-4cebcbe2acea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fa44e1-1751-44a6-b467-542181142bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289c72be-452b-43b2-bc0f-8106f7d2e74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89eb745d-a1d9-4537-9858-4e523589f75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e1f54d-dea2-4f7c-9c3a-a1abea7876f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7957522-6d27-438d-94de-9bb60f79b029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db751e1-4132-448a-a86d-45249edbbb9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fe5121-58a7-44d9-9d74-6bba5d914170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e92d12-95b4-4bb8-b8aa-85bca39dbfb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa279bb-bdac-40e8-a040-5da8f5317bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c48b99d-7984-4ced-9839-5de0f9b4329f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0bbc4e4-f643-4f20-9ad0-a4c2d5369faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12bd2f3-1318-4c31-b1fd-c90d0c60e3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de17c187-446d-454b-8725-59d0fe2a5eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e372e6-93cf-40ec-a01f-7cc9a0ccc34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301f1bec-371b-41bd-8cef-62380670bb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963bb90c-cfb4-4566-8a0a-3f6180187d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8192dbcd-7a38-4b1f-82c5-30a2d8ab5efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c7cfd4-016f-455d-8dcc-de47ed98141a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358b739a-1373-4484-b5c0-71c3c26de39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecb05f2-1ecf-4ffb-b778-f9b5e6e9d10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617854c3-600c-46cf-b1cd-ab3e1afbb1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71738b47-c29a-4b21-98a2-31cd3de8e664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310396c2-ac76-4035-a55f-2022a2989d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5db88f-95d3-4a0a-9127-56be5200c28a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676fa5d5-9d2a-45f1-b292-02e29de32fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab74dae-eb0c-4f76-bb3a-34fc2943c716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c80fd5-0345-484f-a3c6-f11e2e2b07dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b77eb48-ba9c-4c56-a7ed-ba1da977b78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2c0be1-be2f-48f9-8e83-12576781540a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63357fa7-83a2-4484-9cfe-4f43f91355fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527fc661-24e5-4291-9053-05e0e11b059e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d016594-c6fd-4f65-b6e8-0e7ebe222c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd5d9da-5b24-4ecd-a46e-25dc35b56e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ba386d-2030-4b38-b776-30194770e82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5433aa-9c10-46f2-89fe-c399c2bc1d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7b22f2-99db-4014-b36a-89398f95cbed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f54e7e9-94d9-4d13-92f7-b2e7e35444ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be4990b-07b5-44a9-b164-9572c98bb49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91a45f7-f1b7-4d2d-8023-463fd54fab84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b946f4c-a275-4f14-8339-1dba02a00a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb3f075-b8d0-45c9-84b4-feee13207ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9559872-a9e9-4539-b6fd-0a2a95518039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606cfdcc-dae6-4480-8bd6-e66950e111f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9357f7-d77f-4752-bf73-34f624ce4f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4be63cd-38e7-4a80-b35d-b9c8764c0c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d856d20-f2d1-434e-a954-12bf591c7f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b998841-5905-4e37-b9d8-2e637adc97c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f537d971-eab7-4be7-9270-dd99fb4523da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f2e4c2-b579-4927-8809-875f6d2143f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93614ee2-6827-4151-9912-25c09408fb02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cc1882-64e8-49e6-9543-b9598373fcd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200768a7-4c05-496a-a42c-91e491c08bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756cf549-68fe-4ab5-904b-35afe0fd3465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eba51d3-a79b-4739-a51a-ccf81d408534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b986a3e9-6083-4c17-a377-048747437b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55de3b84-1235-4c47-81c1-fa8a6fc65478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9a8b37-64ba-4e10-9b1f-e1462f8bf399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce98329-64c5-48be-a942-16d18286c44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f17a5c5-2f1d-44f1-850b-227daeaf8e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.179.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31314e17-986f-4585-8fe3-1827a998f3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c29f23-6ee1-4b58-b949-786834121819", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.168.21.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785ef743-62e2-4702-add5-1a3cadb0af78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59bc627-fa09-41a9-8c9f-e7f2159a309d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.111.159.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5787f8-73f5-42dd-b347-003cfc660fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.112.33.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49afe256-55db-45e5-8346-fe22454034c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.112.59.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435b5928-bfc0-470d-a072-1c3ef2330762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773b48be-77bb-4b82-8ae8-890d42ff8aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52427a48-ae6d-49ed-a5a8-f4d85dba7910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.44.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0161e3eb-057e-4412-bde0-275ea1686999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.44.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4ae7e9-5f5e-4fa7-be0b-0332dd909f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.44.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf40422-9291-4993-99da-503470d76c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.44.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7e93f3-d1ba-4817-86f5-5a581f96ffe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.44.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bafd967-5d82-4488-b159-0c39d97a85af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.44.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133f2e54-282c-492a-b7c7-047aaa14edf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.45.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d2f3ed-6ace-4729-9cec-d07fb1f07b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.45.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b658fbdb-4d42-4614-8e7a-25f70a754838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.45.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aade21c-069c-4ed0-b9bd-4c6c3876c2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.45.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c69379-629f-43a7-a6f3-63599d73bb72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.45.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e568948-4954-4a6d-8a1d-b397fedb39bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b653e8-ec19-4819-a416-cfc03ee0b6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c408b8d8-98a0-4c72-b7da-5abe1a20fe35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10907756-2def-4bf5-a589-6ce8edc40e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a41365-6af6-460e-8f22-fc17faf7fbf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea36551-993d-4aa8-b2c1-cd728eb6fbfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4e988c-1481-4e4e-8e3c-0eba69f8d8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a16e72c-7b40-438f-a1ad-164b9636c9cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17a3299-a5c8-44b6-adfc-6d904dba78ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d4fe18-c2f4-4422-8c78-f5d128ac984a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb864ff-a6de-47c1-99e2-e74117763a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b88698d-2c4f-43dc-82aa-013395a197d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bb7dd1-0ed3-42ac-b968-79754c365390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f705dbad-9632-46de-b760-90fef5ed3249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615ed99f-e428-445b-a57e-51b22b0d3578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.46.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3e6ca3-aa5e-43c2-99ba-8050d2eb1e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.47.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9550536-1f2a-466e-9a31-00446300d591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.130.47.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628ddb69-5668-4b8b-beb2-dc898fe494b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62d83f0-03ef-4ce4-a448-736bc5add91c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.135.137.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8e61d4-9f9f-4372-a23d-f4822b656545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79aeb6c-e6cb-4aa2-b1a2-dc9973f18267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c5d36d4-486a-49ac-b8a9-d0fa507115c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c39b721-00dd-44c3-837b-1cfed73fa4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c3a07a9-a7fa-479b-9de9-5819b54e574c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.190.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00548204-a5ad-484a-87f6-911d5417ae50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.151.146.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47969717-906a-45f3-b07f-e3be527139d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703bc2d5-d5cf-41d3-b04d-4cc1f7a9420e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1187d33-e936-4346-8e27-b4d84af24cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67532daf-a169-478a-84b1-5010c48ce646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84343c54-f143-416d-a628-2f4e19471605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6938296c-3ecf-4cfb-b132-360915e779b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a400754-5451-489d-a7a2-8fabac09e343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c09f89-e533-4132-b2b2-28fdb045e1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.249.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5523c1a0-0f81-4bcc-89fd-dbb6e0b1a922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8653a0-10db-4559-9d8f-7fc9e92df249", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545e5b75-44ff-46b7-9d29-66c7ffa639a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2da84b-1a1b-446b-b845-21b07bf7692b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97723817-db1c-4283-8bb3-9f7cbc48dc84", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0238bdc-38d2-4e21-bf54-0306b8bf9122", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ccb6a0-e901-401f-a178-34116325a766", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8ae870-39fc-41d7-8a3c-184e2da23e65", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e297ff-bf11-417d-ad27-ed63609fbb85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe24a49-8df0-4c40-adfc-959f3145b615", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6c495c-470b-4924-9057-a7c2273947b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6698e22a-940b-40fb-bd73-7c67c19fb138", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3fb768-921e-46a5-9d86-2005fd8915b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097b9ed4-d80b-4086-a61c-09e5f9fde048", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb9533d-98b9-4829-bd75-6ffed3ffc653", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ada7af-58db-461d-9545-6e898139b54d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6a13f2-25ea-43b0-a512-2e6c743dbbd6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b43d30d-a79c-4510-9a74-0bb5eb38798d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3373086-d0cc-4b74-be5d-b656b6f55cd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8a0234-4c29-48c0-b2d0-87fe0f7c17c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d17cce5-d55a-4899-bb5e-3a042743dfeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.192.125.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ef9e2b-b25a-49b1-9aeb-d2ab103bb0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be82c619-04f4-488d-8993-931788b88063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be142698-1697-4255-b526-c701a304e4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227460bc-4a86-4a35-b7da-5e81c7755fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ed8993-1085-4118-b942-ec4d71159f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ab1667-cfc2-4dc3-88b6-8534feef6e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.204.1.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19858d47-e790-4b4f-9b2e-6bea625859d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.205.247.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c158187-06ed-462b-b169-da08f996f6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.211.32.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b362138d-21bd-4b0c-9c33-ba277977a886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.211.94.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebf85e8-08e4-4fec-8289-f50f5dcb8701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.213.174.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c23e8d-9f19-4957-9354-8888143ca005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.215.164.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616eef4b-64db-4d54-a1e0-d6ad830f8b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a328c2-5923-439e-a1fa-127054f0495c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244d9996-e8e6-4a66-aa14-f877b8e15c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfeab47-2308-4ef5-96b2-3be2132bea98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe85595f-694e-40ea-bfac-cc3161702424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7192c5e0-d2ae-4d8d-a195-a64f4521d808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d822e116-fb4e-4653-a063-b9f8f51ec952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d80fefe-1703-408a-87bd-2da4de2b46be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.219.133.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302bfca6-070b-4e3d-b4c3-f756dd57fb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d62808-721c-4720-935b-883791fd3890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6decae54-9978-4fbc-8154-79d62c02cc7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5160e874-f035-4ec0-abf5-a9d851df93e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653c0cdb-625f-4759-afe3-49ff0152c701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a160a4c8-4f91-4081-bfc6-f5186c0544b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90ec1f4-0f93-4744-bfb7-669cb4b850b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d63f09-a417-4ed7-9dbd-ce73a054c0f9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.225.41.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9d4ad1-ee63-4545-bdeb-cdce296e7243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691fa7ca-e3b4-4fb3-863c-d88e1f1ff846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb60b935-1b8e-41e5-9ef9-9c8e642bf58f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554b0b84-ebcb-4b7b-8cd9-38190899d346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834cc284-af01-4d66-a4b6-88b6344b5f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c0714e-68d5-4ff8-98e6-82a5a1a5040a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d1dbf5-eace-41cf-b87c-cb3bf70803e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4960722-bd9c-4b35-a9c1-b45ac75d6ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a152c19-ce0d-4b59-baea-34874e8effc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcc95b6-17d1-4728-9695-c4d0ee5420e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa26c9b-3a2d-488c-ac6e-e0f9b2c89009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95827ecc-b565-4056-bd1e-818085498234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b3f1bc-435a-4259-948a-f06085e09fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf960b39-b928-4951-a43a-069bc11049b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.229.191.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdf18d0-9873-49c6-a2d9-dcdaca814a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.233.83.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146da34f-1aeb-4e16-9dee-225f61f5944c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.236.20.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea421944-733b-40a4-9f72-dddf53d9280d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3799a32c-735a-4ee5-8dd6-cdf500dfdfb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3868e844-d1af-427d-b7e4-28aff4ea418c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28331a9a-70c1-47a6-a738-dfe87dccfb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c358022-9c96-4cba-902c-21fabf6c4ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d1dd68-79b6-46bd-8b59-88448b51a187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64727d0-e9ef-476d-af54-094a84e9ed38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce694f9-50b1-4c61-8ae7-48dabcacfef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a964192a-b195-466c-bf43-84c4d034566b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158ecf59-8ff0-4886-9610-c87b9e25c640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925b141a-b5d7-484d-a2d0-0cfe7be9762a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1058b1-6989-49fa-90d1-5b9c2331b7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f07cfe-2534-4fc2-b56c-e87389d521b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0ba877-a03f-435f-9707-5ca119ce9f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc795b19-0396-43ac-b69b-5463d6ded329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451f5e1f-252b-4060-93df-3f8c85c7542c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e3a09d-3de8-48b1-9666-49c85a4940ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f9c15f-58a8-4a5d-a9c3-a912be28fa83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d36937-e65b-4b35-b69e-9f1a5859097b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6927185c-6969-49a8-bb18-2b4f73957566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ea8fc9-f3bb-45b7-8723-59eef55bbfbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f0c069-bdc6-470f-b841-0134dc4b75b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6089836-4d7a-409c-880e-7a63c3e18bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa58c563-26ba-4548-8489-0d0876f120ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3038b9-9091-4515-b940-37df7635a641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21563c9-b8ea-4f61-9f0a-a1b5522bc13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c220dd86-51a6-41c6-bdb4-66e6442d980c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27540c57-a007-4cc0-a794-03a34a5a6981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54daf9b8-a054-4492-96f2-a5c31841eaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d939b4b7-7cda-4d4e-a4fe-c989b94def24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe69a6b-6634-4061-9169-0ff20fa5ff32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2062f6c4-430a-450a-8b14-ff1564c9f137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0843b3bf-8702-45d3-8b43-1461ff285a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211b8b49-ce69-4178-93a6-9f36242785ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e75b57-2007-4ddd-843d-02494af28f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59bd054-76a9-4d6a-9884-8f08af9fb143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1146a1-72f1-4c5e-9898-503bc44b2653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e70d54b-c831-4575-907e-b74a8b4e8676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd11a56-5673-48a2-abc8-6e8c3e652dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3c7e54-cb9a-402f-8558-53bdf2105d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22a946a-dfad-43ea-979d-a72836cdddcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca8008a-17e6-4b80-94f5-a8ec3c4d0101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bd559e-5c6f-4261-8628-de031e45608c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7182f51-6f89-435c-95e1-57629256fb86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90d3677-e1ff-4289-bc09-bcc84243d16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d9f868-3afc-46af-a456-0eee2ac87762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45770a47-0f1d-4276-b675-86ca0b6b520c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56af6313-f411-4d73-9732-2519228c94e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f950dec6-df94-4593-bdab-c97774979883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52760b7b-975f-4460-8a61-550e933b9eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f157f52-b919-4e47-92f3-bf5a6931d603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd10345e-15bf-4ed8-be0f-b2cb65b8588b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf448ce4-8191-4fc6-86bc-5bb60cf12234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04345916-58fe-4dbe-9cb9-920d02c1088c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07e8064-1c02-4389-b03a-3079df57f74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc5a6b9-967c-49d0-8a97-5653e49bd60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45857067-8dd0-4ca2-9b03-11050dc948e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc826c5f-46ce-40ac-b491-a464a7f38e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2efa50-c8f4-4ae5-aab1-96752df91956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f447faf-0492-4ce1-ba6d-e3896cde2a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714cb237-ee6e-4c5e-aa8d-347c0601fe90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563e4d5a-20ec-4e2c-9b31-9aaa9b3de31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f3f1ba-add9-4aa4-9d46-92b222858bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb82f9d-8073-43ad-8be0-9fdb6f9ab792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc00541f-88d9-4b17-9a49-9370da679679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7223820-90ba-47e6-bf00-c424a541eb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7fe3ba-eb1c-49e0-a35c-23b271447772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e86713-cdf8-489c-8844-e798f5e4db4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b1073e-8c08-4caf-b484-273f8cc54af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65024925-2fc5-4353-9e0e-34a87f261f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b37894-8289-4049-b0ba-55fcbb1e9468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59889a86-89d7-430d-94af-8ca0673d9397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163b4b08-b1c3-4f22-9f11-e6ce66f801d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde486bd-9dd2-4f21-8eaa-c98968bf8bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d363d60d-ce24-4f4d-bbc0-293cbc892cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41e8c8c-477c-48e3-86eb-306a97231e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cfd33f-1469-42ca-9e41-d7a5502294f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc097ef-2d72-45d0-93fb-4dbdd017579a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8579d157-5e21-4e0b-87f5-1062c1a6c756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72872fb5-c417-44df-8658-36dc411940e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305913c5-4f6d-4507-aaa6-1ad30b0fbba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d006e68-09c2-4add-9f34-2d1d55a42373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1a0b8a-928f-491b-9c9c-3afd084fb82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e04012-672e-4e07-abec-225d679b7ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314107be-7feb-4975-aff0-ff0af788d96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3218f81a-bacc-4edf-998f-71b28b15b5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ae6f80-f078-48c3-b374-e1bfb824040a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e633d94-e149-4e7f-abf8-9e9c5d858ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53996541-498e-440e-8a7e-2ce7c3e59f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b544bb1-5f49-42bb-82c9-e56c17c3b187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03347c30-038e-493a-a6fd-1e6863e2c1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c7fd81-25a7-48a7-a2ff-726225a55ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6bc63d-82d6-449a-8933-a4b4aa50faaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae95289-651e-49ed-b089-7748efb9ef65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41dd696-c19d-4ef1-b466-d8eadfc1eea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416a06bc-979c-4f51-86bd-a80779712dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e6f02c-9e18-4e82-921c-471722594a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6754f543-de98-40f0-bdf5-cdf4bcd87649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f903ac6-6c86-4b13-b8c7-acf70f20ae54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb8ca04-bf5e-4041-b9f3-d29cfe878bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779d4e6d-80aa-42fa-8d70-5c1684cbf940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62c0578-8b49-4ea1-bb4b-e1e90640f7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1a3dbe-c3a2-48be-9447-b525cd450157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418e428d-d44b-400e-bfd6-e13feee3fce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0741a4e2-1eaf-425d-9911-a3e27750722e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fcdae2-7bb5-40dd-a6cc-bc9ddac6a9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09b60c4-6aa9-452b-91ef-5547c3059ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1f76e3-5146-49fc-917e-ea7d833646ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42596cd2-0350-4bb4-b391-d908b8c727d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befa97e4-5e11-4bcb-ba10-66d62984f465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2ce02c-0263-4ca3-9627-141a3ea73ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2579b4-032c-4521-9809-2c4e24ea15d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a843b3d-9094-4c03-9312-5857157b1bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53524441-b1ba-422e-b8d1-8367930edd80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa140ce2-6db6-4972-b028-ded0247d8d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59bb9ecc-21b6-42c1-948d-5c8f4bb7decc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d23cc7-0618-43e3-8d52-477ac2cd6b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81caa4ae-e00d-4232-a2f3-9e7de56affbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b3b26c-8a7c-4527-a61d-13b5210c4668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c250dfe0-19db-4b06-914f-3b5aed5b70af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fbfe26-6ccb-4049-aea2-4fb75d0fca7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.198.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a769df-119a-4072-a89e-955d1b438924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355d30b6-c4be-43ac-880f-4960fa1e69e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed0fbdf-6670-4adf-ae6d-d91988fe4004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe30035a-2d99-498c-ab38-ecc307591069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f908dea-2392-4fab-933f-065b00bb49c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c292b0ac-d765-47e4-b156-9614fd942fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed02b4bb-64dd-4db5-8ebc-37237e37d7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b983c571-3eeb-4b28-ad89-5fcfc3a892bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9cb344-46fa-49b1-910d-385b06c42695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fdb135-8df8-450d-89a5-bfea0ab51752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c452c6-bd15-4989-83c3-c5001dc1deb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd17835-4bb6-4191-bd9a-e8741fc451c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebb2a6e-5276-4479-8cdd-b2a5079c3eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3404398d-b683-43c5-aae9-93d784496f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f105f00-cd25-4f11-8b03-0070c86cc887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf284d2-7427-4533-9a12-154f2fe2342e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fd4de8-e35a-44c2-9acf-52eac28947dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e11eb04-8514-4f8f-b9bf-8061e038aed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed234d4-9031-4e04-920e-03684e11d261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bc1777-e3c1-47c1-ba41-21fab7d98bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19fef07-2da2-4538-ac20-664ea61fe215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cafa076-736c-48bc-a80a-0a9f10f4f172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafe1776-3b1f-4b57-9b33-a4b3051daa0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f160b2-77f7-44c0-b329-9bf0b3986690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa419188-8390-4b9d-a327-051954b08233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad55d779-c312-41c0-b22a-ee4626d20a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cb181c-9865-4a3d-b8e8-024dd6a92429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57ac6bc-c1bd-4ed2-a763-274029331ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97aac01d-372f-44dc-afc9-d768c84ce35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff235385-8141-4ca6-b168-c26da1b08194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0620be7e-3750-4d46-85bc-332c19d9fcb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14671a53-d7e2-465d-8612-5676c40928b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b154fee9-5948-4276-81b3-8d83e6f5e13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360e24da-4b1c-43a4-9728-8debe364891f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85093768-225d-4982-be83-4552d749366e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20f0349-70d9-43df-9cfb-b0972cdf4c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c07190-1a32-4c6a-81a3-33e56cc1d5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacc1448-b694-47c9-98d9-54aa23aa3fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cdb3b4-accd-4185-93b8-b63fe866ff65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e5462d-d028-43af-a926-15e44d890f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5861b359-efa0-4065-9c63-03c9412c7544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950ec6fe-7f1f-45e3-a7b8-b2852961374c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7880412e-9e62-469c-a419-1e3440523462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e73ffcf-4b08-4fe7-8ec9-dec5b5b96b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58ab9aa-352f-4fa3-a7c4-1fd12406d54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801d8290-8f7d-4e40-a249-baf61623bf7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733e7526-9989-4b4f-a118-f23d19cc0aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70877ce8-cbe8-43b6-832b-e73944e32611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15720b26-4503-4dae-bf25-ab08ff590129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a06ecc-9703-49da-8f8a-74280626bc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498e2178-0b71-44ce-945d-f2fe82ba2373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d188d4bc-c949-4def-bf2e-2aa8b66fdea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff146f57-fe42-424e-8cc6-4b23ab7987ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3526a9f5-fb21-48ee-85f0-3f989c35804c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3ce772-e617-4e2a-97e5-18b80584fb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ec0823-c9b1-431f-ab31-d74bd5021506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7bbc7d7-47a8-4964-9ef3-16a172e16fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7afb8fc-697c-4b24-a7eb-125c5888c39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e08be0-27e9-415b-b1e8-626704ff418b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb464b7-a4d8-4ab3-8487-844ae5509409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a38a112-bcd1-4638-8183-b71c01999e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0233652d-aa7e-463b-9d42-6569ee9dda91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1003b0-a981-4489-9199-54e45e22cfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689270ca-2b74-4be8-a88d-dcd83ef62132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b4e84f-0376-4c7a-bace-3505e6cbc286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc9788c-f905-4381-a44b-9523b1da9bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea89d49-26b0-49f0-b91a-3e3f32b22f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588ccf9e-870b-4f05-9e0b-de27e89872f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b57bc68-9f48-424e-bd30-2e92a3177a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75254a0-bea6-4f90-a455-2ad19c9fde13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b9a89e-f17e-4831-be7e-60cc896c3de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe453b23-5227-46ef-a26e-a44a97501e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b68b08-e96c-4b35-96ae-30340f397b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2235e283-a306-46c9-9bdb-1301414c7dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a1b6be-25c4-401f-b304-8c1cf68128a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd30a93d-2873-441b-aa77-c5b9f8c69184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a770d1-0b4f-436e-a6a3-885be1d30ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0ab37e-06a5-41c9-a38d-359afcd0e69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196df5e4-0659-4d30-81ef-c1dbfec362d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2918b3f-5afc-4446-8e0a-0f0dafd8aa5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86324dff-c242-43a9-b485-92bd1e8d1f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ad088b-0ecd-47a1-abcc-94cb8467a36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedb33ef-9f58-4106-a51d-00fca5767939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da68f9a4-ac66-467c-8943-8952055544bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aecea66-54a0-4a92-bd1e-9d28fa92b87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bba4aab-5fe3-4904-8a8a-6749206e7bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9de85a4-fc9a-455b-9a0e-1c628ab0ee2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036371cd-bd78-4c56-ac5a-d68c4a0c27f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05c8a2d-6099-4555-9b1b-cde241d7341c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e677753-e37b-47a9-94cb-f95734701512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6781359b-e1f9-4b5f-ad31-29ceb193f0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132add8f-7481-4226-b2ce-3fa68db4bb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db9f0a6-ba0a-4643-9381-c965da05f49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070c4975-d3d4-475c-9eb8-3cd047957550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2a8074-22b0-46fe-8a1c-a97a170be11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556beeaf-ecdd-4852-a3e6-79e023481de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a547cd0-f689-4348-82d9-8150779f2367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f05a9b-d81b-4274-9d20-006101da6e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b2a838-fb4e-4e5e-8266-991a6e7653ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0655ae-68ef-481d-a0af-0aea8a575f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49dafbf2-f066-4bef-ba10-9bcbd2443d95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd9dcc0-8895-4b5c-a376-f5feb731644f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.199.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8e9096-90c7-494e-9582-477cbf335647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e347603d-3639-4fe3-ae0d-52f54b83e8b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69605fa4-17df-4841-a25a-9bdc0e4dfdfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7f8b0b-5fed-4284-ba5f-f48c3669dd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad45fdc1-7a9b-4479-98c5-7e7e7656cac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5df756-e2dc-4c19-86f1-230290c8584b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09840db0-a7ea-4d7e-a388-441307d03b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1289df66-333d-4d7e-ba58-27d35ca0ab27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7d5e54-ff74-48a6-aba2-e3f03ba3177f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c8bf16-a2b8-4683-b49a-47b4459b1288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8f9b42-20a9-4ef2-af23-aaaec5f61fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c98168e-a8ed-4f6d-9343-fb50556ed8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0577a888-e5b9-48bb-b331-e42cb3b36e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad50c435-b835-4a93-8477-cdbcc536a4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362dcdd9-f64f-42d1-951f-0fb133d9e4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dfaf88-5f57-427a-bc62-5a38ceea3c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d48b2e-4759-42f1-87fe-5bedc10ef918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4bea35-b322-4520-b0ab-4d5836f850e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccf7b31-029f-4c27-b552-582026df35a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a836870-c8f9-41b8-a231-4267846d3ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a19fc39-ff55-41c1-bca2-36efc919fc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb235e6-5b5e-4591-9a81-3e6864b4a8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f91886-ea61-4e0f-b5f6-d7a9bb22b537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b10349c-5f11-4a9b-b0cd-6728192b5a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b480f8-e3fb-4757-bfba-64b319f03282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf3588f0-86cb-49cc-ad74-6291d4ac24fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ecbbf0-05b9-4478-99d0-aa8483c03519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff5619c-efbc-4497-b343-12d3e5cfcaa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7931c32e-6b4b-40e7-a15f-ce1c8a75f0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d051595-8b45-41b3-b04c-2cde4e978aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa10e820-7cf7-410b-baa1-d462828b516d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddc1ca9-d4fa-43de-bc89-6ee11fe236b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a379a137-d967-428d-b1c8-f1abc687febc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc7ae73-ee70-4bf4-906b-18cf8bf58353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50243b8b-efb3-4437-9515-f1767582154e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a64e5de-71c9-4a25-bd15-551ff74505b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28ebb98-efb6-468a-86a3-f29412168f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6978900d-4969-47dd-bed3-db5f33f85682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c41745-6ef9-48b2-ac7f-60ab1d07b54f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.249.74.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55896067-b595-41a1-a8d5-600d5a4e9ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.254.95.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef29111-f9b3-4aae-aa4b-c2a0fba4fb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.254.97.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3651e3f-1661-4955-80dd-08234d008ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.38.148.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d1c5425-3293-41ab-a9d0-4a0015a675b3", "relationship_type": "indicates", "source_ref": "indicator--d3651e3f-1661-4955-80dd-08234d008ea7", "target_ref": "vulnerability--75f6c9bb-ba02-407b-83a1-2b2e2c44bc30", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eeed3d18-1dcb-4309-b550-d4690f298ef1", "relationship_type": "indicates", "source_ref": "indicator--d3651e3f-1661-4955-80dd-08234d008ea7", "target_ref": "vulnerability--e0c5c0c3-2afc-484f-9c71-65705a5c9c36", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ac4a12d-a150-4ace-a90a-9d581c997962", "relationship_type": "indicates", "source_ref": "indicator--d3651e3f-1661-4955-80dd-08234d008ea7", "target_ref": "vulnerability--bda676fa-f8a6-45b6-9c11-85202656290a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241bd2f0-19f1-40de-8868-f90a5f12bd85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.62.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e6e422-c07e-45fa-9abe-333c44a2eaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.67.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a9f1b8-786b-4c99-bce9-91527ec79c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.211.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592a7c45-012e-484d-8181-2090cb2b4571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ccaf7b9-deb3-4a6c-91c3-a886f9676a30", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.77.225.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72269330-f486-446b-bd4f-b5ca26ecd728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.77.226.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a071a5-e6ed-4305-b877-142d4629a368", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f0e63f-d518-48b5-99eb-5c38af7361c9", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7725a22b-18d0-4cb3-a139-5044d74ef0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d7e007-0029-46cc-b38c-ebc0e14e49dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8dc4329-caff-4a8c-8dbc-f2bbccc238e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775592db-d4a9-4566-a738-5c4183b4d729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.1.167.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7d8043-4e2f-4707-97ee-625612e43654", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.122.177.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25b891d-327a-4d38-9f05-56e678494d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.148.183.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52f018a-9256-47cd-b449-7ffd6b859a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.204.20.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5347748a-36e8-4f6b-a659-049d0e3ed854", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.219.184.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9058a2-4110-4c49-97ae-c9665bc11255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.5.126.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25b9046-372f-4450-aec0-8aa48f7a2247", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.7.153.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8628ba93-d71d-464a-b712-ebbe893c1fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.71.90.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f00316-4dbd-49a2-9625-aa9a8878898d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.96.26.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf48efa-a3d7-492d-8aba-9b38b9c9c174", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.111.28.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1b8901-ac0d-4381-bdd5-d1e0ff6085e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be670b2c-d2f5-4346-8b47-b0ab808ff745", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.141.71.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a28d2f7-5113-46f5-b110-e5cc7235115a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.154.100.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333adab7-39f3-4cb9-90cb-6b8f2af998b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.224.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b8c6ad-e424-4782-957c-0ee163690501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.2.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c09acb-a86a-4d99-9748-2b595e9ae2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.191.59.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8320d9bf-9da5-4e81-8da2-5228f475ff4f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.192.86.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4afdfc5-ca3c-4040-a701-f5b9669bafae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.216.224.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a65e4f-ba62-4d9b-a522-eaeac8df0fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.234.100.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b383f1-d945-4e8f-8670-5c80544fdaf8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.132.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24f479f-2f7a-4d80-8316-bbc21c2d79df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.245.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52268b4-a5cb-4815-9ba6-026e7b6fc92c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.33.59.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7923df0-3bd7-4ce3-8955-817240538127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.34.229.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9be7de5-3b6a-401e-aef0-9f49ab1f1252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.45.95.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405b9292-ae87-4dda-9c7e-f7cb9e4c3b65", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.64.131.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81cddd4a-61d9-411a-8403-c62705f00671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.94.121.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabd2fd6-1726-4a44-acf9-e216e79a2ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.163.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b5364b-4bed-4783-bbfb-c58667d45819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.211.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402361dd-5a96-4030-8c61-1fba85ea2280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.235.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7945c7-2b6d-461c-b6e5-127eb723816f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.25.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4067af-09ab-4170-b146-9d2f974a21fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.55.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8d6b8a-f7ae-4c89-abbb-076b93bb1393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.170.73.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569d7ec3-2fe3-4070-b0e7-851314c51486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.187.52.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f6203b-e92f-4023-8d4f-31168e99067d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.239.191.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65bafd7-8cf2-420f-89fa-9057286325e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.239.20.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43970b9-7c27-4e43-ae07-43a680283e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7905b76-cd35-4fe2-8660-bf2fe5d7b6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150f2b43-4b8e-450c-97e3-89931fde8ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85df998-894e-4d44-8714-aa1557f6547d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696a6f3e-80c4-4970-b31d-62094af8a2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafa162b-fdb4-4d46-9f63-165d02799213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.253.5.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd83068d-f570-46d1-b14d-7303cac4ad8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc8dcb0-cc14-46f0-9aea-ec1e274a8bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2fa0c0-1963-46e6-b0c2-c853ddd27c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5117aab3-6900-481f-9ac8-30f547566b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45e9d5a-5272-42df-ae05-81532c99500d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d28347-4ebf-4c3f-ae7c-1491288cbf21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f62c29-6b9a-4ff3-a9dd-fb405d856634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.92.77.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566b7e67-80b6-44b0-bb67-5da43e0a9c3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.113.74.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f05e18-2864-4703-9683-99758b79eaeb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.137.2.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b23f97d-1360-418f-9eb8-d936b885e7da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.203.163.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4539341f-4008-4cea-8183-cd35768f3ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.10.164.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695f41ad-c9b1-436e-b54f-4d6b0b95c722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.115.5.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc59c3a0-c6b3-4e10-a1bc-e682d2461f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.131.217.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b67ded-8c24-48cf-aa9f-c8510a61415a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.27.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d19646-b061-4039-af3b-de41143e7c3e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.44.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74128397-baff-4e6e-a1b0-c7db95b1ea14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.182.160.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9249ae1-8780-4902-bbdc-660312dc432c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.190.251.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecd6cc5-1c39-4c28-8fa4-13ab515f929b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.244.39.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c800f106-798b-40a3-8a97-7e3f0b45134c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.52.55.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df309bb-ac61-4b6f-9d21-10f18d3b3d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.53.252.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437b8a3f-f65b-4c8a-ae0f-1866de85259f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.64.151.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56ada49-62f7-49a3-bd60-2ec9dec9c4a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.92.199.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adada06-cbfa-4154-a0d3-6dc38fb94373", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.92.205.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc360f8-2972-4b2c-834d-9ca1f328bb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ed3c62-88a4-4bf2-9335-430f47c08923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59072d3-527d-4f56-94b6-a78472f09df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e1961e-9c41-4a64-b046-818d15a4f992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.96.29.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84e8e4c-1bca-4fff-b36e-999b02b708c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbdec3f-6c58-4821-b080-724af7db3d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.119.111.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc872e02-95de-4550-b642-50bf930d5239", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.129.183.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61563cec-58f3-4c1c-bfd5-9070158af2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.24.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135f26f1-b937-4ab4-a94d-2d86ac99e284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.28.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d987bdd-e3fe-4b74-932b-6c7ee7174f4c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.144.148.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0566ef8-9064-43a1-af40-74317485f56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d3b040-7b1c-4cec-9318-b5ad3e550f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000466e1-a5c4-4f25-904f-7e6d551f600d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8e31e3-10b2-4b9f-a800-2c029d6838e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53e1d61-1cfe-4397-995b-462b0717ef29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.91.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bfc9a3-c903-4f06-87b9-9c77b0a4984a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.91.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb87cb9-ebc0-425e-9d89-18dbf2d9f4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.91.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e38a92-660a-4ced-897b-932dad50bc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.91.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66121eb3-070f-4273-b804-2e2807f71ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6208b46-6629-41fa-9c3f-7cc5448bc72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.168.16.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937e206b-2ee5-4962-8e52-8769590fb7e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.178.6.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bc83f8-da85-4424-96ef-8524ebd806d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.18.129.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a3d58d-10d5-433f-92f5-570b8a524d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.195.82.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4fcd31-4628-4d12-a5b2-3ed7f9642f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.194.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d319dfc-a6bc-4284-bca6-92b60b01c326", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.207.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb8c17d-1f7d-42bb-8c2c-5bb25bf36362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.217.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096f453c-6c7c-413e-8199-7e0c1b33ea0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.229.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077a0f2f-edbf-4d43-a168-177e4db5da0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.173.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcbbbd8-531d-4c25-aab4-8bcd965ec378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.173.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652c0b59-a2c7-45e0-82a3-e13bfd02f894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.236.131.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0465f6-e331-4173-9721-40b61fec93aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.248.150.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c0723d-b80a-4c9e-ba5c-b19feffc5e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60aa4336-aa33-4752-a7d2-a1b101ed397d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.171.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346caa0f-7c32-444b-ac8b-8e31399d4f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.188.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5980cd51-e2eb-470f-80cd-229f8a5c4ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.199.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8152cd8-50f1-4f24-a9c2-4ab31f776dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.61.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c5b501-a268-40d6-ac5a-d7858ba6e390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.53.122.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa822f36-be5f-4396-a823-9cf800117426", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.9.150.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8458870d-008a-4333-bd1a-9bcf988148d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.9.246.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be67ba99-7166-479d-a99a-34d64044b399", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.122.113.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4395e89b-780a-4b09-a4b8-2e5a9f6f5933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.122.93.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f232b9f-311d-4dbd-87f3-6a49978ff7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.187.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6786c1b-f614-49b3-a0fe-b21f15dcdd1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.231.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc429167-bcd9-4bb9-9a54-013ab6415d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.242.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1ac5d3-9e99-4a77-8397-b91b07ad1e34", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.243.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1cbdbd-a7c2-459d-a9e8-9874112548d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.93.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d6c6c7-a9f4-44b7-94cd-c43c8c88d74c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.123.93.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e193d0-746a-448d-bcb1-b9ad4f3c9966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610d954c-400c-403e-b615-3cc5b5b4c9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd77571-cbf4-496c-b2a0-b9447b5ed22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08494728-6f8f-4f9b-99c5-b7003975838f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ec4e17-57a9-4914-a37c-d50722e2516b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e367af1e-178f-4a5d-804b-5e9e2d326bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7993491-d48d-454e-8ffa-aaa677ef09ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcf01f4-ffde-4dea-87bf-824b9d1cb77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c810f8e-457e-4ff4-8888-ccdc2d3f543a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe4dff3-5dd3-49e5-804e-a5868242a5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4392abc2-2eb7-4588-8a0b-ae3cb50d20cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87900ca-5e1b-4236-a7bd-0f9480b42872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be00fd80-7324-47a7-9e10-cba7f7f2dce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712c541d-9301-4cee-8388-130142d19d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158d380a-bf18-4a40-99be-5c2b887a9052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8524e0e7-c212-46a8-853b-441293a88aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27de9ca7-b8aa-400c-b18d-2c07d6229bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352ddcfb-214a-454a-a1a3-e660520d5450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc205f5b-eaa9-4ee3-b8f9-658f178179b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11dfc7e3-63ea-4fa2-857b-7a231e907a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad7921c-31f1-4e02-84fc-c05fa217ba6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02530cc-e8a0-4789-8b5a-b5db6c1f7741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aebb127-701f-4884-bd1f-ea37157bdf3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c106d5a-c4ee-4633-9a43-594f1df26deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc30834e-3603-4523-a72c-0c958c4f8bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.143.1.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abd7302-d379-4088-8bcb-caf221d3a159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.148.63.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d76304-d4ee-4ccf-87be-eee4e97bfa12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6eb6506-6137-48a9-9a87-c498f1b88c5c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8559e979-350a-416c-919a-e86740e211fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51e1e60-744f-46b2-8998-94f6da005c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43202f77-4585-44d9-8dfb-934b946f3a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e1bd2a-eeab-4c79-84ab-bb770f5e9f45", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f328c08a-ddcf-4dac-bc08-be8d8ac21716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea49f7b-5c79-4c05-ab01-935c08ef5ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2a72e3-567d-4017-8a96-b719c64caf62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b9720e-5516-42f9-b997-4d354ee9c40c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55cd62a2-8e13-4b12-a193-209ffafbce6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18ce07d-5c73-4773-b9d2-04b58db80a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d44711-2506-4207-ad49-bcf39f3161ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f10ff2-4251-4a06-ada5-dfdd409ab472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f5de81-f298-4b78-a5d2-760afdbf9658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52873fe0-bfbc-4761-b8b6-03708de2203e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80049654-8f51-4126-82e8-2a9525786651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a37be2-0f9d-450b-9053-323693f03d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3a6e46-b77b-4914-8fcd-1d2bb520ed39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d89305-a33a-4a91-985f-9790657bb319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404770a3-44f1-4694-99ca-8c81072f92e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c310359-4eb4-46d6-9a4d-dfa8c6713c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0738c15a-efb1-416b-b767-f9c2088cf9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabf210d-d6e9-462d-8a6f-54360ebe3e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42dc1f85-f71a-4d76-b2f6-ca7e0486ac51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c84fdc2-6b13-43a2-bb27-56009733bff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1868c36a-32c0-4bc3-97d8-f231418b905a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44acb2e7-7288-48c1-b730-de62fd285687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1cd918-438b-4ad8-9870-f44205474a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821fc874-f236-4de6-83a4-af33cfcb1daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5adac2-3995-4aec-9068-2ba2a039d608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d44c957-c798-4031-8517-3863d3efb304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7241126f-1f77-4401-959b-a86b0f60c1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb961a9a-8d29-4e30-b5e5-7b8dcf801acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c4c9a6-1f91-4bc2-892c-1ffe98077734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2d772e-e206-49b3-ba3a-ba66c2e19493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b0d87a-42ff-41eb-8615-4a94bcaa70e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99d6d0f-6f91-4d85-bae4-7b8ad091263b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c691ebae-32ad-48d4-8afe-a99453aed770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae6b1d6-21d4-4243-954f-de243df4ebc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91993c53-cfdc-493e-8e07-dd84b389856c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d2890b-2dc4-495d-ace9-2aff6d3240bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fda000b-db5c-4339-a87c-5c2db7b9c5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d216095-9733-4a63-aa63-19dbc1f19b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22756f0b-b7f4-409e-92ce-a6eb5677e46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8793ec80-a17f-4f21-9dc7-c41450d4e346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e2cbd1-a032-4d1d-9fe6-df2ef25566bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c505bb09-93f7-49dc-8f5e-ed48d871478b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2dce913-5f30-4dd4-a888-643d86953a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e10fac-ec47-41b9-a383-bab79b55c560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb8f3ec-2216-42b5-93e3-a47b8c7259a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c2d908-2448-490c-834b-0e6f6b67851b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5e847b-a88a-46bd-a28f-c05e3d04dbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c531c2-1fdb-4656-a259-2107f8165a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c225363-f38d-444a-8b56-348f87341df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4791c2-4423-4a72-8e66-2545a4a6c0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a60e251-4ada-4de4-b50d-b170f9868cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05d0777-3a8a-490d-94d4-f016bf86760a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b140d410-c721-4c2d-befe-a999f1e61794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acf75d6-c384-4ae1-8648-a757ceec3d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99795a9-320b-4eba-a312-106f58343081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934d46cd-4b87-4ed3-bcc0-060d1ac97fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e314f84-654d-4a24-8d0e-287d511dfdcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338b6f9e-790a-43db-bdbb-0ce19c91172f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ce9dcc-e206-45d9-81bc-6cc78ef8d458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb15b8b-c5ba-4821-9671-228ac89b251c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84574a3e-1409-410f-9c85-e9b8e44a5161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7469dcc3-20a4-41dd-a96a-aa9d3212e0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bf0cb6-34aa-4013-bf66-bbebb6801046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e18642-60f9-4132-861d-021727e2ca4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522b3bb9-5358-463a-8195-122ca5400de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658cab3d-0e99-4535-ae2d-3a9ef9d3f000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251f3d72-6579-45fc-921e-a39f5cc61b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35818eb-5c3e-42bd-b5c5-1d244e641f25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.168.175.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480e10bc-0bb9-462f-89d0-02e3a2a6c961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b475dc5-f707-40fc-9809-3e136041acc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a768826a-303d-47a3-b899-2fb5361f777a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5d57d5-d321-487f-9314-bf6d509ca8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10b3a07-c8ed-4951-a554-f688c842017d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0eddfee-6ac0-49ee-8ad7-20b102a0d088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181cb0a8-a4e1-451b-bd71-044273d0d485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.221.201.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c2cc81-f572-4b10-a352-2bd824c7f1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284d0506-d475-497e-8ca0-631c4889d1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24fac5b-69ef-4e6d-b9ca-0a6c6b493a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea3e965-627e-4290-a66b-2b9e6631cebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdf0ef4-6095-40a3-ad65-a03586ceb261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fe1479-a313-4d95-91db-f07d0884963c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb4da2a-0b90-45f4-94d7-e966fae722fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.218.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b47deeb-8462-4f76-8419-9f8c3c4fda6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac26182b-0c43-4815-95f0-69784a7eb224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1235aeb5-0380-4ad1-9312-d15d673c2673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fefa713-8899-4f12-b046-05bff3bbaa84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211546e7-a569-4878-a8bd-2d01d035acc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a539f100-76ee-4749-bc66-543774742423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29a64c9-5594-42ea-b8a7-fe32f3062933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efab19e6-9d3f-4b3a-8ff3-c10cd326ce7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04e565d-c986-4b46-b322-a99cd6cfa23a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375ae3b0-209b-45aa-846e-ff478189811b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a6cf57-79cc-4c49-bdb9-1c5c31eedd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5523ae5b-39ac-42f4-8f7f-53dd6cd18e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b3209b-9747-4824-bb91-a3bc3df1cbcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.70.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cff71c-e3e4-4a62-8853-ba7abde32dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b82c46-f121-4ff2-b0de-a15cb8c04aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.77.138.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f068bd2-4d33-4610-8930-01c1224f44a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.186.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917d3955-474a-44ac-b5e6-421b7ba4b098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.8.186.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb67544-8180-441b-ae15-c6e6d5895fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401ff588-60ed-4b58-a10c-18dd72b14c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b864635-0572-447d-8d0f-9d1f554c28b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc0b2e9-d1ca-4035-a67b-3756187ea37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.188.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a991b70b-ab59-4537-93b7-97c14f39b477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069189f9-dbf3-4684-844f-f249d376157d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842b94a0-35f8-411c-a54c-ede64c8ebe5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59d7134-e14d-4e85-bdd6-66a6c0bfb7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9add19dd-34f1-4801-b8ca-5dcfc4b360c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b003d3e8-c8d8-4aac-9df2-aaee5e44cb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.165.16.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337f77ce-3c90-4be5-8a43-1c612b902e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9e12c6-57e2-47da-bb63-900d54d0f5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d219bf5-758a-4ebd-b880-87b5976cc508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c7c813-318a-432f-9815-80b76844cb77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f29a5b3-a5ad-42cd-b653-76615b4324f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d86a80-69b0-4724-9783-fee6b232d34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04262f71-8d69-4264-8ba1-9ce4b6661f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.182.86.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6f241d-72c0-40eb-bed2-5bde7c0cb338", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463873d2-b8df-4db6-a23a-6aefbae8c3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a19729-b1fe-495c-a127-378e511154cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a16ef1-37fe-483e-8d05-8cc1f3e25fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae660d8-8516-46f5-a3fa-92b3f4cf0a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0c93b9-2157-4b7d-92ef-b95de8212c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e232679e-6911-40c0-9293-24580d824fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966bceb6-596f-4645-9d7a-ffb63e402a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec75c9d-1ba5-4555-b85b-976bf22a218f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587f290b-eb93-436e-b3ed-df0434f35cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3306979-c0d4-47f7-93bd-3f5103777420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d006f8cf-aa8b-4082-98f5-b257586db392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28679ce9-e959-455f-bf90-ab6a3829e7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294e2015-4a65-45a5-9300-fa111ff9f7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255e0b16-412b-4d5a-bb45-1394155d7e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5595e3b6-9672-498f-9015-2f72037a264a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.210.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634579fc-2b73-458a-a228-2436273a9916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.83.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc29782-9987-40fb-8162-0d9624031cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.85.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ffcf98-b68f-4464-a626-a0b3de87ee19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.42.205.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04865615-0066-4bab-8f82-153ba65d6160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.48.248.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e8f6d4-4a9e-4a61-a00f-f08683260126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.16.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8d7508-0de0-46bf-b58a-089be3866d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8454a48-2dba-4016-bffc-7ad6a9666c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.55.14.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a649d19f-60b4-49df-b8aa-5b4628c093de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da239fb6-8154-49d1-9841-e7aee27dd13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bd1646-d882-4a7b-8e53-1f438592f6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06c4c52-ada1-4d3b-a1b1-e77e42e14ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673ca833-f425-41ae-b90a-dc5d2498086a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b227fd2-4394-443d-ad70-27a7f62c0330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453bd9dd-26ce-4845-81ed-dcc4edcc6ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b15df7d-876d-4d55-9b26-6a5479ad047a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfbc0bb-0622-406f-858b-594284032417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da7be3e-849f-49ac-b07d-10e77c101e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1971cadd-cb24-40a9-94c2-9aac9c8fb4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81f99f8-c3c3-4ebb-a85c-d6030a856eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1a0f21-c213-4fea-a4b1-514477a58819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ea1f0f-42bd-4380-a809-bc60e24086af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f92324c-82c8-4414-9d76-1081c8c5a4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d4a894-188b-4048-88fb-98e171e1819e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d902c4-5749-472d-9c2f-0b03faba0717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c78bdb1-cd4f-4b99-975b-50e3caf5f5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b12f417-b7ef-4e93-90e4-a57f6985640c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f819d7-7c22-46bc-9c70-1835d58978e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5794cb0-ffe3-42c1-921b-0a16d01b61c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b8d131-e8b9-42ed-bda4-54954280a065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6766fcbc-ef08-4348-bd57-aad4471618cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d930635-6a99-4ad8-99ac-88443619f182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1cf20f-a6ef-430a-8073-acca017aff35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3d24a6-6b19-4724-b079-ce6970cdc1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bae42ee-f07e-4787-b640-dd5f30e9c161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183c5ed6-0f86-4252-9ba0-26ee32303fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e6afcb-6bb0-48b6-9dc2-44e6aee3b8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d4f729-7c5c-407e-94aa-bb2658b22ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c22c5b5-175e-41ba-b863-75e374db84f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba09577a-1455-4a46-8f87-63849bb190c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1667a9-4a21-429a-8cc8-9be463a8cdd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b68e4da-9309-4e3c-9629-0a80a012547e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979bd571-55eb-4394-baf7-aeb74e146614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ac4f6e-9711-426e-bdff-5b4837d6b12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044c820e-a71a-40d1-af82-432672b2aa9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.123.210.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9eec4ec-7ca9-44a6-958a-032bc6cb5495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.123.233.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4056aca0-3aaf-4826-a45a-80325e419d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.123.246.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6bb389-a7a3-40d4-85aa-2b58b2af568c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.128.102.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb978e32-cfcc-40e2-8fa0-5a799a2eff9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96493c0-13e6-4213-9322-6f5c05a3365b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.161.248.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff67e7ac-bfe6-4ff1-b441-839c429a1684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.175.83.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c866ceb0-f85c-42db-a773-c14f0d5d3f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bddbc28-15cb-4087-a82b-961810e883df", "name": "Malicious Host", "description": "Observed: WEB activity. CVEs: CVE-2002-1149. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ddc8c1aa-734b-4566-92fb-0763fb761e42", "relationship_type": "indicates", "source_ref": "indicator--1bddbc28-15cb-4087-a82b-961810e883df", "target_ref": "vulnerability--59365971-9aff-4d45-9779-fde5e05a902b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee2ab1e-2dc1-4caa-9639-dac64d324a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb948dc-290e-4aa1-bd85-492dba95656e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78544af-3933-4c8d-9a4c-cb82a95277a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6719b5fd-66ba-418f-a225-e594d9f9f30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea0dc1d-8414-4b10-8794-cb558db711a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e810f6ae-58c7-4b73-bd53-f8764db09b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05573665-85db-40e1-b1a2-e1f1218798c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23842c3b-7e18-45da-aa3a-0350b15d22c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbe5e62-ea48-4357-ba6f-868007a946b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28098a8-b58b-450c-abb1-db1f1bfba170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709c0944-91af-479b-bee4-57c705464cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0277b747-0972-48ca-8db1-b0fc2551360b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43761156-573d-49bb-883b-f679b16d8422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81c69c0-81ec-4e25-926e-73cb6dfae57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da01ff4-b0d3-43a8-a7c2-5d5cb7031111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c310ec97-cde4-4254-9fdc-40fc07109523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9434e076-1ef2-4c30-87bc-7c9bca299c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fa8d73-d324-4ba5-971c-0ae4bfe45ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc4ad70-1b87-4c28-a307-7668c4e801d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfe86fd-1013-415a-8c5c-bfc4f3c1bb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e98a96-9adb-4a18-90cc-8860aefca030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fda4f3-4d8b-4fd7-a5ea-31104e9af338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2d9cb3-1227-4a3a-a057-701b8a91aecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760f7560-3f10-4720-873d-7375b1d2f1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18500e6-b7e1-4ab9-b88b-050a5d115cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a88dbd-f773-4e69-9402-f6fa8e60a778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d36f68-fd1d-46d3-9284-20064f4e82ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae683181-ced0-4f4b-89ce-8ac7764dd247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f9881c-0f10-4cd8-ab7d-0d31f8f310a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f89ef14-3918-46c9-b076-c08633bcca7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe69641-fb8c-4168-8ed0-63c736a471be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acd51e2-a7aa-4f6d-9d1b-418953b40add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e111533-c238-4434-bf59-e60705dcb07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cec5fd9-068c-4c63-8e7f-41ec7dad5877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d976e1b-fc68-43be-beaf-6c503ffda1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103e4440-f8b0-4526-9e79-08b6a9f76734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab83f90-9a3d-475f-ae56-baeee19da2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c8f362-4d16-4109-bbf9-91062053b79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a874ef68-3916-4a4a-9644-fa35fc234d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2986f97c-0049-4920-90be-8e00bbb19091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c5354f-aa04-4186-8ebc-7b8826093744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edf83b2-2ff3-4d2b-b7ec-0ce8ecbaeeba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86b29ed-289a-4e25-bf32-e0cb323850d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53d08bf-51f3-4747-8257-30b96dc2fffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db65d5a7-6f22-463d-81e0-b1cf997640fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b92b92-7afc-4a36-b6e9-903991459b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e266fd1-ce1a-4389-88d6-b935f7d7f937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd0e933-1182-4ff0-994b-14d50f816491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1504c1aa-9b17-4359-9340-ee6f0aa9983c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94618d36-9269-4090-98d5-9146c928fa85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb30af5-57bf-48d4-8a01-ba1e8917ec39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e8fc69-db76-4a8a-8fcc-a7af56c03ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c99def7-5db0-4fb0-80a8-72ab9b6d1fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245944b0-6111-4d4d-9a84-edf1228627b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971a21c2-22b6-4f91-b974-f6495efac27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620afabb-c8c1-4bd4-8ce7-a706df8cfb2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd060ef-0a00-45c6-a1d8-5cca91c42b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3229ac7a-6e7a-4256-9b9e-2ecdcce98b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8962e05-ff70-4e87-9a22-da4564d0409b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7393cfa-b51e-41d8-bdcf-845b47de47ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd98af7-f988-4546-ad56-ad75570a15ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3ab67a-9935-42d6-a2d8-796f44dce974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3a6697-fb99-40d4-b32f-6e0147a25bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d5a1dc-426a-4987-bbc1-aceb7080d890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5b556c-9f27-4260-af18-b5a03696d81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2715c8d9-eda1-4d89-b34d-6a4b0f70c745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea4b047-f24f-45c4-87b6-227e028e18b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae26ba75-df45-4752-b5c3-eb6f4762a843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b66eba-c1ad-4994-a9c0-9a4a84d7dba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89889f86-5fcc-4168-8fc0-ffddf9d3314d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8701eed8-79fd-4fe4-9dfe-5553fc7434df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73eaf92a-68a4-409e-98ff-dcf1da22faae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518e5f48-a8aa-4768-95db-849fcb83545c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c681be4e-df78-4d6c-8722-dc4d3eb051e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e7ee3e-8de8-4e4f-a2a2-4292ac272712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f00782-9145-44cc-85ae-4b7a7578e39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1f7391-98c5-44dc-93fb-ddc56acbaf0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc90960-9d38-4619-bde5-3bb927d9a89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a130bbc0-514c-4be1-a6f0-b8f76062760f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41af14d7-a0cd-4be2-a28b-756bdd650903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a72644-726c-4717-8695-d56908b757b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f235658-1169-4403-a9d4-946aa326c95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272bc549-2f49-47c2-91af-05fb1a81ee18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206421d9-7c17-4c3b-9b27-7700c59ebc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d590d68-afd3-4fc0-bd41-cd0796fc0d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16676130-bee0-42c8-a03c-ce843696408f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889cf647-c4a9-4e0c-a71b-b11593e424f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324bbc87-2218-4d6a-92f9-fbaf1f95d43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971e2589-3b50-4d4f-bae0-7a32c575261b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335f7447-e208-4380-b583-7c5b614b7e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca080a7b-590a-4d05-a683-a7dfbb60ac13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c279b2f0-93d3-4ae5-b179-b72ab0fa390d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8adb7a-bdce-40ed-9037-bc85cdc854e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e88fe2a-02db-4831-983c-8274f3e3bed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0f8ffa-8f4a-4b42-8b5f-6a6f14c7620f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b086064f-0b14-44b7-a910-f498cc90e10b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.245.242.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9221b4c5-c303-43c3-8d7f-013088f17023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f43282-a2f9-48e4-ab87-45022a9bbab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.243.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801dea86-f19f-43ae-af50-c37d4a61ef9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.87.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b8d0b5-d2be-4f88-9ec4-90f0d7e0a0be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc34d846-6366-46a8-8aee-b20bd00f2156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.54.179.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d27356-3813-49b2-bf57-1b16a6e3989a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.62.32.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ccc7a0-dd5f-4d1a-ac10-c4a4f628a756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.72.60.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7575fc6-63df-45cc-83d1-509bb2fe816e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312009aa-2bb2-4212-87d9-1a2bfb6878e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9fecc3-b3ac-4289-84b3-49146e3f52d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848c4a07-d5b1-4c29-bfe8-7690613ef3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001991e1-6fba-4a5a-af6e-d73a21dc6e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e34420b-dfc7-47ca-8c96-f69936f758f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ad448e-f104-4d22-9b3c-ae5db90b4faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf35a13-32d8-452a-aa02-26d51562e90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24185779-a8cf-47c7-a81d-255a063c09c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55493676-43dc-4df8-9a79-817fe349ac05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1abf40-7ea6-4fd3-a5eb-68b1c8ed0159", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.196.150.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59f0632-3430-473b-9370-affc02c08f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.201.235.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bf426b-71e1-4577-ab08-c43612a48ffd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.202.19.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20cb1016-4805-4182-a36c-ec80071938b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.202.93.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522c0f00-3e86-4a38-8d64-ce9254bda75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.204.71.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6504c15f-b612-4edc-ac5c-f34818aebbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.218.16.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7a7a27-7f34-494b-b56e-aaab2a543e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.218.3.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e19b9ff-429c-4dbb-9f75-1dc28f8a38cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.240.181.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aca70be-5901-4713-9afe-9928ff6239e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.155.134.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5963b6-1dfb-4bef-b252-a37da4a2d84c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.243.14.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292076ad-5b58-47aa-85fe-d1e038f30a91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.115.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5e6ee8-62ac-4778-95da-9ea902c6db8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.31.52.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917bf2b6-bc45-4add-a889-3af1ff64529c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.39.68.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c58a387-ff3a-41c8-88ba-8462ff537304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.177.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d44628-6f64-4f45-8255-37c17bf90976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.178.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804dcbaa-e91a-4cb5-a357-a0765554e094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.12.119.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b5cb6b-4557-4ffe-8e2f-dc0326b6c54d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.12.72.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db722c2a-bc09-4446-8311-4ce643ca3d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.163.195.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb20752d-9210-41ee-9694-69ffa334cd04", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.52.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f9cdad-b74a-4a49-9753-2ef158a88a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.52.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d361a39-5cb0-409d-a828-ffe820c48b43", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.52.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afcdc27-aa75-4b8c-a174-430772f0a069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.176.54.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78da358-91ea-4400-a968-34607290ca8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.181.41.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f40488b-3024-4667-b9a3-15a0b5dee186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c61778-daac-4a28-9d0e-9112037eea6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.89.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ea134a-0ff5-4286-8319-3dd1d69ac339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.187.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4e6c69-bd52-4374-b784-c22e296853ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.233.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3e012f-34b5-48bb-aa57-8d545bd9c7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.249.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcb06ba-15b8-4fde-8830-7e48077cef9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02f95db-8b05-404a-92a6-99c44823439c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec44098-1d76-4cf2-aad0-950885bcf4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b4c330-c954-420b-b32b-6f8496c2e5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dc9829-ed92-48aa-819e-fa5a90c4eaad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ac17e8-f5c7-4c07-8fe4-a4902a560a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e7115a-02c5-4c6b-a869-c996d4ca662e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b35ecec-1242-43a9-a209-32dcf228a956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d98c6b-4fc1-4586-bfc6-35535b83f45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fc67cc-420d-4cf7-88c7-a1ac171e4290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37e2e4e-a8fd-42a7-80e6-af6a48104b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb03934-1c92-4e3f-b6b5-2f6ac374d71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e46bc33-cc7e-4a62-ab54-beae7b7d8799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e748377-25ab-4fd8-bb98-f40d71e61a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb11472-b253-45ac-95e5-3dd6277a9462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272e9695-cd2f-4f82-bf0b-eb69abc14913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ba7447-464a-4e2b-984f-f62ea83c4ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839ca857-1b83-4692-b593-5c8f329071aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f62192-f985-465d-b7c1-9864c367258c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ac56a0-962a-47b2-8c13-11957fcc44c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6246d6-65f7-44f0-a5c5-0adf02915b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24591b68-eecf-446f-87e7-ac5511a017f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76094446-aea4-4c2a-85ce-9b40b382ee0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc43a7c-c439-4649-aa51-e5fa3bcf39d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fd8b47-c772-441f-8d54-5427e52c0ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1449529c-e2e1-4c89-bb6a-021dc20aad3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408d2d9e-c94e-4173-903c-b5e5a5cc8378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6fd92d-67f6-4c4a-93c9-9ae0ffb12aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97d7f0d-af94-4055-9e7b-6869f1c7553f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400481c7-c78e-4d06-b48a-cc1eac325d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbe1f35-357d-4497-a145-c05433ca4564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ce8cbe-9b5f-486e-9a63-6f96260c32b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04099053-d224-4e82-ae6d-cce1481bc009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9cf5c0-b76c-4563-8a16-fea10da85425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4c48a8-8c95-4dc2-9681-e4653cf897f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9676b9a2-bc68-4603-a351-1d71db4c3dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0911e9-8132-4f78-b87e-a02b61b2f691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e1c901-9eeb-4726-a01f-378c740ca0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ca70b9-7984-489c-a3d6-1121f36f300f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f12f2f-5f1f-4c91-9313-f38e0d1b6b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940e7ea3-a69b-43d3-a841-516881497825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd658d8-3119-4842-b63b-31d6e27c7440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05efb68f-eb36-41f2-87f7-220f0dca56b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049881bb-4ccd-4c68-98a1-2f5847925259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5b40fd-2c8d-4d56-8a80-ab61ef2783bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc630fbf-7707-4c79-8266-c716aa8e66d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad3094b-5994-4478-a470-409ddff72dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a797de00-3873-47eb-84be-c28be39b9028", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97aa0b61-0a2b-41d8-a2f3-5c2fda1f5594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0ba3e1-87c9-4e68-863e-ca8a5f1f39b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb20154-b6b1-4e56-8dad-4316fac46292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da71cc46-4f72-4452-a440-85a51fd3593d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a8aaa3-a565-485e-b7f1-4409ff495693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3bad98-fc04-40bf-aca9-eac5ac43dffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d732d5bd-69a7-4b27-97ac-29cb957967be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b40ba23-80ee-4a15-ab47-7aba9f56a6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f70be1-3d2b-4464-a453-809525ca4ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54dc224b-9b26-48ef-8c8c-3dd0dc8fa997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4f11f5-31a1-4965-a172-e16ebe82eb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c765ac-d440-4cb3-a2a9-0b702647952b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a462849-7614-4cc0-a990-3ecfbf2e50fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306c0fc3-1135-46bc-a73f-f984863ea1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97826d84-f1ca-4b61-bdbf-4304eda4747a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86b61f2-8989-4e9c-9305-8c692fae7ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00db7fce-e261-4e28-8aa5-6635f9df7686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5066969b-bd7c-46df-b532-83300f38057d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7144319-1e6c-4571-9311-c82ec29d5534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cedc013-b4c0-493f-bf5a-35626acf4622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5513a4f-9860-420a-931a-d43bf7355280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf12fbe0-bcbf-4e58-bb01-c324f23bfcad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc589ea-3bb6-4ed9-b8f3-b80c49c5855d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b87272-eb57-4871-b791-81edbe122fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0f64d9-0776-494d-b297-2d7069ad02ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae80253d-210a-4b79-b06f-7ae0155b5b37", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3b95e9-12d1-4e07-8867-770e0f4c5967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26e63e3-7e85-4249-aa03-f36b004a775a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b139a72a-cbc2-4d90-9541-84a242abc4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccdd18d-444d-4e9e-9536-200fdc266a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7696a76a-4887-4a7a-9062-0178e26f6381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794cd62a-de52-47e8-a8d9-be8b8b0e9f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64bb949-3048-4ce7-ba9f-5dc93de948c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03706380-da23-4c4b-882d-4d6f7185fc00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da4a4c5-ad02-4c42-8444-cdc5ff356c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bae9fec-8990-4abe-8273-038abe8776e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa17aece-5e51-4b53-8a21-f43e2349cd6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2170be56-ae89-4155-acae-39e31c535cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b04e4af-0cba-4e89-ae73-735d3cc0a995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5883e1-9acf-4e1f-8675-d540b4be7942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820a2230-2451-4c20-8242-7f2d19a94835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da82bb07-2d5d-43ab-88d0-e50d8bed561f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5418db7c-1d5b-4ec1-a286-28e73161f8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b53baa5-9348-48df-a160-6a83c997b10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3208c2-5618-4b2d-8857-3aaf2589294f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363730fd-499b-46f1-af4d-3df1f07c42b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec4f257-5936-4abf-8918-4eccc19e8df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964e26f5-968a-48b0-9b52-1c4d278715ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd3c863-dded-4101-875b-b5ffabd91fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b80e5e1-c1ec-4adb-9c9a-047447189e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc44154-3caa-41aa-a016-3d26ca24b370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1267ef6-6700-47ae-9a66-2f3770d32157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe50a16f-8275-4439-98a8-d702ea963b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e60cb86-c77f-4945-829a-ef348d39b72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7618e32-8979-4751-90d3-0c739de94b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714f9b17-3969-4746-b1f8-1ed58e94ee6e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b41cb0-0518-4907-838d-c6eeeb7d86ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d221bc42-04d4-4b51-8c03-527ba1a24869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cab207d-b5d8-428b-a95f-f56f2912dc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf00d95-fbc6-4c4c-889c-fdcce61c7c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e06b41-5e5c-497d-aac5-76b05edf7537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865bbdee-f048-42fd-84cd-81d0a6551a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b25436-ec1a-4762-9fa4-50ec2bef2e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5053c585-fdc6-4a9b-b1bf-f6e53b3672a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41987e36-0834-4d9d-a029-0358e05aff37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b710698d-32cd-4393-9df3-0c421f262a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639ec4ae-14b1-46e0-880d-b94431f0e57a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9f5344-6697-4330-8de1-671d75661f62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc2dca5-0b92-43b6-a0bf-41fe9fb9dbf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393e3d6e-2f03-4a47-b110-98a4946f0d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99165af7-af72-4914-8d83-37f9b5f0480d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d70f74-a173-431c-a14f-7d0ea9a4e7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcafa0be-0dbd-4df3-a331-5b75aea006fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15c6456-b19a-46ed-bdee-fa954ef0bef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e0053b-d029-497d-ac6c-b42e8e0d18fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b227b7d-3e7c-4ca6-a619-9fa8989ee88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f219abcb-e922-492a-a410-991bcae37967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd7e112-4d29-4ff8-a4da-9af341f921ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931185f7-d37b-481c-94a9-e44951e7d1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0173d6c-4117-4566-8ac9-0172fe099e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fb72d7-8c37-493b-a699-d6f636c20789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45be5dc8-ee92-4e31-9958-548ea6c27943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ed19de-d08d-4dd4-a7b7-87a3f8c7c96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744836a4-fe15-4d38-8ed4-b7c9ea1c2f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb5be02-24a6-4d4d-8b9e-df60c09f3906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c95682d-f44d-4f4c-9b1f-1795fa3ddd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34e02a7-9fd5-45bf-a4ed-77bef6ae541a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34c3866-c2a2-42ea-9a49-b35bcacd28d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cd0371-5e26-49a5-add6-1b562b484cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a276d29-7b46-4e84-bdd0-f4b517e5c5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f249afbc-859d-407e-9593-75619d42922b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060b7309-a17f-4ac7-a2df-c5fcce489a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04cca8d-f38f-4564-9026-432ddccd2e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f831c7-06cf-4b55-bcc7-385da9c72fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df16a742-9fde-43ef-b9a9-0ca164d52653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8f5f9d-b54f-4624-bee2-154097c63b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447ba7ad-0145-45c5-8b1e-4999cbc0a68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466bc088-5cc5-40e6-8e42-573ffce7f048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba27afc-82b0-47b3-bef7-98c972ee6826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300bd553-cb57-4f3a-8a9f-0f8066aa8c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8425c5-50dc-45fe-997e-4e74a5862f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5961b1b2-9f19-4de9-878d-263b743f901c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ffbc64-4249-424c-9005-616b97b09955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979d5c19-213f-4f5f-a920-7a061b446b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fd065f-6245-4d1d-bb98-01e8ed334f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdec7e7-f0f6-4cbe-8732-81640ff9a931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028b843b-d908-4e29-85d3-b4bb187fe899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a236ad93-8db0-4626-9b90-e2ddcad43674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0945e2ce-ec22-4b9e-94db-a48219e124fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee8c8d1-8806-4fcc-9d5a-577be5e3f5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43a3ad5-7693-47dd-94d1-ce85d0368e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a2aacb-3fe9-4f41-94c6-623dd5817b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6083501-87df-424d-a24b-7194969ab1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7290c8e6-b1d1-4aef-bf37-32f49bd8d529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2820490f-ef87-4872-a1f0-d024296d046d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e3d0f8-b147-434a-a798-df8b13b1841e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d4aaed-13d1-407f-b9b1-dd2bad85e87a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8bb8b4a-efd1-4881-a77e-6131be79e409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077030b9-5c5b-4404-adb6-990242b7f28e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.244.240.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf67910-9c69-438a-87c5-48869aed580f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.27.77.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e674ab9a-a5b2-4ca3-88c5-e7c8845c22d0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.37.121.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a12702-580c-4a58-a0de-c3b42fff4cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09090174-2036-4480-93df-ec687ca4faa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.144.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015642ee-1a2e-4500-a2ef-486e4df55166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.182.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4253b1-4121-493a-ac7e-665f312da0da", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.50.202.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c6faf2-c7ab-4f8e-8ebc-d89e5bd85769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.231.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a53fae-3cd4-4843-8a93-492ae85650a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec171f8-7bec-4031-9ebe-115abcb0639c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f01de06-8ab9-4c01-ac58-4a4e4e679ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01eac2b7-2cde-4931-b6a1-970aa44503e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248bd467-f34e-431a-a4a7-f112a85608fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb844ce-0477-4787-975c-d3ea342c9548", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.53.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5641ef76-845a-425c-9cc6-d25c40d6a87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.62.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c65749-044c-48b8-8b30-b4cd41746c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3125054c-76dc-42c2-b116-3d7ce8a267bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.231.235.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fd79a1-5e8c-4c03-a723-d55a4795ce64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.231.235.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b9ea47-8af5-4bd9-85a3-4cb4da353635", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.244.88.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac03a612-ab6a-4727-a59a-f4837ca8fa6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.244.88.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb965d3-1a05-4f59-b1cf-d8130594ebfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d81d89-9f0c-4ba3-9626-f8f94b282c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a3f250-805f-4391-875e-37831efcaee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d90527-4be3-4310-8eff-f894e5b16416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db2b2de-b06e-4875-92f2-422e8596f87a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9247939c-28de-4d81-a9cc-0c400e6eb5bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dcd4ac6-c309-4391-945a-3b8fe0314a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668a4143-60a9-40ed-82d6-c82e9d5c3861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a793d7d0-4ceb-4dd9-9640-a4089226bcb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6e32d7-0d6d-4ff9-b6c0-bbd3d5945502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094c8e14-79e5-4490-b9da-f7e896e57640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60116f5f-8c9d-423a-9ef2-f0c70f2fb10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65dc1c3-c000-4b6c-8f07-bef23b781b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8acf41-541a-4cc5-b189-12fac48770c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9d52ca-b68c-4941-883f-f944df1e739a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb258e2e-f17a-4bec-b7ea-5f0625530af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835538d3-a88e-4d55-8174-f8cfaa037526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3240fcfc-d713-4e77-95ef-72b3fc4ac3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5f9199-84c3-4c36-9f29-754b9378760a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d2c69e-9e7d-40bf-a1e3-236aa6c3187f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6de34a-7102-4488-b763-e392715ea3e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790a7bec-5176-4b0c-a43f-8cc1a7310e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247dd55a-2b51-4873-9d79-07197b840c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399e89f6-60b5-40eb-9607-e4a5aaa8eb58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb3979d-306e-4b47-b106-fc07b290c285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29818d49-c1e8-4b1b-b435-33851b1e443c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f04f17a-61d1-49e4-b791-9c95d9bf9eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e047b4f-fb9d-4280-9687-39564e55958e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9944d1-bad4-447d-a25e-9ea569387ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c547cd-11e5-4cb1-818a-b27749727b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f888a37-a9ef-4bf1-89d7-6ac62bd3f039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528b615e-d0ef-4c04-b387-08d71874fce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9f95e1-60fb-4482-9f71-8c58f2d6d782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ed8978-9f7f-4b5d-ab1a-8d375d55e9e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbedc42-cd76-498b-a9e5-3c45f6be93d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644f66aa-8b09-43e8-8e8a-39459dbd34a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32b1adf-f7cf-4637-b8b4-8462520fcde8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f1d468-e003-4627-82af-0ed053ba34b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5bcc55-fc60-44cf-a248-1cc823a1ecf4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ddee43-99b4-4d5f-9b17-8018cb5a64d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decd28f2-8903-4533-9eba-e95964006944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9667fa3a-9ba6-41f8-b4f8-14c5152e9d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d54549-c6e0-4e90-8d9d-a4f908838d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada7c36e-6113-4051-99a9-8d39eac226f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c46da21-bf99-4ba7-b5fb-031f0ec7faf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca342be-2e37-4dad-99a2-72f6e0f66f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec421865-8e20-41c4-9603-bc9f5c06c425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf2c6bd-aae2-4cd5-857c-decf09ec29c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe258a9-5086-498f-8800-f8e8995b8282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cc86a4-b895-4869-a175-367cf5da0040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1787a5d6-4fa8-4aff-8894-e57996413fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f00ecd1-d5b5-4157-bbe1-ced2c97a576f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d080d739-cac3-48d1-bc58-045435b34c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a20883e-8b45-4c11-adc4-d3b69747693d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5ce354-1536-48d8-b490-38745677be2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b941b2-c359-4d17-8e41-63c75c8d32bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfb7892-f775-427c-aede-590297841297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6696ea2d-9352-4f33-90b4-bcd4a0b4a92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733ec9de-954b-45de-bfc1-788aa2287ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b671221-ff2e-4538-b54c-f249fe3865b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d8f09c-d48c-4cb0-8844-5fbfadffa4c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c47c3e-68d5-42f7-bcb9-f2ba150f01ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.235.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430dedef-9a80-4da4-8d3c-a5ee76489f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.181.147.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ffd05c-f3ac-48dd-a300-8dde8206605f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.64.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf719c52-0fa0-4ff7-9c3b-9a5c8dee1760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.44.121.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadd91d3-6584-4702-9e4e-5176362a8a27", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53aeb319-0890-4f47-85d5-d3b3914136b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ad2112-8ea7-4e0a-ae0e-5b1eebebc4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c802999-dca7-432e-8ce0-2a5794105627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.87.19.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893861bb-68c9-4cbc-a9c0-7757e38217d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.100.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b35b2d-8b7a-4a16-9a82-ab8178e7f58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40c0d2e-f7ce-4a52-b6cf-1a11109b736f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbcc4d1-849e-4a9d-b0de-cff39c905f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.88.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8271b7f-6f5c-40b8-b898-577ab111870b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbd7834-1e03-437f-ba3f-19314eeb8c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.17.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efca0bb2-f3c8-4bbc-981f-5954070fdf21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7c01d4-f89b-424e-9af4-91450d8258dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a718eb93-40d1-45df-902c-1301c9d7c33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2129ab87-37ee-468b-b538-ea3f041103cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.197.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf0188e-f871-41bd-9ecd-19210a9822c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.205.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea8677a-a56b-4b36-91f3-e01b152230d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70824bca-8eed-4b91-b6f7-d214706e9b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.207.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003a7a9f-0906-46a7-9231-376752d03e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.213.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9dc3073-315a-4a66-aa31-b49b39ff2245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.32.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880bee32-546f-40b1-bdeb-989b6dc85df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.33.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ef89d4-1de7-4a23-82ae-cfcc16372ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a731106-84f9-40b8-adac-b2d2beeffbba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb25982-078c-402a-9e10-aee4e6e4488b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d2c472-3c39-47f9-8ba9-079d5afb1e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5556eb-5191-49fc-886e-ebcc7af8fc9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2bba35-6e86-484a-a1e0-1668c6d6d210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.112.233.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01663580-20bd-4f83-ac88-c0479cf80b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.83.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17431b29-0a6d-453e-95a9-8a200dc1a917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0228c9b9-2aca-4589-b55a-dd8a88ac3a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1d12b2-3931-4298-b61c-99afbdd6eac8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.116.34.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf33511-bae4-4b89-94fb-55f65944185f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.200.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd6125f-18bb-4c6f-8a43-1c9aeb040511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29297255-dddb-4894-ab00-651b27cf1afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.208.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f34acd-fc41-4417-bf5e-256704e1c609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b6eb18-1e2b-4f86-b734-f9aa9b15e648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0868fa23-e0ac-4ad8-b948-85e403bc5019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a2a5ed-ff06-4e24-b97b-2e9c0fefef32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2c95d9-b70f-4ea2-802d-334b632ec45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5f2d46-690f-4ea1-a48c-f2fbd7a1cc97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e38e34-1514-481e-9afe-0d88d8d3e65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902729b4-4609-4c31-a3fc-2c635184e1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bccafa-846f-4c6e-87f1-276f6c6c6e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8925952a-3b08-4690-b3fb-6bb2f95a7ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.225.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9c06cb-78b0-4179-9c24-ec6ae76840e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.225.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a387aea1-6313-40e0-aded-c92433d25700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0f8281-3af8-4808-b1a7-ca019864cba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bab415-554c-46c9-80b8-2c45b1794528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac88db50-effc-4ba4-b354-c6a200b6f7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a938a5fe-77da-4e36-a7d1-0f8f65373d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d71602-2594-4919-980c-314ccd1d2fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.248.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5dcb93d-c6f7-45c8-baed-9e525786dc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd399cf-c048-4cf2-b250-7630b49fe7d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.102.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6f3919-1430-4d6b-abc9-bb2716ea5f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.72.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5b0ca0-a9f2-4c59-ae32-7076f3c42256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.74.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8081411d-ab4e-4257-970d-3d3b55ee3f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.75.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a51d69c-ded4-4df9-837b-021ea719e58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.99.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fae663-f340-4f53-a7ca-c7d6152d60de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b644069e-4283-41c1-bdca-ed9092af5a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5fbd68-3439-4f64-bcb1-62404b9bf92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988e251a-651a-41d7-94b8-076ed9ceb87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.123.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca94ffc-850a-43cc-990c-72e46b5fd176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.138.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321733bc-8b0e-41b6-9c53-3c814162ca92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.139.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1625d5-c447-4c8f-af4c-bbc9f843f27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.46.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02461366-af86-485e-bd6c-c7912cc8e5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.46.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a3258c-f124-40ad-8a6a-5b43159a02f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.80.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e0214c-c83e-4683-adb6-c64f79cac94f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f484a692-9adf-4887-a5b8-5caafb76e3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.88.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afe13c3-12f5-47e6-b91b-ace2011b7de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.125.105.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3921b2d2-cd76-4fa2-8183-409d7649cf36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.153.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982111d6-0353-408c-a834-056f11a6cbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.173.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e76c8bd-45ab-4fc2-ba96-f80746844b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.195.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c577f1ab-8f1b-47c5-a055-8408f522e03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08a1d32-b664-4a7e-b8fb-7e330b9f925f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.204.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51973bc-7032-4efd-bfe5-aa7fbe6360d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.208.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c058b8e-e356-4cfc-8db3-97334216d326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.210.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5d488d-6675-4365-adbe-fdf45a7360b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86dddd0-5b52-4d26-bf9d-f8f934db3f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9255669-036f-4726-b099-d91b6c4a3d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732d2b6d-1f40-4523-ad7f-3c372fa76445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ea3c88-c975-4185-8014-d4eac6e89305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d848b838-9bc0-40ed-9746-c36ae20cdebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc98f69-3d2e-499a-9e78-05cfb87d98de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca3be7f-f2a0-4fc1-90c2-b7bcb0523237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.75.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380bd870-8d53-4b4b-a452-580a7abb8a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.78.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72755b74-af52-45ee-af0c-7d5e68ae1f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.79.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7ec5a9-6a72-4a87-8114-730d0c6f7664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.82.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3181c357-1fbd-4d9a-b8ee-fd3d2f8a1d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a458220-71a0-49bc-b569-692e802bc125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.94.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb8c4ec-3406-411f-a513-1425d7f2ce18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ad9d81-8f98-4600-b7d2-86b84d0998bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada7c51e-afcb-4d9d-ad79-4b3adaf7eb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb7762a-5aa3-4d31-a6b1-e2c191a5eb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613399d4-0949-48a5-845f-a1394869af82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fce968f-752d-4f2f-94b1-05fd098e00fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c488d24-69f2-4ca6-bc01-ad89b09459d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b822ce15-4fb1-4eb3-a969-1a3bc0d8b7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d252b21-3fb7-4964-96fb-73e08f189d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.195.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8689f3-82b8-4a3d-afaa-ea355505151e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.157.23.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcac426a-04f7-471f-af3f-a617c04a8404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213da627-540c-4e65-b61c-52918f3ec4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.10.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a79257-a4be-4778-8a51-0473faaaa045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75154c19-3c91-4654-8144-df8e89d0dda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34442a48-23ad-4200-acc7-faaacb249517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de7223b-0560-4cdd-b48e-2db0c4849b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be4428b-01a3-41a6-9b49-839ebac94007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7538173e-c3ce-4b33-929e-9581df93a4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b1efed-eb42-4b27-84f0-7b67b882756e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df64a59f-b2f3-4dc2-852f-4314acbcd8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c0bbd3-40e2-4a8a-82a6-3808d8b06f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f637c2-0a43-4096-965b-69be4300fd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07083c49-9078-4a49-879e-6fbeff8966d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4819a69b-ea5c-4bed-a954-c4d518d67284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97249c42-5710-4235-ad5d-69bc6433c575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fc9074-2c5c-49db-b13a-996b766d8500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379e8d95-4228-43cf-979a-22bca7c45083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d726d8a-5d4d-47d1-bbe3-f5c9c157d4ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc862b60-949e-4a58-9d1c-c370643b2ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9773736-2f12-4877-9db9-0375e8136186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f07cba-9578-4a3f-a7e7-88e3dae87bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8f5217-f9e7-45d9-a4bd-fde79eea09d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.30.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5311d16f-2465-4658-8fe7-733d09d3bab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1320d6a1-9d2d-467e-b662-1398ded6fc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef38dc0-05e1-42ab-afb7-5e5e1593327d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65b3383-00e1-44ed-b622-8a975a1cfa9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c309c9-6673-4194-874d-2f17165edee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4df957-3030-4835-a45f-10198bd55655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3819b731-0c7b-4032-97fa-71c218b73dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.57.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ca7a60-a7e6-4d21-beb8-c9e03fe8e1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.58.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f5bd93-9e36-4619-aab8-cc756ff7e140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.59.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b30ddd-cf42-43a2-b3a2-28f01e1192b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6350e2f8-8d77-4b07-9375-527e3055e2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d2d525-f785-4be2-a3ff-dd82746fa9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda2433d-1b2c-4986-a7ce-a3384f78fa23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbae73e5-6d2d-49f1-92f7-d8400b9f893b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.63.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170474da-7806-4bfa-8afb-b274f07eee16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e26a55-dda9-4238-b4b2-df6af742d306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.8.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33aee222-5883-4ed9-bcea-b9df58eb8d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.109.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f698abb-39ec-4438-b6c5-2723a5bf47cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.113.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2599c5af-b3d7-41aa-b1f1-3e293dd8f183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90aec8b4-e452-49c8-a5ff-74d4521337cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ee1890-e185-480b-8b6d-d8531e3c711e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b4eba3-59c6-4dac-85e4-047b675838f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8523dfd2-846e-46c5-8b02-4f49c6527034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c071ea4e-74ad-4762-aa3c-06592c261c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5401b91d-ce18-4acc-a509-d42de5ecd7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49966cc-33bb-4c02-b77a-7d6af7b43220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6a233c-bc9f-4807-9ae1-2d117a110b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495dcf5c-1efd-4035-b6b6-5ba2f6c0fc79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ae6c3d-e770-4ecf-afa5-dfe29f3c9836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c851161-b07f-4fdf-b259-997761cc5502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f9bbd2-40b6-4557-81d6-95fa3f29e478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255dd24d-a011-4e57-b232-ec801d5ed724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22e40c1-a348-4e53-b2cb-5d9a0bd7a2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cfc6d0-4e78-4d08-9ff4-0a2d70fcda48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799255dd-eee6-4ef0-878f-c2caa7122bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4f7097-a375-4be2-8540-d710778e09a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2ce51b-003d-45e0-85ae-c12519a1ea78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69711826-fc22-4ad0-b649-c6376c0bafda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781638dc-1f24-4528-8b92-14326b8f7c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6639d58f-61ef-4d3b-9cce-5e2ef85264d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4534ef58-aebb-4cbd-b58b-b0eeac4462f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891408f8-d880-4d50-b1f0-c8e35e84ef25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66da4137-c2d2-48d9-bedb-dc8cf9b31665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d34b51-c650-4a46-a647-e6ae8b045903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac592c9-3e17-48d7-a4b4-27d8bcffd8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0daf0e-72eb-4e37-ae32-fd17a5c09dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.0']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4d7c1e-17f0-4a24-b929-94f34e300f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2692f80e-6722-42b8-b2b2-4203734ecc58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f68eda2-8ebf-4089-91ab-0aea820e9b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8318ac8a-5da4-403e-b1bf-c12d3eaed04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.13.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37905bae-fc72-40fa-bb26-d3eb82f1c963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.15.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcb2aaa-a2d0-4188-8b00-41998e696ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.159.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca93610-c20e-4c5b-a20d-a3f62e2bca3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc918832-f0ea-4b8e-9e4a-b624c852a77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb65ec7-3923-4544-9575-b89e07010253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b934a848-f0f7-431c-8fd7-d0aa4833a435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce66e6b-5d36-47a5-83b6-718f67b1356b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e7b4fc-b531-4545-8d21-7159fb9cb62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c9c569-ab21-4606-9dd8-bd91663b96c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee50723f-759e-4ad5-a4ba-ce2df34bad6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417ddaac-71cf-419a-b3db-48264620d27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830ab7b5-b3e7-45f5-a2ea-425bc232697c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7989b8c8-d071-4b24-b123-6b3079268479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65252558-7f2e-468e-9a94-32111510a17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f399abb8-2b7e-4271-9fbd-806bda2a0597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fe94cf-8bd1-4a02-8582-512f13a09745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9a8c1f-8a04-4fc6-9e9e-ab035bfcdab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f6f4e7-b270-4efa-b458-4c22d4a76b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a50e44b-28d5-4af0-a045-621bcf52300f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda32fc7-5b8e-41b9-9352-66ee47403369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a7092a-6675-428c-a077-42c3216f13b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840f3568-e91d-42ec-821f-e8413d33a89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ee47d3-5ea2-4daa-b0a1-b778e2ad3cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5c1c30-5bc9-4887-9267-1dcf3c92f7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c472af6-bb90-40f7-8e69-53ed3625ca2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe517ac1-1515-449b-9270-55e98baa2e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93c61f2-2c16-461f-b163-1e39cd0b561e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b818ef-36e0-48ac-a3b5-45921546d413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3c4108-5921-43e2-b5a9-6cf911e667db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bc52c8-c1ba-47c4-a8e8-4c37bbf733fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d538df83-b9af-469f-a506-c2a29701a4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34e538f-b0da-47d5-9de1-c36d8c7b9636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfaea58f-807a-4a38-a4c9-d1b73c845376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bcd1e6-fe60-4e4d-9856-729e47450bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2961423-68c2-4413-9449-c9a4b81634ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac4c24b-07dc-41ec-90f4-feed94edc051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c685263-dbd3-4f6a-a158-625c72d1ce43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc47c4b-b625-471d-8752-7abfb3d5c508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3717bb-73db-4dfc-a78b-39af0f76f1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300133b4-126e-4460-913d-f243fd61df71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e9fbf9-024e-4275-ad44-46711e0f36d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78a42b8-25d3-401b-a9e7-33532091b5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993da817-854f-4996-9d71-263a2ba05f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef54eb1-4aab-43ed-bafb-bcab83730b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581462a8-efa7-4280-be88-ec2318d8b5cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7690e716-2eeb-4134-8d15-d23da7a8b17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.51.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6566af6b-923e-444a-bb86-15d2b6418b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8d24e0-eb4f-430f-81aa-6fe319760024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bddeefb-e79f-44f3-be89-e5cafdb5dbb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a6bda6-e869-4d93-84dc-80cae834a162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bda3fe2-8a12-466d-b9c2-556bde36ca8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e0a082-48d7-4ca7-9e11-b4c32903059c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931ca838-311e-4bbd-b2bc-778961931dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f477515-cfff-4200-bce0-217ae9d80fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a90ccc-780a-4f68-a7f8-03e43b281252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cd012d-af73-4c4c-95a5-5b004c184428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57006c9b-1302-4bd9-9782-c08109da748a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1e1897-901c-4025-bdd7-cff5bb3c459c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d5381e-b176-4922-bfe3-280cb1ee91f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19367fa1-dce5-4381-8055-e474a1d448f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f61bae-743d-48d7-9b9e-742ec8736611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ba7d36-95cd-4d94-a67f-5418dd782a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.70.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d1e9eb-3ec0-4219-aad8-3ed7b0597e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.70.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de908e28-eb77-485e-b851-1a3208d6a5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.189.124.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74ea23e-6fe0-42e4-bb49-1fe07db395fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.192.24.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cc25ed-b5d4-449a-b76c-2d9a950cd735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.146.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37510b56-b3b8-449f-8d60-bd04e2e717ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.45.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db298a9f-c775-4d28-a4ee-0c74735964b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.200.64.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51041f18-ab50-4466-bd2e-4869bcdffb70", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.204.144.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f60551-29c8-4174-80cf-6aa8ce9ad252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.206.185.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959a6d71-24ff-40d6-ac97-0b1dfaeb8f34", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.207.203.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54488d2d-98ac-4b82-8107-72809d574c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.210.107.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae780e66-8478-4f88-ad81-8b902921d134", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.219.193.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b21e92-5242-4328-ac1b-95d03ef8d421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.56.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35370196-dd63-4095-82b7-8fc4f6ac55dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ff1845-1528-46b0-a7dc-6f782967f563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b6ea11-9349-4e9f-90f1-cc123c676124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f6c115-cd63-413b-8605-45741d015998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9948d3b0-3a9d-4eeb-97d3-8daa38a442df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669e9b4e-8357-45fb-b5fd-dc91fe703b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bbe8de-974c-4b67-a766-f96d862d1ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373d53dc-4bb9-4df1-aa0a-71703e05483a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b450c5-87a8-4b9f-aa25-f138e9408539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.72.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c0cd05-0936-4f1b-b594-515bf91b43c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.116.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ac2843-8fc1-4a4c-ab79-cf89224041fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.2.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b4f3bd-b5da-41a7-95b9-3e5f0eedb0e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.231.101.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582555bf-4897-48b1-89d1-c42aff021613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.233.123.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28c03d0-b34b-42c2-8f8e-83c60236504e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.235.114.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e0924d-2c91-4639-bc5f-b12c7eaba6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.235.136.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3d3cbe-0837-40e9-bafa-86715cac529c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.235.138.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf43c755-ef2e-40f2-a36e-aa63d69f9948", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.235.180.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949ec033-02d5-4142-ab7d-83861fae94af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.58.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706c181b-6aef-4d23-9c3b-cabfd3f10a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.81.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d737e089-7fbb-44b6-a05b-43386dcceefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.25.54.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec06eba-4a49-4653-aeaf-de0ee46009d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.250.14.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd93ee7-c66d-466b-8b5c-be8a82b32e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.251.117.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4758bd9-7c73-4947-ba0c-fa377ae18f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f856ca-0822-4181-a859-9732cf488790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.22.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544d10dd-db71-4522-a306-03f23abd5a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69098948-442f-4741-9c65-0d7a73383830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abae270-8063-4933-9007-6c6ec5f67e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939d672b-6dde-4fcb-8260-47d910870ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.24.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9b119d-6e80-48d4-8019-b43f7b6f26e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.47.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f777d24-f911-4884-b821-a2d17e44280d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.49.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87337483-8182-4fa8-96d8-e4b30d628e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.58.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e132be01-a94a-428a-b758-77dfe06c09df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.3.129.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0370f641-1124-4f8e-a0d5-ebb43a28194a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a6e47b-e764-402d-be98-35004d8a22ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e09bbe-de17-4dc3-8cf5-b734e1b1c26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.43.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9b57fd-39b5-4506-8285-3f761493f44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8597cc-38b3-42cf-bf03-19a57230d752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889d5ebd-0406-4c27-9493-580276ee9917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c529e074-aeb1-458d-8b2b-01ffd34b37b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4970755-7df4-4d7b-b8df-3f02e036572b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.41.234.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b8663a-fc50-4958-a9bc-5c62f1a3b103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.84.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84fceea-265b-4e2b-8b33-f3b4a1349ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.92.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1886a2-be1d-4fa1-aa87-dd4fe579a8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.226.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f55a36b-f475-4ad9-b042-6bdcb05e9ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68118df-95e2-4ae9-80b1-8cbb86bd56f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.244.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a54dbd-5a9c-4191-9416-10a4eaf5748e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.251.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a98623-9321-45fa-8a9c-27e226f8c00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7244d053-b5ec-4041-b20e-272bc2ceb0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8bb870-67b3-4ec3-8855-f5b1cb2cd094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.241.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bc3343-5b78-46a6-8e0c-45aea2eb3eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.244.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361e5344-ad83-4ca5-97b6-7d291dd0e22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d544ae84-7781-411c-b9e1-4512d51d59ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.53.156.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a01595-6dce-430c-b088-b0ccbe53889f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.14.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81b2ba1-6869-4fb2-b512-131014de60de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e18a62-3730-4da8-989e-a99b7357a292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b4df0f-eb4f-4800-acac-3b0e1b831024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aab58e0-0dac-410b-8469-9793495b9689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.35.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd994d34-ea43-4d46-a5f6-0b75ced10549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.50.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263006a2-850a-4507-a1e5-0e25b2e9db7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.72.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e23f551-f4e4-49bf-85dc-d6765705c272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36860ec-fde1-4ed2-bea3-35560d062ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.56.66.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7403ec09-4b98-41bd-8775-e1f051f87caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.57.214.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73248d0-72d4-43d1-bd11-ecce432457a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.194.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf430403-c078-44dc-8bde-31eba185b946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.198.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe52725e-d875-43dd-84cc-813c628d205f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bcfd48-c5b3-4988-a1e0-31cc7fdf71d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d149427f-a7c4-47c0-ae2e-8aa419f67acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1af568a-c68d-4e23-8549-45ad0b93db28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ffa461-5488-4332-9297-9253c0f8baae", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fd52ae-9a88-4ea2-ae01-c1ae227a7b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37b970b-2bd7-474c-b18a-1797d04bc321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2421b2e5-1f29-4e7f-8776-6b569b26f117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.0']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b372cdc0-cd8e-41c8-8d5e-da33d4c147e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1925bb-3f0d-410d-8ce8-f412fc67005c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9479e0-0603-46d3-ad75-06e78c5be061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93089bf0-9b9b-44dd-aae3-8b35aecf0913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9180778-cb47-49d0-990f-20bb19417ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7630d1ac-8d6b-482f-9427-df9bd66d28bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a48ad8a-f4ef-428b-8cbc-943d7e5badb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5175db5e-8ed3-4105-b2a1-e261053251e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47f8b83-bbcf-4f67-861f-9069efe73f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ab32fc-a085-4c59-9453-e077960c799d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41af8f66-5774-445a-b08b-d7182b72435f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2519328d-9075-49f6-8087-24b47082f46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d93a96-c3d0-4b4f-a93e-6b4a0de390c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc86f17-a471-4b2e-b911-83b410b19ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0d1ccd-9107-425c-8d47-3c3852756b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbd9765-edd1-4ea7-a216-a44bd70dac72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fa9c54-71b0-40b7-a55c-0d2c75319f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039828b8-ba78-4cfe-97b2-879a63499191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d56114-e0e3-47a7-97f7-5ac44f5dce80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6fec8e-a916-45b5-9f65-69d0f4e4df8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139a783a-0522-44f9-8df7-146660133ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d657f6b-d1e3-403e-a7da-4daa3d0cd66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948dd267-9fe7-4877-bf92-c5426edc2400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c858e94-4529-42bf-87be-00d4dbd0e2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6c7bf0-257e-4c7b-a71d-f4bca26ca4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab8b9b5-003a-483f-9c07-cd4d2ea7e17d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0484327-fef1-413c-96cd-083702c7233e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fb1025-3f74-45d4-9383-d99fcdb6a4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096a381e-fc6d-4a6e-8f84-f770ced74ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e80b386-431f-4e07-8840-92b76bab5ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6264c6bf-4a5d-4fe9-acf8-e241fc454469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04ec391-c37a-4f74-8984-ab13f282de47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e15148b-dc9b-40cf-bdf3-1a380cdaaf34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.97.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f79c157-085e-4ab4-b97b-99af0583a000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4304cadf-bb1b-4834-a60d-bc51c88390b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b589dc2-e678-43fc-a40b-6bb1c4b85566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8228e7-02e9-4467-b095-439653c229e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00310917-97e3-4063-a471-bfc3d6181320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4403bbe2-3ec4-48b5-aca8-bcc34dfbc55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7730eaf2-109e-4e0c-b804-5f2f8c72a66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaf1c04-ac14-48aa-a9d2-20fac5e0d0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.168.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0512b846-83a2-44d8-958b-2f1c09850654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.169.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f65157-d6a2-4d65-bc69-ab13eee3b13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf4887c-1d27-4396-bb67-c7da01d84daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.184.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3365b2-29b3-41ff-9266-a2af1fef623b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfcf97f-5d44-4fcf-b2a0-343bd984e2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0197a51d-b001-4430-a81a-aed27987ca3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a76b4b7-e951-48c4-ac6d-e6852bf432f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8bf2e3-f318-4fc0-9d18-ba4b2aa9e660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd16e6b-7429-4034-aa8d-c2fe0c9faafe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8fc4e4-4141-4cb5-9718-532d48416a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6e59d9-8e44-494d-aad8-24dc2ebabfb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b859cd-e74c-42d8-9efc-12ee0d8b2293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8291f469-5d9f-4b00-a567-d3657422fd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33015ed5-b4e8-480f-9ec3-9275b2135eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbc63ab-740c-4964-84d0-532f855d28e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de317a01-4e79-4268-a6c9-21350930d3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b1379c-85ef-4693-a56d-49f1a128bf70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0353993-9e46-4f86-8319-06e8c91baa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63d139c-461e-435d-be33-1d771fdcbdd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd54a71-ef74-4098-9e2d-56f2b8e006d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc07f81-3dd0-4d72-a469-8e97c81cbedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad27e793-7e75-403a-b321-239733273bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a113eda-2d53-48d7-84b1-51f4b7b4a39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fddb289-faf1-4798-abae-8ba242dfe7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcb5cb0-7ae4-49e0-b7de-816f1504e487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de59546f-77cb-4834-8f2d-e04fdbafe97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1b4f25-1f92-462e-98e7-201687e8be65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54edbb7a-19e2-4833-a1ce-3048a7e87578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecb830c-aa27-46a5-9086-2c97273d4ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8515c6-87c4-4c4a-9426-b89d5a4a3bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8d99e7-c597-41cf-9148-88a26f297f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0904454f-9b67-4039-8dc9-ca874a5d3a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1e9bab-449c-455d-8fb7-cbd981ebad43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b15cece-15ad-4077-a77a-16abffa8b575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabdf815-d366-4418-a56e-8f6daaad03e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48413a95-3270-4be8-ac9f-a32bdd1701a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a73c0a-9c86-46f7-95d9-ad7c259fe6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0654c2-f4bb-45db-9fa0-60bba86ad4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc39563c-7472-46b9-ac34-7e844e83001c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38af326a-e064-4798-869d-e75c9eb0a135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3cc1ea5-9a1f-4778-9c56-8613195ec4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50650e08-2bd1-4d32-a1a1-7368e55aadcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a18122-c9a1-4478-a57c-616554c82cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64593ae6-ccbc-4713-8188-9dd4a0cd9d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9db2dd0-07c3-4526-8e55-cbb5c329a11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1ef137-53c1-4e24-ad87-16e4dc235482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2c1292-0c23-4d3b-bcc0-0274540f9074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee20e89-029a-4597-a799-7838b7c73e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8ceb64-3414-477a-a5bb-b40aaa6d368b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcc7dde-329a-459c-8cbe-de669c4b8057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecd7cc9-dd45-4ddc-8ba4-944d7254eea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8893e9-d20f-4848-8d9e-56619b3137f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f2ecbb-2111-4581-844d-38d5ef751160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c3bd96-7ed0-4817-a6fa-0ffcfaa67272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba157c7-9a1d-42d2-a7a9-2a32e58cd750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae17028-0bf8-4972-a359-853d65495249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d3f5d8-ca92-40f9-8c41-9de5d570c5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad3e483-c9e8-4573-9c5a-633d2945fd9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c45e9ff-2aad-4bfe-8be5-6bd0472a51a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701b513a-03a4-46c1-be1e-bfbb7353b56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9204090-06df-4eef-9e65-373067f452d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee05233d-1f89-40b8-8c97-b263805e8c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8ccdbb-ca4b-4092-a871-0f357d241098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d986f58-0a4a-4041-93fa-58c7c2a46a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b05cbda-6151-4e10-93b1-c32cee2f500d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa900a4-0014-4bee-a8d4-9b9694aa980f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9eaec65-de62-4f5d-8bed-9d8648c5aa61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5ab003-f002-471f-8999-3a0eaa5aa873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5384b34d-d331-46d7-9b36-dcbc904eb4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68153409-a6a4-4feb-868e-afa13328a360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f74e0d-18cb-4a32-b637-e9a07d2ebbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5517a8fb-c202-476e-ba2e-a12543ba1c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c796f1-9573-4af9-98ed-f7412a864898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b38645d-4f7c-464b-86ba-d9d2266e17a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90fd0a9-129d-4d57-b472-5a879356ea9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70873a00-7e28-4878-a0a8-a28667ebc408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a9ce0b-2fdc-4c8f-af5a-3d3e0ca8d4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29943c39-b996-49c8-a932-67ba831d3576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c5bd27-753e-4ed4-84bb-a9f3f970ddc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76957aab-574b-4ce9-87af-b3e7690e1da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5b3453-3cc3-44b6-8775-ce5f70afcd4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.202.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4903a96-558a-4ab8-b593-94536f193878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.216.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d068ce37-92ee-4e79-abd3-3031c1148256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc1aa6a-9e01-4264-ab0e-24b816566db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d904abee-6d4c-4d57-b2fe-cc72cc6be605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598cab08-0140-4e60-bb9b-8f82b0af7bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9129f7d9-2d05-4301-be50-09b4019c895e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.224.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7806e909-292b-4df9-8c1c-43e0b1ad666d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.226.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac46403-099a-4190-9c1f-2d72e06f9a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.79.8.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e23bd19-a793-4602-8b64-bdb8826d1690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.104.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb42335-2c50-4ca9-a745-b2dec6c74194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70988426-73df-4c38-84d8-6f5111a6310d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4dbf1c-eea5-49d6-ba2d-f287edf4a736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9557f1f4-cd8c-4c64-8797-0e4a1b9a081a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.80.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd3e4c4-fc6c-43a4-a9e6-65b0672f51f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93b5ae3-c4b2-4f1b-8060-f0d35f8d0947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd927eda-32a0-48e8-8e45-26b05bb37d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4f8f93-2647-42c2-93a3-c13da8346e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8edc7a-3efe-4cc6-b1cf-c25e1bda40b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9680f239-220b-44f5-a271-0493265d4407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716923da-30f3-4be6-9b25-79cfaccfa8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c780b06b-42f8-45ca-8167-d00cc3bbf6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.151.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf4900a-92be-4a84-a3b2-a1e571383d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.165.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4544007e-9128-4885-ba93-ff1d13fe2af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2030ca0b-f8e0-42ea-a861-9d53ac4d240f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e53210b-3c1d-4904-a99b-9019eb601216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19140d3-decc-4061-9155-5df15d721723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.170.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12eb0c67-e49e-47cb-8286-14be024ed3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.173.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40ed959-d6de-40c5-9d6e-fd506ed30ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.185.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bbbe75-510d-4162-8d51-99ba9042eea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9887a4d6-ab8c-4ab9-9b23-c268b5e92414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.4.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f454124-6b21-4a06-b688-4c1aae59369d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.48.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48402995-c464-4952-b711-8876fe35bc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f8bf44-e9dd-40aa-a6b8-3a58c5d150dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.117.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b8c0f5-82b3-4fc5-bb31-0e66ad263cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.119.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65145536-a0c1-4e38-b216-90156e3d58e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f332e0c1-ef40-4a82-9ab5-790fc4dfe816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7369fcd-6b4a-4643-b150-276d1145b8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc45f5a-80c6-4aba-aaac-9c8179fca978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.152.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3baa125d-ea8c-41fd-89bb-a6911e49ef28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.152.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1587c9a-fe6c-4d4a-8b50-c9ea23a4e631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33374c55-4391-45e9-85c7-33d2477394b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc28ce2-d27a-41a8-a76e-69d7a9bd439f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a12450-ffcc-4062-89cb-b721430f119e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.41.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd49e26-95fe-4283-9884-05e6b33a874d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.60.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5152a9-7d32-40f5-8cea-555c3e693756", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.86.18.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07f1aef-2c39-4f68-96cf-3673684b218c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.89.158.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396be34f-8af3-4f3b-9e12-c1b4a6ec2018", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.9.34.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d3d365-7f71-408b-a149-9d1d82812b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc37d2b3-7e46-4339-9df1-459a11bc7e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.152.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7978ca96-99f7-4d28-bdd1-9f34550b8910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.165.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232158a0-6c7f-4d2b-97f5-87a3357f7b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.129.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a574bbf-69d1-4e9c-b963-cdbe6eceee10", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.129.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf784ba-dfba-4216-95a1-76ee8e1c28d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.126.105.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3c8517-9959-468d-affc-2f9b95820c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.26.188.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97eb35ec-f233-490c-8d43-f5f992f70550", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.54.228.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d7b110-0d8b-48d6-85dc-99ca730fc182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.56.131.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8e0723-9937-46d6-b469-5b944c257e21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.63.105.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956415d1-6c84-4150-b055-314152116207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.110.60.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd699378-86c0-4e99-adb6-48d03f693b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.132.160.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d514b8-91e3-47c4-bd76-40d89a120563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.104.158.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9cfeb83-b413-425f-a34d-bb60e81ae6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beed8687-3597-4122-9748-b694d725c777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195e843c-f21f-48c9-a897-d22ac3889cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5c65db-9637-4f67-a263-7d59e73fb73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc0d225-07c2-4b70-8e34-e2a4731201ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.117.56.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1cd528-a535-4e0a-997f-265e5b6a0d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.143.110.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597dfff2-6bfd-4f9a-a3cf-a46f5b618619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.175.123.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236d3858-d7cb-434a-9f0b-44ac92b6fdf6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.183.141.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62bd270-afa3-4ccb-862c-e60b75e4b90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.69.61.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c523ce2-da85-408e-8187-2ed0a139fa61", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.70.78.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5becd7-b1a4-420d-a677-bf40daf0cf43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.71.141.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d38167-bc40-4e68-8492-b7ea0d69de26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.109.124.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27bed0fd-6377-4f85-9a33-870168517768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.12.200.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c0a5a7-e4a9-47c9-be1e-a786fa529401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.12.31.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab3a02e-b567-4b02-839e-1b7cdd361478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.12.31.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6f5218-9d31-4c30-a770-42fb1edf6ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.12.31.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40252571-c32d-44c4-aa0c-be60d4551a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.12.31.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92d646f-9bba-40e8-8527-8a1b2afeb80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.12.31.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57aac07a-ee01-41b7-98c0-220867f93fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.12.31.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978bd4d8-8224-445a-93f3-3609afe876b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.122.7.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca45de56-248d-4b16-b03d-cfbecae1c24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.145.63.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711f079e-fd0c-4767-8aa9-8832b009f032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.159.90.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de66ecf-43f2-43cc-a813-05faba21a98a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.190.153.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b9871b-85b7-438b-a456-7b0beb20465f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.194.110.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8801b1e-9ef2-4208-ba3a-09d1e90eeeb0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.196.8.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e33aeb-285c-413a-a617-5cbef67e67d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.210.169.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d84e7d-e02b-4fe1-9d7d-5393720782a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.212.9.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8338b2-5d9a-4fda-870f-1bf880279a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.227.191.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e12fcf-4157-413e-96b3-b336233d4e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.24.89.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64535738-7ba4-4f12-80d6-2ea751964176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7523ad83-863d-4964-925f-4c3070291f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f3ef85-8e52-47e4-b2b0-7c0d72a2b7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b35f80-2ac4-44f9-96e8-948d1fa87c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.69.6.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe046c7-2bba-47e6-943e-a1c26d76edf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.76.126.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a683759e-e398-4fcc-a0b1-39694df16aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933b36e7-112f-4b0e-9935-2937d1446c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.234.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7644486e-4f75-4e56-8e78-77f71c51233c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.88.119.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aed2ad5-1b70-4252-8b36-59d593e0e641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.93.173.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5e5f3a-5437-4b7d-a700-dc78084c7bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.152.216.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6af2e7-65ab-4463-9a63-ff330268d6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.44.101.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dea0ceb-48ad-40a1-bc36-bbf86ca223ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2b96e1-2af1-470f-b94f-33d615f46d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d642ab81-e5f1-454c-bffd-203970ce605a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3737ee-69e5-43fe-b4b7-4b384ee7e00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53faf3fd-16a5-49f3-91e2-d9cde30a3ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b8604a-a7ea-404a-a2c4-c38e5556be5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ae508c-a994-4942-b4d0-779414d685d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458b6fa3-9c1e-4c81-9125-f4be2f2d06a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.186.64.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a389515-68cf-48f0-a862-89ce1b58cf27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f42b456-b414-4f23-a5b2-e1ad5ec05656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2783be-fd21-4d75-9658-c881ead9ce74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6e8f1c-0f50-439c-a8be-b12af97097ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60a7efb-458d-482f-ae42-fb55eda7c649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5afb6a3-bfdc-4fef-8e65-ffd0fcaf257c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256d7ac7-8bde-4605-9a2c-c07a56ab393f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10601806-8da4-4159-be6a-fa4e3cf88922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae835a5-b979-4c49-91c7-6e9b1bb1b8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7368c34-9415-4ff6-ab51-e1c09b9369f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b088189-5a2d-406e-ba3a-8cb5285b7059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d70844d-a5d9-4499-a67e-5b85a142bd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5632767-e0a5-4e12-9d98-2b123c4c8833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1a26dc-619d-4b03-8254-1fb3638840ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97845c59-4748-4d6f-915d-c40e8cf1cf7f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75078f9d-494f-4361-9e15-79431e73608c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336d575e-44e9-4aca-a101-fa8bf0efe8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de1625f-ee42-4034-b673-b274cdc81f79", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09cedf2-da40-4b89-b8e7-62820f3d9c7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96d8ad9-f832-4616-91d8-35025001cc6d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22fa35d-6dd3-4d1e-9395-cc54a4543adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc876911-f216-41f0-b299-cc02cf9d1765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc55da4-b03f-4235-8859-407b1a483d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abcb393-845f-4fb8-b923-8c59480c5170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b132ab-68ff-42d8-9b5a-141cdc3817e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5d8f94-b033-4d26-bce0-64fc65d59e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc58a059-b1b9-49f9-9b18-50b83882229b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547594b4-469c-4a97-bea2-c69d214f2873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67442015-0fe6-40c3-98fb-c84a2e1d7700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e9fad8-ca47-4937-9743-fc20de07f737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885d2604-b6d3-48b7-b97f-69c8c649d9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f9e8c5-9a7e-4b6a-9ef8-6e343d6aee38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1054bc0-6ca4-4593-83c4-84db397a6524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee70c785-fae6-43dd-9474-94db9bc5fa7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ffed92-cbe0-470e-b6d5-ad9f9f1b0e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cf1e6e-4c11-41d7-97dd-97b0ff7a3104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e97617c-0f40-42ba-9e9e-aff748643592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac581fc-4d4c-4cc8-a0f6-2a5a70c02f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3f0214-926d-4113-8f02-92e5c3797f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17aec5fb-c07a-40d8-9bee-c0dd3f9e90e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ec938e-b32e-4452-98a1-83a105f70e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b710b5d9-cf46-48b5-b5fa-ef9b64195f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e2d6da-d082-4840-82ec-f47a52c05122", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b090ce-bbcf-44e7-8a58-21ccd434a4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96cb0bb-058b-4283-94e5-0313d43f3365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cea918-25de-4810-9551-911478192826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5316115-f095-4fe0-ae94-18f853ce6e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38dddb19-8c73-4785-83d9-33ef7a8b43a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9127c99-90ad-4666-8b00-14131698780c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9d9d09-87a4-4c01-b244-24e535845cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c196116f-501c-4690-a708-c3afacdd7f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc47fa8-2bc8-4a66-b524-577ac6a52832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fee406-23c1-425e-bfa6-4dcb263a561c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ed9897-bdc2-4769-ade9-3418fcc777be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8618bc19-ce42-4c44-a1a4-87a284ccaba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ecce48-3aff-47b8-8f81-35f9bc5dc0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843a14cd-a3d4-4486-99fe-98b2c5d6d1fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80319e02-506c-48fb-add3-06f428bb8947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50b7cc0-8f66-495e-a4cd-ee915fda3e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb0cdeb8-d05d-45e3-93cd-dae9487e6ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d026760-9c50-4962-a04d-b44f904ef56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fd8def-77a5-49bd-8eab-deb103b1a13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2bf038-9629-44c7-a577-6ab6fe2964c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9218773a-0af2-4f9e-bab8-4d609ff064b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8dc9d35-7f9a-4b64-a6a7-d7891903abe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8789ec9e-ff1a-4a86-ba18-8c3bd6f08e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5f0069-1f7a-4b05-af5d-34a5bc55bdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d375d5-46ae-4c15-9b90-fc9075168210", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9524c6b7-81b5-4397-814f-7376b362bcb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83068b10-4468-40d1-9623-75c887d937d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9036a613-7095-4b52-b1b4-e8749515dc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14ccc64-ff6d-41b1-8bd7-cfebd59d13d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47970702-22d9-47f8-8f3f-0a53096d30aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcc144d-755c-4565-afd3-f0fc4d1074a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f26080-b6e3-4e5b-ad1a-7e617875559d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18794678-6461-4121-bbd5-f719b4881ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef3504c-6b0e-4857-be27-7cb74fac9571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b5c1c4-3bb3-478f-bdc9-5956169b198f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a39e3b1-b3a4-4e8d-b16d-ffd35c956de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74219ab6-52b1-412f-96c4-d426fad66fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2aa242-7149-4baa-b29d-fbea97ebc5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afcb969d-8bdc-4262-a082-e69a245899e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0da8869-ef70-4095-bebb-8e2670cacb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0613c588-5a11-4c5a-ab17-a5494b70f79a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71872aec-d69a-40f1-b85c-06456c2eda5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7b469d-f783-40ca-b76d-4972a497f2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3859f83c-7175-4582-8fb9-d16a90d051ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958d2319-a8f6-4fd8-80ea-0d1ee6850774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9883251-e780-4624-802d-b97716809245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a71a91e-9558-4c27-b5f3-b61f6471f871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4844906-171d-4f1c-94a9-34748369369b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccac920d-37cc-4fbd-bfbc-84debb5d17dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8e57b6-feff-41d6-b2f9-76cf20e719e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74468478-0378-4097-86d0-3b55ac5b4c10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be29b25-b602-4607-83ff-91026631ee16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94428743-b654-4b9e-b4b2-fffa6f3b62f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8ea65b-020d-476f-8e6f-59f99e08a8b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6d3fcc-de39-43bd-9ae0-0f19d2efca94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7609165-42c7-4e1b-968f-dcac81dd3ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da51f89-b0b9-4171-b3d8-4ce96d647b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d2fc58-9905-47f8-a761-577b341873f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2fd933-c1a1-45dc-9e02-51f62815b580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e64044-362c-4c88-941c-722f78f4918c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f507cb-fe67-42df-8218-8a77afffe195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48aec0b-68f3-4075-8e16-7acd308fce65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9dc179d-5d9f-4c7e-b01b-5d448602f23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babfda81-4a1c-4dab-ba39-9364d019ba66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242d6a68-d2da-4162-8af3-293a0900e34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e01445-4440-410c-b5dd-112eaa28aa94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b99dd6a-8ef1-4673-bf73-b94177f4c554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dea72c8-4ba6-4640-a748-50e446c5961d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1586dad4-0428-485e-8597-0e3c5a1d1610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7657983e-a1d0-4e3a-90fa-3d7b914a8554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f05361b-69f5-4c17-ab0d-136de7c533a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29888b6-377d-475e-8c6b-a19b76dabf97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ec8ffa-0bea-4bc8-9149-dc1bc5e55d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aecca34-c479-447d-8f5b-4896c9a9767a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbdb07c-12e2-4f31-b57f-151f02aa8d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3d55d1-e614-4f44-b9cf-8326524b64d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54917d2e-a5d9-479d-a11e-803dec5fc7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e050189-fb5b-44ef-b537-5108485bb833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edcfb87-95e0-47fd-ba25-09e5d0a45aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0174727-c164-45a7-af8b-e2ebd3cd6aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e181e36-1a4b-44eb-8e99-208e41bdeed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc764ba1-3f64-4b65-a1f5-12e2c4290e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1dcf34e-3ea6-426e-8f4e-197d3fb70f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966199f4-c60f-46eb-ae9f-4b89b3d5808d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3339c3a1-ed86-4111-977d-0aa0e11fb6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80c4d95-1858-45cb-a24f-92ee5af73b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289176a6-8efa-4ddd-b2d8-db93b6a6d7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6220ea6e-7fdd-4601-8ada-8026e89e0ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc54bca-af13-4350-b192-1e591e73c6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f946cce-d112-4a54-ab6b-00763852f8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2e595e-429e-46c3-b4da-cd2fab05bb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd51ac65-09eb-4d7b-afb1-37460d32a479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec656477-7a4d-4dc7-8a39-6ecf436eefc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329505a9-fcfb-4576-985c-15bd594b3f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e75ed8-7369-49e1-8660-7a312301b8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a28c524-e684-404f-9182-64dd07577e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a937b1-80a3-4d2d-870d-bd4d2ed9b53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c8b956-27f4-4d77-a76b-c123e941a1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0207232-1ee3-42fd-a2ea-dd4a2f8293a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8884d4e1-ba9e-475d-81c5-740357ef7b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aab6d69-43d7-4efa-a632-b4a3e39f5cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.168.133.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7588109-7759-4cb3-8a35-6bf1d53b689e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.109.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79589484-6729-4e2e-b02b-8c5e0f0c9796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.117.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77f6349-d5d4-4b97-b689-39f3bf44482b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c4d356-cb50-4305-b1aa-1536ef72aab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.134.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48fb924-dddd-4c3e-8ea6-c477d3cdea35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.50.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c417626-5b60-4882-bd1b-f116d296b100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.58.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3d3adc-cd99-4289-87d0-e391266a2328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.212.244.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bfca96-b28f-4064-b009-d35a4bcbad62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3997656-5c6e-4822-85e0-54123607a5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.236.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e40653-d295-4d91-82b4-1acd281d340a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.82.6.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5c0c08-76b1-4cbb-ae11-43a641e6bcee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.174.43.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe369787-011a-4c17-813b-694f1993e8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.70.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda0cb27-2732-4a19-a3f6-b1db1166d253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.189.16.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b93e84f-6c39-4c53-92af-52e76f5647a1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b539b1d1-ca02-43ba-a4ab-9fbe45d019d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.224.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa349588-3416-4391-8768-eb2782552b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3015ca9b-f811-42b2-98cc-9b880e7fdb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb067ff-a1ec-40db-a06b-ec784dc6676b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347c7e21-95cf-4291-a678-f1d8feb66c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa49978-b45d-4fcc-844f-f4e393311ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.66.228.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0138721d-fc96-46af-90e0-bfbd9251faa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.68.180.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831bd159-f17d-4cff-8204-ff03f60b04af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.42.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40e96f5-1aea-4511-b356-939a8d4d92fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74fc6a6f-3eaf-4daf-ba12-5b8a08156d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.55.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e970cf25-ba29-4b3a-bfd9-58c564c9fe18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.61.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b77c1b9-5c0d-4d64-b3ae-aae6d29ce8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.159.153.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ae831a-1346-4877-8bcb-6067f532926d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096e75f3-c45c-4d20-ad33-9c85aff7fafb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.98.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fd8ef5-df31-4028-8383-7428e05f257e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.98.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fe6be4-46c4-44c0-bc73-c416d10a15d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.248.45.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4271dd-2002-4ee7-ba51-67e4d74cba84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.22.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bdffd2-8d77-47b3-82db-0430bd4d266d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.231.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d98ba1-ff30-45fd-a02c-680e41024df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.24.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439d52bc-684a-4038-999d-037c8de8aebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.29.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f528cc-8789-4363-9c81-43123bd2ba03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.89.3.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e200930-45e5-47d7-a7bd-54e7cf7e6234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c21359-a774-441f-b0ef-b3122aa023f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7cf320e-4fa5-4db7-b6dc-9aadd93a8271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b3c910-0f9b-4415-b2b1-5a2d3ecb64e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cc5fb9-21ab-4d64-995c-da176f6c8012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.148.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d74ff65-fabd-429f-96e6-8b3821a0f869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64af81ca-c5c4-407a-8dd7-c42a61b6db50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d62d3e-cd79-4234-8c1d-0743cbc945bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.189.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f6a68a-5ca9-4893-8261-3ffbd7e8a77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.172.173.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f581de-a5bb-4f9c-9193-f74fa8798491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb136ed7-794e-43c7-bd0c-ba08365f7c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.87.110.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5ed5f7-9686-4bc1-8f80-d48f4ca1d106", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.87.110.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c027cf-63f8-4b02-a841-02e282fd2e82", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.101.237.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8e1242-bb0c-426e-8088-67e83c7fa721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.145.71.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4427c843-4527-4b65-b0dd-702b6c0b2476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.154.22.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0ef468-0568-4bd7-b9aa-936ba92a8591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7e1dbe-9355-4810-a8f5-227c3d728a90", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.22.131.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4154934e-809e-4cbf-83cf-da997ccd2770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.25.241.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af97d52a-ef7d-40a5-8d85-134536339225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a0e1e0-9de4-47fe-bbc1-21dc98059c41", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.75.210.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a139d65-a0c6-47ea-8539-86d21047d9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.75.225.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baca811f-5b42-4ada-b862-8ce17d5c1e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.100.184.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ccf9b5-46bd-4e58-85f3-5b6368f1de87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8ddd20-c0e4-47f9-8474-b9f3f9825550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.127.90.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc68fffb-52a7-4be7-a05d-651b55cdc1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52816d00-efa6-411e-aeaa-9ba8ade68f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5409a5f5-2b31-474f-8d25-ee0e526a0863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.135.40.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233f9c33-0b15-429b-b4db-22ae22ecb865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.216.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb0845e-028e-4ddc-8361-bc34e0c16451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1de0b9-0cce-4f6e-b592-2d04e3484b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.140.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9690ca04-8812-49ca-aebc-c4cd4b2266f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.47.65.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea4cf1c-d407-4c2b-8fc8-74d50c40b931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.8.251.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cdddf1-f0b7-4af8-8962-cfe8d5b9cc7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.111.150.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3482499f-b39e-41ca-bf31-507495dc58e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.111.158.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7bb1f2-00ee-4a31-9448-2df51747ce62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.165.78.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574f0f5e-e8aa-4538-9616-17646f447fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45884b7b-da9d-4e6b-b8aa-f35b6d394a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37db0ab7-237d-404e-a718-89f396fbc7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1f09a7-d693-40ea-bf25-9849c7a1c5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d2e633-6e2c-448e-b7a7-93f6d3e9036a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b65b3d-74fe-494b-9142-36476240bce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.181.107.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb73138-2681-4d78-b23d-1ac1ef7ae994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.54.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5121610-83ad-40b2-ae4c-c9f43e06b7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7782317d-4d70-4437-a8fe-2278b83f255a", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a40ac19-ce1d-4372-8cb4-1c3c666b9b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54a71c4-0b74-4899-bbb3-9f09da44695a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562a11a2-f6af-4811-a92d-bf0ba1ecb8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994a4732-eabe-4a88-96c3-7d9c256f3af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c89a4d0-5729-438c-b002-b291febae04d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.27.111.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea462e46-dc46-4a90-a575-084fbb1409a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.32.122.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d5a218-3d58-44ac-835c-00986b3cf94a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.35.107.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d78d9c-8765-445c-9056-9d436be0635b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.35.112.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b06cd3-a02e-4166-a665-854af4544dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.35.116.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55a3eca-1ceb-4393-93e1-5421fc4fe34a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.35.123.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698ed9a2-abad-4b5a-bff3-b263925660c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.35.126.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b04f097-7535-42f5-8c07-f3954ca0f07f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.43.7.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3762fd-02dd-405f-b942-091bf91cf45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.59.254.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bad35e-1d1a-4fc8-8fb5-266bb0a75893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.239.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22763b62-671a-46e9-8797-66a702089d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.133.145.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27c2cb6-7ae9-4a0c-a38a-65264f7be669", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.144.224.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9903755-6de6-434d-a9cc-c7b5e5ceb5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.144.229.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529338a6-7d94-4c8a-9634-f43c7f99a84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.173.67.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5775059-2104-41a2-97f0-282c3e921705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9094c854-e542-480f-be9c-e4d2d0b25f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07b1a1d-fe5e-4ab0-87c8-a60bbff7b9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6051bc-7582-4666-a613-07dd6d51dcd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9ad8e6-cf5e-4c05-b8e4-cd6c06feb2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b227539f-a953-4ec9-a28e-c113ab3337cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a25b6c8-6beb-44cf-ae11-561fe9423956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620b1878-5cef-4e55-94e8-6892bc8cb87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce2dc6b-00b3-42aa-b737-d9d51fa99ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0363a40-7aeb-44ff-8912-78bee2a07827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92eabf2-7f65-4362-bc84-1272f86b7271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4bd56f-b6d4-4a20-98de-bb953117d5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e541e05-11fd-40c2-963b-45fcf535b4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631eb18e-1727-42e3-9be6-5ac53542aa81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd62a04-63ed-4f56-8cb0-30506a76c292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640a3488-076f-4fef-b16e-cb371f638dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04af6d57-e966-4115-a031-c68aeea8561c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9ae3d7-a502-4ab3-8267-7c5ec4de5f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa0b516-adbd-4580-a06b-0318cc26c6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e463c5-120c-4567-9578-cb4a7e3caf85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05703e61-8a64-4214-818e-a8ef2e74c169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1d4af5-b56b-451a-a637-dbe1f9f07976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cfb5d3-7b76-4e7c-8bda-4e8b74180b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6111077e-2519-4bec-bfda-b91a5ffd1e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4993de-f792-4659-b00e-2772bbded0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f21b288-b969-4a37-8a8d-b9967155c7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe08349b-3e21-455e-abdd-be4eecc669ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc341cbe-7da4-4c85-bc60-ff78ff1f63ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49704f33-27a7-405f-ba9e-1e0456764d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5522b9-a3ac-457c-8124-24262eeb664e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53340cf-de0f-403c-bc0a-8cb41f4d536f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48487a93-5b91-4da9-91ec-e1632f943975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2446f6-5dcd-4ffa-9f49-3753c21f93a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afa062e-e2c9-47fd-88c9-13927cb546c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7941630b-1e3b-4df6-8441-f757f65656de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d7b4d3-9f26-455b-8cd4-4ab731c6ea44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a051c1-ddc3-4e1e-bf2f-c6b089c4a7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.13.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a587baf-f1a5-47de-a426-3f181f6c15d1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.244.83.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43596a90-3ced-4a18-8004-e58ffb174147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0d03dd-7227-47c6-bc58-7985f4703e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a85fa9-a043-469e-b9b2-a42654c342fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cc7607-0624-40e8-8e56-685f503da77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae36c9e1-c64b-48f2-b7f7-99056fad4750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ed860b-4dd0-42ce-855f-26aa2dca82e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c26c35b-b9b7-434e-9e82-9545381e09db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f135c17-1e38-4b00-b59e-1b4fbe65dd4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ad4aad-7adc-4477-9240-b8eb7ed431ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc68a81-e59e-41e9-9100-fe7a96a50139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef11a67f-18e1-4fff-93cd-778cc565e9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200eb8b0-61f5-4d30-8068-2d2b7c040493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e7697d-8165-4a2a-8254-a3648b835ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e05a34-5d13-4bde-ba80-2dc8ab2868cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a458527-a363-4b68-9feb-2c5b5f4a40b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bf5a08-aa39-4f7c-80c1-5bc6aff331da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951c9867-1042-4b92-b08c-919b78b3e18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2968bff5-6ce3-4acd-9894-389c9bb21822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdc14de-1f90-491b-9c9e-31606215d1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be37b5c9-cd27-48f1-b643-17d2b73ec6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e17bd6-9421-421b-8932-91663bcfdee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89443634-af8c-407c-9c01-23eaa4e9b71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ba3181-b246-4c67-a486-6e3e28496445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de649af6-e749-4a39-927c-70701b01d3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b24ae39-f32c-4240-838d-4d9cf2216d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c6a4e9-dafe-4641-a140-7e73c22b95dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaefddf7-c310-493f-be29-0d75c2269dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fb7537-59b3-4700-933e-7f734b825679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10e7a1a-a19b-4180-bdd6-24a9b4fbffca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4d0cf8-0acd-44a7-a2a1-70fbf9a645ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60c93cc-f3f9-40fd-9b33-bb4f3737106e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd6cb95-8d11-406e-b87f-03e614f9d5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6092337-05d6-45df-b873-513c76424b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6eb2e7c-8a4e-4f11-ac19-24430ce3072b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1731bc8-1906-4a4f-ae33-dde74e2acd2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d826a5e9-7f70-4d81-b69b-7a0d19e32196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f028e850-86cf-4ffc-91a8-ab1477d59b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ad191f-87f9-4460-92e4-75a43014d2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84464288-37a7-42bd-8a11-c7a191b3b7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4e1a11-4d16-458a-8ffe-01778966dec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95ce9e2-6b30-4c1f-a7f9-50e4e5726848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfdbf2f-4d9c-4ffc-a852-923e96f5b1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ea2cfb-409e-46e6-842e-e3731e9bf536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fd084a-288b-442c-b3b8-f707d083fb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d1c880-ca0a-43c1-8180-ab31240c4ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cf30e4-1188-4592-b8a1-06909cd7e384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba84efd4-b4b2-499e-9cf7-ad05c3574af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce4d548-0509-42da-83ed-8debc9dcaf33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7accaa-374b-4492-a7a9-87834e14a6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229e2794-4547-49fc-a96e-63df5d80d6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1ab3dc-d734-4527-9fca-150ae138b37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422f4ffb-a911-4a77-aa33-600abc97e3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bb5982-237d-4606-9ef3-0a1daa622703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffb0d6f-0fd5-419d-8b12-0d48100bb261", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.26.235.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d880be2b-9492-4ec9-8485-4fb61aa2bd34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.38.48.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04d6025-2475-4789-8597-01584483f21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.40.86.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0165df94-087e-4826-b394-6de62eb429a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e0d39e-4bd7-4457-8104-e7bc2f8f46d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e06478-ea7b-4a7e-8317-65bfe1122677", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf5829a-fc8b-49cd-9945-37c8dd2492a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66476962-a7be-4baa-a3fa-d3b10a1d4b8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5863ecee-2748-4f1e-bf1c-329f971f6ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.137.173.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f5cd42c-21fb-4e8b-ac9c-fc50768d3bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.142.233.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b5ede9-7f25-48b5-b807-076781ff32e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a51581-fc7b-48b3-a9d0-1aadb1097f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41644278-f5cb-4615-b201-0ce8dbf7edbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6c3e86-e096-43c6-b1d9-d61727ec715e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0b1761-9054-4d93-bcc6-0a173487c178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb57977-d8c4-4abc-bc88-ee4b1f738922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e577632e-a0ca-46a7-b37f-c29e9bc490c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.61.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d62f5aec-5664-4da2-9397-25faa61c2d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.62.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96074fe0-b6c8-4f77-93b1-94e86a52c707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.95.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381678e0-e1bc-48b9-b463-ec695f35fbc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.165.133.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54741ab2-829d-41dc-b6fd-9b4ae8802fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.19.155.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a32544-8cad-4914-b656-373e7d1cafb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.197.225.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e24df2-9fe0-4569-b4c5-dacd1edb8b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.59.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c17487-0779-4e00-ad19-d4246f97ed1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.217.248.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e243b97-21a5-402c-82ce-2f72162ce7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20bf572-355f-4daf-bb22-f8816740c594", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.245.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc232606-247f-4673-bccd-113659a8aa4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.64.102.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c22ebac-d4ae-47d2-8962-548d1922ea35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.70.186.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc03372-788e-4f43-8e9f-684740d6a2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.75.193.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42023ea-5e8c-44e9-a3ca-728f5ff58723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.157.11.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472ddd6b-8182-4622-aeb7-2e54aac8cd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12537615-7969-4964-9d2a-36682aa7ea64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.203.203.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5566cbe8-f1bc-4d34-8fdb-027f952e8d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.203.76.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905b4ae2-db80-43ae-9028-47e46053b3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.245.1.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f198d69-cee2-4d03-88f6-cbdc7c466947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.253.136.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67822ccc-8964-4e3d-a725-f95bb95c5d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.201.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5e153b-ccef-468d-a532-d01b3108c339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.66.22.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32451dfa-22d0-4e84-b0b0-eef6bc45bc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.73.120.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b7d213-fc35-4df0-b4ad-c9220eefd787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.92.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860c2a0e-5982-43d2-8ab0-c1280ac403cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.79.229.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0289e3-bf20-44aa-8adc-35c3a5fe3602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.131.130.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e053a6-e427-494c-a556-5944473a8358", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.138.212.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6347e2c3-fb42-4690-b6ba-5e8c2747b45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.139.83.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3205e84d-2a6a-414a-a4a8-a51c99b3feae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.147.109.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c63b552-4a99-409b-8d6e-c0c8b3985e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.176.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b64a97-f1f6-4973-b10a-135aaa40bf86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.151.182.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce097f9-5d3f-41c5-b131-45c6d04aabe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.76.177.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcce111-35f2-4b14-8e1a-511a0ce688f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.79.105.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7712bff1-77c4-448d-8877-0166e009ec86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.128.221.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6442e94b-7a82-4d3b-a360-f305cc48d18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.49.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9baf9ffe-b80f-4061-b524-ee422fc33772", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.135.28.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531cbf81-5168-4010-8f48-62977f189a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.178.57.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c843af73-88d8-4269-b1e8-b4520e4e90b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58156f4b-1fe9-435d-b332-94d741a8533e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d29cb01-edae-48e9-9068-06e7da798ff8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53916eb-fa1b-46ff-869b-7968724aa27e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b359ff0e-2f01-4277-af40-6d8827608652", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74fc167e-a303-4578-b9c4-a9e157017ba7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1364002a-7251-41be-a217-8d6aac6831ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54611e6f-bd14-4503-a664-3e2960ce7f32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e79b8f-ecfa-4fcd-ab84-331d11038fce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c87503b-7778-457a-8b9e-47da127c571a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b59800f-b612-49f6-8ad4-e14e17c4ec52", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d23f202-10c0-47c9-b67b-bc78369cba47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aceed2e9-8635-4aa2-9e16-22818d97203e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1303883-bc9b-4a9c-ad0b-ddd5025e0274", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a6c9d9-09eb-4660-9965-f0dc521476ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b6b4cb-77e5-49fe-b4bf-cd78937d20ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d1a944-5c40-41b9-b6a1-1cb5b36d2639", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432f2960-109b-453b-9595-6de7d3112ade", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.51.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367c9d96-4f0b-4db4-a2f3-d9430ae6164d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.190.89.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1be201-037e-40d0-90d2-b66e13ffd88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.194.128.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d944ee9a-58d9-4007-8983-20e4608cd4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41cf743-acee-480c-9590-10cce591ec9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e28542-d5bb-42f9-8b07-d1c7f6b2435d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b507b9-608c-4814-a1b6-ba871f8b3324", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.205.16.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4972d1ee-d24d-425f-9444-efb23f541088", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.205.16.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f986909-00eb-4159-81bf-7b99af51e992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.11.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8a2768-d9a3-4050-9ac9-ebc4cc3335c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.10.187.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ada995c-a515-41e6-8bd7-ff8cc7631576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.11.20.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f3d267-ceb0-498c-bef4-f2c46a3db849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.131.139.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2364f7-12e5-4c5c-ad48-2a3ae520c852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.147.36.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915b1874-de6f-4a6b-b8bc-7d073fe6eeef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.159.119.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a939c91-cf8c-4947-bb51-dec04c288761", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.159.14.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab9a6fa-dd7a-4425-958a-cca61df09d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.2.9.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e5b938-6914-4c0a-bbe0-c1058f920eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc22ab5-8efd-4df8-89a9-09773c892560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.228.10.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716d58d7-7419-47a1-939f-21959f36d401", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.236.21.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a13ddfb-34fd-449e-ad51-b54cae721481", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.236.22.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad220490-a2dd-4308-8692-220e444c500d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.102.183.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2e5487-bb45-41d1-9cc4-eb897b8db7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.104.76.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f9c97c-e880-4609-bbdb-b59255b43b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.105.60.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6f6516-fbc5-4444-9409-f0a513177921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.120.184.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0928fa69-3518-4305-9a74-ef202c313ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.124.22.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7de6b2-69fa-4c16-847a-84d510d48541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.129.138.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2b74a2-7d87-40f9-ba19-9d4aeebe32fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeffe137-c2c9-4273-8ee7-10272ecaae4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff622e3-8bd6-481a-ace2-bb8f49594361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.212.83.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a37f5c0-b386-41c5-84da-6dbda70ce996", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.245.2.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6346f765-4a12-490f-ba83-8ace99fa8408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.246.42.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67dcf56f-5844-48d7-aa24-a75265a7cd4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.86.14.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f299dabb-3ab4-4f4e-916a-f55ce8b829ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.104.83.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2937a066-7911-485e-9fa3-11a9f20b22ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.252.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e091d0-b008-475e-a1f5-61ec25c45438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.124.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f96421-b3f4-45e8-b950-a329161fec90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.130.154.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c59a2c7-6d4e-4a1a-b817-9fed815088cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.85.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319a70be-21dd-4164-8d52-6ef8c169d773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.177.191.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa56a7fe-a27c-4792-9005-a51ba619d2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.167.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3f0a70-4a7c-4417-a72d-841ad8e91f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.186.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53aee0d2-3314-4c00-af74-854d4fa193ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.29.232.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed81984b-42ea-4b0b-b0f7-0b7114952f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.4.205.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd13f43-0a99-4973-a8f9-9a4797224cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.76.158.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7329e0d-e937-43f6-8fe6-a20b8d12081b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.100.37.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654153d7-ef85-4fdd-968d-d57a27f16d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.106.153.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f8184e-d63a-4996-9a64-04cd6c03e712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.148.24.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f27bfa-bcc7-4404-9dc7-4f27b3b13851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7097b9f7-e678-4708-abd6-f55bc4573d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6f1b99-3181-4611-8d89-148c6464d028", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.224.93.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd41cdc-6752-4175-a792-9c1688d44c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe162d43-3d53-41aa-9572-61fa7b23606b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.238.46.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7d0804-2c48-43df-b2b6-3c80ac49781f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b58de5d-15bf-4146-bd6c-c16ae9c9922b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c95e904-400d-43f8-a890-bf0933d323a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923eb370-87cc-44f5-9a6f-4e87f1247272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5816787-b47a-4436-b820-bda662ab49c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc133451-3ebb-4eaa-8c27-aff5137ecaed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.13.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8270cda2-58e8-42cb-8df8-959056e0a6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.13.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fd246a-269a-4fa9-bb70-1bc9e286106b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ebd4d6-130d-4621-aee7-bf9cdd41e14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.8.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b5d3e8-18d3-4f53-be96-781a367e5667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.8.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69622d5-39a7-4570-900c-9dc9958d2f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.8.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe1e808-5ba1-4b2a-bf08-a5f176144284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.9.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd955c7b-7269-43f1-b69f-8251620c3802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.9.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92597058-853e-48aa-b94b-21b2567aae2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.96.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf9df32-d5e2-4874-bcc4-97474d8ad46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.16.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197b47d6-6689-4c33-b234-93f4a8469ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.18.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62ea37c-9d1e-49b2-a949-85577a9a9a64", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.18.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d90c43-417b-4d45-b0eb-28fc81fca1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.25.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0182e5-4dfb-4ca0-92da-314e4bad4060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.25.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6d082c-7d08-4b06-bf4e-58fb8e270732", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.249.27.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8979a1b-4270-43b4-b18a-67677b8b1432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.204.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48316761-c603-4681-ada9-d0d13df7e77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.221.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71f1a5d-ce79-4506-896a-172e8b274b06", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.27.0.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf54e990-4408-41eb-a161-0fe938598652", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.80.91.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31191a28-769e-4413-8a39-91c22fdf1b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.82.99.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178cecd3-48e6-4b2d-8b6f-2f43e76262bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.19.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec6e624-a489-4841-842b-a3c1b14dff61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.19.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df39a0f9-c8f0-4cb7-9fa7-2bfca7234dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.21.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39559547-9fbf-4106-8931-0e6c28784dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.21.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b87b32-561c-4d14-8c4e-7b97447ac002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f39f36-cc9a-42e2-ace6-a8605796888d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dcf0a5-7cf4-48e4-b36d-0b61334b7fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.105.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19ae2d0-1039-468d-a676-a51ac08cff78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.112.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed52667a-8dfd-4db8-91a2-54248ddf4c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.200.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259109d9-ae44-4f78-a3dc-d05eca06f487", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.244.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5807ccec-b3e1-4cf0-a5d4-31403b49525e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.81.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbca1406-8a35-4da7-9384-d4711c9575e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.92.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f984875-0feb-403c-bc0f-64c35d2e29c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.137.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5223f008-a8ab-4720-839d-ab998bf54678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.186.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea9fa92-4e71-4a8e-9d3e-20172d46951a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.217.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785242df-f989-4f01-8bab-a125a6cf1c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.236.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef52dd5-6af1-4e43-9000-df66876cbf63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.67.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c941fa-8ee0-4eb1-a214-443364b22448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.82.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee0e0a1-a1b5-4127-8820-37a0773221b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdda16e-ae3f-4d5f-8835-8c8ee84e1b70", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.125.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90710c83-ed74-41f6-9fb2-af287e7e07b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.98.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b6185d-f3d8-4796-b3f1-9983a8ffbaaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.233.3.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226713e4-2a80-4721-bc96-4e019915b132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.118.25.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c80200-09a9-4885-a138-2e5e79cd7a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.249.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc36242a-5dbb-4e36-89f3-5f9768b58cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.58.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a49666-14fa-4529-9094-dca46ff81d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.90.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdb3a23-21a3-473b-a3e5-914bdd8b266b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.21.28.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6ca416-21f2-4f4b-ba82-d349d9739b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.22.119.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1feb94e9-e9ae-47dd-84ee-240e7439b344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.22.65.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421b124f-bfc5-4477-a34c-81fde513b4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.25.66.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653cc1ec-58d0-4609-ad0f-04b11dc2667c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.29.116.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375649a4-3a86-44f4-bc22-22b403fbe0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.29.164.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af21b14-a528-44bc-a5bf-6a5ea2a43c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.45.244.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbefe67-935a-44c4-b0fc-527094a2bd0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.71.230.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98135e94-b9de-4c5a-b345-82fd4cf31fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.0.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35ab67c-4fc3-4b7c-b717-535f6806d951", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.46.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee208b1b-a1cf-4f2c-809b-1802a274f7cf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.7.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee10d6e-f58b-4ad7-a15b-a7b25ba2313e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.107.205.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9b4ad6-76f0-4dfc-8f5f-6cc40e11362c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df625732-0435-4519-875d-5c70eff0b0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a97ddf1-6191-478f-8bd7-80ff326c96df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.220.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d19fba-8d90-46be-ac09-6e037c541b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc13005b-d856-49a1-9312-d4ab92e8e6bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.132.26.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97354aa1-1c57-4b18-8ed3-45c3c0d26c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.134.216.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53026f85-a49a-4764-ba3b-5d4674bf4192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2551b3d6-83b9-4f91-b265-fc4767758a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.143.162.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e845bbc0-fab3-4ce2-89af-160a57208434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.216.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b658a4-f969-4a3d-9d25-726663e5ec55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.62.0']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd07ae6-0755-4e9d-b854-3216feaa3951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.214.238.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04d98e1-cfda-4c25-9331-8b12345def00", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.36.224.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e040a5-8333-4a79-9631-a43a81614a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221cc97b-9267-4410-bbba-4a7e25697510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.221.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b583192b-da32-44eb-a591-8000a86cda44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2fe1b62-4532-494e-8e86-08185c60935b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.11.50.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b439fb-818d-4f1a-b215-da7d1dbcb943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71b1774e-3e17-4dff-8a47-d551dbb612eb", "relationship_type": "indicates", "source_ref": "indicator--c1b439fb-818d-4f1a-b215-da7d1dbcb943", "target_ref": "vulnerability--75f6c9bb-ba02-407b-83a1-2b2e2c44bc30", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7780145-137f-4859-a220-eac525903e4f", "relationship_type": "indicates", "source_ref": "indicator--c1b439fb-818d-4f1a-b215-da7d1dbcb943", "target_ref": "vulnerability--e0c5c0c3-2afc-484f-9c71-65705a5c9c36", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4d90402-2f6c-47b8-ba24-0ebc4cde6991", "relationship_type": "indicates", "source_ref": "indicator--c1b439fb-818d-4f1a-b215-da7d1dbcb943", "target_ref": "vulnerability--bda676fa-f8a6-45b6-9c11-85202656290a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fea1e71-ed6d-497c-92f4-deb187f5f794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00578f7f-e0f7-4375-81e0-a71988c02c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e65b71-ed49-424a-986a-4338fa8c9cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9517d7-93bd-4811-a35c-59317eff5a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef1bc7b-50ac-4f9d-8756-777edc05b9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a493dc-c6bb-483a-a079-5ecc8a518dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feafaca2-c455-4cdc-b5d2-fd888d1fb92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d62134-291c-4933-bcde-9d53ee3a6046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480a6c85-1f28-4fc2-a54f-6265ba94271e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a434aa42-9276-434c-8eed-426459386cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864663bc-faff-4ee6-9122-071ea753d1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f48b57-9a63-4a77-8695-c7d8a337c27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8afae3-dbe3-4bea-baee-5c6e7fb6b4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d992651-edab-4956-9024-2c61a62ed181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a50283-909b-433b-8653-b2604e2e4711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797ae620-38d0-4d62-a472-2666ab7f72b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.22.104.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcac3cc-7763-4264-becc-cf500a3d943e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.22.91.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac3c024-1c74-4bb5-9faa-1676a3427772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.237.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6d4a94-0237-43e1-909e-2a304519c9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.176.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4342acc-c9ec-453b-88d4-d2e84b2a65b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.184.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5869db00-5c54-435c-8470-db02c6e35fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0676d9-c1d8-47a6-9f67-93a509db18a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c74123d-ac07-4b0f-b49c-f07c030a7c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929c8118-eb2d-4f31-a4c4-4a0b04cf730d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd2eb69-d0a8-4e51-932a-8915edca4dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc3ba18-d641-4e7d-9bae-71b48ebdf3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26737de8-1614-4dbe-8a35-3036b5f30ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49486ca6-44f0-432e-b03b-5d6b1495c9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.91.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ddeaa0-ea45-4ae2-8fa7-f8bed79510d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.160.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea334893-21b6-4e93-a7a0-716fe1c7b907", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.93.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4a6176-65e9-4123-96bc-0c64b9bd56a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.1.185.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691abac2-a8be-4da7-a041-0667a7bce10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.163.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adeb64eb-2838-4955-a1e3-d5e7537e2f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.21.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c884e4-6fcb-40b4-ba2a-30d82a4ebe1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.27.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e49f56-9d1d-4d50-9d76-730d71798b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.42.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f71bdc7-237f-43e0-8e50-87aac6e2ece2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.11.116.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5552ddf8-120c-41bf-b34d-086e7d875257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.124.208.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c94061-22ab-4327-81ed-6e83675c4619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.125.155.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3834818-18a0-488a-aaf9-94e1e16dcb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.125.34.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--badcc8da-7bb5-4c83-b4e4-69f7ab5df725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.126.128.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d639cec-3ff0-46d4-9985-cdaf7eb72757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.128.104.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae600758-0b65-474c-a0a0-4066d1f1cd7e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.132.64.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--babf3675-2566-4299-b7f1-1c8787091132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.133.37.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5116f29-cd5a-47a2-ae41-dc8b1f7c8325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.112.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565890b2-1858-423d-96da-e44b1091a6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.117.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4d86e5-7c7b-4bbf-841f-18bb8d298b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.214.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44f9ca8-4c0e-4a0f-a960-f13d466e2543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.129.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781da9bf-0e37-49f9-a075-455fc8a5fe3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.143.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee06e85b-22b0-4d8b-a904-dfb121180f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.177.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d736cd-ae54-4033-8cfe-10cb7c87d75a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.44.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4f7c26-4feb-43d2-b7ef-9f39a408f41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.85.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ebaa7e-a473-4c98-9cd8-795bc2d333af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.142.159.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe0cdd8-d4ba-420b-93b6-0b4016d293a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.143.221.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecf9125-d02f-435a-abd3-f215bc415d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.148.196.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a93738-f49f-4672-939a-5e829a814e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.148.239.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e23a19-0a5e-4af1-84a3-4ed12fed8f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.217.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d3b1f6-074d-4bd5-ad73-c28766d378bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.152.115.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063d4729-8ebd-4568-a241-0404fbce9cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.153.152.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544b23f6-7e04-4e19-a675-c4536a2fa54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.153.157.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ab77fb-7d6b-4aad-837a-685e09e104a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.119.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed97f1a1-c616-4ef9-ad4e-efe5b9935509", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.144.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18625768-c776-4694-9ad0-7245385b9049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.165.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb48974-c72d-46ed-b76d-dd185ea90f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.189.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ac08d6-17cb-4bbb-a409-d92f1977fbde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.235.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a84a65-fbf3-483b-ae63-9983f77bc043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.158.160.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca39cf7-bab3-44f9-8f8f-68d928a5408e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.160.126.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a1465f-91e6-47fb-8cbc-d909a1367833", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.162.188.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98707a8b-9ca5-4acd-8e1a-f79272edd3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.114.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e161247c-fa2c-486d-bb39-389d2c330942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.122.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e31be3-94f7-4b48-9656-76153e056c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.122.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fecf643-66c8-458f-8553-6962b1091f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.136.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af101437-52a2-4f6e-b8ed-9c02083f24ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.163.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ba5e99-ac4d-4d9b-8f8e-dee035f7ba98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.190.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da102919-7130-4b38-a711-4c827d5f79f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.197.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176bf817-b34f-4cab-a21e-25dfb762dccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.199.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9a731a-8693-494b-a747-bacf8b25895b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.218.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a9c32b-775d-4aa2-9955-07f6d890aef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.22.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809cb0cb-f0e0-4d54-8b55-b51cb6198389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.236.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bf1d28-f49f-40dc-92c8-baa0be101876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.240.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68868786-e598-4611-bbfc-be1b69233dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.244.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bf9d87-376d-4d2f-90d7-bac141601b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.245.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386d57be-0b70-494c-8973-1ff0b7dd06e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.92.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c917b0-8cf7-4957-bd15-d1da93c90287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.96.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f519f2-4a3a-4bbf-8161-886283f2737d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.165.96.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f1a295-5d26-4cd6-8e59-92af8c003ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.166.146.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92add7bb-39fe-4920-897e-465fc3dfaf2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.168.42.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1588387-1ce8-44ef-abc4-f4508d061f90", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.177.112.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ef1968-959c-4db0-9215-5cdf7fba9a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.18.148.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a331c4a-6ffb-4d71-ae20-67a84404dba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.18.222.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f8e1d9-9fb7-4f0d-8f53-c65425d80452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.18.35.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c45afd-0c7b-429b-a024-9df26c844736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.18.99.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15ed679-f269-4f65-a60c-647b4b9f4463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.182.219.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c78f584-ca6a-48fa-80ea-4ec633a98220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.185.155.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351c4877-5fcd-451c-9812-ab133e43c17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.186.50.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4341e97-7240-4980-999b-ac96244d2f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.193.119.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b678f1-9679-4728-a8a6-dd9c3fae8b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c503b6-dd66-4acd-a85f-af4a69b461e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.212.124.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544c5d0d-5382-4e91-b96d-4ac0703a753b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.150.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e65a15bc-a76b-4b7d-8a75-0c606250516f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a8d88a-8607-4cec-894f-f562c9ec019d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.205.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319955bb-c547-443b-80d3-b04debd4969a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.221.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e19b58b-e90b-4e16-bfd0-f096741433d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.244.252.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee06cb0-aefe-4eb7-8474-103027646f5e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.32.146.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d9efd56-e391-4c55-a935-e2647dc78076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.133.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3682d14f-7836-40c5-9e40-5388cb049f7b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.174.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9653ccae-2ee4-4408-9acd-24e6bcd52295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.13.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b760cf7d-0494-4ddd-9c88-eb2ec918b9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.195.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e7d9a3-62c2-4507-90f2-721d1a027355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.20.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7cee85-fdb7-4d0e-aa96-0f24abb2efec", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.211.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d366a1bc-0043-4319-afa0-614bc936251d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.220.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b24ea79-e6f3-4ddd-b59c-0e83e9fca92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.229.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074b84a9-b20d-4143-bae2-923b5ff623b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.86.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b41cf19-35e5-45c8-9161-19f360685e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.48.148.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af5e44d-8eba-4400-98ae-ab7506e41139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.190.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ca9357-e9ef-461e-92b6-09b985ff8184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.137.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357820d2-e9ee-49eb-b095-04f72b59f878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.164.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa10d53-36af-4ad4-a142-d2d0ba4c7ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.123.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6005a780-8d39-45c7-a394-4a618e3c74fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.158.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859d2f6b-d9ce-4910-a264-4adf0d2cf888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.219.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d977f0ce-0011-47f7-93f9-adb787764fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.255.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84465ea-df08-4914-b3c1-10dd2e9fbf68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.56.50.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9600620f-9b7d-4b2e-a7df-faafe8f4689b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.57.182.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2916e83b-f6cc-4142-bfc0-b67879a33ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.58.167.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d6e488-a812-4790-9371-88d4569b10fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.154.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aba7965-ad9c-43ad-b157-18ec49285015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.161.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56aed349-a61b-4e6d-9ea2-4c8958f26805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.189.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89275616-f129-4815-8f05-2db1c0cb08f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.197.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fab9f13-8982-4136-9a3c-d0d00f94eaef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.208.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f48877-0b79-48d7-a63a-ba17666dc4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.94.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4245e7a2-46ec-496b-b775-bfa3063bcd05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.96.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b307ca-2cfe-4972-8727-8c5f11c4cf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.66.143.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d289c20-87b6-422d-8151-9524fc352778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.7.251.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb77f0b-f846-46b3-a09f-e0416fd054de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.71.137.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d774952d-d409-4e21-a354-900fad536ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.73.51.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9e5347-056c-4b61-a191-43c40a79857a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.74.159.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85acef9-7672-452b-9fc0-6742432aaec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.74.221.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43909e1f-56c8-43b5-bf8e-d51f24550543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.75.166.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682b44df-37ca-4c90-a740-14686e2c18c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.107.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a79d3a-f4b7-4d01-bb5d-9be035b888cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.58.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed57d08-ad90-476b-a2cc-4bf69d3c7742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.202.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143d0ace-0354-48b7-9340-75fcf6b69186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.237.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae21641d-8feb-4110-97e5-129a9e684362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.175.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e722f9-4e7a-4bd1-ba30-4dcbb9d14b7b", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.177.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9dc0b5-4ab6-4f4d-b6da-98dd1db89141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.189.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3deebb2a-c207-4bfd-913d-52ba4d099fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.192.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8902358e-a7da-4606-8343-9cca6fa7becf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.80.7.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa94b808-f7de-4818-960d-2d721843d8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.219.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d400adff-0559-4d79-87ae-35804c1c836d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.91.182.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5784cc9c-89c2-4d1c-8a6c-9126e872ce7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.92.158.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b15c60-f2eb-49f7-8f1e-c8acd30545e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.93.81.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4fc76e-6c06-45be-a830-6755e29c1c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.95.53.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f4f9b8-1efc-4912-adf0-b8a730416679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.158.15.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b740d8-4dac-43bd-b1c8-0c5244f30b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccca7c7-05fd-4f18-998b-a91c9e6bc528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.185.50.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab40f057-1269-46d9-bbed-4969c1fd4196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.185.69.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce649840-b5d3-463d-9599-2f489a5dd392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.186.146.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d8590e-bb99-4651-9846-9d413fec8f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.13.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8591c4c7-f046-4f93-8461-e6fdaf5d831e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.41.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c968271-0464-4c36-b6bf-644ef9067cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.91.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0b4419-54b2-441c-97c3-97c7d179fe55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.188.120.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a6eba0-24ec-453d-bb8a-965408570d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.188.162.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37deecef-d3f3-4a5b-9bee-6b55a663f183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.188.252.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef66434-1f0b-486c-a509-07e732b23696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.192.214.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69b4bab-3340-4c67-98f1-725c5074d65b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.153.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90725c8c-fbd6-4bc3-8540-5bd0c83a658a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.202.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f543e91b-9039-4d97-b5b4-2dba8d25f6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.224.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eacf8be-846c-469a-9a69-5f1e52ecd20c", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.233.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76a6f4f-dcc2-40a3-bad3-95420a810b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.81.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38160adc-ac04-43ea-b42f-9afb1098222f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.196.189.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88738b74-c8f5-4fd7-9369-0a7b4173cdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.196.244.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c7576f-24c7-4414-9403-7181fe52ed4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.198.63.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3126348b-21df-4937-9b3b-49853bb05ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.200.191.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b373b76a-2940-432e-a79c-1e68bbbffc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.225.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7831ab-a3fe-4c20-8375-6952395e362f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6275513-4a93-4a0a-868e-a6faf38e664a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400faeec-7644-4990-9afc-bf70e5bacf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1a6512-b7fc-492d-b997-b750bde40d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef0c1e5-cbcb-4492-bd0d-9dc66624c37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3bbfc8-f2e3-45d5-b606-6f44fab2570c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1104b4d9-1bd2-42da-a1d5-dbe6c5080e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff69dd5-82da-4310-aed0-27d569190a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a73d917-5c93-404c-a5f2-1d482c599d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a61ce1-3a44-44c0-8209-91594ae88bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a88bd5-a323-495f-9a0a-de64e582766d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2570875-360f-4b80-a8f6-f7422022b5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051e3552-d8b3-417b-ab33-f536733cc557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a9dccf-4618-4953-af93-2bad9f5d41ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b4cd20-5eb9-43e7-8b0b-4baeda085c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec52714-8cab-414c-a837-d1a08e753045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae53387c-29ac-4bdb-b5e4-e451354c4634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a442593-d100-4c87-9a6c-f549c4d2d11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164cc23d-cf9f-44ec-b7ea-08d1b28e6846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b49de8-93d5-4223-a9d4-562947724b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63dec4b1-7776-46cd-9970-2b0f1aec91a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159d1453-e1cc-428e-96bc-045da18ac9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35437b7-8a12-4f7b-8fcc-54d223d18fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4811973c-e0f4-49fd-a1ba-dc570a773897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbb2aea-5d3a-4cbf-a7a7-6459225936d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62780a1-dc78-41f4-8e0f-eb6ac1d1abfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8672da5-9e83-41a9-9f15-82e84c19af36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8c5c4c-c3c0-420c-a233-d8c6bb2cfa5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7f5212-bbc0-4841-830a-cffb9903f5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abd2b03-8867-4bae-b55a-1eac2b4a9bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096710cc-2b6e-45c7-a824-f4e43d9c8a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecc1159-2f0d-48ec-8c60-12419d42cb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8422dd3e-70c0-4572-8c1e-3a29241999b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18714160-258e-4870-b9a9-c6e7c0454385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65480be-c85a-42dc-863c-41a406afd42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d6afd2-9c1e-440e-abe2-422a571e9000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d92fa5-4d0c-427e-8974-091f3bbfc948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6feb1f4-540e-490b-be04-f9cfd67f1796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebed303-abaf-49d9-8af2-08c4ec78a96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fde473a-2f17-47fb-8d99-72ee3bfcd279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bd84cb-be90-4a4c-bbe7-0f8a8513f0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2e396e-d7bd-442b-9e70-a0d763b424ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1af0602-b9e9-4b2a-b5dd-926986e64f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ab0f34-aaaa-4649-b0af-069182ed75ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d369efdf-9811-4af7-8705-222c301fcbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfe367d-7ae8-4345-b755-5b4f8795ceff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7209c10d-b128-46a8-919b-072cda5b22bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402d9d76-da6c-47b7-8460-4ed81352d76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373287f5-1f84-4c8b-85e6-45d200670741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1b7881-a612-4d34-80e1-c33c35d5d972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfa6a32-f594-4cf3-86b0-418b21a4211c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e426d657-86f3-4f98-8c5f-9e17aa46eef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdf2643-db44-43e2-b6f5-e651a814ac96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63234d63-bc39-44c0-b38e-cc7a0c65eb6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f63ad3-052a-44e1-ada7-8f1fdd6a1c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13490b17-3e25-4b32-8010-55c9fc4454c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38aee62b-151b-48d8-b26e-75d7ad3ab6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b87bc41-02a5-452e-9ac4-430cfac7bfba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1135b52-c811-488f-b662-0e671020e83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509503da-4590-4f26-8666-d902082a99f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32207f9-1847-49d7-a105-8fba3afcc1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4369457e-d335-4a43-b1c5-80ba8ddaed71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a38e51-6a87-4e1c-ac04-d3755731d996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55874dad-e666-41d5-b418-57acac791079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba55328-b3d0-47d7-9129-1ca056eec903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4020a5-f03d-4603-a111-106cf9b9fc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db6d812-9440-4bfb-b801-dc3686418f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3f0626-2ce2-4e4e-a025-97930b1f5cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448ac299-3afb-435c-b887-188004646365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a147602d-27c7-4f25-a0a5-fa005aa5c80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2c45c5-2443-4428-8d76-b67aa9aa257a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf9b300-f524-41f9-b78c-7a1e9a7dcbe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300802d5-0ee9-4b48-bbf3-681de9cfde9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef528597-f4a4-4e3f-9973-a38d14b86c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b470ab-07ff-4028-a6e4-e20457ce30d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193fc9fa-8703-484f-b008-371e3a8b02b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2ec842-d376-46ca-a16a-22ef108fe3e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de20c532-4080-481e-830d-1b1470605542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231e1e9a-3612-41de-94af-295fe6f46e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74af9068-a450-4712-a5c5-dfd5b534b0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9920f6e-a7bc-4b03-b661-a9414c4ece35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4bdc6b-e6f5-4131-ac57-29b98e85fd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc76afce-2146-437e-8fa6-57e9cf146efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2fc9ff-965f-4f48-81a0-85ad82b76b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7382118-d580-40f1-b19b-8a73cda64b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c8fae7-d336-475b-b23c-5549426f9f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6c47f3-6ff1-421c-900d-f4785a8453a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e88297-3e6d-415a-8957-778f06522787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c11e116-b539-4285-934e-a0a0bc3a0ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8f8fda-6c32-4e55-bd1b-5cf34a345c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7929b5-3a15-4cd9-a58d-dafde5b1238a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36fb6ce6-442b-41cd-8c69-d0208e07856a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff92fd3b-c942-4514-8471-d0cc1992db2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a151261d-dea7-4bf4-868f-34556af69fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbfb0ee-d095-4374-8cb9-75ba83f4de6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b7b11a-d1b1-4a4f-b7cf-78cd77ae7498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7736764e-3b17-4de8-95a3-ef9c2fdd1ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c0e64c-dfb8-44ca-a2ce-d3e75bdb60d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a620d5c-3c18-4624-b3ff-3d2664915033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcf2458-6907-453d-a553-6b45ebe2f944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f561f6-639e-4b15-b195-92f2038c8135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdecb04-4c5e-40fd-8207-be23831fbc6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c25de0d-d2e4-4ac1-a875-bcab857f8700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f36dc1a-f2fc-4708-b37d-e7d3636f05a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fa0254-733e-4145-a1a9-1e5345cfc7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2979b585-3c3a-4d85-b5c6-0b0997ad8e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03a4b53-0a99-46bd-85a8-1f98bad3dbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d554d67-569c-4f95-8416-09e97272044b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9a37ad-2cc1-4bc1-b9be-02c78d175f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f33eee2-b043-4d59-a725-0fe857168349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1802234d-8ced-4cec-8d7f-af4716ddbb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a3c35b-e46e-4e87-b6b7-0010e25785d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbbe632-a128-4a89-a793-f06510a08945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c7cdef-bdc4-4db3-8b39-770c3460c77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca43c869-2438-4e96-8c7e-2d0bf63122de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adc8c49-04dc-4db5-887d-a1564822bc97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec67fd9-92bd-4e46-bcfd-6efc896146a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57fb07d-0c7f-46b7-bf52-9e19e85e6358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59a9a9e-a13e-4a26-9315-dfbb9b1a9457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc4ed50-0bed-4601-bffa-190e07cc3fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c061ae-0b7c-4854-9a6e-3d03f2b6932c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca0dc2d-fd4f-4a03-bf99-3abf1a1946c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df67912-a1ae-49cd-8e1c-e0b595084a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee5c6c1-623d-43d8-8cc2-0c19864859d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12228c41-f869-4157-8070-b4c8448cfd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0205b2b8-c0ca-4864-bcdd-223b70504d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6cddd6-dd4e-4c0a-8a4c-dea23dfb58a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5351e0c-6b94-4402-9620-6cbb468cad19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85cd872-28eb-44d5-bb21-de2730899839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2da646d-7e3f-4ff9-9df7-2e991bb9c1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f259d2c-9558-4f26-8e71-f7ed805fb990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9250bd5a-a7dd-4f60-bf20-06cd8094fb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662cd35b-fddb-41cd-958e-94f113111f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cf2dd6-bff2-4698-882a-2aea33331f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9608d33c-05e8-4bb4-b00a-679bc354ef5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f779cf-b19a-4910-80da-0ad55322f856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a32351-b335-43df-ad09-77597a5bd6a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fb2cd5-d868-4eb9-b655-d8538e01527d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febbc43c-86a5-4e94-8945-8bb4629077ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bebd4c-5579-49ea-90db-79d911994baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d335f7c-4fc4-4c08-8faa-59ad7c9b8f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952a5cc4-8471-44a7-be37-6b9d687f168a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e611b7-66fe-4015-b219-769fc49e5f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83109ad8-e058-4df9-88e0-61e0684098ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68ef847-1572-4afd-b581-7977a0841b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579d76cb-8cc0-4b0f-b68a-29b508b442f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42016dd-6171-49bf-839c-539708631747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d012390-86f6-41b2-a2c7-706bf3476ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7633848e-4746-44a9-8929-e5c43b3c2af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5659622-f678-4965-9966-d1e5f123e04d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d355e3a3-784c-42e5-b8a9-f49542f2a92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853eb714-cf5a-45c1-951e-711e5bfb61e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba5ab60-4099-4aea-b1bc-d8a5bdd1b300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9299052-046a-4e97-9cab-b745402f8960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1924738-5b50-4aa1-82ba-5ee7d9e61a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb729f7d-8376-4c01-a082-172ab81ecdb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e063c8-d027-41df-b6b6-9b42eab4d2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8fd927-9dd7-4f98-a802-c2d02f4623e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2895443c-8a47-43e6-b212-3f37473bc308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bed620-b1a0-4151-aab5-f3920a556747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47393822-b72c-4bd4-80e7-3b9e4fc1a895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a57ba00-be8b-4e57-b797-ca3f7ac23ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c37a98-2d2e-4436-8b98-3308995a01a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db9ed72-067f-4dd9-8cb9-efe383ba56d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b47e1d6-9d37-4d09-8153-b853cbbc9543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650565cb-c32d-4903-a62b-08ccad5239c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd8ed4d-5d7f-4c5b-ac49-af9fb9747db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55afa86-0d1a-427b-ae0d-4c9808dde618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccc914d-4605-4b40-a635-62a8a1d259a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7e9ac3-5985-4422-9076-25dc0da70ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693e4c8c-2dc4-4bf1-87a6-26fc875f3c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f595619-4281-44e7-a8c2-8b5f0b3d6b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3467bf6-a25f-41ff-8b2f-20237ea17822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fef26b2-2424-4597-af4e-620348624141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc4bc68-5d64-4f69-899c-cd08cdf9856e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45e3525-739e-4dc3-9388-88f3d0fa1427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29bb3df5-3ff4-4e26-a510-8c41a8f2cd79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bedb58b-01d0-4639-8c05-5415ec7b1fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7520716b-769f-42ae-962e-30711a218cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07df3b50-52da-450c-9507-a2c7f950ffae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3f8ba6-8dc9-4d65-ac88-260cdc18036e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e4f3c8-3a11-47e9-b782-873875048b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a518fa25-e45a-47f5-979a-057f6d8d98ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc31931-1821-4ded-a678-a3f6cdc9e3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd71aa0-a192-49b6-85c4-65938d42e7af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0d42e6-7556-42d0-b980-8a4448403e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29961752-7fe3-4479-8aa4-fa5042488d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e21a34-54b3-4be8-97c9-2250d7557cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f83a7c-fb49-4d35-b1d7-36b3b6023ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb56a043-f610-4ead-9f56-7c8b2f264a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4800eb7d-51a1-4c72-ab3c-b38e28beb3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e131a44a-2346-4cc5-8d63-26e0403eb142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86cc140-0762-4d6b-9353-c05b0fdf6f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8c91af-3f8e-4db7-b550-8de271edbad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cf18a0-ba6e-4f06-b5d1-926796b56a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0d0a82-89ea-4b07-b34b-4537cfaed086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627e84c4-02a1-469a-8b57-fa2622be7d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1bad320-c4dd-4eef-b7ae-170311b8a9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff418068-76cf-4a82-a81f-ba2fac26d223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e3c225-1acd-4891-8b29-7fdf076e53be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e089dd-9db8-4f3f-831d-d2179c6a6de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a0c8ee-ce91-4173-a101-cdc6313143d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46cc33cc-ee24-479c-88ca-3d8510df40de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8aebaf6-d184-4407-a92e-29066592248b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a38ee9c-3604-4f6b-81c8-f217ba8ce3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.212.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd6a328-19fc-4ea1-b8d2-c7907309b9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.225.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678863cb-d8fc-4993-aa30-f304a1a81f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.254.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65fc7e8b-db08-4346-9ede-73126c6b7ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.78.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dc3c2f-b4ad-4a17-91de-de0a5dca2dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.99.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8630db0e-4e1d-4058-ae44-079bbdd9f6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.208.193.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47431278-c8f2-49ce-9e75-2371c21f3175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.211.102.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e375bbb8-ba65-4cb7-813a-814a58098440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.142.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4e8838-cf9d-4987-8e96-1dbd7ab3b8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.160.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a1c9b5-a99d-463b-802d-060eeafc9ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.170.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8021a868-da6c-4c1b-a19c-82e7c236aeed", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.194.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b559907-47bd-425f-a86c-f367a5546a60", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.199.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c34d733-4b7e-481f-9f34-00f53c3dab97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.217.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc74b90-29ae-4b7a-b0ab-70296c3d3176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.223.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c7bde4-ecc0-4060-b244-35b4aa2979a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.230.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eaaff5b-2235-4be1-900b-669021a91a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.235.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f859eb6-d164-4f30-b8a1-dc6521654690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.236.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ab3417-70dd-49ed-a9a4-8983dbd87a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.237.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3fa684-2688-43ed-8946-71016b6711bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.245.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acee2a5-b2df-422e-9e2c-a520a496ee23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.212.252.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de99ef3f-17a9-4e9d-8424-776603b07dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.140.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db82e18-6f36-4061-b04b-48bff5050bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6933e64d-d6c2-4767-9459-44020199b497", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.189.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e311222c-8c07-498c-94a8-13284cc53045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.195.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f832316-83d2-4836-a1e6-77a10c13cae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.220.226.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4aa48e-d073-48ca-9342-1d9291377afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.220.240.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0eaba1c-7459-4710-9dd7-70f6a99cc331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.221.179.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ccda35c-516e-4eb4-b900-f5723c20a123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.223.195.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a794ab5-4fa3-4fca-8721-7bf4635da790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.223.20.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f87caf-7412-4a5a-a8b6-28fc359ae015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.225.41.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e44e851-2503-45c2-b20f-ef8e7a7ab34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.227.112.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082ab41b-c393-4f5c-a33f-e89bd01be9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.227.124.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b62fa44-570c-4031-9613-d2027f26ccb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.232.84.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de2b8dd-e3b9-4054-bd8a-98f8dc6e207e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.118.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77022ca-766f-4cf4-99a5-b477f94e7084", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.19.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c967775b-4195-4e3f-87b5-c0901c2e6ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.42.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e6b6e5-6e7c-47fd-8244-c52c9f863721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.234.105.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24eee34c-2f99-40fb-9c3d-ad5d4212af86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.236.81.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c6555c-4ec7-457d-b408-d8b63e4a101f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.237.151.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82adbaeb-f337-4d96-9ae5-af43eb78a80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.237.7.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73012de-ca2c-4568-aa7d-d3c5d1d26778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.238.218.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca2f0ba-92fe-4cd0-af10-8448d2c9c867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.174.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d0ba26-1ac1-4c1f-870c-f43a66d9c8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.80.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f527cc13-768d-46bf-97c2-1675bfcaa498", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.86.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c56723-0f1a-49cb-9456-08fa61ecba27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.211.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf485da-4343-4cb8-ada4-c1db54761d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.252.25.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c05f69-411d-4409-8421-3044bcc71569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.252.3.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a92c1a-8db6-4e26-b0b7-38d14fca1c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.252.31.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3993d619-7000-4969-a73a-f50b016faed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.88.227.0']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2b8234-3b22-4f63-bdb5-7a43d6a71fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.93.188.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cfe7c5-d84c-4236-a042-1c27b13d87b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.103.243.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc89ae1-36ca-4529-aad7-7a3267612546", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.166.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e08bf3-3d3e-4e3a-af0d-62839e719b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aed0556-5580-4f0a-9a85-0c0442060e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163bbb59-3e47-467c-a175-1755f717cac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.137.116.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9105628b-eb8b-494c-bef8-0e81be435442", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.151.146.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e9552b-2d15-4367-b78b-106b97d1403c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.212.19.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c5e91c-cf68-44b3-a9ec-3d09138e4e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.212.206.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8650ac32-5f6a-4738-8105-270d630bf164", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.224.82.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a9a026-5fc4-431e-9fcc-7d00d25cf800", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.249.2.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c95b77-4a6d-4d2b-8de8-c8c659e4175a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.104.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d62f8b5-f1c1-4e74-9d48-0146a220d0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.94.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d4b133-197c-4420-82aa-239747a767eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.68.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f469ceb-1cd9-44a7-8323-72bafffe6ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.71.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1404cb-7257-4f2a-92eb-35b2f18f12ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.26.74.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd5a52e-e70f-4b07-a475-5dec9568fb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.50.249.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc4f133-2235-44c5-8449-fb1af79c62b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.69.83.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be70854a-5a50-470b-97c9-1952152bbb95", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.74.236.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15275f8-3331-4f18-8667-4eaf175065c4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.92.41.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0040e48f-1fb3-415d-b353-449b4735938e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb63c38-74bf-4b2f-b1d5-cebe42e8f082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3422ad2d-d9fa-40f8-af70-18f1cdb2dad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d537ba9-4ac4-460e-99c3-7d0b6f85c6df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.49.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba13bf8-fa80-4e01-af18-d1e618d21666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.49.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f9d577-9498-4fa1-a89e-37f8d2a2fb47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.123.192.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f925e8b-12a2-4078-8808-d8f874b86908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.140.242.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1278d604-29b0-4de8-9feb-a9a94a563759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.156.246.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd732342-1684-49c7-b767-fa06ded522d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.16.74.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9677a762-b66e-48d1-be00-8572fd90bdfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.187.104.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c0645c-7643-41e5-b9ea-9ba5a76adabc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.19.221.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bb1804-bd92-4083-bafd-32d7259dba65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.211.80.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a19e50a-a40a-4b63-b5db-fa4370c8af2a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.221.192.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669df48c-af41-48e0-a204-8679d34dd782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.221.196.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e22df14-a07f-4dd3-b8e4-d532d52f530c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.233.85.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf202556-aac3-405d-b3e2-32b23d081a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.236.33.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1988181b-4f94-490a-8712-aa94e532a3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.48.253.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51d1ef9-bd48-4aa1-8a46-8f9d543f2d36", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.58.136.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45199a66-50f2-4d21-990a-c192e4a5e786", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.60.141.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fa521f-940d-404b-8827-c88218877997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.10.248.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40affc4-91a9-4a24-a130-1eb59da73146", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.123.149.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2875c5-2d7d-4ac1-b019-32e42cb89b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992b3c7e-7849-4aed-8ebf-36da37f3a0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebeaf625-2bb4-4671-92f4-a48f733c2b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.147.163.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b757ee68-b358-4539-9bfb-55de97b37871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.150.12.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca233219-a1f4-428c-af99-7a4bcc0e52e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.150.12.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f43bfd-7a1b-47db-8f55-19e8d2eee3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.150.12.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28bdda8-312d-45ef-a896-cb6ac36d9b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.150.12.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bba5338-ed1b-4c8c-bb6b-f750234e4442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.150.12.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246c84e4-1367-46b3-aecc-5e81fdd70af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.150.12.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24326efa-9dac-4eb9-8e6f-03cbdeb0e349", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.171.255.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7349b62d-b018-4c1c-92e6-d6da140303ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1830889d-4834-42c0-ab9f-6978ea1a3c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.190.210.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d21d960-f2e4-41c9-a085-d10a45f4c1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.207.132.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71e70e5-c5e6-4508-ae6d-bf436842bbad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.224.81.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b1159c-5408-470c-8ad4-dfcb138c0f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.244.31.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e89f5c6-020b-4cc9-a0a6-cb725bb7e61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.246.255.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2496cf-8509-44f6-a323-09531f1eade7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.248.90.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7f8530-0e52-488a-bc51-3815deb7645a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.172.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7768d6-0951-4a13-a2f9-a0457ae72a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d0652e-368e-4aae-b01b-ae38cd6b778f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1197b67-6838-4014-9ba1-53ee1a3c62f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad625dbd-3006-4ad9-b817-baa24ef90be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33cdd2c-97a8-403f-848a-31ed54e5bfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae49bf1d-9054-410e-9df4-07a47a3358a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc39fbe3-6f47-4f4d-8217-592c49e8a10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b829454c-d17a-4a61-b78e-386ae8ce7067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d554967-012d-476b-bf1e-a90c4749e0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a274d0c9-3411-4d9f-8121-942bd6dccb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe9d936-4d6d-455f-8870-aa9bfcc07f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe1e779-ad78-4f97-ad32-fc2bffb36b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9412dda-562a-4523-b04d-90c0a2c0b406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d9da27-a2f9-4e94-ba3f-5f8208d63d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.34.175.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7ee14f-f5c6-49fb-a926-46eb9d60932a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.43.156.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa12c0e-d784-44fe-b55b-c7b336957ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.45.71.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cd4dd8-73e8-47f5-88f0-600d94f1c726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.46.221.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab225fb-6df9-4faf-ae5c-ddd9eded968b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.54.20.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073f8caf-654b-44ac-bb45-e09f1bd52f84", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.54.33.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf96ad10-b8c1-4342-9ad0-3a34004da087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.54.63.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b59b8cc-b3f5-404f-a32a-c4f0d4486c52", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.60.169.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01a3298-a80a-41a0-811e-821d23e723bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.60.199.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf246bc-3fdd-4759-aeb0-29e4e97c037d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.60.208.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2ec340-8bf5-4329-9974-757d60792f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.60.226.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e421ba6-c2ba-43c2-973d-23211f2f4596", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.60.243.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46debd9a-5f30-4122-9adc-251664ae4d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.93.206.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab7a490-a580-4902-8ca0-e057dc43de3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.97.61.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94013cb-dc4d-44f9-916d-ab2d3f49c573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.202.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4beda1-4c3f-4306-99d4-76d65b8bd5a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.144.194.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304c77ac-50ef-4f44-91af-dccce11925e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.173.18.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e840d07-25b9-492d-89fc-1affa936d28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.185.67.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e27ef7-af20-4b07-9c4b-a9c522112161", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.61.39.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9fb1f4-3791-4d17-a904-8627efb333c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.178.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78c779e-61a4-4990-8e69-dfe736bbaad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.195.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78cdec96-fdf6-400f-bd10-d022ab5dd10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.190.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36f287d-1009-4a3e-86a2-6a2a26d49e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.191.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23c231c-8370-4ae9-b5b7-3895dbaaa123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.153.19.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95317ff4-f6f5-414c-8ce9-8a2d2d05cab1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.213.178.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4f3328-7922-41ee-be5f-9a76df9dcfa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.213.7.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a0b6da-9573-44dd-a3dc-aa46299a2bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.178.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274ae59a-9e54-4ec4-a478-22804a8c54ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.179.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8a5ec5-8fbc-4c5f-a353-786c575f04b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.180.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d230ac7-3e6b-474a-b39d-ab6013287361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.232.80.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d521df-c26e-4c83-8959-eba39423d824", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.240.102.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d60b38c-3012-401b-ac25-819f914e462f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.247.160.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592e8250-58df-43b9-ac2f-ae3f9c00ded6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.26.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310f5b21-c305-4ab7-8c64-83a66c67bf72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe56207-e863-4d0e-9cb4-10d10e5e85d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f230920-2e5f-4408-ae0c-94988044ba20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe5858e-4509-4a85-9f57-51a8de87e98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37ed827-b081-4f50-85ea-2104dad64743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7156f26a-dfc5-4716-8c7d-6522ba90b770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de42e64-45f6-4b10-a26d-e8c3e1a779d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f318d5d4-513f-464f-8045-7cfae609b429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3f494c-8f49-4b69-8867-987b54abd05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9c5e98-d3ee-47f9-b13f-c8e0a14e42bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b71b82e-947b-4bab-b347-78386a74053a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f658e3a2-ebf5-4697-9f2e-99780a5e6501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11974864-dfeb-4f0a-ac19-ca36b1d70fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2639ef-5f6d-413a-a41c-67d65cd3b127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455a25fb-e47c-420a-8413-7b048fcd5516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a198a1-50c5-4fa9-a693-c2d38b6023f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c93e48b-408b-4446-bd10-e8f46a8c9bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc686a2c-1221-467e-b025-efe9d05589c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97560031-bcb1-418a-933b-c1e6f6bc52bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658ad960-51e7-4b9b-b6f5-298c8741c931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6c45b8-45a2-4d29-b111-5875980b84f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e277f854-34e8-4064-a07f-38d82894c3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bba219f-1781-4bd5-9feb-f0d9778d26d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da6d0c5-9b6b-40f8-b13e-36e5aa8eea65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b317ad98-0aa0-46f9-a8c7-10e060e5836a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cbed10-42b0-4c8e-ac05-b0c330baa198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7861c5-2026-4a88-94d5-a7330939916f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40aa8fb4-8b61-4e05-b204-c8521112556c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed17c0c3-a128-4cf1-89c9-33e6c0778f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c6625e-2178-4a10-ac28-1c606a9310b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.176.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c78659e-ab91-4a7a-90e2-c08e498e28f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbb3ab7-261e-4cb7-9489-1038aea38967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613ff42d-cd46-4c2a-81bb-3eef6ba87818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15527bda-2f3d-4e69-a5f1-adb1a050f3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6aa8b69-11e1-44b3-b142-e07ab34268ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306ea342-3edb-436c-9f9d-01b9403931b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357011eb-79d6-470c-a3c4-3a313ac100e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa04a3ab-6b54-4ee1-98b6-ddf196663bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba39ecb-5b8e-4c64-85f5-1e77796c240a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.86.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c4444e-f999-44a9-9af3-e0a8098d4ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.65.222.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabd0274-e5fe-4677-a945-b414fcb2fd10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d5c22a-e3e3-4269-b696-2d78635ce646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e291c43e-39d3-40d4-a668-acbccbd576d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.212.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab2eabd-4f00-4add-9544-4ad4a4a7d924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.71.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a308591-a6f0-4960-93e9-76ad60fe3dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d460369f-7d11-49a7-ac5e-7ec68ff7283a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bff298-b9d7-4ad8-8fd5-5227bb4d9288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8be75f1-b9b7-4368-b06c-fe1c64865a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a62fdcf-22e8-47a8-91d7-2d10b6ed1be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211fbee1-adbb-4643-b75c-6275405f27f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f24bbb-80b0-4382-9a7f-1672399c5e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.99.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d112b29f-b94d-4df9-9ba0-d38292a67358", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233a14e9-2646-4ea3-8ecb-3d34502c862d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58c7116-fafe-418c-9b16-209705a5ef07", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a038c6f4-255f-47a3-b8e0-e1683d5333e3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3d369b-abad-4633-8802-bd1b59a93da5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a529bd17-8945-4e0e-a653-c80c7ddbf0a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab8ae7d-3cf0-4434-8261-96784a1fc552", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a180987a-b1ba-4877-9ac8-bbf4551a81c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad6edd3-58ad-44cc-a7fb-c7f3fed667d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aacedae-8bee-4ce1-b58d-529e62574dfc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcb2b0a-dc55-40c0-b6ab-f97df558215a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d19aed-a9e8-44cf-b987-282b2d66f2d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e202c81-949d-4b9e-9f2f-31fe2ef8ce54", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebe61c3-b40c-4cd9-9f59-6aa0f133f63f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8e4870-f620-4292-abf4-28489b916754", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0a7763-4fc8-4084-9ec1-de7476342131", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76772f8-f15e-4a30-8bcd-d862eea94c37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cc8a9f-ac8e-46f2-ae1c-1b8bbc6d61ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c73e38-e64a-459a-8207-f53111ab6e94", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045ecdb9-189f-4b8e-9e45-85367bf61113", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189126ad-399f-4f03-beb9-eefbf878d4be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e0e1b8-0e27-4f9e-9d88-53b41ad251e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf35fdaa-1390-4046-b247-fe92e060d812", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd98863-aaf1-486a-baa3-796e6554805b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4962baa7-749c-4091-ab35-fa385ee8d102", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f654a9-717b-4da2-8367-e40e2f153ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.200.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704df5fa-b88b-47da-b4eb-5fb01cd0fe43", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.16.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16899180-9e5e-4cee-ab93-c7389eb37849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.81.230.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244576ac-9976-427e-8175-bb766554316c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.249.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9287c1-a3f1-42af-9781-49bfe964b15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.250.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ea6ae6-21b6-4b45-b17f-f1863364c79c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.111.178.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80c953b-2e72-442e-be56-e5ff8dee9333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.111.213.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065ec5bf-2d96-4c39-b701-fcb2e33ace8b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.216.178.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5841591b-e676-4509-a808-ab16e662059c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.216.182.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614b1969-76a1-4a9a-af6d-c14c6d228b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.231.8.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b266502-bebc-49da-a1f0-bb42b13c040b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.33.45.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8817dd6b-c801-4df1-a8d5-13a5d3056dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.38.59.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d319169c-891c-47e4-bc95-48d54d45ca3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.41.32.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd76153-dd48-4ecf-8fda-63e17322699f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.41.66.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202b5215-e319-4400-af61-c58b80960795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.60.144.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0890347d-7ecd-492e-9aab-4bad67916c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.60.152.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edf895d-8e5e-4f49-9fe8-993f12f63595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.60.238.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2ac46e-c51e-4f8a-bcaf-eda99931f547", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.82.50.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374d05b4-bcbd-44ca-89de-ed3ddcb3329d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.21.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8511f2cb-3a1e-45eb-a6c8-463a3e75d808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.118.79.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3364d6a8-e642-4092-9307-5a45a7e9de5d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.118.84.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ef8628-eaf0-4df6-b22d-11ed0d16c35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.185.57.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1e5983-a249-4f6a-89a9-8ccb159b51f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.203.111.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505d89f9-6369-4447-b9da-968c1095fa34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.236.75.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef5b9c5-e6dc-49c7-8ea4-5fbd0b3f4e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.240.169.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3829cee2-94d7-4480-8330-a2f79767cf48", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.243.129.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4e5398-8324-47e8-92da-e2098844736f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.54.239.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0caceb-1984-4f9a-8dee-56e9d4ec009b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.96.19.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2c3630-80de-4ff8-b3c0-e474c9f7b56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.37.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36ce3b4-bbbe-43d8-b1e2-2410d1dadb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.110.37.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0fcde1-e686-432a-972d-d3364e661b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.156.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ae5be9-ba86-4fa3-aefb-e5f801fe5a21", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.82.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc1ea54-b194-4ebd-89d0-e838e8569dd4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.118.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bc52e9-6f5a-4dc6-9918-cd53305e10e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.139.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e6d517-3508-4432-a9f0-a4f392efa0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.141.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff7a358-4e27-49c8-b06e-a7db9f12e2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.57.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0f30ab-73fe-4b95-8fcc-b6fdbeefb3fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.253.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a339a8fe-8a11-43db-8197-24af0814871e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.148.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b50090-dd1d-48c2-8071-7bdef228ecc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.220.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96c31aa-2b8f-4de0-ac5e-07fc2ee2806e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.253.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff4d81a-5c32-4479-9f69-85d2ce8f9926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.66.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079c6872-acfc-40af-a2ba-2f0be0356959", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.91.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92dd1b30-88d8-4d73-9253-90c0a2807d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcbc88d-23c1-4642-8702-2f32a656876d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.111.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d646ac9-6398-4dc1-8c05-1505ba3b3d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.177.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e2bea3-1911-47c6-b41f-5d6d54854fe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.33.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe29fbea-2f51-469e-a397-bc93ebce0814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.98.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cc511b-357c-4351-ae7f-d1eb5cfda2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.130.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb25f70-8e20-426f-978d-f13c2530fa3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.145.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4a691a-d251-44ee-8f57-aca1df699d1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.86.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be58e0c6-bba1-43e3-9773-11fbfd79e7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.136.88.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0ffcf7-a3b1-4a4a-881d-513e178ee2ce", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.138.141.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e42e12-9f05-4a9d-a8fc-55c238746fb0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.138.68.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92e866b-694d-49ab-9fde-65b7db923251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.139.53.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5800ed-2ed6-4edc-acdd-87374a07ff66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.137.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbc0fc1-9d10-4167-b653-74cb5e53ec93", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.206.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a0a7ab-1dcc-46c0-a389-c62627ca44ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.31.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774b086c-0b0e-4439-bc1f-13ad9b20dfb4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.47.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da6b985-ff8e-4cee-8534-d0b7f258c40c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.62.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4243e20d-9ff9-413b-bf91-b9549f772f17", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.85.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7211482-7bdf-4226-adde-5c19e1952edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.109.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2241fc-fe52-45ca-bdce-bec082210e03", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.134.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ada425-d400-4bf0-bf2a-ab119210dc08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.27.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c34f89f-e48f-439f-bde4-b233b4cefc5f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.162.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b3c412-bdb3-4686-a838-a89e65444ea5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.158.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f65dd6-e468-455b-bb5e-5b897cc6e534", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.170.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a27f075-43d2-4bc5-be0b-8690a1effa47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.175.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184a0f8d-438c-4ad6-8774-4575d0e36239", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.62.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6ad8b2-0d48-42ba-9d73-832525d1d5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.98.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f64ac0-9a1c-4e5c-a05b-de1e502e95e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.158.91.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bb475e-251a-41b4-b503-d4abe161ec4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.143.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049987a6-2112-4e3a-b17a-d5755aac8933", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.177.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756366c9-72ee-4886-9385-65809724ac6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.63.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b5ce8c-f62c-4961-b12c-3f275ebde18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5f512c-a0de-435b-a6e0-038fe0511162", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.213.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0d7847-c76e-4bf0-acac-15939e9cc1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.225.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3c11e7-1812-4b73-af4d-54bdac7b32c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.249.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bd3495-e739-4df1-a35e-d0cd49eefe4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.239.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3c618e-8bb9-4a67-a9a0-851b28b384fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.112.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508cd30d-c045-4443-bffd-a752238eae4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.95.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241df064-95e1-44e8-aafd-5a859978155c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf07b32-5570-4b3f-a594-0316f1ab38b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32858619-cf85-4ee6-9a7d-0d57cd426df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.5.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0506d1-95ec-4109-be49-da884b0c61fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.190.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5afa7c7-93b3-40e0-870d-05f7052c0f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.197.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91f07f0-311e-44db-b36c-d93513370c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.126.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cfce4f-a008-44c4-98e3-a6e7d26dae91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.167.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f125f0b-7880-4dd5-8640-e0e83ae1f452", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.197.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f249d9fe-6ccc-4993-b166-387f1ab14a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.67.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726b000e-d517-430e-96b6-c2ff7632d714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.7.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfd4ae4-977b-4af8-8728-dec3a6f9a1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.131.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5997465-ea01-4a87-ae2b-885eecf16649", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.142.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0185af-a20d-40f7-b8b9-9dcb9cd42d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.226.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54ccd6b-a6dd-4650-8ce8-8722a8e5ecd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.240.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a08a52-884e-4e9d-810e-136deeff2598", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.247.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5a1bb9-569c-43ff-ba6b-108a6e813229", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.241.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2e5448-59ce-4089-a32c-c061aaf2c414", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc236925-55f7-44ff-8fe8-adb8d29b416a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.1.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1939af4d-635c-4b22-a663-d98955857244", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c01a893-f873-4913-8292-12d41b554888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.90.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032c94d9-94fc-481b-8493-c448294676d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.38.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f243eba-3dbf-45ef-80ce-8836fd94ec62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.226.44.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d5d2a9-57fe-4271-a0f8-047912b057c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df02819-da51-4b42-814a-1511cb24fa2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51db585-4a26-4673-b237-ab56596daa3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc9b28f-3fff-40b1-9548-c3adc2da8029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a96200f-04b6-4257-bdf3-dadb7433862d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.76.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a7340e-b5aa-4c2e-81d1-cce0b8538076", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.239.249.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60e7a53-1f1e-47c8-aa3c-b3805a2cbae4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.193.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f933279a-505b-458d-9611-c7f8ae50d198", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.245.249.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b7a14d-8a50-4001-ac16-af0223266dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2dacf1-94b0-4acf-bc46-e7c7a32c3dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a03bdc5-2a8d-4839-b633-368fdca9a378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c04164c-312c-4fc6-a1d8-5dd65338800c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050a57e3-2e5c-48ff-a0fc-519084d4f13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339d9c99-1e01-42d7-8f9c-3cec840e8c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99617fbc-f406-4c63-bc32-53c4a1b7d2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.254.216.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f638d0-a8ab-400f-ba1c-e23ffad3e204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.215.219.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ac94d4-061c-4bdf-8f44-3060d677550e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.110.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556d506b-7843-44c8-b44f-b3c85dd06f40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.172.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c504cc-a79f-4e76-a162-5ac7d0d07268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.185.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afa93e5-842e-457b-a39a-d2e33bfc9eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.227.45.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521cdeaf-0c3f-41cc-9382-bad3a8fb38b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.234.40.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e94fb3-b6fc-4b61-80fd-7de41fa413e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.10.175.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659f12d8-7b9d-4d7f-ab2b-a48e52557006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d11014-82ef-421d-b790-1fd36323e11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3ee403-bc44-416c-8d97-b533d9694c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.58.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bee672-f3d7-4878-b4c1-f925cf99cae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.116.35.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11372505-1a23-459a-9ed6-5d4b3f85c39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.121.48.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5214e4e6-4e31-442b-83f3-6e45d2be34dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.128.205.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfabb8a1-39d5-4320-9fd4-37b7b5dac6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.242.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac22f0e9-c76f-4b2b-868a-5dcd2ee0d805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c059fcc7-5819-4365-9629-9ac22bc784e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7395578d-0bbf-4eec-94a8-8ec804317d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82eba9c1-c2d4-4396-b217-cf8fdfd1c8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cd6df9-1a6e-4dda-a3bf-94760dd38d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419daa43-dab4-4efd-97b8-efe77093370d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e286026-fda4-47d3-b445-1b0ddf01bb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51f0fa8-e2fb-47c6-9631-cb962d17860a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b12a527-e0b9-4299-9489-d09357e73939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f80b18-e2c4-4565-a1ed-12741f2b3a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5e5a53-4f60-4882-80ec-88807a151449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.132.115.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a5600b-45fa-4885-8ac4-f8310b23c245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.82.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab666223-c35f-4276-9593-8548b69e5c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.119.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406df173-d353-4b04-90e4-9977e2d6daf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.161.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ac3e51-7a86-4073-a5cc-06aba8ac7858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7840da7c-66bb-4c3b-b226-2fe1ea08505d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbd52cf-82d4-46b9-842b-d272125ed023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21eddd09-7959-4d08-8769-754165bb7e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba22ac3-c732-448d-b216-577edd6d7142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18ea134-c9cc-4e3f-84fb-86a3a4553714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1747a7-c108-4942-bab5-634de10605ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a3a0aa-9db3-4967-8625-a86af682bc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.195.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af143d9-f656-47df-b2e3-126cec17f1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.137.172.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84363fc8-cbe9-4b7c-a821-402fc7de49b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.137.198.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941b3a40-c32b-4b52-8cdb-c45b1f457566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.139.104.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7d76ec-6aff-4c9c-a4b7-b7b64eb435a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73daa501-8bdc-4f0e-952c-5907680b4578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f09787-3782-4e00-8a31-e6efbaee0064", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9329bc4e-8330-4fc5-852c-59d8e6ceccc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db22765-55df-453e-ac28-c56ca5c43b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcde7f99-d77f-41cf-a1d9-72664474d059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e584a29-439d-4cbe-80cc-1cbe6cdc6c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245f7565-a957-4361-92a8-90aff6ef29fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43c2eca-2d8f-4977-a21b-4a13d65faf9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40318002-630f-4258-a1df-3387663f2328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d71ce4b-965f-44e4-8982-b81b0203b523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f880f31-0f73-421b-be8d-2220a517f684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2803e09-8e1c-4e3f-9588-44275df14e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04db9670-fe50-4f31-96d1-09cf0ff12bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357d2455-3c19-4347-a398-c5d69db72b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b27552-522b-4ae2-8138-d4c747e86b56", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.136.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9777acb0-71ce-470e-a664-27df04b0c0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.212.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e408a3-064f-4fc5-89ae-e3f5759b1046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.212.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0b1874-e67e-47f1-b7e0-96619a9bd80d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.145.154.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66dc4e0-794c-4e0f-86b0-cc494bf4b92c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.145.43.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7567a4e3-2a8b-44d6-8509-df4a73410b68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.55.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee77d90-ad2a-410f-a732-8f8b09692720", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299b4822-3470-4f15-9d1c-cf6e468defa4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b92c448-7d23-41dc-af65-7d0448598d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813729bc-a00a-45b3-a1c6-0179f6142cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd380f43-325c-44b7-be12-ae88e8d08e42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fada1b57-be07-47da-b82f-3f41abf839ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38c20cd-3887-4943-9d85-b4f85314c222", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e937ee69-2885-41ed-a9d0-6c7ee04e73e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d2fa8f-2bc0-44ad-b5cb-81816e861cb8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0966d5c6-58f1-45a2-8ed8-ebdd47a7505a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccaa62c9-72c7-4004-8472-a6dedfb68fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df467f84-50a6-493c-b466-8150dfd9778e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b262b266-c030-460b-bb0d-a1acb06810d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dd6e52-38c9-474b-bd26-715f973aa902", "name": "Malicious Host", "description": "Observed: WEB activity. CVEs: CVE-2002-1149. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07a1694b-b07b-4c31-bdd3-2cb3502a202a", "relationship_type": "indicates", "source_ref": "indicator--75dd6e52-38c9-474b-bd26-715f973aa902", "target_ref": "vulnerability--59365971-9aff-4d45-9779-fde5e05a902b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b8ad44-4115-4f95-a656-f8603d4f2dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d1d2a2-5ec3-41c7-9caf-8f441828e7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e4f317-c5d9-42d8-a98a-d0740960476e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.151.134.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87042da8-afe1-4b33-99a2-7ae111a9d86c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c7349a-1332-4cc4-a4fa-bf11d688919f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e74ee26-d319-435c-9b30-25bf3af59378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b760dfc-4c92-4e5e-a31b-14bad13ad8d3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f5252e-23c0-4613-8cdd-ca10db4bd4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4383462-f803-44aa-98b6-2cec84ae62fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e5faaf-d079-4147-bb2f-318aec19a283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32aacaeb-9ba1-4f40-b181-c3b6203dc544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6a29d8-a71e-4f67-a37a-5c82cfd5da31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65281fc1-8957-4f84-8f3f-c955fe98de86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6393e2f4-980e-45f1-b238-74f5f31f8299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3945b67a-20af-40da-b7a2-11c337e41c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b37a2c7-d0cd-45bf-a3cd-eaeb85634aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702db246-2fde-4671-a4e2-7f300e9f605e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3754e413-dd80-4c5b-9347-e8ee11ca8e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f47b29d-e487-480b-8540-d8c3cc459114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2217993-1dcd-43d3-839f-b46dfa9265d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31da699-0d6e-46a0-980d-6aef7fcad60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ccf55c-8a5c-4163-b29a-421d01762964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04812bf9-bb03-4a43-b60c-6bcf1141a355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822c8c86-e194-47d6-aed3-701976db4053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5828fc-08f4-4957-a015-34d9c8a07398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80383755-0981-46f7-a88b-e17083ec2284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52e6571-9324-4e86-97fc-d41a214ea3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b105af1b-0c7b-4b3a-b299-02909e98fd85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fee9d3-407a-4584-b72a-4a3de5b07564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13abe30-a5f6-44c1-952f-73e7f34fdd4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919dbaca-7733-4625-ad4b-043465b14f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644c98bc-afd9-4070-a7e1-d2e78a1670f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccd81fc-15ff-48fd-9ba0-981e7ae36c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b66233a-0fba-4699-bd43-190f496bd64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71404c79-d695-4bbc-bed9-2f330c885fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53eed08-5f7c-4a57-a038-3a658b7d84a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00da8e3c-07e7-4ead-889d-31f792c3f569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e4b09a-f1a4-48df-bfc9-45a4af579e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acaf8a5-e0ac-4c8f-9143-a03fb3d6b0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b4d6d1-576e-4e5a-b86a-d708c5432d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e66dd43-4aeb-4021-aabb-8783d194a803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04550948-8965-4ed2-b031-8f074b102413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a375d0-1d8e-4b8b-a851-8d2891b93d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa142b40-31f0-4b47-9b81-a36058d4aaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d303d90-0156-4e65-8d6a-6a1f89e03532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfb1d77-61b4-4159-8722-f21980013ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585547df-b4a5-4606-8b94-80a0d1ee0e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ad4f48-210f-4114-a69c-c81f24882675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9a6dab-73b9-409e-bc04-322ecf86ed5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cac56d3-f573-4b02-a085-03a9ec7f6e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3340760f-e87f-4d52-9541-85d6b16aaa1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202b32c0-5bdc-443b-aaf8-b5bb5b61d544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37adacd-31c9-4036-ad01-35a36f03fca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6c856e-7a3b-4cde-a6df-fba622267831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0366ca19-0396-46e4-89a8-9dd38a509b48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494ecaf4-175a-458c-8d94-53517bc86861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b36981-4f7c-43dc-944f-ac58eec51f89", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513f30d4-a7d0-4caf-8515-c649d23e7322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b70830-0687-4a09-a577-55004f380171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1067cfec-dd11-41a2-bbb9-ebe5b4084ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d330d8-0669-444c-a117-d29412598bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ecd80f-9c8d-44d1-8fa0-2e37f8110500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbd32a1-ce98-49cd-9655-99f2310a6747", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e2e097-ed3e-4ba1-b462-a8271b98177b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4984f9-001e-432c-9593-a8c9eb261af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.157.232.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470f014d-e215-4772-a956-8cfcbcd513f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.132.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8281676-4e0d-4da7-8b60-e823a09509a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.123.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f807a0-1e87-428d-9ca0-ede61fee97e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.184.121.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcdc639-14ac-4341-93b9-caba8742eb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.217.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d1aa9b-fcb5-4f9e-8153-c9c3bcdb1af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.184.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca84fccd-f7bf-4c41-bb24-80119d0ef6db", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.198.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9deb9a-4ad2-4047-8f9c-2144a9d95da3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.199.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb63db3-6105-4f94-aca6-f27dbd9a3380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.203.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50914cb3-7faa-4c82-938f-c6e35de11bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.63.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38f8fa1-30a3-428d-a1e5-739e3af31fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0840a1b-afc4-4c60-b231-bc9c96f863d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5413c849-3a9f-48f5-9eac-4bed592e19be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ef6ae1-9b49-49bd-b661-80bd648226b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d80342e-d823-4c75-9d67-28990fcb3057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ba7a37-23ed-43f3-b9aa-a687d6ff5767", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.250.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cda0bba-306a-4b67-80d0-03b09793c4e4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.196.235.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725fd8cd-a2bc-4a4a-8d92-b6a9dcd96509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112b9e04-9f30-441d-8bc1-5c3fae09af19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c10f25c-71d5-4392-a05a-13ea4cf61e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6559f13a-617e-4af2-91f3-42d20f5304d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20515c37-bb74-413f-8d3e-08756e3cfe4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5b7950-66e2-4246-b0cb-1092c05ed69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a001d885-5030-4cf2-b38e-54e619ca7581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7046a577-f3c5-499d-8d8e-9fb26b2eb38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2317b5-f38a-41c9-9396-2922bf3be758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d8fa8f-b79e-4223-8db9-2782e901ccad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a099263-c330-47d1-bb56-2511bef83ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73c38e6-6d2b-4986-897e-03011328d717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.202.248.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e46aaba-05bb-49e3-87b9-7d0bba8c55aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2735ac00-944d-40a9-a1fd-264160b2a3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60214860-7691-4e91-b603-47982350064f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd7b8f7-47ab-41d5-94ca-44d62dbc4fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e5f866-9d4a-458f-8b9d-c4da139f489a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16afbd2-9a61-483f-8f94-b1e663a766ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6361a56c-dd81-45b3-becb-338b7589c71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c8dab6-3641-40f2-9366-140a7669f594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43d96ec-988a-4434-8a3d-193df1ceef2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13c65b2-2eb9-4aca-847a-1c66a5b05ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75eee39e-2330-49dc-81ad-de74c229d551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae02cbbc-de07-43e4-b954-cdc7fa766121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486f4110-5c2e-4267-aa72-2f60d9098511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4301c6e4-b231-448d-8c84-e6530f36784d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467e5b09-f580-4eb2-9b10-6b98ca391b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99b847b-8a38-424c-9979-cb8c23fc9e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d2eb31-4c78-45bc-87de-615029cfbfe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc89fff-eb4c-4822-a2a7-8caea5fd5eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd10dd92-f258-4272-92e3-e476cfee2296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9b97ab-4887-4ecf-909d-a8014ccb82ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00b7c55-406a-4b49-985c-b632cc03b91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff796bb-afc0-4486-9b9d-c8f87d5b5cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857d5931-59af-4a44-9df4-2c0e7159ec5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c288027-5049-4731-a2ee-1d935bb4c812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.32.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bc857d-4790-4146-adb0-16108e91593e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.207.159.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468e77c4-1e33-4b71-95c0-95da0a8c0af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af1238c-3d70-4ade-a894-35c08b576c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afc76d3-8ea9-429f-b694-a9cb6c3dfe7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146acd15-89aa-45a1-b0c5-f19e73c862fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48149ae-2de4-4f04-9cf4-50fe0daa7966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e41da31-b97b-449d-9d6e-4141437f424c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a99001-43b3-4fe6-94d8-ee8e5bf10ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c2e742-8340-425c-9a04-69e794936c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.232.87.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257bf0ba-8bd1-4d69-b3ef-fc4217ac7ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.108.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5e6965-2eae-4b16-8864-4852766e7eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4056dc9f-4e24-4912-986a-26701be52bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.245.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9783c903-36ee-4c44-8ac1-d74f72334501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4424e173-f6fd-49fa-888f-20cb205cd2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.91.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02262ece-5d39-472c-b00b-f96b46be1228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.251.240.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7e236c-4691-427a-b710-b3ea5da5ba82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.252.188.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2f31a8-179f-4678-88bb-f2b7319521fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04e8fee-8d85-417d-a895-b897b5b1629c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3510cc09-0f80-482f-881f-1bb5f7bc8afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b921446-c4fd-4a35-922c-67ccd4cab1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c8b704-7889-4305-bfc5-9b7f285a3c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35a16c9-0f6f-433c-a468-aa34c1fbdb60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ad04d3-cc3e-46e1-b27d-70ae7de64509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8294c289-c1d8-49ab-827b-22c570dc1375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b790ab-415d-43ce-933f-764ebff477f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3ee006-35e6-494a-ad81-8bc44c158a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609ec9c7-92e8-41c4-83bb-ebb3cd3d2ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9d0794-d27a-4779-ac90-eab3e5c52ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07364e6d-3cbe-4ea6-af91-6a51accc1d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845c4836-4dda-48a8-a36f-21e9ba26ebb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.64.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07b92da-372e-43c2-b646-858e78e4cb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.64.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17b4536-7a44-4eb3-9e00-4d5614197fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.68.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c95f8e9-b09b-4e6d-83c3-0c28e6be4170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.68.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3722d0b-0590-4dbc-b8be-9f8143220017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.7.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c9bb02-8339-4951-bc3d-988833ff0fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.70.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28884e16-e097-4b49-9ef9-972295fae1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.70.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7be5ace-704e-4017-bc04-6be3f8f48db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.75.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e099dd5-e5dc-43ac-a2af-03bd6c4d9681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232d4114-4706-4f5f-9398-ba9e172edb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e288ba6a-e697-4b73-baf8-0cc3beced35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.80.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9089103-6ee6-4612-a906-aeb42dd06d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da77186-ea50-44b7-84b7-f1e1b4ff7fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f8506e-6226-4302-8989-5b49934a8aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05d7213-63b4-42c4-8d8f-538f6d8e14d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3e5d56-35a5-46d6-83ff-8b11efb3b533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566ecc4b-3dce-4e98-a255-c6abea16ae14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b3e8fd-e364-4aa2-821f-10ce809a6a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.87.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec24efe-29f2-4f93-9cac-22daa6b27deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09606946-4def-4c63-98b5-c065fa80df43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2689a3ef-902e-471c-92bc-b5954887930c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79ca117-53b7-42ae-8f9c-41ad0b5034a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e8c0a4-2d14-433c-926d-acbfb4749566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e25b76-df3a-4ace-8de3-6b0285b40d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.96.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862a4e68-96e5-474d-9757-2f3754b35d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.228.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2620b675-75df-4c98-a301-d2666c8a2d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad146e0-c842-422e-8929-b7d2c125d611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3285fbb2-3a87-4c93-8670-e2d3bbacc79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4238c410-92b4-4ff0-afb4-7042eb8d239d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.37.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9dc58b-220d-4bba-84ea-14671594f07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee1c29f-89f2-4a2a-852b-c8c2377c3478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce66e31-94d5-49fe-943c-dcd4d84c8d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f0f5a4-a8ad-448f-8297-42ce0b6ebd7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf5e762-71dd-42e0-9907-740f4aff5979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49765ee6-ec44-4758-9fe4-52244aeb4274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae97eeb4-447a-46c4-8cb3-7762b88e83cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c8e4dd-8879-4e33-839d-2cc415e14536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf63da1-7e47-4f3a-92ee-a6afea97354a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c046b759-23ba-446e-8a8e-c89701fd719d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac541d0-c59d-4b52-8ffc-3243ed84bf3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db9d700-b1a3-4593-b095-272ba5d6f5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdbcf02-2a56-4063-95ff-4d8cd14ab44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77410d55-143f-49c7-b42e-40c843a65bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641923ac-e7ac-4935-8cca-99c5e84325b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.185.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56d394c-23c6-483d-a423-c4864cdee6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.185.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5808a34-6310-4346-94d2-33e5a0dca6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.33.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3600977-52f0-4cba-ad2e-726d084fa452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.103.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915df3ea-98fb-48c6-a150-a18fced57b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.103.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257aa6dc-c7d4-4494-8040-35436b0c2a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e959da8-8946-46eb-be75-5e0119eab6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.72.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766cb58f-7d98-4c95-8379-c313ef4337d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.79.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4f2d00-bddf-444e-85cb-2af2a1ece610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8020ecb-b244-4c93-9318-7c5fc632b387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b253cc-2823-400b-a6b4-f4f45b39da4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c38c71f-28f6-4dd3-889c-34ddac38bdb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df8f54c-341e-44e9-b8cf-1c48f5a6ede7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e734f3e8-d3cf-43d8-b67e-b183f9e14171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.59.123.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4d8dbf-33a2-4a47-a91b-b2291b45bbfd", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.134.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82beb0eb-6f39-4ad7-98d5-2ed402961721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7760bb90-fbbf-4f22-8a8d-52592a8e4617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.67.201.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd20c55-158a-4eda-a80b-8e54ac5beeb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.70.131.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea3a6c9-3ff1-495b-9cde-506f2600c68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.59.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301b5bde-a322-489d-aad1-08595469affd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.74.7.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7b59c7-4d1e-406c-98a8-04ef2193e236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.187.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1819af10-11bd-4310-8fc6-6867afd8db68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.78.54.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbe4f84-cef2-450d-8da1-8a418b73d1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbbafb4-39d6-461a-a937-d21b973167e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d7d396-e248-45c6-9db7-0a8b5f5e2b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd26c21-98b4-4f30-9ae3-2bf9790f67b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2b4b4e-e6c9-4161-a53f-f28b953d851e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3ada1e-8130-4fbf-929b-e61a57ba6814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2361ecee-fd0b-48a3-a88d-24ded485d934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac30786-f716-4654-aac1-293552a8b616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732c88cb-7208-4ef4-a658-056a59ea1790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf4eefb-ac89-4b85-b8a9-7ab14d48c70f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.128.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccd91dc-6c1b-43c0-9a60-4840e3566295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62532721-20b5-4743-a27a-a63d978f79a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.138.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69950f7-14cc-4ea0-ad90-a482fe843a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.139.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03427839-0349-4e5b-92b8-266c3e7f313f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46afa9c-bde7-4ef7-b769-d14634854b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b009d28-0704-444d-b3b0-9174dd028267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be50602b-03df-4803-9e0a-c183d3a8dc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.150.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a4858f-daa9-4cd0-b104-3154b80633ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd3d597-a7c8-4c2f-929a-633cee1f2e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b08c93f-0ac3-40e0-bb5b-3280d51281e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec873861-e2d7-407d-abca-966a283761f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d490363-f816-4e8f-89f0-2b0f6a6a09fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76371f8-2e4d-42fb-96d5-e0589431b6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.163.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1e379b-be6c-43f1-9d57-a663234c6e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331f3c28-b9af-449b-b18a-1922a3ba54ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86550229-4258-475c-bf02-9d79cc06f5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6eae5f6-1934-47e9-93e7-5eeef7c56d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d874eba4-6ee0-478e-9802-659a8cacdc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4af017e-898e-4cc6-a6fa-c79d20d7773d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348a0549-6d29-4e75-b70d-0b6cb8dd90c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48761b90-3602-441c-b176-12f41c9bbace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.189.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ab8b75-b07f-4761-a685-a3d7357794ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d7bd2a-d58a-48c7-bd32-3eea5d8ff306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b254d7e2-c46a-4a46-bd46-ee83151b0188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cca90ac-f625-4eab-b8cd-29a128ae5a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6eee07-a146-4840-852e-e23620798aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eaedb35-b348-451e-8239-01cb51762686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923ce99a-d147-4d3e-b27c-23a50f311545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f0f184-04e5-415c-bf75-282f950ab000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f009222-f2da-40a0-929e-eaa0b0467447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc377382-231d-4c7d-8a8e-4d07412732c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df4ef31-a9b6-48cd-aab6-6e85b087ea6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17cd26cf-a9bd-4c88-99e9-784c37a64d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59cafa14-d3cf-4e11-abd9-fa1505c0adf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c76f38-a398-437a-9749-32a033ef5f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d0b50d-93e9-433d-a4d2-86adc4cbdc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0436ad9a-281f-480a-8d96-37fef2bf1257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.81.23.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44ebf97-7e45-4460-a638-2d9a95d21494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be26f654-3931-40b9-9b53-b71179ec8421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6df28f-6c7a-4327-8491-87fe1b2a2ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204faaad-6a51-415b-970f-2ce086ee5b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65b6d57-0add-4575-b7e2-a070800a3d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1a7637-9655-40e0-a519-24e9d1f8183c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1789636b-595f-4923-97f8-cb057ab6bd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8c48fe-0b5a-4664-886d-ac3eee5ac622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66d9b7c-1147-4123-acd1-adbafc87faaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01184a4e-b555-4d84-aedd-2dced2e8c7ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4196839-3321-46fd-8ef3-4a1230666040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4637d7c2-d516-4d75-b094-5ccf5c992ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8171ac4b-1b72-4121-aa04-bd4dae29c39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28282223-d5ae-42c4-b2f4-8b063719ed26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adaf91e9-6527-47f6-a531-1dda241e84f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64b7195-2ea6-43bf-9d15-93adac621273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37384d44-5e03-4064-8f0c-6708024cb7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc5abbd-616a-4c98-958f-925a5ea9d87a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6879d332-b890-4847-9f4b-87ad6bdf0ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc780ca-2863-4074-b977-0909f7f386bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3fd475-dff9-4d91-ac9a-0f42c5579c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118f998a-02da-43ae-92dd-73565f084bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae07856-0b84-4ab5-bd63-852a2e44a87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967d156a-69ac-43e3-85d5-79d94fb5827c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8519e095-7ef9-44fa-b8ec-899e4f20e8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56d4887-27c8-46c2-9e58-fe150ea5ea40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7713c6-8bc3-4e8a-b6e5-e2d99679f96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5502528-d5e5-434e-9b01-ed3e7c01728c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ca5732-37e3-4d97-8d6f-ac9f5e2633de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea9ba2f-24ed-4447-bba0-ce6fe28e702b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c985368-21ab-4f0f-9b56-56a93d12a25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb835b61-543f-4b7a-8c0a-ffc943dfb8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4143b787-d685-472f-a6e5-990b7dfd6c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d448bbb5-6aba-44f5-9dbc-24dd8b022410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde2c164-c2be-41b3-9448-30706af9bbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e730a8c1-9d10-46d7-bb35-d8796030bd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4b0ebd-0b76-4a03-b193-c62c24e2202a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92823c84-1a7b-4c13-ae1f-7751e7368453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1acb17d-2e15-490d-b26d-c925e9617538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.153.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9644bf-6daf-4be8-819e-422ba46f45d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.89.228.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0dd3f3-8dd4-4dd6-984f-83c286ff2a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2b2681-8462-48c3-97ed-2bc3f7f276d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.60.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abc5a3f-9367-427c-9621-7e0235e25cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.62.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016c2839-6e71-4cef-9bdb-9d0bdcfffc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3572b860-be37-4ebf-a686-167de2287b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94b4f45-ab25-435e-a999-c595eb676356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f2fa30-80a3-47e1-bb93-4a1f68463d5f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.95.233.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb688e5-c22f-4dd4-99a4-17f3ac2a414f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.100.26.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602f6491-c757-4766-b104-9c10b84cc6fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.100.30.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d66a80f-94be-4cfc-88e2-b048ba694a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.135.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349b00d1-81ee-4c60-be34-f6d55ad32de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ff8b2e-492f-4e98-8e3d-e144191d8dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.229.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6847ea-101d-4ca6-b871-963c4f44f41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.58.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bd31f6-b42a-4d58-9976-67ae90ac4c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.86.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3e2e8c-acc3-4dce-9fe4-05cfae47bdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91efe8f-e859-4fcd-90cf-f8b74a4d86f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae5d481-fbdb-41d4-8294-b13afd3e18ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db02a0c1-6922-40c1-b6f5-2606745e5f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69808de6-8895-4bd3-b8e8-2712968c9b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.161.50.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef67667-a535-45d7-b306-6d908f6fa1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741225b7-e528-4d15-b4c3-5fb352b60dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.196.120.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947783d4-7926-484a-9624-58c5d109dc9e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.197.241.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5da7a8-06ee-4964-a742-3bcdccccd6c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.20.109.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b3fbec-8552-4f18-82da-400ee44fd15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.236.65.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5e761f-f636-477e-b75b-24342c4df6a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.250.173.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f901ecc-454c-4869-a20c-7644deab1b23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.250.175.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b32499-6474-418a-ab15-e229c29f60fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.250.235.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfb406c-d832-4dbc-955b-4b9f54c74ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.253.45.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7c6541-58f2-4816-a415-c8382927ae2a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.8.68.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6d1b93-182d-47be-b278-9181e8a5a418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.101.11.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ba97ce-0e09-411d-9005-1b4e6e5c6d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.103.36.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed22aa7d-31da-4859-a023-f7fa38346439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.107.84.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aaed409-4024-4147-a922-427ec3bea8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.109.203.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95579ac-0620-449f-8114-d445f8934584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.109.97.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e75bb63-3586-43af-828d-21a0e087b06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.115.44.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e33681-60b1-4b6e-966f-30900e30981b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.116.195.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35413995-64d4-4b7e-aaa9-69e47c54a7c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a625cc2-1d7e-4089-901d-afd0163e9e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.226.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4637c282-4fab-491d-b95d-6c804c2a2c0d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.148.191.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d997cb-86bd-4b1b-b634-f11d67e0f95f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.157.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec3fa88-f103-461a-ad49-f08114002b18", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.161.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e1965a-4562-4051-b18e-bdc2623ae7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.181.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5c0a14-36ae-42c1-9b01-c7ce6cd69be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.189.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56434590-c3ab-4157-8709-6e2d85da6904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.194.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09ae166-8d43-44ed-875f-535d3309fa8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.198.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2390f6-c521-4d74-9ca1-728d71a47de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.252.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3312c4-dc6b-4215-a46f-c460cf960199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.100.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922fb066-adf5-4267-8ddd-26507f63ebe9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.114.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1300649-ca73-4d0f-aa94-e750ce4b5926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.169.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0422bd09-e166-4261-be73-aaa009ba089e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.85.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da62bbb-0285-4c1b-a3cc-026c575dd0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.197.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81800dfc-9eea-422c-b432-8109579a1ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.253.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4e9a23-d708-4b19-b454-899832b38b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.233.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ecac70a-e105-467c-b758-01c73fb78b10", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.55.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be32565c-9de2-4315-a560-9d4fb640cc5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.111.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeac94d3-ba0f-419a-ac9d-6ebb1a26f56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.242.247.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79b0f00-23ce-4e68-9aac-a2db5ac5aec0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.243.62.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad5a0e0-c355-45dc-8858-b00793e79ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.10.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf2043f-62c2-4f6e-92d8-1aa700e0e6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.116.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8b73d6-8035-4143-8e01-d014a6c65697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f63527-4753-431d-8b35-5121d4213bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75958dc2-5349-42f4-b6ed-e5288839a363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ac7533-2797-42ff-a39a-a3e6fb14d7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.133.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f493a1e5-f7ee-4e55-90e1-c333dfbc403c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3286684-798d-49ab-a04a-d894a67e82ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.135.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7d07ff-af2f-42d6-90db-b91a2416aa39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580de9ef-a3cf-4456-ad6d-02ccbe07b904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec52bd4d-29e5-4832-ab8e-b8d1970bdde0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6c4ec7-2a68-4a5d-983e-b83e33b86681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ea312a-f2ba-4f68-8f22-087bf3dd6b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd37e99b-df18-44ba-bb60-049a9a485120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa50b5f2-30c0-49ee-a6da-aa3fe203107b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c41d71-49df-4d1a-af8f-b861f12b8f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55430398-d4bb-491f-88b5-3c63f4fdba26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f24f47-5c48-44ca-8ba8-ed938bfdb538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806c2f8f-afbb-4cba-a48e-8b103a05121f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13a3049-3b96-462e-8272-2c6a197fed07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1fc710-f5eb-45a6-acce-24ec51a5b3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1069a9e1-4c04-456e-b295-d0cf6bdf8892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f09872a-a2df-4c92-9cc0-e8389a2af667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923583e0-8553-4043-86e7-712ec536868b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ea860a-f00f-47bd-9a46-e689ef52fedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242ecfed-9249-42a5-8ef1-a901ba9fb808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86620ba8-6f52-4731-aecc-01feb8e007ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81daf84b-eea4-4a71-b325-e263930360b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.26.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7f0314-f3c8-474f-a92d-2bc8575c5165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.30.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec022dd-1cf3-43f9-8200-e625e9ec9114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.30.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c1c3c9-c48d-4030-a0c3-a016d706935e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.38.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7348de80-9026-443f-b7f5-91676c67f53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1b2f0c-11f5-4580-a69e-345850f9fa22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.56.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095a5db5-fd0f-4cf2-8940-f270cf25bea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.119.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6a29fd-1646-45a7-973c-ee39c361a397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.12.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42b3c48-e427-4cc5-9018-729fa9989ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0604ca1e-6748-4690-9834-40bd818eae80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e182b0a-6b55-4ba4-972b-47d11e359e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.127.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b26d24-d7c1-4d73-a514-c09a23554519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50cc8364-d9b3-49a9-8974-8ccea612bea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.131.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1959fc5c-79e1-475b-988d-471ffbdb485b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.133.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaef45f6-5870-4c95-a716-07018c89058b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.134.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b888dda-0065-4000-8dc7-703ddbfda014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbb1971-bfb0-44a3-af4c-16b81443330c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f9673a-70bb-41d2-ba6f-e084a63b4ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548dc879-0c42-4d8c-84b2-c0d8c2e30fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadf9f04-1520-4a7d-9a6d-34de05bc681e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.144.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cdbb81-64df-44d8-a9ea-598afa5098ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.145.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f8d2ec-50fa-4d2a-8588-44ca1b20cfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230d0959-f445-4501-8795-a6b382c01d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc66231e-fdb2-477b-9613-bc6e88f5f649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1020421-a158-4ecc-9000-be5da0fce0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.151.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b35ed2-4659-4222-a0ef-d52599f3fff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.152.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e9064e-6bb8-4e7f-b599-73255938fce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.156.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bf74d7-8212-4037-9a05-bc429a520056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.157.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39228704-4f13-4991-822b-3fc3b7616afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e09795-6141-4f33-b091-50228fe70833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.164.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5117bd0e-f606-490a-a18c-624f0b0e2c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.174.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca786c9a-33d1-41cb-b0cd-ae1db6ead485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.181.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b70594-c0c0-4ed2-9471-391ba0e649c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.182.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c03506-cbf4-4c88-ba3c-182a7feb9255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291b2eee-4b8f-4fb8-b819-31a8b1ab6eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.186.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ede58c-b6a6-4442-bd1d-8b6aa6ee5026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.188.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed938423-4aa7-4bac-880a-362753387878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acec3aa7-79e0-4d07-90cc-a53d93b9830d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.192.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a261572-9eaa-4685-8964-f15ac8bd6a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.193.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6132dc-9321-4c94-ac1d-9a1f0192b8a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.194.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e4bbb5-25e4-4d0a-a290-6166e100d31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.194.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd85b6f-e02f-4663-9caa-ade4fe39bb0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.42.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f08e6d-efc2-4c47-b2fa-d89e467087e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c737785-ca58-418a-9e0a-35ba266c413b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf8c05f-8c65-4eeb-b0c9-82f0315fbb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc50c74-7a2e-4529-b8b9-3f03c94d2e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.44.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1621a8e-a6fe-42b6-bc1c-c46dcc316527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.48.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105e838c-5cb2-43d2-8926-b6673f60efd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.51.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1832813c-6a58-4282-aef0-e9397ffde843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.53.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfbca6ea-4141-4b51-9ac8-3816d69bb98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3896851-9351-41dd-bbcf-3ff49430e1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.58.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd1a8b7-6d85-4440-8ad0-2371f87a6b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55ed3d2-e4e0-429d-9188-5b96e91b2c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52201ea4-2e12-4630-b39d-a24171c9827c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6001a58c-6bcc-4e3a-b419-a0fde8043a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92823463-4972-47a7-930c-80e051cce60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.90.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d711969-3aa4-4347-8f96-b3f5fa9fe934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d474c34-ccfd-4540-8054-fe6c9db481da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4d8ba9-9aa5-426e-8f89-3529f47b9f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfea2438-1743-48a9-b3b6-e3598d7c552f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.1.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4d18c4-b21f-4b27-8126-032cf14a2aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.100.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bd3fb5-a9a3-4633-bae2-f8b2b188541a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.101.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f256c80-11a0-46d1-b4a5-e5d3205f57e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0175bcf0-e84e-4451-b3f5-fe2256e1d8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.111.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35072686-b6b4-47cb-9b7b-f38ae1cb4825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.113.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8760b2-83e5-43a8-a4b1-88aba6b826c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.115.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614f5be0-a2be-4526-992c-ae867fda9f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7aa5d0-a9bf-48fd-86f0-c0649aba0123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b646779-f779-4b75-8bc7-17096fc9cdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0228adce-986b-46fb-a894-40519f6e827e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.12.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06868e95-378d-4ec0-b546-af945b703191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d470acc-6e4b-408b-8dfb-bb636d7347fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7b13f0-9797-4e82-b09b-d9b58b5cef43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1974a9f3-8883-48fb-a198-8b9daf1eb179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a515c68c-f501-4844-9114-2579aec0109d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59004ad-2080-4ad2-9a78-aaadf658dff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d8d7a9-2d58-4439-9c03-d4cb9fa6fc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453d7116-37cb-47e9-ae31-8ff168556c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.14.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bd4dc1-b1b1-4de5-807d-ac598566388f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.140.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba4fced-fddb-4505-8627-4e6475af842f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d1d961-d256-4a2b-9fc8-5cba0efe165f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5544e9-903c-489a-bba1-fde152c1778f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e255624-e3bd-4e65-ba6d-53dc19469e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bf1579-1a38-441d-b00c-eeacee739140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.143.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b961d25f-0e64-4824-b6e7-bc9eec382a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda56bed-6515-4227-9ba6-692193215275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.161.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e6d724-f03c-48bb-90a9-722e51d338c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b0cb70-870e-4588-994f-87008f11305f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e280e20b-cd1f-4ba8-9244-79303de60435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbabeb9-f347-4951-aafc-3be801bea778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f847846-34b9-4609-af09-5aaacc61dcf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.171.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd3da01-71c4-454d-9110-49ebca4649e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07448ab1-ec15-4424-925a-ea916d1eb92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.175.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d110d8c-0f7a-4a70-8d78-66f188154b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.177.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa56c8e8-8169-426a-8aa6-957eecc23411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.179.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a13c6ba-e89f-44ce-9020-3438f58a5f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.179.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4007b2-2ad5-41bd-a0cd-0ad56fa271f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.180.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec99c45-0438-4a06-9e60-f5cdc0caa508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ae42cd-a637-48dc-a210-19fa105a52b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edcab34-1f05-4113-b162-d4f967ffd220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9387df10-0917-4025-82be-83b1df7f4493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.184.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cbffbe-8dd7-42b8-9be5-6cd98ec53853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.186.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8058c1-50bc-4d0d-8846-644556947930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.188.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f120aab6-2923-427e-ad7e-6afb2feda62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.22.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d0a24e-4a9b-4a38-be47-bb3a2e61bb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.241.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2938e1-1f33-40a4-b612-d7c3b8c4a70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533b8ec3-dc75-4d69-98a3-46413a0654d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a321d2-122d-4b55-956e-e5bd13311a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1c561b-502a-42d0-9dbf-67028d12ded2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96247b4c-6b43-4aec-a4c2-349c9a083ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.247.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef70ecbb-cc01-4f3c-9b5f-29dffd3eef5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59238123-a58f-46af-8a5b-ee6c8271c52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.25.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a8185f-fd5e-4d01-8f4c-a29e2e357b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec146c17-28d5-49ab-bd51-237dc4fc372a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbfc80b-0d4c-4247-8206-0e7476ee6b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a22c2b8-5da6-4c61-bdca-60192206d739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4beccb5c-9b71-4a2f-8669-4e569d4343f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.3.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d2387e-1d61-4490-92ae-919402a05255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efde455-a611-410d-9484-56f3ddfabad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639be143-5d6c-4f46-8a92-f0b2e2adb2c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.46.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ef9eb7-9523-4c53-8ca9-c490c29df3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f02362-9c54-47c4-b509-939cf0fabeca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.50.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ebe476-a41a-449c-9025-b537758613ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.52.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acdc84c-9793-4fc5-a811-62bb5a611af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.52.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6c3129-d560-41b3-a24a-0a67688592f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f995f219-e58a-43e2-bff1-9c17ee23b224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac4e5ca-f46e-47da-9ee6-65ac90049809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.56.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c62fd13-b847-43ef-b3d3-79faccce7cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b38271-b641-4b8e-b73a-0e4bb33b1406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977ff6cf-dd58-4a61-a426-15787631ab22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4926b451-1982-47f6-89fb-2591d3e19d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.68.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc0c84f-ec00-40cb-918a-704d82dfcd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.71.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805a2409-5a08-433e-9c95-087304309b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b12993e-c4d0-499b-b753-11115c2e7bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6f2465-0b28-47d2-8e2e-29c5d708da8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.83.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a71d90b-ace8-4f7d-b26a-5a95a8989783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.87.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf3a7d5-71ad-4988-af0a-2741ae3c077e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f3dfa1-38ae-47b0-9db3-6614c008ba50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.89.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8561c984-ca64-4c6f-a872-d7b1b369d571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc4d802-5c32-44c8-a6ca-53f252165ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777233af-09c0-4263-9311-1fbfd6cb1449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e836f6-291e-4e2c-bc95-e84339b3d33b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f894c9-7171-4800-bb6e-5646206509e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72498d7-3c92-4d4a-bacf-372a6baeae92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b6936d-0afa-4fda-9d57-23f939836f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc76f3a9-b08c-415e-8405-5c5a898ae01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9008023f-afb6-4dd4-b7a3-dc62a578b0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb8bb97-de70-4446-880d-93212481d3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ce51a0-0b1d-40f7-80b5-09eb515ac50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.126.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7727a173-a724-4505-afcf-e7e80384c3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.128.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806869e2-17fd-44d9-913b-dc866d2960dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.132.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff65072-f045-4e40-8494-98b0560d4d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.133.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e94b9c-cbe8-42b3-b4b4-e162b9714982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8682f5c-4f22-4710-874f-eabc63f1fc19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.143.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866bbab5-e5e4-474a-99cf-fb0b36d8a7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2d753d-3c36-41ff-a010-cf0c7d3f4232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.15.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3fefbf-0fe0-4efd-b673-f4bcd3cffdfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412169ab-6020-41d2-afcd-e3e5c3b377b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ae29d3-ea64-4184-95fe-57e1f14fb382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.158.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02024ffd-63ee-4170-9e57-1863038504e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.167.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e325683-ecc1-4787-9ef1-2063fc73f343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.171.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2dca5a-7b9a-42de-8b26-be9d5097d41a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3359c327-eaeb-4239-9ffb-4a7887ef56eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.172.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5e671b-a163-4177-b632-7e3589015257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.176.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc1d1d7-fc0c-4f29-b474-c252a51858c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.192.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9b10e9-deb4-4aa0-b84e-ab45e889d963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.193.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf1ebe1-203a-467d-bbe2-5d73fcbe6ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f8af9e-e851-45a2-a36d-3539139f8154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b61d42-885f-42d6-a0f8-2918af1d2dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.196.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c134a55d-928a-4056-bfbc-4410d92ee0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.196.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88097a03-af61-441e-804a-2d1c8257b8f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.196.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683861be-124a-4ed6-a0ad-c1e8e5019cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.2.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b27ed7-87fe-4c4c-b99b-d3dfc61c1a01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.200.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41cc000-02de-446b-816a-9a27743ccaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c794cb-113e-4871-94ac-fbca0ac672ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.214.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bd58eb-b3a0-46cb-9161-78532db0df8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.22.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3253782-4cb7-44ad-9148-ee4ca0c59347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bfa6bc-47f9-4f43-a7fa-f373755b7046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1b1930-b9f8-44a3-8287-c4c84c3fe978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.240.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18906fe7-cffe-444f-bdf6-4fa21473a762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.242.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8154ba11-1cf0-445b-9df0-e6d0f4af9442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.242.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84121c8-7469-458e-8611-f7a6f8b0f90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.248.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609d8cb1-c71d-4c08-aba2-10d4435631c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7bf47a-bd0f-4a78-88aa-7658cb78fefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53410cf-d339-4c75-bb79-f1a6255630a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65818e55-1c56-464b-9544-a7aae9e8faec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd68535-bd7a-4dd0-a3a5-e48c41f14db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91beb75b-f09e-4811-b6df-7866bf9648db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.46.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976c1734-5b7b-4c5d-bf50-7fecb7d6f5f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.52.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e429429-999e-43a4-9b9e-6569e121e874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.67.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bfb353-4796-4845-a168-88cfd5353d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.70.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aacb90d-4ef0-48cd-bea3-842fe4e4a9cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.74.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c464faf7-ead6-4aa4-8373-45fa322bd4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.94.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a593384-c94a-4632-ab5b-d86ee4644837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.13.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1becdcf5-efc1-4b59-854e-fb678c027cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.15.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4683bc3-7c48-4fb4-b605-1b2cff2d7b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.22.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8a6cb7-3244-4bb5-bdfe-418b00ce1b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.4.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b37a84-d6da-45c4-b3fc-0172aefd3642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.4.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cbcaab-48b6-4a53-a1c7-a6259cb90ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.54.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aea1f9f-9c3a-47f3-bc74-74da59149205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.56.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccde69d7-338a-4137-b1b4-e26eba258af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.71.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5999c26-043f-4419-810e-dd5e5c86fe5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2478d309-eb5d-4234-87d9-4dbd3acbd113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.193.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea286db-77ce-4d87-bb5e-118a4985b945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.214.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6087ef25-d733-4516-8a80-e8a80b5e32b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e285514-4aba-41fb-ba6a-2cc9d6ae57c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f0fd70-43f7-45b9-857c-68bc3e92cbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06c15e6-aa9e-4f9c-bfa7-4c1df71610bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267739f8-5180-4000-8699-868c63ce98a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d20fb7-8de1-47cf-84cc-d90049ab8784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.226.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9063eea-a0d9-47f5-b831-67f6e8ddd8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.228.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15c92e7-fc6a-4071-b77e-cdae2435b6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0bd14c-ca63-4410-a31f-f064c47f7654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.229.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08aa0275-01ec-4511-9aea-522c6666c324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6433ae58-1f7e-4101-a2c9-0bcfc4b62881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.231.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d952c943-5e9b-4bdb-8754-33b6d496411b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f77e2ec-9ae7-4cdc-8512-55ee5dfccf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69f3c8f-4614-463a-bbe7-d27899e59dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca34c84-df3f-4297-af82-339a96eaebb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.234.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588d8345-0c16-4ed7-91fa-89de3c01db01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d1091d-931c-4bf7-b3fe-80327c84e7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4c4594-70e9-41fa-a900-4210de876696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.79.224.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f587f5d-f800-4322-973e-973d87ea0ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.79.41.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067192c2-4969-41d3-9dff-3260dda49afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.82.120.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65912c9-aa2b-4b00-aa01-c9e4de9689bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.82.72.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebc52ce-9be2-4a9e-b64c-9b1c4670e47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.123.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cceaffab-00ef-4760-878a-2253ea88e05e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.126.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62ad298-721e-40dd-a96f-c0a886d71c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.170.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85f1ac0-4863-445c-8873-ca4f055a1686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.235.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80229fa5-a76f-44b2-9152-9c1c4bcbc4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9372f7-0a82-443e-b88d-513362dff3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8cac90-a0fe-4539-98ef-7d452cd24f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f2253c-4cb2-4867-8b2e-fe7eee180aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e3639b-57dd-4411-b2f7-a003ecdc229f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f9ad67-7e3d-400c-b66d-022eb4ecfa69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8725eda7-7433-41ed-aa9a-60b88e7cbeb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4150afa6-3c7c-4ace-a36e-d716815f0d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0a747e-347e-4b3d-8afc-aa68022185d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6a063e-05fc-4530-8f8e-94a31fc87d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e13c181-eee1-4525-a552-c2cfbdc1f398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2783fa99-c8cb-4d4d-ae43-b83957534b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa67f1ec-7c8f-4aab-99aa-f25e3889cc11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15178175-1d6b-422e-a42c-bc6c63f341bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfae1e3-1773-4aa6-9cfc-603958561849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfa6547-d9fd-419c-97cd-ef73d0b2f878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d07ea09-e20f-440a-93f3-6a61bd698ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8f3489-c00b-4236-84a6-57aff6fa65b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87df72d8-a0c0-4256-9265-b3922d89ec1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26ebfa9-9a5a-4dbe-81cd-d66cb759f033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618a59b3-90e3-4140-bff7-ade8cbf11d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c697ee-7d24-4284-9696-c8e92c91e5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6527df7d-347c-406a-937a-a3b1e9d146bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.115.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a1c035-b6d4-4ce7-b00f-1d4f64c29623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.116.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5565866-63d2-4fc8-9012-728d112f2e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.118.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc5329a-b2db-49f7-b13a-7e9dff7b84ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30b71db-3570-446b-ab82-57c8200068fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1591e7fc-a762-4fdc-a81a-716cffe42030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5874b65c-f123-4232-abad-66e647b37713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.131.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749c6c99-3eca-4704-b531-2ed34d006ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcecc83e-3157-4e3e-9c44-d9d9ebb78833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafd7416-261d-4515-b252-10a4ce850835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2869256c-66b8-4446-a5db-9c6b21538b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f62adb-f567-45a7-beeb-56c360f99f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fa2729-1187-4d5d-9291-baf5e3a882a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cb40f0-5cd7-4c89-ab81-2cbd8d0aedb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69295b00-0421-4ad8-bce7-23fc4cd0c442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb2922f-47f0-4aa0-8af6-5e4d98e77be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af875c69-4ce1-4415-a6e7-05f2c9c0de8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc73b35-09e4-48aa-ae43-076b77517c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f7aff9-0f75-4538-abdd-af09807d46c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426442f5-8162-438a-8a81-de266ffe0832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52d97fd-f841-4fa6-a286-fe0b4c39840b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fec7352-2816-4c13-83df-334599379e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e374320-eecc-4d58-9372-95ef728a2fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3521810-a68c-4170-a409-7d68aacea879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956d289a-9f44-4277-9680-1cf504cbc2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2443299-c391-4526-9e0b-099e345f4aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81227801-5c45-4bb3-8ee2-d27fb6034fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d7fdec-e29b-4f01-9874-acec2b2849a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72b6da2-3161-4684-aa3e-ad644c1a0702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d286ee6-861b-4b72-8121-43ccce6a1e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5db6ac3-1a56-44eb-b6eb-fd13b4c82626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4560ceea-1f35-44a6-9dcb-707ed02fbe90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d1bf0d-8be7-4408-9716-81c002dfb69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba98cee2-9d72-41d1-b05c-24216646cf33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce636256-798c-43b7-bf34-16a7e7742f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd11908-f1e0-47a5-a2c0-375693e7cddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cea52d-3066-488a-a0d2-cc719d7aa2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0a48e6-0ed0-474b-b70e-2778995d1445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6033664-8b46-4fc6-b4f1-a6a9877f9574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8650e726-e8ed-465d-a9f0-d9814083abc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376672ca-130e-4c42-9b5a-8d0f458d3dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3634c979-366b-41d8-a205-6fbbb35fab9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12837213-9cd4-48f6-a05c-9725345cd6ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00407c1c-2d61-4be6-8041-7aae4ad44577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.196.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a945435-20de-4943-a49e-5a2903ac3a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.198.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c56c54a-0c7f-4916-b49b-ec919d8250d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f5d64c-1356-49a0-a507-382563a27223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.204.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2fc158-62c8-43ed-8e6d-9a706b7f527f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9e7e82-ac7d-48d4-926c-68a07c6943c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41998133-bcb9-464d-9761-39d0dc7a9885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed086b54-19b4-433a-84bc-dd57000a5456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cd777f-1dd4-4537-8d15-4243d2fa37e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.46.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9ff81d-a1e2-4d56-9cd4-005459a0be7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59af59f8-4505-45d8-897c-6526529f3cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.85.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca73b8f-d114-47e5-b90d-335d5e961828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.1.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6690f9d-198d-4717-ac79-4fb0ac07186a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.10.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63891e7-8dac-495b-9bec-6b6f52c7212b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.2.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f7e213-d2eb-4ad9-8fd8-df7c55c122b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.29.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540aaa2f-d8ca-4880-bc73-5157d3b544cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.3.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7041b105-0d8d-46f4-8c2c-528c45e82400", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.48.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03f74f4-447f-494b-bfe4-f75d36e135d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.5.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6c2d50-0570-41b4-a29c-68f1d46582b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.53.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7928894-47b3-4387-8c62-6f11b0ee11e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.54.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1597400c-d4af-4afb-adf3-3950bf39b9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.58.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6318f931-77c3-4ec8-bf9c-3fdd30487152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.89.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808fe83d-3209-4057-805f-98596333c6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.193.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783d1ad0-e4d7-4962-b471-e8adabe79160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc2afc9-1ace-4eef-804c-5717adeda13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.231.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21d1eaf-d2fa-4d59-ade5-de36aaebbf18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be3c4d0-f1a6-4934-86c7-8c9e34995bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.248.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f67b110-0523-488f-9db1-f289b341afdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.250.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20687ea4-e4b8-4c68-b95d-5e7afc694bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.251.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a2deab-1fd7-4231-a6fe-59f43e1f9999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.2.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39dab53-1539-424c-997d-e99e58c9c606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.24.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d44cd1-0da9-4fa2-84d9-77372f423d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.65.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc509ce-353b-4b01-a453-75141b75454e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.74.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22cdb2bd-113e-4aa7-ae77-7d2f230f2746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.93.81.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b570974d-de49-4045-b431-bdc566b20b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.94.191.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f257ea-55a2-4d7c-93f5-16af59ff4ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.201.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763e56ed-f113-40cd-800f-7fdbcc9bb85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.96.228.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f8bc6e-a82e-4b9b-bb7b-1b7dc67f85a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.98.173.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdf15b9-07b6-46e3-8053-458cedc626b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.98.250.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6096f7-7247-46fb-a16b-a79e93f873c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fdad914-a77f-48fe-a2d5-1d0ee92d587e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1379af-04a4-4f69-9d86-3144e996f69b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdf2e2b-7305-41f1-b576-da44af7719c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c919559-5511-4d71-8899-4bcd553e9469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.54.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e922198e-d810-4434-a186-0d2b27ca8292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.218.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1679b49b-1199-4e76-9562-8adca3fee397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.242.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590fbc08-6318-458f-8795-db4a1947586f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.187.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132d4bcd-2b88-4cf6-a4a8-0acdb07498d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.233.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac26851-704b-4d1c-8deb-9f78a24565aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.84.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f0d474-a16b-4554-bd43-45e40f8a3f73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.0.240.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ed7ad3-d555-4e94-a024-208f62375efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.113.55.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f855a461-cd35-4996-92c8-702cb6018817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.115.217.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecea46f7-49c4-412e-b4d2-7a74f82ef687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.163.99.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbe4c0f-3ff9-4417-acf9-3aa8f944899d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.244.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d6ee3c-5113-4043-a26f-af84f45c738a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.228.242.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a925f9fe-290e-42f7-ae9f-f143ccb4a62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.178.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a43838-bfd4-4c60-94a0-76c7627a84da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.38.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41186829-5fb9-49f7-bbf1-c0f5ced34bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.69.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ecdb2a-8d88-4ef7-af66-699de41db64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.86.248.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dc3177-e9ab-451a-bc45-cae35f9d5f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.101.64.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79a1b2c-c87f-4194-9c3b-fb943537e76d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.102.125.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b658d7de-94ad-4930-a152-5839a266834a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.102.125.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab9c8aa-54c0-4c5c-8246-8f5bf14d06c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.252.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580d1cf0-27f7-4e2f-b167-29863c935f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.167.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200edc96-c8d6-41a5-ad18-449816927a97", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.173.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab22a90-961f-49d7-a84b-8716331ecfea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.160.135.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fed85e-e706-40c5-b807-fae1e61c0beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.161.101.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4611a6b-ab48-4633-a86f-96587b4624a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.192.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e5da53-fbbc-4c92-a8c7-87143c03e14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.27.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7be8f1-a33e-41d5-9727-1f5e22b6126b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.209.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951f2b15-21f7-45e4-9bee-f75b92cb00c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.26.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75be8c0e-3684-49bb-902b-a66ef00e33b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.83.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b594fd-b24c-42c9-b6fd-693dd75ec3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f45236e-6733-45f2-b9d2-fd8fa26a92a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4ba6a5-f4d4-4f22-9a51-a5b72b87d7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.108.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954d827d-91e2-4ee1-b358-f7f788a07408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f06f601-205e-424c-a8b1-2be10473df74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da19c803-7a36-45f5-972d-eb4a699524e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1b4209-d03f-47a2-90a5-5129dc1486d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53533a1-5ee8-4cb6-815a-cd2470280c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.196.106.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de45824-b408-4961-b596-fc934193d85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9144fc46-e8b2-41ae-8f13-e052667f5b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861a8098-3fbe-42a8-b3b6-e7aca9791002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e7ae97-6a03-4082-b202-cb527ee86fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b042583-eee7-4eeb-a59d-6af0ec60b1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe337789-ffa5-47f3-bd66-77269ba165a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d855f945-c190-40e0-8d53-c1194142a9ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cdbfc4-e452-4614-b262-061d0cdfef24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d542c44-009b-469a-83a8-c173a68a10ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8dba79-368d-4507-87db-df273399aecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31daa919-a692-4cae-8a9b-473acad0cb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.231.61.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db77400b-6501-4c0f-a6c9-464e862c5564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.232.154.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad57a591-2858-41a1-899a-0649b3614057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.237.89.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9a0d90-65a0-4dc4-bfbc-198458770f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.26.192.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7b86f4-dab8-4fa2-a492-56a07fa11bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.34.182.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f848ebc-cb7c-4e52-aeec-cf4105def5a8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.49.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b1b365-7267-49ab-b8a8-0076b0c106c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc5b111-86f8-4d73-a6b8-288a8954726f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19ed502-3fc4-4246-ae24-9c54fb950eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0213bc0-6402-4295-9bc3-f400253f66f5", "relationship_type": "indicates", "source_ref": "indicator--d19ed502-3fc4-4246-ae24-9c54fb950eca", "target_ref": "vulnerability--dedbba31-b3b9-4b96-919d-d87d06c5c1e9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bb87e7-04e4-4fe4-a273-5d1c60588d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ce620d-aa02-40d2-add0-fe381cdd18d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5238987-8f0c-4ffe-ab5c-df6add440278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e856ce-a5d9-4e05-ac3a-05ea16e9b98d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.172.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd72b1e-0b17-49e8-adfc-7069eeeadabe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.23.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35552bda-5832-494f-b5a1-56a56dded8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfee9fd-5167-4574-a3b5-9bd11b0d0fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.52.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f41cc6-2fe9-42cd-b8e2-59f9c2582525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.52.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83788a89-0a02-4ea1-91f5-b7a9b3b128a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.16.232.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6dc82c-67b1-4e42-9b62-9aa3d84a5f47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.18.7.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4089bbf5-8b81-462e-ab90-ea0929e1caa6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.187.96.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e781d0b7-52ec-4447-ad15-7a46a685e518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.188.96.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0189a6ce-45a0-4402-badd-112bb644371a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.35.63.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10402ce2-e8ce-482d-b6c7-0971b479b255", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.46.141.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567efb68-90cf-42fc-8629-7c96585c31af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8082be4b-b6ac-4e8a-ab59-5bc2f580d54a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.66.177.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae216ed-d07a-46d9-a4a6-628d5e7f5fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.127.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbfb447-40fd-4699-b83f-cf4b30749d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.233.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8c6491-f69f-4709-8518-2c57441e51bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.234.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e566e8b-ec7f-4aa0-b0f3-dae67bdc0c2f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.34.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c831580-af20-473c-a2d3-4a2fc353a475", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.84.211.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855b4760-d170-4c6f-ba13-8523205d885c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.36.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0b093d-ea16-487e-9131-a58ee487850a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.44.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953f4580-f4ca-4aba-968c-93bb5c527d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.53.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377a4088-e311-42de-a3a5-740578cb668f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.62.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec24c72-0502-4797-843f-4450af707a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.80.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aaf4d8a-6f87-4b87-894a-33ffd5b36034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.81.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334861a6-6f3b-4045-b667-ee31f6734315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.89.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58153103-1176-48cf-9c95-1bbd31da76b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.109.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3443ba9b-39ab-4af9-afe9-95e251943d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.186.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592dbb6d-7cb6-4867-aacb-859f6cb77c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2280399-ee21-43d7-aa6f-06bdf1e372a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a794882-9eee-4824-bee1-9f28ad2fc2bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6cd30d-28f7-446d-91d9-df25b17432d5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.198.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91d0ffd-0a14-42c2-aa1a-9fba77e41f98", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.191.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5ef293-cf2d-4649-ab36-9254575216fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.61.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435a06f4-4745-4bd9-988a-dea35ce55499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.211.94.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09de8543-52c8-4d0d-b4a4-90c9d26bc1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2439229-85d4-4c91-b090-5f5607beae15", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.66.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c78f4c-a62c-4d2f-b465-cc69271e8439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.126.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3dcde10-398e-4a28-a6d3-d1a4a3caa297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.203.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccecccb5-6f8d-4b18-80e2-04dd8870c5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09da5f29-54b3-4333-ba31-f6e88320238a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.158.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f6152e-b158-4295-96a3-0762580b7158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.67.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e210cc2-1963-4b73-9827-5a6979fc3b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.99.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3913f32-eef7-4948-9845-984a99ba714c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.107.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05613873-8ec2-43a7-b45c-8efdcada3e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.100.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09b2e14-9a79-42d4-815f-a52e286b673b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.101.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8346064-c856-40f3-8e4f-6da61637c05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.209.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9de496d-0ab0-4aa6-82aa-7b5fad40e6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.49.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b452314-e4f9-4f7f-b18e-9fdbd5038b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.85.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6503d8-2c82-49f8-9b20-f8e3e9c44771", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.89.39.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79491d6e-9c8e-4344-a916-092e6e3ce793", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.140.41.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9ecd03-c0eb-43b8-85a2-d6aa08ad58f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.16.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5856f56f-ee80-415b-bb8b-46373a16e9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5b4346-eda2-4287-b0c5-66a9f8b944a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0381df-187b-478d-93ac-8181de8c27c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.154.132.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a763fe-02ff-4cba-a093-991a26fa9b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7789da55-59ad-48f2-9ab4-7ca64e69edb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e499fe3b-647b-41eb-8f64-29608067baf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d3efaf-188a-4586-805b-eeb095921cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.82.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d0065e-4c80-48ef-a3dc-bf40ea2ba118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b97ced1-121e-4431-89b9-446a7fa13826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.90.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7558c0-44a3-436f-9efb-6a6db6b1d3e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0426b9c-e005-4848-924d-bd0f26ab240f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9839ca83-a0e3-4c54-8028-fbbfd4a4b04a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af605e0-f461-4ac5-ac66-05645a1ca89d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379751ee-7198-44e3-b614-d6b00f5f0465", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d20f5e-7ddb-45ae-a462-4ae7c00b1103", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b29b32-dee5-4417-8a3b-948ff9a3db14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4cda72-3353-4b0b-952d-cccd4773753d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44bfea6e-d4ad-48f9-a3c6-10e2c3efe618", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220ea8d9-f0af-4304-aac7-94669d6eca61", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92b0dad-f1f9-4a1c-be2f-fd432d7c15fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07204e61-597d-4f0c-a26b-b813f2417579", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70548ecd-8458-40c0-90f0-aeaa123df816", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ea794e-7cd2-4917-84ea-48dbfb2cb6b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3648a027-9ea6-4cdc-a1bc-654c98153621", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c82cf78-6caa-4ec9-917f-6ce31c4c9ed6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3749aa6d-8362-497d-81cc-c62ecadc3894", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf75b55-4af7-49ad-921a-c1d90a8be21f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ca8ecb-f1cc-405b-a861-ca725b64be8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117e3338-c80a-40aa-b6a7-b44163d57938", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff541e7-f976-4783-8678-37f66c9d45c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394ddbb6-daec-4937-afd7-565ecd8f9de6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3224863-d61f-48bc-8f9d-a2a44a3c6826", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84008c16-01d0-4019-b3fb-c886f0f84987", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b09f5c-97bd-4b0f-8841-17b7cc880d3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70420ce-94fd-46c2-b9c5-b2af6ea9d9ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0c233a-9223-45bf-8926-511aaf04c82c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56f48c2-1b6d-4805-af87-44919d97a2a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd53b5b-f329-4326-9d70-7fed3e1d0ddb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eea4267-c32a-4662-90c9-d54699468eaa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7584eea-13ab-4328-b8ce-3b92bae3faf7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99777308-e17e-476e-bca1-35cff4238fc3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2a3d37-0c8e-4ae8-bb5e-07eccbd652a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.172.50.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206d93f1-2614-49cb-971e-7217e3fee66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.136.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e322caba-4cc1-422d-91d0-b377bbab157d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3da4e1-be69-4c41-b040-e2758904d3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.144.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7c22b1-a06b-4641-873e-58752ee839a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.145.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7e82aa-d072-4e54-9790-4bdc901776a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.146.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85c54a5-8c7a-4eda-89c5-c353f8c75550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.146.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d408d0f6-0b02-4bc3-bc08-3bf9f99ebc21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664f49cd-e37c-43f7-a9f5-71422ea38bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.158.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c122bed-835c-4cb0-a98a-6241e10f21bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.170.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ef2c6f-6867-44ea-a989-2197671e15b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.171.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5ec15b-8ee6-48f7-8b60-f8895fe4b402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.174.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae99dd8-5356-4b78-ab20-c3694210d9a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75217cc9-200f-4871-a531-dd2e40b51838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.185.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05365a04-4be5-4d2f-b2b9-c7401d409a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.185.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ea9a07-73b9-418b-83c4-4fdffe610d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.191.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18f0ce8-90f1-4db7-b7f2-7d68662d7507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.224.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f853123b-9797-4d31-877f-7f18fc1ae992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f842f376-1451-485a-9fab-706be6dce98b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.194.226.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffa2b1c-d8d4-4525-9fe0-cc6f6cbba217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3bac28-99b1-4dc9-9d1e-f1e7939d0d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.200.76.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4ab394-8bb1-42b6-9067-df92f67d1fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.204.132.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2161177-70e8-4594-b2c2-7a76d5e8ab31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.21.227.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3bca3a-c7ea-4bf0-98d0-b385cddd5f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.230.30.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf40be5-3992-4b35-885e-61058bf934b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.246.131.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc29086f-7bea-4d1b-abbd-2ee925a79a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bb415b-937a-4e62-b11f-9649b51ea4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.42.138.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ae44a8-f3b8-4efb-84f3-3af635ac83b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.144.112.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb26031f-84c1-4c4f-adad-265b945da3f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.178.27.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d3fcf4-c6ee-40c9-aa0e-d91e22b89025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.190.138.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b42630a-6a92-417f-b1d7-d902f321e983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.58.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7aec91a-da0d-458e-bf4b-9da6c030ca21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.215.254.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f6dee5-c8d5-430d-92e5-5d72a89de47a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.36.18.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17cdcd5f-ce88-4a86-803f-9d7d77d0c545", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.37.118.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367c64a4-26d6-42a8-88c9-1c6456dc19fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.241.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff0721e-22ef-483e-a879-881dc0aa4fe9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc5e98b-aa05-4fb8-87e9-9f435dae9884", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b0fa9b-620a-49b1-97ef-65970b6c2eef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67e8940-c2f0-4c6c-8eff-5666a69a18cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e5a47f-b500-4141-bf00-2e08651354e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c155b1c4-cdbc-4da1-ad14-5b49ce5adaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.97.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97a64fd-eb28-400c-bb3c-a83b3517eae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.152.34.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e0b180-483f-4576-a8d4-7d14443ee4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.159.30.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b2e6cf-04b4-4af6-8bf4-d341f8bf09aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.124.86.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747287e5-c018-4676-8e94-de5543c3ccf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.149.235.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1e391b-2fa3-4622-bbcf-d1e5c6d164fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.151.173.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fd6c0c-19c6-49ea-8f2f-407655392761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.16.34.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cec9cf1-ad08-46a5-8ff1-dc0b2770d47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.104.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18295d88-58fb-42b9-ab19-63e8036b6554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.210.117.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de717013-99f4-4d77-beb2-fc7a62ce0be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.22.52.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef786ef2-e121-4e21-8569-d40498b91cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.220.10.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8466f75a-629f-4883-abbd-d17970ae2f06", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.229.141.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d940195-b049-4ca6-b36b-a7223adb8f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.23.68.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b074c2f-862e-4954-9721-e22a3b5d2ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.27.232.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1697d35c-9a34-4c07-8e2f-d40fdcc1e03e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.47.108.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1df5b7f-2794-4241-a26c-ae7afd3c02eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.47.121.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67949279-c9f1-4326-9d48-d07390a01e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.47.64.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e943177-c767-4a66-9a3b-cf82d22c4861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.50.198.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d2c825-49f2-40e1-8949-28fbdaf08275", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.50.203.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a157b34-f3b7-40d4-9ab5-b3e257e4dec0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.50.46.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fbbeb8-6ddc-4ecd-80d5-36ea3bc7b8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.72.124.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15601ad-027f-43a9-879a-a99b97aace92", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.102.156.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2101901-6f09-4719-890a-deb004ec88a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.108.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be1e937-2979-4f12-9734-44158a3409c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.16.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdaa2fe-4491-460d-bd38-256fb182525e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.241.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26e3517-5e9a-4f6a-a5a0-a611593c3db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.151.197.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ed9ee5-b2bc-4363-84fe-af60e4dd9b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.153.19.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471170d7-7072-4d98-9a5b-160f7fb35f17", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.39.224.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf1b502-9b22-423a-a434-f40beaab0357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.46.211.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d22ca44-5892-4388-bdd3-565363bc1805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.37.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c9d49c-7f23-421a-8250-111e205e4646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.56.226.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e35d3ac-0b1f-4127-99a8-c949bbb41511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.60.100.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa92a675-530a-46c2-a965-1765f6111b92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.208.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9894e6ff-6107-45ef-a0d3-69df79a75f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.221.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ab5e39-a33d-4076-923b-352fb188b486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.82.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cb3073-7dc9-4548-9946-2d0987ba9213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.82.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0787b0c8-2d01-436c-a9e3-60a7b55c5482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.166.83.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c41cb5-9af4-4bfc-b7b0-a4defd392870", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.168.88.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4630a25c-7e5c-4025-b17a-d3f6dc0f8d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.179.156.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da254da5-dc53-4013-aac6-1edca7cb601e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.186.87.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb598e24-d476-4eb9-ab58-4c2bb6a296e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.189.183.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6a5936-e463-4089-8afa-c260aa37823a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfab3920-c927-40ac-99bf-70a3a6c8051c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.137.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc15459a-d868-470e-9be5-98ee612d1750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.208.179.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1909b77b-9b82-47ee-9099-afa30eb413c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.251.193.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2381ea4-36b1-415c-990c-3ca02be550d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.31.254.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6294c917-823f-437e-a28b-b8a88c7fccb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.138.113.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e558d6-4343-4cfd-be5c-f8d18c612f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.147.209.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e560bccf-f08b-4d66-b292-7bb0742418ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.178.209.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dfb859-c342-433d-acda-72ac0233a961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.178.24.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d430e8c-5a8f-4f9a-aba9-09e1fef778c7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.180.188.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ceb92fb-47c1-4935-8b55-d03dc73313c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.216.77.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11956bc6-3fa2-4d0a-89eb-d6ebc85d81f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.221.134.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e55d8d-812c-4d46-bc1d-ec876754f751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.221.207.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42069f4-8e85-44da-a3b7-90533040eefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.222.153.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ce5df3-bc8b-4011-be5a-c585c33d1061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.223.118.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ed5754-82ba-453a-80cf-42744c1a6424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.224.66.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100bb8ef-f54e-4629-9a28-b7a61de1512c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.242.144.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec1668d-ffcd-41c6-aef1-aeb03a155fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.53.79.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323d39a5-3737-4757-92b8-ddb54a25f7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.76.112.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd8a66a-65d9-490e-93e0-1511e1b1531a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.90.201.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7840ef4a-36cb-4f01-bdb8-bd314cfa7de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cf91ea-3934-44c6-a49c-e4c65802352f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd7dca5-6ccf-488e-8ec5-774f8056a44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.146.236.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1cdf08-cec6-40eb-9fa3-ca62bc8bc7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.141.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e587f2-8104-4632-acb6-8c9f82d559b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f95da91-44f6-4d74-af0f-af5e4fb6e981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14adf61-c605-45e6-a57c-c6ca959b4121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.203.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b5c86a-d93c-41aa-b220-db035e778ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.203.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584e878b-2e93-4220-a4e7-b2d33b5c8c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.203.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea3daec-5f83-40d7-ac7f-3dc2b527d3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.203.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e51710-b142-4c6d-b97d-3f2aa3cce586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.203.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1332ab9f-85bc-4b29-948f-53c76deb34ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.203.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdd3d1c-8c6a-4251-825f-de8a0a0f26d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.203.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4481083-f821-4dda-8e3d-7165083943f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac67f338-299f-41c0-bfbc-abcdc38bc3ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.189.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0545a68f-ccf2-4e00-b68e-b6ba4f477cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.207.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142244b9-c489-4b3b-afa0-590285cf2c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.4.15.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0708fda4-4beb-4a0e-80b6-30ab68ba4bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ac6708-d6db-4de5-9ec6-7ddf7392c9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.152.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2718ac22-00ad-4f5a-85d3-8e3e016ce6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.251.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe63f890-9716-475f-9b8f-6cdb000c4a16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.137.188.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0bd385-29c5-463e-8161-4d58d1f048c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.181.255.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ea53df-3277-498c-a5cb-4fb06ea9ee5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.188.23.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67814ea9-9e7f-4064-a5a9-d8acc64d128b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.207.185.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69dd95d-5601-4130-b2dd-19b7148325ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.48.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5c3451-c7af-4ca8-8ab4-7fbbea94dbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.60.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a80cb0-ea15-43f4-a085-bb40314ed3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.122.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a9ba8c-abe5-4a8e-b45c-f00b807de9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.109.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3d4ffc-f92d-4632-8989-890f914a7293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.133.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a140e7a4-c302-476f-8f66-d6e93566a80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7505f513-3efa-4bab-a2db-508bd5e6fd89", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.25.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379c468c-7fd1-4ea2-962c-c945f5a88b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.97.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4dd9a9f-92b3-4f33-a24b-7acb7bf909e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.99.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8afffd8-1b73-4448-998c-fea9a7fe0f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.148.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1beaab51-7413-4ce8-a2c8-20639ac0305c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.227.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f942ce-c147-4741-ae3d-994d30e706be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.236.177.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b59a753-8e49-4559-9594-2a6310f58a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.236.201.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0755c6-9007-4890-9e9f-726a03535d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8e4091-2229-4670-a268-e0e30c2be447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.32.17.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12658f81-e809-4503-8e93-bba0d17ed760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.49.46.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61469166-b87a-411c-a489-f5ec66ec4329", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53de8e2-6afa-4947-8642-dbf4213e6e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ce7a97-4b51-41a1-b685-1ab3023d81df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3a05ba-b4bc-4937-ac1d-d77db2a2c261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2b61aa-75b0-46db-8bd6-c42dc71fe0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e465bc71-fdd6-4d53-921a-4a4139fa7e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94381c7d-0058-4b6b-a9a5-dc356f075395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1091889c-9308-4565-a141-497cbe7f8047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201546da-3f07-4137-8ad2-51db1b9012eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e52823-ee35-456e-ae17-aa15f927675c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf220d2-f13a-4326-83c6-dfe59978e685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2711a9-403a-4f73-9a85-c37c09cf6994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d4a558-17c4-408d-bf1b-f0048394da58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45af8b3a-0f9a-4674-858e-eae42d84f272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d97f4db-20dd-478a-9bd0-e85801136fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a75480-c642-4faf-b0ca-4b1b82df0b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f995865b-a557-4362-9e9b-d9c3a073f47c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbd84a1-fd50-4a0e-9aab-9c7527b87226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd21cd6-c3b0-487a-8a0c-e5d02520e572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4eb61aa-258b-4593-af11-53d0dbdb7c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8716152d-5733-4ecb-9537-3751722dc704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47dba901-25a2-4a9c-a552-356173f021aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329f23a6-94d8-4a66-99e3-117223d1ea72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ce966c-c32a-4a6f-80f9-4fbb81df361c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989663f4-6182-4a9c-a1cc-b99bf22ee31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c224462c-a5a3-4292-986a-a1e75ed3c693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c913b425-1f66-4cb9-ad7f-af6b09164a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cbe645-5587-482b-9f67-b4d7e79134fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e4c53d-737f-4e17-b81d-95b9bdadc967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a075b2f1-7ebe-460c-bf29-997d19032260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5963cf-9b49-4684-a438-2e3fee6412fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6e8f40-6f56-47c3-9dbc-f690b64bbc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91b3e03-b9b4-4780-9952-c1a9e2546aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e868cc3-ce0b-4f04-a57c-0d6703df069e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa715e51-bf8f-4199-8540-7b484cbb4b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0668161-1ba4-4333-b467-1cc9b57e262b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33a175f-66af-40bd-9ab2-0e3714585cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fa4a4e-7c9d-4b95-9573-f6b80e960d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771d3c5d-61ff-4739-90c6-816c3e79dffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bd80c7-f887-4c0c-bc65-57e16db0e97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8d3b35-8961-4f3d-b2d4-c6801bf63cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f44dd7-1c88-467c-b38b-13efc8c6e69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bea262-d01e-483b-925d-0ed4a4d18220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85880524-b584-4401-bf45-d930ce9bee20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e301f5-c3bc-4fa3-aafe-1e06f2822701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578a4163-5f7c-4cc2-acdd-bcae44c2d377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1cca42-9484-4290-8716-977012fa0dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51e222d-8988-4fb4-b143-7cef2e0a3f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35df8a0d-c6dd-429a-bf98-7ddb699a5df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3e4281-044c-4662-8680-0df5efb36c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8480cdc-40f7-49a8-ade3-8ffa709409e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f648a047-5c3f-4df3-9271-8fe566d9bf3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f51c1b4-6432-42e4-bb59-baf0126fe0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4911809c-d7eb-4d51-8c50-a402639bf523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e9053d-3e3e-44a9-b0e6-fcaf5231485a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8164a26d-81a0-402a-a4ef-26a35b8b5ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f43ca37-6fa3-4951-a865-a90d296ee177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff1230a-f133-4a42-85ef-0e3129d3bacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851a490e-b89b-4bb0-830b-aa6ad1e083f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc48cad-6f92-42a4-adb4-cba13fbb7b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8955cb88-dd5a-402b-9da4-6f1221935717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6868b65-9a48-4641-8b79-4dccebefbeda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4b1d53-0a9c-4266-8529-7cd00500ee44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1a73bd-fa20-4db8-903f-ffad41d94c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78fd867-e45e-4527-b150-4887bc4c14b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c74af5-d05a-4886-8580-df6f5a5c0dfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84de17b4-3538-4725-bd9b-c44c582e9fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44c17d2-0f68-423d-b3e3-086368372681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9716c44f-85cc-450b-9dd4-70acfa271dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a0c794-f486-4fb5-a96f-1a497d243c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df515447-9a8a-4902-b535-c9db697eb192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73c27a3-3902-46f9-ab8e-db6b419f9374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1321ff-88ca-4198-8d0b-fd9052e8b2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e263a8fe-aac8-4420-a4cc-c00f0ac322e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab498df-90ac-4e03-82ff-c3da51b1a0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a70666-d347-48cb-8958-0e03aca1b873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d047692c-3bf4-4320-8184-8805df8bbc17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccabf13c-a8f5-4cb5-bba0-cdfa4abda7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17647a1-f7c3-48d0-b2e2-56663fbb3e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7deef4b0-421b-46a5-97bd-d4903354606d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666b8f6a-4bfb-473b-afa0-91c87fcf9a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17821192-464b-4399-9117-09f50725d724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae05476-9ef7-47f9-a7dc-5f9ff008441a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5246b3-b73f-43f0-ac8f-cd2692da6207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db86bdee-347b-402a-b564-f8b100b1ed2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21697c96-47bb-4bc2-b5da-bdc0f42d46b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12744a63-1d84-4bf7-95b3-fdfa63c237ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d576e0b-c85c-4d73-812b-dd9a65b4c5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5004983d-2a0e-45cc-8149-044a85d431e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fda3d7-f9e7-44ca-9f8b-da72465bc64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0688d6-1a1c-4793-bbd6-d27410f08596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30bc07d-ff31-4bbd-a654-30e70e69a2d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eacf7b8-3c1e-4745-87ee-e09e3764b59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecea5c7-cd01-49ca-99b5-87fc6c80ed67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd62e6dd-b4fd-4372-85f4-8717b9934b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82adb59c-c60a-495a-a4a8-a7b236396715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab771a07-9345-4770-bbb3-b1a9200fa10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f0458b-e48a-4261-99e2-ca0b1aecfb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2f4831-3e1e-47ad-8c11-82bb6123bd83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e3d992-436d-4dda-8be9-68fa282531b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fada936-bc01-4777-80e6-822447d67dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9765de97-eb0b-42e1-9aa4-236e0ae16841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0093514b-4819-418e-a0d1-e129ad699b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8a695c-73c0-46bf-b748-14337430ce51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60854921-6548-480c-a0fd-78bb6d581e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfac1140-9a2b-409a-8bb0-411b14f20f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1ca206-9bb1-4315-9f42-769b956968e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751b0d44-c886-4343-ab56-507a9707e3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f57216e-1067-4c81-8286-635f462dc48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22b505a-f971-4133-934b-fcfb9dc456bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2992ad-8980-4f53-81e0-47f573d01a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a89a86-25c5-4f8c-a442-6d239d9996fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b11eb8a-8ebb-4eda-b0e7-d5a8a31484ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d8f5cf-f471-4aa2-9730-66a736d3daa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52379669-9450-43b8-b334-bf458bf4d7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00428173-c695-4734-a1de-e29131590daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a95b8d-7867-4e59-ae13-b399ceffa3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff43e404-4939-46ca-81ed-4b92e834fb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4efc3fc-ae92-49bc-bd41-5528fc97a6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e7c31a-5a61-455d-beb6-1d47300b35b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805fd6bf-d536-4af8-be48-d8b35399ed4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33665541-868a-4b4b-b443-aa000b1864fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60aabc7a-3855-4ea7-93a0-279594f379d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e455b4-d8e5-44af-8e17-f33ade767573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288e8c11-2c66-4f38-b2d1-418b9b9226a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce45eb50-fdd9-431a-8c62-1c0fb803f80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af52f64-00a3-4dd0-b96b-c5b4bf713804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30e171e-a18d-459f-8ae0-96214e4070f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c51a070-e841-4262-8db9-d1d186fba1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf763b29-bdd9-43a4-a6c2-dad86460be64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe6b1d7-0294-4f1b-92ea-adf6cf118101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b44752-5eab-49db-b852-2fe15f8c22f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973760d9-9650-4984-8072-0dc5e2764c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc14f4f5-5f2d-4023-9cfd-2cd63e9620d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4fda26-7081-48aa-b604-4c6ed01aa7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de0927c-8171-4d30-a701-c37088193321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9465537b-2644-4727-8616-577777c734be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e58ae1-d488-407b-a3de-ad468dbe369e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ea4a99-08df-4882-91d9-dba3ab839de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5f20a7-4df0-46fd-956b-2d61815049c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c73c99-2751-44aa-9a27-952ca0d7c8b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a0360b-01f5-4b2e-aba1-8044f46a1d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7009828-26aa-4377-9ce9-c92ffe6d3953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e83a1b-8fe2-47b3-b8df-2d66d4d51c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c3f615-f0b2-4a01-ac82-b740ff368356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b861562-ccfe-4521-8ce7-375952f144a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f7b858-61d0-469f-82e5-7cbdaac14f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8911c8f4-c5aa-48bd-9cfc-e1b3e01dc097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e13c37-fb47-4f13-88c2-ca66093123a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b529f5b-1b83-4d5f-9bbc-48aa39e23806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729c0216-db20-411b-a01c-167e1b9534d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5c4d1c-5d64-4ec2-a6d6-b01d9aaa2cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb7426b-126c-42bd-9004-4554c0bb65ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091a0635-3e18-45ed-9c2b-23552145f705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51d40a7-eeea-4f36-96a8-25bdf10bd712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec70c627-d4db-456d-967b-c16b2d8dd3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50246b23-9cc7-4b78-9542-db94fabf7df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75886db-2a5d-4251-bd5b-437bf328f7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020797c1-aa63-4f1a-96aa-35427cbc4a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85757fad-7670-4a0a-9bab-f5d5805b4b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4499356-794e-4cb1-ba31-4b3e533cd391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd635fc-bf3e-47e2-b931-d409390c7548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f30dea-6396-42dc-af27-1d7ae7d7c596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc220077-d3a8-4002-9a40-caa69269da59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027f9376-bc93-4871-b6d2-92baff24c17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93005b5c-ecfc-4553-b0a5-4c2d314db40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfff605-5374-4d81-a83e-ab7ff0ec887e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33282d3e-7775-41cf-9757-47a51fe6916a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24e9357-cf33-4810-a4d3-9f049ebfbb08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd3544e-d66a-4c78-a12e-1527de8ae286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89d24f4-e6bd-4ebd-94f5-9fef4af367e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfb4771-ca07-4702-92dd-246c07846ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12dbf542-1dbb-4dc2-a6dc-0fca86f86ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d86eb8-42cd-42f4-ad1a-d3fa1899595c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeeeac8b-8207-4f00-93c1-60a5eb0c7f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8a033f-5cd2-48cb-b79d-eb9a28262f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e46630-3380-4bdf-a90c-1c7d68c419a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b33a90e-6e24-4576-9401-dc784d667e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bda900-1138-496d-8d0c-fb06c014d40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e06d4c-61dc-4c5f-a8d4-5d83253cdbfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9981489-ab03-4232-b287-ee5a6d3679a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45441c9d-5121-46d8-8a8c-bf0c8d11dcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8989596-0f4b-440b-bc1b-820a5afa16e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e13e46-cd46-4fa6-8eb9-87cca31fb9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fa2e63-0ff4-4780-bfdb-3d77745ef840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b5ce87-c577-4a4d-8c89-fa742ac6a6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c0dc7e-2ed1-4340-89bb-3166342138c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee902492-7d6b-416b-8ea4-98a3e85b8ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cea1f52-3f03-46bf-9caf-eebf42fa3d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6ba4a6-7d5f-43ea-b7e9-08b238288d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851383e8-308f-4834-9209-1da6832a869d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d82fa5d-c04c-4681-a89c-5fb301da61eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6c509e-7a3c-4ac6-b82b-936457ba5d7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f69169-e59f-4447-b871-ce891ef1eb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8362e46c-c50b-44b1-b471-1dd1920d7082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccc554c-8344-4975-b462-a0fb08eb1bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2a81d7-6336-4de3-bc8f-6dcbb18d0f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccef2e49-7590-4978-8b08-486e6eb78356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ce1e69-e492-4fb8-bf6a-a91a0f77dcca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420ae7d8-bf44-47c1-8928-c164ba4b396c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b30f666-a77b-4a37-b339-a5a0d979bc08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3bbe7b-14e0-488b-a019-1b583c2daa19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32eca3f-15f7-4b78-9d28-1446ace43c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60357839-3a97-4ac4-9355-30afddada14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28cb7e1d-9135-4dcf-bcf4-4cabe8785694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f71e6fd-cb0d-4adb-b544-3f9b7d3d4db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f20d36c-18f1-4cfa-8bb0-ec23f3cce560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407064cb-77ae-4847-9470-f14a417a5657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f51e32-7897-430d-bd83-50a17848e767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc8f1e5-8a2d-489f-b402-91661a4077f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e85ad7a-42ae-41fa-9b15-d63d79f49021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7011a2-f5fa-4650-b664-2753581a7037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91367411-fc19-47f2-addc-98fe3e6a5e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086262c0-8ac5-4623-803a-c9c6a72d967d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6491c0-5d2c-47f1-a0ca-b66a98493260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d188cbd8-d79d-496c-8a92-7b05a648d251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e37b283-9ecb-4040-8868-d441da64897d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3208299-3b15-4ea6-a8a0-d02ba23f0ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319a91cb-a2c7-4a3b-ac91-63d288844833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd036e20-ad04-47dc-bbc5-b599a9ac87a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482ad0e3-7a87-46d7-9c6e-9d38df21f5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe2099d-0d90-4609-8c5e-2b6b7c9cffd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05a99f4-a31d-4e7d-a670-1c34a1542f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12eaf85-19df-4f15-822e-9c2331867361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda2b630-def9-49ca-b697-15e810afa18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f8cb7e-e749-4689-bae7-c783f782a3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96770cd-0436-44c7-8f05-b50446990125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770202cb-da41-44aa-9b85-83634613e7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d128a6b0-5f22-48aa-bce6-44bab2f9ea53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbb815f-9b3e-478a-944a-07275777b7ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e85200-d11b-41e6-a6dc-82a495fc6ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758e3ae2-b95c-464a-b97a-9dec6924f41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61e3c15-04b2-41af-a196-ab8723412eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ba11ea-9f41-4b07-bc93-60077dbf641a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5913dd-e199-4d2b-ba0c-1c032a3b44a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007df997-f8fd-4c6f-8fc6-7588b6376282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3c17a6-764a-45f6-9834-97a44703da07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5d347f-a014-4a28-ae7a-ec6b0ccd1e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0220e664-fba2-4348-a7d7-f786af5cdcce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5783b3f2-746c-4ca5-a194-2ca2054a2c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1271c4e2-ba0e-4cc2-a3c6-60b5362f5125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb03bb31-3a2f-4751-baa9-c681e8f61fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b521ec39-64cd-487f-9d3e-b519157bdcee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716441ad-71ce-4762-87e0-a029bd937eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1894b9-9481-4554-824b-c96c8fc9cd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c51ecf-5a08-4d98-8425-5bec2184c502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca224f06-21b4-447f-b477-2041bebc6ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831a601c-75d8-4c70-8126-b2cee02af786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877645ac-a92c-4672-89f3-503bbab00bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3efe72b-0447-45da-bb32-e87ed8c5baab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b11a5f3-3153-4876-bbc5-61093bd09473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c644101b-b963-45bd-a9ed-84ff80974cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01365df-08f3-4524-aa75-25a214d8a47d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8534b0d-b17f-4c1d-8e1f-4a08365ee233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7e70c5-01a7-423d-bd9c-21e6a7e6fb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3491b782-fee1-431b-a84d-da090bdd11a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aba944d-ffd3-4e62-b9dc-223bba0e3ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2b8d48-0e60-4e47-8218-9656057405e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8766320d-1e96-46e6-b2d9-46e7d2611a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e679bd7e-facf-411b-bf84-e1b92ef3ec50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca8f48f-ad5c-4856-b1be-e118ccfe5ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f236a82-53bd-4eb6-8b94-e879ddb5d818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334c3b07-6c9f-4a9d-af84-42af45382e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2f0af2-1866-48ee-8bf8-b8f667d81ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f378e17e-c68c-4cfa-ac6b-dc02c114b988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd84e14b-1c29-4319-ab47-cbdd93c9d068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a957eed8-97c4-4ef6-9c0e-eef9f17c4e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93dc8aff-9d2d-49e8-a606-c64b7bdc4a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4206870e-8bd7-4302-b0f4-c37d058a2b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65edff9-da55-4eb8-bbc9-7c62ffba6423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e38cc46-a62a-489e-9a11-69b041793cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca22a8f5-d6ce-43c0-b867-fdb487f59bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2adeb32-33ec-4c93-8a0a-fd6c8847002a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca67806-c995-4c8d-82a4-0ad54688f78c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11da2ad-58af-4cdf-8dcb-cee81d701c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9d9f5e-a12f-48e5-9872-ff3b21a2ba33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdf4aec-8150-4086-99a7-4aa3af889bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb74ab4e-db9e-4d6c-b1e0-002d7938013b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8cf325-45be-47fc-91e1-db64018b55b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176c2adb-a7d0-48c5-87ec-d87319a9c3d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8394c2f-4869-4f31-8888-78c48b701051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1eaa31c-2260-43fe-be04-56b5ea8bc70b", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d47c46-022f-42ff-b7a9-441cc3a7ba63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6baf0f17-ecf7-43d8-acfc-e07a0083e4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd96629-952d-44fc-b230-cf878964abd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179ac0a0-f795-4b0a-9cdf-b22a5bc06b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60122c75-f509-4469-9a16-c32ab48ea7d0", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f21bfb-cad8-44cf-a291-313bc188c6b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7810c0a3-d026-4b54-aa66-765747a68ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4a4086-b50b-4a79-be85-4e4cea31c0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25441b2-631f-4eca-886f-e232859e0955", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497af48c-2c9a-47ef-9c17-018e187b959b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1890e738-3c4e-4b38-8694-7b1ab104bda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08e2976-a41c-4ef8-b55b-f6724c2009e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb1bf78-13f4-4fce-80da-76c3ecb9a9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d482053c-6099-4a31-85f9-4b32821304da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06cf3fcb-c7a3-4a51-958a-3b3602fe859e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a6ba28-eed9-4fe2-aeb2-d2b9302c3adf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e44338-713d-47da-969a-97e0a0ee7f19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.108.197.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6c729a-934b-40e5-b59a-a7460a59a4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.181.112.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd1b820-fe9f-47b8-8ece-146dafd0bc79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.20.71.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330ed1ba-61a0-467d-b4c5-f3e9e936fd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88023d4-c494-4813-9cf3-3c862c1a6988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef391f9-f15f-4ed2-8c0d-eff73d85331a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421ea4f0-0a7b-4c9e-848f-7bd30fee5f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fecdfe-4839-454d-9d35-cfa15b082888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f2fa65-2d50-4739-8293-caa4ce43c1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb9dfb5-a7be-40fb-b4fb-4427b9398054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49a95f2-4639-40aa-83fa-e926be9d81de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea261200-d351-4974-b3b4-6efc64fd7fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b434ccc3-661d-454b-ba94-7513c1903a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e25369-b250-40ab-ad6f-9ae81593abcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1879f5ab-dbfd-4e2f-bc3a-0716b215aeba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3de552-aea4-4582-830e-9a0e65e0e8b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c372d23-42fc-4c2d-b496-d7cbddfce2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5107f474-87d2-4c74-b008-4107b189899e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e646ba50-a39b-45df-80d2-f59cd2b6bd4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77aac6ed-e03a-43c6-be0d-da04bc3dc558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940a1ef3-abb9-49c0-8dd1-913874a7448f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9efa4f-89dc-4949-a4c3-f3a794da8861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b10f366-e44c-4957-85bf-779aa7541c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0252cb3a-9377-4938-b725-e0c31bcdf922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0511df19-5016-45f5-bdef-eac25f939db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0659e04-e586-45d7-aa5b-ddbcb325a484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdb899d-c4ac-4f95-bf05-478977ffdd3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9419883f-b2e9-400e-b048-131aa476aa44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb7258a-08e6-409d-a471-f9906df2e530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c06bfb4-593f-40ad-a993-8aea64e1524b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad7d41e-2234-49f4-bfca-f48e7b9882fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2de8c5-00f8-45fb-b8be-ec745f6f2a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dab2933-f94a-469e-a9f7-45b251408bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618b14da-ed20-41cf-835b-4c36ddeafe11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3635ea30-0715-4a83-a938-2542240544c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b1cdb0-77f5-480c-a1c7-fddcda18f201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b921c7b4-737a-4390-a52f-1da9551a3250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67244aff-17d1-4cfa-8fe9-552e7171a706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf0e983-8c09-4e67-8f6b-8e8334005faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb45a5a4-591a-45f8-863a-3b41fbe62672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4d5a54-f516-4343-b528-6bdaf0bc2362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b795b7d5-a100-4730-ab44-bd54fb9b13ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e7c818-2283-44d2-8783-57a2c53d6498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dd6226-f2b1-4384-bfad-3d6e97166c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c8505e-c8a8-45ad-8ce5-e5c8d09062b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e60a791-79b5-411a-ab96-fdd3142773c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca9dbe3-371d-4d8b-8f43-c247c47a6afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853dff32-538c-44e8-a9f1-d0e5a284107f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f17b7e1-6505-4f50-bc1c-b6efa6362f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86e50bf-2893-44a2-834b-6e49d8f1b190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b4a2d4-aba8-45fa-9d00-ec9cdb0d1cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7c97c8-2ff7-4d32-83ed-9da030f6c239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd0406b-ff5a-4e41-95d7-4e8cf02fe75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92771302-442e-4b09-932d-9d5d8979ab24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be2c10f-2d50-42c3-9c7f-03d6d661f976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a995d76-dcf2-4fd2-b7d4-3ed6a7ca8bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10da5274-64bd-41e2-bbd0-396ecb6aae3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d737726-1517-4e48-b8b4-d7e48e50b020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5eb3a7-e9ec-4932-906b-775843830e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040dc496-affc-4d7f-a940-9cf4aa903b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984b5221-8ac4-4fc0-9113-39bb022e171f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfc4b14-ff49-4055-a047-5c3c7b50c139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b87d94-141e-4994-8ce4-53ae3f63cbb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb58d674-1645-4475-bfcc-ec564306863c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15595b81-c763-48b4-ac2a-b0d1bae8725c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b830f65-3d38-4ac4-affa-7fe9fdd69459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d4edb8-2534-40cd-b099-6b9b90aedd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6ebdb9-c809-45c6-b265-16f689355930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90537b56-c7d5-473c-b9bf-7fda288c1e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbafad7-cb56-4cdc-894c-90ea9270ebdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd20414a-15bd-4467-aa6c-e95751678290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3b5a5a-c7ea-4b12-aa3f-7f929bb7e775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85761858-1510-4744-8021-f4297d92e399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc49c97-99f9-4f5e-a91c-baf8f8cb8737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b84b76-f861-4687-a375-10f59d79baef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdd8b7b-c751-4c16-9519-302491ca5146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d4841a-5400-4b49-882c-e472bb4e1305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af8ef66-3a04-44ac-a200-bd62c41fdf55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d840a3-0328-4f6e-b27c-abfb145a0211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45524316-2f3d-4011-bfc6-59b94eb7fbfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e86b72a-0a31-40c2-80cd-9f868eda731d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cab606a-3eaf-4f38-b9a0-82e9c9807c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c49d97-d620-4ffc-a7c3-2891237690d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bc2c40-5056-43f4-85e7-fbd96963a1b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885196ba-88e0-446d-8c9c-38df23f00c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7499be78-5ce9-4a7f-9b0b-112fb477bc8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158eea5d-9073-4b6f-97ed-34acb9ab2dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f10d52b-4de2-4e76-978f-705d9ae40533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05335b95-41ac-43b6-8390-9752635da4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472ee7a6-1f70-479d-a550-ab37ebb45f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b64bee-d794-4965-b146-37c7b1ffa734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddb78b3-8cc8-4802-bd82-f505b01466f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3777ab9a-6da7-484a-941d-e7d14ce4c0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da401994-4c87-48b4-a834-e0598ff1a620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ef3744-cd33-468c-ac01-dd10ac4f59e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5f0f3f-7159-4cdf-8bd4-6972c65a2098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cab4b01-a6de-4aa5-98d4-3cb6f99f13f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6373a8c-716c-431b-a8e4-567f259af75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931da62c-67d4-41fb-8389-622eb8e90e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0e6ea3-bad5-45dc-a675-729795c1f6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e83948-3a7e-4ea7-8716-29e3af9b4da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6855f864-fed7-483e-ab9e-4ea0f83f1801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5a48ac-5b63-4d1b-83d1-e69dbe6d306e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dffadd5-44a8-4cf5-8df4-f35a7cb55243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e24662-e1cd-4ac6-a6bc-fd279081a42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7463a4cc-b765-4dae-b771-b581932468de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e7d4d1-ef3d-4d3e-8dfe-3c6276312202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f03c56f-5dbb-4fc8-8bb4-a90f6dcfc45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d0c53f-82c6-4f07-b180-44cb285a0e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7b0118-fe80-4c57-bb6f-b0748932a20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3079a548-1f13-445a-b8a5-e54642b3d412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d300109-a965-48b5-8033-f968de06543c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb9f58d-c2b5-4be7-91ff-be768fc0baff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83552995-59b1-48f0-a7b1-8cf5881b4690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821b3ed2-d876-437f-8920-3edc0bb5fc0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315a6b57-3b80-4976-9a29-2e42b94cc97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb2d9f5-4167-43a2-9225-6c5ab533e910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208d0027-7d84-4778-9bc4-074331a758a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4da2cd-27a8-43bf-ada1-77d25c79cd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dede9c8-ba25-4059-9efe-31c661283259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb407b1d-f04b-4e11-906e-21c032cae6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c089fd-1f9f-4ee9-8a50-bd4dcc92c9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6dbd5fd-be16-4250-bc09-1d9431cb6525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77f7121-5321-4c68-8e0a-eaff6f95095e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe59f859-2dac-46d6-9f94-e2ea2240de21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a734e2-65af-4329-b5e5-7489aa0f8955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b6b870-222e-4179-bc35-2bd158c155ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad69de4c-c78c-4ca9-ba9f-b447b16541bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d61f122-2f50-41c9-bbf8-b8ac562e7c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92299319-05bb-41a7-9737-2f26d43bdd27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4947dd5b-91ca-44df-a58f-b0fc9f56f451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cdb053-fbaf-4698-b061-cb792c4d8c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5837b6dd-b330-48b2-872f-46ad597713ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f8c12d-99c4-406f-bd8d-52a00aea2be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6013c9-a739-4103-9c94-bda816ab0ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63504bf3-58a2-4f0c-97b2-5b9472c29a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f060e3ff-d847-4bb4-b260-b9322d06350a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47486e91-d0f9-46a8-aab5-1ef290033c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--471af187-9e85-45dc-b621-ccff0a92b0d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdd7877-c5d9-4cbb-8798-14e7cad2ae97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a8149e-816c-47df-a6e7-17ccc0a8002b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c19b6d-d13a-4ea9-aced-0fc742749144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32974b91-e2fd-4c31-81c4-23670aa282db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00580a82-8d92-4763-b1df-8ec9f641aee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c46504-8a70-4454-8adb-a72c9b6b8435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5785922e-7241-4cec-841f-16cbd0d6cc48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cd11a1-1885-4614-9a70-c62d9775a5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3383a90c-6637-4ca4-9e5c-1862eb6a9a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce6332b-07b6-4467-bb6d-64c35527e978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3379d0-dec1-4270-ab6c-d5cfe0863480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991fd376-d819-4ac2-be60-3e9e059df3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9100f2e-ce87-4d3b-a7bd-4bae19877c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2294e0-f3f6-4f81-8d64-628183c83858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622b5c4a-4a21-4444-830b-c54939c5a554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa454b38-4253-4dd6-9a45-bd3aead2d8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d2598e-1405-41dc-99a2-d43d2c2e7f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1610da-1605-44e1-b0ef-f41de783cc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408da772-2563-458c-96ab-2f1cf01fdb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c048fb05-4c7a-41ec-9cef-ca2bd33dbe74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1521387-da98-4f6b-a532-87023b52e0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277b4c90-b72d-4754-853c-7866123ff9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba37c5a-9543-49eb-8774-a4ca7250ffa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544a42fa-c2df-4b09-a16b-f5ff7f1841b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70456fc0-6b24-4e33-a427-ffff4199e3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f753b0-5d7e-4410-baae-b07bc50b150d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f1a757-6063-4db6-a9d7-7df9a0eea906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfbae51-cf62-4148-abdc-c9e5cc35c0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eda05d7-ab20-44e7-a318-66d0b80d6730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68298daa-0633-48e4-b06d-c534cf232746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad8312c-5780-4839-8992-3355b84984a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dce9cf8-2295-4d43-94ca-bf4aa3ed60ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505710e1-d2ad-4605-85db-166c889c5be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2694db28-ef9c-49d3-8f71-3b19905b6a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1049eea-cfed-4986-9a58-6e1a5ae75373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a910611b-7ecf-4e1c-97a9-d40d7f1c7933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0047835-77d3-4c75-aefe-cd3d5905120c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fafbd3f-9312-4fac-b21a-3d633c318062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52be97ec-23a0-4380-bbb2-8c2ea6beb31f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d23f257-cf6e-4aa5-925c-6f4e66cef084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b732605-61a4-4b7a-955f-bcc656fac7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45fc1d6-90bd-47a1-a614-27194c3aac88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19b025f-0a44-480a-87be-cebae4875912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20596f6-238b-420c-b526-4c5e5616eab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010ac752-44fb-4d82-b2a5-79d7be5a40b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31a2854-bded-41b1-858f-99cbfe355402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46648ad4-bd56-4b81-a444-5ac5d90e45a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c183b9cc-2de8-4339-b3e0-6d95072ad6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f92fa9-e172-40dc-a1c1-118859bd667e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52bbbc8-c926-4bae-bd48-2f84d8609dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1cc8d7-673d-41ff-a564-5132bfbd2e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ce1f53-b093-430e-9a1f-d67c7c74b837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75337d9c-b87f-4861-a776-46978f1cfd9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92447bf-e20b-4e8f-b1d9-090ac03616be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b680cc49-84a5-4036-a5d8-fe8e991111e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.11.124.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a2cc12-a2fb-475e-9f81-cf4ee2ee989b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9341b5-5509-4d95-b46b-212e9b94be45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3f63b2-4758-45d6-9def-27b08a22d223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee18de7-9cd2-4f31-a8ac-181553df952b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4b1e87-878a-4374-bf8b-85e718a194c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba8c4fb-d955-4eb5-bf08-a403c2e74891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d6b3c9-fdfa-4fae-881e-7755213e0408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29042d65-72f6-4a81-baae-0ff3dbf1a7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8636592-9d11-4853-835e-13ca16dee4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba98ede-9eef-4d3c-8d9b-7acd8d9cda62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6d7eb5-e12f-49b3-8090-74be8ee4df27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fbb9c0-8161-4d85-a7a4-3da679a20baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021cfa18-19a2-40a1-875c-7346ee031077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9694de8-ad39-4fdd-8119-1ad536d68a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57e0204-1b9a-4314-a814-55e6c476b2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc577ea7-8638-4b02-a123-194a907f654a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce28e7d-386d-402d-beac-8a4c993fc6d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec2c996-89c5-47c7-b099-a716268dad88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b2254c-c90e-4e57-b8aa-e14108427a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbfeb79-bebc-44d7-bf41-7155c2947ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c160d6dd-e992-4a84-83c8-fc39863382e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cf1793-e85b-4a15-bc76-90e526fd8297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324f2f00-4ff2-40cb-8b3a-be6beba65014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7c1bed-5e1f-4204-90ce-6dd603bbd536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20e5a33-1635-4870-b9de-4634ca77feba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546a5bd8-de35-42fa-b4fb-ed7db79c10e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a51598d-5e33-4540-9052-c09ca733bf72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85078012-a207-4f6f-a846-2b13f9aeec48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2251cd6-1ff6-4080-ac31-005085ac9dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c5bc72-2a3f-48e2-bea8-830af9fed7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46afadf8-6553-4400-8eb3-c8fd42145a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347d29ef-06bc-4f30-86be-a999bf6f9e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06668e31-3714-484b-9229-85890706f477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--addd09ee-2da0-496f-97b5-e1e73809d9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81df274f-a133-4068-99d3-d4b30c2a849d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5557854c-d43f-4785-8ff9-992a3d40954a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07361a7a-3cbf-4ac5-aba6-175b298cfc5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a31e3b-d865-4793-88a6-24e1ff80446b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a016ea4-7e01-4221-bff3-d27389586d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90912754-cc8c-4788-a919-1dfdeaae61fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3c210a-0548-457f-a3bf-b33661f0c7aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2740c68b-d241-479a-b8b7-b270897fe7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964a479b-7f74-4e97-9092-033b03bcce74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b1fccf-584a-4aa8-93a6-04b7e9f18391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df577e2e-e91c-47fd-b5f7-d3953748fdc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005378de-b0c8-4a22-b34e-061dab196952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab1c69d-09a5-454b-b964-11e53c77d710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee32547-cc59-4f69-a06a-754e625d1055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7563715-2850-493a-9664-57008210b6ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624dd778-45b7-4e7c-a3d6-b3b7709408ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f47b2b-5ebf-475a-b373-a1c207562f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148bba2d-bd31-428d-9d58-a0ac28021d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024f616b-60d5-473f-9595-6f3b04b4c76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d109e2-96b6-455a-b816-bd9fd43282d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc55b13-505f-4d63-96b6-5cea6449ce6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27692e6-54dd-4449-a407-d284d0707ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565a7e5b-4034-44b1-892d-bb25edf1a523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8f3628-fd70-42a2-807d-1f488348b044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fd697a-1cd5-4829-99bb-5fc1f9999445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d82b570-cce1-49ba-8c80-37e0ae9a8a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c95d1a6-93e3-454d-9fe8-c950373c15af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfe5a82-9645-4932-8143-c707db4687cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec28046-85d9-4ba9-afe8-3602e9e7f624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3cc25e0-e78f-446e-8735-cfa1300127b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4510f0d-ff2b-4fbe-9b51-9b31f149a260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51fa48f-0d5b-4255-9236-e9cf068cfcf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d3d370-8715-4a7b-93a1-3071ba6c78d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8be0cd5-343b-45c3-8f42-aed8ea7bb5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747370ce-3e48-405e-8349-6a03431c7cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602c990f-5d7c-4a2c-8f48-88bd51211f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b55641-9fbe-4358-bbc6-8e7bad15ac1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90dab538-f0b3-4cee-8893-b8d8ae8a8bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de19c0d2-d301-4980-b8db-113a2a83ef88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0f2e1d-ae2a-4de3-be87-d0670d3c8493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ef52ce-b1ce-4935-bafc-2acbe19e96f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323e5ec3-1002-4ec1-aec7-c11131e96e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e096b2d9-d3f5-4476-918a-9c05acff46cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33aaf03c-b5e9-4e33-97b8-41b891d7ebdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083b6c88-e221-4fe5-a19b-1f998ce9d05e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a94b59f-a711-45a7-834f-1b9467ea985c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5b4064-fb6d-4f6b-afcc-fcac959495a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b49911-bd5b-4325-9f9b-cb2748571a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdef99f5-ee21-4514-b0fb-f3c4338ae20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316bfe7c-244a-493b-9de0-6141949b69a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d8bfb6-80fc-4ae3-8704-f759b8985549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3ec9d8-2c96-456b-b9af-8704fe1b7c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bbbb6f-2022-4a5d-ae87-8bd08d1e767e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd173a2-ec2d-4816-8f0b-9812816ab491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee82f504-8ac9-4197-9df7-404d4c52d245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116c53e8-3507-43e4-8742-0852df1dfd1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682c6908-d12d-44b4-b810-99f3b3b6a916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f340ac0b-80d4-4dec-b910-ea607eb49303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700cc31e-9ab5-45f6-87dc-12151426465a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8b18ed-c294-482d-b414-e560c01bd0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06daae7-c4ca-4e99-bc2d-cfff7b767101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ef05d2-0959-41b0-a3ac-21bd036de785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406c9965-79e0-4dce-b39c-6af647995f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31713a79-49a5-434d-8866-e6edb7ebd533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11fbac7-4f18-4377-a71c-84d128f65f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6427ee-d853-4283-9fa4-5471ebdcc77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c992a5-551d-458b-a2ac-202b069d9942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415d56a3-d259-4a8f-943e-fbb9796cc014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1e2566-9816-45c3-a3c3-f8bbc2226bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44450793-676d-4174-bc8c-ed9889b4396e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9542e0b-413b-4ca9-9106-bc7cdf462d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055d3149-a4a2-46d9-a1ff-db9fd329b680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e869107-769f-411f-aa62-744165881293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629bdabd-a988-4a5b-a1b3-39600a1b1307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b097e60-a5ab-436a-bf7d-8e8405a1b0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669242e8-0102-42b0-954d-e09d79f82954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8285c2ae-d671-49cd-94cc-768fc3fc6591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2776e4c0-8bf3-42ac-87a3-85a5758cc675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfcdf67-c5e6-4fc8-b45d-4e8df4228dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a684b99-8425-4be9-ac37-f71370df797d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c362dfa9-5747-4db7-aec4-7b033638caea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c105ea-7420-4349-97e7-1d5d10556e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f987568c-34b4-47ef-bec7-06250d92624d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073af6f3-2243-4679-96dd-2b5b637e39be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3407d781-f158-45d0-ba4e-12fbd1c5af95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11aab9cf-3445-47fc-a0c5-938c87ccd8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443d263e-b208-44ab-87a4-fc03bbcf32e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3ec6c7-425b-452f-a286-b861bb6c3137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc3d856-36ca-442c-bbcb-da101cc85c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620ce47d-de15-4a6b-86e1-4b7f887b6df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147c7391-9dde-46cc-99fe-7088ff5e4375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19931c1-5552-4c84-98b0-f2e3f795f248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c847a6-5828-42f0-aaf4-279952f537b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffeb8a8e-252a-4db2-a26b-f295ee1a9d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f386e58e-d853-4fc3-8f5c-549a969b06d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47ce06e-b792-48d8-a466-4888af82a0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44900aa4-b28d-4385-b31d-43b4ee825dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c39874-578d-4d34-aef7-d7a73fcdd74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dabc9bc7-e2fa-4771-94a0-6e3db27a8963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87287416-8668-4d5c-908e-14fa7b46e5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f487111-2087-474e-b630-019c2910257e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba73ee4-5739-4cac-8d55-dba0ce309b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e05d79-f267-4689-a07c-f669720758f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2ebe3f-45e9-40c2-b5c0-6611b02750ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c206ba86-3230-41d8-9cb9-4523f062d43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564a9397-ea7c-4833-bb48-de1bb7fe6882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9343e2-1132-4f65-b3c3-1f9c611e6900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c71c74-6d9f-480a-91a8-a603a2c626c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cc0f75-0573-49f1-a8eb-faa5652cc4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690d1177-612a-4beb-a370-89b8d4dd7c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861ab439-6cbe-4b89-81b6-4165552651ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8903aaf0-1894-4fea-b9ec-a1602b18c789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19cea19-83a2-4fe0-81d5-334f10ed00d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b59ac6f-3273-44b8-8aa7-d7c1a27c8d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f0bb3f-9057-4077-8b5e-9e2573b740bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abca9c84-c18f-4e4f-b646-1f7fd50b487b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d19170-a9ea-4d3f-bbcb-6b7e1deb80f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f1324c-b5c5-41f7-99cc-52997d92b694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c703a63c-784c-4258-b76b-73f66ead9064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dd78ea-17f9-4613-9ce9-98b83fdcbda7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65fa3d48-e6b2-4590-ac9c-a3fb39424a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2510c0b-6776-48e9-ad29-3c66cb57642a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54037ece-659b-4d68-9ab6-98c83335d45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91213522-a2c0-4694-ac73-fab947222230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808e3d11-0b34-469f-89c1-b22cdb74757b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07dfb651-353c-4fd7-be9d-adaf820b4191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1145ebc2-9f76-4514-a42a-5bc923d6efd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b73200-da50-442e-b349-e15fca0ad544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a379001-176f-4536-b5f7-5537978b8ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06347f6-c3a6-44d5-98a6-a0a65b55691a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d38b9d-1137-4b86-9b31-588604c355b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4c61c1-df26-4527-b77c-2ed7ce2408ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ea9623-c5cb-4b8b-98d7-80e322269d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b842b30d-3e56-41c6-9a3c-ccebcfb7ed3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe5486a-af46-4f30-a44a-545e11e397de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d991eccd-3c8a-44a5-bfe0-7e968ebc8e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd216fa-217c-4ec2-8b80-b74f3987d669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ceb8696-36f6-4666-9761-960d1752caa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe4eb8b-aee7-4382-a526-d4156060c936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8e534c-2cc5-4d91-9f7a-8107e5f32ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585695f2-6e7c-4cdd-97b5-3ddcd9e4df90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043c11a1-2891-4132-b297-09f422832aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27352a30-67a4-41d5-85a0-65b66e3631a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb5c191-8db4-485d-8a1a-686418bc4ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289064b7-db5a-4c5d-99d0-ed75db548dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49709711-c534-4a21-bd49-4523656da4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef462865-d383-4366-b007-786779569aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a474de56-739f-45dc-9c67-3c69d43ff6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2683ee5c-6a11-476a-be13-5d0da9102e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513992b6-2cf3-4861-a383-eebbd302b60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2909db11-2a64-4605-a287-08271ed86e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6cc565-ce04-4463-9991-4189a16fbf25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5395ed8f-40d6-4f08-8c8c-40cb0a83bf65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b06a764-1a3b-4a92-bae6-e1886677dd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0624271c-73c9-49d7-95fa-32cc89d25f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b4c592-0ffc-4f82-bb32-4699580c6c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869b75e7-e012-4510-9e8f-9ea0c79b792a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34158ad-86de-477d-b0ec-d8e52c21bb9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95bbd91a-2ec1-49f3-95db-f82b2b20780a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be407116-bac7-4aaa-8469-72fad75cc24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef84ca49-ce6a-4b88-9db1-8b50bcf9b2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc9b1ee-565a-44ac-9d71-20dec3d93421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc90f272-51ab-4b55-8be6-b64ff8a7b551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1273ec16-9859-4d3e-b8cd-76afaa41167b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0db9c5a-a11f-45ee-8d7b-3dcf16d7e97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b43a73-8e9d-42a4-89b8-140cbb1de054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06e9f97-6511-4fc3-9799-3220db217506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a35ad3-eb7b-4341-a676-1b0cb502f276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fca26f-3be5-4c18-8ba1-b203ae088d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ab75de-385b-4f99-98bf-79bdcde9c67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764ee37a-edfa-4ea1-be31-37a1726c4d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e6df9a-6f7d-4056-8c5a-957864a9139f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29bd29f9-c6b9-4541-a752-6371193d0f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f520268c-91ac-4841-b4c2-7ec6043febc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7209ebb9-6ea6-493a-b742-17adddcb04f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fd3da1-0f25-4113-ad4f-6428dd958d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556b8d48-88c6-4ec2-bb61-a9286790dfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e1227a-ca75-4277-b522-43a9459aa638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefdffb9-0da3-4df7-906b-45324e6f444e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd00388-2ccc-4a8c-a39f-4f78cf5d0e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c6a905-c43c-4395-8445-ba894adb25d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96693ba3-c2c5-4e4c-9deb-66f66ab8363c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a25b53c-8113-45fe-a2cd-37d1c04febf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1296730a-a941-4c7b-83de-8509b4c96867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7097cebd-e38a-4371-88f0-71f653f64400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d181233-2b0b-4640-9c98-fc81cd7c1edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad0bca2-0762-4304-a249-f2a59398758a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c7e75f-e92d-4a93-bc6e-32ac5e8d9431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac32a678-942a-49bf-baaf-10b0e6c21021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab9ca13-84bc-451f-8b0e-cdd2adef8be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae5a643-b161-4524-bed8-8185e14bfd0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4bc5739-2696-4c51-985e-bf368216b64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d61460-28ed-4179-a803-4222aae946e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d5791c-51d9-4c8a-bf39-2b1c72a65e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4918ee9f-d095-4bfc-83f9-f22d07deb39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b74cef-98da-4061-b478-aae9c0ce85b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c41de5-1f75-4055-a77e-59592c15b3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96656b93-f5d4-4d19-897b-6f38c26127bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d14a01-b0b7-4a1a-883c-5f204fb20f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e179df8-2219-4fa6-b545-7ddae4dcb834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069a40f2-a928-46d8-91c3-17905fb218b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4ece06-7492-4bcd-8645-5bc7188662aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc41de0-07ca-4d32-9a8e-13d8dbfc0ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aca4d6a-898a-4e71-b2f3-1504ff6daa31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ad7635-94b0-4ecd-8070-1c8603fd32a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a5746b-6d00-43ac-abb8-904241195609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3823e3-d4a8-4740-866b-f0b331b18d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a23adc-a26b-45ec-a75a-fd11375a2cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ac778c-a214-4251-bd90-8e99c36ed206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f563df-e369-4ce8-9eaa-f080a1005798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19aa8154-c3d5-4955-940a-d7a36161cf45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350ffab4-4108-4e04-8de3-478d85c46ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac7d8ba-a13b-45c9-9786-0e5bd2026d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f60e388-c2bf-488b-9b4d-90e07660842c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c150db9-a512-4397-bbf9-35e6947745b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b818dbf-9743-4829-928d-9d7db28cfd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b161cbd-9456-4875-9af0-8edc6f659e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd0dcab-3058-43a3-b62e-536e06edf6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4388db-a45c-441d-baf5-885918c02cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d358b5fc-c624-4fc8-89ec-7f49d6cbe264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37574a66-c700-426e-811f-655276359d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585510b1-5f68-440b-bc03-d267c3c467c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335deed6-1b96-4ff0-8099-3860c47df143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3ea096-688c-412d-9136-936485301605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060824fb-6e68-427c-8198-83606ccbb564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6463f6eb-3678-4a66-9474-a03e937865a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc345d9-edc7-4227-a356-fa2ff197a50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2cf3d8c-09cb-4b67-a3ad-74e56384d10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a593027-0359-4bc1-8989-1fb868e6f18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85487364-6642-41bf-b83e-3be0787288c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df998ac-f693-4c4c-946a-f52764ae33c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5cac3f-4c67-4b8b-8042-051f41458f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636f3175-8d42-4191-8812-18c555927d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973c26d6-ea6c-4235-90e7-b15c7636552c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99458d3-aea5-4451-850b-6ad33964eff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989af3b4-0ef4-4321-a15f-b93504b1135c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c83b26-f7ce-47f7-b2b0-ad264c4b1691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.154.112.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b34b36c-6d3d-4dbe-8eba-3d4b547585e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.154.112.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35df2d0a-0b45-4641-8677-6604bfcfd009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.154.113.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e544def-696f-45ea-9f81-0b91e9fe8360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac28458-2b5d-4dea-986c-436e9572fd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca3b6e7-3718-4c54-92b6-f4961a412740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2527a89-bb43-40a0-917e-52daa7a07f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dda13dd-35c9-49f8-9c23-97e3e14b3e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009d3891-a8c1-4a1c-b65f-b1a9dfd9a7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615456f6-9aa2-444a-9460-d787102d766e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e897ef-f7a2-46a9-b75e-c683efbe14d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7383f699-c4c2-44be-8024-9e826033add0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd603b0-6b1a-487c-8219-c8bd247d311f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ea1681-fcdc-4142-8ffb-9e1394c28ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.181.171.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e9431a-726a-4885-b76d-dcbe05fac564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.181.36.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a206a2-4c39-482f-b4f1-ed0462df5156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.201.6.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc85a96b-1785-4f8b-be75-6f8bfdbaf1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.32.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c2d67b-2d3f-4db0-9e03-675366429345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bf0e5b-902d-4cbf-a223-bd2f416eeb3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b2e15f-2445-4c8d-8e43-b80549120ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65d8abf-869f-4498-b970-11649588f978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d56986-5d2c-4407-a91d-00d3035c9bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4048c5f2-56b8-4a9c-8c3c-e9b8162ce85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b747668c-ec56-4519-9f95-89b6a8502bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93eb2898-3244-46d0-b526-4fe3bfba1a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb143d8b-22ff-4273-b5b0-9b9c15e2dfa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a403a08-bc91-4855-bf9b-d11ed797f523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9639819-fc23-4470-9d1e-38b429ddb312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c48aa6-28fa-42c1-a89a-93c337a8c0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3713f38-f70d-4230-8e96-46a20a84e24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9765fa-b865-4be2-98fa-9171aab2fad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fc9e0b-1ae1-4c96-a896-c707254ad7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3298ccb0-386b-4f65-bb6f-2b90ea51712d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96728191-e96f-4d4e-b917-7d98e5564ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22159b02-0dee-4b37-933e-5ba0c5eacdbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0619e5b-3bc8-4e3c-85ec-9d2f56da5010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8eefcb2-84b0-4b4c-b4e4-044939cf6ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7aca3d6-b0ba-4a90-b1e5-0819a7fdc4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd500494-1fcb-4dd2-b87a-30e27faa719f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bc3774-b6d4-4066-8993-298e5cd5eea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975ad6c0-c6c4-4622-a00b-6225b1b97d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34849e4-8aa3-4b03-8c51-490ce040294a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.62.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f892b4e9-137b-480c-96f6-bb2dae23e21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.23.199.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d140241f-899d-4fbb-9ebb-d8e78488b7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.235.104.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e76618-a402-41bc-bac6-ded8b77b86ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.235.106.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8920806f-f652-42d0-a63e-d7ce0cf2ff37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7121f828-bde0-48ad-8d34-0adf380f2ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05bcb18-ebcc-4f24-bfd6-2716871f9a85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0177b18f-5fd2-4d64-95c0-3c98b660b439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faae3131-f7d8-40c5-92a8-1b9d164a8b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7446bfd-cc68-40cf-aa10-7a52161dae8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.30.181.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7780825d-02dd-43fb-8492-b312ea86609e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.85.45.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562d800e-dfdb-419d-8093-75ad9a72d48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.90.98.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca68a600-d1b5-4f04-88af-5f24982f817c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.92.198.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfea8a65-12a6-42d5-8b5c-31926db80308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.92.198.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c18dd9-6cb3-4612-8280-03ac1fd27b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.92.2.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d53245-d365-40ed-8fd9-04f27d6eb6c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.165.171.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39437a0f-4bfa-46a3-bd4e-9a1d2308d3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.149.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a9ec6e-e2a2-4cfb-9bc4-001cc8c7b556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.180.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41a8a01-6db8-48c5-a4e9-fc3747e502c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.21.70.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673812cf-4290-452a-bce3-bb1340a919cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.211.219.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18ae4e1-8fc5-4dc7-a426-f12643f0aa3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.213.127.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2621a2ff-32f3-4fb8-9d41-8e96be7b1ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.215.244.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88ca004-a4f8-46a9-8fb8-1f6b36c63609", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.215.246.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6738f2-a8bb-432b-802c-49a484ef761d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.82.141.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3094ba60-4754-4fd9-9588-a416a5452a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.167.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ac3329-d7e4-44c5-a0e2-9652a96cf7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.100.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd0091b-c550-4d9b-8593-de994d61bf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.111.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3878c619-26e4-42cb-b33c-9d3f4410b69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.183.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ba1ed3-b4bf-4c55-8019-b97ab5d5bc09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.193.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2398b25d-923c-470f-a88c-11598e7af01e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.195.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eae5df8-3276-42bf-979b-fa7f8c300f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.204.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da67702a-c870-45f3-add5-9f9ffe5e3cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.223.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851a0461-f9eb-4ede-9dbe-c8692dff2fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6da15b-884e-434d-8120-859d0840f7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.220.61.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c64261d-ea9d-4e2d-8b9f-83ec595e7d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.61.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c80830-e619-49d4-b097-bfed37f9036a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.62.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78198b9d-b103-4b0c-8031-4d423e81e3f5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.67.112.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301f3e40-28b5-4e20-9d00-6ec1712f8396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782491e6-eebd-4338-8004-ec342e42bae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.69.177.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4ff531-6461-4dfc-b4a0-d9da1b207099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.12.75.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb5f123-e0b1-4068-b1d5-ffc0e1a942e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.125.145.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfbcdac-378d-4fe8-aa48-86758e82e4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebbd45a-26e3-42d9-8885-197ad5ec4b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3a54d7-fc09-492e-9f77-44cfdd02f981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a967d569-8527-4c8a-a7f6-d4549f47988c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1410db00-ba13-4a6c-bdec-d0c99952368c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c387f29f-b0a1-49f2-a066-218336c3b1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c652b825-9d38-401c-8757-dc2acbe1dbda", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.165.65.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f974e7-3895-4deb-addc-bc71c1eb826d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61773bd5-751f-4112-83fa-87e40840be76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7484b35f-3364-4ff3-b684-2f5f2c0bde83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96ea897-9314-492a-887b-595fb9643329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f174b02-5b77-432c-b1e7-b0da8dfce249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01c13f3-8dce-44e5-8ab5-cbc14c634407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bcbc70-e7e9-4908-9a27-3e70743b5177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1b66c6-3756-4e9a-be21-228b345f0f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa3f108-e775-4f5c-aba2-d0502b4aa8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de78bc24-f3f6-42f4-8950-214a11ff7e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4d935e-0163-45a7-b5a3-26773689ebe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4684fa-b057-4b81-aac1-af8f656b8659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6cf402-e84d-4f74-ad89-51fb0b75cc49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3726871-3618-4e4e-b89a-d67fd8e916eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c2851b-1d44-4107-8593-cc50248ee477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ee1e09-43f5-42b0-8781-9e7db0b25d4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745c6805-9ddc-4623-bff4-bffaf53bb42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff74dc0d-b647-4198-b235-c191fd9122e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f3af12-1d40-4b69-ac58-251932174b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79d70d5-ce60-4102-833a-5f0e8d22652d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fb3590-d7c6-4374-bf8e-802d624cf286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367238f8-9eaf-41aa-88f6-165c3cd30514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920153a7-5a39-49a7-9d08-ca3397a4977b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7112fee6-ec60-4042-b61f-c8f744783898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7f1e9a-e475-4a48-a9ec-b3f72601d87a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c24ea0-2b63-4f39-80c7-6f24b8c3274c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9cde5f-6b98-4b5f-8374-41711f12f3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40577b39-0a41-4eba-93b7-5431f086e4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d761dd58-2eab-4094-98e3-f009b14b3b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16744ad-b83a-4c9b-ba82-6ba49afdc347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64adb819-6003-44ca-b590-f19e50d0e693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed94721-824c-4b3e-a081-89558de5992b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe7e1f8-3f02-46c0-bbce-ba5779e6fd34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b8d07d-9324-4e7d-bdc6-2b98b8e39da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9330111e-4a54-41b7-b3c0-b6a50a10c9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eca315a-5f2d-4b85-a810-4551be8b0fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7611791-3fcc-4681-8552-3e942dd914ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a734a1bf-0e02-493f-99be-c9aaf3eea841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7ea756-94ed-4f7d-a97f-21b9e913a070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d0ac55-3476-4ee1-997a-59fd005d5456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a99bc8d-f862-4bc5-bf71-80dd20880093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fafa46-15c6-449b-a344-e5e29b60a738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9411b1e9-8f39-4298-ae0d-c2613d23b730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62cba57-dc3d-43a0-a4fc-bdec9cc00052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b998745b-bd8b-4f07-b78c-93e98874fbf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f033d1c4-e2bd-49e8-8296-16472eabe304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51782c58-b2ba-4e04-b926-e443145ed65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19856cec-c791-445b-a9c6-9a041d05844d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4c6e83-35da-4054-ade7-dc08b0c6c670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf51b69-3e81-4f8e-b304-63e79c7e087e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ec0cd2-3a32-41b2-af6a-fa347898ec66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ce0853-5f19-407b-9335-5cc655bde337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e90fe9-a38d-49bf-9708-56ccbcaa86a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b44a644-aa91-4d21-ae52-21c54845f4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834302af-e4e1-413f-83ba-ad3581af825d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa60959-4f05-4c54-a8ec-27fae2b1724a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c40bff-53f1-4536-938c-4a14fe8044b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2e3993-a643-4c13-bb63-7a2311d29fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b80957-7a61-4a5e-a538-1257a061af1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbb8282-2c03-4b59-b2ce-35589728c25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad521c9a-20b3-4cbf-811a-9b4d2a9f5942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4531ad-0653-4202-b9a8-3d72c075261a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b76a280-ea30-4595-bd47-aaa5426c1f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b612eda6-0f57-4861-85a1-bb28103a6366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c0fe63-04c1-4a1d-9fcd-7da00b9bb5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.176']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606256a6-8744-4428-9e95-16a6a892b065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb94bfe9-a10b-430d-ad07-fded5b7188c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2fe6623-89c1-487d-9b9c-650331e8a649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69bdbb4-6871-44b3-a7f4-a8eb24771f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a98f45-a31d-45ad-b9bb-dfbd013c42d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a397d96d-6ed6-475a-9624-28d6f539bc6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4699c4-3cdb-4ace-942d-174da2ac2e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b4a398-b900-4b1f-b507-e729788a211c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1795e676-eb7d-4bff-9436-6b2805a2af4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ac81dc-4bb6-4363-b825-da28685d8fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c99b803-c6cd-44b8-bb4d-86af96f43d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e97fc06-c93d-4637-8cc6-4cb408b19f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f1179c-f849-4911-959d-b544b0848071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef219c1d-391c-41fb-b877-577f1906a2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb72e9c-5878-4ae1-aaf5-2b82fa6fb8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf30bbd-df1c-4f5e-9325-c7aa55050536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17f6d8f-d193-4b86-82a1-6b5742daced9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3076408-6685-4238-bab6-fdcce669967e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159a2230-03e5-49b4-815a-ba05c2bfb5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73361fd-6276-4ea0-ac2c-439bd42ac816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0529d594-b678-4d55-a050-1c2fc127c289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaac01d1-695d-4b8f-a62d-80a8a1938339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4744647e-d4bb-48f5-be28-33d2c8b89442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176ebfa2-9528-484c-b2df-32af117e5b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e762fbd-c3bc-49f0-b638-50d30641481f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bc25b5-7ed5-48e3-8b3c-ae9b7eb064de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafc8fa5-4d4e-4367-b05e-cde070e1eb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f806d9ad-dc90-48d7-a2f1-61fd5b8197d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d088b8d6-1358-4175-83c6-c2bedf26babc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7331c9d4-5c1e-45a9-89c5-824c4463eff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9f99cf-c29b-403e-af52-260dd561d4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f789cad7-eb49-4782-8272-8842d537807f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61097642-6a30-474e-9e0e-2f9550d21755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce03801-d020-49d5-94dd-2f108cfded89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9cf9bb-bb09-40e4-9ac1-0c1cbc364aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2b8e0c-7363-4111-ba34-502bc3ab7e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4b9651-c2ea-4440-8462-da9210f9e570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a53fd4-ecbb-435d-8c50-07f6e1772916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56b6a51-7ec7-4481-b113-886eb08cb48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4892f338-8ef6-49bb-b47a-c03ea00f39cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2ce202-85c1-4c28-b681-89c4327d5639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7ae4e9-fa45-4642-b3ad-2f5110734cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60af6ad9-101d-4e93-ad43-7fc31d794205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f79853d-7988-4bae-9f3d-a567a7da4ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3686a9c8-42af-4991-9146-ebb149587549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a37923-9a41-466c-99fe-2cdab51ba0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602ef954-8c8f-409b-babb-b1e832a571b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8914b07-f57f-4251-b978-ea85066d96f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea773d38-2a8d-4170-b64f-3dfdc4786b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c103fef3-4469-417e-9f69-293f499d62e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197d8f18-40a1-401f-9310-b97887f0345c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3cfe10-ac88-4530-b05b-ee3c2083cc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2f818f-1c0b-41d6-bebc-93e39957eace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa46ce37-2fb5-4235-a7bd-5d182c782b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf6e39e-a60b-4515-b995-e1ad91927417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.246']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971d99dd-0baf-4b85-8f12-e8270778b5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8131f43-2b89-4f2a-9bf4-5d4206f02490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9bf271-b8a0-4646-a258-a67c2787f483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d94e5f4-26d3-455e-8eea-31ffc468b85d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b475793-05c7-4d10-9430-044c826ffc62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b46d14-88f7-47d9-80c5-264c804a4e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a96897-ed4b-441b-8c33-1ef74312d00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccd56a5-9aaf-4340-81d4-0c914cfe42d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248b6473-705d-41dc-9f11-a25bab41bd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f999723-e025-4d21-8b53-4f5f4058ec80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a013cd8f-8405-4f2d-986f-4f775e4e14d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa3a928-9b86-42dc-a88c-07b552a2a112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d435f0df-b71c-40d1-bf27-030eb8829733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb319402-488f-4dfb-8fa8-158e1005daed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8a0023-a945-4580-8311-cc471c1b6ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6d6971-35da-4246-ad1d-536613c17f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5012efe-0ddd-4f6b-8d2e-eb8e38025fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a45dd3a-73f6-4f2f-97db-b9b3e2c7e2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97654f91-2882-485e-87bb-466315201b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fb5f7d-0318-4072-a32d-c7ade4f79b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239ea441-9bc3-4b87-9f10-f1bf5bd2009f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5007c0a7-6500-4468-8f65-121ef2521d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d640aa7e-700f-4390-a18e-4bf288290dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e795b47b-31ff-463f-a7ca-90bc4279e6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d204ec6-b713-4f53-baf7-7bbe4cacce98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1007b22-e533-495f-a4f0-fd143fc46dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba09da5e-5512-4afa-b411-db82e0f995a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a44ddc2-f02d-42be-8712-26a7bfbd068d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11891df8-a935-4f4f-aa69-ab59f35ab128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180c5685-b9e6-4ecb-8983-16547d48e7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895995a4-e8e2-4bd0-ae4f-f76ca657d923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bacec27-87fe-4457-a9a1-6184288aff8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9228893-6eda-4f35-bad8-aecdece09771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34f3224-e963-488b-9112-c11a5089f180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3e54e8-2f05-42cf-b117-32619515cfd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae044387-199a-4739-858e-d2347e4a3a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e1d54a-62f8-43bd-bf63-16c0537280a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2c2d71-db4b-41fb-bc8a-71741f3e2524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c8f4d5-0f0c-48da-8574-95bcfee42fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4789e75-c795-43cc-98f3-decd1a6dbefc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356384c1-118b-4a6e-aad5-78cd9695ceb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5e0803-23e7-46ba-8f7e-00e9396d3a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e2f4ea-58bf-4d32-aa0d-e2ec2baa1366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d03b3e-1d17-41e7-a2e5-add8f97e9bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad33198-5263-480b-81a7-8f681c79f314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.82']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ae83ac-635f-4688-8179-f06c2f464e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51136948-90ce-4869-9146-83d4365bd614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e11481-01c1-4f49-85ea-dabb69bda3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3a7f4c-12db-4f89-be9b-8876898748b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b24d20-3653-41de-bdfe-d9a8fdd48e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da998c93-b9f8-4305-9d86-78672a208dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78c4bf1-b25b-4ae3-ada3-d58400eda66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb883ecd-9277-4748-bedb-52195f782a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c80dce-fa0b-49e2-b64d-1db594b63c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634bd40d-5df9-4c52-ac46-27ab38249dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9280aa64-edcb-472e-8df0-f38b305f9944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41918145-2761-4a49-95ea-db51e5430477", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.7.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1f49a5-d5b0-47e7-b772-1cbdb1de46c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.64.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad238fc1-aa2f-42ea-949a-84768a8cb179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbacdc36-7d72-4688-98b2-0b3838c7edd2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.153.147.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3eaa707-d5ba-47ef-baa4-abbd1096c4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.153.81.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f572c0-252d-4588-bfcd-28fe6ae2464d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.153.96.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa0be9f-5ad7-40ab-87e3-addc84a03638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.34.253.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade0691f-6dc7-467b-987c-1c9df963d921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.36.96.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289032b8-e48d-4c72-b386-32dddc248aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.19.150.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08e6ace-474a-4bb1-86e6-97675320511d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0396e123-d54d-47ba-acfb-941183126217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ec8165-d21b-454b-acd6-e80b64e5882f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a82099f-2612-4cbb-ad6f-df561d93a7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4ddfda-6564-4b79-a456-0f163263995d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531a75b0-1cde-43c0-b6e8-784ab40c70d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fbb43b-bf03-4908-89ed-f5d580c8d14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2da6e33-576b-40a5-a5f7-a98be04c433f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73efa029-d9fc-4e74-8f49-a20f43743c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1f1301-da3a-4bf4-9207-98d9b3a5938c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc94938-f5c7-4e37-bd5d-0e4ef8f0201d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bff114a-b251-47eb-a18f-5265531aa5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6fe328-e566-4fc5-98b9-ed421c5c47c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95380c82-a7d7-405f-a774-653ce55f3c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b75d29-f506-4202-9e0a-477def37fbe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.167.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e2afd3-0c5c-4e2a-b5c2-c8e4706610bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e125d1-b2fa-4e22-b944-59089b82fb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8b5045-55bf-43af-9c08-0f0dadf64c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72068170-a7b5-49fc-a4d8-931b094a997b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e047960-7577-4fb4-81b9-0f432367c79f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0089f6d7-f57d-459a-bca6-17584d779cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695ffbd0-7828-443b-a833-195591591c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e440fe-db50-477b-b3ec-1be321b4267d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc621738-e7a5-4cf6-95b6-e7acead4c74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2a3704-fc77-4258-9cdc-a572309f0535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af237a8-71f9-4b04-b4f2-1609079c155e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e033b7fe-42c9-4564-87da-2ff788efd4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1d79dc-96fc-497b-b6ea-fe6bedaa72e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32f740e-7f60-4a29-a4e4-222bd6ef0dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c900e0f-ca6c-4a3f-9480-f210d1638671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bb5f1b-cae9-495a-827c-04464b698b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb42922b-98c8-49fd-9d54-751a242a7ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ea149e-001f-4905-a8bc-3212fc7240f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdeb99e-a9e7-4779-a6bf-50e8929f917c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426511a8-6ad6-4f8f-bde2-7ea45510236a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5399780b-b78d-491d-963e-06a1ab1fe216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc487ee-2e10-4609-99e1-5124bc488264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.141.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e64ea36-127d-40f9-9fa9-78ba389ada11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.39.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbccaf29-7148-4dfa-be47-83f7ec8d4887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.54.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9e9445-eec5-428e-8c05-3b594730a587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.18.83.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1319026a-d877-426d-bd35-cbc4202012cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.26.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e47f07-dd81-408d-87a1-7694a4a8e479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.171.62.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577b5562-ea21-4025-a741-3e7d8ed66cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.204.137.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c6b1cb-1ec2-453b-ba32-71952269e0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.113.96.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b2a00c-4f4d-4660-98dd-9e33ee272244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bfab4e-7d3f-4206-9609-edb9e22071e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.208.181.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6e2a49-9ae4-4e78-91ab-49219a9dd67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.208.185.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243e45c4-d172-4a98-aa27-e70f5558d98f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.224.99.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8f5ce1-b60b-47cb-b0f4-620bb20e695c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.130.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81a10ca-dbaa-4f9d-910d-cba345156cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.200.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2dbf2c8-f919-4fcc-9d44-5c38f56e68dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.220.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941b143e-eef3-4e0e-83df-b0bc9b7c6c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.240.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777d1687-ea0a-4970-9b62-8f71a81f7b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.28.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed9246d-dbc1-4fb9-ae61-08c325100a03", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.28.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c7f936-6c97-486e-8b8f-ed2e49293af6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.225.39.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d9bf40-e725-4bf4-b78e-b16f304ad344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea864fbf-10f3-4c4d-89a5-d9e58a3e5a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7c5ea8-97fb-4553-affc-7f203c04ff51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.108.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edeae91e-d035-445a-93dd-50e2c56320ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.122.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4fc157e-4578-43ed-b194-3c2381a09596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.140.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e611fde6-a62f-4f8c-8f5e-8c7dbdc9d9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.162.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60453f5-c8c1-444c-b7de-4b609edc00be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.188.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a49964-a93e-48a9-911d-0e1d7ff8c54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8f7f96-f5f7-4eb6-b6a8-4cdf76872c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.129.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fb8868-f48f-43c3-a230-3c4e3d2a8266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb9fd47-5e21-4162-8d06-ba381875d6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74dc4c3a-1d84-46a2-88cf-f3403cebabde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f9ce92-5045-4659-a314-4ddc2275e35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b0b605-2ad0-4c2e-b322-d4efbf33d83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e3696b-59b9-49b7-bd4b-246d6eb38c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb02ff9-7275-473f-853e-6eed39a92952", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.21.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12612f0-e46f-4110-b7e7-543b4fd82d18", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.27.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939db87a-e9fb-4599-9a67-3c707955f083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.56.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57132cc1-3797-42c0-8500-579bde0e0f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.50.126.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9960e289-7d66-4b8d-8485-a15116ef74b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff5668e-bf25-4762-a943-09e6d56fe68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1705b8-38b6-42c0-8a67-7f2dbf56b404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c316c99-9305-4602-80d1-5ced2162996f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8908e63-d27e-47b5-b4f0-da2caafb506f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b7ffc4-1dc4-4f0a-beb9-75aa187e7440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e32665-d130-46b9-993e-c2874d362ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9af0f2d-c5d4-436e-9b50-9ff9f55ee374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0607c41-10d4-453a-a65f-0d2b2d6fe29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608ab9b6-d7b3-4478-81ce-6a068212da1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd18a8c-4411-4c99-a76a-8d9d9f3ac9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a2376f-d30d-4ee6-aad4-59331a87e57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8abce160-e4a0-4091-a490-04f56202b88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93d6050-5ac8-44ea-9b4a-3d40c907823a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d137f8e-edfc-45eb-8d60-527e54ad8734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49867d30-ac66-4aa9-8b85-a13e2e4a9735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643e34f5-1edb-4926-8911-e37beff4a072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf114f4-9b9c-436b-ab17-e77076f3105d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a82d6e-eb34-42ca-bc29-781a08d01f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466b12a8-ae7f-4078-8eb5-d0969cf6335f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da43d0b8-b5dc-49bf-95ce-7be87d48bb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32ac847-d2d2-4a4c-a634-a8d5d518dd56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364efcf0-8416-412c-8e3a-febbd7018f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8f2e08-122b-4968-a6d3-4166ae231208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be600848-2c3a-41bc-bbbb-8bea529309f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da83ea0a-d769-4efc-b46d-3c4d590c3f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f89acd7-b7fd-4d6d-9658-b76c5abc16ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c07b255-d850-4a0c-858a-9735001a04f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495f23bb-da4b-4ea0-8b8c-87e5e7614c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72efb95f-ddd1-4044-a875-cdb9124bcb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ca208c-0ad7-4692-9ea3-000360ea7fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b1650e-bc9e-4904-9be3-1378feb8fc80", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.91.127.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e125a7-09bf-41ea-b231-09034080c68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.119.136.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1939244a-50a3-4112-b953-373d8eb5ebcf", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.119.140.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc652e8-5659-4c53-8390-ae03b474dded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.53.229.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5f0b0c-752b-49b4-afc3-ed5a7939535b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.231.26.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c247fcf6-b7d8-4638-95cb-a837af9551db", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.105.161.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed044506-e48e-4e4b-a286-cafcb312fe69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.60.231.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a74389-7551-4e4d-b574-52a31d66ae55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.76.138.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7c8be0-8a1b-4118-a6f9-93b0c32e81ad", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.240.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea6f2e0-b006-48b8-98f5-29533032d773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.246.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e04c73b-6462-4469-b500-e39a5875418a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.36.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f43449-8166-4537-8dda-0e971beddd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e401fa95-8b6f-47ff-97de-7627797ef4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01645fb2-a0d7-4285-b318-a1095a27f0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2267dcdf-e657-4bca-a218-351422eb9bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417ab5b9-0e0a-4639-a049-c6f481ad486a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30629df5-c195-45ec-845c-44ebd85a1509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859acaef-cff0-4289-acbe-9954ac224ad2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f09367-ed7b-417a-bbd8-48f2b0543af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b63ced-9e92-4e3f-8563-097c780446f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534b6b01-5e57-4940-8808-23c4be7f1e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee14d97-da82-45bb-8168-d7fd332c076a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acee02e-d199-432c-a192-47c2d3b1d693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1261f6-0408-4117-99cb-59025cbd2392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.66.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3702ad6b-845a-4737-b20f-6f99dd05e552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a2071e-51dd-4ca9-bc34-b94b4b29589c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2c248b-744a-450f-924b-7315753eea3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48380bf1-53b8-46cb-aa31-971b4fdec087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.94.47.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d348843b-01d3-4332-8ac4-7e98fd4f3453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.95.203.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f0fefd-9836-4313-9ef7-40e39e1e28e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b99d14-cc57-4d15-a9ca-0e689a4b83b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c5c80f-b8c5-4b70-806e-c4f9c27d4660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c01914-bd5a-4128-a415-df65e0ad1c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6a7168-0aef-4db6-b877-0a1713b08459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.75.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cd4fd3-f5fa-4a51-96b3-02c2e575d11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3398154e-bfd6-4a3b-a544-1fbe3b429d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513ab4a1-e4fb-4667-8715-e922163cdae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0a75b6-e53f-4897-9240-d0b7d4c8b3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1692665-57a2-43c5-b717-319ad4591922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e4da87-d9b7-4431-b8e7-2787014ff474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17abcbd-834a-4508-85f9-01f6361bf573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16138f65-4eba-4e56-a64f-de8cc75ff861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b337e98-7d24-469d-b830-dd4f6cfdd6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3a99ff-9192-4e69-a801-8bdfe6407354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c620ac1c-9e0b-436d-aa52-97656cf7843d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5f9ef3-2792-4b46-b047-f319ab0ffdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb9904d-8553-4445-876e-195028c096f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d500f53-5e0a-4d65-8434-7096f17f9c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b865ca-71d6-41d4-a862-896451d8b2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e1dc9a-c6c4-4efc-96e6-075f11137943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b08b7e4-44d8-4b08-8476-82b92495bef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfc7b44-ed7f-49e7-87ed-f115f39d67f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f142fc4-1cf3-4d62-b2b9-c9c400b75292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcaf236-5137-46f5-9c8f-f4d4fcd9abe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.38.108.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3ca0d9-ebf9-4025-a263-343113b97c70", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.39.0.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e61592-9a65-40a7-a3d3-6170d2698fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.39.205.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b872aa-4342-4d24-abf4-632d424d4363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.104.37.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd0835e-632f-4aac-9854-3d5ad0fc20fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc72d633-14e8-484e-9f85-e26e872ab157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1090a11-8e1d-492a-9dc7-452564b6096e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a871df3-d0e7-41c6-81af-4bcd495d2cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403e9332-fd2c-4bed-92bc-d3764444f2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fb4a09-0920-4819-ad82-b42123462e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f584fae-151b-489c-b371-ac1eb295aaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12581c9c-8f94-4ba5-aa56-e6bc37d95368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b99f82-fe3b-49d6-8c95-d7082aa06ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134b1c45-a029-4107-9b6a-b65ab4c1671f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1028cd78-32fe-4cd3-a0de-51ab5df58c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c244e4d-a1ee-40c3-9aed-d69b0964a841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45344fe4-1805-4041-a389-81a1e4fbecca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ad5296-0a6e-4683-b306-48d327a6f6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bb5871-5a8d-4b84-b669-9f67aaf070a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6a394f-a6a1-45bf-9e2e-ee78ca8d5128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4499238c-ee81-435e-93f2-eb0cf293de6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2327814e-d60b-42be-bfb1-667f54fc7072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2766be7-6eff-45b3-8400-07f0cd490ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f8630e-ae8e-4ca0-9928-50e9ef98ed53", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.143.42.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8ae977-15c7-4517-a9a9-4635769397ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.175.176.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b1e295-cfa2-4a4b-b928-3161433ce735", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.57.118.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00866d26-76f5-4932-a330-9d0a3677426c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.76.55.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c7d883-3428-4a29-a002-5ada4a6db4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.130.34.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0331afa-a140-436b-bf8f-50c5ad201dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.132.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705dfb8f-54f7-44f9-9355-31214b76c19c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.157.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8546a133-7247-403a-b63a-e46335610327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.58.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf315f6-9b71-4274-a937-518b7641d853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.142.178.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75c3f86-1d51-4079-b3f1-a404bbee905f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.145.56.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd300370-4b9b-45e5-94d6-4441e2cbd4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.81.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4eb5d98-713e-441b-a924-aa91ca8414d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.152.103.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c49f034-2151-4e10-9439-fd713ccfa4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.163.17.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d15214a-e6f4-4dfe-8d50-3747081b3b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.208.16.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e2b2f0-497c-4a10-9084-6bdff212955f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.100.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9dd25f-f28e-4b25-abea-4b83cc021c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.107.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a789b5f2-f961-4299-b6f4-47788772ba93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.108.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d460e927-0e0a-488a-a06d-b0ecafd171c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.109.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0a04df-0a0a-4e92-a1f1-ae996015c652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58922d68-d3be-460b-8f88-1bc0f0ce04f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.115.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a21e71-fe62-4514-9c0b-b2f19f3ee4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.115.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8208a1-72f3-4a78-8361-54d76c0fbad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.119.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4140965b-12c4-4751-aa5e-af498bba459d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.196.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a2deab-43bf-4efb-9091-2fd8fbe7b0a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.201.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f926ff73-3799-49d1-b2c2-78b2aa831bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.208.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924dcb45-a379-4dc6-82b5-60de5244ea9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.210.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f53419-3c8e-412e-960a-d58722a37a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a320ce7d-c268-4bc0-83a7-12ef87e83f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.215.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c8277c-9aa3-4bb7-92a9-0107a1ca8320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.228.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b386d60e-f107-489b-83fa-3586e0122439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.234.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aee269e-9ff4-4610-8381-6d9132b01b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf2214a-33ad-4aa8-a72a-1858d34469fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.248.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08868d54-9f12-46bf-8263-3c0506de4f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.65.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdceae4-5b68-4048-88e3-1f536471f8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.68.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a5979d-436b-4ae2-a825-a7a3e026a4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.76.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f970e8-53ad-4c9a-ab08-619c1872d188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.80.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e244468b-9415-4108-8bb5-5ef0ba322657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.88.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e867de3c-d61a-4240-9a3a-8c4ad210a81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.18.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e731dca7-a27f-4bef-9cdb-b66edcefb536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.0.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216362b7-b993-4322-823e-ff1384bf6876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.11.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5f41de-29e9-40ee-a436-268420198b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.133.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47b7c99-ebb1-4e04-825b-21fad4cae0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.138.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9ccc90-ba99-4893-a2c8-cb551629fa1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.142.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b83adbc-4b0d-4c45-8e69-369fd262fc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.144.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c17987-c085-4549-95a0-9ac549c5bb01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.152.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e10172-96c5-4e18-9313-064dc0fc10c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.154.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0d5f37-a104-4930-b6a3-c8c64a302e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.159.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f61ca4-e932-4f7e-ae88-dc7f4c198060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.164.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc54561-8b9e-48ec-8186-4a1218a71997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.173.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d522811-8d88-418c-8158-98ceae631eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.174.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeaf4ba7-1694-436d-80fd-3cb97a0a1500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.20.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7737fcfa-1830-4919-9667-7ec6085f2af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.24.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80dde970-9077-468c-b9dd-68b810d6ac52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.25.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e096148-fc4f-4e01-8e9a-4d2a69a822f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.26.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbbd8ae-61c2-46d4-904c-6b6dce379ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.28.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4e7b18-a4b4-441a-86b8-6c27461e286f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.35.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500f25a5-c975-4c71-8120-9da3ca2da6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.116']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59312b7c-b944-4ed9-bd25-8903a6c01786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48591730-22a8-46c6-8730-d8b33e2b8635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80664e18-59ba-417c-99f5-c81ac88df2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754ff1f6-eb49-4630-b013-b9bc4147c618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10539c89-6f52-401e-9f17-55b2e673fede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.43.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366aef0b-6c47-447a-bcb7-34d2c31c5f69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.110']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3238d12e-5432-42aa-9329-2b71ab310c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc059937-7a91-4626-9b70-5f8870f890ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de27c254-b613-471d-ae38-7e390bfba3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c18575d-a0bb-4221-90de-e18b60d1edbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d23b8fb-6274-4767-bca9-ae8e1a42274f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.7.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59164ea3-fc4d-43ee-96c7-31b73c709df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.1.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4e82d0-ef37-42c4-99d3-dfef0b9cf6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14681f8f-799b-480e-9a5c-b4d98acb0f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21db3c47-1c1b-465f-8cea-b9963ede8bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f8d515-ebf1-46ec-b6ea-c8924145565a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee40db0d-7c32-4e4c-a65b-e2d693061839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a111dd-b1c6-4e53-84a5-5572e93c92c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e114fb-2c01-4e1d-bb26-6dce92b1a627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4962cc-c79e-4e5e-b53d-e34c5d63cefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52031cec-49a5-4236-b772-fe82f1303f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b49a46-63be-4013-98e2-8b249519f0b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.15.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cdc332-3ab7-44a7-8309-e8ce681fb3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.104']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cea29f3-55ae-48f5-a661-4859563887c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d87bfa6-c960-4870-82d5-9675a3233e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf6207d-50f8-4070-9edb-791b69f7688d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3b9c82-e0c0-41ed-8d56-4d3dc6fad25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adef8bcb-a4af-4bbb-a040-0b1f6b2e28d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e522ed6-d72c-44ff-afb1-a6c5fd5d1faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c019f4-c611-451d-8a43-6f0a52b2662c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5928a6a2-b035-4293-8b1c-5334f30a467f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6eca43-10b3-4a6f-9ea1-45b1edcc7c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7fa9be-dfba-47c3-9732-b006b9db831c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7666fd2-6882-4654-b0ad-d07c85fc3d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c37d03-a933-4c11-bdf0-fb558bb0f300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576e7249-c940-4f1a-ba64-e20d46ae7fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5543332-928a-481d-86db-549e57dd1f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfe6c5a-ced3-4816-abf8-93d1f2d2b547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd8b1cc-3776-496f-be96-d948f9449b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.24.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d006eae-fb89-41bd-9a72-397d3ed9a763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275700af-1f8d-4fe7-ad26-945d70a38138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b88e06-fd65-4273-a19e-ba54e741fae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7852a9-0e91-48ed-9af3-ba2db97e45d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd3f28d-6b7c-4efc-b66c-68b6928fb491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a785a46-437d-46d6-91c3-cf3719d35c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8be2cbc-7427-4244-9568-592ad1c944ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181e617d-c6a3-47f9-a2c7-ffb1bcb5b5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a80c9b8-7f2d-4a08-aeaf-d51c2d7a1eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af81e412-3a37-4ad1-8da4-a06ab43b1a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e56d846-db93-4738-86ab-29ac7325268a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e49a01-d8bd-4815-87d7-8f74e097603e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e6a0d8-a351-40ad-ad58-2307bcddde59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556088dc-d00d-4544-8ab7-c9ac7bb295a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252c5081-8d92-4de6-84d1-90735074f0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea03e2e9-db19-4e1f-9dec-aa627798e6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0386f0e-c83a-48c2-8e3b-3c0b4ce6cb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000fa58f-1321-4390-b272-8649c354a2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360ab7e6-5d20-43be-b680-ae5ce43a5250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1581ed86-919e-4638-9514-821f923bbe27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b0ee11-420a-4deb-9dcf-f2f28ad108f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c913c6c0-1f39-4e65-a0cd-12c6283ae53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2e097a-112a-4a7d-963d-8d45cb459b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b761ec-8c99-4f98-8744-58031fe4560c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c119875b-f1c4-4b0a-8d4b-a4e62acd6286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd146718-5732-47af-8dcc-59cb6993b452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc2d2bb-8266-45e7-a318-9deb19adb977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c0ec16-3461-421b-861d-3ef65add9905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e5cd32-825d-4323-9599-79480b763e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3395c854-a937-4ef3-b021-98ed505519df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517c2c1e-9738-45e2-95af-9ef587508bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40cffe55-3b26-4a4d-901c-02fc5216e929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf5d049-d687-4dee-9851-640f02e56c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b650200-4cf1-4407-be31-052503f50cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c00536-4c81-4d06-b906-718bf019a0cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5e928a-c791-4f23-bd61-c4093e8197be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fd8839-75cb-429a-82c2-ed9a0a81cff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936eef9e-7486-4ce8-94b8-0734ed3de111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffe2ae6-4059-47c2-a3b4-3db1adf09f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09055c76-5588-4c3f-8ccb-9f0a5b12bd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a9742a-ee77-4f65-bf5f-60117aad8b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1d48dc-0be3-4036-b7da-0752848808c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c81598-67ae-48ee-851f-1f2b8daddba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.161.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd03cba-d3ea-44e1-98c3-9a36c85bd1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.218.213.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63753485-0aa3-49a6-a491-1ebdf1708ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.218.225.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782a42c6-1132-4e04-b70b-c60a461e9361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.100.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d18adf3-0a56-49ff-abcb-9ef3347472d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.109.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdb5a8a-3b80-4c5a-8d85-53519cb55363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.11.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f52280b2-6670-4268-9750-480dd9cf976c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.142.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c682605c-ca14-4572-8efe-cb3faae2a6ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.2.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6799728-552d-4467-834a-703e89559199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.222.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f2123a-256f-4db2-90c7-44afa728658f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.3.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128a5e2c-8da5-4335-a9dc-1e134e09bd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.57.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603a273a-3232-4a6f-b9ec-297cde5fd817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.68.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4dd3af5-404d-4135-ba41-8d445b4e19f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.79.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fb204d-946e-46a3-ad56-d570497a522f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.139.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f230cb-b0f4-45cf-939b-2d32c5427e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.139.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9c4bab-baf6-43c6-8229-b8d50ef1b113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.141.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41d78d6-9020-424e-b439-812add6b13bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.135.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f45dd05-0a9a-4eb8-962d-29776da6223d", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.181.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1b5b82-8bee-425d-8323-6bb63a8e2697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.240.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d175ca56-db52-41ea-a7eb-f097c38bd7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.246.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0f667d-7137-4a5c-b13c-d97be8a2f94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.228.243.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8825c7-50a0-4274-8596-0c452c922ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.103.63.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5c08e5-ecaf-43ca-92a7-b293e16ecc59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.191.100.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dddcc2-19ab-4719-89f9-e89ff067e302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.225.191.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b58ec9-5753-42ae-933a-f2600088bd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.225.203.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0706b6c8-9eff-4315-8599-4b65bf443ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.66.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85ece13-f1ec-461e-bf3a-509b2faac4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.72.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57651e38-a76e-448f-ad6b-0c393ef753f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07106a3b-73a1-41d7-86b7-c81287e85135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da009c62-8196-4d40-b477-8c2e0f57b043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.85.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24eb843a-cf47-44cb-a50a-834eeadf1fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2de1dd-80f2-4f84-b05e-d8f351bab54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63757dbc-ca23-47fe-acde-ed63e7f8755d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d780eb4-348a-41e5-8bf0-5b97d6fef5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80868262-6dcb-460c-8071-ad1624a687a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.28.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32dd108-8272-4c26-ab6e-c45cbdac7357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.85.84.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c513b5da-a5df-405d-a160-134c3a530236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd79d66b-1003-4e79-87f6-f27ed4ade3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.93.253.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ce9b7b-2fc6-4bfe-966f-4bfde0be5a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1df772-a077-4a8a-b365-4ad61a9c3c89", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c710c042-4bd8-4f5a-a83d-661f7936c4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e59703a-2f12-4b23-af28-92fb72eb59ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6d39e0-3a35-4900-a727-598dfb6b7af3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7a45be-bfbe-4bfb-ac65-acdfa56769c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3a5741-8d4e-4636-bd7d-1eab023e1725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ed94cf-5675-4c64-adc8-2e9300cf0c52", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8eaca52-0a90-40d7-b185-8b62914f818e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21e207c-a79c-461f-a271-5138e3602f11", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1409d5f5-9427-4115-9efc-39b7221c13f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1038f92f-362f-4342-a333-1d2e810c5cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b41f65-99e7-4151-8578-ca8ae50af805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bd544f-3cf2-4142-a926-aad87a91829b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc26f1f3-e3e8-4453-88d0-db85b5b52d21", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.177.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b7bcd1-d898-4f0e-acdb-703fe537b89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.16.240.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3fa54e-38d9-48f4-806c-8c9fff444fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e0bb59-5fa0-4aed-820c-d6296900a3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95719420-03ca-4d1a-8944-a2f86383bc31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f11e41-59d0-46a7-bf4a-3b736e572644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f962d45-8be5-47d8-8468-e37a34961b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6098a5fb-13d9-4865-bb10-570ef94d4503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa23ed50-7bfe-47ad-aa25-e7220b1a577e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9fafe5-db0a-40ff-9f9d-074223f802a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b603a3-44c0-4ad6-9d74-04c5d2d4a52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a18a86d-e0a1-4bc2-9bd8-fe4198fbf3ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.199.26.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562ade2b-4351-428c-a528-9200e6a42583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.21.9.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d60378-0cae-4491-b942-79022c71774b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.215.203.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc346e9-1824-49d4-aa7e-ce915f1a9c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.227.175.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ed2f3b-227b-4315-932a-2b8292703d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.30.98.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce112dc-cfed-4282-bc52-5a121f527c00", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.60.236.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9328a05-9fd3-448c-9b78-522ba75674da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.7.11.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77230934-0012-4e43-a38d-f6c2aee6c234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.70.42.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce02b62e-1997-47b7-ace2-962a03de2be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.71.51.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c299ea-1858-4d91-9c6c-4863aa71be86", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.152.132.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee014d2e-00d4-45bb-8c6e-2a9d214a8b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.152.162.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82849d0-a166-4ffd-a283-d9b0f38de730", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.152.98.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2bdb937-aa6f-4c85-8fce-54dd23f0e6d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.116.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724f09a9-5e5f-41ef-ab30-33b951ed48cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.59.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbc8cb8-b06a-4927-874b-dbbdad046363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.179.157.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5b6b0b-aaf8-4cde-b389-34cd17e0b6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.40.35.86']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bab37e-7702-42bb-a572-eb5f371a70a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08abf442-2776-462d-ad33-308a5228997a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a347fe87-ba82-47d8-8d68-d0e5098fb6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927def19-4a54-40c7-99a9-7ba6ff0cf4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.41.208.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6282bb-e172-4498-898c-29811b59993a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d990895-4d23-4005-8fa4-da6f6cdd8dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5b5b34-ea25-413b-9949-d4239088b21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.166']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefc1e7c-fc07-41a3-8c59-5de864f2cfc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a753d7-5f79-4a37-95f3-dad3a1e3c683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89dd5dec-e3b8-4786-ad0e-c48ab76a4573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19e58f2-08a8-40da-ad5c-8988bd44d611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abb5007-77f1-4189-848e-0e4272bc1c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11621ada-ec32-44d4-988d-375f44464acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b31088-0b35-4e3c-ab6c-2376e9ef8c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317d2e25-4769-4ad3-bc65-0bb78002703c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66295eca-ebc8-48ea-adc8-b9c343d35521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f13a39-1443-4fe6-9ced-b19ae076d5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30aa95e7-74d3-4046-a165-bb4c9eebc296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.47.106.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d0dbff-5e75-4b03-b434-7556a46f575c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.64.18.167']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1886f58a-2830-4f5d-8249-45b440c677a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.65.142.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ed2cc8-972c-4180-bb81-1f5c439e9ace", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.70.210.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c231b502-1302-4349-a694-33c61daf6b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e21365b-be2b-4588-aabc-9ffd2076ebac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.244']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6362bbd6-8828-4f67-9742-1cc82dd632da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.106.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eaf6c4c-9f4f-4331-842b-c02e0242292f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.110.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407ad484-cfaf-4ce4-ba86-be969e5641d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.78.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afaa558b-2ad0-4cea-a16e-420b20374169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.88.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05495c8-cf33-4988-8a8f-1367ec0e0982", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.89.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e23fee-0ef6-4333-b20b-59d93514eb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.89.222']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa5f17b-03f2-49f7-a425-e73bb3f6aae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.224.139.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecd968c-39dc-4ee2-a5e6-acab721252c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.229.123.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ddd623-58d6-4bcb-95b5-082cb77e9162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.229.8.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82bc1c57-a418-4b08-8bfa-77d18ea81453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.244.79.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2f3b5a-e4f3-4942-ab74-4a0c902fb535", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.0.60.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808a51a6-e227-43f5-a9f8-cced71b90e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.15.250.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa33c6c1-6750-45f9-a862-6f0781128bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.16.231.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb77f2a-60b2-4e8a-8094-61824a40af08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.17.60.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79718804-34e5-415f-bc07-141a8caf6d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.198.246.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22537b6-a47c-4c9c-b647-816555bac8d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.200.87.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e4c21d-be0e-4680-97a9-0c6fa8021ff3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.21.190.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba95ea7e-253c-412d-a915-7a06bea77e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.22.139.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8953f11-878a-408c-8347-9033a558a4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.233.216.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab12df4a-43b3-45ed-8bcb-900581f2128e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.235.229.254']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb85442e-33f7-4c4f-922b-7201fc02c0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.235.235.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c09437a-7a72-431f-9436-41f20cdb3cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.235.246.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e61659-8400-4f9f-8701-e55971d46c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.239.33.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f07cf53-c904-4ceb-883e-3d8ecd5f48da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.246.209.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c965c3b8-0650-4070-8757-e27539fbd32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.169.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d575c45-96ad-410d-8f03-32ca28a477fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.178.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7a5045-c9bb-4bf1-80bd-f626fa483e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.41.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6a87de-145e-4585-aa47-3226453d0321", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.8.155.112']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa90deb3-1434-424d-b15e-66e0970bb600", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.8.219.88']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95caa8e-d8de-4e86-9fba-df0dccb82b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.8.249.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5501aae5-e78d-4e9f-88e5-12918b4005eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.8.254.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52ff817-744f-47f2-9b4e-ff25e89f1784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.136.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2947d5-467a-47bc-bc38-92101c494f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8905270f-5f9e-4371-bb38-b35976dacf1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc22006-753e-4fde-9d18-4705fc20ccb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04645319-2b10-46f5-b398-4c14167d11f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.124.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b581cde5-c883-4b09-b4b2-5f4ae688e4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.244.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4603cd30-c32e-4534-ba20-282815f6ab41", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.244.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a61a237-6ff4-4012-9f0d-cb90858ed132", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.121.51.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03047051-da23-4e3c-a56f-22912f0b4d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.133.202.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162cb0e9-f32c-4dfc-95e3-83a8ca3aec66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.78']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c037bde-27c3-48eb-8c11-817ee7c2c0ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.203.15.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a3ab8f-67b0-48ce-978b-4ada7c66b3ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c0eef4-5cac-4a7b-bcf2-5fbf02cc30e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bce066-7268-4ee7-9fc4-acec194ff242", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae4f489-b1a2-4ca3-82b6-310869b5d51d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65057013-f667-4b1b-988a-2c94aa64e8cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8e035a-afbb-4d4d-a3b8-25205001c9de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2978b2ce-6f2c-4687-a209-8c0838370852", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d1e437-454c-4f4d-b0b4-34b83568d29d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6562cd-8805-41bf-98fe-1c6734d17f6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a666af8-7e68-4bd8-9103-5d8a0dfe1ed2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ad7212-1c1f-4302-bba2-b12b39e4b8ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2791b92d-7876-4ff4-91f1-63d9359dc9ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8fb1c6-6976-4c20-81ba-c32af13451c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574cfe7f-8994-484d-a21e-c5c005d01b33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafd1d22-26bd-4208-83ba-c53bb28bc052", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4091489f-a6f5-4e85-8a28-bd03aa7d35a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a08339-1e30-4549-89c6-bf26131dd11e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23742c9b-a0e2-4306-a96f-648396d27fdf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395b14cf-aa0a-4078-9033-76d8e4cc2ec6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611efd6d-a6dd-46d9-9e5e-58b23fefc0cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a3b73e-058b-42d7-a4ff-95e3da5badde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9eeec93-d3a9-4c32-86a5-090fbcb53162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a8aa2e-0a99-47e8-aa19-381d026d87c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0b88cc-f9c7-40a6-b160-b544246727ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5f9b14-431f-46fd-95e3-6cd1981ae5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--078ab124-81a8-4bbf-8d03-295fb496accd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b5f091-4b12-43cd-beab-4d8897e43cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ddfe8b-420d-4f50-a562-ffc79fc0c6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39192ba3-0d4f-417c-b18d-3156c257bd35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20b2302-025c-41a7-a96b-8b2942aab94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ab1d21-fd66-4818-80d1-8e1ae30cd901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1866880a-d436-45f2-9876-618cd4f9a67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947dd977-b48c-4795-9bc2-61239d3039cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7fed2f-d110-4076-8e00-2ca3598fd1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02f9ce4-e566-49e0-a054-7dbbf31819a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa09992-d4c5-400b-b060-d349cc39b800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db8ede2-44b5-4be4-b459-c98af2cd1a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e001d6ab-1ed2-45a5-af45-798572db66e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98d2e3c-c2fd-4638-8c91-b082599b861e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e67631e-670d-4d0a-92c7-8b02a3f91ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2ff234-20a3-4964-a1da-0e3460a78ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ccd551-b1ba-455e-98aa-41bc3221a046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1224a40-cd93-4ea8-8aa9-35d3a193f145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c4f8d4-1d38-442b-a245-12350c20cf29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9333c8b6-ec3c-48e0-8375-8503ef20f30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4021a8-c0c5-49a3-bf86-835ce2758cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80e8647-98ff-4790-9d0f-e1308821fc5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb52d1d-4af8-41a3-8179-dafecad56d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7510493-f360-465d-af60-7f931ec021be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62174e27-eaec-4db7-a329-ab8225c332d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f14b461-d6d4-46d5-be32-6faa1f6facd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476c1d61-21e9-498d-be99-55ef3f985b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71c3bc4-2f62-4e05-9c0f-0ff7b407568f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c05575-fbcd-4d67-8a87-ccb193770705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251d6303-15fc-4c77-a18c-c958098c0692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e629edde-c560-40d6-b5e4-6ac17468f9f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d69c475-caa9-4857-941b-634c6feff456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7414dc-cba6-4d3c-a10a-20e0e368a14a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f03f126-56e2-4685-a82f-8028e5c4d612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1dcbc8-59dd-4da2-aab1-97cbe9dd8594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d60624-437c-4f61-a45e-ffffac9e4395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102bea0e-0b75-4f31-808b-d770dcf7af55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1f9066-4260-4bcb-8d6a-5e0ec4a25337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c301ce5c-85a0-452d-ac8c-56e4afc9ed55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848ed1c6-9f55-46e7-942b-ae5fe2997cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28ef36f-cf2c-4835-b3e2-9a79822461f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc767070-28e2-4ccc-a216-6a627437841c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd5223c-1d87-4830-b6ac-e9a9f84fb645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0cb892-3dd5-43ed-af63-8937a0e8d076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa9d647-82cb-446e-afd6-abd939617e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dca8208-de0f-4e51-bf2b-e49ef2e57d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.0']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff7c801-9c71-4f66-b59b-efa60ede0c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbea94f1-ccc0-4f0e-aa5c-6da9994ac9f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de68a36a-5acd-4f7e-b196-964c26762b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe6ed19-b9ab-4e4d-8030-c5f8cc58e438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a504d8-427b-42f8-9bb4-a33ef64061a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e878a75-61ab-4a54-a7d3-31603055488e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e87ea80-8795-43ef-ab17-4dc2c64d41c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb1bedc-5ef4-40ea-87bf-38cb29bb97d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d63f25f-3268-466e-88b9-b4427c2b4816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d66c390-3568-410b-9916-8b0199950b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1f2ca1-ac0e-432e-8994-f9396e1546fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdd161f-7102-4a1a-8c2c-a2906d5c1c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b423fdbf-a853-4899-9bd2-384f75376eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92fddf6-ce67-4e55-930a-ddb90e7b8249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475629c1-f311-4d6a-b0f8-efff6f0ed7db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2b0e5a-03a8-4d87-92d3-f3ca9af74cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767711ff-7574-43b8-8411-b66dd0a06630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3ca9b9-3c3a-47b4-b69e-2b311414083d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fe0cf7-9d9e-41df-93f9-fba9930054de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d5f5cc-894b-476f-8ae7-8d256f5544c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca20f72-87a0-4b84-ab4d-c56d556e87f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55bd76f-76c3-462f-8850-0057ee0ffc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65db4cbf-fb75-44c3-9ebd-c2ba3f1e2750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38533d9-3720-4d45-9800-814566260903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397814ef-05d7-47f7-9f52-5a0172fdcee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28cace55-8087-43bf-8509-1fb2b58391d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2700e5d-d680-42aa-b537-16bbbf035141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406ae0b5-409f-4250-bf01-738c52c37808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03381275-057d-4be6-aa52-315ef6ba97bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb0c5cb-e52a-45e8-9f5a-0d68ea8d9085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81ab053-efbe-459d-b030-376fccea964d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df785d1-fa39-44d7-b973-edf87e6e423d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b359a6b-2c6c-4c61-9cf9-f6486830b48a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49994c39-f343-4951-9f77-6fb764d2b537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47c0cb0-51a8-4d04-9255-f51ddb991f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e99561-37fb-4868-b9f4-5446567228d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd7fae5-2ea3-420d-8f9b-757e1ca7772d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.43']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4214a38f-e88b-4c90-9ff3-19670a9985ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c402589-f607-4d9f-bfe1-c586dbadce06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069dc322-739e-48cd-8512-8b65dce45fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0740b534-697d-40e5-b508-14d2e2a8d2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e328ff3-785e-4697-bb7c-a1dec6451776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe291691-378f-4b6d-a345-eaeafaaee369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b684551-44b8-4328-b0f6-ef0e67c7735c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33eac343-fb3a-4171-8904-f652b93f8761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2f1bb4-d03b-44c7-8820-514542612f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a2e553-1d5e-4d8d-93ee-4efc0c78e216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96ac398-8a62-4ff5-bf70-6b56588a1c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798b2842-0f70-407d-be58-8a2d512980a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847f971c-af4b-4565-a122-5c3196cfc7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bdefb7-261f-405f-9df5-84ed83550af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bd7f16-fd1b-4ec0-aadd-4b4c4d20b8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd27836-cbf8-4c18-80ef-ceaa3915a1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d3f4e1-f1bb-49b4-a318-9e9e89fc187e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a058fd-6e3c-46e1-9eaa-127c1d89b28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6964196d-4048-455d-915e-143dee078218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a082e173-8ef8-4ff5-bad0-3de10f9795aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc8352e-26f8-42b9-bcef-5700b3eea424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7005f7bb-0a5c-4536-aab8-7f334986b04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb41debc-263e-4187-9445-fa33c6b181a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a210618-1e66-43a1-922e-991abb8cf9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08679b28-6f8a-43bf-b5e0-135978458322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37e4bc0-af46-4381-894d-dda04f4ca6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7cf9df-f200-4369-a79f-fa46405c5220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8d422a-2378-49ea-8483-b58bd3636cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddc2e24-62e8-4765-8e82-6e33bba1349f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b64d5c-718e-4d44-9ceb-f7e0fb8c641a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d01155d-8dc7-4141-9817-f43366d11741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e90692-36c7-49ba-97ed-0f77f9592cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7248b8be-9c82-41a7-924c-639349745124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90a8aba-f842-43fa-b231-66fec2068386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e4affe-b3df-4153-a2c5-e16b886058ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93df5c4f-00d0-4f63-ae2b-3a4ceb8323b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc39832e-a49c-4b2c-b8b9-6076e5a7577d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.235.64.240']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0390d1-8389-4224-81fc-a93e5fb78e9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.144.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1730f71d-26dd-48fc-bc51-cb34eeae9796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.62.115.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e37c916-8037-4f9b-9d32-2b46250a3000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.65.236.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f837739a-d272-494b-b226-245116358d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.8.151.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13914a26-76e8-4549-8d04-dda03323972c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f528b0cb-a261-4b9f-8350-790be942de2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.176.100']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b7c825-3993-412c-99cc-690ea0f85d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6ae334-e8f0-4feb-ad30-a5691df7ff2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.48.30.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcf1cda-4394-4da7-ad55-c6c787243b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.25.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466868b5-866b-42ec-94f1-56f2afdf133b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5c2b5d-c503-49a4-a0b9-c6efb47c0e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef62dcb-ab2d-4505-a963-fd33a3d0a906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0692b4-9bb4-4766-b31f-377084f9a481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ed1d89-fcae-4afb-99a4-58bd38da681d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85d54ec-19bd-4726-935b-336827f272fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b462dda6-db33-440e-aaea-0aa9001ada3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.255.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f92668-bd2a-44a6-a132-854d67c8e513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88264aef-fc06-4e98-b076-999b76fcbdac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.126.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6f6770-2ca5-4a06-9b1d-b1ad84d9b5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.69.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0f26f1-9e2a-470f-bb37-b90b81fcaf2b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.192.244.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7403db1-6d58-4c6c-8cbb-6898c8cad556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.192.249.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3847933e-210f-436e-99b2-dd9558169119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.192.249.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085f7baa-785a-4db1-a8b9-9375208e573e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03755e40-dc86-4c15-9a27-5abdd8d14c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e3a835-dd01-4b79-a1f3-f8b6ba67cc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632b045f-ba2f-4183-a657-b2eddedae2a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842cd4fa-8f2c-4ce0-971a-3059a983f347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34143475-ac4d-4281-96a0-847b09469464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.186']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41ee46e-d4b6-4efb-9867-7c2c9c9d666c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e4a678-f733-47d6-b07f-36516d3acafe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68629866-9c8b-493a-873a-29bda0dafbfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9f0629-ee16-46fc-9b0e-70da0e318ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e23d46-d704-4b0b-ae14-2d5175a41b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1797c97c-ccbe-44a9-b2db-d39406ad59a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40a667b-d936-4306-989e-d1792715282c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.25.47']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f52ccb2-d6d9-472c-ab08-83b2e88e2f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfac4d92-85f3-4eda-85ae-7cea23e14a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a40c0f-5e2c-4ccf-b5b4-0bb2cf230500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e39b12-a0bf-416e-b5ba-e810dfd5f620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff078080-a6d5-4cce-b4a2-53bcd512d5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.79.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5a61eb-802a-4e56-819f-f5af0535f8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.83.100.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6633008-52a9-44f6-805a-8ba68633bd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.83.104.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8afcdc-6a42-4eb6-88d6-85271628e8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.83.109.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667aa5c4-2881-4f74-b9a7-ec05739964d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.147.30.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e3b8fc-af4f-441e-9447-5fea23794941", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.151.33.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a241f0a6-c8a0-49da-9442-06c0a9a8e6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b6d935-d56d-47b4-8a9f-6f7e04f10660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.22.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415fa32a-51b7-4f5f-9259-3a4fa4918706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c2ef05-cdcd-49e0-9df6-975d4ae6055f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30370742-194a-40f0-b466-39e56585ba21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50938c7c-8b8c-4c4e-8c5b-befeb1a29cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.124']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cefe3ae-0e30-4529-9027-68a55e87aeeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.25.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638b0607-7af7-48af-8563-8620ac2f7c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2591b7-2625-4a69-9c89-e38082354e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.218.205.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0b10f4-11b6-424d-bbc1-ded6e84e7231", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.233.33.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1c74ea-3f15-4660-bdd3-f06ef7ee3e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.249.30.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d971f93b-0655-4839-b07f-0f5974da2e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.250.161.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1100c1-e85a-47f1-8ee5-b5d02f7abf02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71bd72c-2b16-417f-9185-6a763a52fd96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdb305b-9063-4e79-a806-eebfd6493916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.117.18.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fed8106-c09e-4b30-92fc-265ae659feb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.117.55.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb672eb8-80a5-4360-a75b-81a672280326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.167.56.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cf4b09-c343-4092-85dd-002ef13f8e31", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.168.59.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cb51e0-f047-47ba-aec6-087fc4b078bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b310f42-33aa-4eb7-a9d0-d45057f73c84", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149d8751-3dbb-4cf0-9089-adc7eec5aea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.134']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7030bfe0-650a-4a21-868b-8b41221c39d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5771d590-32d2-4cd0-bc0c-60e09907b642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc604106-0bdf-44b9-b210-53a419ff1b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de540ccd-7c7f-4f2a-accf-2b4a54cb50e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e41bc3-ed3e-46f2-8f2d-ee96b7f6a306", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.23.113.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597e4c6a-6a4f-4f55-919e-a484850872f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f326b4-bbc9-4467-bad0-59dfac5ad908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0054e1-7a1d-40a9-a064-41d7a004db23", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.157.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a22fc05-3098-443a-8e79-38bf9c3b89f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.36.161.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972aceb8-45f9-440c-8f74-f02e5a38f8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.136']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0dfdd0f-9e2a-4cbf-bbb4-1c96c7c21280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecac8b19-0e2c-476d-9860-d61631383af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7a346d-10d9-4366-9231-8738ab0435c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.148']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2571dd-abca-48c9-987a-ec1c2567f80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec83a16-9641-4b95-9e8c-f91f3dd79778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134c5a24-82ee-4d88-9960-2ec2a81e5fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48898e04-0e3a-4994-93f3-6c60b7f4e347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe34875b-aa90-4a9c-a93f-ad1db8e9fcab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.40.86.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da91c72-1479-4fc0-a9a4-1541a1b1a405", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.43.141.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c38ef24-37b0-41d0-ae82-be049e8a1236", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.58.45.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c780179e-c1be-4d69-93a3-ef0208239094", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.223.176.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59898a0c-61f1-4984-9eae-d069f102f77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3026c9d3-a37a-4b90-802a-feba99da752a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dc5047-0278-4167-8587-a0323c880cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7b79f0-f29e-4e60-9102-23ee3aadb42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b02ac67-287f-483a-9515-1639a210f037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.151.171.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eeb2ce6-6560-4d5e-88f3-29822c6aa026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.252.102.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df40c7da-e284-4cc8-b420-b4d542d112bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.84.16.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2e617b-3602-40bc-a6cb-8599a50bf0c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.102.127.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186a25d4-0f0d-4d4c-a57d-3f9e4dc3d82b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.134.240.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dfaa85-fa0d-483c-b052-c89de00d2ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b04f41d-0bcf-4154-81d4-7af7ae0bcaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.149.56.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19d4e10-e9fc-4c13-aa23-9d4349edad51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fa2d9d-79ee-4f5f-9f09-89bce3134a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c327a745-b512-45e2-8886-77b47a997085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e9dee0-008c-4eaf-9759-0bff76fac544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39007eb8-e760-415f-a343-43e0b19f85a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e432629b-965f-492b-8b79-daab4ba5f070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9addba-da57-4a2b-a361-0283ec276261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c1bf30-7d73-4dd8-bf9a-b5683d88cf3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653dc545-b9f9-45c0-a2c5-3ef3d9b54113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac32f48-bca0-4fbc-8879-ac6cbeff50af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3948c0fd-1ed2-4253-b6ef-bfe9a0498993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6205144-b559-42fa-844a-c30b7b73cbaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66f7ae4-3ccc-4d1a-95fb-7dd01b24b098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde74d69-77b7-4ea1-acc5-62f52603fe46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef55eb46-cd31-43f6-a843-da491d010e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac9cf8e-aa62-4f42-a535-5c860d8eeb52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3429ec1b-81cb-47f8-ae88-29db6c23e884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1299258f-24e0-4122-86ff-a9db2f42e5ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22364fdb-4140-485e-bb29-f008412aefb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d36abcc-2b94-4319-9e9c-e3f6b0e2cf8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7815d5-1d9f-4bf9-a248-48dc33b76cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efcbff6e-ed22-4777-9c22-40537d406127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a876497a-9f0e-4ac0-b51c-8d9235b5bb21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92195eb9-b8b4-4eee-acc5-e28cfcb0bda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44496d9-7574-41e8-9201-a936704e413b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f84cda-11a1-4ffc-8c1a-551f02b03cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6d956e-687e-42e3-8f52-cac4983e45f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca313af3-246c-49dd-b0ad-446fa3c8d9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b827b14-7cdc-48c9-a51e-c85725a36fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7f0081-e46c-4946-a155-968793661687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06df281c-9885-4419-a6a2-8c523cbfcbf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a3ea4c-34eb-4fd4-a5cd-1342c55dd2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755fefb9-81ae-4f0e-875c-0783251203ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c6aa7c-79e7-447d-8934-875146a8aeba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a034174b-7854-45fe-8088-5b19a17aee87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5f1918-6fbf-42f8-895a-3d42073e877c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed17a97-91df-4482-bfc3-5ce9f3f2d79b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fd59cb-41a9-4a8f-9613-bdea516422e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fbbb62-32d0-4ec1-b866-55f6d691fdec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369ad0d1-c737-4b61-ac73-ae2604756cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe97437b-e56a-487e-88f1-ff691b9ee55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa155a7-ceff-426e-919c-a9bf48224a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5a6199-c2f5-4d87-9b3d-d560d82c0b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.205.131.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb06d03a-5e84-4cab-bc4a-7aa91913e29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.109.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9d3ccb-b1f9-4ab4-a558-ca45bb77edb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.109.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6684ddd5-7341-443c-b77f-fc6c2334a58d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.197.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d36c6f4-4edd-41a6-907e-39f5271548e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.209.228.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5ef3d6-bd06-44d8-97d7-6677af80ac6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.213.174.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1554e4-c672-4cf5-ab16-75d0782fd409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22144947-166e-4712-88b8-402da1805b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.223.69.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a71f26-6a74-48f5-8a50-58f85adec051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006b0a31-05c2-4610-9068-9b8c8c769a0d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0cdd00-6080-4247-861c-9a34b6405b6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9638c48-f77f-40f2-8cdc-05d054114de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.226.96.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8e5826-6958-4490-8a20-e307bfe2ed53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.229.105.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd47087-4f45-4146-a145-ed8541e1aa9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04587c9e-ab4b-4ad3-addd-5b0f06f019a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fc801d-e567-4759-93e3-a9223fc3f958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca8da38-b783-4f80-a136-fdddba4e04d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c41efd-4b91-4d3a-95cf-576f7b6ed87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71153609-93c2-4ae8-8f65-8d719b67c763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d09e8d-1217-4b12-b3b1-889f1f3c174d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7458d1-d738-4373-8d20-628af0fd293f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00fe72c-733a-4b13-bf1e-febaeb980978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987812d5-92bb-4776-82a4-2a5f422d883b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fcdc86-6fdb-4de5-bf83-55c966c9fb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9c74e9-0808-4343-a962-9a59e1266b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293c9fc5-3e93-4f9d-9a0e-81a5d9a1cef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90502417-c813-4741-9f6e-6b39b49318f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba2dfa3-5f47-4cc2-9f1f-ca03a5daeae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b6ad8c-9a8a-492a-a586-1b289e8b438e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad768c04-242c-4405-b898-2d4537a8d4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3d8327-828a-4bb1-bc22-f626f20c40c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f75fbc-b17b-41b0-ab83-5453b3576127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66290f9a-c760-407a-8524-2ff9ac361742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a619f14-edac-48f7-af91-26e97ff78bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89b77d2-7b76-4c3d-9872-c20b919dc505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b4706b-17b4-413b-aa9c-f8d71f3f1ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc740518-4585-48b2-873f-2aa2e13c4dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c062d8dd-dc84-44e7-b7f3-f74eb7905f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8416b8-bf27-4613-a0da-d76569be7da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee6a998-f56e-4d44-8529-590e8930610a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4976b4-0351-4ce4-ba37-142887e3c794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4435537-b8be-47db-b895-5f64bd964ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33ffbb6-b504-497f-a314-c62ad318324e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041778df-ebc1-4e95-be37-44df546fe157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20588b89-b96f-4f51-89f4-4f4a34341025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.195']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c803be3-f600-4ee3-b880-c53797154996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.202']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dac4063-44aa-4592-8c87-b0899da072e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61b3b41-1757-4e13-b755-0e7e0c273f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c1bc31-2c06-479b-90f7-3523c396ba2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55190f7-49f4-4557-8648-da2104331e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a729a6-06f9-4f62-a445-68a56365d6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cff7bfb-271c-4c05-ab84-37696d0d55d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc05cd8f-f40e-439b-8d6d-212724fa7716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca949e1-95db-49c7-a61b-9490b4396fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e255138-6db7-4003-b9c8-46668ed5054f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e0602f-9391-4801-b459-fa365dff1898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768d203c-8988-431a-b4ca-f664595ddd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb4f978-ad6b-4429-a3c1-3460dcb2cd43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cecf1bc-9727-4285-b1e4-2782045563b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91af08ad-b29c-4333-af41-b9621ffd2b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8c7c67-3a8f-4f5a-8507-5c8dce29f91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9928953d-d3ac-4023-ba3c-780c6de4faf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c1287c-e966-4802-9539-42f804ba3e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84213708-a14f-412b-81d1-50f5cb631412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6576aed1-a57d-498b-9ebb-de6548f95ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71df779-b472-41e4-93f8-63413d14130f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32543b57-f78e-4d58-b6fc-71b54f3fb9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b084bf30-701d-4d82-9980-d9108c181fe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c5431b-d025-4195-8fc4-b2f5647ad4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab53e8a-888e-4d51-b2d5-2ef4e8547022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9651ea-d7ad-4ddc-a8d0-51ff08c37ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d882a1-a31e-4901-b4fb-42d26de66311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96550439-dcc1-4098-96f6-f3a6d0129096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80759c45-2b74-4a2e-b3a2-1bceeb9bbbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876da4c1-9f9e-4f61-902a-fe5f77adca89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224e077f-3614-44ea-ae06-baad9baec6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e170f0-3c30-4a83-8a7d-8253a7247a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa695ee-ebee-4f86-9f5d-5d878c1661a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672b42fd-3cad-4c63-9ec1-cc830e8f8832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a03e943-1b52-4d5b-bdbd-61ec013e82aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1398072-6e1c-4196-9d34-6bc9a13a1318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff501cda-43b0-45a6-b09c-7e4c6ee3b81d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144ab893-cb11-48fe-9123-e0f8374264d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860d4297-4dcf-49c7-a652-8e74a2426ae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc40197-ed14-43ff-a9dc-16c49c6db427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e91c60-c4a2-4614-8727-8383cc1b88ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6d4bbd-9b34-454d-ae40-3af11f82e19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549f2e18-3ad8-46b8-8ae5-7ff158bb8afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de172b1e-35d6-4238-8e72-a716637a6cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bad716f-ade2-46ff-941f-71303efb1c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd51b78e-10b1-4b7a-9046-92aa0771440d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d167f4b3-947f-46f3-bb41-56c381b684c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bb0881-f571-4b13-b07a-85cd9274fc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0365f8e7-a477-4c5f-84c4-283c1b32b113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b78de9-3d82-4b34-acf8-9182717abb6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb32849-5a48-4b0c-9b0f-3c63482e7c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36df8350-cc95-4d96-af9f-c0d2589130be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6d9c6c-c438-40a3-9e95-a7f291587fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebb3817-7e12-45e4-a020-dd2e594ad0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443c0e0c-3b0a-4c5c-a155-e02a9f8be6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b7bec6-df7c-4b76-906a-5d2be840961a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4dc817-a3fa-451c-b076-461076e0fc7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c17230-d794-4d8b-8361-49928035629c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6bb922-65fd-47e5-9102-51267b4148c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d49a1a-5c91-45c5-b051-5aeb54154d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23e7e9d-021b-4da7-9088-5b1f3d5a100e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b4cc63-759a-4877-920f-a59b94869897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7b282a-e8f0-4175-bbf1-618c7389ffd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b6fbd6-1409-4855-b4d0-54e3272025b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe087d7-e44e-4500-9393-f7c46d4fc1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b300eb47-c2d0-48ef-9f6a-d174245512b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3166590d-dd7f-42a5-82f7-e07e187ac13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b190f88-443b-4c68-8b66-0c51449219c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed517ee-254a-49be-a776-d35775ee1da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1edeb58-c118-4d21-bf67-c12947a78be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920bbbe1-8104-4bff-ab6f-a7a5488dabeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42d7c62-99dd-4860-abe5-0cfc4c8f6d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7827a32e-b8cd-4994-b35a-8c43a5b0eb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca1b878-d166-4583-8f78-8a41952bac25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffea58da-8a92-4e3a-819d-1288cd2141df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f5e6b7-9bf2-4b24-b804-2781b62ab420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.185']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a446b549-6ea0-43d7-b89f-2684976c66fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedc6234-86fc-4d40-9f95-2014a4e40179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e77403-9c97-495a-9e5d-d67c2b151f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b5e396-50bc-43c7-8e2a-bdb2852e9add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5189f2-55a2-4a96-ad87-9af4cfd39a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec3fab6-0f8b-4b58-ac82-8ed57a34db8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d89fdf0-5bb8-4e5c-bf84-8bd7d32541cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33660b3a-04f0-4e0d-a3c8-20639941c4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72ffef1-c307-44c8-ba32-d5a89c807a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9a5bfc-b227-486f-aa25-0f1cb670a966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4af11f-7d82-46d9-88cf-4ff705e81644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5550f0d9-1f7c-4b9a-97a4-0d0d3af58695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6a931b-9605-4143-ae3a-fcf14b9f9871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1f1261-fb37-4661-a0c8-6e56b2728273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71edfcf9-8ddf-46b0-a26c-d6a7c055da09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fe864c-89ad-4db5-a7df-e11cefe8aeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c93792-7fe1-4393-b590-a9ef7c859c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1c2141-616a-4aec-8f69-483140ed9c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb767db-f17c-4de7-9050-4e72ce15f8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55de0dd1-cec8-4ded-a661-e9cceba46d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7513c8f-3707-4b4e-b434-e83905c24f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354a5414-ce88-479f-ba48-a4515260255d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55070b7-06b4-4c2f-b501-b06534702e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec6c79f-ac1f-4f4c-a395-0ef7f4316e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b58745-f059-4fd0-a40e-01b01578a51c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5e5ebe-1f30-439b-a0db-2366450a008b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e845262d-5dd2-48b3-a0c0-2af3f0836e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6070786a-12a8-4e43-b3f6-20ecd59303ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95e00a3-5558-4bf4-92ff-d002720b75ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ba242b-d67a-488a-825b-8a42bcaea1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc892f0d-330b-4ffd-acbe-b20420160935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c08e854-fb65-41ac-b16b-e0e2160fbe32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b346bdf-a8f5-4d94-bfad-e41574023fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2afeaa2-9a5e-41a0-822e-4cc81c6ae9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203b07eb-41bd-4534-82ff-46b6d936760c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b437b90-d556-4229-a7ba-17d71d01515d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1632c1dd-1505-4014-baf7-48cea0970505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0c13b4-7ea7-4315-ae45-9bce3bd63a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7488552d-187b-46d0-8557-70dcf0d17016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58b0fc0-c42f-42e0-962c-58017a5d1d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77396c72-4d01-4245-8372-2d640aad045b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb8ac82-4634-4756-b2c0-ae4f55d12ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99640029-01ed-44cd-984d-1730c256f606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0992a510-3f6c-44ba-b624-49f89caf3178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78f5f2e-99b2-4b45-a62e-680d2a1316ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5219b611-d963-4c08-a2d6-5a2c3a246a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a807570-07c3-4fe9-b7e9-76ab93508069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc780eec-bfcf-4ac8-95fe-87cd0827dcfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270d0448-e4ee-4d77-ab2f-7f66007bc9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df71697a-6206-493c-8543-46643912aebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0678f9ef-6bca-4760-845c-2eeedfcae7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8f27fe-dddd-41a4-a1c4-496db571242e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90feb06b-b4de-4a93-a93a-f78b3261f4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d93d87-38b9-4788-b17c-dcffdb21583b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.78.157.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605ee876-9bca-4f18-b4f7-4757161e25fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.80.165.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51b6109-abe5-46ed-b7cf-88bbe40446ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.90.124.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f16adf-872c-4750-9c10-5efdcc8dfa0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.184.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb10ff4-3adf-4dd0-9d16-f6170096428c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.199.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb7563a-86dd-4d28-9d76-9f1e574e34bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.240.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e2ae3e-fcb6-418c-8149-cd94a8c646f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b164b2d4-cd59-4faa-bca3-268053d90e41", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6936c6-d07e-42a5-8c0c-dfe747893c95", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4691d1d4-96a0-4d89-9b6c-cabe21d4f24d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f19aecc-022d-4c09-841d-a52d2578a92f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8418d23-9f2f-4969-9773-9c6682c01128", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.171']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22b618d-a5c1-4f39-a496-af273ebfac02", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685f6148-1a5f-4fb1-b10f-433ed354e07f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f994acf-cd54-4419-9db4-083afffe2647", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1832c4-2efa-42f3-864e-d4b86582d67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.4']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c719ddb-3265-4a55-92f4-e8249435e330", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c7746c-16a6-45fc-9134-b815f634920f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.8']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd0c284-ca00-44b7-9f0a-d3a7fe7bfa78", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a69255-39ed-4739-8b40-1eae93921242", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606dfe11-395e-43a9-a56a-db77b3d24a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a130b695-dae1-4c41-8277-3d7c48971962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e455d21-015e-4385-96c4-ae56ec6fbfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928b2bee-2fb5-47b3-9519-c89444e1abcf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.28']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abd8f53-0258-4afd-8da5-35ad8dcabb0a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e981d3b1-a686-4be1-9752-385cd5aa2a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.151.17']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72017bb-92d5-4ea4-819a-83e1b3a89eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ce2038-a2ea-411a-bc6f-47f21e8fed27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd251424-c58f-4ab4-8ebe-c744e28e81eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.128.149']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289af231-8b51-40e5-9158-f98cef223011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.160.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63d5e34-17e1-4123-88db-29b44d6cae9a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.187.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c5d0e8-8ed6-4a88-9c91-a2b9d08b1096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.62.48']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8891dc54-2765-4812-9ca1-ff4e80ee7695", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.42.201.105']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6feb4f78-f6b5-46a4-9d5f-a18a09573c66", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.47.46.174']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0914bd-abf3-4644-af30-55a996a8fba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.53.64.192']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8687c979-0c25-4dac-af4c-734382cb0ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed11cf20-7f74-42f0-aee4-519932d1d397", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.113.164.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e6e41f-0d86-444e-b59d-5aab510d27ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.115.120.101']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9999c703-d190-4f9b-87be-bdd43798fb76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0bf10c5-29dc-416d-a5b3-76f176a9d801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7617158c-63d9-46d9-a8e1-fc2ba8ad7756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11226b38-dc07-473c-b7ef-ffef112c0523", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.51.25.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda78be5-0f18-4ac7-b714-8dd4562310e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0c9aa4-6e08-491d-8b63-3ce45578e759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.136.186.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735b4b75-cfd9-4be3-acfb-3c6e19e8efd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.143.197.189']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05c4078-2612-4214-90c2-64913bfd9b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.152.234']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea91950d-3649-44b3-b9f7-c9025e06a709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183fe362-743c-4268-a1d5-d4ca01751914", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.112.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881f2df1-e439-49d0-a2e7-0f5fc64a4ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.20.88.36']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d0fef6-adfa-4100-9664-a76a6dee4354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f09db8-3f2d-41ce-ac6a-bcdf3b123760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.13']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db392ed-ca16-437f-a228-534b56714756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b933fd0-17ab-418d-bc88-3554d35730f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8aef339-d95e-48f9-a742-8fb86f087407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82585e6-8311-4ae6-9b5c-2fd30f3ff603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9922ee9-a109-43fa-89e6-7d525e81663e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917ad552-b686-4328-9b5c-59b737ba8335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.252']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76e734b-d04f-4ea3-b3e5-3d823c80cc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270decff-e1bb-40d1-9760-b8e8121ac5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a60db9c-f270-4091-88fa-6c540ca62517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.1']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81af74e-e321-43ff-88cc-322689c124c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131c1bec-844f-4497-b381-5579621d6529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.102']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd16f8e-13bb-4da4-8ee8-d541eb4c5f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.103']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c928d3-bbd3-4ab4-80c9-ec6a4cc48414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.108']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f70536-7875-4df3-ad65-9fce12a64068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe3b8c9-14c3-4173-80e7-9f1154019b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.113']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef333f9-e816-43d4-bf8d-639258b0a1ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d27d70a-563d-45da-8978-6bc686e7d72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.117']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391ede98-120b-4842-806a-1d77fd85a5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97824876-37af-417d-9a47-996371fabd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.122']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c99263b-8db2-456f-a2c5-d8770f71acdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.127']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51d24c5-1a37-4e7c-bf57-c06e5414e3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.128']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84763868-0a45-4c1f-885b-128e68831ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.129']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14cf97aa-df52-4856-9873-c73c05013164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.130']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808d7974-307f-4935-bbe4-1e0010068918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.131']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb465d7a-f39c-423a-a99b-21f70689e702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.133']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a360c1d5-21aa-4327-baa2-2b9ca7293fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.135']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84e6ee8-60d2-4ac5-99b1-bbb7f7bdf954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.138']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9c7ead-a584-44a2-a9e9-b3e73b3ef43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.14']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--494a7048-55ab-4292-b194-d66ef1fc9a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.140']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b27bd69-9bfb-498c-a9f9-dc605429c211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.141']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9872791d-9c10-44d0-beee-be2d1aeb5fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.145']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f44d146-b2ac-4524-b224-a6d40ae85756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a325bd1-7936-47f9-9c6c-49827a96a76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c32eed-a9c1-465c-bf0c-9855c5091009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.151']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9505632-057e-4385-8f94-0811c2d75c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.152']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52771fb8-e9a0-4a8f-95ff-4de164bcbf29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.153']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b36ac0-cda2-41ff-b994-9e97ae656a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.154']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67373c02-8177-4bf0-9b6d-92f78fceaa14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.155']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4691ac09-4b84-49ac-bc26-24cf2dfc9aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.156']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e246e1d0-baa2-4414-b412-80a730e0d84a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2596142d-ff57-4d8b-8d06-df946ee1aeda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.158']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a5a7b6-de12-4a63-a525-58efc53928f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.16']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f46fa6-8ec8-43cb-bbe3-775e5c4de177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.160']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358de9c2-75ff-4376-a0b2-7dae40872ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.161']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacb8e35-f177-403b-8158-569304b68517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.162']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26538f71-2a71-4d61-9d9c-3d6458d4c672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.163']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c195e056-5423-4f29-937a-70f440b7cfdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.164']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f0a16e-52ec-4a81-bf57-9483a77f590e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.165']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60f5e96-11b4-4c63-80c2-7692e04e5a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.169']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d870c7eb-6f45-4ec6-9513-68d000fae981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.170']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771a40b6-debd-4430-a5d2-f1084fe97dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.172']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfff1d15-1869-4bcb-971e-9a23244cd534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.175']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d04c8d-3510-45ce-877c-25291f3eb503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a774bb-c1ae-4b44-a4da-14060a3782b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.179']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2216e3da-d190-4f17-bd8d-bb0765d1d38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.18']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b608d425-eaf0-4ab1-8677-1a20b74c54eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.180']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9882c6-2628-4ebe-a6ee-4bf0d67dd070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01ec483-0806-4b18-b235-1d9bc6ace1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.182']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4178a03b-d3bb-4196-921b-5fcf5e8e839c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.183']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbacca5-3d0c-49eb-8c4c-1a45120a2bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.184']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fc8096-949b-48f4-b048-1bc30b1c58f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.188']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7449322-d315-44d6-945e-5fbb596216e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.19']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99a81dd-cf23-4277-a375-1cec3ee5fb17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.190']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc4fc92-de8d-4d5d-9095-9007387412d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08bbc15-ae33-42e7-8445-bef9a90b214e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.193']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4339ed-7d9e-42a4-9577-2b8a5f1ad8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.194']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccfbb156-2ae0-417e-8deb-58aae6ffa66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.196']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ecf943-abaa-425e-a4d0-9140ed5568ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afe1158-233c-4dc8-a461-e833990e2b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.198']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06597fbd-0d42-4e15-9f7d-98b2d6a63a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3c93f1-db65-42fe-a193-cb098e619b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.2']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee5ef82-7f45-4e2a-8c0d-02828ce1c49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d4530c-bec7-4bf4-937f-0db0a084a72f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.208']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d72b7d-2d25-48dc-bef1-1c2042a22d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470479f2-7b8c-4385-92b0-1c57398176ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.21']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc9e077-7669-407e-9479-5e51c73fbd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828a504e-e8ee-41cb-ae34-72424b7ab620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.211']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5b173c-2555-42ad-a92c-0c1db414e7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a608e3bb-a05a-41d5-864a-890966c8b3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.214']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc5af70-930e-4405-9909-551bfcbc2d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.215']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6ede95-d7b2-4ede-9d08-f10b259b0d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.217']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc8e7c5-fe5a-46b1-b9a3-4bb9d5e23b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.218']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba18550-b469-4afc-bb25-e8e531d8856b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.219']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9b15f1-4d59-4324-a006-75b569c2ca9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.220']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670e9194-1812-4b69-967d-750cec4b9a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.221']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe1f263-9514-4c92-9e8e-e4133c8830b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.224']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e475c0d-225e-4f43-a031-adf444c81db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.227']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50528314-322f-4458-97a4-4a56f6af1f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.228']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afdc66f-19ff-4764-b42a-e4ba878e4075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.229']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5771384e-53ed-4f69-803f-f71800c08ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.23']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc73ff52-58bc-4dfa-96c7-3ee7f12ce9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.230']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e224e1-f1aa-4ce3-afbd-7636e0817c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.231']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaea91b6-4ac9-4d19-923f-31191bf35f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.232']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa92f3a-40a9-4102-9523-f88ab20f5ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.233']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bc7ed8-ca39-4a24-919a-8aa09a915405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.236']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea964b7-3729-47ae-bdc3-b90f654ecd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.237']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e52656f-0d82-4291-a39f-39c8d4ea02f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.238']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90d35ba-4ab8-46c8-b4c4-f7ece7dd4a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.239']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5504cffd-8252-4b4a-a935-891e70422123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.24']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ce2535-4640-429f-9cc1-de2c3c481849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.241']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb46162-9717-4e1c-a7ba-d8ba1b8705d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.242']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8956761a-004c-4b29-ac3f-a97fab3ffb64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.243']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c215517b-f4fa-4c02-9ba2-edefc2fe399e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df30140a-fd67-43c3-a859-e199239008f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7ce2af-2962-4ee0-9a0f-62a357e33fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.249']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77124c13-002e-435c-8611-118654818df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.25']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53dc220a-45d9-41a1-818e-2fdf60d9e79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.250']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee55eb4-c3e3-41ba-8ba1-eb66ff31749c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a92dd32-235b-4363-b841-a4daca6013c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.253']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea1059c-259c-4590-9b11-d3b39aeda990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.26']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f7223e-8a9a-4f87-9997-44640e4d82fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.27']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b54fc0c-efae-4b37-abd4-b5bd3c88c712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.29']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbcbad9-cc1e-48f8-94ae-b8bef903ebb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.3']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0c8210-fa22-4239-9c1d-a89a6921c5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a113ac2-ab90-4860-9e7b-de072d820c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.34']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ad1c2c-6a29-4ae5-8d9e-8e9b0395c169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.35']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f26b7dc-9baf-44cf-acb8-166c97c65839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.37']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e3449e-843a-4f6c-bf11-414912ea7786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.38']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee004f5-b5a8-4960-aaeb-936e9fb15edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.40']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594668e7-2c10-436a-83a2-a83a15b08258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.42']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ebdea0-d133-4f21-a0ae-1e72a60ec71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.44']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11adb8e9-5be8-4e6a-8a59-42b244556321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.45']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d493f9f3-e70f-4208-a157-531cbea9b2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5fcc2e-36be-4192-b425-55367ac2ee3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.49']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccdb246-0488-4a24-9ac4-c6535d9338c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70308908-a7e8-4cc9-8906-e92b59dc3c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.51']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6de0ff-2c9c-4d99-b09e-d3d0ff5477e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.52']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d818fab0-d9b3-4580-bce3-8417fc460864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.53']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d82069-84bd-46d1-92b7-d3ac1ec0d9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de1d028-d277-4f9f-bbdc-c36bddd82736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.56']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bd639f-508f-4571-8cf8-a8b163c43deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.57']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5834450c-2faf-4a67-bace-0ca308541c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.59']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18861f01-4c26-4d0e-8f96-d955ec732176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.6']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cc0a8b-7158-4e30-944c-73b51e6a8977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.60']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc386fad-e50b-4db5-8430-8b782b629e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.61']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c47b607-ba77-446e-9e58-74b6567077aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.63']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4186baa-7e58-4570-ae0e-e0e7233bb896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.64']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7df2fb-b9ca-462e-a59e-113736028671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.65']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e638bb6-0b9c-4b07-bd5b-b308cf00199d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.66']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e10a11b-ec4b-405d-a779-a243cce71d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.67']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc09a59b-6b26-49cb-bd7b-3dddc41dfa32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.68']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4ca2af-5c0a-4ea8-81b8-d7eed48ebd4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bdc928-6d02-429e-85a8-d111a02a65e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.7']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a933b1-ec0e-481e-bb00-d1e0717d1c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.70']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1205fb-aa47-42b7-8f9d-36bce1924c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.74']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fe4a55-514f-4c50-ac7a-1abbded4696f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.75']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb641a66-a733-4679-9937-891ecb802f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.77']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3474d8-caa7-44a7-970e-8d30f676d5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588831ec-364d-4944-b7f3-ba0b1dd39228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.81']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b3a2b2-8531-4a11-ae3e-6e10feb04894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.83']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a7af11-50b9-4c57-9033-9188c42ca31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.84']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e320b0-71a0-4730-95c4-bd799a8de88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9630cc-3ec3-4e2d-8223-d3faecd81275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.90']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b983e8-2513-4e14-b765-92ce1f136af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca587392-1ccb-4834-b55f-70cae187469b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fa4af4-9704-4e7c-92e5-9b1a14fea400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.95']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7528aa19-9793-4843-8b25-b3624c1db0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.96']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9eadb42-b12c-4fca-93db-092148c1521c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.97']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173bf19c-4ad7-4168-b5ae-9b008a806876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.98']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3c215f-c9c2-41fc-a2b8-cfcd1a3cca8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.212.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f6702c-6580-4388-8c32-e252817fa710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.11.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf87c516-3048-4a05-a909-2850cbdac7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.249.153.92']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d85a1f5-4809-4c20-adb8-0dbcadc393f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.249.59.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22fccdc-fb79-4bca-ba55-546b2eb6a045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.147']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf885901-7669-4488-bc1c-41bb18abe011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.199']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d10b2f-6749-4630-93f8-6f15186f64b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.33']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67f7d8e1-3134-4ed5-9c2d-7b7396eb1ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.80']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fa156e-3efe-4026-95fe-1a7a16d93f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.29.124.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80861aa-5387-4c47-9dd2-a728b63993db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.102.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149c8075-4e5b-41c8-a4db-c297d2760e19", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.98.187']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ebb8c9e-d7ad-41b3-93ad-0af84bff4853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.74.104.89']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1c8a16-79c0-4d49-8272-aeec3dc5edbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.107.54.216']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b62a72b-38d1-48d2-811f-690735b797b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.130.170.146']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ae4a5d-f776-4d6a-9c5f-2f05d75cf711", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.133.245.20']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ddaf5d-142b-4512-9a3d-c47a11bb3edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.167.225.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e028e9b8-b689-4081-b8b3-d72a47b5f6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.181.233.11']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c904a97e-b46d-45de-b89f-65bc0045f1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.182.114.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf0fd00-7312-4e39-90a0-262810e01c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7956f71-bd2c-459a-9b2a-c4ce96d02de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.54.54']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfbdce5-b18a-444f-a3a6-d8ee3f9fe7c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.55.226']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8903083-654b-4a75-9d4b-672ad0a0e46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.217.181.207']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e1a8c0-db66-45f9-b3b3-aae55e005805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.229.32.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe3136a-fc7b-4219-8d61-0a479dfbe2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.230.187.71']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f61407-d2e5-4b30-94a1-670a5c239b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.238.120.99']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e7ab79-0e1d-4441-808e-a4d9417d3946", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.42.54.132']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b1dd7e-74fb-42a5-9c77-422689f95942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.46.145.69']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2432056d-293d-4caa-90c0-c2a89ba6f2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.58.255.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7e5c45-d7fb-4619-9ed8-b47947cc4b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.82.234.210']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1de551-7256-4889-8f5c-24a7c02b1805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.238.22']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e7e380-7dc9-4845-9a54-45f17e4fa4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.107']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7dac4ba-5077-4084-a23a-f66821958548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.177']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132c6253-cbe8-4d00-a3b6-0afdb77ed422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.72']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cca49a-cdca-42d1-8f01-f69ac00350fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.181']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4635a0e-fbcf-4687-a665-66a5f90cb7b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.223']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b169c231-007d-4c7a-9e75-03998dafeada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.245']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd6c704-e733-4ee0-a54b-6718b86ca7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.251']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d29da3-7e23-4b6e-a8ed-f657471cdba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.108.76']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6eec4e-8a88-4b7c-ab10-a4cbc7cada1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.110.209']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48b9526-cac4-4684-952d-96a36c28164f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.110.91']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b137230-338d-43ac-8157-1bbe0a3f98ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.98.168']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e590f500-d829-4b83-ad43-cb230a96c8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.44.174.248']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ca690b-72bc-4102-ab7b-3754d5ee727b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.78.175.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd802c57-a4ba-447f-96ba-07b557cf5721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.9.226.106']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15e4233-c58e-4192-8368-ca7d82cd0932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.128.10']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97268f60-2991-46cc-b568-42f5d53c4c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467e385f-8459-48a0-bce7-2f36cee77878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.191']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7588938-893a-4e2c-aa80-17e4b4e62b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.31']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd34d943-81d2-499f-9fc9-26c0953f147b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.46']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f78c414-9305-4f19-b637-ba6c8b6d0184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bda9b3d-1fa6-4f4d-acde-4920b6d8e1da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.163.191.79']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a185cb70-42b4-4694-ab6e-186785add6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.92.144']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf5b9b8-419c-4666-bb4c-8632ac87c038", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.126.214.9']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bd8730-3d81-47c4-ba86-b59d3670c2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.142.247.115']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a2095c-1d63-4bc4-b6cd-0586751b6135", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.213.174.120']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075aeafa-2dff-4705-8c5c-b057fa6c2452", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.125.5']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd41cca-0493-4e9a-9f62-d9089166e0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.125.94']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df1b781-2346-4ab9-9525-119e3136cb08", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.3.41']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4a3800-6cac-4357-9715-893119b7e981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.89.204.118']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3634f8-b22c-44b5-bcf7-6aa1080eebce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.90.43.197']", "pattern_type": "stix", "valid_from": "2026-06-17T00:00:00.000Z", "valid_until": "2026-07-17T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-06-17-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9db475-686a-44c6-8b95-8cf8fca0a70f", "sighting_of_ref": "indicator--b505ec45-9b32-4a39-9713-652fd61e3b42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca53b97c-5d1c-46ad-9dd0-9b50e3234d4e", "sighting_of_ref": "indicator--d1ae4b7c-a53b-46ef-b0b7-a6733b9a84e4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44511a8c-d496-4ee7-bcf3-9bc0462fcb79", "sighting_of_ref": "indicator--754219ba-5632-4b4c-9c9e-754f91dad198", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6076ffa6-b2e1-456f-a06f-3afeda4c7b18", "sighting_of_ref": "indicator--48424e21-8ff2-450f-b963-0bb777decc9e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e333e74c-5884-4482-b419-70b13fd8c3b3", "sighting_of_ref": "indicator--2c4f656b-6454-449d-a51d-32f613a7137a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdc137a-f581-4f21-a76c-0871762babb1", "sighting_of_ref": "indicator--de521365-f1c4-4466-8894-a00c4991376e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577dd914-21d7-4a99-93ef-9c1fada18102", "sighting_of_ref": "indicator--25bbfae2-30a6-424a-b9dc-c46825821f2e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc533124-a664-4c29-b803-3a5840c872b8", "sighting_of_ref": "indicator--0541eb18-d7b0-431f-b95d-38760fb13671", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a354bca-8db1-422a-9c7d-806a9ebbef38", "sighting_of_ref": "indicator--9e745908-cb1e-4643-9d2d-b25b0ce3eefa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28207956-6bfe-4763-b52c-ec1c9ef7c1e5", "sighting_of_ref": "indicator--dbe903d6-218d-4b7a-aad6-a043206fa2eb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6db17d-652e-4af2-8615-69e7baca21b5", "sighting_of_ref": "indicator--7dcbec72-7629-4c84-89f8-53a6843fa6ab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7ff33e-31e8-4e5a-adef-e65e32ec976f", "sighting_of_ref": "indicator--1b811594-0310-4fcf-aba1-cb85a51d518b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f1f4ef-a37a-4dc5-93a6-8c1d71f4b019", "sighting_of_ref": "indicator--f2769a8b-3903-4797-b7d2-36b40135213a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978e36b8-1903-4bc5-8852-902385c7c4b2", "sighting_of_ref": "indicator--2528fe4c-80a2-489d-ba11-e6796d57283f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64cc2b6-24e0-4a83-aade-ce647a300b73", "sighting_of_ref": "indicator--8bbef0cd-bfff-49dc-8c12-1b4f0f28803e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53709c74-8b2c-4b05-96e2-f946f9e8fd60", "sighting_of_ref": "indicator--ffea2686-161b-4311-987d-30419a71351b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb58373-c1bc-42a1-b036-f664e6d9ddfa", "sighting_of_ref": "indicator--01b29dcd-71af-4d39-bf28-c765d6c187c0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e5e11b-342d-44c1-8358-c9a357a7ece1", "sighting_of_ref": "indicator--46adc723-32e6-4989-bf97-d165700ec876", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e1dc1d-9375-4b1b-9e7c-17c4003e5074", "sighting_of_ref": "indicator--46adc723-32e6-4989-bf97-d165700ec876", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b459d9-67fd-4d41-8bfd-f8bbfe69a249", "sighting_of_ref": "indicator--46adc723-32e6-4989-bf97-d165700ec876", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9845ef2f-84a2-43b4-a978-51b00a2c146e", "sighting_of_ref": "indicator--c44b1545-9054-4240-b0ac-1395a293a69f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a52da64-5ab4-4ed7-b896-f053650156db", "sighting_of_ref": "indicator--c44b1545-9054-4240-b0ac-1395a293a69f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b774da59-a229-4ded-ad51-dc47310d62bd", "sighting_of_ref": "indicator--c44b1545-9054-4240-b0ac-1395a293a69f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be09185a-b67c-4442-b5c1-7152bd9f5533", "sighting_of_ref": "indicator--3012ad52-01e2-4aab-9433-1fc8d898857e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aceb4ce0-77cb-4c51-a061-b9c5ed56bfa0", "sighting_of_ref": "indicator--3012ad52-01e2-4aab-9433-1fc8d898857e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfad347-b272-4f01-b787-ac6416c05129", "sighting_of_ref": "indicator--4e1c7799-dfcf-4266-9f2c-06b115fe474c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9203f79b-a914-4c21-8d37-7751d648b672", "sighting_of_ref": "indicator--4e1c7799-dfcf-4266-9f2c-06b115fe474c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c246b8-66dd-47c2-a9a3-4894a46ba361", "sighting_of_ref": "indicator--42cd1310-379f-487a-aa6d-739fb9fc5ce2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26b16ed-adc0-417f-95ec-8914bc7f72ef", "sighting_of_ref": "indicator--2f2e715a-0db3-46a6-8b2a-0a6875c592d6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f227639-3df7-450a-b031-656d7f2a7ecd", "sighting_of_ref": "indicator--2f2e715a-0db3-46a6-8b2a-0a6875c592d6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7581e1-07ef-466d-b6c9-7202736f1405", "sighting_of_ref": "indicator--320eb954-e443-44ea-a3cf-3e209c1842f7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e6e2e5-5270-491e-9e6a-4681bfa6e19f", "sighting_of_ref": "indicator--896f650e-0e26-41ee-84ce-f50343202b47", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c878398-7734-4ed5-96d1-8c6326076656", "sighting_of_ref": "indicator--3a52a328-15a2-4b4b-81a1-2e9676314315", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00315de-d408-4caa-bef7-8ee2b542c4e0", "sighting_of_ref": "indicator--9e3721fc-cac7-42f7-90fe-0dc2f9d95a1f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482f5e32-3a98-428c-bdb6-896a5eab2bbf", "sighting_of_ref": "indicator--16c704ae-30fd-461d-8471-acf08320d9b1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808fbc21-2f9f-4d4a-aa00-eeecb98dd7c4", "sighting_of_ref": "indicator--696815cf-a248-432b-bb4b-543bde0dba30", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c28274-f75b-4bf5-b2be-8cc6443a7250", "sighting_of_ref": "indicator--219ed898-adf7-475a-bd72-a7d85b8f2a7d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b890168-9978-499c-a1b8-867e80eccdbb", "sighting_of_ref": "indicator--30e86e41-42a6-4766-835c-6793e135097c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a83ff44-943d-44be-bffc-5ed178122937", "sighting_of_ref": "indicator--30e86e41-42a6-4766-835c-6793e135097c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e0431c-2247-44cb-b3c1-0a30997e7da3", "sighting_of_ref": "indicator--d6caaaa3-2c94-4df3-8c5f-43cb084e1c65", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bd7b37-833d-4e5d-aa27-472e721ce400", "sighting_of_ref": "indicator--bdd8bbf5-ab46-4760-b94f-5d666da77681", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712452bc-90b2-4ae9-8c26-91a72881f6bf", "sighting_of_ref": "indicator--5f47c4a7-b2c8-434a-8389-4e953e277eca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ce4831-2756-4984-86df-11655d2ed8f9", "sighting_of_ref": "indicator--6472d6af-18a2-483a-b54e-a0d2240c5c55", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf5f5b3-c791-421a-8a86-2f14af112856", "sighting_of_ref": "indicator--6472d6af-18a2-483a-b54e-a0d2240c5c55", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb72fd74-50ea-41a6-9e70-0aa74d101e00", "sighting_of_ref": "indicator--6472d6af-18a2-483a-b54e-a0d2240c5c55", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc61a88-a7b7-46e7-b3e4-c374a49ce858", "sighting_of_ref": "indicator--e287ea22-012b-45fc-a2d0-a8f734f45a72", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b025170-e08b-4699-86a8-328c4518ea2f", "sighting_of_ref": "indicator--e287ea22-012b-45fc-a2d0-a8f734f45a72", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7107c804-9d6c-45a5-b698-18fbfd64f140", "sighting_of_ref": "indicator--6919e9b0-17f4-47e9-86be-4a48432abdc2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8b038f-3f27-4e12-a11a-fe98620b71d8", "sighting_of_ref": "indicator--025a710b-7985-412e-a13d-89f5ebc14bf8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2d82b4-e94e-40e6-8d38-9e7fee414cfd", "sighting_of_ref": "indicator--4fce92b2-0b6a-40fe-b4bc-c270ee784bcf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614f697d-95fc-40f7-b790-eab645be8b4e", "sighting_of_ref": "indicator--2a5a703e-b40d-4032-94a8-751e57d1a9d7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25edb09-61e0-493e-97ad-5a48f98bc248", "sighting_of_ref": "indicator--2a5a703e-b40d-4032-94a8-751e57d1a9d7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84856dcd-084e-4470-a018-fd2df365cfbd", "sighting_of_ref": "indicator--197aec22-d812-4863-ac0a-9ee0e5627a84", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f816665-5169-43f3-a112-8587ab51aeb0", "sighting_of_ref": "indicator--168dcbeb-c186-4838-9be7-6e455b96cca9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a135d5ab-6213-46c8-81ca-558fa6cc5486", "sighting_of_ref": "indicator--0db631e2-cfc4-44ac-8328-cf07109a704c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a823b6-1acf-4588-91d7-e1b3940d64ee", "sighting_of_ref": "indicator--6e30a379-1a97-44be-96b9-b554c8555f68", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f88bf3-5545-4035-9f66-49c91af79090", "sighting_of_ref": "indicator--abb73fe2-0951-4992-9dd5-9954177a6ac3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831b4db9-cb28-481b-a409-0f2b38c2ef54", "sighting_of_ref": "indicator--abb73fe2-0951-4992-9dd5-9954177a6ac3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ac992d-e812-4ba0-bb7a-0d1791997895", "sighting_of_ref": "indicator--2bb28af5-95b7-407e-8261-ea485ea7e4ca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd299cdf-a1d6-451d-aed1-a262d6a0058f", "sighting_of_ref": "indicator--dde279a0-e770-4df9-bf16-d06e3788f1d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e615ee7-9c06-445c-90b8-cc1876c2c792", "sighting_of_ref": "indicator--e92a46ac-7b9f-4253-9a8c-2725512243a0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedb8785-77aa-47aa-8ab1-0acb87ac6b7c", "sighting_of_ref": "indicator--1ac0f078-aaef-49eb-87b2-d42117ceb305", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e34922-173a-48f0-be18-94b3b1cd6ae5", "sighting_of_ref": "indicator--8590c9a0-b6f7-452b-844e-b71dfb0fada6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d3dc3c-28a6-4159-8421-e3f7cfeab572", "sighting_of_ref": "indicator--c1a39a7b-7477-4316-840b-59f12688a9e4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c73bc9-8889-40a1-9aaf-22dd7744dfb8", "sighting_of_ref": "indicator--268a884b-ec45-45e7-8bd1-ec794c527984", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4662259f-ea3a-474a-8b29-2086a12ca4de", "sighting_of_ref": "indicator--97cd31fd-e3c6-404b-b4c3-a72952ec9699", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b29177-becc-41b1-921b-e9c9c1143976", "sighting_of_ref": "indicator--6b0de000-fe28-4095-8a4e-b117a91f7a9a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd953fb8-f730-46d1-ac7a-5469664d2220", "sighting_of_ref": "indicator--1a283303-f50c-4023-9709-e654d5cf863c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae055925-ce5b-4ccf-9354-710ac1366c6c", "sighting_of_ref": "indicator--d04fb1fe-3a7a-40c3-9e21-db591cc9894d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ff138c-5e8d-4e75-959a-a7a1c179f007", "sighting_of_ref": "indicator--7bad2246-e99c-4822-b5f7-c34a43268ca5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9736a12-57fb-4b35-b12e-6c17e6e58be4", "sighting_of_ref": "indicator--7887cf67-d723-4cb5-b73f-6449204a4851", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b7547a-3e0d-4757-9e1b-e35c5c0ae9be", "sighting_of_ref": "indicator--e2b7840b-2b11-4835-9df6-6aa53bc729a5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60783b48-439a-4c0a-aab4-c98e6bbb8303", "sighting_of_ref": "indicator--ca969b5e-bde3-45bb-b5a9-192bdf3ba16b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f08bd6d-d105-45b2-8780-640b4108ca19", "sighting_of_ref": "indicator--ca969b5e-bde3-45bb-b5a9-192bdf3ba16b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a3a84e-99df-4771-b4a9-ece2865b12d7", "sighting_of_ref": "indicator--5d2290d6-0859-4a41-8dc9-9656cea6d460", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8c1e77-9559-44cb-b7fe-1646502ffb67", "sighting_of_ref": "indicator--2a4f4b09-626c-4c75-a8a5-3b1f38d2d624", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc87ca6-fc1a-4ac6-95ee-2e611d879b65", "sighting_of_ref": "indicator--ea924662-a8c6-4644-8b71-c20eb7fe31fb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b5ef50-a959-4108-8935-72ff3b774046", "sighting_of_ref": "indicator--6502b00b-81ed-44fd-b8c0-4e24393882ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50abf67a-3bfa-4bb3-954e-f0665e16e4be", "sighting_of_ref": "indicator--6502b00b-81ed-44fd-b8c0-4e24393882ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f0f895-a078-489f-b78f-96699b618397", "sighting_of_ref": "indicator--6502b00b-81ed-44fd-b8c0-4e24393882ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f98120-6cc9-4aee-afe2-2a15d316a6f5", "sighting_of_ref": "indicator--5cbe2337-d517-4171-946f-e8d5f64158db", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de2c36b-f7c6-43ae-b68e-fce0de810794", "sighting_of_ref": "indicator--5cbe2337-d517-4171-946f-e8d5f64158db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08915c36-c62b-4792-8cdb-78dde7a0d0ad", "sighting_of_ref": "indicator--5cbe2337-d517-4171-946f-e8d5f64158db", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29070e88-bbe5-4b89-a9f7-2c4039322dc7", "sighting_of_ref": "indicator--75364750-03de-4715-afbb-48d32f9b12bb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6f718b-7a68-4fd0-9014-52674b6f7637", "sighting_of_ref": "indicator--75364750-03de-4715-afbb-48d32f9b12bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69e1499-d145-419c-a925-ae27f5f369e9", "sighting_of_ref": "indicator--75364750-03de-4715-afbb-48d32f9b12bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1235918-c345-43da-8e8c-26e42c7a03db", "sighting_of_ref": "indicator--02bc0385-7b94-4de6-9d8f-f88c738448aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa797adb-ec3d-4605-a08d-1146061899a4", "sighting_of_ref": "indicator--02bc0385-7b94-4de6-9d8f-f88c738448aa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0de934-e929-4670-89f7-f856505660ec", "sighting_of_ref": "indicator--02bc0385-7b94-4de6-9d8f-f88c738448aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682704a5-4ebf-46a1-8653-49690a8566f4", "sighting_of_ref": "indicator--b7c0c1bd-0321-4556-b014-778174de60cb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d56c50c-6bdd-4eec-98ad-6cb06da76f36", "sighting_of_ref": "indicator--27c82c25-5508-4d43-847b-1b40c04f8948", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a47ee0-95ba-46cc-80c6-7a186bf5661e", "sighting_of_ref": "indicator--93e2ff44-0a5a-4e4a-9828-47850fc82a6a", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a768dc1f-1c64-4058-b2e6-d496f9071147", "sighting_of_ref": "indicator--c1f1254b-5830-45fc-95c9-abba2dc5c3f4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bce741e-543b-4aaf-9cd4-68c1841ac435", "sighting_of_ref": "indicator--474a91af-d476-4353-b584-ad46bec68afd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf83056-c8e9-47f7-b0b3-4548588be3a9", "sighting_of_ref": "indicator--474a91af-d476-4353-b584-ad46bec68afd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e20a00-c642-4745-8389-1bef515e57eb", "sighting_of_ref": "indicator--2ce46f1e-1a12-433f-86d0-44a3318f778b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b0ce5b-ec2d-485a-8d45-49f475ff2dac", "sighting_of_ref": "indicator--c0a4d129-3cfe-4e71-9fed-68b258bc8f20", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902f497c-1cc9-4604-8482-053d2d0a5327", "sighting_of_ref": "indicator--6dd8576c-12eb-40bc-864d-6521c050bbbb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb72e7c-df48-42db-9a0c-48c77a111843", "sighting_of_ref": "indicator--646a53fc-13c1-4ac3-b6be-15d52fcec91a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24f311e-0f39-4ab0-b893-e1a2c1f0afd5", "sighting_of_ref": "indicator--23daa41f-0dd3-4dfd-85a2-8dcc4a2ac3b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069bd837-2cc3-4c81-844c-6aa1a4bd6eae", "sighting_of_ref": "indicator--8ebd05bd-a4f2-4214-b8fe-03971d391097", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6534ea-498d-440e-87cc-09609498bd3b", "sighting_of_ref": "indicator--a8af1fd1-6338-4e18-8387-a169173ad3af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf7b65f-39c2-4460-afa1-a16d6b57fa9f", "sighting_of_ref": "indicator--a8af1fd1-6338-4e18-8387-a169173ad3af", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96f51e2-ad1e-4d62-b1fe-db66d90fc077", "sighting_of_ref": "indicator--a8af1fd1-6338-4e18-8387-a169173ad3af", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35835a8b-5f16-431b-b27a-25355d56bbbd", "sighting_of_ref": "indicator--de69f102-c7c1-422e-b0e6-655e7e8c4d0a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb0b891-b6e8-4b49-8b6c-7177cce30a5b", "sighting_of_ref": "indicator--de69f102-c7c1-422e-b0e6-655e7e8c4d0a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5874049b-ab33-4113-a395-4780f0a12134", "sighting_of_ref": "indicator--fbf94004-5f3e-495a-89c5-6ca2e80ac2e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8a49b4-a0b9-405a-8742-2ecf54220f40", "sighting_of_ref": "indicator--fbf94004-5f3e-495a-89c5-6ca2e80ac2e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e0ab78-1ea6-4cb9-b8d3-25739e0a67b0", "sighting_of_ref": "indicator--fbf94004-5f3e-495a-89c5-6ca2e80ac2e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e3ac5f-a1b8-4021-a4bb-1e91f06b1779", "sighting_of_ref": "indicator--7e3f355e-8d22-45f1-b6ee-75969bbf90cf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7940253-2af1-4611-b296-7f64cd799c64", "sighting_of_ref": "indicator--7e3f355e-8d22-45f1-b6ee-75969bbf90cf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c1d7f8-e3db-4130-bfd4-3a41907c1fe1", "sighting_of_ref": "indicator--c2f9e61d-e9ff-4d34-8449-77b29a5e8e31", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372fb471-02e0-45f1-a000-51673fa31aec", "sighting_of_ref": "indicator--c2f9e61d-e9ff-4d34-8449-77b29a5e8e31", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba813da-71ba-4722-a461-f3c9a969c207", "sighting_of_ref": "indicator--c2f9e61d-e9ff-4d34-8449-77b29a5e8e31", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a425e0e-f778-4348-9bf7-b8a1aff4f495", "sighting_of_ref": "indicator--709a239a-58be-4bb7-8b7c-d4236d3e78ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b8474f-3e4e-4f1e-b3a6-2924b27b51ca", "sighting_of_ref": "indicator--709a239a-58be-4bb7-8b7c-d4236d3e78ef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c17bb59-53a4-4f4e-a9fe-5c160880352f", "sighting_of_ref": "indicator--cef0e39b-ff6e-46f7-bcba-b1baf890286a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbef2510-04fd-42f6-a7a9-4f47f99403d5", "sighting_of_ref": "indicator--cef0e39b-ff6e-46f7-bcba-b1baf890286a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200c9629-4712-4cdb-8848-9841a04d71fe", "sighting_of_ref": "indicator--cef0e39b-ff6e-46f7-bcba-b1baf890286a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c844ff-8d6e-4688-8173-aeafd4862018", "sighting_of_ref": "indicator--be927951-54ff-4772-b7ad-2fb5ed4f3b0c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24cb39a-6bd8-4636-bb0a-c2b0ada49734", "sighting_of_ref": "indicator--be927951-54ff-4772-b7ad-2fb5ed4f3b0c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e86694-8ccf-4e99-920b-c31da5fb80d0", "sighting_of_ref": "indicator--31505a76-305b-4e10-beac-60b512f02f52", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5951a032-6a8e-49a8-b245-d5192dcdce56", "sighting_of_ref": "indicator--31505a76-305b-4e10-beac-60b512f02f52", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43c38b2-c07d-4dd9-8e45-fbcd7c2f25bc", "sighting_of_ref": "indicator--31505a76-305b-4e10-beac-60b512f02f52", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca0ff4e-a01e-4abe-84ee-de0f34546b21", "sighting_of_ref": "indicator--9e8fc994-0cf5-4f79-84c6-f5ec0e8b7528", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e862b5-6564-4401-a837-efc233181ba5", "sighting_of_ref": "indicator--9e8fc994-0cf5-4f79-84c6-f5ec0e8b7528", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01796de-ae39-4aea-8930-8fdcc65e76e7", "sighting_of_ref": "indicator--3f92e248-34b4-4a93-ba45-e7000a69d0b2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701910dc-97c0-4eb5-9750-f436b5abe95a", "sighting_of_ref": "indicator--d32ec99b-f4a8-4466-b2f4-ecd58cd5d091", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870b9b10-e3c8-4615-8bc6-78a69efe9214", "sighting_of_ref": "indicator--d32ec99b-f4a8-4466-b2f4-ecd58cd5d091", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1778b49-2c02-46c6-8ac8-5e476ac77e0a", "sighting_of_ref": "indicator--d32ec99b-f4a8-4466-b2f4-ecd58cd5d091", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1f7ed0-e70c-4bb4-baca-bca0d6244ac8", "sighting_of_ref": "indicator--a4bcab43-7201-438a-92b2-c5e8df96db11", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336e145d-6ff7-4886-a09c-092620024d20", "sighting_of_ref": "indicator--c8c2d25c-fbd1-47ca-9353-a134485f9f1d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb77fe97-ca19-42be-8790-57b5c004f5bc", "sighting_of_ref": "indicator--ebd8368f-3b13-42de-b66f-91034914b7a5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f6f9b6-0ef8-4b68-af63-998d4085050d", "sighting_of_ref": "indicator--7ac4ff53-1298-4a5d-881d-6506eb093076", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a3af2b-8317-419c-87a5-0ae5d9820399", "sighting_of_ref": "indicator--f564b4a4-744a-4454-b88c-135a204d9111", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2922c993-aa13-448d-8ec7-45633f506b3c", "sighting_of_ref": "indicator--053517d6-f873-4fce-96ed-ac8b698e21fd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3009d224-6679-4736-8a24-44f252456e72", "sighting_of_ref": "indicator--053517d6-f873-4fce-96ed-ac8b698e21fd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18da4a9f-0d2e-44ff-b99d-0f1d88c58344", "sighting_of_ref": "indicator--4aa03ab0-8b13-4235-a2ef-d4f25fcefc88", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317480d9-e521-4504-9a40-fda1fa17565e", "sighting_of_ref": "indicator--4aa03ab0-8b13-4235-a2ef-d4f25fcefc88", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d91d82-20d3-49e1-93c3-44ef4ab47e9a", "sighting_of_ref": "indicator--4aa03ab0-8b13-4235-a2ef-d4f25fcefc88", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000a54fd-7a92-40f6-80f2-2e92f12bdd29", "sighting_of_ref": "indicator--a9694eae-78f9-4d54-89cc-899a0dd30678", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969ff4fa-3ca7-4b43-ad04-e105fe15bebb", "sighting_of_ref": "indicator--84148847-bcd5-4dab-a2fc-a7fe5de127da", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2247e28e-42f0-4a89-8953-c9b8d8ce4527", "sighting_of_ref": "indicator--074919c6-81c4-436e-b2c2-8e3e3561c388", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a029d295-a752-4cfb-8f68-63eddfcc3420", "sighting_of_ref": "indicator--0e188004-394d-499e-8a0c-95b030b4a25f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92be174-a719-4801-a1a3-ced343924b97", "sighting_of_ref": "indicator--72a59c83-42e8-49bf-b2c1-a10639aafdb6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b92ec7-3d49-4460-a047-981de659d3a3", "sighting_of_ref": "indicator--72a59c83-42e8-49bf-b2c1-a10639aafdb6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3d47ed-3dcc-4a14-880d-4dcc228504fc", "sighting_of_ref": "indicator--6741d9da-fce8-4926-9480-18ba869495ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e6b4d4-5b22-40cf-80de-44429046002e", "sighting_of_ref": "indicator--c693fa09-96e9-4c87-bdfb-ce38c918cded", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73527b20-3a2b-43cd-930a-7a83d8f61755", "sighting_of_ref": "indicator--811f26fd-2f6b-4854-b0aa-8e345296811c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d2cd32-0ed4-45d0-b678-6a11d538c311", "sighting_of_ref": "indicator--811f26fd-2f6b-4854-b0aa-8e345296811c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fd7499-0988-4a91-a90f-964c0d72d6e0", "sighting_of_ref": "indicator--9a05014f-88a6-4c7d-ae14-5f0c429bbc47", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41adac69-b19d-463e-bdbd-07ddea926b36", "sighting_of_ref": "indicator--01cd5a4b-7733-4ca0-a0f2-4b1104ffe83b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f359fe9-bffe-4a3f-8337-93f9210dbcd3", "sighting_of_ref": "indicator--a348bf20-490b-4695-be44-26d792112946", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c263ac89-9536-4075-82c7-01dbfff342bb", "sighting_of_ref": "indicator--1cfa7fe0-570e-4d5b-9a87-09fd4b1e97b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd39199b-f668-4763-9ce9-47e66de1571d", "sighting_of_ref": "indicator--2bf3eafb-e613-4c0e-bfca-7250ad1d9487", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d09568-8967-4fda-b9d8-0750ae3ce6a3", "sighting_of_ref": "indicator--a91afb03-f3f6-45b5-8c03-1b0cd578a094", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb75208e-5855-482b-906f-aee28a603ee9", "sighting_of_ref": "indicator--a9f81abb-fbb2-4cef-8ed1-03cbe5e272c4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1244b8b-01e4-4db1-8887-da0d56bb03cc", "sighting_of_ref": "indicator--99c6c74e-bf07-4f96-8542-e426495b5d38", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489c1922-a1e6-408a-a315-21d75a19d7db", "sighting_of_ref": "indicator--4f4befab-e986-4e2f-abd9-5dde4290a25e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8ee91a-cdfc-417a-bd2b-a62b56c610c8", "sighting_of_ref": "indicator--849f4345-144a-48f3-beb0-c703953b1fe2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8925347f-5783-4472-abd5-75fa95241569", "sighting_of_ref": "indicator--c27c6c50-bfd7-4a5f-88bc-fef30928949a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6c4b80-9ae2-4561-88c2-7d0308b5daee", "sighting_of_ref": "indicator--bad73a1a-01f7-4368-ac21-b88c03b6fcae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d223bb-4faf-4193-ae53-b8bd51f6cb87", "sighting_of_ref": "indicator--bad73a1a-01f7-4368-ac21-b88c03b6fcae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7287cdfd-6bf8-4210-a348-87259d963d0f", "sighting_of_ref": "indicator--223b2744-3a04-4212-864b-f9f29ca6d403", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ea6037-c591-41f2-a3c0-10a9574db2ea", "sighting_of_ref": "indicator--23fdeadc-1986-4ece-945a-eea58aa4867c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d90f20d-41df-47d0-acbe-e4428b23bede", "sighting_of_ref": "indicator--51b812c2-f693-453f-8a48-c5a40ece4470", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a299838f-53f0-4c2b-b248-a0c1b7cbadcd", "sighting_of_ref": "indicator--a5b18a76-bc32-4851-b271-e12d1687e413", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cbc12e-69d1-4eb5-b100-9bcf9721824f", "sighting_of_ref": "indicator--d05c9ea5-d066-4da9-a98b-e1f0120e181c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dedaa53-083c-41eb-87a9-70c9c3f38745", "sighting_of_ref": "indicator--1fbbbad1-ac0b-48f1-b4c3-ddb6b68a1c6e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e230de04-4b23-4713-ae57-026c860a5c99", "sighting_of_ref": "indicator--6b4216e1-5042-4f5a-94cc-d8e1cdb6a409", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfd7759-7c6b-473e-8b2d-e1ab0b74535b", "sighting_of_ref": "indicator--2b5ba1ec-cc08-42c1-a427-885b19546663", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca2cbda-a558-464b-ab5c-3e51ac3921a1", "sighting_of_ref": "indicator--ddcc8c69-6abf-486b-b2cc-93e68e1bde35", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b54c9f5-7483-4b36-a661-923b6119c6ba", "sighting_of_ref": "indicator--e8b79cfb-93ac-4003-a837-79c99ad481e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8807e134-1845-447a-8bb7-607d034a87e0", "sighting_of_ref": "indicator--e8b79cfb-93ac-4003-a837-79c99ad481e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d49d54a-5df1-4e93-8690-936c8987c462", "sighting_of_ref": "indicator--5291f043-25d0-488e-9880-d38209fd3973", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22a70d0-0386-46e7-8724-b45821d6ee3b", "sighting_of_ref": "indicator--580580d2-204c-4cca-9fea-7f0bba40c7f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5e1fc2-247f-48b9-b23d-17c06c6d742c", "sighting_of_ref": "indicator--580580d2-204c-4cca-9fea-7f0bba40c7f2", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dd2ee8-7092-482f-b2bb-8326efc7c332", "sighting_of_ref": "indicator--13d7325a-dd48-4819-b9e4-2967fe774ba6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff441376-b6ee-4915-9084-5ea659edb819", "sighting_of_ref": "indicator--0632f591-d328-429a-b680-e24799c17a76", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60eda0a7-efc7-4c12-b87d-3ed44c91f6c4", "sighting_of_ref": "indicator--f0f33b59-eaca-4fd4-86a9-0b48d64092e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef6e0f9-a86c-44ed-8648-c2351541dcb7", "sighting_of_ref": "indicator--f0f33b59-eaca-4fd4-86a9-0b48d64092e5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf1cb1a-c227-4da9-9694-a9108b0f7fa7", "sighting_of_ref": "indicator--f0f33b59-eaca-4fd4-86a9-0b48d64092e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc31275-3c88-4024-9d9a-044312a6110d", "sighting_of_ref": "indicator--16e64e6b-5c27-4472-b7a7-6c82a0b7606e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5812fd0-5244-4aa4-a10f-4d3130fdeb9a", "sighting_of_ref": "indicator--16e64e6b-5c27-4472-b7a7-6c82a0b7606e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd64231b-c580-4057-b496-caf515f53872", "sighting_of_ref": "indicator--c5f10b9c-79c3-4678-a6b2-dddd2e2e20ed", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947697e4-d0fb-41b5-b036-c0ca38049d8a", "sighting_of_ref": "indicator--6d5fc6c4-36af-464e-be38-7b0d52db3c94", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bab6b8-8fd3-4d55-b7f7-b068d1bc3ae2", "sighting_of_ref": "indicator--7c13a806-bffc-4b46-8cf4-725757bfc0df", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bc08b0-5449-4fac-b4b9-0406305b0da6", "sighting_of_ref": "indicator--73d9633f-7887-4100-84bd-26200ebf3f03", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3e0d76-e7c4-4ecf-b701-7d437c8a7d11", "sighting_of_ref": "indicator--1402d2ad-6b11-46cb-a16b-eb7caf3d5bef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd38bab4-4152-4bf7-b453-4611f0a6c219", "sighting_of_ref": "indicator--f043d22a-3b0d-4e6e-90bf-2f4149f7f5ad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bf7060-0b4c-44fa-bb65-ef937a8cdb98", "sighting_of_ref": "indicator--29782777-dfde-466e-a6f9-4736cdad258a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b2ce0e-146a-4b6b-a65b-237d66669252", "sighting_of_ref": "indicator--29782777-dfde-466e-a6f9-4736cdad258a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc4ff68-0169-4e6a-a050-a5595e6e551e", "sighting_of_ref": "indicator--29782777-dfde-466e-a6f9-4736cdad258a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53b66f8-0378-4cee-ba1f-368feb352dbf", "sighting_of_ref": "indicator--bc7be80d-4bb3-412b-8cb8-89dc1dfec299", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bb2f3e-11c2-4340-b786-e9c096466277", "sighting_of_ref": "indicator--bc7be80d-4bb3-412b-8cb8-89dc1dfec299", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8093af-f71d-4cb3-bad3-b5f6c573423f", "sighting_of_ref": "indicator--3b29139e-34b5-4f35-8c6b-7bad1597bf17", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bb1c13-a162-4198-9079-417665674e51", "sighting_of_ref": "indicator--d78d8109-ee2c-423d-aa3b-20d9442b0325", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e7fcf8-8ef9-44e2-8478-140538ea7628", "sighting_of_ref": "indicator--d78d8109-ee2c-423d-aa3b-20d9442b0325", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084a7a64-8f1e-44e9-bea8-78a1d5d78df4", "sighting_of_ref": "indicator--e8e73b5c-c0b3-4727-873e-fa8582491373", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcc8040-b59b-4130-93ec-1a5d637dd03e", "sighting_of_ref": "indicator--c8fe792b-bcec-4c56-8742-c7715f147719", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb71ef0-4460-47f7-ac70-20db3393d919", "sighting_of_ref": "indicator--c8fe792b-bcec-4c56-8742-c7715f147719", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8250481-cea1-463a-9747-a6d8e4759b33", "sighting_of_ref": "indicator--c8fe792b-bcec-4c56-8742-c7715f147719", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548ab422-b50e-4854-99e7-c5eb75cbd1eb", "sighting_of_ref": "indicator--03252686-22f6-469a-910c-5add6d989336", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcdc77e-c27d-4444-9b3d-2997b0d63c03", "sighting_of_ref": "indicator--1caede79-3068-4b9c-910a-01ec60ae73e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e10aaf3-8c3d-400b-b903-f6130bbf1aeb", "sighting_of_ref": "indicator--1caede79-3068-4b9c-910a-01ec60ae73e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f552a9b-7ee2-4bd4-9d63-043d9ec2122b", "sighting_of_ref": "indicator--1caede79-3068-4b9c-910a-01ec60ae73e7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7e27e6-fc21-4a0f-a32f-76ed0c92ef69", "sighting_of_ref": "indicator--fa3874a5-f185-40e7-8054-5166ed66c122", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa9c046a-7934-4b2f-94ce-20a4ecac545f", "sighting_of_ref": "indicator--06ce24f1-9ce0-44b3-a123-144707b743e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1317d624-e209-4729-83f0-140b7ad68a42", "sighting_of_ref": "indicator--3a027b48-99b4-4ed3-9b14-aca69497a987", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdb1c66-53ad-4765-a480-3085cc70ff22", "sighting_of_ref": "indicator--3a027b48-99b4-4ed3-9b14-aca69497a987", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e9ddc8-3e95-47a0-8857-d036eb6a5825", "sighting_of_ref": "indicator--3a027b48-99b4-4ed3-9b14-aca69497a987", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c6ea25-93ae-4700-ab76-4d7e761c66db", "sighting_of_ref": "indicator--6c3b9b4e-49c3-4bd9-9216-a89346184009", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c62b5a-1f82-4d58-893b-7a7f812454de", "sighting_of_ref": "indicator--6c3b9b4e-49c3-4bd9-9216-a89346184009", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ed1b75-1788-4cc5-8d70-83de91eff3a1", "sighting_of_ref": "indicator--6c3b9b4e-49c3-4bd9-9216-a89346184009", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd81a00-3027-4e58-95c5-436b7d1aa4b8", "sighting_of_ref": "indicator--a33e58a9-3558-4b1d-949e-e36387a74bbb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99eef7c-c8d6-469b-b81c-456c05354d64", "sighting_of_ref": "indicator--faa64ebd-62a6-44d2-a89f-42044e06854c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224a6de0-6381-471e-97eb-6d87a7ae9d39", "sighting_of_ref": "indicator--90db2a10-0ccc-4d7a-8d07-78bb970c6dba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7981d70-d995-4220-961b-9cbc9aabc8b7", "sighting_of_ref": "indicator--90db2a10-0ccc-4d7a-8d07-78bb970c6dba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f3951f-4790-4380-ac6e-793f01215eb2", "sighting_of_ref": "indicator--6c1b2f25-6c0f-49c1-9c59-4a8f7c9deb2a", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f1048f-6175-4f29-8ec1-9e6ee5e30f96", "sighting_of_ref": "indicator--cf0a94c7-e047-48d2-b4aa-7c1e2669fef2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052b81c5-56dd-4a29-ae4b-2a26477a854d", "sighting_of_ref": "indicator--8797b299-5fca-4e01-9a71-fef6e728c723", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab22642b-fa9d-4d95-8866-b79e073f2eb7", "sighting_of_ref": "indicator--8797b299-5fca-4e01-9a71-fef6e728c723", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060d2dc7-2f86-4b9f-880a-14ff9b772c71", "sighting_of_ref": "indicator--8797b299-5fca-4e01-9a71-fef6e728c723", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ebd72e-d90b-444f-904f-40a758a26cdb", "sighting_of_ref": "indicator--3285bebb-2825-43de-be95-757bf731ae23", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447ccbc8-4921-4c78-af46-2139f9c4983c", "sighting_of_ref": "indicator--f418ba96-5dd4-4ddc-ae28-2015e2c1c491", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31b12cf-6d06-40f0-bde0-d8cde50e9e26", "sighting_of_ref": "indicator--f418ba96-5dd4-4ddc-ae28-2015e2c1c491", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9a9f55-7f20-433d-a668-6274af4a6f5c", "sighting_of_ref": "indicator--5161fbcb-86c4-43a3-9920-c8e53b655087", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464982da-e572-44f7-8057-f4b9f5df2db3", "sighting_of_ref": "indicator--5161fbcb-86c4-43a3-9920-c8e53b655087", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d883f39-e76f-4c74-8738-c52a87a4fe72", "sighting_of_ref": "indicator--d1c3422c-12de-459a-ab83-b77b52f5be5c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ae71b9-7f61-4ed3-b054-6f11b42f1f8d", "sighting_of_ref": "indicator--d1c3422c-12de-459a-ab83-b77b52f5be5c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64c96ee-eefe-441b-ad14-0c13ba65aeee", "sighting_of_ref": "indicator--ff66dc23-8d02-45e9-9a8e-8268468c1fbd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280c9ef3-7475-4d1f-b3ab-7a0e6a2087ba", "sighting_of_ref": "indicator--4760a862-dbda-4a68-932e-4e7128475361", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35c3e24-bc43-4147-a76c-0fc94a4fb1e2", "sighting_of_ref": "indicator--78194477-7efa-41f1-a312-400ac715382e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f118fa3a-78da-4091-aa6d-9204e9c8223b", "sighting_of_ref": "indicator--4ced1ea0-e4a9-413f-914b-ac1b2e3cfe34", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369df448-ddec-4902-9490-473b20e2ebe0", "sighting_of_ref": "indicator--4ced1ea0-e4a9-413f-914b-ac1b2e3cfe34", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322e393e-9c54-442e-9303-3f93668afbc1", "sighting_of_ref": "indicator--561ef881-3ba3-449e-ba6b-8a4e23c24861", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e04e1d-e8d1-40be-9724-2ca1e6434c40", "sighting_of_ref": "indicator--d655028f-67d5-4f51-bfe9-70ec5235cc69", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af251e1-a187-4343-8ca1-dc7135779bae", "sighting_of_ref": "indicator--1f3cb084-4155-4675-97e8-9976bdbac98f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ce5044-c01b-42f8-8e5d-d102c7cb2504", "sighting_of_ref": "indicator--1b9b13c7-2ae5-40e3-ae9b-e5bf9704a751", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f115cf1-656b-4b08-926b-61a209fd8cd1", "sighting_of_ref": "indicator--886a7cf5-2569-48ce-9b3c-96ef9c013b27", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b096497d-18c8-44d6-a356-5f0a12d31627", "sighting_of_ref": "indicator--d68d040b-7d18-44b7-8762-5b6c2a31b9b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8865fd1c-bf65-432b-8765-d13ce3b13c3c", "sighting_of_ref": "indicator--d5d50fbd-969d-4322-90d4-64e9c343b25a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49d26fb-1b13-4e1d-bd90-2cb53df4dcda", "sighting_of_ref": "indicator--d5d50fbd-969d-4322-90d4-64e9c343b25a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a5b13f-7d10-4667-8566-05bc0f00e3d3", "sighting_of_ref": "indicator--80ffa2a0-4a44-4687-88dd-9b6018610010", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d25945-2023-4ddf-9ba5-1c2b9dab7093", "sighting_of_ref": "indicator--b99ddce1-751c-4433-ba51-d7149f775670", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5143a84-42f1-46f2-818d-7f246720dcff", "sighting_of_ref": "indicator--3cd62fa5-85d4-4e9a-9ebe-8628447f9fcd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a194224b-83ba-451c-8794-752a50546b49", "sighting_of_ref": "indicator--3cd62fa5-85d4-4e9a-9ebe-8628447f9fcd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61ff56c-b5ce-4044-8ba2-6a457aca9104", "sighting_of_ref": "indicator--297fed5a-2cf1-4b4d-9e8b-f1ded1c1972c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0845ae8-b073-4009-a6b8-7a7fad5d5e89", "sighting_of_ref": "indicator--5e85718c-bc72-4a6e-9d59-8a45e05276d9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b367bfda-8074-456c-b8a2-7e6e5a1bf86c", "sighting_of_ref": "indicator--5e85718c-bc72-4a6e-9d59-8a45e05276d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb49a76-c5b3-460c-931c-b6a19fdec6d9", "sighting_of_ref": "indicator--4906fa61-647b-4ea1-9fdc-804938d81e74", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcaceb62-c41d-409b-9fce-d878a35593b7", "sighting_of_ref": "indicator--4906fa61-647b-4ea1-9fdc-804938d81e74", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e087ba-cfdf-4f4b-aa1d-e8cfb9d65a61", "sighting_of_ref": "indicator--7060817b-bddc-4c19-8a9b-44b80c23c3e8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c498f77f-6fa0-4545-a170-7c1dc8a3a790", "sighting_of_ref": "indicator--7060817b-bddc-4c19-8a9b-44b80c23c3e8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e3a8b2-a4a6-4546-b5c1-1f5e2020a485", "sighting_of_ref": "indicator--a01237b7-05bd-45bd-893a-22b7ad57f50d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5b1988-ffc9-4db6-b5d5-fe7ac66f048c", "sighting_of_ref": "indicator--a0c3510b-eccd-4074-b8be-4d46dd245910", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bfbb49-a6a5-4531-8af4-1cb61fc3b29e", "sighting_of_ref": "indicator--5bae3586-ae05-42f4-bb04-4f94f746a6d6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fe2c32-9006-4ca0-9352-9661b97273df", "sighting_of_ref": "indicator--44d01f2f-59f2-4df5-98ec-49a2ff828808", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0646430b-9584-44e3-8cad-d87fd4c9ce3a", "sighting_of_ref": "indicator--44d01f2f-59f2-4df5-98ec-49a2ff828808", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea56d9d0-5b8f-43c5-8962-e79646f9007a", "sighting_of_ref": "indicator--1019653a-662c-48fa-87ab-f9b05ddb131b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26cf56b-c65d-4249-b20b-45d21450fb95", "sighting_of_ref": "indicator--44fcf200-db44-4b85-8ff1-95b143863d22", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf1072e-677b-4304-b489-cc5768f35243", "sighting_of_ref": "indicator--a9a60191-7b47-448c-b0d3-2537faec2b09", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed779118-181e-40b0-a087-17aa4f0b515f", "sighting_of_ref": "indicator--f1126d03-150d-47c0-a106-27aae8c33ddc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d49f3e-b301-4884-91d5-6478a5ddbb77", "sighting_of_ref": "indicator--44fde374-3f63-464d-b11d-eb5e98681b84", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e6cd14-3525-4ae9-a74a-c71bfb9826a3", "sighting_of_ref": "indicator--ee15698e-8eef-4d3a-be5e-8fad80622fc9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d23414-ce38-4dbf-b12c-bbe3aa5bf16d", "sighting_of_ref": "indicator--011a5a6d-4a56-49c1-a1bb-080f596ff5eb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2ca139-2030-4dcc-9189-1c03b355d8ec", "sighting_of_ref": "indicator--805700f6-9809-4824-9eae-b1b2bcd3eca9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b8edf7-733b-45f4-b1ba-7d132920aed7", "sighting_of_ref": "indicator--04e1739e-f4c9-4513-881c-f82f4d48603e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e23d7ba-70c0-49bb-a7c9-76bc7c800632", "sighting_of_ref": "indicator--2317da34-1c21-4b02-9779-05d628483257", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bd8698-d3a3-43d9-852b-798e0c5075be", "sighting_of_ref": "indicator--6f8d018a-7cb0-43fb-85c7-44496dcace96", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b97833d-2c90-4f4c-9100-602ef31c9bb5", "sighting_of_ref": "indicator--c394f822-1ae2-4cdf-b955-522522409d56", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b74f44-6fef-476c-9cfe-32c37cf6642a", "sighting_of_ref": "indicator--6ce625a9-74d0-489b-819f-031970ba377f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25523683-9653-415e-bc5f-1133c16ed8bc", "sighting_of_ref": "indicator--1874e24b-7b8f-4898-ae91-ec37aed64160", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e26572f-b20b-4025-b19e-2d83c8d467f5", "sighting_of_ref": "indicator--e9e11b37-4a01-433c-8227-dbb9287241f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85462f51-db22-490f-bce7-bd7839daa4d1", "sighting_of_ref": "indicator--5d558a00-b5ee-4026-8604-074537307951", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7e6a11-cae6-479a-9c62-c64594bddf89", "sighting_of_ref": "indicator--b9a1939e-1ebe-482f-b5f2-545b5ff99531", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf66dd8-dbd3-4255-9cdb-7f3d95b7fb4a", "sighting_of_ref": "indicator--b15cf6cf-61b9-4704-bea6-f57c96f4fc50", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7088d84-3ec0-487a-9fad-1ff4f0f293e7", "sighting_of_ref": "indicator--bdc6038a-ddef-4c0c-a60e-fed1de1c01af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4787679d-78ef-4557-8d5b-27b25659d9ef", "sighting_of_ref": "indicator--0de7fb31-8593-45de-87bd-55b1641178cd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ee755e-29fc-470e-bec2-e6553877d285", "sighting_of_ref": "indicator--93f58f25-9831-4c71-ac89-8cf927e405d8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60e5f86-8cf3-473a-b9ac-322c0839a2a5", "sighting_of_ref": "indicator--4059dfd7-b06a-4413-91c1-c8722bc19943", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaefd270-3099-4667-b950-ad688d569735", "sighting_of_ref": "indicator--4059dfd7-b06a-4413-91c1-c8722bc19943", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e52ea2c-91ff-4808-87fb-c1e78f190c0d", "sighting_of_ref": "indicator--4059dfd7-b06a-4413-91c1-c8722bc19943", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8790fe-b79e-469d-9966-6bb63871e2d7", "sighting_of_ref": "indicator--fe0608c9-57f1-4246-a562-45d2b7899c6d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6ee480-de95-4b28-a9b8-8670d1e048cd", "sighting_of_ref": "indicator--8b7b69fd-6180-4239-b569-16e3844a97dd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4d2f63-f950-48a5-a293-44942238fd4c", "sighting_of_ref": "indicator--4442b388-d749-41fc-9c1f-16d36e85d943", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35170d5-5f15-429a-b484-d2c6b2ac7eb8", "sighting_of_ref": "indicator--4442b388-d749-41fc-9c1f-16d36e85d943", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce1d81d-57ed-47d4-99ec-3a6133ef0850", "sighting_of_ref": "indicator--a8ab2c05-d869-48b9-b105-6d40436237ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af43b64b-4d8f-4832-b160-8b0bdd26fe3d", "sighting_of_ref": "indicator--6dbac7b6-b743-4e5f-9bfc-72a46e628aab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce05de3f-7912-4ac4-9b6d-4e3298569240", "sighting_of_ref": "indicator--24305050-3e6d-442a-9cbe-6c3b2e189f7a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067039a8-26a4-48cf-8e78-9aafab819b18", "sighting_of_ref": "indicator--a58d2364-41fc-470e-9aa5-1a08df81fa46", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9ba499-1e94-43eb-b3c8-8a08586937b4", "sighting_of_ref": "indicator--255b4249-1588-4fa1-9763-a9374f6ca80d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79907fb1-6d04-4ae6-9830-14a67ea9a669", "sighting_of_ref": "indicator--255b4249-1588-4fa1-9763-a9374f6ca80d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4acec25-1f67-4a86-9a76-a68a062a68ea", "sighting_of_ref": "indicator--f13d6025-faa8-453f-9dd5-fedbb1618efd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d7b156-ca1a-4e43-8a3a-775c293effa3", "sighting_of_ref": "indicator--de9e9125-e8da-48d7-997a-13b899640b61", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3a010e-3dd0-44e1-bd92-0bee6a484566", "sighting_of_ref": "indicator--aa8fb7b1-9ce1-4fbc-8210-7a12084f80c2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17ec541-7b86-4620-97c9-9454f51600a5", "sighting_of_ref": "indicator--6b1fbd77-6f2d-43e5-9e9a-34a6aadec12a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba85eed-84b8-49dd-98d1-f816bd6a314b", "sighting_of_ref": "indicator--6b1fbd77-6f2d-43e5-9e9a-34a6aadec12a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04a0141-00f3-4bcc-912a-29cee4105d11", "sighting_of_ref": "indicator--99d875ad-0bd6-4834-b97b-1c64c14cca56", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4385010c-daef-4fc2-a30e-97fcc5ef3b1e", "sighting_of_ref": "indicator--99d875ad-0bd6-4834-b97b-1c64c14cca56", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1eb3faa-063c-44bf-b0a1-8a0737e11af7", "sighting_of_ref": "indicator--99d875ad-0bd6-4834-b97b-1c64c14cca56", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7d8d2d-db20-4e5e-b104-81a57e2338f0", "sighting_of_ref": "indicator--a2410795-9859-4975-aa09-0fed3c4d5460", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f976204c-9608-482c-a2e2-6329356e6b5a", "sighting_of_ref": "indicator--b31f936c-e28f-411d-a5e9-515665469cb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7489a9d7-05e6-46dd-924e-8a4600f79c5f", "sighting_of_ref": "indicator--a63542c0-0172-42d9-a6ff-663f33df3edb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e454cb8-ebb1-40f7-9224-53501e9b76ea", "sighting_of_ref": "indicator--b636bf8b-055f-468c-86db-2d63707f523c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd8ee10-28df-4c78-857f-ecfeffd771ba", "sighting_of_ref": "indicator--977f95de-ed06-4e69-9590-8b7e76c7d799", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254f4dd8-0961-43e3-a126-f046d35e1586", "sighting_of_ref": "indicator--f7d159e6-2dff-43db-8a88-9c816666f208", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c98948-1ddd-4ec4-b1b2-d6ae442c3b2a", "sighting_of_ref": "indicator--1a8ebb42-433f-4e89-b263-6b81e54656d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c1ce94-01b2-4479-81d7-5103e71bc453", "sighting_of_ref": "indicator--1a8ebb42-433f-4e89-b263-6b81e54656d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef66f8d5-a97c-40c3-b395-f6d16e8c8caa", "sighting_of_ref": "indicator--42996e1c-99e2-4577-8105-6a7eb9067537", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b0d62b-a128-4ac1-ab69-53ea7a28948a", "sighting_of_ref": "indicator--42996e1c-99e2-4577-8105-6a7eb9067537", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17555b0-90a0-4c5c-a488-d9a723d0eadd", "sighting_of_ref": "indicator--7ec145a4-a0d0-4743-a3c5-477f6ed4afba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43aaf515-3bbe-4c46-9fa3-e69885f1ee28", "sighting_of_ref": "indicator--c374d4ae-e495-4110-9176-3e8a0e76984e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1f9cd4-d9dd-4e70-80b5-33b40784fb3e", "sighting_of_ref": "indicator--c5dfe887-d137-42e7-ad35-654cef5545c8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc579a46-d837-4bca-afa8-c767fd0a1dac", "sighting_of_ref": "indicator--d9327400-b676-4b96-909b-30cd3c19c96a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2516d522-7ae9-4963-a562-4a3157199e35", "sighting_of_ref": "indicator--d9327400-b676-4b96-909b-30cd3c19c96a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0710f1d6-7649-4f53-bfda-b872ec892af1", "sighting_of_ref": "indicator--cc4feb41-19c8-4b1b-91d0-99425530dbc9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a440b0-bdf6-4591-9b78-abf6fcb2267a", "sighting_of_ref": "indicator--4dcfa2a6-e888-425a-8963-7f0b45987a78", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b42cfa-12fe-4b59-a116-355868a23a3f", "sighting_of_ref": "indicator--94c19909-f0ea-4e78-a4c9-ec803a38e34b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7db6172-04f9-466d-ace1-a8908124be73", "sighting_of_ref": "indicator--fd321486-5620-4dcf-a61a-32124c8e255a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bb3ace-9b3e-40f9-9646-f2ac1ce901d5", "sighting_of_ref": "indicator--fd321486-5620-4dcf-a61a-32124c8e255a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a084f883-f442-4f0d-bacb-cc750f29d536", "sighting_of_ref": "indicator--70b549fb-5155-4af6-b6d4-f3f902bae9da", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44ca16f-2361-42cd-ad6c-9c6b668661d2", "sighting_of_ref": "indicator--fb2f2dd1-0ee2-4c1f-b77a-d04f877136ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4662a6a6-3922-4992-8b4c-f3ddaa49de18", "sighting_of_ref": "indicator--62b094cd-fd60-46b4-bb3c-5b7209bcdb21", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb1a555-31f9-4b60-9c42-ad03a5722362", "sighting_of_ref": "indicator--36408354-728f-4ee1-8f3c-d9ae21d4fa78", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a24f7b-b615-47e8-b770-7216c4c02aa5", "sighting_of_ref": "indicator--36408354-728f-4ee1-8f3c-d9ae21d4fa78", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0693e34f-0798-489f-998d-f7a49b0f50fd", "sighting_of_ref": "indicator--73e63e41-7076-4cf4-859b-987a1788685d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d83bae-fd9f-4573-8155-a183d47b3257", "sighting_of_ref": "indicator--73e63e41-7076-4cf4-859b-987a1788685d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e00f198-3649-459b-9f5b-6a44509ac9a3", "sighting_of_ref": "indicator--e2ca0803-137b-4ffb-8ebd-e49e8e02ca8b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d132bc-8978-43c5-b1af-0fef5b6f177a", "sighting_of_ref": "indicator--e2ca0803-137b-4ffb-8ebd-e49e8e02ca8b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2638b9a3-c724-49bc-a2a9-a37e02ee968b", "sighting_of_ref": "indicator--0ddeac08-b895-4323-b96d-4dfbd4b73011", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8479d4a7-1200-4b97-9027-bedbbc26e0ab", "sighting_of_ref": "indicator--00f024da-92ef-48dd-8f8b-34037d12d69c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7683ac61-ccd0-4b4b-9a37-c315c315e837", "sighting_of_ref": "indicator--cbc72cc6-1e73-45ab-a287-38013717bc77", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450d00ba-f559-417d-b3b7-719af2f88626", "sighting_of_ref": "indicator--cbc72cc6-1e73-45ab-a287-38013717bc77", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85310fa2-910e-41a0-9603-cdac6bb9ae8a", "sighting_of_ref": "indicator--640557c9-e6b0-4a8c-a786-596cc9bf3678", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a1a9f3-8899-4362-807f-1112ea59e085", "sighting_of_ref": "indicator--640557c9-e6b0-4a8c-a786-596cc9bf3678", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e02f3d-7750-490d-b152-1c9af0b011c3", "sighting_of_ref": "indicator--640557c9-e6b0-4a8c-a786-596cc9bf3678", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503e9e64-7706-4269-9d9e-a9e623ac59da", "sighting_of_ref": "indicator--402715c5-7d98-462f-8e5c-6baa1ca3a80b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1383ed30-c6a1-4e62-a8ef-001d726418b3", "sighting_of_ref": "indicator--402715c5-7d98-462f-8e5c-6baa1ca3a80b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5c4a37-9ef4-484a-b717-24621a242b56", "sighting_of_ref": "indicator--4fc8f83d-1f3c-4b78-809a-a6c852526308", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ccbcaa-bb1e-49d4-bc28-e740819c148b", "sighting_of_ref": "indicator--371b043d-4502-49a6-a4b9-3bfbd3313c81", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d04d2a6-a478-42af-a8ec-d94dd66395c1", "sighting_of_ref": "indicator--94d825d6-251c-4d98-b812-8bec86b1db44", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61867ee0-8bf9-4bd9-8c0a-c2f9e277760f", "sighting_of_ref": "indicator--94d825d6-251c-4d98-b812-8bec86b1db44", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad05b57-36bf-4117-a816-112b1b8d8770", "sighting_of_ref": "indicator--61400dae-5f17-4622-b95e-d22996b435d1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8584de6d-1d03-4324-a741-4d14c2791e69", "sighting_of_ref": "indicator--a2292368-b8a5-4d4a-8973-a5e9f69fb1d8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3903a4ec-39ad-466a-8659-80a6989c2c93", "sighting_of_ref": "indicator--790a1979-da10-40db-84d8-816e0824628b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe397b8-bfe7-488d-9bf0-0b0fa622f923", "sighting_of_ref": "indicator--336965bf-2165-4014-b9ca-3d097d5f9b89", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f50f1b-c906-45a9-bcd4-697ceee6fe03", "sighting_of_ref": "indicator--7ef085de-a40d-4f62-a313-a23c185354c2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80d9201-76a4-49c8-a6f0-a02a025f5940", "sighting_of_ref": "indicator--addb0958-4075-406c-95be-a34f67838892", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1888515e-1a56-4f24-9e68-7b14e10bd89f", "sighting_of_ref": "indicator--230f0784-7d07-488f-9110-5802f74a72bf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35efec51-4fef-418c-b82f-2972fa72f3ba", "sighting_of_ref": "indicator--d96287d0-6a3e-4c73-916d-1815f87a16c8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8e9252-7d68-48b0-9b7e-2abd03a11e3c", "sighting_of_ref": "indicator--d96287d0-6a3e-4c73-916d-1815f87a16c8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71277b38-a780-41f2-b40b-96fd7e16d210", "sighting_of_ref": "indicator--3229bcf7-06cc-468d-9b62-0fbca5c10914", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d586e90a-194d-4ed3-ac59-b4db3caa2828", "sighting_of_ref": "indicator--3229bcf7-06cc-468d-9b62-0fbca5c10914", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b8b651-18ad-44d1-9c6d-d0ab84e6f622", "sighting_of_ref": "indicator--51662d9c-f353-4a10-aabd-cdf8cb3e1b8a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0e5e18-8d14-4d17-ad3b-2421641a3966", "sighting_of_ref": "indicator--1d58adeb-026c-4dbd-b076-597987a96220", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b08bf08-a62b-4e8f-9ce5-6d4404d7df82", "sighting_of_ref": "indicator--fee343de-30f4-4073-875b-0703d67e8c61", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51793756-fbf7-4e26-93bd-aa20ceb6daf0", "sighting_of_ref": "indicator--1d9387e6-bedb-4a6b-8297-9627c9dc4a32", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a111fb3-f6a0-48ad-bfaf-c4d4c94d2c8d", "sighting_of_ref": "indicator--1d9387e6-bedb-4a6b-8297-9627c9dc4a32", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07442ae5-3985-468b-b6e8-491f5603aae0", "sighting_of_ref": "indicator--1d9387e6-bedb-4a6b-8297-9627c9dc4a32", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275d555a-2d42-4859-bf4b-1df0f789e1c4", "sighting_of_ref": "indicator--a9223615-2355-442e-9cd0-04fcd8c22c79", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebed59e-af29-4965-aaab-e9e1177f398f", "sighting_of_ref": "indicator--44109239-cc8d-4a78-afb3-cf5195738c8b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae63ecb-234c-41cc-8f43-203758e2a104", "sighting_of_ref": "indicator--d75d3abc-cc87-4007-b2ca-175479fdcb08", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78810800-92e5-4dd6-84d0-adc8e11cd828", "sighting_of_ref": "indicator--d75d3abc-cc87-4007-b2ca-175479fdcb08", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d271798-ab55-4eb3-b20b-6e4b1b91705e", "sighting_of_ref": "indicator--c2bbd120-1ff7-412c-afe5-44e1a187a2a0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73633d1f-6009-4e51-a738-3ee37588a81a", "sighting_of_ref": "indicator--c2bbd120-1ff7-412c-afe5-44e1a187a2a0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc949ada-60b5-4b91-96b9-df20cde3702f", "sighting_of_ref": "indicator--30dae5fc-e788-4e2c-9173-9dd2ecac7540", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ada8c8-33dc-471d-a811-4d25871d3217", "sighting_of_ref": "indicator--30dae5fc-e788-4e2c-9173-9dd2ecac7540", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7757be-be57-422e-9823-4642426c8163", "sighting_of_ref": "indicator--2c1181c5-bbbd-4c68-89ce-4b6a7aaf1fa1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e663f518-9ffb-449f-8211-0ec5fec899ea", "sighting_of_ref": "indicator--e5dfff25-063e-409f-af41-3540027f76f0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4012899d-4f6b-4626-b3a7-1039243deb90", "sighting_of_ref": "indicator--e5dfff25-063e-409f-af41-3540027f76f0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46389462-360c-4625-834e-f2cd9df8cafc", "sighting_of_ref": "indicator--21910862-0d0d-40b2-97c0-0233b15968a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9211cd-d04c-44a2-8dec-1d3b2d90ebc0", "sighting_of_ref": "indicator--b9321e7f-3776-46d8-8dce-354db198af2b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a81ff5b-a8db-43e2-93d4-28caa7f4156a", "sighting_of_ref": "indicator--db8a7ef7-b6d5-4733-bbb2-1b1361247a07", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c72201d-7485-47e4-9bae-b52c87ce5e56", "sighting_of_ref": "indicator--35c4c8e0-ca03-4326-bc37-78af6620e922", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfe9bb1-ed58-4099-8f07-c767c7e32d36", "sighting_of_ref": "indicator--35c4c8e0-ca03-4326-bc37-78af6620e922", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9439ff-9295-483c-b41a-ab4c11e3787a", "sighting_of_ref": "indicator--129562fe-ab73-4d19-a598-59f00b76fca3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1d5fc9-b505-4f7b-ab51-13924f4a92b2", "sighting_of_ref": "indicator--707def81-19b0-4242-9e11-15341581c34f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28355429-e9ed-4f10-9231-1a2a84291c7a", "sighting_of_ref": "indicator--cb16d63c-c869-461a-b295-ebd5b8a31491", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89ac650-9f29-486a-91fe-d2b348b13557", "sighting_of_ref": "indicator--5b421569-ffe0-4da8-aed2-c9c308a6c089", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a21e993-1b1e-4c07-8857-de95a76b305c", "sighting_of_ref": "indicator--9787fd84-706e-46e5-9fed-66830fb4b6ae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e0a6f8-acba-4c8f-9f7b-278e8ac0ca83", "sighting_of_ref": "indicator--ca38ce4b-ef5c-4539-bfbf-50d83233828d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc8ce81-98c0-4d32-8900-c2fcf6f91f3c", "sighting_of_ref": "indicator--ca38ce4b-ef5c-4539-bfbf-50d83233828d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5ab277-0f31-413b-86e2-259dd6c3240a", "sighting_of_ref": "indicator--df51fae1-624c-4745-a9c5-a77c0b97587f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74acc2ce-5545-445c-9b12-cfc7e6cf6ddd", "sighting_of_ref": "indicator--df51fae1-624c-4745-a9c5-a77c0b97587f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32b1cb4-2510-4985-9704-e48acc4b40e2", "sighting_of_ref": "indicator--49360069-4ff7-40c6-8968-04420b5640c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1531d3-c0b6-4ae5-bb81-29baf62ef552", "sighting_of_ref": "indicator--49360069-4ff7-40c6-8968-04420b5640c9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87d829a-58df-4292-a5ee-896b733feebf", "sighting_of_ref": "indicator--49360069-4ff7-40c6-8968-04420b5640c9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0204fecc-28c4-4496-a714-8e5757235001", "sighting_of_ref": "indicator--f3958335-e922-4348-a72f-2dfd7055f405", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08293c7-bdbc-4e49-8c67-52d4b67c986a", "sighting_of_ref": "indicator--f3958335-e922-4348-a72f-2dfd7055f405", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396fc3d7-fbdf-40c3-a9d2-74f4187f515a", "sighting_of_ref": "indicator--89c4c08d-c9eb-4c1e-9ecb-99b12a3494a9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a553f5b-e5e9-4cf9-b892-3f291dbbac2c", "sighting_of_ref": "indicator--89c4c08d-c9eb-4c1e-9ecb-99b12a3494a9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc5e2ea-5f81-468b-b411-91f1f3fdbc53", "sighting_of_ref": "indicator--0ff1440d-45c1-4316-8b77-cffd083b1066", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3be9e47-dd9d-4206-bb79-a3f06666cb7a", "sighting_of_ref": "indicator--0ff1440d-45c1-4316-8b77-cffd083b1066", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2ee202-7295-44c9-a2b2-c11a9b893b36", "sighting_of_ref": "indicator--8631e418-151c-43b7-9cd4-dd3e39582cb9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a8e4f1-ce98-49be-8452-fd603dbba367", "sighting_of_ref": "indicator--8631e418-151c-43b7-9cd4-dd3e39582cb9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9876c4e-4064-4900-9931-9c7e5a3a6ff3", "sighting_of_ref": "indicator--153bb94d-e45f-4bd7-9a94-42347b90cb1b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c76453-ab6c-4698-914e-7a2a9c550226", "sighting_of_ref": "indicator--153bb94d-e45f-4bd7-9a94-42347b90cb1b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47308337-5284-4777-9b97-9f983d37c52a", "sighting_of_ref": "indicator--f1d7a071-743a-4bb9-a23b-664977f7ebaf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b59cc9-c28d-4add-a5a5-8a5d20433546", "sighting_of_ref": "indicator--adfaccdc-0511-4404-9d57-6ac0067032eb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0158843b-72eb-459d-934c-2584fa4de12f", "sighting_of_ref": "indicator--5624aa1c-0384-47ce-a98b-eda335715594", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598b44fe-8eeb-423c-86cd-53c1e47ced1c", "sighting_of_ref": "indicator--c4a31f6f-5f5b-4e3b-92e8-688903e16779", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123c7798-28f3-46f9-b2f7-c6011c58e5bd", "sighting_of_ref": "indicator--c4a31f6f-5f5b-4e3b-92e8-688903e16779", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5515e599-7f7b-4291-8372-5bfac37bfc7e", "sighting_of_ref": "indicator--82b02be0-c64f-4746-9712-bdbb9df7c314", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda8183f-052c-4cc5-93a7-392e2a38403a", "sighting_of_ref": "indicator--82b02be0-c64f-4746-9712-bdbb9df7c314", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dddb2d1-a552-4698-843f-271d205b48ea", "sighting_of_ref": "indicator--3f415345-09dc-40c9-827c-7e7bb8838ac1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7107414c-f2e1-4757-b2b5-4a94f9ddc043", "sighting_of_ref": "indicator--a6672a3b-8eb5-4f64-bc1f-9a1e64c0a3f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aebff2b-3696-439b-af9f-06b36820d19b", "sighting_of_ref": "indicator--0eb40fe5-78b0-484a-a647-69690aac1e1e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3147033-210d-4f63-aad5-5de735be7d2e", "sighting_of_ref": "indicator--0eb40fe5-78b0-484a-a647-69690aac1e1e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8c8974-5b61-4d30-8ae6-81b60a166919", "sighting_of_ref": "indicator--ebb672e1-437f-4648-9dcf-3201a2a3eab3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58443712-341b-45e8-8a56-cbb193c41018", "sighting_of_ref": "indicator--ad2795e6-306d-44f4-86aa-ba49ee1df0dd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6014c8db-9140-4ab3-a1c0-4be46f916e7f", "sighting_of_ref": "indicator--ad2795e6-306d-44f4-86aa-ba49ee1df0dd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296b87dd-bdae-47b8-a573-b8315ccb98f0", "sighting_of_ref": "indicator--98a12712-6597-449b-a8aa-4dd17950da23", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f3c7fd-80f5-4e28-b73b-a3495a81c213", "sighting_of_ref": "indicator--98a12712-6597-449b-a8aa-4dd17950da23", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33da3c3-1a15-4bd7-b69b-8a721a928952", "sighting_of_ref": "indicator--3cec62fd-7e77-41f7-95a6-2f223defa4f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac4e906-7255-48e6-a8b3-98ab26e22977", "sighting_of_ref": "indicator--3cec62fd-7e77-41f7-95a6-2f223defa4f5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54eaa2ae-5d04-42be-a91c-d65733f1d1fc", "sighting_of_ref": "indicator--1902c711-1f42-43be-97f5-832c8851cb08", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5203fe-2fde-4d67-b0e8-a6732899d355", "sighting_of_ref": "indicator--1902c711-1f42-43be-97f5-832c8851cb08", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1603c8-a8da-4420-9f38-2ea9bdb2e49c", "sighting_of_ref": "indicator--6fed5922-dd75-4bca-a665-49873a102f43", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0b74a8-c705-468b-9392-ac76706a0593", "sighting_of_ref": "indicator--6fed5922-dd75-4bca-a665-49873a102f43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b65d4bc-32d6-4910-9dcc-91e6f42a442b", "sighting_of_ref": "indicator--122bd7c1-58e9-493d-b924-3a002f31603a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eca91eb-cdba-4220-8853-50eb86b3821f", "sighting_of_ref": "indicator--122bd7c1-58e9-493d-b924-3a002f31603a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb317f72-4ebf-4b8b-abfe-aeafccd1ee42", "sighting_of_ref": "indicator--122bd7c1-58e9-493d-b924-3a002f31603a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd3fb4b-0497-40dc-8044-8d1378ccacea", "sighting_of_ref": "indicator--5bb099c4-e588-4536-9710-f6546a0025e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1d92ba-eccb-49c2-b907-447aefd90db0", "sighting_of_ref": "indicator--5bb099c4-e588-4536-9710-f6546a0025e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961427aa-db1a-4ee6-801a-4a5035f83808", "sighting_of_ref": "indicator--c292d58a-64ad-4e16-ad31-b36869afbeba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d946ca-a16b-496a-bc85-e8f115a98204", "sighting_of_ref": "indicator--c292d58a-64ad-4e16-ad31-b36869afbeba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7289a923-f034-44c4-b8be-8eaee2268551", "sighting_of_ref": "indicator--7a57a777-e67c-430c-b2af-22367b764e7f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1682257e-73f3-4c3c-a0cb-9713021504fd", "sighting_of_ref": "indicator--7a57a777-e67c-430c-b2af-22367b764e7f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10d9679-ecb4-4ebd-b61a-7d7bbd9c24f9", "sighting_of_ref": "indicator--8699cd06-b420-4669-856e-87d9bf38c779", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332e2319-e436-48e2-91e2-87c31a86ba20", "sighting_of_ref": "indicator--8699cd06-b420-4669-856e-87d9bf38c779", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e36ae4-4009-4078-80ca-4719661d9e46", "sighting_of_ref": "indicator--74e13445-d209-4742-bf3e-907b3b7ee483", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2c184a-a293-4075-b600-cadb9199eadf", "sighting_of_ref": "indicator--cee4a71e-d4c7-4e83-9559-604bf4876390", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32751197-9970-426b-a583-27c02f732c5a", "sighting_of_ref": "indicator--68236feb-b588-4590-ae1b-46883799a653", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a740e1f-9746-445a-a6bb-f250e06cf2e3", "sighting_of_ref": "indicator--27b16c53-5268-4eca-ba89-602eeeff9b4d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7072ea4c-cc68-4b8e-a1f8-0a54164b7bb4", "sighting_of_ref": "indicator--e4d73623-4c48-48bd-9ccf-c5ea8006c29f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220fcec4-1ef6-430e-927a-1c28d4f9d2e0", "sighting_of_ref": "indicator--9d1b5046-ab79-473b-af55-5d3571ff24c1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7a7979-de3e-4ff0-aef4-9b4fd03a9d37", "sighting_of_ref": "indicator--27dce1ec-6ce7-40d6-9055-c71fd4b42353", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c482e598-f9c1-45f1-849d-20ff74cb1e8f", "sighting_of_ref": "indicator--418d582c-8b6f-4413-a10b-24d291a796cb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758a9cfd-3457-4fa2-878d-c3fc878b4ecb", "sighting_of_ref": "indicator--be356eec-9805-4782-885e-45f94ca960c3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35316dd6-9ddf-4cf0-8f0f-f3266f16fa48", "sighting_of_ref": "indicator--0e521371-0b9b-4309-9b65-4b81babefd20", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd95c81-2ff2-4ef2-8920-2bb1a0e7bd03", "sighting_of_ref": "indicator--2faba260-d3db-4fb0-ac19-0f1b752959aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd63d9c-b980-401b-a671-a753fe640ac3", "sighting_of_ref": "indicator--2e53a0bf-eec9-4841-9dcc-6fef1942d463", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d9c702-99b1-4814-86e9-2da932203cf5", "sighting_of_ref": "indicator--a484581c-19cc-4d0b-8009-c9c5b9d54e92", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a4ca38-b709-4cae-a26c-a8006dee6b60", "sighting_of_ref": "indicator--fe7d60b5-3c9b-4e9e-80a6-12a686e22e1a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d710873-a919-4d51-a920-f42cb261acc9", "sighting_of_ref": "indicator--ddfc2e66-3ef4-4dbe-8439-cb7eea5fecb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78b860b-c9a2-46fd-813d-fc9a0fbe6978", "sighting_of_ref": "indicator--d3841ec0-5d79-40c9-b2d4-b5f8e704c90b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf38b77-5b94-4ccd-8254-fe30055bee05", "sighting_of_ref": "indicator--ce444d78-e41f-49b9-8dad-56ff6e24a2d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9552cb20-8912-469f-a28c-7df73b9f85b7", "sighting_of_ref": "indicator--996718e7-2372-4268-990d-f3ec517a2f2e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb93616c-a640-4e24-bfe7-a9780144b8bc", "sighting_of_ref": "indicator--b6a80bdb-ef37-4277-825f-80b39fbbbd30", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451d4bf7-33d2-43d2-bed7-d8f75357dacd", "sighting_of_ref": "indicator--a31000c5-18b4-49e5-9f32-d3e1b39daaf5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce479868-3d3e-423e-9fe6-ca87dbf86a64", "sighting_of_ref": "indicator--86671908-e9c8-40a3-b50c-389ab37bbce0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d59f744-5865-42cd-87a7-201a0c06e0cb", "sighting_of_ref": "indicator--6330e008-9ad3-4b9c-9fd2-2ae056fc4906", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6811fc-e0f7-4c87-aa43-37973bcfbf08", "sighting_of_ref": "indicator--17a828cb-ae38-4cdb-9560-b58b679e0e36", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93289f22-d9ce-475d-8701-17e54a311a60", "sighting_of_ref": "indicator--a4c43637-e120-4734-ae07-35afd6e1e36c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900d4054-8a02-44b9-913b-2914ff402a10", "sighting_of_ref": "indicator--a4c43637-e120-4734-ae07-35afd6e1e36c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbb142c-0e75-49b4-b686-912fefb7294b", "sighting_of_ref": "indicator--a4c43637-e120-4734-ae07-35afd6e1e36c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130716bf-e001-42d5-9b8f-7e01991cf73d", "sighting_of_ref": "indicator--7351500f-84b9-4732-b104-1c14970f731f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ddf622-9de7-4d0f-928e-379d1d7663c6", "sighting_of_ref": "indicator--7351500f-84b9-4732-b104-1c14970f731f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfd7378-2f5c-4a57-89c4-59a259f60164", "sighting_of_ref": "indicator--74dbf966-9a1d-4528-b0c2-d5cb5758976a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e377319d-90c8-44c4-b3a1-8eca448d1800", "sighting_of_ref": "indicator--f036a6af-c955-46e8-a0ec-187ca2c60b16", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bc2907-d554-4257-980a-7aaf65804544", "sighting_of_ref": "indicator--f036a6af-c955-46e8-a0ec-187ca2c60b16", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247da9a7-7e79-444a-9e31-9bb2a329fa84", "sighting_of_ref": "indicator--d8a8395b-6e49-4434-aec5-e5324a399ccc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a927c7-046c-4f02-a8d9-2b83f4a5411a", "sighting_of_ref": "indicator--6ade2fcd-9626-4cb2-93f6-0f9211c857bb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fa9059-b37e-476c-9bdd-2c3cc863e53a", "sighting_of_ref": "indicator--8a2e783d-fdb3-4e3c-a012-ac63f705f91a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af2e17d-caad-4d66-a65e-9831d3a3555b", "sighting_of_ref": "indicator--8a2e783d-fdb3-4e3c-a012-ac63f705f91a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652e8ad5-e57b-4452-a53c-00fafa383def", "sighting_of_ref": "indicator--abc6696f-979d-4222-96fb-221a87527dc1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5708ad8-e8ff-4350-aa58-59a79bdc85ed", "sighting_of_ref": "indicator--abc6696f-979d-4222-96fb-221a87527dc1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7eb8b7-c0ce-4c7b-999f-01ac955c3586", "sighting_of_ref": "indicator--abc6696f-979d-4222-96fb-221a87527dc1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a444750-2e16-467b-b0c6-99d6a69367a3", "sighting_of_ref": "indicator--c2c04e3a-2fba-4017-a0bd-ca2295bef818", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa5082a-0df3-4935-8622-0b4ef154cd1a", "sighting_of_ref": "indicator--c2c04e3a-2fba-4017-a0bd-ca2295bef818", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c82bad-0cc2-4f22-9127-e1c03966bc40", "sighting_of_ref": "indicator--c2c04e3a-2fba-4017-a0bd-ca2295bef818", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48f3970-dd86-4388-bbbc-dc9b00b9032c", "sighting_of_ref": "indicator--e00915d8-42dc-4346-9ab8-b7aa92415a79", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec50343-62e1-4394-9f0b-bcc994066c20", "sighting_of_ref": "indicator--4a69fb10-18a3-4490-882b-7a974a0410b8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40489b34-f378-465b-8aa7-3442eacc98fe", "sighting_of_ref": "indicator--4a69fb10-18a3-4490-882b-7a974a0410b8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5740eaa8-4862-4c50-bae8-a64ba1a07db4", "sighting_of_ref": "indicator--bcc27298-3e03-42ac-afe8-b57080e31604", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31ef220-c996-4045-8b4e-358a7f473109", "sighting_of_ref": "indicator--355df8c4-736b-409b-be64-559daee08e98", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0eafc90-648c-4fea-acaa-4081aff57a9a", "sighting_of_ref": "indicator--b1741e9a-e90b-40a8-befd-635196e1c74c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643c5c42-c15a-4fa9-bc52-3ee51f82e75b", "sighting_of_ref": "indicator--1c789714-4532-4fe1-a5e9-25149ca60c3e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995b7984-0e00-4428-a32d-a20f78ebcd94", "sighting_of_ref": "indicator--1c789714-4532-4fe1-a5e9-25149ca60c3e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1deca9-49be-4482-b070-90ed98da09ac", "sighting_of_ref": "indicator--65dc725e-c436-4a91-ab18-65ef6997e71e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada45b7c-3f07-4527-aa1e-922eb90a5c01", "sighting_of_ref": "indicator--f17b2b7f-5946-424d-ad03-41f58db3c6d5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73eaca8-b515-4786-83d3-0345d9b432a3", "sighting_of_ref": "indicator--f17b2b7f-5946-424d-ad03-41f58db3c6d5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e782149b-c9cc-4ed0-86c9-2aa847adfd2a", "sighting_of_ref": "indicator--fd8bf872-3433-4888-9b45-0a5c29fbf299", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d7e7c8-2468-4855-93ec-c5b88ff225ff", "sighting_of_ref": "indicator--6f1b3ec8-0b11-4495-bbb1-d9b0cf669bff", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892bbd38-a2dd-422c-9798-a0d0469bed10", "sighting_of_ref": "indicator--6f1b3ec8-0b11-4495-bbb1-d9b0cf669bff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6aa253-72ae-43de-980b-3676d4657874", "sighting_of_ref": "indicator--6f1b3ec8-0b11-4495-bbb1-d9b0cf669bff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6a55de-66d4-49fe-b23b-ef02afd3b6c8", "sighting_of_ref": "indicator--5868f0ec-e9bc-464b-8a1a-0030cde8d87d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a45725d-8a64-4fdc-bfd0-1c2d830fef7b", "sighting_of_ref": "indicator--5868f0ec-e9bc-464b-8a1a-0030cde8d87d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c1afcc-67ac-464c-b983-9f933a9b639c", "sighting_of_ref": "indicator--0bc5898c-b187-4465-b4af-a7ff61cdac98", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cc1519-5ce2-45a4-a665-41e85c2b1152", "sighting_of_ref": "indicator--e4b24814-46a4-4a54-ab8e-fb88acc94aab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033a169a-60aa-4ee8-9023-7707cd1810b6", "sighting_of_ref": "indicator--08e257d9-3f3b-462f-8978-9c0d988c2016", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201ecc40-30d7-4ade-9817-b0a0507c24be", "sighting_of_ref": "indicator--526b6696-8d37-407d-914c-824dcfe95b0f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12339a0f-bf28-4fa7-954f-acf53c7cd2a6", "sighting_of_ref": "indicator--ad4b0438-0e4e-48f0-8ba9-6d30f9b79295", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf95f03-7528-4f65-892b-40985946b9b1", "sighting_of_ref": "indicator--03fb9e5f-dc8a-4530-b7af-4a740c0b17d1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b35b44-1386-4e6e-acf3-28ea6b86f1bb", "sighting_of_ref": "indicator--43b10add-e91b-4aac-b47c-69d10d475abd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6ffd5f-863b-4244-aec7-b65555301ce8", "sighting_of_ref": "indicator--3f636ec2-1597-4c9c-88ee-e916053ddd99", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0639b33b-adcd-416d-a937-3ee78ab47068", "sighting_of_ref": "indicator--3f636ec2-1597-4c9c-88ee-e916053ddd99", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5830cf-3962-47fb-a6ba-c7eee6fd60d6", "sighting_of_ref": "indicator--3f636ec2-1597-4c9c-88ee-e916053ddd99", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d62335-0f38-4ae6-9d8e-58ca6d7413ab", "sighting_of_ref": "indicator--856002a9-0dfc-43a7-b0b8-5ba81f7819ed", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbdb0551-4acc-46e1-a8c8-c4730054366b", "sighting_of_ref": "indicator--856002a9-0dfc-43a7-b0b8-5ba81f7819ed", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28726147-98b4-478b-9a21-c0dc2a4f542a", "sighting_of_ref": "indicator--856002a9-0dfc-43a7-b0b8-5ba81f7819ed", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8919131-f950-48cc-83cc-ad9616acd8e0", "sighting_of_ref": "indicator--239c41b9-7c4e-4178-89f3-cd430e5aa465", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d67fee-c7ed-454f-a092-f14156d4261b", "sighting_of_ref": "indicator--239c41b9-7c4e-4178-89f3-cd430e5aa465", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8874fda6-e58d-472c-bac0-a1efbd7fdc5e", "sighting_of_ref": "indicator--239c41b9-7c4e-4178-89f3-cd430e5aa465", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100a7099-b85f-40fa-a593-ff94e013a38b", "sighting_of_ref": "indicator--4b262715-570e-457a-b1cb-a9ceb668d0ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58127776-6b2a-497f-9b96-39cc5c91c1c9", "sighting_of_ref": "indicator--4b262715-570e-457a-b1cb-a9ceb668d0ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc59e47-da34-444f-90ea-e44c530d5e87", "sighting_of_ref": "indicator--4b262715-570e-457a-b1cb-a9ceb668d0ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f6dd40-4894-48e9-9a97-ef7ee5b9ce0f", "sighting_of_ref": "indicator--f402b9fe-c604-4626-884c-b61089d0cb5f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63cb055-6e60-4d91-ae49-2bd216677aba", "sighting_of_ref": "indicator--f402b9fe-c604-4626-884c-b61089d0cb5f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3fb339-0d36-48dc-abaf-02a13301971f", "sighting_of_ref": "indicator--e6ac8ec9-55a5-4f18-9c55-a64bed614546", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4250cba-a56c-432d-b8cd-62c616f6c452", "sighting_of_ref": "indicator--e6ac8ec9-55a5-4f18-9c55-a64bed614546", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a01009-fbf4-4df0-a460-04aea4d7ed17", "sighting_of_ref": "indicator--e6ac8ec9-55a5-4f18-9c55-a64bed614546", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd590e7-cbdf-4fa2-85af-fac946770f20", "sighting_of_ref": "indicator--e8bd8105-ad0c-4041-8537-80a258db3a0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542e0e02-c9eb-4898-9414-5dfbd5f320f5", "sighting_of_ref": "indicator--621b49e6-13aa-4972-8ecf-57d3defc8f90", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e103a19-150f-4e04-ae39-5c81237f426e", "sighting_of_ref": "indicator--621b49e6-13aa-4972-8ecf-57d3defc8f90", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04af5b1e-5da8-46b9-a252-50eac59e381e", "sighting_of_ref": "indicator--d891aec1-87ea-4487-bb80-513af9dfc2f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea5ad2f-91d3-4c4b-859d-b0cedf2cb05c", "sighting_of_ref": "indicator--246d96d3-4402-4996-a031-3a3cfcce6acb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc636441-e512-421d-8b43-95696029733b", "sighting_of_ref": "indicator--41f6c273-8812-4c47-9efe-3b64e7262cdc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd82d50d-fd1e-425f-aaed-e18909bcb63f", "sighting_of_ref": "indicator--41f6c273-8812-4c47-9efe-3b64e7262cdc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6859ca31-1f49-4138-8084-5a8b4d8cde32", "sighting_of_ref": "indicator--e981f496-27ce-42ae-8c78-1636618fb69f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e990ffba-bec1-4136-8027-35b37a10ae55", "sighting_of_ref": "indicator--e981f496-27ce-42ae-8c78-1636618fb69f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d278d12-b60d-4ddc-8247-89d76933e268", "sighting_of_ref": "indicator--7942d15e-6b35-497b-b309-ee7782aa53eb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201fc8d0-1e1b-42f5-88d3-4c49209e6cee", "sighting_of_ref": "indicator--bb9a7046-a1a9-4ab9-8fc3-a5c5ec0fb7d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67435399-d354-46f9-b0cd-3c35715a9a09", "sighting_of_ref": "indicator--57ba9ae3-c16d-45e5-8b90-43e5385430b3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03129c47-2bd0-45a2-8bb6-ccf68ef96137", "sighting_of_ref": "indicator--02f8e7e8-95c2-4a86-8dfd-1f688dde5156", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c6374f-7d01-45cb-8097-4a7413e154e7", "sighting_of_ref": "indicator--c20665a7-fb9f-41b2-a7c6-0f8afbe608e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909419af-74aa-4960-a93a-3f4cbf5cab25", "sighting_of_ref": "indicator--4b19ae60-cdd5-4717-b47b-fa8eadc4f616", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210b6432-bded-4819-87c5-d693f3452548", "sighting_of_ref": "indicator--22ec0278-4694-4df2-85b7-3048a7d72528", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c491e928-b0ee-4b2a-abdb-d3e6e6cffc10", "sighting_of_ref": "indicator--7c8781ac-f577-4834-8f98-c8672a1e9346", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc454f02-da13-4ace-a663-bc359b7a96d7", "sighting_of_ref": "indicator--66d9bead-bf97-4f12-84ed-f0aa2ffef496", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44707844-a2ac-468c-b281-f528167ef8b3", "sighting_of_ref": "indicator--f4614033-9381-46f3-9d34-e9d54b332ba5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4858dfc-145a-4383-a023-7edf074c753e", "sighting_of_ref": "indicator--1a301495-29b0-45e3-bdec-6817a3454016", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12c88da-55d9-40d9-9d24-0a8519f0fd6f", "sighting_of_ref": "indicator--c585855c-6be0-4825-9aaf-c287455f2098", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867b0811-af78-4dd6-a355-5231fe474ece", "sighting_of_ref": "indicator--9afb9ccc-6331-48b4-83e1-6d1ef55d9f7e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d152bb15-e3e4-42d8-b1a7-690967f4b489", "sighting_of_ref": "indicator--9940494d-6abd-48f5-bf54-40e93d1cd3ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c251bcfb-2aa0-422f-9839-e74de3a881d3", "sighting_of_ref": "indicator--134e8645-600b-4445-8002-54c5d6062018", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dee9447-2e57-44b8-bd3e-5f13ada1ae5b", "sighting_of_ref": "indicator--fb1a197a-3bdf-4064-aa0a-21e02c58674e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3dba5e-d6ef-4f37-92b6-52a060183cd4", "sighting_of_ref": "indicator--6f0aca80-b743-42c1-802a-1d7102a0cee2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca7c7da-0fd8-41d5-86db-ecd6ac2e12fe", "sighting_of_ref": "indicator--5e7e0049-9188-40f9-ac0a-4c82b0a862fc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e907a9-3f20-4dff-86c4-be706a105cb4", "sighting_of_ref": "indicator--129025d8-3efb-4a50-b945-d3fc813c329e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813007ea-a1dc-4428-8f89-894060e3ab20", "sighting_of_ref": "indicator--67a074a6-ec9e-4769-b603-055d55e2e99a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626c5c13-0e62-40f0-b089-b99691e95c80", "sighting_of_ref": "indicator--77d1037f-24ef-4c49-b8f7-b1a696d05727", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3334619-4965-466a-9726-71ed6aa3ef65", "sighting_of_ref": "indicator--ef88eacd-c4f5-48e5-8b7d-7ebcbf092b1c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e093dc-9368-4267-8b3c-6bba033e4722", "sighting_of_ref": "indicator--1e682d2f-c8e5-4ba4-857b-6a97b38cba45", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18c2672-212c-4469-8afe-034907966ea2", "sighting_of_ref": "indicator--1e682d2f-c8e5-4ba4-857b-6a97b38cba45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c227699c-c5ba-4fba-ac42-84e0ad52dcc7", "sighting_of_ref": "indicator--5b38a4e8-c040-443f-9d59-dd0593f935c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7049219-874c-4112-8996-32c82005634c", "sighting_of_ref": "indicator--64743bb6-48cc-49d6-9cd8-bbe4517e1e00", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0527cf1f-79bb-4ffe-a2e1-4e3e8a8724ab", "sighting_of_ref": "indicator--200d9b2b-ada1-46d0-b549-6752a72fb9b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767a71ca-4339-4075-9322-8db717e985c5", "sighting_of_ref": "indicator--54e74549-444d-4dd8-9b93-fe34bf62b870", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e1916e-762f-4c21-90fa-b1d7b950b344", "sighting_of_ref": "indicator--5bf726d5-5cc2-44ce-99e7-a9225329469b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d10e3f-a4fb-40d6-81bd-fdc525ec5459", "sighting_of_ref": "indicator--807b62a2-adb8-48e8-82d1-c4cc8683c738", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6d7c02-6ad1-401e-8532-73f5644b8be6", "sighting_of_ref": "indicator--9995a547-44cd-41aa-946a-5d417949db88", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8f1546-0ea1-41e8-ac73-e601e05218d5", "sighting_of_ref": "indicator--fac597b3-3c10-4611-b93c-4fd152384e04", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f7db37-f975-4c32-b405-06430c1b55eb", "sighting_of_ref": "indicator--0f8d7747-54c4-4fa6-b842-fe0e1344fecd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad01d80d-c07a-441d-9be2-2ca0b336583b", "sighting_of_ref": "indicator--01dc9993-ba43-4c4a-bd6b-e686ca6dafc4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808b8c3f-aefe-412f-b727-57432cf2cb92", "sighting_of_ref": "indicator--ce3d9284-1bc7-4127-9d2b-923082993b96", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adc20c9-6f43-4b9a-8c41-53c39cd0a242", "sighting_of_ref": "indicator--5ada2de4-ebe8-42ac-9101-af96573557ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edf4866-dbc1-4853-9e5b-28362b77a1f9", "sighting_of_ref": "indicator--58fc7d34-3e8d-420b-8d81-1df6b2ac3618", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb11932-52a6-4c08-b1a7-745926f0f745", "sighting_of_ref": "indicator--58fc7d34-3e8d-420b-8d81-1df6b2ac3618", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4488242-9813-4633-8391-793b207f261a", "sighting_of_ref": "indicator--40fce2a0-13c2-4907-8c8a-859a920e35fc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b4df97-d4ed-4731-8dc7-6e3012773164", "sighting_of_ref": "indicator--fa9777e4-a0cf-4f2e-9d25-4263d3561f88", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66881a44-0333-4857-bca4-3c8b7ae933b1", "sighting_of_ref": "indicator--fa9777e4-a0cf-4f2e-9d25-4263d3561f88", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4651d14f-4c3a-4013-9c5b-29792f975855", "sighting_of_ref": "indicator--f8a85afd-4ebe-4231-9761-d160e8e7f1b2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fe2885-b7ba-475c-8c3e-d8baa17a506a", "sighting_of_ref": "indicator--b5281157-00bd-4755-89d5-8f7007c19641", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c445d9-72ef-4022-8ee9-bc20811294ec", "sighting_of_ref": "indicator--537b8420-26d0-43b3-bcd5-7480aa87dd6b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a13c90-310c-4b90-9702-0ef0c12a93be", "sighting_of_ref": "indicator--222dd149-6df4-4602-b705-340220be9584", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2a02d1-adb5-4372-bf3e-1a1245c729fe", "sighting_of_ref": "indicator--222dd149-6df4-4602-b705-340220be9584", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a4cc3c-2df8-4a5c-b757-02aa987de2ff", "sighting_of_ref": "indicator--1f15237d-7264-4ebb-aba5-a7d57f2b84d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7d5acd-4ffb-47d5-85d8-e25e08101e9e", "sighting_of_ref": "indicator--7b3e030a-0222-472c-a35f-2b358a7072c3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fe9f5c-19e1-47ca-9e5e-f77bf3f66b3d", "sighting_of_ref": "indicator--1163d11f-dcda-48c1-8b4f-f5d7927de92b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b3f437-9793-443a-bcd8-2206894a7c29", "sighting_of_ref": "indicator--1163d11f-dcda-48c1-8b4f-f5d7927de92b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73805381-e22c-4004-8a56-d46d2dcd40da", "sighting_of_ref": "indicator--93a9ee74-1471-4f2c-b0a1-4b3f58e09ea4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f240496-fb96-4abe-aa35-169f7dd5635c", "sighting_of_ref": "indicator--a35a6fb5-d640-43e0-8813-7f4fbf2b0750", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf227a35-fa3e-4f22-a50d-1b17123188c7", "sighting_of_ref": "indicator--a35a6fb5-d640-43e0-8813-7f4fbf2b0750", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa05080-442d-4a12-8e1a-22aa889895f2", "sighting_of_ref": "indicator--5336ea9e-85b0-4c9f-ba0c-76e1c451964d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7231d9d8-58d8-481b-98aa-a5ec6f1a5e3c", "sighting_of_ref": "indicator--05b4c14b-d97c-48ce-a9d7-85af329e36ab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09326748-465f-4e2d-ad9f-0daaf5215a23", "sighting_of_ref": "indicator--05b4c14b-d97c-48ce-a9d7-85af329e36ab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a798219d-1e3b-4cbd-a65a-a45848d5884d", "sighting_of_ref": "indicator--05b4c14b-d97c-48ce-a9d7-85af329e36ab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d96d016-67b6-4fec-9282-97edba8772c6", "sighting_of_ref": "indicator--4fa4c30c-edd1-4d94-9579-e538fe516db4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13244b44-b3a2-496d-b7b8-15711a821e0d", "sighting_of_ref": "indicator--4fa4c30c-edd1-4d94-9579-e538fe516db4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1b4a90-c8a7-4b9b-98bf-286cd14a985f", "sighting_of_ref": "indicator--cd3e14a4-454c-488c-9059-e6e9b03c677c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ecdde5-9631-434f-bd56-a5bdcf72f0a5", "sighting_of_ref": "indicator--27017d7e-4ef8-425c-bd86-91bc6c3e662c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4ede9b-0541-4d27-afe4-81a9900ed0cb", "sighting_of_ref": "indicator--27017d7e-4ef8-425c-bd86-91bc6c3e662c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0161fe8-b123-412c-891d-9efbf1739434", "sighting_of_ref": "indicator--25012e86-9202-4f23-97a0-1d7265301200", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b3fd45-acf7-42bd-a28a-f16f7289e2a6", "sighting_of_ref": "indicator--25012e86-9202-4f23-97a0-1d7265301200", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c17c79c-e753-428f-ab55-602631cab687", "sighting_of_ref": "indicator--bbcd4f3c-083e-4ffa-bcf3-7a08a7b05fda", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcff150-a703-4b7b-ba1d-c0324f04f8b8", "sighting_of_ref": "indicator--bbcd4f3c-083e-4ffa-bcf3-7a08a7b05fda", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b863aa7-ff7f-4122-89de-86dc1cd3d26b", "sighting_of_ref": "indicator--bbcd4f3c-083e-4ffa-bcf3-7a08a7b05fda", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30043089-867e-4d89-8367-43396d3e2062", "sighting_of_ref": "indicator--5606f4f6-f773-4cd3-9efb-1fe1cd0f438b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ec0885-f339-4785-bff5-ffe2e4c3d3ea", "sighting_of_ref": "indicator--e8ab1632-48c7-45b3-8495-dab7437a279c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18f19a2-7a51-475b-a3c0-8e5df61d5bab", "sighting_of_ref": "indicator--e8ab1632-48c7-45b3-8495-dab7437a279c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38020298-8f65-43a9-b128-c83733029ac1", "sighting_of_ref": "indicator--f27dbec8-09f9-4c77-a730-aea2cb716cf0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ee8cea-48c1-4393-9da9-70ae1b4531e6", "sighting_of_ref": "indicator--f27dbec8-09f9-4c77-a730-aea2cb716cf0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4112ee31-4cd0-495b-81f0-234c65bfce78", "sighting_of_ref": "indicator--aeabef0c-6d61-44ba-b6aa-1735d00218d6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8387428d-b58a-4c96-b66e-d2e84a939475", "sighting_of_ref": "indicator--1b87c74c-c76c-448d-be13-719263c337bf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd00ee2c-ac22-4183-8eda-56930ff52069", "sighting_of_ref": "indicator--1b87c74c-c76c-448d-be13-719263c337bf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2774e9-b796-4131-b9bc-2e2ee91293d5", "sighting_of_ref": "indicator--1b87c74c-c76c-448d-be13-719263c337bf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a4178d-9bc1-4f01-aa95-d39599b502ee", "sighting_of_ref": "indicator--3991370f-2fec-4698-8f3c-ccec5f700b39", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f2750f-65ed-4e7f-bae1-33c1cdb6db93", "sighting_of_ref": "indicator--3991370f-2fec-4698-8f3c-ccec5f700b39", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb89cfa-1eab-47f8-a4f4-68c196833c54", "sighting_of_ref": "indicator--26d435c9-1982-43f1-9071-401912185389", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a3f490-bdcf-4ad6-b7f5-c750eb3347d5", "sighting_of_ref": "indicator--26d435c9-1982-43f1-9071-401912185389", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7f53e3-00d6-4c71-83e1-59b1e8c92fb3", "sighting_of_ref": "indicator--e5e2e4f7-3551-46df-9a61-6f86228d15e9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4dbe34-9076-4174-8fd2-aedc07351820", "sighting_of_ref": "indicator--e5e2e4f7-3551-46df-9a61-6f86228d15e9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052fd063-6cb3-4da3-8dc3-0b23af9f24b5", "sighting_of_ref": "indicator--478a7bb6-475c-408d-880e-1a81d8a15328", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44e77cb-f459-4b55-80b9-9ad1d1848e1a", "sighting_of_ref": "indicator--ca0cd751-87e4-45b9-9117-78a68cdbfb8c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a698ff-c26b-41c9-b4d4-f25771b30e5a", "sighting_of_ref": "indicator--ca0cd751-87e4-45b9-9117-78a68cdbfb8c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd63ae07-daa0-40c6-9b1a-2251416a7754", "sighting_of_ref": "indicator--ca0cd751-87e4-45b9-9117-78a68cdbfb8c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894487a3-1280-4d7a-9029-4e3994d408ca", "sighting_of_ref": "indicator--dcf302aa-17fe-49bc-9ad0-7aee672a9d5f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fe832b-f41a-42a9-b2ec-06779517fb4f", "sighting_of_ref": "indicator--dcf302aa-17fe-49bc-9ad0-7aee672a9d5f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1e70cb-6d01-42d9-8e29-43c9af6e6bb6", "sighting_of_ref": "indicator--0a86ca0a-2b10-409e-a3e0-c6b3236e7f1f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe158bb8-c353-4e32-ad0c-517498099f77", "sighting_of_ref": "indicator--0a86ca0a-2b10-409e-a3e0-c6b3236e7f1f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24564b34-a9df-4222-be03-1f219e389b5c", "sighting_of_ref": "indicator--196ad346-f12f-4466-87a5-f36fd2f3f509", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23604ce6-4448-46b6-87d7-116ea7099038", "sighting_of_ref": "indicator--16dd2e4b-2144-40c3-a8a8-708b57aaa475", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1a5cb3-accb-4973-92b0-8671f195b307", "sighting_of_ref": "indicator--16dd2e4b-2144-40c3-a8a8-708b57aaa475", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff21338d-ac16-4bd4-a0b5-8e16bf2a7f48", "sighting_of_ref": "indicator--268437bd-2dca-4fa4-a803-69bdf89240bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf454a1f-0d27-4a64-bb5c-696a8591a48e", "sighting_of_ref": "indicator--268437bd-2dca-4fa4-a803-69bdf89240bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92042598-53b3-4b9b-8789-b985bbad135c", "sighting_of_ref": "indicator--a1872610-c19b-4d81-a586-2b23c5eb3598", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fa772e-ef25-4292-9332-ca80b18d7291", "sighting_of_ref": "indicator--fcc98bbc-1cb9-494c-be31-9535c861199c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513f79f6-d0c9-43a2-a130-29423bdf595b", "sighting_of_ref": "indicator--62b634f2-83b6-4b70-9fdd-57fcbd73149e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1028cf-09cc-48a6-9a2f-d2395d542883", "sighting_of_ref": "indicator--de641ed4-482e-49c6-b521-0c704685bc81", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f5b034-b4ba-4ca7-9482-a877ea07d448", "sighting_of_ref": "indicator--de641ed4-482e-49c6-b521-0c704685bc81", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4b707a-d691-45db-9591-546ad2c3b947", "sighting_of_ref": "indicator--c3a77f72-0068-493b-9b37-cc8349def56c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df1a565-4861-4128-a87b-9a2f3e6f6f05", "sighting_of_ref": "indicator--67bb90fe-35a2-4903-8730-6041b5644e31", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64aaeaf7-4dcc-4cf9-b0e0-dba71f93ce42", "sighting_of_ref": "indicator--67bb90fe-35a2-4903-8730-6041b5644e31", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb5950c-0ef7-4b64-8b51-0686eebd59b9", "sighting_of_ref": "indicator--67bb90fe-35a2-4903-8730-6041b5644e31", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fa1a04-b717-4e1d-93c2-7eeeacd95bf4", "sighting_of_ref": "indicator--4c2dcccf-6d64-41b7-a0d0-90a2adbb2e93", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267be35b-ff8e-4d88-9e26-a4c4333f9056", "sighting_of_ref": "indicator--4c2dcccf-6d64-41b7-a0d0-90a2adbb2e93", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65326d8-a6b1-4840-9b7a-74182649d17f", "sighting_of_ref": "indicator--4c2dcccf-6d64-41b7-a0d0-90a2adbb2e93", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de302e49-ebdc-4c87-9dcf-beb96440d0ab", "sighting_of_ref": "indicator--5da1a077-e15e-4482-a9f6-d1fd61d8874b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc9c7af-0eae-4c81-bcb1-32eb0377e269", "sighting_of_ref": "indicator--048aa377-ab18-4ca5-91e0-b3fc8f671e98", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8bd734-2490-4b9b-a2c7-5820106c7d9c", "sighting_of_ref": "indicator--e59cbb1e-ef77-47ce-a042-625677aeec3e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38fdb2f-d78c-4b21-a799-4bfe6aeda0b5", "sighting_of_ref": "indicator--e59cbb1e-ef77-47ce-a042-625677aeec3e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af63e2bf-ff40-48a2-874e-ce6d258ea59e", "sighting_of_ref": "indicator--b7bd4c68-7cad-4f2d-a41e-fc8f51a48880", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6390f2-2548-438d-a52e-c0a70eb0f797", "sighting_of_ref": "indicator--b7bd4c68-7cad-4f2d-a41e-fc8f51a48880", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c531650-a5d7-474e-9485-9c8e988d4825", "sighting_of_ref": "indicator--8c062b30-b3c2-49f3-8620-4c117edcefb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49df6c2-7cd2-40ba-b2da-e3360e8cef5d", "sighting_of_ref": "indicator--bb9cc50a-62d6-4205-88c2-e46b34c641b4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dbcc99-eabb-4fcd-95b5-f3e1fe3b47de", "sighting_of_ref": "indicator--f8e0a6a8-63f9-4b2b-9bfe-b184402914b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef448aa-a23e-4275-8854-96a858a99146", "sighting_of_ref": "indicator--f8e0a6a8-63f9-4b2b-9bfe-b184402914b7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c249f6-030d-4d49-9b82-770f91d29dc6", "sighting_of_ref": "indicator--e8a11c17-05cf-457d-8024-d811ceb2f013", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb78835-cbe0-4fe5-8288-d7241b02eaf4", "sighting_of_ref": "indicator--e8a11c17-05cf-457d-8024-d811ceb2f013", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8b753d-221c-438f-8448-8076811e690d", "sighting_of_ref": "indicator--bcd073b1-0fb4-4864-b01f-70b8a93ec315", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02e5c15-ca17-44dc-9f17-64a1135601cf", "sighting_of_ref": "indicator--ee5ef180-02e3-4da1-b9b5-a27fbfc95191", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39124f55-52a0-42fc-8691-c29a36b11348", "sighting_of_ref": "indicator--15708be5-9282-4fdb-9383-2a5649918617", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d3c41a-0d38-45e3-a395-a7531c6426d5", "sighting_of_ref": "indicator--190eb467-9fb2-4fae-80ca-15277b05066b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e13c877-aad8-4245-b6c4-bc60dcf1254d", "sighting_of_ref": "indicator--190eb467-9fb2-4fae-80ca-15277b05066b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ddef3b-11c8-480e-9989-0b074f47a350", "sighting_of_ref": "indicator--c8f53434-a144-4b61-b549-5d3b85dd8da6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6686f1-bf0f-49c2-b5b2-ca20629cc136", "sighting_of_ref": "indicator--2bdcaed5-8fa8-4459-88af-d032936ea92a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f34ea13-de1b-48a7-aeeb-b7500ba1e069", "sighting_of_ref": "indicator--5183ac55-7e6c-4d0c-9837-913313eb8a1b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92227045-24c0-4ced-bf90-4ca8ec600008", "sighting_of_ref": "indicator--b8cce9f8-4869-425b-8496-260881ba91c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc94de1-188f-4ea6-b7cb-df259f6ea12b", "sighting_of_ref": "indicator--0b2d282c-b330-43f6-82c0-cd464333c499", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67408580-d95e-4cff-b793-7f5c5207929d", "sighting_of_ref": "indicator--76e06e58-c56d-41b8-9bf2-8f4a9d4feaf0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadfa6ab-144b-48ff-a830-cd56f6d6c006", "sighting_of_ref": "indicator--22922768-0152-4859-b2f7-a36b7759064d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5550e0a4-39aa-44dd-b19c-5bc4074427c0", "sighting_of_ref": "indicator--22922768-0152-4859-b2f7-a36b7759064d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b10f2a3-5838-4dd1-af90-44de6e9c9706", "sighting_of_ref": "indicator--d746770f-4432-49db-9383-4c8ef481da06", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394ba1f7-9243-43ea-aa31-10c4aee90bc3", "sighting_of_ref": "indicator--ee2571e3-1eb9-41cd-aba7-ec0cf439949e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d1c10d-381e-4239-9710-958723c8cec2", "sighting_of_ref": "indicator--ee2571e3-1eb9-41cd-aba7-ec0cf439949e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930b7da9-a54d-4d55-87a0-f728b7bc8738", "sighting_of_ref": "indicator--8209917a-119a-4b53-9132-2c2b9610a25c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7342e09-2c41-4953-b01d-97085bebcb83", "sighting_of_ref": "indicator--c2afc6e6-e00e-42ad-8024-71ce4092c682", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08f3e83-b47d-408b-89c5-9732872f23ee", "sighting_of_ref": "indicator--c2afc6e6-e00e-42ad-8024-71ce4092c682", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275f811e-cdc9-44d1-91da-be295ad709b7", "sighting_of_ref": "indicator--954962d3-8fa8-4137-b286-52fbdad88afd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d904ca26-5a4b-44a8-a718-a8afe1d282ff", "sighting_of_ref": "indicator--96038f33-6d7d-41ee-addd-8ef97b11b509", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f2de17-2349-41f2-a9e9-d03354166520", "sighting_of_ref": "indicator--96038f33-6d7d-41ee-addd-8ef97b11b509", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26aa3fe9-13af-482d-b754-59eff26d5ad7", "sighting_of_ref": "indicator--96038f33-6d7d-41ee-addd-8ef97b11b509", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bd504b-d10f-426e-bfe7-4af0afb9f3ce", "sighting_of_ref": "indicator--fc6e9b02-2fd6-48de-90cd-835ec1c3cc3e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e123fe8-5311-4784-a27d-c9c179cfe225", "sighting_of_ref": "indicator--fc6e9b02-2fd6-48de-90cd-835ec1c3cc3e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdd4796-0e97-47f7-8631-cf6697a960e6", "sighting_of_ref": "indicator--9bcd64b1-7ec0-41e8-8cbb-f5d2945a4bef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9df3db9-dc02-4411-9b5f-05ec6fa9fb95", "sighting_of_ref": "indicator--9bcd64b1-7ec0-41e8-8cbb-f5d2945a4bef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e704050d-6526-4736-90a8-0e262814f2b6", "sighting_of_ref": "indicator--e77b1ffc-1838-4fc2-af8e-01e3fa2518e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d252feb-725f-4316-9f9f-3ee0275e5bad", "sighting_of_ref": "indicator--f33e5227-c250-4025-b722-8038d460fcc4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237da268-8dd0-4ae6-aa74-5811aa19961e", "sighting_of_ref": "indicator--008aee8a-22af-4c7d-a7e5-110ecb12b9cc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7888dd6-4bbf-4ace-8614-19aa95d8c7c5", "sighting_of_ref": "indicator--bd3b668a-c423-475e-8557-16e11eaa27e8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a92e8c-b6e8-4364-b94f-9d82446410b4", "sighting_of_ref": "indicator--a6269c16-03cd-4c49-a70b-7c5daa6b8c4f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7462b72e-f961-4c54-b534-228936e79812", "sighting_of_ref": "indicator--b2d30547-7498-4d1e-9480-5b4395ff976d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c3f67c-f2ed-4ae6-ad1c-1ae851d4529b", "sighting_of_ref": "indicator--b2d30547-7498-4d1e-9480-5b4395ff976d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7120800-8e29-4e93-bd5f-d46df6859750", "sighting_of_ref": "indicator--b2d30547-7498-4d1e-9480-5b4395ff976d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd1977c-1636-4887-8122-9ca7f5fb3c57", "sighting_of_ref": "indicator--8f3292c8-f823-43b1-9fd5-299d919af491", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efba317-64d4-482b-b269-3745a05b0e11", "sighting_of_ref": "indicator--8f3292c8-f823-43b1-9fd5-299d919af491", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac6a0aa-f08f-410a-a688-c6790ea988be", "sighting_of_ref": "indicator--8f3292c8-f823-43b1-9fd5-299d919af491", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bd8d94-8a3f-4042-9818-e0d69343a1fc", "sighting_of_ref": "indicator--eb18a3f7-3512-4fe7-ad4d-20a8fb5fc657", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338a040b-97eb-4352-932e-8b4ed4bb9c75", "sighting_of_ref": "indicator--eb18a3f7-3512-4fe7-ad4d-20a8fb5fc657", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4877dc-ec06-4688-9fdf-ef55b4a78864", "sighting_of_ref": "indicator--a2a0bdbb-7fc3-41bd-9069-d2b63ebd4d75", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fce1167-bfa1-468d-9e5d-852515610583", "sighting_of_ref": "indicator--b6230e33-d907-414b-a861-15924b42016a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7c4ce3-e2d1-4523-a3b3-ecf713d56ad6", "sighting_of_ref": "indicator--b6230e33-d907-414b-a861-15924b42016a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95dec56-bb78-4d8d-9f9b-bd4b1137f59e", "sighting_of_ref": "indicator--7d6b8fc3-b523-4e43-9995-3fb17c3b5014", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491224a6-e0dc-4b75-bd86-e456caf1cbf1", "sighting_of_ref": "indicator--7d6b8fc3-b523-4e43-9995-3fb17c3b5014", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c11f29f-4e96-44fe-aef2-c9d0d1a7d418", "sighting_of_ref": "indicator--39551a19-52f3-4dd3-9caa-139c41d64698", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8ca10e-1836-4458-b890-a0080a6858ca", "sighting_of_ref": "indicator--455a6723-fa55-4156-9405-d00f02ff2e2e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625fc1f2-749a-42fe-8910-0acab6ab0405", "sighting_of_ref": "indicator--8feddf67-ef28-4d3a-b144-088c3f33b76b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e09bfe6-2fa3-43ef-b50d-919f38f1daf9", "sighting_of_ref": "indicator--968d13c6-060a-4ecf-9adf-fb6ba6106102", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fe0f1d-e92c-4f4d-acf6-132fd5c79df4", "sighting_of_ref": "indicator--dccb3324-0200-4e5e-a33d-3406c6675772", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac66a5f4-b7e0-42cd-8937-d7c1820afb08", "sighting_of_ref": "indicator--6244d785-bd24-47c3-87f4-79b1a1c27079", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0509fa8-4c2d-4c4a-b9b3-1a6e0e08f59b", "sighting_of_ref": "indicator--6244d785-bd24-47c3-87f4-79b1a1c27079", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c103b927-c4d7-48a8-aaae-4d805c69c54a", "sighting_of_ref": "indicator--37efb970-61ec-4ea8-9db3-cddef73914f5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3555854-bfac-4e16-9e22-c28a4f1cd2d9", "sighting_of_ref": "indicator--39a395e9-e09e-4db6-a732-8bcac037edc6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d0b625-ddf0-4f16-b9a7-c8276791caab", "sighting_of_ref": "indicator--471594b4-ecfa-45a0-be5a-340c53c65fe4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca35ea20-21d0-442b-804c-01ae010ffbb7", "sighting_of_ref": "indicator--471594b4-ecfa-45a0-be5a-340c53c65fe4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b29143d-7c6d-42f5-9f34-26d3dc133e2a", "sighting_of_ref": "indicator--7783a8c7-187e-4b0f-860c-38cc1530ad4c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af394be7-53c6-482d-ba05-d226b789546b", "sighting_of_ref": "indicator--7783a8c7-187e-4b0f-860c-38cc1530ad4c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cf7f6d-c998-4c6a-b8ee-e7c859ed8218", "sighting_of_ref": "indicator--f75b4323-1a61-4c2d-901d-c26c6c73bba7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be198f3-e831-4159-8518-72788093e218", "sighting_of_ref": "indicator--f75b4323-1a61-4c2d-901d-c26c6c73bba7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed46175-7521-4630-a21a-ad9da73018d4", "sighting_of_ref": "indicator--98911b49-0ba9-48dc-9383-534c4ea9edf2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345046ed-d6f7-47ff-80b0-efdee272fd7c", "sighting_of_ref": "indicator--d4bf3609-4d09-44bd-9714-ecc6c1c279d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a867535-f70b-45b3-85fa-e446a91eac45", "sighting_of_ref": "indicator--17218df3-e406-4049-ac60-48f4c32690c8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd9dc0b-4e35-45c2-bd01-be7933a069a9", "sighting_of_ref": "indicator--28d2ed22-6529-4df9-b782-4c8f7e6dbd31", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00e3ced-348b-4579-9242-9f2ed681941d", "sighting_of_ref": "indicator--be960f00-c4c2-4ede-a0db-b027a1454947", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366dfad2-3a0d-4ab6-b3f9-0a9612904319", "sighting_of_ref": "indicator--b0868413-c8b6-401b-9df1-df6913c51613", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6aa0871-da8c-4862-bc5b-2f529cd865d0", "sighting_of_ref": "indicator--fd17045d-0690-4178-90a5-9568094a8788", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77b8449-56e7-4052-9ab1-9fecad532545", "sighting_of_ref": "indicator--dbcf3f47-408a-4485-9416-45fd900a95df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3c44b2-5e3a-418b-95dc-708a5e316cee", "sighting_of_ref": "indicator--8d58ca7b-2eed-499e-8b73-25b3c9912af8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6bc3c4-9ff7-4e75-9ab3-7a915fa896fe", "sighting_of_ref": "indicator--9f9555a6-d854-4b06-941e-0c90f2de73a1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c9d7d4-226c-4c0b-b9c9-385563aff170", "sighting_of_ref": "indicator--d37ca6bd-f41b-44cc-9417-093f1c62078e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c8475e-ae1d-4a59-a565-aeeb6d096fa0", "sighting_of_ref": "indicator--43245ae8-9efd-411a-8fb5-25b54362eb45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbea70c5-eabd-48ad-a086-c8decc7c2455", "sighting_of_ref": "indicator--f37371fe-2e2d-4278-a70d-75f52776f5d6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c85bf7-de14-4faa-978b-ebd0cc46380d", "sighting_of_ref": "indicator--10e49190-cbbb-48f6-8324-b16af2f3d622", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c477157-01b3-48e5-949b-ef222cca0d4d", "sighting_of_ref": "indicator--26ea6df2-29be-4872-bb71-9f5e74bdb526", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3fccca-10df-468e-b135-516050b9acc8", "sighting_of_ref": "indicator--b233ca08-0ee3-4696-bbe8-988f590935e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a37bd2f-5d8e-40f8-8bcc-9fe48f9ee2b6", "sighting_of_ref": "indicator--0e4b37b9-bc0a-4715-925b-f03d9286be7a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3285ab2f-83f0-4203-b99c-ebfffba8e139", "sighting_of_ref": "indicator--7eb595a5-42aa-40f7-be87-3cd36bd4ab17", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7398129f-1b2a-428f-b592-42360ba7d4ed", "sighting_of_ref": "indicator--615768eb-6a0d-4502-94fc-49da51a7bcfb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02fa6c4-3830-4138-b169-49edff6b55ba", "sighting_of_ref": "indicator--7385c202-42b3-4e35-ad06-40e310119ec6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30157035-eebf-4adf-9c3b-6cc82b0b36bb", "sighting_of_ref": "indicator--7385c202-42b3-4e35-ad06-40e310119ec6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903d82f2-bb57-4fcb-8712-395ef1a3b447", "sighting_of_ref": "indicator--70dee1d9-6f17-4660-b132-ce80df42cc54", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087ba4a5-df50-487d-8c0e-c907c90a38f4", "sighting_of_ref": "indicator--70dee1d9-6f17-4660-b132-ce80df42cc54", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b397b01-5f04-430e-9972-e483126ff426", "sighting_of_ref": "indicator--53a205ea-368c-4893-a500-da7645604f2c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f1a3fd-2d89-4274-b5cc-36e9fe15c178", "sighting_of_ref": "indicator--53a205ea-368c-4893-a500-da7645604f2c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2265422-27fd-47d7-ba0d-a72e2e1f153e", "sighting_of_ref": "indicator--1a62c22c-fa34-440b-8bd5-91c30a9fdfce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2bc9f8-19dc-4559-97e5-4387b9e87f6f", "sighting_of_ref": "indicator--1a62c22c-fa34-440b-8bd5-91c30a9fdfce", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a65266-1e1f-453a-baf6-e333f4fc8cd4", "sighting_of_ref": "indicator--5f6f1667-cfa3-4f86-a1ca-cd4760130905", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf90fcc-3710-47f7-ae3b-5a457c44e7fb", "sighting_of_ref": "indicator--1a143159-b7a4-4f4f-a7a8-0204e615aecc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282b958a-00fb-475a-b531-b33d4907968b", "sighting_of_ref": "indicator--1a143159-b7a4-4f4f-a7a8-0204e615aecc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a14655d-4d24-43a9-b820-a2ec8cc5ee90", "sighting_of_ref": "indicator--e55bba14-2f37-409c-97ae-7435ad7756e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022cf542-14cf-40f2-b40c-f21ba67359a2", "sighting_of_ref": "indicator--e55bba14-2f37-409c-97ae-7435ad7756e2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad6b49a-7064-46cc-afdf-b15f2760faa1", "sighting_of_ref": "indicator--fb93b739-718e-4567-a139-d66d6c192d85", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b35dc3-0a13-4e5f-a007-382cfd362fef", "sighting_of_ref": "indicator--fb93b739-718e-4567-a139-d66d6c192d85", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f905d7a7-143b-40f8-8c9a-6904b3520588", "sighting_of_ref": "indicator--fb93b739-718e-4567-a139-d66d6c192d85", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604a7d7f-5c16-40c5-8920-b6ab9e0a7140", "sighting_of_ref": "indicator--869973c9-359b-49e2-a5af-14bebc2b7914", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdb6034-31b4-4677-ba11-7d4092fd3368", "sighting_of_ref": "indicator--ff391592-92ba-4ad5-9f87-9122a6cc9c6d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72d443d-dd67-4ac8-af28-2e9d1cd5b053", "sighting_of_ref": "indicator--ff391592-92ba-4ad5-9f87-9122a6cc9c6d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db35624-4c11-4544-b36e-58acc7fd2c2c", "sighting_of_ref": "indicator--f80b580c-75c0-462a-b55b-d9df747928df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482fd560-b170-45d6-bf4b-3fd1abef0b36", "sighting_of_ref": "indicator--7defddd6-f4b1-46a7-9bf2-889d4e31abd4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca341c1-eded-4524-b908-fcd8847e0146", "sighting_of_ref": "indicator--f0c52036-2bca-483b-b3e0-2418a6c0aba3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafb383f-c047-48e1-9181-20c519104c0c", "sighting_of_ref": "indicator--337032b2-cf32-4f95-b512-f40beb133d1e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea3b349-2b12-47a8-8ba6-946287d8c07c", "sighting_of_ref": "indicator--7ffe1d3e-3aaf-4b73-8b38-5279c8f2ada1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24af0512-7b88-47ae-ac4b-85a1bc9289c2", "sighting_of_ref": "indicator--3ec7945d-c387-4dc2-a397-fead558bf39b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe23dcf9-a586-43f0-9ddd-de026c835aa7", "sighting_of_ref": "indicator--16cc9480-e2a1-497a-94fd-e7dc686eb630", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517f3fda-c415-4975-a87e-4caa5b50603d", "sighting_of_ref": "indicator--16cc9480-e2a1-497a-94fd-e7dc686eb630", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238e59d1-0518-46d9-b3f9-5f7a7dd1c655", "sighting_of_ref": "indicator--16cc9480-e2a1-497a-94fd-e7dc686eb630", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42028461-c86b-4288-bb24-831c5fa74f4b", "sighting_of_ref": "indicator--8bafd867-5a37-4fd1-88b5-176e7537eb5c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ee123d-6d43-4d64-948c-476203e94dcf", "sighting_of_ref": "indicator--0704fbea-163f-4531-a105-d4f0793c7a5b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baddd8f9-a25a-4420-bb6d-d46c023a4745", "sighting_of_ref": "indicator--cbb489a0-ce10-465b-b86d-979343014e11", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6a526e-fc65-4439-9f9c-52bd7b439461", "sighting_of_ref": "indicator--cbb489a0-ce10-465b-b86d-979343014e11", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bef6c4-f268-4478-8426-6189ba2b0514", "sighting_of_ref": "indicator--4d079546-4a22-430b-ad36-bb8374b1ed38", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bcdb04b-366b-4314-abad-13bac59eb27f", "sighting_of_ref": "indicator--e90ce91d-57e2-42f4-b5b1-c3cc9efe4f4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66382a90-47b2-4f05-a491-feecde82889f", "sighting_of_ref": "indicator--bf5cb8b6-d755-4525-a7e3-f18412557a7c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76009bce-1e2c-45d3-a01d-ca89f5929ee6", "sighting_of_ref": "indicator--63c1835c-6f02-4d85-b878-5b87685dd06e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55610be6-3302-4169-bf2d-032788d5469b", "sighting_of_ref": "indicator--1aef0e29-8c3d-460e-9a85-04e5412de68a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6feee22f-554b-41f4-84b6-8d0296b04642", "sighting_of_ref": "indicator--a1182e2b-af40-42bd-a27f-1203efe54715", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c38669c-d671-41b1-b20f-cb33816d2c63", "sighting_of_ref": "indicator--276b6289-47af-42c0-b284-a07a213cc965", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd15cc80-f0cd-421f-9305-b224df0ae099", "sighting_of_ref": "indicator--681ecb7a-5050-4024-ba98-940f30986e56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6c16bd-3c38-4533-9e0b-3926ec3ae54d", "sighting_of_ref": "indicator--152c97d1-63bb-4586-8066-c6510058ed16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4f6683-bee1-45af-9d9e-fc0deacfcff9", "sighting_of_ref": "indicator--e3409566-40a1-4383-beba-c891c49ee42a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74dbe45f-1536-4549-b455-c50f7ae7a0bd", "sighting_of_ref": "indicator--cb8a2c49-260d-4638-8df9-5aa2b4d2af49", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdac4ac-114c-4c1c-9262-11e233ef8f1d", "sighting_of_ref": "indicator--8e0a6ee1-b2e1-4fe9-a384-f609d1d2c70f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2598ae21-8275-4f89-ba1f-9c779fbd160f", "sighting_of_ref": "indicator--7ffa295d-2eb9-4a89-a97c-83a57a02c443", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31917fb1-1128-4fb7-818d-236a3c0746b6", "sighting_of_ref": "indicator--714a7a24-fdb4-48bc-8e1a-917378d0552b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e341d8-cc3e-44df-98d2-d3988109bdb8", "sighting_of_ref": "indicator--7e8d58c0-61dd-4173-81cf-70fba4aeb54a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5cb2ed-1d53-4da6-bb1b-62f94b2ecfb2", "sighting_of_ref": "indicator--2b8a9769-9643-4597-9a2e-1b4dcb6d003f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d1771b-0114-4f23-a1a8-59b36fa2dc3f", "sighting_of_ref": "indicator--a1cbd94b-2bb8-4ce6-af64-2918a4559e71", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3777af7-4344-4cc8-a975-8d802e817b1a", "sighting_of_ref": "indicator--cae90e52-1920-48ee-a143-7c60bf4f425d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7e6a3c-488e-49ed-90f7-99ec8fb0eafb", "sighting_of_ref": "indicator--aa5ca02e-2f1b-49dc-8fc7-f445e93d6927", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ab9af5-0dd7-4a34-a8ad-966e2070897a", "sighting_of_ref": "indicator--378c901f-5f1c-4b5a-bceb-54b1499bcc48", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661973f3-fa87-49a8-8b59-d442a5c2d8c0", "sighting_of_ref": "indicator--08a34e4f-1ae9-4f7c-9c37-210f36ab3437", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4960e143-5ee4-47c6-b7b8-e65bded03ad3", "sighting_of_ref": "indicator--7bc37fad-2379-422a-9452-671a1b87b041", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dbd1ca-ee95-4079-be0b-794c851ebe52", "sighting_of_ref": "indicator--71a90177-e995-46b7-99df-4aeebd3ce561", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f4c953-6c73-468c-8c4d-effc1485c6ae", "sighting_of_ref": "indicator--39283b71-3ead-4a4e-b10e-50071b958a93", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473c3629-85ed-425e-8446-7dac4c3584aa", "sighting_of_ref": "indicator--cdbdbfda-de6b-458b-9922-68067cd15217", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644d67e1-b871-40c2-a579-11b6d3ea66a1", "sighting_of_ref": "indicator--c563b854-78e3-462c-9ae5-fd23c633a594", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3021b22f-91c6-4538-a649-617d46f91274", "sighting_of_ref": "indicator--950dc678-6997-4b5b-950a-d68bf65dc4af", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e39cb5-ac50-4ca3-9adf-7c064d7e5b40", "sighting_of_ref": "indicator--5ae53606-0552-423b-abb2-a747910461f8", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f04e171-816b-4f5c-954e-d6ca02d3058b", "sighting_of_ref": "indicator--9aff1537-5f74-46db-9468-d06c5eed2d43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d5d7bd-c8cc-45ff-a61c-1726ce18ea87", "sighting_of_ref": "indicator--8e974b11-d8d0-4b9a-975e-42efa1b3a714", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8b16b7-4b5c-43eb-aaa9-e977cbe55a93", "sighting_of_ref": "indicator--cedc28fd-5094-4a6d-ba2d-1e1f6fef338b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e682578a-8e51-429a-b38f-73340ca864fa", "sighting_of_ref": "indicator--502d1a98-8532-4369-ada4-25388430172a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2445a2d-19b5-40d9-85ac-35d613a082ed", "sighting_of_ref": "indicator--67631e92-2c1b-4704-800e-79166d1022c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c5e46e-a311-4976-aa4c-838178a4cc02", "sighting_of_ref": "indicator--a5976b64-a828-4a2d-831b-0b89892d7d6e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31b8bbe-e025-431c-89e1-6e6e4b2a6a84", "sighting_of_ref": "indicator--ceef2203-f2b9-4cae-874c-f43b9bed6108", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ad537c-b8f7-4057-af39-b94fe809cc0c", "sighting_of_ref": "indicator--50305ff5-af5b-47d3-9961-3f2d22a7052d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8175f97f-798e-4993-b14d-6102bc96a594", "sighting_of_ref": "indicator--a6bfa26f-aad4-42a9-8b65-fb8a4f35fa3e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeaaa301-d668-4074-8143-12dbfa49d57d", "sighting_of_ref": "indicator--a6bfa26f-aad4-42a9-8b65-fb8a4f35fa3e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954fe157-5459-4e3a-8516-8c53782fb9ea", "sighting_of_ref": "indicator--aad1af25-71cd-4141-9dbd-289e89de4c9f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e50d8aa-284b-474b-b408-4aeeceac0cf4", "sighting_of_ref": "indicator--aad1af25-71cd-4141-9dbd-289e89de4c9f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f56164-126d-4e4c-a2f0-ed0dc5db5df9", "sighting_of_ref": "indicator--1c29ee3f-6759-476c-8e27-3397e6bf751e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a689b09-0011-4f5a-a199-fa003938fe63", "sighting_of_ref": "indicator--1c29ee3f-6759-476c-8e27-3397e6bf751e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a50cf9-6ebc-4257-a015-946b96c7b270", "sighting_of_ref": "indicator--bd8f25aa-fae8-4971-8e6c-b1ea45a27b7b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d53ebbd-8b0f-4324-a617-b77f9df12899", "sighting_of_ref": "indicator--bd8f25aa-fae8-4971-8e6c-b1ea45a27b7b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f563edb-f1f9-4b70-a2f2-86be4be3e959", "sighting_of_ref": "indicator--5ae46723-3203-45ab-a639-b6f641615c0d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb2c06d-cf0d-4e8d-9a23-d503d4d7ee73", "sighting_of_ref": "indicator--27b2802e-4600-4361-841a-d135628c537e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eae59ea-55dc-4229-80a7-edd1ed67d7e1", "sighting_of_ref": "indicator--86af5a19-542d-467d-b5e5-8032c51f9dbd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f0808f-ef80-465d-a79f-a85cc0f54707", "sighting_of_ref": "indicator--925e8720-ceaa-4aa0-a1b7-2fe0fb7baf66", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fd4ea4-a07c-4dc7-8021-397bbb829c7b", "sighting_of_ref": "indicator--de6581c1-bed0-47b0-a542-8772c5041521", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fae5a8-8364-4712-a25c-85fb57074dd9", "sighting_of_ref": "indicator--8d3e95b3-2786-4f50-a8c5-ad0e7f8485f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123a6ef6-38cd-446a-b38c-879be117bd96", "sighting_of_ref": "indicator--0c777a61-9762-4a2b-8681-d5467f3428f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd8d99c-11f0-4df1-b13e-6b6399da2447", "sighting_of_ref": "indicator--90efdef3-71b5-42e3-b249-42e21e5dbab0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539772c8-8c96-44b7-8535-c7c16e4d421a", "sighting_of_ref": "indicator--260fb4ff-ae57-4038-beeb-ad9d483ad5d2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a3edb2-ca96-4710-9216-d6843c622c9e", "sighting_of_ref": "indicator--a32e6ab4-cf70-4502-8875-2f22671b6331", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e40d95-9f5c-458b-9da4-9ea9c0e74f2c", "sighting_of_ref": "indicator--052c0516-aa75-4d46-baf7-233359fd090c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a936e232-1d69-4433-a1a1-031d4f8fc935", "sighting_of_ref": "indicator--106d3057-2dda-481c-845b-45e2d67f035b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ad8a5c-bc80-4200-aedc-509395c85eb0", "sighting_of_ref": "indicator--2a0a629b-ce68-4298-90b3-dda6d69b9ab2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8165954-23d4-43f8-b01a-7162ba723e3d", "sighting_of_ref": "indicator--f8defbaa-4fb3-4411-81c5-3a43d555690f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d55e49-8ed2-4a1c-9283-5c10225373bb", "sighting_of_ref": "indicator--5e9cca60-fd1b-4c8a-9bf3-9f255d60b437", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c29b4b-6128-4e7d-9266-2fc78987dace", "sighting_of_ref": "indicator--6db5fdab-481f-4c5d-b0f2-efea780b74c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cc3143-15c2-4088-bac9-337aa9ab78d9", "sighting_of_ref": "indicator--6db5fdab-481f-4c5d-b0f2-efea780b74c2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e9d0d6-1a2a-46c1-a005-94161dbdad63", "sighting_of_ref": "indicator--b18203f7-8ddd-4aea-ae53-bb2f0c380c3a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707cf90a-aa26-47de-9129-51068e73b9a6", "sighting_of_ref": "indicator--5b411f9f-4cb9-4d2f-bd29-2c02c0ee9dea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec33f00b-4e5f-4815-b0aa-70d5b2e5411b", "sighting_of_ref": "indicator--a23747d3-5bf0-4934-956c-ad6de439e23d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ca422a-ce5d-4267-9ffd-e3ea7296bff3", "sighting_of_ref": "indicator--412720f3-7aef-4ef4-b440-ba3a62ffe472", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76c7b5d-2fe8-4ac3-94a4-f4c0b33d6c47", "sighting_of_ref": "indicator--c960058f-1fc7-4c33-843d-190a62f8f28e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379cdd61-c932-45e0-a7fc-7aa69100ec3a", "sighting_of_ref": "indicator--80e2bfdd-1ea0-474c-ac15-ed8a1820ecd3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f9a835-af3d-4990-94aa-2301f999f517", "sighting_of_ref": "indicator--75d41b42-5005-4451-9001-d158fa45c9a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f905a45c-6ddd-4222-b62e-f033d604e4b6", "sighting_of_ref": "indicator--6aeaaf39-1856-4ec1-be9a-9cb6cc8250b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb527eb-60cc-4e90-a4f9-da7e004696c3", "sighting_of_ref": "indicator--a3317d60-0df5-435f-8b08-960a930335af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a660d0-829b-4fc5-a365-3df696567636", "sighting_of_ref": "indicator--47a8b915-b264-438e-a2df-7d52b3d95c88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6355afa-cd65-408c-b6b8-8a9bf6e19cad", "sighting_of_ref": "indicator--f1b1c8ad-fe19-47df-b2cc-c7f8a4183235", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b390a7-5c15-4020-9327-9d16eafc103d", "sighting_of_ref": "indicator--3dfd5bd6-d2a2-46f4-9bf7-2d3db5dd99e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900e20a9-80f2-4655-91fa-cf40e113a95e", "sighting_of_ref": "indicator--f05b1679-59c0-4d57-840a-03d4fbe9cfa0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6570be-68e8-408d-8b2a-db1dad4dedbf", "sighting_of_ref": "indicator--8b1896a0-5f4a-4c5c-9f67-eeaee1a0d93c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fb1307-d0a7-4627-8815-b6891947b289", "sighting_of_ref": "indicator--fbee765f-3a9a-4246-a4dc-a394415a9f96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e102f5ae-8ddd-4d5a-84d4-88abd76cf7bd", "sighting_of_ref": "indicator--12fd12b8-66ee-4ff8-bfcd-3ab4d67cbd5f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251db804-1eb3-48d0-b758-686a863b2af5", "sighting_of_ref": "indicator--81ba3bc9-913d-4484-bfca-78816d4be429", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee34e7f-f5fc-44ff-bc98-3f15f056304b", "sighting_of_ref": "indicator--cdf18137-6088-4ec5-a310-324ffb6add7e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35087c1-2353-4ee1-82c8-3ab2694940b0", "sighting_of_ref": "indicator--2d614ce3-3db4-46fa-8095-d6224bb4e441", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426e99f0-6b64-44de-9d26-8efb6919936c", "sighting_of_ref": "indicator--936fcb27-28c9-4074-bc0b-4e9d1184233d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb8af1e-dff8-43a0-a8c1-8041dcde745e", "sighting_of_ref": "indicator--14f40bad-48b8-40f3-92c0-c029719e94dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1af4976-4b0b-4e2e-9f20-d4e61c5ca3a0", "sighting_of_ref": "indicator--93016490-0e5f-4d61-844a-710bd8566129", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787ab6ba-02db-47e3-b3e9-d99e17cfd4a0", "sighting_of_ref": "indicator--da58a8f0-dbcb-41f8-8f70-a8c13c782c51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c778e49-c5fc-4f65-abfe-add99db2e79d", "sighting_of_ref": "indicator--09874975-0a6e-41a7-982a-8cffb20cf59e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89019e76-eef5-4fc3-9fa9-4a6af6e915c4", "sighting_of_ref": "indicator--cfbb4360-c9a4-4393-8c19-2728cf3dc3fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4cf0f6-dc28-4289-b34c-3235b2915c3b", "sighting_of_ref": "indicator--9992dae7-2dee-4c9c-8319-78e199bde8a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b85655-95c4-4a8a-80ae-a7f7bd1ea044", "sighting_of_ref": "indicator--28fc1e6f-5f78-40bc-8137-1308c1558d08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e092571-7a5b-4f99-abd6-c74edc5d9bcf", "sighting_of_ref": "indicator--aa06574a-47ed-4c44-93c9-3599393ca779", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5713c47-b0d8-4dc7-b58e-f5a9d199afe0", "sighting_of_ref": "indicator--f5659bc9-47d4-4366-84be-93157bcf4ca4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768961b7-164c-475e-a57f-710391dc6254", "sighting_of_ref": "indicator--9fe460c1-e69b-4b59-aa72-01f361cc55c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fd2b26-1d89-48fa-b5d6-b73371ef4729", "sighting_of_ref": "indicator--04e971e9-4c86-4a64-8d33-ae9d12ea549a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f061714-601f-4335-a4d7-f50a9921f359", "sighting_of_ref": "indicator--b9133fc0-c9b9-4b29-9c86-12f2ed1bd6c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec89469-d336-4607-829d-9277ce3ac006", "sighting_of_ref": "indicator--ccce082b-dc0e-4b34-8731-daec1b764db1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f9198b-ce3d-4084-ac60-7c48fc816dc2", "sighting_of_ref": "indicator--1c213dc2-131a-4136-bdab-7f7dd96097d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aaf8916-cfd2-4b68-a5de-e3161c81e268", "sighting_of_ref": "indicator--a53241cd-7ead-4cfa-ba2e-0e9bfa7771b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175d448f-6901-4f6c-9412-abe00528f36c", "sighting_of_ref": "indicator--8e85ca1d-1325-44f9-8d93-28a13a71469c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d8cf38-5923-40f9-b587-9aea9c58f40a", "sighting_of_ref": "indicator--a0102940-7d31-43a4-92ff-ecd978d0d333", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9951198a-18ef-41e4-8c0f-0376603510b9", "sighting_of_ref": "indicator--5a239ca0-f47a-4d2a-b44c-ba5243ccd3eb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d342035-8044-4574-9412-7daba35af6ab", "sighting_of_ref": "indicator--ed1f3e79-380c-4c63-8ea8-932fb47a0591", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7496ca8-304e-447c-97bf-26b350769a27", "sighting_of_ref": "indicator--5c1bc726-865a-4d8e-88e4-a0f52f5bc875", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7574a0b-e44e-4fc0-a634-88bbb22167f6", "sighting_of_ref": "indicator--1de72ce1-2c0a-4b5d-8f2d-cf4b58909820", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37ea942-5903-4ac5-91e6-b3c335e4b340", "sighting_of_ref": "indicator--4fdb868a-aaf5-4895-9bd0-436c6a496b09", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bb3ead-589e-4aa6-9c68-314d1636a12c", "sighting_of_ref": "indicator--ae021be4-855d-4030-a4e7-bbca3f3099f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2927321b-c919-4f74-9172-acfe3cb69250", "sighting_of_ref": "indicator--977aae94-2089-4bf7-9539-a02ea16fa4ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0dd033-891c-4366-af8e-1723339b3527", "sighting_of_ref": "indicator--fbe6c780-1c0d-4164-b997-cb23ce17a451", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a857267-428b-43f6-a421-756f277914f0", "sighting_of_ref": "indicator--22b2c03e-5f44-4dbe-b909-1b746b442666", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fde83f-473a-434f-9fbb-0ae9872b57b8", "sighting_of_ref": "indicator--65bcbe8c-bc63-4de0-bae6-a48ea9b9b03c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddff1edc-8a2d-4571-8cf0-91377daec4ab", "sighting_of_ref": "indicator--08b8f1e1-a09c-4f31-8ca5-af63c78709dc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c4fb82-116b-4cf4-80d7-45453a9334d5", "sighting_of_ref": "indicator--b59c5cc3-288b-4ddc-a40b-fd93ef7b86dc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593a5df0-7d00-416b-9306-e7947f37d346", "sighting_of_ref": "indicator--15ba9f21-2a82-434a-b9a2-6d5329d68f7c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76395e01-4a8d-429e-b9f9-e548fc5168e3", "sighting_of_ref": "indicator--15ba9f21-2a82-434a-b9a2-6d5329d68f7c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bb5d20-861b-4211-afd5-a9829a6b5df5", "sighting_of_ref": "indicator--ea3d0f26-1297-459e-869c-9e320703b5e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f23372d-1076-424d-9a1b-84f9579f9a08", "sighting_of_ref": "indicator--7b78f3aa-0899-42ee-9385-cb25550cb6cb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca51207-0766-441c-ad07-1791e3667695", "sighting_of_ref": "indicator--7b78f3aa-0899-42ee-9385-cb25550cb6cb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d10b26a-9e55-42fe-a3be-845937e196e0", "sighting_of_ref": "indicator--2ac57485-09d7-4f43-83e2-dd7d60e350ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aac5756-f2f0-41bc-8f78-d6efbe2b6a50", "sighting_of_ref": "indicator--bb1d9c31-99ee-427f-ac60-471be28dea6a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36992bb9-6c4c-4c9a-afaa-cf5a96b4012d", "sighting_of_ref": "indicator--f16efb84-f82d-4536-999d-a2cbe47ebc93", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ad7c0e-49f6-4e6b-b2e6-193022102cbc", "sighting_of_ref": "indicator--bda0c59b-ec5f-4e1c-93a7-1a18a21296c8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29aefc7c-426c-4e7c-9b01-c1bc6c4aa0fb", "sighting_of_ref": "indicator--9fc0ee86-8f8d-40f7-ab93-5df796f7f139", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f1aba9-58f8-4fc8-9577-4dfbd2b54bc0", "sighting_of_ref": "indicator--4ab59bc9-a8a9-4daa-85c0-4b1eb81e9c9b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bde65ff-70d6-43a2-a31d-ab664d64b20a", "sighting_of_ref": "indicator--a68c72f0-83e6-4707-a464-3232f0b2645e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf609ffe-022d-4aef-a59b-d1e844198199", "sighting_of_ref": "indicator--a46bbd18-8eed-431c-8133-d11ae0267044", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d84e36-9818-484a-8e4c-1f69836bd833", "sighting_of_ref": "indicator--11f39a21-3533-4355-8388-9b2996b7d42f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b8d420-ae3c-47aa-bb0b-a94bd08c3d1c", "sighting_of_ref": "indicator--c52d8ba7-5af5-400e-bebe-dc6f7d5a37ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650a3108-1451-4369-a641-6716f1b61dea", "sighting_of_ref": "indicator--85902de6-b667-4bd0-83bf-f15be0d782b2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9685fc-a624-49a8-ac40-3dbf50695a27", "sighting_of_ref": "indicator--cf8a0c5f-b55d-4263-a874-dd796bc8e727", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4290d8c-07db-4636-9c2a-06868ae7861c", "sighting_of_ref": "indicator--3ee449b1-347f-425b-8b9d-67c0e6c35a49", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b641090-d08b-4d19-8f67-dd07f2d07f2f", "sighting_of_ref": "indicator--cff743d3-5852-4321-aabb-2d792cbd589b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5592ae44-95cb-4a12-b665-0ec0042ce09a", "sighting_of_ref": "indicator--cff743d3-5852-4321-aabb-2d792cbd589b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6055de7a-ed01-4e86-836b-7142359a3f0e", "sighting_of_ref": "indicator--cff743d3-5852-4321-aabb-2d792cbd589b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a31787-05d5-43a0-bec7-81077954f1eb", "sighting_of_ref": "indicator--88879712-76e8-4e6f-82d5-e719e2738d58", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46b8b94-f5e8-4229-b39a-b70521d67eca", "sighting_of_ref": "indicator--95d4a38b-7313-40f4-9561-f2736d831664", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4facde55-008b-4e2b-b2f0-c2744eec3632", "sighting_of_ref": "indicator--25eee2ff-92da-4a2e-8402-28f1567a9b04", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbabbde8-ca3a-4e5e-b750-03fbde4aec2b", "sighting_of_ref": "indicator--70f553c2-3834-4ef7-871d-e15794e977d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7dc73c3-8303-4b65-aabb-bb9143b90b56", "sighting_of_ref": "indicator--4413c48b-3e28-47a9-ad8c-61b7efb3df5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8496839-f0af-4ca1-8eb4-fe030f94d0d1", "sighting_of_ref": "indicator--c04b0f46-1d6f-4475-9a09-afcdaac6ccea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120fb8ab-6d8e-48bc-9914-5e37f9b45f64", "sighting_of_ref": "indicator--ca569ca8-31ee-4c6b-804c-e218f536e168", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30fc2dc-1ecd-4700-a56e-5a5cf1e7bf90", "sighting_of_ref": "indicator--da717735-bd9d-4f0f-a0b5-92b35bb92b1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1586ee-8301-4256-a0c0-d321b64a5fff", "sighting_of_ref": "indicator--644f44b9-0bce-4fa1-8ea3-ffe3a70467a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8246bd-b8bc-45c9-930d-2727d50326b0", "sighting_of_ref": "indicator--219256ee-4d59-43c1-85af-e77c34ce5bb9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53991f8e-389b-4515-95ce-5e32ee61d12b", "sighting_of_ref": "indicator--0a9388f7-9444-4732-b8ca-a43d66a6ee4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3cf64c-0684-437b-826d-66042f8086a3", "sighting_of_ref": "indicator--f0da5b35-df0f-4edc-a0b0-3ae9561414c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76a7ce1-8a3f-4c18-aefc-b0d524a427c2", "sighting_of_ref": "indicator--40dcfd1f-cfe7-48a4-a6b9-1112ab85baca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662fd0e4-5082-4f6e-bb2a-3e5da300d8e5", "sighting_of_ref": "indicator--81f78fea-5369-453b-8dcd-0c097bbacb0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbc71d3-7b7e-432b-a1a1-f67c926d6e33", "sighting_of_ref": "indicator--bee02178-03ab-4017-8668-7c8d169775f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6615b6-87ee-4dfa-b3a1-0c176ce870ce", "sighting_of_ref": "indicator--b51bd4b5-dc4d-4bbe-a262-eda28c0846d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0efb453-d589-4dc3-9f8a-aa69052f871d", "sighting_of_ref": "indicator--ca602229-4978-4da9-a8e7-87e05417f44e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2efe5a4-971f-4031-bcd4-7765bbd4ec9d", "sighting_of_ref": "indicator--4e1c552f-7169-4536-8166-ae2918d05511", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7078d6f9-b34b-4f43-ba3d-e9ddc7493108", "sighting_of_ref": "indicator--673bc002-76b7-4012-8ed2-440aef408a6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8412d54c-3ea9-41cc-8312-a310c87d2326", "sighting_of_ref": "indicator--ddc7da2e-bc20-42ff-9427-a568ce76dfd6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df9fdc3-9cfa-47cc-b523-daee4ed9d04c", "sighting_of_ref": "indicator--1285ca4c-a8fd-4e3f-84b1-3e103a8fa09b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb8bdd2-cd36-4351-8d11-2ef182071a0d", "sighting_of_ref": "indicator--4fe0a957-779e-4ebf-90c2-4f01689ddfc5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6c3183-55e3-4b6e-aece-b7207221f6ae", "sighting_of_ref": "indicator--463fb5d6-e8d4-47e7-84d6-a2325144d003", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738a14ca-1f83-4ee6-aa1a-006c77729a1f", "sighting_of_ref": "indicator--ce8bcba7-aa2c-487d-92d9-abaa7597a5bd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207ab574-fcbc-4ebd-aaf6-dd1b98774d64", "sighting_of_ref": "indicator--b0d29e09-2815-4c1a-a60a-228bb4061826", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492d9f57-6dc6-4ad9-843c-25f8b80c16cf", "sighting_of_ref": "indicator--b0d29e09-2815-4c1a-a60a-228bb4061826", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5746e335-00b6-459d-b68c-ba22971f2cd1", "sighting_of_ref": "indicator--37616bac-c5a5-4a95-abe7-948d35efcf04", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bb08b7-8a3f-4bea-a4b9-001d6dc811b3", "sighting_of_ref": "indicator--37616bac-c5a5-4a95-abe7-948d35efcf04", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0451322-6008-4b6c-9d59-dc601e714ceb", "sighting_of_ref": "indicator--37616bac-c5a5-4a95-abe7-948d35efcf04", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e28a43b-a1e8-4532-84ca-19bbae6e30d7", "sighting_of_ref": "indicator--cae79e9c-45f9-41f4-90c6-f8e7208cb004", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19630e6-e7c7-4324-930e-91db578103ab", "sighting_of_ref": "indicator--a5225fd4-f531-4317-94ef-67f1753ce540", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f4b998-e257-4afa-9078-12fe0dc7661d", "sighting_of_ref": "indicator--1f3e5c41-6cfe-48ef-a067-d5a904693d00", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa50e4d-0fcb-48f9-a775-f078e3165558", "sighting_of_ref": "indicator--0eb8abf6-3a12-476b-ad7e-b7ce703086dd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbaa2b6f-e183-4a1b-ab90-d1bf92abc80f", "sighting_of_ref": "indicator--efb58f15-6ee0-462f-a174-8746b2711e00", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e8bb84-71a9-4bbc-b8e3-febcce6093bd", "sighting_of_ref": "indicator--b710e66b-9ded-4ffe-8939-57c73ccf484d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dea7c34-55e9-4be8-80f3-1da296b4b89d", "sighting_of_ref": "indicator--350ef393-0563-4fb8-bafc-d7adc5fd5fa7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd5e4f2-bea0-4000-89e2-ac4bc8daac83", "sighting_of_ref": "indicator--4391be36-53ce-41ea-a606-709de068ff2e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124327b2-fb6b-4b9b-8390-bb57e2989d6b", "sighting_of_ref": "indicator--44ecc217-116a-41e8-9c90-48c62d5c878f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1274836a-c78d-4a44-b533-ab7288c0e598", "sighting_of_ref": "indicator--d7602f5c-0b0a-4253-b474-cd6759dbe37d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69147d8-3bbf-4e53-b92f-9eef9dee9123", "sighting_of_ref": "indicator--fb3d8c18-f8be-46f9-b11b-bf65c32eb4b3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2809f9-5bf2-42fb-a174-ab1c9c6d6d28", "sighting_of_ref": "indicator--e12fde62-f165-4a0c-b8e4-24c4eaa5a7e9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7c13b5-abfe-4437-8311-3ed2c854fc1b", "sighting_of_ref": "indicator--0505a534-5e0a-4967-920e-3019d5613873", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7f0aa3-9534-4999-928c-243a5a44bd09", "sighting_of_ref": "indicator--798a2f06-6769-422e-a0a4-f6b07b84a954", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c721bba-c94b-4521-a6e8-e7ec50a4a756", "sighting_of_ref": "indicator--c65ee373-6b0a-4b06-98d8-e5357d30abad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9737e0df-f38b-4306-a1be-93b29e42d3bc", "sighting_of_ref": "indicator--53b66e38-265c-45c6-a6e4-8d2c98fa42ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c6a5a5-eee3-45ec-b4c9-ffc964fa925c", "sighting_of_ref": "indicator--0e66a810-3196-4d4c-a0e2-22389e4402c0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795d607f-6252-4761-a29e-bd9951d0ad5c", "sighting_of_ref": "indicator--a1dc708e-9669-4b8a-97e3-a65a13d0db1e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2505c8ac-34e9-4e3f-bdd0-6aabd290c1d3", "sighting_of_ref": "indicator--5a852c7a-0a1a-45c0-a13d-f9c906751d82", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69784c60-3840-4a52-a2dc-898b079f3c68", "sighting_of_ref": "indicator--e9effd74-e3a8-40f8-ae6a-d20b6f1a1a39", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f257cc-dc28-47b7-9a0e-e5d52530cdcd", "sighting_of_ref": "indicator--294b59a1-e111-44a8-894c-e12959175532", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f1396a-e660-4096-bcf2-1747c6924a3a", "sighting_of_ref": "indicator--2a252e68-8059-44bd-a360-05c81d919e15", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ba5de4-f5d9-4ad5-8cca-47ee216a3d99", "sighting_of_ref": "indicator--af85f2da-25dc-425e-b15b-815e76c91873", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e1da4b-2139-4915-b8ff-1c0f4d741699", "sighting_of_ref": "indicator--af85f2da-25dc-425e-b15b-815e76c91873", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff52f71f-2cfc-46df-94d4-06334c7ca20e", "sighting_of_ref": "indicator--1a12785a-2f91-4793-a77a-918408eabacd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5e1700-6fae-4fde-9aca-6f95a509839a", "sighting_of_ref": "indicator--32a777ed-64cd-4cd3-81cc-a324bc6ed2af", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7da8749-6179-4c49-8c1a-634bc7506587", "sighting_of_ref": "indicator--a20a0a84-a982-4a31-b472-81a72641b145", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864efdcc-46a0-47eb-aa42-47a424ecfbd0", "sighting_of_ref": "indicator--73a20c3d-141b-4daa-93a2-e80552fd2c1b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa786cd4-bfc1-40c9-a61c-258be172c093", "sighting_of_ref": "indicator--73a20c3d-141b-4daa-93a2-e80552fd2c1b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530aee18-4cc8-4edb-ab73-0d756b8aa2fa", "sighting_of_ref": "indicator--73a20c3d-141b-4daa-93a2-e80552fd2c1b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7307309e-0f28-4b69-b828-9fe409f1cc47", "sighting_of_ref": "indicator--ab92d363-0fb9-42b3-ac45-d6a371634c4f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bfef28-4ba2-4290-bba8-f1959e7f8e53", "sighting_of_ref": "indicator--ca80066b-b4b9-43c9-8d16-743b31253b26", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1ba2bf-e16f-4553-8b78-32a22e766c0f", "sighting_of_ref": "indicator--ca80066b-b4b9-43c9-8d16-743b31253b26", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f80c3b2-3a58-4b82-b8af-30df55f98114", "sighting_of_ref": "indicator--ca80066b-b4b9-43c9-8d16-743b31253b26", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e043b2-ff6b-430f-ba30-af8d349a1ea2", "sighting_of_ref": "indicator--1b4a1045-1947-4919-87a7-b6a7dd7f9b8e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523d3b1a-9e86-418e-a258-6fcb57d2c610", "sighting_of_ref": "indicator--1b4a1045-1947-4919-87a7-b6a7dd7f9b8e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3034e9-8fb2-4489-aafa-939a5d3fb8d3", "sighting_of_ref": "indicator--9aa4a660-b91c-4401-8516-7ffd70deba7f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0125e6e-670f-44e9-bb45-70c37edf006c", "sighting_of_ref": "indicator--984dd005-415b-4dcd-bed3-4ac752742bb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453f5ed9-c4ad-4a7d-afe0-53c1f98cec80", "sighting_of_ref": "indicator--0fb34368-8b17-45fc-b89d-6a3b7d10ad6c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf5d09b-2a5d-4187-af0a-24eca0b02248", "sighting_of_ref": "indicator--0fb34368-8b17-45fc-b89d-6a3b7d10ad6c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70492942-784e-4674-80ba-77d4dacaf54e", "sighting_of_ref": "indicator--0fb34368-8b17-45fc-b89d-6a3b7d10ad6c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c9cefd-73bb-4b8c-bbeb-e081e3a01ea3", "sighting_of_ref": "indicator--67b0eb2e-3941-4a9e-8927-c8bccd5d2792", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f924ea71-e1a8-40a2-ad35-aa2bbe3d50d2", "sighting_of_ref": "indicator--67b0eb2e-3941-4a9e-8927-c8bccd5d2792", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af57882b-9248-412d-a7b2-76f1d06ede24", "sighting_of_ref": "indicator--98083fe1-8353-444b-88b7-e872197f277f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b0b680-b4fd-4943-9db5-51677cb9737a", "sighting_of_ref": "indicator--98083fe1-8353-444b-88b7-e872197f277f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649246f9-3ce2-44eb-8b94-fc78898b4763", "sighting_of_ref": "indicator--d2f7465c-9b09-423f-bfdb-451c13fee15d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343bcb2e-4f1a-439b-a815-8fc4b68a7f36", "sighting_of_ref": "indicator--f849c0f7-4b86-4e4b-8014-cfc306b53756", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9bd848-9fe6-4775-b8d6-19d87c6ae82d", "sighting_of_ref": "indicator--1573491f-2c29-4c43-811c-8df0020fd7c8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e08098-8d99-4808-82bd-53dd0a48b342", "sighting_of_ref": "indicator--9dd92ccb-c708-4248-81ce-c5fc65fda107", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a770972-eb6c-48e2-9f06-d40771414662", "sighting_of_ref": "indicator--40789854-9113-44b5-aeb8-61f470da55d5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8427fa-2b37-4724-a912-adfa3471f406", "sighting_of_ref": "indicator--40789854-9113-44b5-aeb8-61f470da55d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc67307-1046-4a48-9be5-d16c9c4ffcc3", "sighting_of_ref": "indicator--b5b1705b-afbd-4e9a-801b-1c86ab526968", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6bbdc7-cb67-4694-8eb6-d4db744663e7", "sighting_of_ref": "indicator--30de8f36-cf46-401e-ad6a-7323ca722ea2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4719ff7b-1c15-49d5-a9ae-a4f0562cf756", "sighting_of_ref": "indicator--30de8f36-cf46-401e-ad6a-7323ca722ea2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f04365-23ba-45ea-aa58-fcf13347ff57", "sighting_of_ref": "indicator--30de8f36-cf46-401e-ad6a-7323ca722ea2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d953a06d-d82c-4229-af1d-4027f913c688", "sighting_of_ref": "indicator--e8806a55-eff2-488a-be43-8b44fac11f53", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b795584-cc67-44c2-b3e4-91febec5d106", "sighting_of_ref": "indicator--e8806a55-eff2-488a-be43-8b44fac11f53", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9b48e5-caee-48c8-a691-6e4382736419", "sighting_of_ref": "indicator--e8806a55-eff2-488a-be43-8b44fac11f53", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b33eace-dd56-48eb-b111-0a66d9743f9b", "sighting_of_ref": "indicator--33f42f27-b762-49cb-9c0f-9931072b4f3e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f202e238-d4d9-4315-9d56-938ab74bf14c", "sighting_of_ref": "indicator--33f42f27-b762-49cb-9c0f-9931072b4f3e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb52301-e2ef-44f2-8a75-51aa0594b5a6", "sighting_of_ref": "indicator--33f42f27-b762-49cb-9c0f-9931072b4f3e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f166c5d-2154-4399-ad07-c0a07400a0b7", "sighting_of_ref": "indicator--e11657d5-c0e0-4726-b797-d83222c6cd5c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b1e883-0a08-47b7-af86-19bab897b7ab", "sighting_of_ref": "indicator--5f5d43f1-40a7-4c80-83c3-fa4c461c78d4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990c8549-e498-4333-9d69-8be1d7c01b33", "sighting_of_ref": "indicator--5359f355-afc0-4e78-996b-b4df28cfcbbd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297bbc56-3851-4d15-a989-7e6dd390c059", "sighting_of_ref": "indicator--5359f355-afc0-4e78-996b-b4df28cfcbbd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12b6185-46f7-45df-9fb2-e41585b1d06a", "sighting_of_ref": "indicator--0ed971ef-4bbe-4afb-811b-f0bda3d45eb8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c0a6ed-0632-4cfb-b3ed-a1b1e6d74a43", "sighting_of_ref": "indicator--481a8ee5-f13f-4751-bdef-f9ab9a23460e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174b7e49-70c7-4343-a8a4-49d6e89ede82", "sighting_of_ref": "indicator--1844b4e6-7ccc-443a-9e02-bc3858a5cb45", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8782ac-1e08-44f5-9e3c-a07965e5a2d1", "sighting_of_ref": "indicator--d3c6a0f2-85c8-4382-bbdb-d82ea81cfd1f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a94c62-284d-4908-a9d0-37659330ba81", "sighting_of_ref": "indicator--42062ebe-853e-40c1-bf39-3e31a4d7d531", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7483fe4a-d99f-4afa-9e77-053fa60fdce8", "sighting_of_ref": "indicator--fbb8d6ec-2abb-4e25-ab4f-ffcc5ed9ac6c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f26c488-cf45-4529-8e17-776fc59a8cb4", "sighting_of_ref": "indicator--fbb8d6ec-2abb-4e25-ab4f-ffcc5ed9ac6c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06e3fb4-4844-476f-b3b8-50d843ffd72c", "sighting_of_ref": "indicator--aa9a1757-c1ec-4e09-930c-e450714855cf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df66fcbf-8d20-465e-a5ca-33756090efbc", "sighting_of_ref": "indicator--aa9a1757-c1ec-4e09-930c-e450714855cf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79bf7ed-29de-445d-a141-fccd26f5328d", "sighting_of_ref": "indicator--15e81594-601f-4bee-a0ff-532ec5b7f660", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d8d6bc-6366-401d-8b5c-bcbb11236c49", "sighting_of_ref": "indicator--0d1f358b-fb25-4d9c-aeed-9b3ac395e578", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72059b85-2f64-4ed0-a35e-3f4ea676228c", "sighting_of_ref": "indicator--0d1f358b-fb25-4d9c-aeed-9b3ac395e578", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b82a1e1-8f48-4b23-b1a1-5a87a1eb6558", "sighting_of_ref": "indicator--1ec33b40-8c57-4b96-a005-b07da567e1ca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000268b3-6846-49b2-bcf6-9abc289a5165", "sighting_of_ref": "indicator--1ec33b40-8c57-4b96-a005-b07da567e1ca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01f9dd2-1116-4db5-8407-7cb524c33376", "sighting_of_ref": "indicator--1ec33b40-8c57-4b96-a005-b07da567e1ca", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9480367-7e08-4a8a-9ad2-b1f9b8906342", "sighting_of_ref": "indicator--7bc4b440-96e5-4482-8f0f-1a515e01f37c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20657214-ff06-4e28-a22e-e3faaac584f3", "sighting_of_ref": "indicator--160bb4ce-7d29-4e60-b2a7-06dee90b8831", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676a01be-7d78-4db9-8c69-a760a22ef51c", "sighting_of_ref": "indicator--b7c8b9b0-872f-4001-96ad-70451742a984", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd92e2e-d85e-4602-be06-5104b84d8874", "sighting_of_ref": "indicator--b7c8b9b0-872f-4001-96ad-70451742a984", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac3cf15-c4c8-4e0d-a8ac-da9336528e1f", "sighting_of_ref": "indicator--b7c8b9b0-872f-4001-96ad-70451742a984", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5806a3cf-7f27-447a-8c45-defe0381dcca", "sighting_of_ref": "indicator--ec06ea64-2623-42e2-8cc6-281ff86081ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba47a24-d400-4522-ba4b-6440b920ee9b", "sighting_of_ref": "indicator--8aa770ec-6622-409f-b6ca-79af15759b39", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887ffd92-32d9-48f3-9c3b-afe67578df5c", "sighting_of_ref": "indicator--8aa770ec-6622-409f-b6ca-79af15759b39", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e1f89d-a47b-4375-bdde-feba1792c2c9", "sighting_of_ref": "indicator--ba37eef1-7809-4551-abad-391391f8b76c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbaee257-bcd8-4e4d-a83f-636a470a4f32", "sighting_of_ref": "indicator--ba37eef1-7809-4551-abad-391391f8b76c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ace91b2-8ba1-4c0c-b248-5412a44d3105", "sighting_of_ref": "indicator--7c561064-5f56-40f1-b55b-1ce4dd48f464", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ee1a81-e6c8-448a-8e8b-fe9765ca0a8f", "sighting_of_ref": "indicator--7c561064-5f56-40f1-b55b-1ce4dd48f464", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1daed3-3628-4cdb-b7da-440ec29feea9", "sighting_of_ref": "indicator--65e5877a-0f82-4bb1-aee1-859b968d281e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef2137a-c2ca-4748-9e34-3f5d440abac7", "sighting_of_ref": "indicator--d2e66466-0a67-454c-bc73-533a5495a878", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8326e5d1-0305-4d71-87fa-057cb1f70610", "sighting_of_ref": "indicator--d2e66466-0a67-454c-bc73-533a5495a878", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6621ad6-e492-4bc4-b3a7-d0210cba6d1e", "sighting_of_ref": "indicator--4ac7cfb9-42fe-46aa-b5eb-f118907ebec3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087e08b7-d8b4-462a-aa08-26549fb1878a", "sighting_of_ref": "indicator--4ac7cfb9-42fe-46aa-b5eb-f118907ebec3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c600ad0-602c-4682-8563-26b73d5eaba6", "sighting_of_ref": "indicator--4ac7cfb9-42fe-46aa-b5eb-f118907ebec3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa886a77-7c57-4315-91c6-d6e4eadc6206", "sighting_of_ref": "indicator--fd5a4dcb-e143-4578-9425-38c30395d677", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf5af0f-2948-4942-9320-fba7ab3c366b", "sighting_of_ref": "indicator--fd5a4dcb-e143-4578-9425-38c30395d677", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613ab75d-a884-4207-8a5a-a4d46d493c3f", "sighting_of_ref": "indicator--b33618fd-2b34-40ac-9143-132fce6776ea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a4ab82-9750-42ec-b9bc-b5eade1bb612", "sighting_of_ref": "indicator--a9d59150-efa2-49db-b13a-0628907c49f8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cf7153-7068-408c-bfca-c9b67455c2f4", "sighting_of_ref": "indicator--a9d59150-efa2-49db-b13a-0628907c49f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7c0e8c-a67b-4a6a-a854-cf705ffdfc21", "sighting_of_ref": "indicator--a9d59150-efa2-49db-b13a-0628907c49f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6b7a82-480f-419f-9360-c9bf9cd66689", "sighting_of_ref": "indicator--11621317-2951-47b1-88fd-91e7ae9269a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97620e4b-a320-4101-8ad4-695d3c67abc6", "sighting_of_ref": "indicator--11621317-2951-47b1-88fd-91e7ae9269a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134bab5c-dfac-4d72-b430-fcc0784ed25e", "sighting_of_ref": "indicator--11621317-2951-47b1-88fd-91e7ae9269a7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381308d1-a4c5-4a57-bbb7-cb7cbd09f44b", "sighting_of_ref": "indicator--83c8e0a7-de34-47ae-8852-d6b15779630b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f862be8-bd1f-422e-a8b4-69ca413dcafe", "sighting_of_ref": "indicator--83c8e0a7-de34-47ae-8852-d6b15779630b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7567e9-54dc-41f4-accf-ae22c9fbcfcd", "sighting_of_ref": "indicator--83c8e0a7-de34-47ae-8852-d6b15779630b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1baf910d-7d1e-4414-a0f1-e4753a4756b6", "sighting_of_ref": "indicator--594c3f6e-ab4c-4299-86a8-b8f6a0506242", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f00c259-969a-4630-bf92-1e70d7d27ab7", "sighting_of_ref": "indicator--e6de93c8-d706-4ea6-b1d5-c52615974d0a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966a328d-118c-4547-b3cb-a16508158fd4", "sighting_of_ref": "indicator--e6de93c8-d706-4ea6-b1d5-c52615974d0a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a537bf-175e-4d22-a4c1-1f9351c6d63b", "sighting_of_ref": "indicator--035099de-5370-40b1-98a6-a5f6c6347654", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbceaf7-6e25-408e-8176-d24c962cd11f", "sighting_of_ref": "indicator--6687fdf4-2884-448c-875d-af8c6cc0cc88", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250bf370-3fa8-46d1-9d5f-4493367dd032", "sighting_of_ref": "indicator--6687fdf4-2884-448c-875d-af8c6cc0cc88", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba23433-7e01-45c8-8b5b-8daae0c4ffd7", "sighting_of_ref": "indicator--6de61547-1030-4c5f-baae-da0d8a17597b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9aaee2-0f05-47b7-9138-34b17aed809e", "sighting_of_ref": "indicator--75003949-b8f9-4998-957e-41e194b502a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f1b04f-d104-4ba6-b9c1-3554daa0feaa", "sighting_of_ref": "indicator--84a66f78-133d-4a09-961d-ed23a9792b45", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8f9522-6bc6-42c3-8cf3-28a03f9b13dc", "sighting_of_ref": "indicator--84a66f78-133d-4a09-961d-ed23a9792b45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884cdac8-6a49-434d-bb7e-a477bb85f193", "sighting_of_ref": "indicator--84a66f78-133d-4a09-961d-ed23a9792b45", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161cedb2-bc86-45d0-9fff-e85ba6a0139e", "sighting_of_ref": "indicator--58878d7e-8f9c-4205-ada4-30fb30dcf875", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6275b129-010d-49f5-9a78-95bce1396a70", "sighting_of_ref": "indicator--58878d7e-8f9c-4205-ada4-30fb30dcf875", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08240e7-9578-41f9-8ea2-3a6af50bd704", "sighting_of_ref": "indicator--58878d7e-8f9c-4205-ada4-30fb30dcf875", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b5022f-61c8-4acf-bc91-0c32b0041795", "sighting_of_ref": "indicator--941f49b4-f56c-44d7-b5cc-138374bccffe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1eee6fc-1e0a-4681-b1ce-43614888bc3f", "sighting_of_ref": "indicator--941f49b4-f56c-44d7-b5cc-138374bccffe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f81d2f3-61b4-48c0-b128-3b4f44524447", "sighting_of_ref": "indicator--941f49b4-f56c-44d7-b5cc-138374bccffe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1496f039-d1be-4423-9826-5dd0714093f2", "sighting_of_ref": "indicator--1f620edb-0c55-4e67-a270-72135db82ef4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ec691b-ae46-4f6c-a268-4c2d5f618656", "sighting_of_ref": "indicator--356373be-7ab6-4a93-bbe1-43c97ff50152", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8965333b-1019-4165-b6f9-b41c77a42171", "sighting_of_ref": "indicator--bc9854a8-07cb-4486-abd5-e976761054da", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac5547a-762d-4d8c-aa8e-a86d595286cf", "sighting_of_ref": "indicator--bc9854a8-07cb-4486-abd5-e976761054da", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9936159-d3a7-4263-bd49-2a80321fc200", "sighting_of_ref": "indicator--bc9854a8-07cb-4486-abd5-e976761054da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1bc1db-fa4f-4c03-8695-bc33ff56b801", "sighting_of_ref": "indicator--4fa60fd2-291b-49fc-bd54-3a8d75aab4da", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604279d2-1490-44f5-8967-38b4bf5d04cd", "sighting_of_ref": "indicator--4fa60fd2-291b-49fc-bd54-3a8d75aab4da", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aac7874-5de1-4a68-8b38-5b93f55192a5", "sighting_of_ref": "indicator--4fa60fd2-291b-49fc-bd54-3a8d75aab4da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0fee3b-4c97-4c4e-9f73-055761e48dff", "sighting_of_ref": "indicator--367e7014-014b-435b-b04d-712053637245", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7233760e-cd04-4cac-a03e-e1c560c79be9", "sighting_of_ref": "indicator--4091ec3f-bddb-49b9-ae88-23857b8d0f20", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fe9e71-f86b-49ee-afb9-449d56e12679", "sighting_of_ref": "indicator--4091ec3f-bddb-49b9-ae88-23857b8d0f20", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f2c969-d3c1-4b2a-a8cf-31494905abca", "sighting_of_ref": "indicator--b3afe9f3-f38f-4c40-927a-891a4574fd52", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8600c1b8-a9b7-4d4b-ae69-0b8e9103f07d", "sighting_of_ref": "indicator--da826f9e-671f-40ed-a5b9-60022a51651d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3775ff-c63d-49d0-aaf2-b978bfe0e8fc", "sighting_of_ref": "indicator--9c18a842-ff4f-4502-aaa7-21e98761449f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbca848f-95eb-4339-811c-554ca928fda4", "sighting_of_ref": "indicator--2ad29118-98b2-401e-817b-328cf696596b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a170a3fc-ca25-4d1a-ae87-dddde2da32f6", "sighting_of_ref": "indicator--220dffc5-e9a0-495a-8787-77dece814957", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6100244f-10fc-4c93-9b8b-3ead3c3ef368", "sighting_of_ref": "indicator--8538fe09-b524-4e6a-94d3-c00b174adf86", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15165b2c-5c9b-49c1-8e1f-c397242a9fe4", "sighting_of_ref": "indicator--d15428c5-3993-42ce-aef4-3aee888bc076", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd82b164-1767-4fe3-ae14-8fe623545a6c", "sighting_of_ref": "indicator--b8577e71-7f1d-4e66-80db-23e44c5af807", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5dfaf51-897f-4201-b2be-94b52b38eea5", "sighting_of_ref": "indicator--b8577e71-7f1d-4e66-80db-23e44c5af807", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbe0aa9-fb00-48d3-99a3-e24557549df6", "sighting_of_ref": "indicator--b8577e71-7f1d-4e66-80db-23e44c5af807", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d388daf-8ac3-4899-abbc-4f126881e5d5", "sighting_of_ref": "indicator--a3601828-0e0f-4a38-8c88-2e2038366810", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8f577f-9dc3-4c81-9b88-7cb42eeece52", "sighting_of_ref": "indicator--a3601828-0e0f-4a38-8c88-2e2038366810", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f896e08-f754-4ce9-aba3-c2c795832cd7", "sighting_of_ref": "indicator--f81bf9e7-28f1-4eec-b484-86a9f042f01c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4e2f65-5e8e-4912-8b0e-998155380677", "sighting_of_ref": "indicator--f81bf9e7-28f1-4eec-b484-86a9f042f01c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef57e22-9f5c-4e8a-b81b-fc4b31573f08", "sighting_of_ref": "indicator--8155bbb5-4de5-42ea-a139-700e96b78b20", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aed4db1-c8e8-4653-928d-b0264b5b2ddf", "sighting_of_ref": "indicator--8155bbb5-4de5-42ea-a139-700e96b78b20", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d438fd-922a-4d54-84ed-46464fbadbae", "sighting_of_ref": "indicator--a8bd071a-9281-4528-82dc-976b940af4c7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba19716-7629-4f43-9de6-2c4dcf93454f", "sighting_of_ref": "indicator--6f46f7c9-67ba-4e3e-a6ca-73759e6139ea", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b284815-e212-44af-8e7b-9b6cae21ab23", "sighting_of_ref": "indicator--3c568f4f-9622-4d19-a59a-b8a811df5529", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bf6540-7572-4777-a193-8097c9807e12", "sighting_of_ref": "indicator--ade6e84d-2c10-4619-a314-3ad78aa04d73", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2a3cfd-67b4-414e-89f8-1e8ef75d7aea", "sighting_of_ref": "indicator--a1f50092-ad38-47f3-bdbf-748e7cbd54ed", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006644e1-87b7-4074-a519-11d3060a6686", "sighting_of_ref": "indicator--4059d4d1-2115-4088-968e-492ad860c7b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992f340d-e7eb-449a-8f11-524aae6563f9", "sighting_of_ref": "indicator--f64ea689-44aa-4e46-82a8-2bb532dfc739", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec734aa7-3cd3-4dd8-8a5d-9fc1c36416f1", "sighting_of_ref": "indicator--cf1dc417-c196-478d-8a6e-0c9a0bc17dbd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78330702-cb84-424e-b9e2-ba7f8be25851", "sighting_of_ref": "indicator--da370e9f-1b0b-403c-8458-226152ad3e9a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85642fbd-d545-42ef-ad1c-491c21a9c982", "sighting_of_ref": "indicator--68d437ad-8179-41b3-a0f2-0b0071ca4686", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e153f051-0a5a-48fe-8bf6-90a2f8fe2445", "sighting_of_ref": "indicator--18c8697f-3ac6-4fef-a451-b33f83b8026c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1527712-7dc3-4d52-a4fa-7ca17d57a65b", "sighting_of_ref": "indicator--eabb68bf-4593-4202-a651-1bc76bc7ad67", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb71581a-b987-453a-8fd9-b93fb7ea1c8b", "sighting_of_ref": "indicator--fc5daf96-9157-499c-9d60-9a31cadf2ae9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d5cc31-3404-43fb-a6aa-7fbb5fa1befd", "sighting_of_ref": "indicator--1f7dcd2b-4267-4ac4-b8dd-d6d835f2ec2f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafbe3d1-b500-4ff3-a4e3-53eb1d5d29f2", "sighting_of_ref": "indicator--1f7dcd2b-4267-4ac4-b8dd-d6d835f2ec2f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2617217a-6155-4567-8945-6e0b26ee4c6c", "sighting_of_ref": "indicator--1f7dcd2b-4267-4ac4-b8dd-d6d835f2ec2f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab56941-cdaf-4d58-94cb-6ddfeeab15b1", "sighting_of_ref": "indicator--e1f02614-5443-4223-935c-cd0458d115e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5393ef-875d-4ac1-8947-4852dcb4ae70", "sighting_of_ref": "indicator--e1f02614-5443-4223-935c-cd0458d115e2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf989ea0-0962-4b11-86a5-f504af3d4518", "sighting_of_ref": "indicator--e789bed4-409f-4a54-9240-2b26b42c0307", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac59a62-dc6d-4d9a-8083-21681497c02d", "sighting_of_ref": "indicator--e789bed4-409f-4a54-9240-2b26b42c0307", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e616b8b0-a41b-4e91-b0f0-5ce927ebc8ff", "sighting_of_ref": "indicator--1d3aa047-be0e-4bf5-8099-3d82fb631457", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2720c8b3-efb5-4e7b-bd04-8980c6b25f12", "sighting_of_ref": "indicator--1d3aa047-be0e-4bf5-8099-3d82fb631457", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c812050e-ba36-4a78-abd8-065c4b6b26e6", "sighting_of_ref": "indicator--1d3aa047-be0e-4bf5-8099-3d82fb631457", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03728771-f829-4cd5-850e-c7f3dec206de", "sighting_of_ref": "indicator--ae0ba7b9-c703-4843-a379-53a02d3d0023", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0286b4d-a5ae-4e6f-a0c4-d50896a2573e", "sighting_of_ref": "indicator--ae0ba7b9-c703-4843-a379-53a02d3d0023", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f551559-7bf1-47a1-aced-1dae2ae0d1ea", "sighting_of_ref": "indicator--ae0ba7b9-c703-4843-a379-53a02d3d0023", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620c9c6c-1e40-4a09-9ba9-87e245f3a94b", "sighting_of_ref": "indicator--80b21d50-0f08-4f82-a1f4-5082b3e06c13", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb686c94-6c92-4fea-b992-c206bc70459d", "sighting_of_ref": "indicator--80b21d50-0f08-4f82-a1f4-5082b3e06c13", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d918e9-1069-4695-a371-d67638dd8780", "sighting_of_ref": "indicator--80b21d50-0f08-4f82-a1f4-5082b3e06c13", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2f6500-4e20-4e8b-a8f2-337bf23024bb", "sighting_of_ref": "indicator--a50fb171-4fea-44c0-b2d2-9b660d9e7dbe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8668fec-81ef-4e29-8406-5922a048b26e", "sighting_of_ref": "indicator--a50fb171-4fea-44c0-b2d2-9b660d9e7dbe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a5152e-25f5-45a6-a36f-74316c6bdeb6", "sighting_of_ref": "indicator--a50fb171-4fea-44c0-b2d2-9b660d9e7dbe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f015305d-1328-4650-bc6d-5f6c2ce734fd", "sighting_of_ref": "indicator--e0cb9c82-8ee0-4d40-8191-62808a849f41", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f27449-863b-489a-bda8-e366079ac37a", "sighting_of_ref": "indicator--33c32003-dbe3-4ddc-9cc8-e80d9bff4ec7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efbae20-5b67-44d6-85d0-f4cd654f030d", "sighting_of_ref": "indicator--33c32003-dbe3-4ddc-9cc8-e80d9bff4ec7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da24045-d591-4b20-b0f9-4e71764f370a", "sighting_of_ref": "indicator--d99c20dd-81ec-4c43-8a44-5f6da1540d27", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db0e656-020b-4306-9edf-50e31b4f9a0f", "sighting_of_ref": "indicator--92388480-0a26-4798-ba05-0d448316c965", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2fbd5e-4a26-4a9a-ab38-4cb11057a9ad", "sighting_of_ref": "indicator--92388480-0a26-4798-ba05-0d448316c965", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0c4bb9-b367-4f0a-b682-3b9e75dd6b73", "sighting_of_ref": "indicator--754d9a09-aa08-4425-bc0d-53ba268fe13f", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c66d89-1e2c-445f-87c3-ffc5cb2b5fd6", "sighting_of_ref": "indicator--98373cab-c3c8-4e21-9380-33bb9fc29618", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e00c5e-6f3f-4a85-a85f-f0bb55abe7cd", "sighting_of_ref": "indicator--98373cab-c3c8-4e21-9380-33bb9fc29618", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2f93a2-11e7-4abc-8d39-b3be9b23b360", "sighting_of_ref": "indicator--f20abf84-6b01-4b78-bfe2-bb91afa5dc5c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1b5187-4737-42f4-9b1e-3f88c16139f4", "sighting_of_ref": "indicator--cf5b0690-4ff6-4731-86be-c48fc8814e10", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a43c7a1-9fae-4a3a-a4ea-4174666d6bf4", "sighting_of_ref": "indicator--f6632c1f-68fe-4dba-81b9-b9fdbc81ef20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31c501f-49f6-4a8a-9d14-e5728c122c42", "sighting_of_ref": "indicator--da394237-7326-4692-b80b-3e6cced90a6b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504fc052-735c-45ed-b0ff-22f13bacce8f", "sighting_of_ref": "indicator--653ecdc5-bf7f-44c6-8f52-94912959f207", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a202f6d6-5f1b-448b-a389-70bfd166d309", "sighting_of_ref": "indicator--5253b92e-fa9b-4345-ba8d-ba1d1152e24c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f98260-f7c4-4b93-9a6e-b7cb6d67d6a4", "sighting_of_ref": "indicator--7afc8a50-8cdb-499e-8a8a-5da66d4a3412", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00bea95-778f-4b75-8d7d-68d0145f6197", "sighting_of_ref": "indicator--03720346-c77c-4b38-8280-590d537b76d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57da2d4e-9b48-4f45-8cc9-02bedbfb2669", "sighting_of_ref": "indicator--efab4198-c8d3-4716-8b81-6b04ce527008", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20eb3b8e-46ee-41aa-8d3b-984dbd1e3751", "sighting_of_ref": "indicator--7d758fac-2e04-4f85-aac9-3f0ca6196945", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d91ab3-817a-4885-89e8-1283410241b8", "sighting_of_ref": "indicator--62437340-f991-407a-a596-34700cf54a35", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e6982f-100e-4358-b9c2-128185ea8d6c", "sighting_of_ref": "indicator--3e6d9076-10fa-4839-81cc-253d3e22528f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885c4ff5-ac8b-4463-9c99-3bb4d6e920f5", "sighting_of_ref": "indicator--2479e5db-e795-4cd8-bc86-960fcbcb9c1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb7de3f-2da7-49c3-a1c9-858143fb6b8e", "sighting_of_ref": "indicator--b0a16350-bf3a-4b8e-984b-5b6e149442ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddf23d1-a93a-4719-8596-adaddbbc90e5", "sighting_of_ref": "indicator--d5360552-bf9b-4cd9-8e81-ce7065859327", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155419dc-e9af-49d2-80c9-74a547948dad", "sighting_of_ref": "indicator--0e6dde44-9ab0-417b-be3c-b9e08a12cfb6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b027c87-4018-4bdd-b8b6-19d6f3f5510d", "sighting_of_ref": "indicator--0be66ff5-5522-4008-b31b-1e4fa3e65d3d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85eeaa0b-ae5b-4930-8df6-2498cb15a7ec", "sighting_of_ref": "indicator--e4ec7607-576e-4799-9844-df4253586e73", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab20d5f-8bc1-4b09-b2b0-085dfd783019", "sighting_of_ref": "indicator--5af32c57-38af-4fb8-b66a-b44595a00aaa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f348c4e1-897b-4454-988a-8eec486a2936", "sighting_of_ref": "indicator--8d71b234-77d8-487f-8b68-1bf6be3e3295", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3194694a-4ae4-4e26-a9f7-e4aad95beb98", "sighting_of_ref": "indicator--915493d1-33f9-4114-9549-ad4e3c38617e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdc0c13-792c-44e5-85de-e67703c69bcd", "sighting_of_ref": "indicator--2e0b8702-b57d-4425-aee9-dbc31c550f07", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5537a0-4b90-4744-a7e2-85a1a30e70de", "sighting_of_ref": "indicator--01bb18c6-d4c4-4528-8ce3-f46ef08182eb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213428ef-47c8-4508-b9bd-9519599d3fc5", "sighting_of_ref": "indicator--a9445dae-0469-40a1-a7fd-666a691ffe83", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f0b659-f0b6-4b28-b97e-aa7de3e01942", "sighting_of_ref": "indicator--9a4e66e6-2542-47af-a437-d411c7c76b73", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf3fe57-2acf-4650-8c53-44e933301579", "sighting_of_ref": "indicator--5e41503f-fcf1-4c7d-920c-1cea9e5f5475", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db002d4a-6955-4486-a345-516bd4b273ab", "sighting_of_ref": "indicator--36b6a6d1-977d-4393-88c6-0b2c71734bfe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af0350e-6528-470e-90f4-06ce3d530f5b", "sighting_of_ref": "indicator--f80866ee-9b4e-4310-93fb-a8f0e22253ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738d2b62-608c-458a-9d62-3e4ba2024e47", "sighting_of_ref": "indicator--a3ea6088-6579-44a3-a6e5-09ad69aeb887", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3179ea6b-4140-4948-92b4-1741ab099d6f", "sighting_of_ref": "indicator--85f887fc-94a6-4ee8-b9ab-361929869235", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888d3f4d-11d0-4232-a567-3e91035b1094", "sighting_of_ref": "indicator--f8d70c0e-940c-412f-a404-2d9846eba61b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e866bf84-d1a2-4263-a952-ba3e41ff3c2f", "sighting_of_ref": "indicator--5840b016-1cf1-4a23-8bbe-fabd51253f1a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bab2ceb-03d7-4628-b6ce-ba8e1ee1a6a3", "sighting_of_ref": "indicator--c3bcb9f1-c31f-4c1b-852b-c6c7a1f57055", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595116a9-31bf-4d49-b31f-f0d2d45b79e8", "sighting_of_ref": "indicator--a95990b4-1850-4233-a237-a22438854dfb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2738cc4-8680-42af-8789-2e8b3232b69e", "sighting_of_ref": "indicator--9f5f94c4-5757-46b9-8db7-8f0ec60205ea", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7455c437-b9d8-4d10-b77f-c973686784df", "sighting_of_ref": "indicator--56148601-1eb0-41d6-b1f7-e10adea0e947", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a8150d-a5d2-4907-bb16-95acac24e6b5", "sighting_of_ref": "indicator--673c4a76-18e4-47ec-8c6b-407e51485e87", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7528adf0-e754-47e1-8fa8-e6139f1d5713", "sighting_of_ref": "indicator--1fac5c0c-3b43-4807-9449-39c7ef6adb4d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3059976-bdcd-44f6-be17-7712d8e740d5", "sighting_of_ref": "indicator--712bae5b-fa09-41ac-b524-64f9f6454229", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42c8fad-a14d-4ec0-9854-6d644e2c14ec", "sighting_of_ref": "indicator--d5020819-786b-4af0-abae-71f3972dbcf8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946bdce5-9144-4f1d-a2b3-ab556435c068", "sighting_of_ref": "indicator--e393b980-b7c9-4e3a-ae66-b5c66195e30d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb7656e-1a3d-4390-b25c-91388a7ad533", "sighting_of_ref": "indicator--9eb3eb42-8905-4817-a843-3b93086359fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e522dce5-cbb2-4fc1-8bc1-738a57774dac", "sighting_of_ref": "indicator--95f1aa0f-8bef-49c9-a23f-ddc2cbc2bd49", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf8e25e-8464-44fe-bfcd-a30beff0cdb7", "sighting_of_ref": "indicator--7941ef90-f311-4d01-b260-3e666e78fbc2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512848e3-6f0d-4487-97f2-06c6ffe7d5aa", "sighting_of_ref": "indicator--7941ef90-f311-4d01-b260-3e666e78fbc2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf831e5e-1b0c-45c3-9a3b-aea7460e9271", "sighting_of_ref": "indicator--b655e13b-cae1-4b14-8c0a-b8268e4b2a06", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0131e0a-9fc0-422a-a1e8-891d39382dbc", "sighting_of_ref": "indicator--9ab34061-256d-4b71-af98-a27d776a7cee", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7c7827-8a64-481b-90d2-7297df41427e", "sighting_of_ref": "indicator--fc0d7771-e6c5-45e2-abc5-0e10b556b1a2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577dbd1e-3e75-4974-b533-3ab706d50b22", "sighting_of_ref": "indicator--b2d13c01-6b73-427b-b9dd-6029d6309171", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f35e93-c297-4ce9-9011-069ee67390a8", "sighting_of_ref": "indicator--4ebf2849-b896-413d-8412-41bdea734ef8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a82a507-4c60-40df-8341-9d2ded7d4940", "sighting_of_ref": "indicator--976bcd95-93a3-4cd7-b05f-27c26949319a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5068da0-8050-4419-8b3e-548760170fbe", "sighting_of_ref": "indicator--976bcd95-93a3-4cd7-b05f-27c26949319a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117d0a7a-3b84-43ce-a9f8-3534b68ec15b", "sighting_of_ref": "indicator--18cb454b-1b54-4f0e-8593-798a3b1d5a5c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb624ff-9c71-460c-a115-39d4bc00c029", "sighting_of_ref": "indicator--18cb454b-1b54-4f0e-8593-798a3b1d5a5c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93060559-975c-44c3-97ea-52dcd2062fca", "sighting_of_ref": "indicator--de5ac317-93d9-45a7-a849-8dc43e9daba4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2252bc82-728d-4b36-9436-83dd991d9e3a", "sighting_of_ref": "indicator--41877250-d4b0-4438-ba76-8ecb8a00e106", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dde4972-1a5b-486a-a14a-bf0335c77b31", "sighting_of_ref": "indicator--857795b2-70da-4b27-ad5b-0f88c98bd922", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4775c9-fc0d-4e1a-ae60-f8dd0ce35ba1", "sighting_of_ref": "indicator--857795b2-70da-4b27-ad5b-0f88c98bd922", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad33f19-ce6a-4515-8ade-ee437dea05f5", "sighting_of_ref": "indicator--857795b2-70da-4b27-ad5b-0f88c98bd922", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b493b891-554d-4ef7-9446-01fe93e88c41", "sighting_of_ref": "indicator--6a890dfe-f561-4e27-95e5-272a007d71ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0502b1bd-1e57-42a8-8381-8de0a53c5623", "sighting_of_ref": "indicator--caa320c0-1e13-4762-bf02-76f26e12978e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6c891a-59a8-4ccf-9018-349bd57ab68f", "sighting_of_ref": "indicator--e9362f72-bc1a-458d-b786-35a37c14ac74", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc96b48-4c2e-4126-968b-7c4316662f14", "sighting_of_ref": "indicator--f9ed4bc2-5745-44c8-84a3-e3c84dc38759", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebdcb57-1a4c-4fa2-bf06-e3df0762070e", "sighting_of_ref": "indicator--ff5e86c3-2c6a-4adf-9afa-77a28f2eb6fd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef541d8-c1e2-48a5-bdad-bf4287903117", "sighting_of_ref": "indicator--8b8289e8-6fb8-4586-afe0-b09f5d1cd810", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc23fb80-9182-44fa-a0f2-c5dfdfce0248", "sighting_of_ref": "indicator--db6cefd8-53b1-4ee0-8778-25f0a6c22d77", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d961e4-be18-4806-a437-23f8fe84033e", "sighting_of_ref": "indicator--d9a9ccdd-aea4-4028-be7b-55bc9d434178", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af646feb-113d-4113-ba6e-fc9fd781aee5", "sighting_of_ref": "indicator--370d73b3-5893-4315-94a7-88222909befb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa64215d-7c10-49ed-afe1-60497a322f16", "sighting_of_ref": "indicator--c36300ae-c750-4941-a26f-a8ead4b11151", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561c8d6d-c87e-428a-8241-f78f8cd3ee7f", "sighting_of_ref": "indicator--d496ced1-280b-4f73-9a40-83a1ff0319a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea674eff-321f-4b17-8a85-6f03a3ae55fd", "sighting_of_ref": "indicator--495777e7-4cfc-4165-b67d-a5a418f76a8a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720b3378-d6d7-4132-9b79-3d4098a99ce3", "sighting_of_ref": "indicator--495777e7-4cfc-4165-b67d-a5a418f76a8a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efff15f4-3583-4134-9410-20dd1ebdc7ac", "sighting_of_ref": "indicator--da583a85-7546-49a7-95ec-3b0aec02ef08", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de9b74f-0e9c-46c5-b1de-647afe9ec581", "sighting_of_ref": "indicator--24fa16c0-a017-4742-acc5-d20b2ade6771", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef6e1cb-4a09-4046-ab4e-9ca041cec4cc", "sighting_of_ref": "indicator--2326cf34-c437-4a36-b990-84d836a27931", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e921c620-80af-4354-be58-cc0c82ce91ac", "sighting_of_ref": "indicator--364734b4-fafb-4a77-ba5e-3c9f05ae61a1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0044432b-bfb3-4803-a193-dea6658cc757", "sighting_of_ref": "indicator--84c56d08-8b58-44b3-9ee8-6fcd81fb0d3a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdbed13-f471-4bec-af61-d9dccd2ade1d", "sighting_of_ref": "indicator--4532de85-7569-4230-abe7-5c8950f754c8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d4870d-b2b6-4c20-99d9-830d84d1cce8", "sighting_of_ref": "indicator--8afb13cd-df9e-4717-8dcb-8154d009e5f5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0651e0-8e1c-4edb-9a5f-68dd91ec7d24", "sighting_of_ref": "indicator--e1658d0b-f511-4327-b984-ad3cd372d0b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cb5c9c-2f9b-4757-b0f4-9622d95a3fc7", "sighting_of_ref": "indicator--ebae3783-ebca-48ba-a1bc-4a19413535f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8664132-e8a5-4a45-9792-e16a5f8fc962", "sighting_of_ref": "indicator--f4b32fc5-423b-4af8-ac3e-7b2e232de296", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0899e19-32cc-42c8-81cd-d4a33222e3e9", "sighting_of_ref": "indicator--9503f5fc-5e7e-4032-855f-36440c843cf2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e65476-2f57-422d-9f37-423c9f0cfaed", "sighting_of_ref": "indicator--5df1e1c4-5f88-4c7f-9b09-232ab8196d6b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6a7474-6f49-462d-aa7e-1cafc7c51bd7", "sighting_of_ref": "indicator--a3cb9bfb-513b-4fd7-adf6-a38a6598a0fd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d46774-e18f-4d9a-86a1-a86edbe0d85f", "sighting_of_ref": "indicator--a3cb9bfb-513b-4fd7-adf6-a38a6598a0fd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdae7a49-ec76-488c-80ad-311b57560a13", "sighting_of_ref": "indicator--e7945ae3-25f9-4356-926d-eb5b20f8bf41", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14cfd01-e12c-4ad1-b8eb-44c09db39aec", "sighting_of_ref": "indicator--a4042e3d-6e05-44c5-a1a9-8c4a61fbd5e7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ccd1c0-6987-4f08-a23a-3369442d7003", "sighting_of_ref": "indicator--1b024573-927a-44e8-8f9a-05185cc67988", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f062a85-c020-4caf-8785-259db9c38fa0", "sighting_of_ref": "indicator--f5d6faf8-02fb-441d-92b3-f5998f1f6fea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c96b662-09e2-4c8e-9cf7-98f24bbb2d98", "sighting_of_ref": "indicator--18803301-dd8b-4b1b-87c4-7813c04e4929", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec5c1a1-f1ed-4910-bef0-9c8390a0254f", "sighting_of_ref": "indicator--5034d3b8-67b3-46fc-b34c-ce8748b8c66f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c936976d-816d-40c5-9e84-1ecc34dee240", "sighting_of_ref": "indicator--98abcb19-520a-4a85-8c3f-ec62ced9c282", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98b1392-4f31-4eb2-b672-3a64e1b787bb", "sighting_of_ref": "indicator--e68028bf-af26-4bf8-8f22-5d60ed3d018d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2dd930-7177-4d1c-be57-04120736d225", "sighting_of_ref": "indicator--77668f34-866b-47ba-a584-e8d5b3645e6e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2361da-d3d9-49c4-a801-0ce96500094f", "sighting_of_ref": "indicator--36397fd7-b169-4c0d-8e8d-8ce7602ff340", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadced2d-71f6-4db7-90f5-d29a5f641324", "sighting_of_ref": "indicator--42cb7562-9c18-4fe8-93c5-5765f09318b3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274b2c51-37a9-48e4-9339-ae7aee5004a5", "sighting_of_ref": "indicator--48f38ab1-8cb4-4afb-bef5-b12234230b19", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d1d545-5c18-49b9-a1b2-c2098520251f", "sighting_of_ref": "indicator--20268ef6-4a14-4d69-981c-7a9f15664a42", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449e8239-5f89-4e1e-b1f5-6fb0bd3a988a", "sighting_of_ref": "indicator--4cffcfc8-8387-4b0f-bcd9-c3e1a61327a6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d49dd3-b66a-46f4-bc47-45f5c0fd241e", "sighting_of_ref": "indicator--441b1208-1e6a-4be4-8c6e-590cc2651e86", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac8da66-b498-4c9b-8ca6-4dfd2fb0530f", "sighting_of_ref": "indicator--a49971d2-f374-42c4-ba74-a5c14136e88d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543871da-bc7d-47fc-af44-287c1e8a5acf", "sighting_of_ref": "indicator--9c4eeb9f-5b18-4f92-9636-a4ae867f6f51", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cc7738-21fe-4409-81d7-4b5301c2d829", "sighting_of_ref": "indicator--5e4d1607-798d-4e6c-9fd8-e335932114ce", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7846af61-068d-41ba-93f4-73fe15c57ad5", "sighting_of_ref": "indicator--475a3686-c0a0-4eff-83ee-414373067c32", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36e8abb-2bca-475c-9d6d-791c5bf585e3", "sighting_of_ref": "indicator--df288591-7e64-41f6-9033-972ebec908fd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb24f35-745c-41e8-a6ce-e88304803212", "sighting_of_ref": "indicator--049f2015-d054-47e9-8174-9894ce60d206", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f90de7-8608-47af-b5dd-3f21cf12ceae", "sighting_of_ref": "indicator--37bfc8e3-10b5-4601-8387-770f37f2e221", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acd8849-0743-4219-9080-30f287a81a35", "sighting_of_ref": "indicator--0a418c46-ebb9-49d3-bfb4-98e165e76f77", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba692c4-e5ce-4ba9-a319-0e14e1715517", "sighting_of_ref": "indicator--51de6c50-ce5d-4215-b68d-7b398ca46a9f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d83e52-d1f5-42d6-a522-63a882b2d4f1", "sighting_of_ref": "indicator--8cdab69f-97b1-4c0b-85ad-ec4cd0137cf8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf2a00a-a263-4800-bffb-0663903d178a", "sighting_of_ref": "indicator--e6ee141e-1127-4c55-8963-008670829c92", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ace410-23c8-4a97-b8af-1eda0c24875d", "sighting_of_ref": "indicator--8bcc95c9-e10a-4cab-93ca-53cc12216dab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e16585-1d2b-471a-bbc0-e1e2c74d178b", "sighting_of_ref": "indicator--c944938a-c8f0-4d30-bc97-cfc870745c11", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487f4691-2d86-4a6b-999a-84031babbcdf", "sighting_of_ref": "indicator--9b74dabf-5419-4de2-94f0-6b5347a160c4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf469d9-0b8d-42ae-90c4-8931e84312f8", "sighting_of_ref": "indicator--84a5991c-831c-4325-8196-de89d89650a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf83850-1b89-4760-9bb1-3b85270db017", "sighting_of_ref": "indicator--f076b500-6765-4115-baf6-da8c9318b57b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4ab4ea-0a94-4551-838c-090e4342dd35", "sighting_of_ref": "indicator--3b82565e-5ddf-4f34-b5e7-8fc31d229ba3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4d3398-cc2c-4c80-997d-7aab3f93b59d", "sighting_of_ref": "indicator--be7540c6-271d-4d0e-916b-b98c808d3529", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde7d62f-44f1-4d5c-a98d-02ce846e4515", "sighting_of_ref": "indicator--8d64eb19-7f0d-4028-8cd4-84206157b764", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f37c44e-6760-4e46-8199-09ece4ef1eca", "sighting_of_ref": "indicator--4aa32a23-4e6d-44fe-95ad-8a29089bf180", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccfe2e2-4d18-4131-9573-80611057cef8", "sighting_of_ref": "indicator--cf034b17-3767-495d-a7ce-9c0399de267a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a2dd01-97d2-4cd0-a72e-926226144d04", "sighting_of_ref": "indicator--4a950167-f06b-4fcb-b0f4-8acbabed391b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7955da-56ac-4cae-a47e-0ea55b170427", "sighting_of_ref": "indicator--4a950167-f06b-4fcb-b0f4-8acbabed391b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98cbb28b-20d7-4d90-ae1f-b8716d3dd8a1", "sighting_of_ref": "indicator--8653a676-89e0-4be6-88c3-452b362ea561", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a4c33d-5c32-4176-b881-a3bb1269c0c3", "sighting_of_ref": "indicator--325af8b4-fda7-4519-b708-998ce660f145", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b714bfd-f74a-4367-ad59-b50f59808c0f", "sighting_of_ref": "indicator--8bbafb43-b044-4f9d-b610-b6488e97c3c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27de572a-2640-4171-8404-a3a63e07f0f8", "sighting_of_ref": "indicator--cec8f130-8ed7-4398-a650-3766d69c0a51", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f440d4d0-0891-4938-b1b5-9edd1142264e", "sighting_of_ref": "indicator--83fee353-79c5-45b5-a9ed-96cf3e1bf739", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f742f0c-8e63-44ce-bdaa-7f06d8c082cc", "sighting_of_ref": "indicator--e8c85c56-21d8-4d34-8ea9-5f8c28cf9ecc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a40fac-e25f-4eb9-963a-9f24d83d04f2", "sighting_of_ref": "indicator--e8c85c56-21d8-4d34-8ea9-5f8c28cf9ecc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991b32f7-9161-4c27-9e56-6f9f8f267110", "sighting_of_ref": "indicator--e8c85c56-21d8-4d34-8ea9-5f8c28cf9ecc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07ecf59-583f-4ed6-b379-4b6f5bdb0644", "sighting_of_ref": "indicator--ff24f37b-435f-40d6-8bd7-187c85f89d4d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc1c2d5-3a0d-4cd7-8ecc-a396d11d5cfe", "sighting_of_ref": "indicator--ff24f37b-435f-40d6-8bd7-187c85f89d4d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695032f4-bd5b-40af-9a57-a9abf3161cc7", "sighting_of_ref": "indicator--ff24f37b-435f-40d6-8bd7-187c85f89d4d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9b9639-e527-4106-8694-c731a96d762e", "sighting_of_ref": "indicator--aa57fdfd-cc9a-4853-9539-005f2e03e7ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385b1e60-c156-4294-bad2-2c023259afef", "sighting_of_ref": "indicator--77583b66-bbfc-4068-bcf3-04dc1a7a0b7e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91009d64-0e7d-4206-b8b2-8b073264bc3a", "sighting_of_ref": "indicator--77583b66-bbfc-4068-bcf3-04dc1a7a0b7e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf61bbe-2b41-41c7-820e-41fc2d8fe58d", "sighting_of_ref": "indicator--69d4306d-90ff-4c3f-9663-110a2746dac3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05123a01-a2f6-4b22-a7ed-0347062b8eec", "sighting_of_ref": "indicator--69d4306d-90ff-4c3f-9663-110a2746dac3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ab3a93-e258-4880-b4d0-1ab3bdb92b3f", "sighting_of_ref": "indicator--69d4306d-90ff-4c3f-9663-110a2746dac3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4662b852-2fab-4b62-b6c9-901d7a3831d5", "sighting_of_ref": "indicator--3d99fc8e-7dec-42bb-b63e-d71fd3649357", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589e3dd0-725a-4848-ae9a-58e7cb107eb0", "sighting_of_ref": "indicator--086eb853-1ce7-406e-b15a-975e525e46b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795b6a52-0b45-4ced-87ea-cb9d157ec139", "sighting_of_ref": "indicator--086eb853-1ce7-406e-b15a-975e525e46b1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f222488a-b4b9-482c-82af-aebdbb206ab4", "sighting_of_ref": "indicator--6ed717d3-f569-4aaf-8a29-f8db5be330e4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27fd129-bcb3-4e19-aef6-d45ea0bdb99c", "sighting_of_ref": "indicator--aea1ab88-3571-46c1-b677-0ba54fbda487", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e74d008-5c50-4173-8157-cced88f32914", "sighting_of_ref": "indicator--5240ed58-81c7-4641-b3a9-e258399ef83b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5303ee-cf2a-4d30-bdfe-b15897bd2ea4", "sighting_of_ref": "indicator--5240ed58-81c7-4641-b3a9-e258399ef83b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72832e7-1965-46fb-abce-064955c0fe87", "sighting_of_ref": "indicator--5240ed58-81c7-4641-b3a9-e258399ef83b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb33e78b-8d04-48b4-9a5f-bb5a47a61e6e", "sighting_of_ref": "indicator--a011e3f2-5c2e-4da4-8910-77983ab651c9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378baee9-316d-4ba2-b888-54ab4257f29a", "sighting_of_ref": "indicator--a011e3f2-5c2e-4da4-8910-77983ab651c9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2a6641-1aec-4b58-b245-fcfbf0626c9d", "sighting_of_ref": "indicator--adfca9fa-6895-4134-84e2-4c98682d574b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde63bf8-832c-463c-9b05-71633f2c7e71", "sighting_of_ref": "indicator--adfca9fa-6895-4134-84e2-4c98682d574b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c925e74-c015-4bac-bbf8-354a43810d76", "sighting_of_ref": "indicator--b265241a-c05b-4969-bd79-48bb070bc073", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa972d1-59aa-4db4-892b-6c4a5a8413ac", "sighting_of_ref": "indicator--332d3f1b-c540-498c-8e06-4edca4f75ab6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05eb0166-70d3-4f23-969d-2fd3ee5c0a1a", "sighting_of_ref": "indicator--ecdbe70c-19e8-4f5c-aa96-a43040f6f3b5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06caef3f-933b-47d3-b7e7-cc912b35acf5", "sighting_of_ref": "indicator--d1b23cc5-9a39-4350-9618-ea52a3816423", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff9ac18-0d50-4c73-a664-d2834d295bca", "sighting_of_ref": "indicator--6b402ecd-6c3c-4aa2-8954-7f8044bd69d2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfa4174-ec2c-4c7f-8fd8-bafe711a9f1e", "sighting_of_ref": "indicator--900c322b-569f-487c-9026-dfbfc9ff1b97", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92fbd4b-63fe-436d-bd27-c257ebca59a9", "sighting_of_ref": "indicator--c6637de7-76ec-4350-9467-448cfe518497", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce10643-10c0-452c-a927-7b5144b875d8", "sighting_of_ref": "indicator--7af30105-8101-4281-a4e4-4e7025b08f8a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896df6f6-1501-4bbc-963c-2550d0c4c7c7", "sighting_of_ref": "indicator--37d8348c-560c-4801-9b3f-9b352f6151c9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a1c29f-9e1e-48bf-a46f-72400800030c", "sighting_of_ref": "indicator--49e815ca-a232-46f9-b67d-c7ea7085386e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4f2fa2-759e-4923-93fe-13e89058ab50", "sighting_of_ref": "indicator--f0e63a13-9bf7-4aa1-8389-096fe59ac4ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5def6e77-9646-4839-903d-4022e7947ec3", "sighting_of_ref": "indicator--f0e63a13-9bf7-4aa1-8389-096fe59ac4ec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4c1ba4-dc74-47e1-9a8c-4fc360ac5dc1", "sighting_of_ref": "indicator--f0e63a13-9bf7-4aa1-8389-096fe59ac4ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e45a58e-97fd-4fe0-b1f4-8cef05bdf399", "sighting_of_ref": "indicator--396b94d2-c4d7-4989-9778-eb878d3ab3a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d355fd4e-cd5d-40b1-9e2d-0c32f49cf0eb", "sighting_of_ref": "indicator--de3edb39-bdda-4e10-9ff3-fa2761d647af", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a18acd-374a-404a-9996-4b15be65e38e", "sighting_of_ref": "indicator--4571c991-15e1-4be6-ada4-86ebb243425b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4de3b46-ba7a-4f7b-b6e1-010ecdfab98d", "sighting_of_ref": "indicator--14077c9c-b2e3-4f28-b7fd-a67c5b898db0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b062b928-e84d-4bb7-a900-e3c6ea471b91", "sighting_of_ref": "indicator--af00ae08-e86d-4310-bb4c-24a148e68b97", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dbd429e-541a-4e73-b319-9b03d84765f1", "sighting_of_ref": "indicator--8cd0389e-3ce0-4884-b985-9d8e1c15ab41", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa8c0a4-9b47-497a-8dee-8a63954a63d6", "sighting_of_ref": "indicator--346d1ef5-0918-4050-af1c-0ca9cd37f036", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff4eba5-b75b-4152-a434-400d96a7ef05", "sighting_of_ref": "indicator--7983d567-3944-401b-87b0-edaaab284204", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bc9dda-cde9-4298-98af-90e2d6c756e8", "sighting_of_ref": "indicator--6dbfa2b2-b903-4898-9ba9-2f52721253fd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c571f84-87a8-4f6d-b1c0-76608a59fc60", "sighting_of_ref": "indicator--050e7d65-e28f-4761-85ad-c3565a34fcd7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f7e443-ea4b-4141-83c0-373a36498ef3", "sighting_of_ref": "indicator--d78ea1f5-302d-4f49-a46b-3b493d10e620", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632b4faf-757a-4d89-83de-4cbcafc1f31b", "sighting_of_ref": "indicator--1ad73a07-654d-4c9e-a0ed-ba7b07ee23c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8503529-ba21-4717-843a-a16bc7f1dc17", "sighting_of_ref": "indicator--37e0078c-52db-4c11-8f03-2726e18da98c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c60df4-88df-47a8-8277-91b595e89c97", "sighting_of_ref": "indicator--3e8a1ef5-12d5-49c1-8ead-999eaf10f660", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d04902-4a12-45d8-a0f6-4d018c2fbeb1", "sighting_of_ref": "indicator--27bb9be0-f358-4c11-94f2-c4a9e9026c57", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b708bbb-4d5e-4c67-81b0-c788fd200d68", "sighting_of_ref": "indicator--45c10936-8eeb-4be3-8c39-6b62680bb729", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c7836b-cbce-4e13-9e3d-5e90f3037cbc", "sighting_of_ref": "indicator--19558dea-4c30-404c-867d-045333da58ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10ff274-2689-4320-9838-db1b6c07a3dc", "sighting_of_ref": "indicator--909e151d-f5ef-456f-9cd7-d8b9f091d607", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4c198c6-601d-475b-ae6a-b2c0be3637ee", "sighting_of_ref": "indicator--9e662294-f995-49d8-b140-79c5ab764dc2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e5c669-8074-47b8-b984-4de92a035edc", "sighting_of_ref": "indicator--9e662294-f995-49d8-b140-79c5ab764dc2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be44d4b9-c240-46c9-a582-197dd69dd5b8", "sighting_of_ref": "indicator--9e662294-f995-49d8-b140-79c5ab764dc2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef17364d-03b6-4d68-ad5a-b6a32e65b605", "sighting_of_ref": "indicator--7f528297-7849-43cc-aeaf-c287e9e5d5bb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08b08e3-afc2-445f-8dfa-0da32a7cccbb", "sighting_of_ref": "indicator--7f528297-7849-43cc-aeaf-c287e9e5d5bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e221d09-c438-471d-a284-82f777030628", "sighting_of_ref": "indicator--02a8be80-0ab5-4ea7-b1e4-c350d0a12f0e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2af1f9-0283-4ff3-b98e-79488bf61fff", "sighting_of_ref": "indicator--0704ef47-74b1-46ad-9214-7ecde66ed62e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1b5b28-f6a9-4032-9ec5-b4aa6162bf61", "sighting_of_ref": "indicator--0704ef47-74b1-46ad-9214-7ecde66ed62e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214ea9ae-5936-43e0-a163-727a0f2b8de5", "sighting_of_ref": "indicator--0704ef47-74b1-46ad-9214-7ecde66ed62e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65f9403-9ced-48c2-8ed6-4cd922932b5b", "sighting_of_ref": "indicator--4e8a5d97-0b09-4fa4-90cc-74348d3a6a06", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30143dd-ebd2-4ad3-9b10-7da642ee7062", "sighting_of_ref": "indicator--27554ffd-10af-4cf1-aec0-75774702f626", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb32799-f269-4910-bbf4-61661614f537", "sighting_of_ref": "indicator--27554ffd-10af-4cf1-aec0-75774702f626", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac71088-82f7-410d-b783-776bb8b166b6", "sighting_of_ref": "indicator--27554ffd-10af-4cf1-aec0-75774702f626", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3f7c1e-e939-4d10-9ac5-782586e5abd1", "sighting_of_ref": "indicator--82395b1d-a17f-408a-ba8d-28b5316ec0c0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb572c5-7472-4b57-8de5-813adfdfca50", "sighting_of_ref": "indicator--82395b1d-a17f-408a-ba8d-28b5316ec0c0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4626df9a-d740-497e-983c-69a2ef247d0a", "sighting_of_ref": "indicator--82395b1d-a17f-408a-ba8d-28b5316ec0c0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717dd3a8-bed2-4990-8d41-04ef534f5229", "sighting_of_ref": "indicator--fdd20a61-265b-4ac8-8791-133b671a53de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29243b8b-cc3a-433f-bb35-b3ad9d7b0aa1", "sighting_of_ref": "indicator--fdd20a61-265b-4ac8-8791-133b671a53de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24000a4e-d6ba-4586-8908-8dd5261f7aaf", "sighting_of_ref": "indicator--fdd20a61-265b-4ac8-8791-133b671a53de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07ddd26-f500-459d-88c8-4e31b2e5e06a", "sighting_of_ref": "indicator--cd9a0ad9-27d5-4da9-9ae2-37e21028248b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc65bda-4bd4-459f-890f-f7d67c0c5fbb", "sighting_of_ref": "indicator--cd9a0ad9-27d5-4da9-9ae2-37e21028248b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6453f7-395b-4943-94ee-44ef459dcb0d", "sighting_of_ref": "indicator--cd9a0ad9-27d5-4da9-9ae2-37e21028248b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87983918-d788-4dc3-bbad-9a208ae12794", "sighting_of_ref": "indicator--c22b6510-7c58-45d5-8ee0-8b66adf7f296", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554c0baf-36c0-4a48-b8ee-68dae86c7b88", "sighting_of_ref": "indicator--c22b6510-7c58-45d5-8ee0-8b66adf7f296", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62797b1-9d9d-46c9-958f-81d7e48a9fec", "sighting_of_ref": "indicator--c22b6510-7c58-45d5-8ee0-8b66adf7f296", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c11af8-176c-4f40-9cea-544edd179f4e", "sighting_of_ref": "indicator--23d683fd-7082-410b-881b-78f6de117129", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddbea0b5-b09b-4b71-aee9-f960b752acf1", "sighting_of_ref": "indicator--23d683fd-7082-410b-881b-78f6de117129", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1d3af8-2c1b-4a7a-a1bc-32d9a6ca82ac", "sighting_of_ref": "indicator--23d683fd-7082-410b-881b-78f6de117129", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892a4dfe-47c8-4b7d-8e5a-27affaf8452d", "sighting_of_ref": "indicator--5c33e7be-f83e-4834-88d2-fb86e7a86d4c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23acc251-1d5e-4a6c-b359-294f805df944", "sighting_of_ref": "indicator--e128418b-3e96-4c36-9f99-988ae48e8765", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e02682-ad95-4090-93d9-9d9fa984f54d", "sighting_of_ref": "indicator--e128418b-3e96-4c36-9f99-988ae48e8765", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc57591-ae08-4e99-8277-be2da3196ae6", "sighting_of_ref": "indicator--e128418b-3e96-4c36-9f99-988ae48e8765", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f68c44f-893f-4768-9c7e-58dbf7759f5d", "sighting_of_ref": "indicator--74e5c960-9cfd-4339-8cb8-c5b99be1a004", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e46a2c2-2b2e-419b-8f82-24a73d2b8a65", "sighting_of_ref": "indicator--74e5c960-9cfd-4339-8cb8-c5b99be1a004", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a23bc9-e15a-4fe9-9db8-b635185906c5", "sighting_of_ref": "indicator--d1a23263-b67f-443e-b6d3-2de15d715a1e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dbfcc8-5a6b-4faf-8484-5e0106e26bb7", "sighting_of_ref": "indicator--4816212d-cfa9-4960-80fd-95d0f2fa00c4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d844dd-7e0f-40b8-b714-1d2d9ed6954d", "sighting_of_ref": "indicator--4816212d-cfa9-4960-80fd-95d0f2fa00c4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e69d19-97fe-4caf-9c2c-969db2be1056", "sighting_of_ref": "indicator--4816212d-cfa9-4960-80fd-95d0f2fa00c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ebfb7e-6805-4420-be47-690a374eb54f", "sighting_of_ref": "indicator--51f34eba-425a-4d4e-b6db-b9edb7df0a9b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce55c120-c4df-4d29-b52a-a74a944d52f2", "sighting_of_ref": "indicator--c2e90d59-1eeb-474a-b383-121614fe8bf5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df61ee84-3dd1-4893-bb93-16e455aae4d7", "sighting_of_ref": "indicator--c2e90d59-1eeb-474a-b383-121614fe8bf5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e90d939-8aed-476f-b6de-d839bbb73b36", "sighting_of_ref": "indicator--6ceb0b1f-1019-4cca-864f-f00f1b9977b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bae9ef-bad6-4c02-ba3f-5fcb23e2d365", "sighting_of_ref": "indicator--fefeb1b7-3817-4805-b3d6-38ad4e09cd81", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f92f4be-1fc7-4ce7-8fb5-25ac36ef5efe", "sighting_of_ref": "indicator--fefeb1b7-3817-4805-b3d6-38ad4e09cd81", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f298f40b-9b98-44c5-8213-d179799f4229", "sighting_of_ref": "indicator--a825a87a-3fa6-436a-b4d0-f86b8e76f552", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c397d985-5dd5-4806-920a-320b2cbae785", "sighting_of_ref": "indicator--4504b2d6-b24c-4f34-81b4-8d3280f8e886", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4faac9-b310-4d8f-b115-5ddacbb69a18", "sighting_of_ref": "indicator--363fe299-ba83-4a6d-81e5-72dc2ded433c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2f30a5-3b3b-4f11-92ec-5652b64a4521", "sighting_of_ref": "indicator--29059291-46dd-4595-94da-6b492106471f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b308c04d-90d6-41a1-98ff-c46a385e5ce8", "sighting_of_ref": "indicator--a4751ba9-937c-498e-810e-e70a38f0d65e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ce18f4-f56a-4f8e-bfa1-f06c1d4ed1ca", "sighting_of_ref": "indicator--c53d98e5-9b05-4c85-9901-52cd189a1353", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82875f6-aca3-42a6-b0a0-07f471f432ea", "sighting_of_ref": "indicator--6e114f24-7b8c-45d4-8fd5-cb227454005a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5622752a-e462-40be-936e-81208a11bc2e", "sighting_of_ref": "indicator--b1dc0d12-a950-40ce-9877-9d5bff3a0373", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc08dc8e-94f7-4134-a24b-e38f8845ef53", "sighting_of_ref": "indicator--5f0912b3-39fd-4b23-a0f8-6a5901772d30", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b58fe08-8aa1-4eb8-80eb-f597ca9f85fe", "sighting_of_ref": "indicator--5f0912b3-39fd-4b23-a0f8-6a5901772d30", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875e83d0-527a-4999-964b-22f2f446919e", "sighting_of_ref": "indicator--5f0912b3-39fd-4b23-a0f8-6a5901772d30", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911e52e9-bcaa-4b80-910d-ab12e2e0bd29", "sighting_of_ref": "indicator--7f9d3a55-dc23-42d3-b846-c605f25b6cf8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3b12ab-e4b0-4fc7-b0ae-35cc2f0124f1", "sighting_of_ref": "indicator--11a6bbba-d49f-426d-93e5-33a4b57ec1d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d5ff6e-9270-44bf-bf7d-7d45413671fb", "sighting_of_ref": "indicator--33dcd24f-6a89-4008-857f-12169a1f9b26", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d51c4c-4e24-4d65-9b85-072b343ed22b", "sighting_of_ref": "indicator--f370abda-0efb-4592-a3b8-ffea670e06f7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0241d4a-f94f-41e7-a3c6-fb91bfc112ef", "sighting_of_ref": "indicator--b574f264-1cc3-4fe1-a9e9-936b68e46eb7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a219d5-9f50-45c2-b2e7-26f924f0b701", "sighting_of_ref": "indicator--35877586-9ad4-4294-bd31-04da3c17c93b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41180b9b-7841-417b-8ed7-e69419d50d39", "sighting_of_ref": "indicator--49079228-ff9a-482e-945c-482f290daef9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad032e9-5b23-4bb5-87b8-fe545a0a68ef", "sighting_of_ref": "indicator--f4a30825-496d-4915-bdf7-1ecfbaa5d3b3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e53e9dc-f42e-4251-a18d-32971b277b35", "sighting_of_ref": "indicator--1e1d2619-bfb2-4203-9913-70aca7714dcd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51d81eb-2aa4-4dc8-ad38-a5c00f549692", "sighting_of_ref": "indicator--651a3735-d67d-4c40-826d-5c457f8fe16a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a9f190-ba8a-4abf-a8d5-99fe451be063", "sighting_of_ref": "indicator--75d3619c-1294-4e92-8122-edec34228442", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5987035-c8b6-4cb2-a09a-cef2fe8bcee0", "sighting_of_ref": "indicator--c3f0476c-650b-4649-a127-6c4ab1e28c9a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef607cb1-c195-41c3-b763-07d982f788f4", "sighting_of_ref": "indicator--14b82a71-bd78-44bf-932b-f308dc92f8ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c34abb1-8e4c-42da-9922-e06e7dec2847", "sighting_of_ref": "indicator--57bbc1fe-fa22-407b-b4c2-1e3d03406584", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee67ebfc-0d87-49cd-a73d-5c7f3afbec91", "sighting_of_ref": "indicator--5a7877dd-9ecc-4094-97f8-557eaeda5380", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6977808-69cf-4dc2-932b-647b751d3a4c", "sighting_of_ref": "indicator--32c95a6f-f606-410e-94ee-68fed422b212", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27919ca7-9320-4f66-ad1f-f0550ad30266", "sighting_of_ref": "indicator--6619c1ee-aca3-481e-92c9-6a6895a952cd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051f9d25-44c5-4096-8843-3a1545e74620", "sighting_of_ref": "indicator--efbb93ac-8efd-49e3-acfe-849e1cca3c57", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f8242a-db9e-437d-8326-fffa68f39097", "sighting_of_ref": "indicator--d597aefa-ed77-4c03-8028-2d05285f9455", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273d351f-76e4-48c5-b932-e7110e57fb81", "sighting_of_ref": "indicator--195ddf6a-b495-4305-9157-95d4fd2efc79", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ed2fb1-7497-4ec9-b817-24c510cecd30", "sighting_of_ref": "indicator--a82406d8-4635-481e-bb9a-4ba52450e91d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c865b3c-01a3-4079-98cc-ae0695363a9b", "sighting_of_ref": "indicator--00542f86-e1e6-4c79-9bc6-42f83876a947", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25767771-45db-4a85-8486-b23c1004a41c", "sighting_of_ref": "indicator--8b60cbf6-c629-4ca9-95ed-e3b2941fcbbe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13389f5-0707-4a1c-8887-bc6d045ab0ba", "sighting_of_ref": "indicator--8b60cbf6-c629-4ca9-95ed-e3b2941fcbbe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69f51d3-eca3-46b5-b60b-07fe1ff1189e", "sighting_of_ref": "indicator--f8653907-cd0e-48e5-a38e-45352cd4faca", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4dd9e59-e0e0-40c5-953a-bc2f83f758c6", "sighting_of_ref": "indicator--a5ca0c0b-bb19-4353-aee5-ce2e94e41d5f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8cea3b-8d56-40ab-9083-92ab729642c9", "sighting_of_ref": "indicator--510f60d7-88cf-4335-9f1c-8129b1bd8a03", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59adfba3-a57d-426f-8ab9-65f63e89dbb1", "sighting_of_ref": "indicator--95fc21dc-2b68-4b40-94dc-43a0f1298db5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06c8189-7688-4e87-adf1-3e9606b5229b", "sighting_of_ref": "indicator--95fc21dc-2b68-4b40-94dc-43a0f1298db5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e378bd2-da63-4a1c-a036-c9397f82c2c7", "sighting_of_ref": "indicator--95fc21dc-2b68-4b40-94dc-43a0f1298db5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af649c6-0d6e-4a2a-93bf-df505dd3c25d", "sighting_of_ref": "indicator--893c1f83-4596-4655-b7e7-6d0b9c8d5cef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89175ba-206d-4c1b-a7ad-aa8f9dfe9dbb", "sighting_of_ref": "indicator--893c1f83-4596-4655-b7e7-6d0b9c8d5cef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd694be-a964-40fa-b1ac-6ebee5d23aa9", "sighting_of_ref": "indicator--893c1f83-4596-4655-b7e7-6d0b9c8d5cef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d60745-4064-4ec0-b440-4efaa19c4904", "sighting_of_ref": "indicator--4dfb5ad8-a7a1-4883-8e2a-f5b7528b66cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeee32bf-3030-47da-90c1-5c3efc5a902c", "sighting_of_ref": "indicator--5b918ada-4966-4845-a2ad-2f3ed8247a7f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a73062-607e-4738-a1b7-aee415d15707", "sighting_of_ref": "indicator--0e22962c-14c9-4956-978b-8126f0fd85e9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfeb4fd-e758-4225-92bb-08f7fbf994a3", "sighting_of_ref": "indicator--13afc54c-af40-434d-82fe-835dbf16888a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d4e4d5-ce08-47af-82a8-311ffc412ab7", "sighting_of_ref": "indicator--7261b491-425e-4371-a1b2-40aff73c23e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1ce972-119d-40ee-9ae1-399b8b62a497", "sighting_of_ref": "indicator--6f8135f3-0f08-41d3-bfa9-b091ec454c84", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68ed17a-84a2-4001-b471-b94e1cc15049", "sighting_of_ref": "indicator--8e54e3b2-2df5-477e-bcdd-41cd11c792ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a65a1b8-f435-416e-ba24-a8549274a0a9", "sighting_of_ref": "indicator--29c4a426-ae7c-4c9c-9a33-fd718f888338", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537a5642-fe61-467c-b5a9-0146ea4801f1", "sighting_of_ref": "indicator--6537fcf4-00f3-4871-8c58-affe937ea8fa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff90f7ad-ff3d-4edb-a204-b4a31ec847f7", "sighting_of_ref": "indicator--d6f57e28-6143-499b-9e90-131ff4903137", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169c310b-6fb8-4153-854c-0ccc2a0da9cd", "sighting_of_ref": "indicator--d6f57e28-6143-499b-9e90-131ff4903137", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfb9c4f-d796-42e2-b656-600ff376fbb9", "sighting_of_ref": "indicator--146bc0eb-1356-481a-9c2c-56f81b079302", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb170c2c-3d69-4556-8327-2ba1efd5a86d", "sighting_of_ref": "indicator--dd9e6424-8e4a-453c-849b-485efd181f1e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a47f7be-f7c8-4e04-a263-c80deb6e3bef", "sighting_of_ref": "indicator--fbe904ca-a305-4eaa-b7b5-402b5a4607b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfcdc7a7-913a-4856-ac69-3b7236e96d34", "sighting_of_ref": "indicator--4ac4bff3-99a6-49bf-8a89-2175fb39d90c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8dd3c1-f24f-424a-a5c0-d03b83f0c4f5", "sighting_of_ref": "indicator--448e0d72-69ef-4d46-b28c-52a42cdf98ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5967ed8f-6977-414e-8556-9c052a2fb589", "sighting_of_ref": "indicator--05691de9-82cd-44b9-a09d-78819d359dae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd53980e-1386-4d4d-a106-e2f0f4f58e4f", "sighting_of_ref": "indicator--863700dc-f3e8-406c-b8e0-cbed1a64f7a9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4caccc82-dbc3-417e-8682-13a5d8b67c95", "sighting_of_ref": "indicator--2c084173-bcb5-4e8c-be21-49dd7e8c5f77", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e38ec8e-6dd2-4861-b2d9-48ea05bff410", "sighting_of_ref": "indicator--2c084173-bcb5-4e8c-be21-49dd7e8c5f77", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90259f60-54c9-4225-842c-95d900017838", "sighting_of_ref": "indicator--20d8a4a0-9904-495b-b8e9-b43d9481940b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29b8f07-fdfd-4873-96a6-a64d4b5ae399", "sighting_of_ref": "indicator--81f831de-5061-4354-85e1-c4579ce0f177", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2cf6c5-194c-43ff-9d51-f58c07df2305", "sighting_of_ref": "indicator--5248258b-7e47-4de6-aa28-974e6d859989", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0441fe28-981b-4f9d-a1d1-a301b1591e94", "sighting_of_ref": "indicator--5248258b-7e47-4de6-aa28-974e6d859989", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f440b9-c6b8-4b77-b8e7-592966d63643", "sighting_of_ref": "indicator--ce3a61b9-dfbf-4c81-9f16-8ade8b64ae37", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e906c4d3-b84e-4201-bf2b-4918c6aeaaf3", "sighting_of_ref": "indicator--d8927697-ed50-42de-91d1-8d3b4ce734c1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda7c7a5-ec6b-46de-be67-5e1eb6243a1f", "sighting_of_ref": "indicator--b67b8cde-1746-4930-991d-641855af23ab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1c2f5c-b855-4ae0-9ebd-45c9838df695", "sighting_of_ref": "indicator--d6fa50ba-28c6-4c08-8a64-f11f56b51d9a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4f5db3-5aae-4951-99b4-637a2b963269", "sighting_of_ref": "indicator--d6fa50ba-28c6-4c08-8a64-f11f56b51d9a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e17a75a-a790-40bf-a8b0-8fde57079ed8", "sighting_of_ref": "indicator--56e2bf5c-697c-477b-bf33-f000a0b0c962", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a66e81-961b-49a5-aad9-2e85d0d23dd9", "sighting_of_ref": "indicator--462f77d9-bb28-49d0-9748-d788756e6c7f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1e323b-2672-42f9-a778-ff48285d89b1", "sighting_of_ref": "indicator--de2f1d05-045a-4b35-852b-748b3eb425cb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1246059c-e3e8-496d-90d0-1089293f2a97", "sighting_of_ref": "indicator--5e080ea5-34b4-4948-a163-fd4c300de396", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed33bcc6-335f-4ac1-a18d-150c5a54053c", "sighting_of_ref": "indicator--5e080ea5-34b4-4948-a163-fd4c300de396", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0a59f3-3da3-420e-9159-528792b80e0c", "sighting_of_ref": "indicator--a938b484-b91f-401d-bc83-aeb941037fce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c91c85-0eb7-40f6-87c4-ebc5d5bdcce3", "sighting_of_ref": "indicator--a938b484-b91f-401d-bc83-aeb941037fce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3cd028-2376-4bad-be4b-8979cc6a7d14", "sighting_of_ref": "indicator--b80e17eb-4f17-46c5-bafd-226f847ea51a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21278709-a3dc-4502-afbc-6f868f0fd346", "sighting_of_ref": "indicator--b80e17eb-4f17-46c5-bafd-226f847ea51a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d833e54-7933-4fba-b968-ebcec632c128", "sighting_of_ref": "indicator--b80e17eb-4f17-46c5-bafd-226f847ea51a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0106db86-4d83-4cb1-9ca2-9f8be0529207", "sighting_of_ref": "indicator--d2154cf3-8abf-45c1-b25e-eab89017f474", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1347d995-1821-4dae-8a1c-903a4c4be882", "sighting_of_ref": "indicator--cf9bb9b4-f2c8-4d4f-9d8b-d82893b5237b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ea5448-75be-4440-ae34-452c6600c978", "sighting_of_ref": "indicator--c12915c4-5381-4a34-999f-a322ee979c50", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c21d8b2-f115-48c2-b6fc-ca55879fe9b8", "sighting_of_ref": "indicator--5605d2cd-5c77-4d54-8bcd-077e61e339ff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8668ed74-b389-4eb4-bb91-01fdfedb28b2", "sighting_of_ref": "indicator--f2da99d2-d6fd-4267-bdd5-25812c4d9464", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702ed00c-2d54-4a09-a77c-45137c87df7a", "sighting_of_ref": "indicator--16168509-c937-49c0-9031-c9d5f5f22651", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fde40b0-2286-48cb-b12a-4f42365df95e", "sighting_of_ref": "indicator--9fd93f43-f18d-4703-a6d2-906fdbdd9331", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec69bead-bf35-46c7-a7ef-19c3fce77fef", "sighting_of_ref": "indicator--19690bb6-c069-4ed9-a781-083bfa14bb45", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ad7ff8-5e39-4d0a-be75-e1ac5852481e", "sighting_of_ref": "indicator--0d70506d-bc24-4a0e-ac00-cc2309050be1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ffd6e6-74ee-41ec-b714-ae01303cd0de", "sighting_of_ref": "indicator--1b27e908-b84b-4390-ad02-942a23ea04ea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8191237a-d19c-47aa-8b7d-dc7cfd273512", "sighting_of_ref": "indicator--b0182575-c10a-421a-8053-a287071b5123", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9475321b-4cd9-4639-925f-06a25944f4c1", "sighting_of_ref": "indicator--92565ac5-4a3d-4bfb-8dae-821b543df6be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781b5e57-5f3f-48cb-9c23-c79ccf7967ef", "sighting_of_ref": "indicator--453b9ecf-5145-40cf-8ba2-090081e0d4d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfb315d-44dd-4d45-b097-48e4f009a945", "sighting_of_ref": "indicator--1b493176-e16f-43a5-bb26-48550920edb9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfb3282-5af3-49b1-898a-8882f697ffd4", "sighting_of_ref": "indicator--d95a74f5-beb8-448d-ba50-3d67220fb172", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03975be-d4a0-4c21-9926-384787d3518a", "sighting_of_ref": "indicator--9707243a-8c53-4ddc-8183-af62fab865d6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907b24fc-c46b-4dc3-80bf-124a34a332c7", "sighting_of_ref": "indicator--cbd1a6f4-edcb-4167-a58f-0aad0ff6de03", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8baa59-4275-423b-868f-93500ddf07b3", "sighting_of_ref": "indicator--a5546645-79a8-413a-925d-7852eb3d2e59", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e12b24-481c-4905-9439-02ee00da2df5", "sighting_of_ref": "indicator--f863ae13-27d2-428b-8f68-b69d2cb55ac9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691c2ae2-78ac-4242-8843-d266cfabbaf2", "sighting_of_ref": "indicator--300c4321-1dcc-4eb4-8670-0c24ec69cc2e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8470f16b-3dcc-4a9b-8f38-a1eb31715af0", "sighting_of_ref": "indicator--7673ec85-1e1d-49a6-bd8f-0cde141c873d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aed17d2-02ed-4158-8e57-a2a0af046280", "sighting_of_ref": "indicator--3563749b-3541-4e8a-9b31-f90477442f97", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26ef480-0491-4b48-a80c-7d4fcdb3a436", "sighting_of_ref": "indicator--6396d4e0-10ee-483b-bcce-a33f842d4b10", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d328d8-5944-4d7c-875d-5b78251603d7", "sighting_of_ref": "indicator--2b6b4c82-24fd-46ca-ad5b-c194ddaea01c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c242888c-dd0c-4623-89db-311a77af1eb4", "sighting_of_ref": "indicator--643247af-db9c-4c4d-b728-75500c4c0a8b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91f105a-f1ca-45c2-8270-dd5556733c5d", "sighting_of_ref": "indicator--617067d4-8c32-43ee-b950-22bc8a8bb23b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8550d9c9-4f7a-43b5-8674-c89d797d93ab", "sighting_of_ref": "indicator--337fa134-0c5d-44ce-8ab0-5174ca31309c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a53490c-89fc-414b-917f-9da2c59bf00d", "sighting_of_ref": "indicator--337fa134-0c5d-44ce-8ab0-5174ca31309c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea92deb-f5c5-4bad-a60d-b3128025d3d0", "sighting_of_ref": "indicator--337fa134-0c5d-44ce-8ab0-5174ca31309c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92827f5d-3ac0-4e58-b197-780b276285cb", "sighting_of_ref": "indicator--da72da58-29e2-4ed2-bee1-8257fa06f8ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f4a644-4c39-434c-bb0d-4da875ba9b38", "sighting_of_ref": "indicator--113f58c4-3be8-4ddd-9b45-162f87ae81e6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de1daea-3d67-4118-b8d2-2dec26346c23", "sighting_of_ref": "indicator--af78a487-c7b1-4880-8f19-ff30cb722aba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e1054d-0a1c-48c0-a076-e625598bcd6e", "sighting_of_ref": "indicator--7ee2333e-6dbc-4e8e-9711-f5503e15cf49", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e824768b-1135-407a-ad6a-f43f41beea0d", "sighting_of_ref": "indicator--eea64ce8-6c35-48e2-8ae4-98c9d72b069f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a76633f8-a5c0-4ebe-aed1-34ed2dc86cbc", "sighting_of_ref": "indicator--eea64ce8-6c35-48e2-8ae4-98c9d72b069f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcf3772-c178-477b-80c5-20aef58b5ecd", "sighting_of_ref": "indicator--0480f27a-98d1-43e6-b728-869cbc909a23", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c756b2bb-f0be-4222-9690-45fa6920df7a", "sighting_of_ref": "indicator--0480f27a-98d1-43e6-b728-869cbc909a23", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2c586c-ade6-4de7-8794-a54234d6d524", "sighting_of_ref": "indicator--1df0eeef-e5b3-4f95-b50a-a0006d243794", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2fd915-08ee-4c76-ad50-7b6c5e5aa724", "sighting_of_ref": "indicator--1df0eeef-e5b3-4f95-b50a-a0006d243794", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ac6c7c-3bc5-439b-9ce2-4c7a3ffda17c", "sighting_of_ref": "indicator--1df0eeef-e5b3-4f95-b50a-a0006d243794", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946f0bb6-b348-4802-b0be-7a95c71a6d3c", "sighting_of_ref": "indicator--bbae1544-1bdc-4fbb-a52b-08d2b39a3289", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182f6d4e-8078-42e3-9a74-4a249cf00e61", "sighting_of_ref": "indicator--fb7145bf-55fe-4e97-bdc5-c62cf1a8fe71", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b70a19-6049-4997-bd2b-b074bb3d4035", "sighting_of_ref": "indicator--b66a480f-8be1-4819-a052-4b27c5b78cb2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dba1bf2-5247-47f1-9da2-013ba84ece45", "sighting_of_ref": "indicator--e15654b2-00bb-4312-bdb1-02792e5d9040", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc50bc4f-f6e1-4a83-9559-c796a0157fed", "sighting_of_ref": "indicator--bb127fd4-651e-41c8-902f-1ac7906761a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19f83ea-cbc0-47a2-92d5-7c7767a827ec", "sighting_of_ref": "indicator--6e4b93dc-8dac-4148-b58c-357dc30f32b8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5cc3e1-99dd-4fb8-bb2a-7b1f4f05de77", "sighting_of_ref": "indicator--8329b384-0dd5-4d30-8395-c54c4ac5e943", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250e6122-288c-4de8-971b-0675928ec6c8", "sighting_of_ref": "indicator--738dd9eb-a685-4a30-91fa-25a98a5d7d83", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af14ed9-49d1-49e6-ab18-8dc6034b7b0d", "sighting_of_ref": "indicator--bb54b0d7-cc02-4de8-a00d-ea5ffec79500", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909bcd2d-bc35-405d-804b-680f99ea42ae", "sighting_of_ref": "indicator--bb54b0d7-cc02-4de8-a00d-ea5ffec79500", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32763ff6-924c-4be5-9fac-7aa9dddd4e34", "sighting_of_ref": "indicator--9772f251-1c0b-4ce1-bd86-5a351274a114", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e163bf-7ee3-4def-b407-ce87ebfe16ad", "sighting_of_ref": "indicator--b54779d0-dc75-4d7b-b5f2-7ae2445b21a9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0add2fdf-d943-48f1-be3f-7a0798b7039e", "sighting_of_ref": "indicator--d38deb4c-6e84-462b-99c0-e6bdb75afb2a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b3134c-4e56-49b1-946e-e9b7bce2c1ca", "sighting_of_ref": "indicator--aa57c899-40e2-4b00-918a-4c9c57508fa9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1367202c-f5ff-4f9d-86e3-0e9a1c1b371b", "sighting_of_ref": "indicator--48cab0d6-93bc-4249-8b55-5caff05f6749", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a5577f-99ac-4e66-9fc9-70e73a0e2156", "sighting_of_ref": "indicator--1852ecec-32ce-40c3-8850-369dd6c763d2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5abbb5-7bfa-4f72-8463-00c14c07dd00", "sighting_of_ref": "indicator--602e13ee-727b-4486-8aea-8d78dbbcac7a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fee298-6bc9-4ebf-8966-6e85a4701ae5", "sighting_of_ref": "indicator--f5352f83-5d4a-4ff6-a56d-4724bbebe916", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526adc14-62c8-4b46-ad9d-f72d3a806ab6", "sighting_of_ref": "indicator--52c34133-7bd5-45b5-8176-08cb0433e9d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b924845-ffab-4bf4-952f-5ad1db4113e6", "sighting_of_ref": "indicator--8c4decc9-dbbc-47f6-9445-52c3728f865b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa29f2c-9e5f-4bad-9534-54109c698cf5", "sighting_of_ref": "indicator--78d69e6f-3739-4d52-ac1a-4ea05221024a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8093b2c6-2a7f-419c-9bdb-4795548492df", "sighting_of_ref": "indicator--40015d60-c340-43fd-b18c-0fa8b62f92f7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878c86a5-005f-4b24-adea-caff7596328c", "sighting_of_ref": "indicator--b434395c-06f0-4416-aa9e-80f80d7921f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5099d9-0fb9-4f7c-8c37-b34f57c4a39f", "sighting_of_ref": "indicator--caf91255-abbb-4709-b5cb-0ef71ec8fbbd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc6db08-44aa-4295-909b-f41ff5f3d55c", "sighting_of_ref": "indicator--94e209e0-f647-48ae-af2b-5aa5e656cd63", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1270761a-1d07-444a-a6a5-c005094bbb47", "sighting_of_ref": "indicator--120fc3ee-58af-4bee-ba7e-ddfe6a162336", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1deaffa-3c19-4e93-92c3-95a891ca5eb4", "sighting_of_ref": "indicator--5528b083-08e9-441b-a99e-88eeb3441ddf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0af3f6-2918-4d3f-8a6c-7fb91706db94", "sighting_of_ref": "indicator--cd5786fb-2ad2-4cfd-bb34-8e9a3ac176a4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa6c7bb-1009-4c2a-914c-b7812b26ce5d", "sighting_of_ref": "indicator--0a69a81c-7a1d-469d-bf33-b4b3610e737c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11d4dbf-00b4-400c-8bee-8b819fa836fb", "sighting_of_ref": "indicator--f41a3791-985e-4c8d-972a-1eb94f3a8535", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2a333d-7624-45a6-9d7a-aa237a6cea23", "sighting_of_ref": "indicator--b81eeb6d-d047-4921-bc19-094391b9f204", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca63068-a9d5-4abb-a89a-b2af7874593e", "sighting_of_ref": "indicator--b3bec7f7-ad54-47cc-9a7f-78eaa68c0632", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6f2114-e5a0-4f11-8705-28e45a4a2179", "sighting_of_ref": "indicator--b3bec7f7-ad54-47cc-9a7f-78eaa68c0632", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d750f0f5-bc58-4196-a51b-f8ca417a2626", "sighting_of_ref": "indicator--a6f23b4d-96e1-4100-961e-4890445cdce8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a939ad75-363e-49a1-bf23-b7d71cc7bdb1", "sighting_of_ref": "indicator--61b99924-4a98-4e07-8ff4-0b038a0c472f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355d3129-cd57-484f-baf1-e728d80ab40b", "sighting_of_ref": "indicator--495c0ef3-0fc5-4d03-a780-37223c6c783c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9434a6-a7dc-4d1a-a0c4-bc0c71d86a66", "sighting_of_ref": "indicator--5121a053-4392-4aa5-9b77-6b1e603a424d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa04a45-6191-4fd2-a8be-7d964541790f", "sighting_of_ref": "indicator--a1d3da7e-9070-440c-90d5-14abd6129f66", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dda257-f2f0-465d-b15c-f3fd89fcef55", "sighting_of_ref": "indicator--7ac6b758-7e76-47a7-818a-e98c3311855a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d441110-f6f0-4e59-8ca3-c6d14b5bbb2d", "sighting_of_ref": "indicator--144532fa-782b-4565-83d3-e88d3b49d687", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb3be27-f91b-4454-8f10-d2a520951b21", "sighting_of_ref": "indicator--935413fa-f3aa-4aae-9ead-6788b78f90ca", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccec62b3-715d-4715-83ba-57e3d6f8dca4", "sighting_of_ref": "indicator--7560d7c5-5412-4011-9693-ca76e9e2eaad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d55830-c127-4346-9d55-39d2d490b99c", "sighting_of_ref": "indicator--d11996c0-a820-4473-a675-d6339f264d78", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5a27ad-a54a-4561-8159-5815650b5a6a", "sighting_of_ref": "indicator--db50306e-fd98-419a-a494-fc6677bbf857", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dcb1b9-769b-4fe7-aee8-1c9b6a523e02", "sighting_of_ref": "indicator--a05431e0-d585-4e7b-8686-9fa542de7736", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07da9e3f-9bcd-45e0-9850-637f3083def4", "sighting_of_ref": "indicator--d90f182b-dca1-4f2a-9ab8-ac93ee017192", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ae6c38-ba9f-4d74-aa0b-0bfaf807c6a3", "sighting_of_ref": "indicator--8ccdfddd-fd7e-40bb-bef3-83560434479c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bee386-5844-4c96-9f7a-438f32537e9f", "sighting_of_ref": "indicator--2c7afebf-5805-46df-be8f-4dd62c703d06", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979a74c9-70b7-47ad-a36c-1a6ba2ddd20f", "sighting_of_ref": "indicator--2c7afebf-5805-46df-be8f-4dd62c703d06", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624736b4-ec5a-4f8b-99d2-5c434a748975", "sighting_of_ref": "indicator--bd841fa7-4b15-49e2-82fe-3ebb2d43cfb6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df7b70f-4cb6-4a7e-a1b1-ab00eea99cce", "sighting_of_ref": "indicator--e72c22b4-2ff4-4524-9913-17fb4c910399", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c19e7a-9df4-4b83-a384-e5c631050633", "sighting_of_ref": "indicator--a0985987-ae28-43db-a66c-b04451f82e9e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73425a38-dde0-4d37-a363-40fb4b6d5864", "sighting_of_ref": "indicator--5d43113b-8f03-412e-aa6b-8514c229efb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ba89da-ba12-4bf6-ae20-2eeb78958097", "sighting_of_ref": "indicator--a4c54d5c-f7aa-4e9b-b8df-7081fda3cb15", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67056b65-e736-4431-bf31-fd95d1e81e27", "sighting_of_ref": "indicator--8f06bca0-e3a5-42ab-8046-7e9f8c1cc68b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738d58fb-3046-4a9c-a780-599a0dd8ec56", "sighting_of_ref": "indicator--149c1210-9975-4e04-ad02-41835ef8798b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5594e1f4-fd44-4def-b4e2-3dc3fccab9c6", "sighting_of_ref": "indicator--37b86945-82d4-4852-980c-8b20f7248b32", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7e5625-acc2-4a4d-a467-e90f830500a4", "sighting_of_ref": "indicator--75e30fb2-522a-4daa-9526-62e0afa08d77", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f90653d-e214-4b35-9cec-975d2126c4a4", "sighting_of_ref": "indicator--1c8594c0-8e78-484b-84d9-829d655c0d42", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ad4405-c2c8-44b1-ba32-6628573470d2", "sighting_of_ref": "indicator--8a3add21-f024-493b-8f4a-4f0eaf4a8648", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37d9fbb-e77d-4ec7-8e60-6e2cb8ed8a0d", "sighting_of_ref": "indicator--f3825afa-dc57-4244-a7ef-8da2f207ce02", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c634a7f0-2368-4940-b427-528fab1b7a3d", "sighting_of_ref": "indicator--37663c9d-b17e-41a7-851f-135523ef7040", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28aa9af5-3be9-432b-ae5a-a9782c590891", "sighting_of_ref": "indicator--02cc3430-8597-4cb5-9086-64d3c8f1086a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8726f23b-fae5-4687-a957-87e4edb0e1dc", "sighting_of_ref": "indicator--1c6fb087-8f52-4b2e-8a36-89acbe4d0967", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f67d2f-0945-49bc-878a-6337a6d43eae", "sighting_of_ref": "indicator--1789d706-0ed9-456b-b21f-60ff484897bd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2e0691-f2c4-4d89-92a0-7dd265f85583", "sighting_of_ref": "indicator--ed9e954b-e5e2-4838-8d8a-290d7908fea5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68d3ccc-4980-4281-96a3-b93d045aab11", "sighting_of_ref": "indicator--f4c5c6e4-2e1a-49c0-aa10-ee59f274ad7d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314a7fcb-7e11-4801-839b-0c6eda620dbe", "sighting_of_ref": "indicator--f4c5c6e4-2e1a-49c0-aa10-ee59f274ad7d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c34b6b-8426-4764-9427-5cb3bd7ac071", "sighting_of_ref": "indicator--996e4075-0be9-4b74-9b16-95a35c99160f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d85d11-879a-4989-b898-45fcb2baeeb9", "sighting_of_ref": "indicator--23e4d528-252f-47f3-9a15-d240ae9e1a4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6be41f-859f-40f4-8960-994cd1129af6", "sighting_of_ref": "indicator--c0ca27b9-c415-428e-aa8d-2252fe001d45", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc574559-6c72-424e-a14c-48a1c7276ce1", "sighting_of_ref": "indicator--3d8ce7e0-322f-40bd-828d-e1f8005d9f5c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe01dbe-fdf8-4ffe-aef1-ca588c9dfb99", "sighting_of_ref": "indicator--3d8ce7e0-322f-40bd-828d-e1f8005d9f5c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cfead7-c2d9-4593-b34c-f1c22274668d", "sighting_of_ref": "indicator--108f6893-2278-46a9-9eb2-85e7d48db310", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab0182e-76ff-4d4f-aebb-8dfdf3f3b98d", "sighting_of_ref": "indicator--6c67e2ab-2c5d-44ff-b949-0ad565467fa6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6166ac6e-32bb-47f8-9a6e-0554988472cc", "sighting_of_ref": "indicator--399a23d6-b795-459b-81fa-9321bf5ea56b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0a1b56-436b-4646-82e3-c7e65c78ff85", "sighting_of_ref": "indicator--a195855f-a082-4ccc-b679-935a720bca4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f66555d-9fd1-4270-8a60-44fbe89b26b8", "sighting_of_ref": "indicator--305dab5b-3348-4094-accf-878fd87d0733", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c6537a-edbe-4f64-9071-56ac9def20f9", "sighting_of_ref": "indicator--96af72cd-4d3a-4e4b-bdce-b549bc47359f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d723f32-1245-4637-93cc-927a8300d888", "sighting_of_ref": "indicator--96af72cd-4d3a-4e4b-bdce-b549bc47359f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47285793-922a-4235-a454-78d0188b5645", "sighting_of_ref": "indicator--0fd56764-dbef-4b42-ae03-0e8f1e4746c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db543af0-39eb-45ab-9130-495bf0cf1272", "sighting_of_ref": "indicator--59161018-5303-47c0-b6f7-654772bf1e89", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9912ba4d-61d9-4328-b81d-2b554017d095", "sighting_of_ref": "indicator--b64d3b28-128b-49c0-b9ba-272922fac661", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79700ad1-cf06-42f7-9c10-7441b9f0691c", "sighting_of_ref": "indicator--641da955-f4c1-4551-ad26-20abfd6b37de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0119c5af-cfdd-49ed-b443-f9f9da253638", "sighting_of_ref": "indicator--36209676-7e9a-42e1-874d-0e9fd02dcaa1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b3a05b-294c-4c12-ba5d-5b4edc9b7d44", "sighting_of_ref": "indicator--2fb7ac0a-3995-4a71-a54d-c07231be73d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee70300-c971-492e-b406-80e0d3c3e12f", "sighting_of_ref": "indicator--2342b863-62f2-4454-8a4b-b2949d84bb49", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a663dc0f-479c-4e0c-90a7-6e262b411657", "sighting_of_ref": "indicator--1c7abc92-a89e-43b6-bf6d-45c79cac40e9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54003ef6-a203-424d-965a-9223f75144aa", "sighting_of_ref": "indicator--1c7abc92-a89e-43b6-bf6d-45c79cac40e9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3e68a1-5eaf-4627-a278-10a67b1b3572", "sighting_of_ref": "indicator--26a3239b-97de-47e4-b288-0efda2696a39", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4481b0c4-aea4-45e2-ae3a-f815cd7225ea", "sighting_of_ref": "indicator--26a3239b-97de-47e4-b288-0efda2696a39", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2e599c-3001-4b69-b0b1-9376151c57d9", "sighting_of_ref": "indicator--26a3239b-97de-47e4-b288-0efda2696a39", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788a2282-ca83-449e-b73b-8bdbee643302", "sighting_of_ref": "indicator--3a4e9f50-3059-4687-b108-8346ab9badeb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cca3ae7-1996-458c-96ef-b302cc18f620", "sighting_of_ref": "indicator--180bf614-fe6f-41a6-b125-fca102ed334b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f998f8-7d3e-4b65-b59b-e0d96d067210", "sighting_of_ref": "indicator--180bf614-fe6f-41a6-b125-fca102ed334b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7bad4f-5008-4a8b-8d9f-afb694e7993d", "sighting_of_ref": "indicator--180bf614-fe6f-41a6-b125-fca102ed334b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecf6a92-a330-4a19-a210-94380fdd526c", "sighting_of_ref": "indicator--a5df3397-1570-46f1-9151-48a81b0f9daf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab9d693-97f7-411b-881f-1e79b0ece014", "sighting_of_ref": "indicator--4d91635a-97ab-4325-a089-bdd0869051f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fef769-bf24-4de6-b710-97904ed7c0cf", "sighting_of_ref": "indicator--3f1ee142-7b2c-4b06-aae3-8535e8f7a6ce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb1b14e-3b0d-4085-b102-2d8e2f946c18", "sighting_of_ref": "indicator--6b06bbe7-58a8-489c-b9fc-6a5c0999f5fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa98cbe9-adc5-4e02-8d09-bff2b44afe2f", "sighting_of_ref": "indicator--c393888f-4ac2-44ca-9554-aaf008384f8c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a44dd0-9fce-4a96-864c-85e5d4ce569d", "sighting_of_ref": "indicator--008d559e-2423-4a25-8806-079a9efe5ac9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6668592-22cf-4d93-84e8-4bee764b9fdc", "sighting_of_ref": "indicator--008d559e-2423-4a25-8806-079a9efe5ac9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5ee73a-4a0f-48c8-8941-0e547ccbec89", "sighting_of_ref": "indicator--008d559e-2423-4a25-8806-079a9efe5ac9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337c8b28-0b9f-47ab-aa10-4fa07e4a40ed", "sighting_of_ref": "indicator--44f6e147-10b3-4a17-a28f-1cb4b7258c6a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805ccb32-6986-4421-8f92-3e2ec8e9316c", "sighting_of_ref": "indicator--0d37b023-31b1-48ee-98cd-166dd1e299ca", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855cc29d-5127-4cf1-90fe-da678d320054", "sighting_of_ref": "indicator--9741d1df-c0d7-475b-9d00-5e64c0d3324d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b431efc-4001-4f9a-a334-64268a715df2", "sighting_of_ref": "indicator--25a86bd5-a959-40b1-9b0b-54fecbfe1aa5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0ca5b4-49c3-4053-b268-7eb0f35f8f12", "sighting_of_ref": "indicator--25a86bd5-a959-40b1-9b0b-54fecbfe1aa5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac12d747-a2f7-4fa3-a94d-de79b5a5c0cb", "sighting_of_ref": "indicator--693cb6d8-fb8c-47af-a39d-7f5adb7afe9a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0726f343-9522-42e9-aefb-59b495ca2651", "sighting_of_ref": "indicator--93eb1378-8790-4b2d-a4e2-8d809070449e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cf7c2b-f608-4b54-9a00-2ffb07b9ca8b", "sighting_of_ref": "indicator--f994455c-fd0d-429d-96ea-53f520f9f83b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6225a993-afc9-453d-b434-1285e0660655", "sighting_of_ref": "indicator--9f7f8eb6-bc38-46ba-a0eb-d36cc0eee038", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d816b340-c216-44a2-8991-c38a9ebc7fde", "sighting_of_ref": "indicator--d88e01ff-b832-4c58-8809-dd09c0c0d4ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301d8f87-5e30-4abd-bd4b-7edb0c0d08b7", "sighting_of_ref": "indicator--17b3f829-87a2-4845-9e6a-4e31c33170ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef12ba76-1d2f-4889-94fb-03c7a229e5a3", "sighting_of_ref": "indicator--783563af-688c-4857-bc9c-d16531aef229", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d41498b-f612-4956-9903-9e07affaa76c", "sighting_of_ref": "indicator--a9db47a9-d02e-4105-9f84-08b6a3acdce9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5d4627-81e1-4092-8b1c-4ac0c2b14809", "sighting_of_ref": "indicator--1d6a1345-f00d-4a27-85da-8d8937d3374c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ff49c2-2cc6-4ca0-ba97-2e7bffd469c5", "sighting_of_ref": "indicator--0d2968f8-2fe7-421a-ab4d-046de5111432", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41ad2e3-f7b6-404a-946e-2a89ac76eecc", "sighting_of_ref": "indicator--798ac7fc-9f76-49ef-815a-8e4967f5e49b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0558dbaa-6a7d-44c6-a248-7024b40e4944", "sighting_of_ref": "indicator--798ac7fc-9f76-49ef-815a-8e4967f5e49b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4e46ba-1c95-44aa-bd88-4f6b0967ae46", "sighting_of_ref": "indicator--798ac7fc-9f76-49ef-815a-8e4967f5e49b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51201530-e22e-46be-bccf-fd26855dda62", "sighting_of_ref": "indicator--8b582d0b-73cd-418d-a720-1e44bf4839f9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92606bc8-dcc9-4f97-9d64-796b0a056edd", "sighting_of_ref": "indicator--8b582d0b-73cd-418d-a720-1e44bf4839f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197d71da-f730-4b3a-bae0-e35af05423f7", "sighting_of_ref": "indicator--8b582d0b-73cd-418d-a720-1e44bf4839f9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1a3fcc-efcd-42df-8e12-90de51aeb78a", "sighting_of_ref": "indicator--14613106-afc6-4962-b724-c82bc16331ae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4320cf33-937d-4cc6-8d5e-dbfae0f860bd", "sighting_of_ref": "indicator--14613106-afc6-4962-b724-c82bc16331ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131f9d41-14c3-4564-9ad8-e6ab87cbbb41", "sighting_of_ref": "indicator--14613106-afc6-4962-b724-c82bc16331ae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0b71eb-8ca0-4fae-aae2-700ebd3e95b8", "sighting_of_ref": "indicator--e93d1fa8-1e86-447c-b49c-be7319bc0520", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd4dcb0-34cb-469f-ad3e-712c88f0047b", "sighting_of_ref": "indicator--e93d1fa8-1e86-447c-b49c-be7319bc0520", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3505a734-4539-4776-aade-d59245e71d92", "sighting_of_ref": "indicator--e93d1fa8-1e86-447c-b49c-be7319bc0520", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6275b7dc-2988-4782-9ca4-29684755e5f8", "sighting_of_ref": "indicator--ccf8b344-b62f-44ae-8d20-76b3b8347237", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a7529f-e8c7-4c97-bccb-8c5c719041f2", "sighting_of_ref": "indicator--a00f8e73-c78b-4e20-8e95-528dcdd115c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab90451-d826-47dc-92a0-7b525c61466b", "sighting_of_ref": "indicator--8071a2d1-cb70-4d3d-b5a9-814cee8f6679", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea1bb31-7964-4618-aba6-93b5c2822156", "sighting_of_ref": "indicator--f7541d9f-e143-4b91-91b1-3920b59f2fb0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83916380-2756-4d23-8ba2-187ba1c32903", "sighting_of_ref": "indicator--f7541d9f-e143-4b91-91b1-3920b59f2fb0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd599ec-4cdb-4527-b77c-5f6646f94dfe", "sighting_of_ref": "indicator--f7541d9f-e143-4b91-91b1-3920b59f2fb0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e143c5-3e03-4bce-997b-c14bca00928a", "sighting_of_ref": "indicator--0302eed7-b935-4aff-b533-7749e7b8a3f2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99562f21-cc15-4b9c-849d-4c3f276cfe2c", "sighting_of_ref": "indicator--e3a275df-67e4-4486-b1c3-8a54302f7294", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90fd3ef-bd44-4fdd-b60b-970016e57a26", "sighting_of_ref": "indicator--0896c886-c4c3-4216-81b8-bee6253950ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351c7e24-9420-45fb-ad1d-19451229d592", "sighting_of_ref": "indicator--69dfc5f6-99d4-4863-a2c5-b1c025392e21", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f6e8a7-5f2f-4f0e-b98a-56f2317289e3", "sighting_of_ref": "indicator--2ceea160-806f-48f8-8f0a-f8bc89de4faf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb5aead-c5c1-48e3-a01f-12c42ce5162f", "sighting_of_ref": "indicator--2ceea160-806f-48f8-8f0a-f8bc89de4faf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6274b2-f6ca-4e92-954a-815d0ac3ac94", "sighting_of_ref": "indicator--2ceea160-806f-48f8-8f0a-f8bc89de4faf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9149c1-7dcb-494b-ab10-c743017a5258", "sighting_of_ref": "indicator--009a5150-02f9-4218-9014-df1865814c65", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcedafa-7692-402d-8fdc-d1de99e52bdc", "sighting_of_ref": "indicator--009a5150-02f9-4218-9014-df1865814c65", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9547c68-8788-4cd2-bcbf-55bdcaf476bd", "sighting_of_ref": "indicator--009a5150-02f9-4218-9014-df1865814c65", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4e4a8f-835f-4a52-8902-d4d8c14aba72", "sighting_of_ref": "indicator--90b0be69-da07-4f1c-a730-2f7768a31206", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c14963-1833-43c2-a721-133c06c902e3", "sighting_of_ref": "indicator--90b0be69-da07-4f1c-a730-2f7768a31206", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b1480c-121e-46c7-971c-92415ad92cf5", "sighting_of_ref": "indicator--90b0be69-da07-4f1c-a730-2f7768a31206", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f6c975-1dce-44ed-bb67-c2d156f67235", "sighting_of_ref": "indicator--dfb1d4fe-12d8-42d0-8b8a-1113eed23ec9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71719c2f-da0d-4ece-8d65-db78b8f1a54b", "sighting_of_ref": "indicator--9e5b2e2e-db65-4ac0-9fdf-20a726d45435", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37197ad3-d0d8-4e03-8cd9-011510c0ebc1", "sighting_of_ref": "indicator--0418453c-4dab-4ef6-be6a-5867bf8bccca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2b9952-7399-4cfd-8970-1640ccab3095", "sighting_of_ref": "indicator--6ca0278a-a077-4512-a8ca-07b939b0f7e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c40272-82d4-42f8-a53f-daf042472f1f", "sighting_of_ref": "indicator--cd29cd30-0299-4429-88fb-b65bf33a0994", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41da3d7-43bb-4176-be5f-2bbde43e52e5", "sighting_of_ref": "indicator--9d6d4698-1615-4961-9a94-a632c743cf9d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b23a04d-d531-4df5-90bc-46c220f02de5", "sighting_of_ref": "indicator--42ad6ea3-5e41-4d8c-af38-9da55dd33ada", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcc8559-5021-46ef-8367-a6f58cf9d7d6", "sighting_of_ref": "indicator--fe412adf-837b-4de7-ac0a-4b86e27ae7c2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aba9e37-7358-42ae-81fe-12021fc04a96", "sighting_of_ref": "indicator--769ede93-7ff7-4621-b8ba-ebaf0dd55d9a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd92e54-3635-4059-805b-aa2c3eff8c5b", "sighting_of_ref": "indicator--cb891adb-0a42-4b47-840d-713333d51336", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3637228-9065-404e-ad81-a4322c555018", "sighting_of_ref": "indicator--52b55989-155a-4b90-adb9-68b0e937f661", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08518391-fb60-43f0-b55d-a4e93ff65fe9", "sighting_of_ref": "indicator--50297e31-13bf-4302-bec2-8306d76f96f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f3e5e9-5a9e-4ca8-a2df-bf1b811d7bb6", "sighting_of_ref": "indicator--01e43b09-8882-45cc-a730-73594f032941", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d191e3-5f1f-4c51-8626-c3b60749b7ee", "sighting_of_ref": "indicator--81a0ea8f-f946-407d-bfbe-2c0b6e0624b5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e20a80-e523-4e5b-b3bd-50ddbd26bd06", "sighting_of_ref": "indicator--81a0ea8f-f946-407d-bfbe-2c0b6e0624b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e4fdf2-8b9e-4e14-b948-99ab06b47581", "sighting_of_ref": "indicator--eb2f4b97-eee9-4db3-a2dc-40076832aac2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5d0cdb-9da6-46cb-9207-5843d10beda0", "sighting_of_ref": "indicator--eb2f4b97-eee9-4db3-a2dc-40076832aac2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb43f144-c66a-4db8-86eb-6511cd7166fa", "sighting_of_ref": "indicator--eb2f4b97-eee9-4db3-a2dc-40076832aac2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79c4a18-473f-4357-af4e-d62cc39b3fbf", "sighting_of_ref": "indicator--d4b01d65-9125-4281-aa63-a0323c599aa4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc80da49-aa23-4205-9374-5ce6f9382a89", "sighting_of_ref": "indicator--f0d95f2b-eb43-4381-8aa7-b613ae885c28", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f29ca3-3497-4d1d-a373-18bef357c487", "sighting_of_ref": "indicator--54f5b40a-8a57-4f87-8bb1-f6ae216b1248", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23733675-9be7-434f-8d06-28cf1194dd0f", "sighting_of_ref": "indicator--ca92cde2-5bde-4ec5-a945-791107f05d35", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80dc9df7-4b88-4f91-8d11-b88ba3bb25fb", "sighting_of_ref": "indicator--c8ec3e81-702b-4d6d-b010-d6bcdd463a92", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61e0e24-adf6-4ef7-a0af-7822c40ccb57", "sighting_of_ref": "indicator--173b3022-cf0f-4cae-8e9a-e8fef8bd4916", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813207fc-5951-4f55-8601-9d3dc9cd724b", "sighting_of_ref": "indicator--1860f5c9-522b-4cbc-a9e9-85ac854853f4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c0eb45-d740-408c-8cb4-b14777b73228", "sighting_of_ref": "indicator--2d8be2af-ece8-4783-93d4-71c920acf4b8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db56754-08b5-45a9-8b4e-5896744e2c6a", "sighting_of_ref": "indicator--e5aad39d-f123-464c-99f1-e7ecbf638768", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a47516-10ce-4306-9766-c68554ab4b91", "sighting_of_ref": "indicator--17d75c7b-f28f-4c49-993c-a330ae9de9c2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c708ede-76b2-4164-abe0-78d4b8cd5ed2", "sighting_of_ref": "indicator--de6574f0-eb13-4aca-8802-dcb784c17c0f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb6c957-4a5b-4b1e-86cf-a9bd98813ec9", "sighting_of_ref": "indicator--b11654a7-3199-43e6-bcf5-0668131292cf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df0731e-7935-421e-8653-c7f4c7e87800", "sighting_of_ref": "indicator--974ebaee-de8b-4f70-83c7-d78055327495", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1953272-98ed-44f1-a48e-789a2c0d9a53", "sighting_of_ref": "indicator--b9ed91a2-f5c8-4ff6-8c51-f204fd2f84e9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cadc0a-34a0-48f4-87c9-6686535a948a", "sighting_of_ref": "indicator--82baf63e-1253-4218-8c01-502ee1d3405b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60931b37-3294-48bb-86c5-7cacb251bc21", "sighting_of_ref": "indicator--dd4462d6-16bf-418a-b13f-e77ee3124d79", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3ebee2-786f-4cf2-a2dd-7eb66b7c4e6e", "sighting_of_ref": "indicator--6d861bc7-1657-4e88-963c-fa46da29ad18", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa09c71b-7a43-4fc3-b7ea-6ea6eceeec0a", "sighting_of_ref": "indicator--6d861bc7-1657-4e88-963c-fa46da29ad18", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9541df1-cdca-41dd-b9d3-a575aa79cd3c", "sighting_of_ref": "indicator--c3fceaed-9b95-48a2-858f-3ccd13a60516", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228a6fc8-e4bf-4ae9-bfd1-b0e46a1ee120", "sighting_of_ref": "indicator--c3fceaed-9b95-48a2-858f-3ccd13a60516", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0fbba2-584a-4cf5-87d6-f73fb842bf36", "sighting_of_ref": "indicator--29c60b8f-3610-4c60-bd02-a57aca140bfc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fb489c-268e-4489-bffa-02537e151c47", "sighting_of_ref": "indicator--b04c4930-9fc1-47f3-8734-f265d83d981d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00ef270-76d6-4dde-84ad-a1465d6b78cc", "sighting_of_ref": "indicator--8dc33942-e5c2-4983-aeab-c1c6141f1224", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f8ae03-ee43-4efe-8344-0fcaa8b8ad5b", "sighting_of_ref": "indicator--8dc33942-e5c2-4983-aeab-c1c6141f1224", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592af73f-4f3c-4a3b-92d1-ea4b2264e907", "sighting_of_ref": "indicator--59e30fa6-2244-445b-8912-3b491b7f6542", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4da388b-fceb-491c-a7ff-dd24b7e418e4", "sighting_of_ref": "indicator--6efa4a74-c52b-41e9-8837-dfb0deea025c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6312b9c4-4652-4bef-bed4-0ee9f9251c3b", "sighting_of_ref": "indicator--0ce443a6-de96-44bf-8052-55b2c952e8df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e7fb66-fc3c-4227-87e9-b724277bb6dd", "sighting_of_ref": "indicator--0ce443a6-de96-44bf-8052-55b2c952e8df", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2b65c6-02b9-4b8b-8043-948b80ff0a6d", "sighting_of_ref": "indicator--0ce443a6-de96-44bf-8052-55b2c952e8df", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65cf60ff-5ed2-4351-99d7-ce93214faa83", "sighting_of_ref": "indicator--f59591fb-4245-489c-896c-b1e9aa35a6fd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f600ed-3acb-4fb0-9a19-4ba93fe249f5", "sighting_of_ref": "indicator--5aff3b34-accb-4137-b699-83a1d0df3154", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee57df25-fee5-4342-a82c-425ff1615d2a", "sighting_of_ref": "indicator--4d0d7005-fd03-41fc-8095-6668b1675938", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b071a4-8dae-4749-9aa8-07d34db87460", "sighting_of_ref": "indicator--6e36104a-f11a-4931-a3b3-893a82e76d74", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b011579-dbfe-4f0d-a5e5-02d1ad2f9e8f", "sighting_of_ref": "indicator--98081adf-5b0b-4056-9907-a835ff8ac269", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11802bb-b5cd-4f31-a20e-e5d1fca1d332", "sighting_of_ref": "indicator--f7c841db-c3df-496a-b175-0444841a4063", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed4456b-c12d-4115-a014-66a4b4f6a617", "sighting_of_ref": "indicator--77270c34-339f-444f-bbf9-20cb468fe1d8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db8ad6b-54cd-40cd-9c61-7fa9df088f8f", "sighting_of_ref": "indicator--496c8ad2-a5b4-4d67-9f5e-1676c2ac9f0f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382112f4-5bbe-4922-a6cb-dd1b56dee39d", "sighting_of_ref": "indicator--c208e7ad-146a-4c24-8954-78fa3707eea4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8ec740-3788-49db-b8ac-1bdb9bf3a280", "sighting_of_ref": "indicator--67483254-89f5-44d2-a2db-320748b08f83", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e569c93a-24e9-40e1-80ce-d3f411543f86", "sighting_of_ref": "indicator--37f62482-3d85-4328-b05b-3f2a76033918", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b221039-437a-4caf-97c5-cf7fcb8324a1", "sighting_of_ref": "indicator--32212b86-8054-4839-8db7-fe418063c2f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe20fb5-b248-44ba-9e74-87bea9814c0e", "sighting_of_ref": "indicator--ba48aa7f-6c02-4fe4-9372-7432ead6ff46", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb4031f-72d9-4801-ac4f-7dbbdb48de15", "sighting_of_ref": "indicator--f5bac371-a9fc-40b8-9541-4830fd527214", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e8cfbb-b51e-4a5f-bf5b-9193fda5fa5d", "sighting_of_ref": "indicator--980f955f-6140-438f-a41f-94740e2b1028", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5acb07-4ca9-4753-a5e2-b4484b5a4d60", "sighting_of_ref": "indicator--fba475ae-caf9-47ea-b9d9-b9c8cda80310", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1ea6db-ac95-40ff-b1d0-428033b646b0", "sighting_of_ref": "indicator--5e475bf7-0e69-4166-85b9-67af0cc51c4c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f625895-495b-4bc5-9f8a-99ab6e6d46d3", "sighting_of_ref": "indicator--99e980bf-7a3b-48b9-bfd8-99cf14e88b20", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48094c14-b10d-4f6a-b849-4fa66d22cc8e", "sighting_of_ref": "indicator--651d6aea-3aab-4b2b-b216-8033a529c4df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dabe53f-dbd3-481c-9d98-12cb48a1f24a", "sighting_of_ref": "indicator--cd1f7cc2-f53f-4c8f-907e-e5aa334fa9a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d50fa5-940e-4b57-9c5b-26d98f45350d", "sighting_of_ref": "indicator--8375abf6-e145-414a-960f-e0f04177150a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c19ebc6-efdb-4beb-927e-f53dc190a18d", "sighting_of_ref": "indicator--bc4e5a03-3145-4ab3-8160-657e17abf131", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5acecec-f3e2-42b6-bb8b-542b4800bbfa", "sighting_of_ref": "indicator--44daf216-09c1-41bc-a43c-311a0e14b999", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633b247b-c9f9-4ae8-9b88-e05d0f129507", "sighting_of_ref": "indicator--cbbb0f0e-208a-4479-aa72-e78815586d38", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181fcb51-2681-4ca3-863c-9a13970b1466", "sighting_of_ref": "indicator--1195c2c5-dce0-4451-bd54-37aa2f8c19ca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d672ff8-c19f-4118-b675-c34186d86a11", "sighting_of_ref": "indicator--1195c2c5-dce0-4451-bd54-37aa2f8c19ca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c51129-4f4c-47c6-b3f0-0c087a733972", "sighting_of_ref": "indicator--1195c2c5-dce0-4451-bd54-37aa2f8c19ca", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057d690c-6fe5-41ea-aa1b-462b86adc2ce", "sighting_of_ref": "indicator--01f608b8-d9fa-46ac-9cca-ac3acd1b47ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1390a857-5ed1-455e-bc13-942b1a92a5a5", "sighting_of_ref": "indicator--01f608b8-d9fa-46ac-9cca-ac3acd1b47ec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069bf75b-4f67-4fef-aa23-78f80ff4fd6b", "sighting_of_ref": "indicator--01f608b8-d9fa-46ac-9cca-ac3acd1b47ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53582348-3973-4023-924a-50fa355247d6", "sighting_of_ref": "indicator--61a7d397-e143-4668-a726-512105cea2a9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c529a50b-1f7c-49c1-8d77-38092f8a1340", "sighting_of_ref": "indicator--ccda27cc-24c5-4570-9b21-4ee52a6a521a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bab0b54-0b90-4a60-bcd6-354b457c3e61", "sighting_of_ref": "indicator--ccda27cc-24c5-4570-9b21-4ee52a6a521a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e00d0c-e236-4dfd-afd6-79cde4094c6a", "sighting_of_ref": "indicator--ccda27cc-24c5-4570-9b21-4ee52a6a521a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c9ec6c-d860-4df2-b4b1-eab9a8529a1e", "sighting_of_ref": "indicator--ccda27cc-24c5-4570-9b21-4ee52a6a521a", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67d8ec3-3c2b-4c0c-8104-32e337814bbf", "sighting_of_ref": "indicator--e0c06e42-c97f-4f0d-8ea0-5234620ceb5f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a788184d-2163-407c-9a8d-bbd79b54b258", "sighting_of_ref": "indicator--e0c06e42-c97f-4f0d-8ea0-5234620ceb5f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9581ee2e-3080-4896-b575-9e9661a7db11", "sighting_of_ref": "indicator--e0c06e42-c97f-4f0d-8ea0-5234620ceb5f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456dc087-3568-4ca7-a539-f5dccb07158f", "sighting_of_ref": "indicator--fdc4ecd4-2e18-4109-8bc5-e06df97b6999", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0838cda-79d3-4319-9dc6-9c1e86bb8197", "sighting_of_ref": "indicator--70f78ddb-c1d8-44c8-836b-390d651d35e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7c08fc-88fe-4aef-bdbc-b7617799c5fd", "sighting_of_ref": "indicator--88a7d7eb-4a63-4266-bcb6-4a0180226681", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292fd105-07a2-4223-b7fc-df14c819582b", "sighting_of_ref": "indicator--f8944128-faad-49de-aeb8-d08aba680dca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93735a75-86af-425f-ab21-2e15fd06f69b", "sighting_of_ref": "indicator--946f5d6a-da04-4e10-a3c9-ecb2c866c760", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccde0d45-b0d2-4154-bdd0-eb75aff2c3d1", "sighting_of_ref": "indicator--2469fd7f-7d88-460f-a1be-c2fa49ff751f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd9d41a-f926-40b3-a69d-771ad750760f", "sighting_of_ref": "indicator--2469fd7f-7d88-460f-a1be-c2fa49ff751f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285bdcd1-2dbb-4e2b-aeae-b79edb6b85e6", "sighting_of_ref": "indicator--2469fd7f-7d88-460f-a1be-c2fa49ff751f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9987f4e-415e-499d-8ec2-1c5ea1708639", "sighting_of_ref": "indicator--c444c368-6066-4488-ae80-c38ad120e77a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b23d839-9816-4e76-a82c-c3547f5f43c5", "sighting_of_ref": "indicator--c444c368-6066-4488-ae80-c38ad120e77a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e865ab-b338-44f3-bd80-a47c8ee4df3c", "sighting_of_ref": "indicator--c444c368-6066-4488-ae80-c38ad120e77a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd11e86-aa0b-41e1-8ffd-38bdcc041fa3", "sighting_of_ref": "indicator--3656f37a-9acf-4baf-8a35-a943656243fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7fbeb4-672f-427a-92ea-e30ad3cde2b2", "sighting_of_ref": "indicator--3656f37a-9acf-4baf-8a35-a943656243fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe08e5af-530c-4fa9-8365-5b82a67dda22", "sighting_of_ref": "indicator--d473c021-e692-458d-8c79-4481f35b8299", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b337be2-b3e7-438e-ac93-f648369e22e2", "sighting_of_ref": "indicator--e9c0e96b-b120-4f80-acd7-011ac177033e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0cd720-c1cd-4fac-9b29-23d7854b5437", "sighting_of_ref": "indicator--13608048-3762-4734-b9ba-3984a186e533", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe2cbde-994e-4579-94d6-f5d5fe01e925", "sighting_of_ref": "indicator--bcadae59-39f0-4f7d-ab81-2c64eddacb74", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd52ebe-fd7b-4e02-9e54-21b624c95512", "sighting_of_ref": "indicator--bcadae59-39f0-4f7d-ab81-2c64eddacb74", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829b3b07-479b-4892-b0bc-2a8efc347287", "sighting_of_ref": "indicator--41317110-2fa6-4ed4-9b1a-85261b49f1a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739c4ecf-7f0c-44fc-b8a3-6f8a957cb494", "sighting_of_ref": "indicator--41317110-2fa6-4ed4-9b1a-85261b49f1a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9af921-dbb9-4c99-a469-18bc0b7b4154", "sighting_of_ref": "indicator--41317110-2fa6-4ed4-9b1a-85261b49f1a5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4963f26e-c60e-4e50-958b-784e6c3206fe", "sighting_of_ref": "indicator--4626cfa3-caf7-4a59-9bcc-bd24c0e45017", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3fc778-2c5a-4326-850f-b490ad951a83", "sighting_of_ref": "indicator--4626cfa3-caf7-4a59-9bcc-bd24c0e45017", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce68acb-efde-431f-91b8-88a793dd9714", "sighting_of_ref": "indicator--3be427c3-75b4-40ed-baea-34ece4e685f6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccc9b43-df75-4fe8-8baa-0d21d373528c", "sighting_of_ref": "indicator--facb406a-abf4-46f0-9788-faa354bf1f63", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2dcadd-ab7c-4518-93b0-b8a3f58eb877", "sighting_of_ref": "indicator--c6fd72c3-f459-467d-bf29-af1c4a8b5f46", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bedd3d-5128-46f3-bdd5-e1d3686f2b98", "sighting_of_ref": "indicator--e199d8b2-8284-4eef-bea1-0f68eb00045d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a220f5-fc07-4296-9142-4c3da4215d34", "sighting_of_ref": "indicator--81dbbbf0-35bd-4f63-9cde-56246840ae9c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61df731-0766-4e71-856d-e71da4dc1669", "sighting_of_ref": "indicator--8b1cf5db-61b1-4493-bd22-778b7adf2b59", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9347dffb-8d25-45ec-b83d-cfe57f770770", "sighting_of_ref": "indicator--ccf5bddd-48f9-4292-b784-3d35a8e29dd4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931dcd38-c562-4668-93ec-c262da44e58c", "sighting_of_ref": "indicator--298d2ade-cccc-428a-b626-cc6b0c3ff568", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b46d5b-f70d-4d9b-abf6-63fe6110b2ea", "sighting_of_ref": "indicator--298d2ade-cccc-428a-b626-cc6b0c3ff568", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28411669-d8ec-4298-97fe-0cb94af83feb", "sighting_of_ref": "indicator--ebab8f16-3429-4ad6-b1bb-e2267157e5db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25689c96-7cf7-4e1b-9959-067685cae1b5", "sighting_of_ref": "indicator--c1052ba5-d425-4012-a792-2e4217a0d33c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358bb87d-7c7e-43ca-b2a0-819cfc33a10c", "sighting_of_ref": "indicator--20110dd6-e81d-468f-a85b-034bb1995bbd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30aacd2-5da2-4300-8bbc-306b526c22f0", "sighting_of_ref": "indicator--20110dd6-e81d-468f-a85b-034bb1995bbd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a44424d-323b-4bd6-a365-c3a47e060df3", "sighting_of_ref": "indicator--20110dd6-e81d-468f-a85b-034bb1995bbd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547f7e2d-f61b-4e05-bdb8-98a1bf877752", "sighting_of_ref": "indicator--45e036a2-a44c-4cd2-a352-4bd9805b33e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bdb6f2-0688-4498-bb32-ce3c357015f8", "sighting_of_ref": "indicator--45e036a2-a44c-4cd2-a352-4bd9805b33e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d128c5f7-602c-4f9e-b07f-014ce65a881e", "sighting_of_ref": "indicator--45e036a2-a44c-4cd2-a352-4bd9805b33e7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018ae4af-5bc8-4ba6-bd2c-9e8f36cd75f3", "sighting_of_ref": "indicator--25a9793e-b70e-42bc-8f4d-14ccad5fa972", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea07c55-b91d-4269-b9bc-cb1ecb7efcb4", "sighting_of_ref": "indicator--25a9793e-b70e-42bc-8f4d-14ccad5fa972", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1aaf20-1708-4fd0-98ea-ba4435e6b38f", "sighting_of_ref": "indicator--25a9793e-b70e-42bc-8f4d-14ccad5fa972", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128b1482-5394-40ad-afdc-c6e6f51b1c6a", "sighting_of_ref": "indicator--0ef4f7ac-4673-4e74-8972-6519d05b41da", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45a86c3-912f-4c79-a352-e9b512950364", "sighting_of_ref": "indicator--0ef4f7ac-4673-4e74-8972-6519d05b41da", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2410fe23-7e26-4296-bfb6-b3c68101289f", "sighting_of_ref": "indicator--0ef4f7ac-4673-4e74-8972-6519d05b41da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bba34d3-1dee-4e58-ad64-07359d570a06", "sighting_of_ref": "indicator--0baae9c9-316a-4004-809e-b9c21cb09ab7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5a932b-ff14-4084-b672-87124c92ab8b", "sighting_of_ref": "indicator--0baae9c9-316a-4004-809e-b9c21cb09ab7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2850b340-3337-46e1-9699-2ce1b593b2f6", "sighting_of_ref": "indicator--0baae9c9-316a-4004-809e-b9c21cb09ab7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe03dbf-268d-4102-bede-7f4b26003f99", "sighting_of_ref": "indicator--4a6ee64c-f72e-487c-ae23-f76556752620", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55f5e03-871c-4756-961c-c5e7523ea531", "sighting_of_ref": "indicator--4a6ee64c-f72e-487c-ae23-f76556752620", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781b8109-a6a4-496b-abec-434fa3f4db92", "sighting_of_ref": "indicator--4a6ee64c-f72e-487c-ae23-f76556752620", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1b8462-1902-4b28-a48c-06cdf57dc2c3", "sighting_of_ref": "indicator--bde4661c-4311-43fe-8164-d90b6023528a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c81dd48-b355-4da4-b064-c7b05fe2fe9d", "sighting_of_ref": "indicator--bde4661c-4311-43fe-8164-d90b6023528a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c322c44a-4b19-45e7-a635-9482c54221bd", "sighting_of_ref": "indicator--bde4661c-4311-43fe-8164-d90b6023528a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9caca1b-16fd-429e-8b57-529f0b22eba6", "sighting_of_ref": "indicator--7e646546-aa49-4b35-ab52-f5fd815e5758", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bfc8a0-edcd-4659-bd67-bcccee5bbd49", "sighting_of_ref": "indicator--7e646546-aa49-4b35-ab52-f5fd815e5758", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4403e3d2-f7fc-45bf-a3fa-6920b3a4c2dd", "sighting_of_ref": "indicator--7e646546-aa49-4b35-ab52-f5fd815e5758", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcd4f35-e9cb-4d3c-aef5-49c05069fed6", "sighting_of_ref": "indicator--1b76be66-e4dd-4549-ab30-dcc95773cd17", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06466fa-5bc3-43b8-9813-8cb8da2affc6", "sighting_of_ref": "indicator--1b76be66-e4dd-4549-ab30-dcc95773cd17", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33ccb5e-4d2b-4069-a174-f6d502ba1c13", "sighting_of_ref": "indicator--1b76be66-e4dd-4549-ab30-dcc95773cd17", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245f5d73-11db-44e6-a74c-8b3135049660", "sighting_of_ref": "indicator--3c8334a2-3796-495d-8f65-caa6faf50b39", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6fe776e-9af2-4068-b5a0-df10c3c1ed27", "sighting_of_ref": "indicator--3c8334a2-3796-495d-8f65-caa6faf50b39", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc586d9-347c-4ca1-816d-dc7e1003ebd8", "sighting_of_ref": "indicator--3c8334a2-3796-495d-8f65-caa6faf50b39", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328dfd0f-45a7-4691-8b6a-19bbc9c7c6d8", "sighting_of_ref": "indicator--ecba18cf-6633-43b5-aecc-a6dd5b720b54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9d9d5d-5ced-4c60-85c4-8ac4f2f69ead", "sighting_of_ref": "indicator--ecba18cf-6633-43b5-aecc-a6dd5b720b54", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5d1a11-4bff-4628-8f6e-ab56d5133a3c", "sighting_of_ref": "indicator--ecba18cf-6633-43b5-aecc-a6dd5b720b54", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a68fce-c400-4fa2-80a7-5dcc1bc03ab7", "sighting_of_ref": "indicator--7402e57e-e095-45a1-beea-8c72c9e715ad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e33429-305c-4ff2-9b37-0c4865820a47", "sighting_of_ref": "indicator--7402e57e-e095-45a1-beea-8c72c9e715ad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf60c9d-4f55-4183-92de-5e60d1f8016d", "sighting_of_ref": "indicator--7402e57e-e095-45a1-beea-8c72c9e715ad", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a630d8b7-7a95-41e4-9e6f-0cc7b24346eb", "sighting_of_ref": "indicator--8c22d635-86b7-4be8-82bf-ba02ab24f217", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89665d7d-71e1-4776-92f2-dff507f738c1", "sighting_of_ref": "indicator--8c22d635-86b7-4be8-82bf-ba02ab24f217", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb17b8f-69f6-4502-b8e3-79759fb8538a", "sighting_of_ref": "indicator--8c22d635-86b7-4be8-82bf-ba02ab24f217", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d93bdb-c90d-4c7d-a155-c8fdd0238ec5", "sighting_of_ref": "indicator--cc665908-7749-4bdd-8388-d3f25fb5eaf3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a392988f-efc4-4768-a099-63302f74661e", "sighting_of_ref": "indicator--cc665908-7749-4bdd-8388-d3f25fb5eaf3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46ecc58-79f3-4d82-a434-30c9669a2a86", "sighting_of_ref": "indicator--cc665908-7749-4bdd-8388-d3f25fb5eaf3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c7da1c-76e0-4111-9c90-ebe4ffeff86c", "sighting_of_ref": "indicator--526b5d3f-453e-4897-b161-2bec594f9dc3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92499157-31d1-4845-8a16-172ab5c51a6c", "sighting_of_ref": "indicator--526b5d3f-453e-4897-b161-2bec594f9dc3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b649bb5d-8bf4-4f9b-b592-72a8ef081df5", "sighting_of_ref": "indicator--526b5d3f-453e-4897-b161-2bec594f9dc3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a166435-f632-4424-b330-182c7d557fb1", "sighting_of_ref": "indicator--e86213e0-ff83-4de7-abb2-a81dc217817b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e69558a-8843-41d9-b52d-3fd312f42f1e", "sighting_of_ref": "indicator--e86213e0-ff83-4de7-abb2-a81dc217817b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74a7323-5c6e-4099-b2f4-178c52ddccc1", "sighting_of_ref": "indicator--e86213e0-ff83-4de7-abb2-a81dc217817b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c58f12-ce32-4c27-8f80-8b7564c10aa5", "sighting_of_ref": "indicator--c61a7c37-f50c-487b-8f5d-119235a7908d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f51661d-fa02-4db5-91e2-934808e6af4b", "sighting_of_ref": "indicator--c61a7c37-f50c-487b-8f5d-119235a7908d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d19638-3272-4793-af7a-d5d749b6220f", "sighting_of_ref": "indicator--c61a7c37-f50c-487b-8f5d-119235a7908d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5f2626-9234-4128-bae2-33b34cdc99e6", "sighting_of_ref": "indicator--50e9d0ab-b048-4da4-91e8-b82ab0e072c5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fe9e72-5c7e-44fa-8305-0ba4982a6a85", "sighting_of_ref": "indicator--50e9d0ab-b048-4da4-91e8-b82ab0e072c5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6402caa-e64d-423a-823c-41ec431bafe2", "sighting_of_ref": "indicator--50e9d0ab-b048-4da4-91e8-b82ab0e072c5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c742fed1-2acc-41d3-837b-b4e991254eb9", "sighting_of_ref": "indicator--69800985-043a-4a86-a27d-dc74528cf045", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ea2c87-34d7-48b1-a4c9-fbed323a93a1", "sighting_of_ref": "indicator--69800985-043a-4a86-a27d-dc74528cf045", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a80b5c-0a24-46f0-9133-08d2f39129de", "sighting_of_ref": "indicator--69800985-043a-4a86-a27d-dc74528cf045", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e46ec49-991f-4e08-a954-deed9fbf0c90", "sighting_of_ref": "indicator--14b0ef0e-0f38-4eca-966f-d1558fa043e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53722acc-3f60-421b-a1d2-af0fa255ca21", "sighting_of_ref": "indicator--14b0ef0e-0f38-4eca-966f-d1558fa043e5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884b0bf7-8849-4d5d-824f-70689f808210", "sighting_of_ref": "indicator--14b0ef0e-0f38-4eca-966f-d1558fa043e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5676eb1-64ae-45a4-85ab-3be51b1c6ef3", "sighting_of_ref": "indicator--00e09541-af02-4f67-93be-432496e639a9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d8d0dc-1057-40e9-a12f-6ab3721e6c9b", "sighting_of_ref": "indicator--00e09541-af02-4f67-93be-432496e639a9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ea698d-c072-45e6-940d-5393606fb7c0", "sighting_of_ref": "indicator--00e09541-af02-4f67-93be-432496e639a9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7ded9c-db90-4843-b8b9-8d9309f03286", "sighting_of_ref": "indicator--c9b4ebfa-42f5-4973-a3f5-8e20512d9416", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e66ac5-0b42-483c-964f-d8f5020a7ae2", "sighting_of_ref": "indicator--ea7c3ef5-b192-4617-a6f6-2ee95e0641f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fc242c-32be-450f-864d-c5f746d86b88", "sighting_of_ref": "indicator--4d1e4f8f-24ed-4d27-8a98-31dbb2e97c80", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d74b19-be0f-4369-b848-8bac1df06021", "sighting_of_ref": "indicator--817a3fd8-3be6-42c0-b1c9-b32baea08d11", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca084d5b-22cb-4659-965a-16ce72f0728f", "sighting_of_ref": "indicator--482ea2bd-bf64-4810-b24c-c364b09fb5f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9fdd2e-c8f1-4cb2-b0be-b54c52d7a172", "sighting_of_ref": "indicator--0dcff7ed-9cda-4dd9-94be-37b77e998ed7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd7d803-43b7-4cf3-87e5-ef3be091d204", "sighting_of_ref": "indicator--b9872509-229b-4b05-9692-cb0840252276", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a3c260-57de-467d-bc20-7f312349a650", "sighting_of_ref": "indicator--2fd36fac-15fe-4dfc-8236-9bb01a64e647", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ac8bc3-c288-40ad-b523-7ab3a87fc246", "sighting_of_ref": "indicator--b58f77b8-15eb-435d-819d-c2a5b1a99196", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306d5fa4-097b-4822-bd0a-cc418d13bbd7", "sighting_of_ref": "indicator--b58f77b8-15eb-435d-819d-c2a5b1a99196", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec4f8e8-858b-444c-a890-054fadc5bc42", "sighting_of_ref": "indicator--b58f77b8-15eb-435d-819d-c2a5b1a99196", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d97fc8f-af8f-4e1e-a5c1-d49b2bc774dc", "sighting_of_ref": "indicator--b2e1e08d-7947-42f4-90a3-2fd0869b91ae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fa7a63-0e9e-4c98-8bac-7766706c0b16", "sighting_of_ref": "indicator--1d276509-749c-4ddf-b7ab-1e16785fefe2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a5520a-2b76-4c59-a17f-4ac0b62482a7", "sighting_of_ref": "indicator--4764e8f8-f7ee-4ed4-a7fb-18f18b63d87f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc99a7e1-0a0e-4c97-a623-aa2540a1b4ae", "sighting_of_ref": "indicator--ede60d22-5a91-4d12-aeb3-80f4c56832ba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74074d12-2a79-40a5-8e03-e4552dd02ed1", "sighting_of_ref": "indicator--fd41fabc-8f39-4268-9d66-e7f22458b15b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555d163a-a3eb-457d-ad71-2a32031f745b", "sighting_of_ref": "indicator--a331a1d3-e231-4b0e-bd9d-aa61dadb59cf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2001e368-09be-46f3-b0b3-e98208332336", "sighting_of_ref": "indicator--923f006c-cc68-4b7c-9f63-103079951b2a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fedd5c-435d-4275-8a09-796579543e25", "sighting_of_ref": "indicator--f1b45d0a-3fdb-46c3-bc28-66ea62f72cc9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92558d0a-8efe-4e7d-bd45-f7414c59695b", "sighting_of_ref": "indicator--2b65db93-7e21-4958-94ca-156e37fd016e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6d0617-edcc-4e38-913f-2eb8148c7a98", "sighting_of_ref": "indicator--cc77840b-568e-4314-9969-e19cf398721d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2486506b-0dab-4cd9-bb68-15e8f63b8432", "sighting_of_ref": "indicator--93b46e8f-af1a-4898-9297-57116c953a6d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6083b848-b22a-46ac-94a2-49554df54eff", "sighting_of_ref": "indicator--893fac71-21d3-4649-a0eb-f816cee92f65", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990d1c2a-9951-4bf8-ad2e-c80fe32c7cc0", "sighting_of_ref": "indicator--fd49b0d1-a5c4-4243-8cd9-e0dd9d955646", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9aa9f79-ff48-42fe-97ba-d0ec137b0453", "sighting_of_ref": "indicator--fd49b0d1-a5c4-4243-8cd9-e0dd9d955646", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607c3923-d8b2-4b5c-83b4-38e44c48d1bc", "sighting_of_ref": "indicator--fd49b0d1-a5c4-4243-8cd9-e0dd9d955646", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e570cde8-0486-4b07-b4b9-fbf370bd04cd", "sighting_of_ref": "indicator--6cf5110b-6ce3-4be4-abe6-9a54eb91a122", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c7537c-ab1c-483b-9494-849637cb3ca8", "sighting_of_ref": "indicator--3cb15f7f-507d-4701-9958-5e078ce13edf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b950b1d-7f1a-4d3e-87cd-e4dd3967338b", "sighting_of_ref": "indicator--5c773f31-a351-4c0b-a54b-16c8fac9c438", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9678a67-11ea-46a4-92d3-cedba8b550bc", "sighting_of_ref": "indicator--900a3707-8638-499c-8acc-9cf8060931e0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610f9aca-4731-4aa2-9b99-c4853814fb88", "sighting_of_ref": "indicator--74e7a520-8799-4fd2-91b8-a241392d00bf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dafce31-3d77-4016-9e89-c9019168c052", "sighting_of_ref": "indicator--fe945389-f07d-4583-9e00-a3b54412e02b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3772e2a7-54e1-427a-95cb-25529c1b9a4e", "sighting_of_ref": "indicator--4949c2eb-c279-4111-87ac-cccb9f409617", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc40eb87-2826-4cde-a29d-33aaff2da401", "sighting_of_ref": "indicator--4949c2eb-c279-4111-87ac-cccb9f409617", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329e2cd7-2aca-4487-b752-731503084943", "sighting_of_ref": "indicator--4949c2eb-c279-4111-87ac-cccb9f409617", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f35c29-972f-4021-9e8c-7b10b19e549e", "sighting_of_ref": "indicator--113d5082-9ef4-4ba0-a4c4-61fd95c65106", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc83d8b1-0a51-4bed-b86a-860aa5c55000", "sighting_of_ref": "indicator--27297e26-2778-4cce-a742-7d8d1518f5c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614b5918-af32-4a48-a05b-0e01384c23ae", "sighting_of_ref": "indicator--4e13da33-b4cf-4faa-87cc-4f8888b0f66e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25754ffc-0a0d-4a88-a48f-c6f2c03f62af", "sighting_of_ref": "indicator--4437435a-77cc-4412-99fb-90e44e9b9826", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c6919a-edf8-4949-afcb-21234ec68d94", "sighting_of_ref": "indicator--6516ea4f-7169-4c7d-bffe-276b6bbaf4af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d851a6-a49f-4c2b-b92d-99f92b0959d9", "sighting_of_ref": "indicator--fef1d4e8-179a-4f9c-860a-632610e15f34", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b2425b-c06f-48ac-be3f-e633b9040eca", "sighting_of_ref": "indicator--fef1d4e8-179a-4f9c-860a-632610e15f34", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fce988c-f041-474e-b834-4f222893ec0b", "sighting_of_ref": "indicator--b8f76ef1-952f-402f-b23d-ea86fead9671", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b27e6a7-9f6e-495d-88c7-effd1ac24a46", "sighting_of_ref": "indicator--fa326c19-0f35-403d-bbb6-792a385224ae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56520526-178d-4f24-9385-87791096a744", "sighting_of_ref": "indicator--c88e817f-7903-449e-abfe-30d5ef8daecf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcae3cc-f8b8-4bba-98f7-1149c0b6d724", "sighting_of_ref": "indicator--c0b2e27c-db44-42bc-88f8-3568afac4a60", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab9c6b0-efb9-48db-b6be-a95faa324389", "sighting_of_ref": "indicator--18023c23-06f2-4e81-9427-72c8f2062d48", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed55d76f-e389-4ce8-9981-6260fde623c9", "sighting_of_ref": "indicator--d2e36d88-5ad4-4fec-aa6c-53585d172325", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0358ebbb-7c5f-4af6-ae44-ff977e92e4ed", "sighting_of_ref": "indicator--11324c37-4112-44e5-90b0-6042af679379", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618eb25f-13b1-4cb1-b7d9-89151cbc0de5", "sighting_of_ref": "indicator--7d3bf482-cd4c-4ad0-8ecb-fe9a7e3c2b0d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ab21a7-612e-4f36-b9e3-fed3eeebc347", "sighting_of_ref": "indicator--2107b0a3-ffd3-41e2-a16d-44e4c034d020", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ee8577-4bec-4277-a6d1-6ee86e060d87", "sighting_of_ref": "indicator--a0b64b59-d946-45b6-9d9a-07fc206ae655", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d05a52-156c-426d-adeb-90b07f7abc0c", "sighting_of_ref": "indicator--0918e993-66e7-4b94-a12e-ce47743ca5a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75292e89-274d-4de3-b9c5-5ca217458cc2", "sighting_of_ref": "indicator--b13efe3b-5171-4629-b513-88a307bc5df2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e093e7be-d9ee-489a-8549-c8531d97cd9e", "sighting_of_ref": "indicator--abdcebf6-cb95-4b71-9165-481bec44f4fe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa450bf2-b1b2-4fa1-8423-9ea6c8dea16d", "sighting_of_ref": "indicator--bee57c86-57a8-446f-af5b-90a0e48d0e49", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0665b5-b82e-440d-a4e5-acc506d568e7", "sighting_of_ref": "indicator--70d03c97-874e-4d22-aedf-92d6a81f58f9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71dd0244-920c-4bec-a618-5460c4f87dda", "sighting_of_ref": "indicator--70d03c97-874e-4d22-aedf-92d6a81f58f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e5c2e3-cbab-4480-8b63-eeb92fa523ea", "sighting_of_ref": "indicator--70d03c97-874e-4d22-aedf-92d6a81f58f9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859933e1-2280-48f2-959c-464c6648653f", "sighting_of_ref": "indicator--cd1a9754-5fee-4487-b149-93087137e939", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17653c29-efd8-42e4-b32e-b40f5fd9c918", "sighting_of_ref": "indicator--cd1a9754-5fee-4487-b149-93087137e939", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926f04c6-57c3-46e5-b5f2-1b820a105b95", "sighting_of_ref": "indicator--cd1a9754-5fee-4487-b149-93087137e939", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c4db2a-91c1-4151-ab01-2e8db6f97f7d", "sighting_of_ref": "indicator--afc91723-e1a4-4be6-a043-7984851e3711", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabec13b-9ef6-447e-8753-a0f54a99725d", "sighting_of_ref": "indicator--afc91723-e1a4-4be6-a043-7984851e3711", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf880da-40be-499e-adc0-0b18224ffb84", "sighting_of_ref": "indicator--afc91723-e1a4-4be6-a043-7984851e3711", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21717c91-ca98-489c-82fc-9d9d23962967", "sighting_of_ref": "indicator--bbcb11d2-86e1-497d-b5fd-c83783b38a85", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c34f5bd-8838-4d42-929b-fc13437776e6", "sighting_of_ref": "indicator--5e3d1c60-638e-4559-8593-5bd60e688e42", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02411d4-0605-4ee9-a9b5-ee9e315ac736", "sighting_of_ref": "indicator--23fc3946-fc69-4f7e-9e94-38f0f87f4434", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e717d6f-a849-413e-beae-2d5b0892cdb6", "sighting_of_ref": "indicator--6f90f379-09ed-4613-8ccf-ac9f948ee559", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a497216-fcea-493a-a58b-15afcc95fcf7", "sighting_of_ref": "indicator--a7bf500a-12a2-4a25-9cb2-7e14a1e62e74", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e7a22e-faa8-4491-b713-971f7318272d", "sighting_of_ref": "indicator--ac58e96a-a83b-41f4-ae8a-c1be5abf0e97", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7f90ec-63e8-4107-a6c4-3cf51a28970b", "sighting_of_ref": "indicator--5e8841ce-fd46-4909-98cf-a278de035e04", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2c1035-fd93-4b67-8f3e-19349e4952dd", "sighting_of_ref": "indicator--5e8841ce-fd46-4909-98cf-a278de035e04", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0a8186-58a5-4cf5-a96b-a08d654b8612", "sighting_of_ref": "indicator--5e8841ce-fd46-4909-98cf-a278de035e04", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5657d3f0-f563-4622-8572-d05ea21da2a6", "sighting_of_ref": "indicator--8f33b941-c916-424e-ac44-f13c33a23d40", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ddbde4-0e79-4de6-ae19-2a3321033c86", "sighting_of_ref": "indicator--8f33b941-c916-424e-ac44-f13c33a23d40", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cddad75-d31a-4792-8f4a-9e3402a49e45", "sighting_of_ref": "indicator--1d50aefa-0e5a-4433-9fd5-9118ed0138ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8c654b-de50-491e-969d-03f72e26770f", "sighting_of_ref": "indicator--fcaf79e8-9eb9-4b83-8671-169c5288123a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e476a5d-875a-45c9-b443-7039f5af3fd8", "sighting_of_ref": "indicator--920ccd2e-551f-4379-8536-dc389eac4d87", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4699411-412d-456d-ae15-819c825e46b6", "sighting_of_ref": "indicator--a8ef81f8-bfee-42b2-a497-bc2c26b793fd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee247862-506e-4da4-852f-2b51e135b27f", "sighting_of_ref": "indicator--12d27477-d98e-46d4-bf1e-9ed3eaa2f675", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94ab27b-d261-4d79-98c8-709f35b060d0", "sighting_of_ref": "indicator--7126cde7-8907-4586-9554-b0c17568e813", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f4717a-1e1e-49f4-9801-70dc16e595c9", "sighting_of_ref": "indicator--7788e759-a04c-4d57-b609-e8e605b64ee5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a252db63-0235-4b19-93dc-86e7531c1571", "sighting_of_ref": "indicator--7788e759-a04c-4d57-b609-e8e605b64ee5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234544c5-a668-4ffe-8eaa-caab958d10da", "sighting_of_ref": "indicator--7788e759-a04c-4d57-b609-e8e605b64ee5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcca3403-af24-40c6-8d3f-f544ab3f771f", "sighting_of_ref": "indicator--e0e40cb3-e0e0-42eb-b0ec-2cc5017ffde1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30983f07-9f86-4743-b0f7-9a72720f94f0", "sighting_of_ref": "indicator--e0e40cb3-e0e0-42eb-b0ec-2cc5017ffde1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990ee31c-f836-4260-a031-3e9d89ad70d3", "sighting_of_ref": "indicator--effbdb89-3ef4-4195-9274-1ed4e88f4a20", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608df020-1819-4136-bdf7-acce2c4a0a70", "sighting_of_ref": "indicator--5825fd18-3b71-4456-a916-e9f4196e9878", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a016d1-0faf-402c-aeda-b1c917842ac1", "sighting_of_ref": "indicator--fe8f4c80-1c1c-4a11-8d7c-07626ab266e0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739a6869-fd7a-45c2-a883-4141714427b4", "sighting_of_ref": "indicator--a3dba47f-de6a-473e-aff9-c9de988385dc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49f10e0-2ed1-4092-ab71-ca2fd7c18b44", "sighting_of_ref": "indicator--a3dba47f-de6a-473e-aff9-c9de988385dc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a22ba9e-7b26-4c5c-a9de-74988d782e5e", "sighting_of_ref": "indicator--fc2fba1c-b041-4c37-af81-936e8cb96424", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6669e6-1799-473b-a1f5-17a34bf9bd02", "sighting_of_ref": "indicator--fc2fba1c-b041-4c37-af81-936e8cb96424", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9955a6df-d69b-4421-b5eb-24688cfd293e", "sighting_of_ref": "indicator--561a01e2-bb7b-437e-845f-25b82bc8c173", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5ba79f-88fe-4a2c-a3a7-9a68e75c027d", "sighting_of_ref": "indicator--dd78eca9-f025-48ee-ae15-36b6fbdc9710", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dec8a0-3b10-4d65-a697-afb5a53fe25e", "sighting_of_ref": "indicator--dd78eca9-f025-48ee-ae15-36b6fbdc9710", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c683fe2c-b2a6-4d09-84ea-3b5e5ee5f1ba", "sighting_of_ref": "indicator--e2d92212-2378-47f8-8433-99977baa5c69", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6140a26b-1275-4cee-9ea4-d7df9c74d45e", "sighting_of_ref": "indicator--e2d92212-2378-47f8-8433-99977baa5c69", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660af4dc-26a0-4005-98ee-78d015a174ae", "sighting_of_ref": "indicator--e2d92212-2378-47f8-8433-99977baa5c69", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be0a1f3-ad48-4991-9a06-d7dd7b60b38b", "sighting_of_ref": "indicator--63f3296d-4a8c-4e08-965d-92780661aad6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52a6f96-74a7-43e8-a6ba-268c9ee89e09", "sighting_of_ref": "indicator--22f71df1-af6e-4753-a0dc-c233988f3f89", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f746d8-49fd-4764-8a60-59a215b3c34f", "sighting_of_ref": "indicator--4d70f054-1367-42b6-90a1-66dc5cf4ed67", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4ffb4b-1b77-4492-9926-45b50d01174a", "sighting_of_ref": "indicator--fe5e5717-e283-4a3b-a670-34669af69f0e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c514161-581d-4a9a-bb2a-c4e2f0ba8886", "sighting_of_ref": "indicator--771efeb0-8302-4b92-9dc4-29bc22810896", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fc2288-a993-4340-935a-9f2cd3d6ed63", "sighting_of_ref": "indicator--68e8f766-8250-4a8c-bc28-6755876c18a3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f15d28-b62f-4784-b142-e7daa9ad5b62", "sighting_of_ref": "indicator--68e8f766-8250-4a8c-bc28-6755876c18a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbb6348-234a-4fb6-849c-161d7ab3a6e3", "sighting_of_ref": "indicator--e4a7cdc2-a14a-462b-ad78-e7d2dbd8bf03", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232949a2-e3f3-4ebc-b07b-2237be53c26a", "sighting_of_ref": "indicator--e4a7cdc2-a14a-462b-ad78-e7d2dbd8bf03", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1e03ce-15ac-4572-832e-a79e79504436", "sighting_of_ref": "indicator--e4a7cdc2-a14a-462b-ad78-e7d2dbd8bf03", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043ae7c7-72c2-44b9-8450-d7f7b8b7264b", "sighting_of_ref": "indicator--bca11799-1fcf-4bde-a30b-2ed8c91c8bfc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4421d10-2b76-4b89-b0c7-4538d93383d9", "sighting_of_ref": "indicator--0473b28c-7b27-4fad-9013-bf7a52206fc8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4ec602-baed-4003-84a0-56c5a606f6b7", "sighting_of_ref": "indicator--0bb18a22-9565-4abe-9f37-b3d1c6eae2f9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01974981-3031-4bab-a745-73fcd18085bc", "sighting_of_ref": "indicator--30a6cf31-ec7c-4f1e-bcfd-0b3b38d5a046", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0af8326-d408-4186-969d-d5d26a13f04c", "sighting_of_ref": "indicator--30a6cf31-ec7c-4f1e-bcfd-0b3b38d5a046", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2978ca-7000-47d2-9a90-b7404abe4233", "sighting_of_ref": "indicator--30a6cf31-ec7c-4f1e-bcfd-0b3b38d5a046", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e51417e-0fdf-4664-b31e-da8f9f0ac695", "sighting_of_ref": "indicator--42ed1c57-8517-4647-ab03-2bbb6720cbe1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77ff480-f69f-46d8-80d9-2717111553e4", "sighting_of_ref": "indicator--42ed1c57-8517-4647-ab03-2bbb6720cbe1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ec530f-111b-4886-9e9c-94a5fa6a9912", "sighting_of_ref": "indicator--310f8c45-e536-4c58-b307-516cce7dcf60", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d3df79-a7b9-49be-ae1e-9619cfd5488d", "sighting_of_ref": "indicator--3f8d7366-5f0e-4454-9479-73b548d6964b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84f3140-34e1-49a3-a454-abd72c92f939", "sighting_of_ref": "indicator--c27c11c7-df72-4dee-adff-5e0ef80c1f05", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee5080c-bc91-479c-b2a1-59d735226af5", "sighting_of_ref": "indicator--b69a28c2-6d8a-47ea-8eb4-d71e976bea0e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9896013-ac1f-4ba8-bba3-16d4171bb057", "sighting_of_ref": "indicator--a872df5f-a0e3-4708-9b38-a453eb49c926", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b23fb09-a97e-4788-91e2-d67c7387a5be", "sighting_of_ref": "indicator--c0d83016-91b2-4fc5-932d-96735a8b6698", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bbd783-068a-4e96-bc64-a9cc2b318a6b", "sighting_of_ref": "indicator--c0d83016-91b2-4fc5-932d-96735a8b6698", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4e0ac9-3d37-45a6-b07c-cc2b6372c0b6", "sighting_of_ref": "indicator--96efb79f-e8b4-4dc4-b813-24367a1a8b61", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c365995e-d20f-4f37-8e8c-6f0484f27921", "sighting_of_ref": "indicator--3ff16d5d-1050-48db-afc7-e1fa5d7921b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdaab7d-0962-4e11-94fe-f85451c83ca7", "sighting_of_ref": "indicator--3ff16d5d-1050-48db-afc7-e1fa5d7921b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfafbb2f-0ecb-4388-b8a9-10d23b30ee31", "sighting_of_ref": "indicator--49f6d78d-efce-4d79-936c-71926f7d87d2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054443ea-f178-4da7-a078-83ea0e898209", "sighting_of_ref": "indicator--49f6d78d-efce-4d79-936c-71926f7d87d2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9101480-5ad4-4397-97cd-1a88e8318a66", "sighting_of_ref": "indicator--902f76d1-5007-4a00-b6cd-23d35d4192b4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6eca6b-9cd3-4068-b7c4-9d3b37e9adea", "sighting_of_ref": "indicator--c288334a-4564-449d-a4ff-dc64c465982e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26610b24-b2a8-4415-bf1b-d79c64f0b875", "sighting_of_ref": "indicator--c288334a-4564-449d-a4ff-dc64c465982e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0117bf6b-38de-495c-985e-e8c03ccf801c", "sighting_of_ref": "indicator--c480a1e1-7048-4585-9155-093b3080d0f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe92f76d-7e2f-47de-a785-e42992614db0", "sighting_of_ref": "indicator--dfe9ac7e-c3c3-451f-9dd2-7d12593d040f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bc4101-d4c8-4700-9692-aa61798d8c07", "sighting_of_ref": "indicator--6d999fd7-3235-4655-9365-023d17771240", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c3f6cd-718b-4d23-8fd0-ed65c51f70c3", "sighting_of_ref": "indicator--301c7261-c72a-42c3-9514-1d752a4a9a42", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05856738-9b8f-4134-b092-78ba87cd3b57", "sighting_of_ref": "indicator--cdb4ed8f-ca45-4b70-90b2-b63b09545f93", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49dfa99e-335b-450a-a47e-84c02fbbe843", "sighting_of_ref": "indicator--cdb4ed8f-ca45-4b70-90b2-b63b09545f93", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83dad739-cb31-4f3b-8417-ac030f6f5fa4", "sighting_of_ref": "indicator--cdb4ed8f-ca45-4b70-90b2-b63b09545f93", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fa6472-07e0-4ed3-bf7b-c49b19554994", "sighting_of_ref": "indicator--f86cf9a7-9650-4fc1-96e1-214d460998c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bfa207-30dc-4ac7-b4c1-8c70c720ffd3", "sighting_of_ref": "indicator--f86cf9a7-9650-4fc1-96e1-214d460998c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a08df3-ae5e-4d0e-b555-cf6ee950f1ef", "sighting_of_ref": "indicator--f86cf9a7-9650-4fc1-96e1-214d460998c6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d257fe-03d1-421a-aa9e-dd47bb5ab77a", "sighting_of_ref": "indicator--1c277e4c-b867-4375-8e8b-ad132e11f368", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916cadfa-5166-4f5a-9b2c-51a28a9e928e", "sighting_of_ref": "indicator--2f2474d2-e416-4ab2-b331-4adc30bf8b89", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ffb097-d4d5-4084-89a3-de721e6e5da0", "sighting_of_ref": "indicator--e321fb2f-f224-456f-a7ac-310543317313", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b815aa-a974-4c7b-83b7-459c7c411f35", "sighting_of_ref": "indicator--e321fb2f-f224-456f-a7ac-310543317313", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72eb909c-71ca-412c-bb6c-dfc68c2e677c", "sighting_of_ref": "indicator--e321fb2f-f224-456f-a7ac-310543317313", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862d38fe-4552-4f9e-8914-1e60d01327d0", "sighting_of_ref": "indicator--ea4c8159-9ed4-4d22-89ad-201372e6871f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd8d2c1-5d6b-43bc-9e3c-08fc2d7d167e", "sighting_of_ref": "indicator--854c042a-86de-46c0-b98a-7eb66254f2c4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6374a7-0796-448a-923d-772d2e7ed97e", "sighting_of_ref": "indicator--854c042a-86de-46c0-b98a-7eb66254f2c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc77f558-c618-4af8-b6c4-b7a887b6dda2", "sighting_of_ref": "indicator--bfc27f4b-49bc-4e32-86b9-6f21c7dad2fa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b09f8c-a995-4042-841e-d69570f7091a", "sighting_of_ref": "indicator--220fc0c4-903d-4a41-a601-026c703b9f13", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4168e83e-05a1-428c-9ab7-30344f4d6d30", "sighting_of_ref": "indicator--e7918c41-85f8-47d3-b5ef-7508f919678f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a9b593-f4c9-408f-a55c-e1481e53c187", "sighting_of_ref": "indicator--e7918c41-85f8-47d3-b5ef-7508f919678f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5829b776-0c55-4ac3-be6f-96d5c9ade413", "sighting_of_ref": "indicator--18a86dd8-4005-487c-9aa4-04cc3a4a6331", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4af0820-0de0-4831-bc6c-5d1207ac6bec", "sighting_of_ref": "indicator--18a86dd8-4005-487c-9aa4-04cc3a4a6331", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5ae305-4224-45f8-b10b-20cb1b49dbe0", "sighting_of_ref": "indicator--8135a989-6c8d-4b8a-a14b-bd5783c4ee2f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3b30de-769d-4c3c-81fb-6ca6c77c8c0b", "sighting_of_ref": "indicator--26f4e840-75f4-48cf-b081-b3cc31193ab0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab50547-fa43-474c-a8a5-6ece2a03f38f", "sighting_of_ref": "indicator--26f4e840-75f4-48cf-b081-b3cc31193ab0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d68867f-dd86-4061-9cc5-d0c6a0a4c427", "sighting_of_ref": "indicator--26f4e840-75f4-48cf-b081-b3cc31193ab0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7578d4b1-c9a1-4478-9a7d-786b90a786fb", "sighting_of_ref": "indicator--6c9e0294-c99a-4caf-a3ff-cee5db1e5355", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2308b9-f303-4ce2-834d-1954b7d37026", "sighting_of_ref": "indicator--6c9e0294-c99a-4caf-a3ff-cee5db1e5355", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910d1dff-2631-485e-b89e-ebb423e5c634", "sighting_of_ref": "indicator--8edfea54-40db-4b83-b5ae-bc6a9bdec8ce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbda8877-5139-4f5e-967e-8278c33babf5", "sighting_of_ref": "indicator--8edfea54-40db-4b83-b5ae-bc6a9bdec8ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067010f6-6b30-4020-879b-539ccf5ace0a", "sighting_of_ref": "indicator--3fa99a80-766b-4e52-b415-eca88971bd3c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7821bbb2-1b8a-4d91-8802-0b699288488b", "sighting_of_ref": "indicator--e6da2f18-b0eb-41cc-a3b5-ac25e8b4eed7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c624574d-2d4e-4a59-9f3c-f3969caf6517", "sighting_of_ref": "indicator--baca0119-509d-4084-adde-b23e50067349", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85295c4-6493-4d8c-90bd-974b1e647216", "sighting_of_ref": "indicator--baca0119-509d-4084-adde-b23e50067349", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675db8bb-bb26-439f-8fa1-d9280546fe5d", "sighting_of_ref": "indicator--d796b4fc-69f7-4ac7-bc69-8d4f095a46cd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1d99f0-0ee3-4462-ae01-cde4884f3df5", "sighting_of_ref": "indicator--02fb897e-25fe-4c27-bcdc-ef4421f4c826", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8009794a-351d-40db-97fd-b916c79492d2", "sighting_of_ref": "indicator--02fb897e-25fe-4c27-bcdc-ef4421f4c826", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46904828-debd-4e2e-86ed-ad7b7dc8715c", "sighting_of_ref": "indicator--02fb897e-25fe-4c27-bcdc-ef4421f4c826", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada9e8c5-d12a-4523-a9ca-43a83e91f0f7", "sighting_of_ref": "indicator--41f9273d-8ead-40ac-9708-1ecb6e58cdbb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e63d8b-359d-4e0f-aa3e-a0441dfcff03", "sighting_of_ref": "indicator--f731070f-e5ed-4e13-b9fc-654a66070c52", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fecdc46-bda9-4624-bcc4-7758f4c6c607", "sighting_of_ref": "indicator--a67f015c-8a41-4c3f-b092-2c2f8446a88d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfeeede5-82ad-4129-be5f-3f341846839e", "sighting_of_ref": "indicator--bb52f750-8b88-4be5-997c-536ee96a0c42", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5940ad15-29ea-4ff2-a29e-5a16c8e90a43", "sighting_of_ref": "indicator--e7f226e9-be25-4b14-bf1a-b1139070f25b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1b5c62-60c6-436e-bb5d-83f2ad1878d7", "sighting_of_ref": "indicator--e7f226e9-be25-4b14-bf1a-b1139070f25b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce16dd5-8e08-4914-a555-9b0f6dcb6641", "sighting_of_ref": "indicator--e7f226e9-be25-4b14-bf1a-b1139070f25b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9dc7b3-15e5-43f5-9a68-ed7450f60f44", "sighting_of_ref": "indicator--1d6fa672-ff31-4638-879f-2fc935ce8753", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fc2f10-3a12-4cb2-b57f-ee3ffafe43bd", "sighting_of_ref": "indicator--cd886699-e074-4fd4-ae3d-2a28627c2c4c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53b1875-238d-4792-89c7-259ebb64adc0", "sighting_of_ref": "indicator--903c84bd-7ad7-4e40-9bd9-0b665fdc17cc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e61506-42c2-4240-9c0f-496512258056", "sighting_of_ref": "indicator--2e68c6f7-0069-406f-9054-17fdc6b78bd9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bffe438-0326-421c-a48d-f73fc0fbff15", "sighting_of_ref": "indicator--2e68c6f7-0069-406f-9054-17fdc6b78bd9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092763b8-90b9-405e-8a95-42464605e3db", "sighting_of_ref": "indicator--2e68c6f7-0069-406f-9054-17fdc6b78bd9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91da421-09a2-437f-874a-deb978fdbbb0", "sighting_of_ref": "indicator--4ec23c81-918f-44b1-a6d4-75ac871456cd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f801953-bad6-4395-823c-778ac3b2dbef", "sighting_of_ref": "indicator--4ec23c81-918f-44b1-a6d4-75ac871456cd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46ea481-4a9a-444f-b98b-75a1c5953fc4", "sighting_of_ref": "indicator--156f675f-653c-495c-a38d-d501f0ba5901", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd03ed30-08c0-4d4e-b1da-c4ff90617a06", "sighting_of_ref": "indicator--156f675f-653c-495c-a38d-d501f0ba5901", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cad51b2-e0d3-4735-9e80-7ed1bdf72a46", "sighting_of_ref": "indicator--029d1d28-4050-49d6-8d2f-6714cfcf0a7d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1007dde4-3f21-4f4e-85a9-f96570b49187", "sighting_of_ref": "indicator--029d1d28-4050-49d6-8d2f-6714cfcf0a7d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7af1a75-ae35-476b-be75-e052bf7d9aa7", "sighting_of_ref": "indicator--1894bf8d-5cd9-48ef-b70f-2804567d01d9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187d682d-162f-41fb-91b5-bc52933201b0", "sighting_of_ref": "indicator--1894bf8d-5cd9-48ef-b70f-2804567d01d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c548a852-976c-424c-8e89-5b84ce417fa5", "sighting_of_ref": "indicator--1894bf8d-5cd9-48ef-b70f-2804567d01d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ba74dd-bc48-4643-8257-7d6f611fc1b0", "sighting_of_ref": "indicator--70c2fa78-edae-4a5c-85d0-e6500cb518e9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df6c09c-a687-4880-9c36-25fbdacabbd2", "sighting_of_ref": "indicator--a40421da-8459-409e-80b3-e0a369c7b5d5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a24f2f5-cf1b-45b0-960b-104f891e76b0", "sighting_of_ref": "indicator--17751528-0cfc-4bae-bf44-8ee1e33f6240", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335fc546-5342-4985-aeb6-c69abce4e65a", "sighting_of_ref": "indicator--17751528-0cfc-4bae-bf44-8ee1e33f6240", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6032f0bf-4452-4dbe-8cfb-67526f99daa7", "sighting_of_ref": "indicator--95f59b7c-84c5-4209-8f96-a2551def4bfe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d26b482-1ea3-49e2-b710-a71e031f3e41", "sighting_of_ref": "indicator--b623178f-59fa-45b8-ad0b-ae109e0bbb3f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3241153-8abf-4c21-aa13-d344cc4c7da3", "sighting_of_ref": "indicator--55e050fe-aa55-4498-a126-0aa49e621333", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53205393-6e04-4bd8-9a67-5df407edd6f3", "sighting_of_ref": "indicator--464a03cb-ffa3-4283-bcd1-802eec1de2df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d634525e-99c8-4d21-a9d4-cb822b21aec5", "sighting_of_ref": "indicator--583a596d-7ceb-4dc3-8ddb-6ff851698c55", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc105b16-6248-4bd4-9520-6d8f0a4aa4c9", "sighting_of_ref": "indicator--9f6ce960-ab75-4b52-9d61-90560647e56c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a01ce9-cfcf-4570-9c24-a03eaa2d73dd", "sighting_of_ref": "indicator--2f7e52e8-bf9f-4904-a4d9-e783d64c4c0e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b6a937-2a7e-4279-9f3f-5e5062414cb1", "sighting_of_ref": "indicator--2f7e52e8-bf9f-4904-a4d9-e783d64c4c0e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e08615-b833-40b1-b9c7-5b40e7387ba1", "sighting_of_ref": "indicator--36a14f1c-7b95-463d-b8f6-d8993c6dcfbf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09f59db-e266-479f-a9a2-b4a58a001895", "sighting_of_ref": "indicator--36a14f1c-7b95-463d-b8f6-d8993c6dcfbf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92205832-74ee-481c-af75-cfc18b934a3c", "sighting_of_ref": "indicator--9959fcf6-c568-413e-ab5c-633271e2f0e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad1ad9c-f75c-4c8d-8261-ff408f2496ef", "sighting_of_ref": "indicator--94f75a06-6716-4441-9a29-5a854070e908", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3bacc7-64e9-4e5e-bca2-9f0c6483d4d2", "sighting_of_ref": "indicator--c5c02517-ead5-4e31-b758-b9eb4c8e2bd1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71c4e7b-3695-4acd-b600-c22fda5a2669", "sighting_of_ref": "indicator--73132554-4572-4746-8649-193e3e92e9b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0498efbb-8529-4b3a-b40c-3b12682b3412", "sighting_of_ref": "indicator--b172a423-e969-49dd-abf9-74c33518a72a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3632999e-b0d9-4a4b-b1fc-51569af0cbbc", "sighting_of_ref": "indicator--cada2e90-9284-4548-937c-d044ca5baf65", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce40a0de-7617-43d8-971f-8503fa28c4b6", "sighting_of_ref": "indicator--40051f39-bc88-44f1-9e74-16afffc3a1ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b36d77e-b178-4e85-852a-06e342224747", "sighting_of_ref": "indicator--40051f39-bc88-44f1-9e74-16afffc3a1ef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd2e3f1-50e9-4677-9cac-38b69faf2144", "sighting_of_ref": "indicator--cb299ff9-b82b-4e02-afab-a8d3c758781a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de683c26-6360-451c-ac2f-d48281faf964", "sighting_of_ref": "indicator--cb299ff9-b82b-4e02-afab-a8d3c758781a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59258a0-c30a-47ef-ad09-16223bb15983", "sighting_of_ref": "indicator--dda7a037-1ed1-4f4d-a06e-6cdc2ba12b7b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa7e1a5-24f7-4a6f-be8e-279b9813691c", "sighting_of_ref": "indicator--dda7a037-1ed1-4f4d-a06e-6cdc2ba12b7b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24973eb1-5274-4fb6-871d-4b45ba4273de", "sighting_of_ref": "indicator--6d2b3cb2-fb79-410f-8ea2-34400713fdf7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d356e7-4c3d-4cfb-8747-adff1d084e2d", "sighting_of_ref": "indicator--6d2b3cb2-fb79-410f-8ea2-34400713fdf7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2671af3b-8c1d-47bd-becc-314dffdc0222", "sighting_of_ref": "indicator--30140a12-b40f-4698-96e7-48a8d7936e09", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2eaa4de-fcc5-475d-84c5-f538f02704fa", "sighting_of_ref": "indicator--8ffcab6d-a2b8-42e0-85d7-ce927217af61", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c031efa5-0602-48f1-8c2a-ebc000eee5c5", "sighting_of_ref": "indicator--84b34dd0-67df-484a-b577-3a4200eb0893", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12c2f28-eb0b-4a01-80ab-70fcef2a4628", "sighting_of_ref": "indicator--afcb3276-32e8-4c67-afb1-3a05195a422c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e893dd-8b59-424e-8a38-4b5427b667c6", "sighting_of_ref": "indicator--92032598-7c26-4ceb-bcd4-5c03256a4980", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51463e62-e312-46b2-a53f-e915edcba886", "sighting_of_ref": "indicator--92032598-7c26-4ceb-bcd4-5c03256a4980", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e48efb7-0279-4e04-bdee-4086b3f9a985", "sighting_of_ref": "indicator--e97c43e6-6622-49bf-8b8e-3d2d432d2c9e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3936f61d-f6c8-4f2e-be27-94e797360121", "sighting_of_ref": "indicator--3ed92191-e281-46c0-b259-a426d88d02ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f04ac0-a189-4d40-bc6f-0340e7fda84b", "sighting_of_ref": "indicator--3ed92191-e281-46c0-b259-a426d88d02ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06ae526-ada0-4c58-9008-c2d1afee8e0f", "sighting_of_ref": "indicator--17e42283-5d49-4676-8951-37f455ef3f4b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bb0ca4-0f4a-4185-8104-1331bfc2d70e", "sighting_of_ref": "indicator--401b98df-b5e6-457b-ad41-682b594638a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5771ffb1-15fa-4810-8b95-da5986db8131", "sighting_of_ref": "indicator--8c6e9ddd-8d18-44c2-8c24-b8c53c16a982", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f228cf25-7b94-46b8-b120-6ac4c5d5f8e6", "sighting_of_ref": "indicator--0631deb9-48a3-4d26-a598-496e435e796b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b7e300-ef6f-41d0-8b57-e35a64b40390", "sighting_of_ref": "indicator--863b7604-a38a-443a-b041-0451ca5e4374", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9c92ce-0e2b-4257-b067-ff0e21fa4206", "sighting_of_ref": "indicator--863b7604-a38a-443a-b041-0451ca5e4374", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a6dab0-bf06-4d5d-a616-9b8459e71bb8", "sighting_of_ref": "indicator--863b7604-a38a-443a-b041-0451ca5e4374", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bb9984-ebef-424c-a00c-d735e64a6c20", "sighting_of_ref": "indicator--7d463601-4ecb-45d2-b764-e9762c01f8a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764eb53e-be23-4ad8-a449-e1074296174b", "sighting_of_ref": "indicator--7d463601-4ecb-45d2-b764-e9762c01f8a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4a31ec-5180-41d3-9f69-cefbe63862fa", "sighting_of_ref": "indicator--7d463601-4ecb-45d2-b764-e9762c01f8a5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32487e5f-f9bf-45f7-bbbc-5ab364366985", "sighting_of_ref": "indicator--4ab9bb7c-ecdc-424d-b3b7-5cc56232f8fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53fb014-4a9a-4948-ae40-27480430657e", "sighting_of_ref": "indicator--4ab9bb7c-ecdc-424d-b3b7-5cc56232f8fa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2d600b-0cba-43be-85a5-9a6bc2119241", "sighting_of_ref": "indicator--3936c28c-f33a-4a22-8797-89dd93009b8f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e3d550-0387-4af1-955c-09c843297040", "sighting_of_ref": "indicator--3936c28c-f33a-4a22-8797-89dd93009b8f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2eebd3-4166-446b-9880-dc58b2c9087f", "sighting_of_ref": "indicator--64be7a7e-84f8-4c5a-84a8-551021f26a3b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5466d638-88df-4956-b0f0-520d6a8dc878", "sighting_of_ref": "indicator--64be7a7e-84f8-4c5a-84a8-551021f26a3b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c66d7e-0703-42e3-80ac-9ae35f5d613a", "sighting_of_ref": "indicator--64be7a7e-84f8-4c5a-84a8-551021f26a3b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0faad041-b5ce-4c52-804b-bf3dfb584b32", "sighting_of_ref": "indicator--0575dec2-d666-4b75-9007-5e6455d4724b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6600ed2e-f153-41e1-955c-fff9331131bd", "sighting_of_ref": "indicator--0575dec2-d666-4b75-9007-5e6455d4724b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4802ff40-b81f-463d-8412-0f1af4aa39a9", "sighting_of_ref": "indicator--0fc2aad7-e08e-4af7-af90-9e7f2f1171d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9da1563-ded3-4ab3-a10b-46020b60fef5", "sighting_of_ref": "indicator--0fc2aad7-e08e-4af7-af90-9e7f2f1171d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28ed402-4d88-4dc2-9476-c9bb0102bb2e", "sighting_of_ref": "indicator--0fc2aad7-e08e-4af7-af90-9e7f2f1171d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcca5b62-2f34-43d5-b61e-44f220cdac03", "sighting_of_ref": "indicator--b6725a53-ff62-4c1e-9703-1e1bcd43523c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45686fc9-1465-44a1-8e8e-a04ac7451ea2", "sighting_of_ref": "indicator--af5ed964-abf1-4d47-b1cd-cd4fa356f26f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510a0dad-eef8-4a49-99fe-2a86876256f3", "sighting_of_ref": "indicator--af5ed964-abf1-4d47-b1cd-cd4fa356f26f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08577527-2881-45f8-a7bf-2b65f2335921", "sighting_of_ref": "indicator--7ced4f6f-3788-42cf-8b6c-d36aee5a2a79", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1e4ed3-0c60-47dc-bc94-998b49bccefa", "sighting_of_ref": "indicator--92cbcdd5-ce81-4111-bcee-480bd6dc97e0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac08e17-5e20-484c-911b-a4b045eda592", "sighting_of_ref": "indicator--92cbcdd5-ce81-4111-bcee-480bd6dc97e0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228f90ce-638e-487d-b87f-8c2296c1be93", "sighting_of_ref": "indicator--3623c6ed-4020-4d4b-86b9-c47962a82b66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc5a927-bfed-4a73-acd0-79bb7ea1c04c", "sighting_of_ref": "indicator--3623c6ed-4020-4d4b-86b9-c47962a82b66", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddaa587-2437-4267-bd42-ddeff03afd0e", "sighting_of_ref": "indicator--66aae84d-7921-41ea-80f3-4da04ab1cf12", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9052d31-b7d9-4ecb-844a-78f91bebeff8", "sighting_of_ref": "indicator--7fccbce4-84eb-4adc-88fa-56114f599f1e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a22219-fc82-4cd4-8bf1-53a666140576", "sighting_of_ref": "indicator--88275249-8efb-47c4-b26d-737177b3ddfc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289766b5-b85e-4f1f-a732-9992e5170cdf", "sighting_of_ref": "indicator--56f8072f-227d-476e-ad3e-4375d3d12124", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df01acec-4a0c-49d3-b7fa-79d26155c96e", "sighting_of_ref": "indicator--adfedd79-5e53-4e46-ae3f-26860fcf7112", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17aaab2c-03be-4889-ae46-295a1151936d", "sighting_of_ref": "indicator--8b0af923-a754-4821-82a2-5d52f0609a50", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce2313a-b426-4f05-945e-c158d62fa2cb", "sighting_of_ref": "indicator--82e33a7b-a6d8-4d11-b217-09e27ddd4994", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6961d5-136e-4a76-8633-c9a61c5a4e3c", "sighting_of_ref": "indicator--82e33a7b-a6d8-4d11-b217-09e27ddd4994", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7389bbce-73d1-40bc-b49b-57dbb057af14", "sighting_of_ref": "indicator--82e33a7b-a6d8-4d11-b217-09e27ddd4994", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a32bfc-2ac2-47b7-980b-8f501ff9fd47", "sighting_of_ref": "indicator--f9b684fc-cefc-4949-9e57-5774a8ff0c5e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34ad008-a01e-4197-a3c1-d93350dcdbc0", "sighting_of_ref": "indicator--f3115e75-ba5e-46d3-b4a4-10842dee9f19", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be04d2c-0a91-446a-b481-dcf32365c042", "sighting_of_ref": "indicator--f3115e75-ba5e-46d3-b4a4-10842dee9f19", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d4ed29-7303-43a5-9b2e-df6b94b2ceaf", "sighting_of_ref": "indicator--f3115e75-ba5e-46d3-b4a4-10842dee9f19", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6654206f-758d-4bfd-8069-eaf0247d4b83", "sighting_of_ref": "indicator--a96f0297-422e-4a1d-bf13-9e03908d6471", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb371bc1-52be-44b9-9fc3-c28946878248", "sighting_of_ref": "indicator--a96f0297-422e-4a1d-bf13-9e03908d6471", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5be2efd-fac1-4b9e-88ed-158f9a2b6f97", "sighting_of_ref": "indicator--c755335f-f8ea-49f2-91d5-f8369e3543fc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0df5c9c-9c7c-4eae-9a3c-3593b2e30cf9", "sighting_of_ref": "indicator--ef1ada65-b38e-46b5-b94b-1df65199e626", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599ac628-470c-4347-91d9-d55454a93df7", "sighting_of_ref": "indicator--ef1ada65-b38e-46b5-b94b-1df65199e626", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7221faf-b9c1-4ae5-8d8e-44fb61aff8c8", "sighting_of_ref": "indicator--5a36e48f-2ad6-4a1f-a0e1-cc986e153205", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f17e33-d691-4199-b602-097bd086a60c", "sighting_of_ref": "indicator--a892c285-eee1-44cf-bf85-145800615254", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46380702-959a-4713-bdc7-2212d316e1ec", "sighting_of_ref": "indicator--a892c285-eee1-44cf-bf85-145800615254", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77125d2d-4ea9-4303-8469-9d5b648970ec", "sighting_of_ref": "indicator--e52b4a88-8a1b-4846-bccf-bb14e917bccd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a334ed50-ca1e-4138-9b67-36cce61c6af2", "sighting_of_ref": "indicator--e52b4a88-8a1b-4846-bccf-bb14e917bccd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a2cdcb-1b1e-40a5-b657-7cd41c507800", "sighting_of_ref": "indicator--e52b4a88-8a1b-4846-bccf-bb14e917bccd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33600454-1f9c-49f3-a900-59004990776a", "sighting_of_ref": "indicator--db0cc275-7bbb-4f76-91cd-4661c9d76d37", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc21c50-457d-48d2-bc74-39da61c45f17", "sighting_of_ref": "indicator--db0cc275-7bbb-4f76-91cd-4661c9d76d37", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d61499-0e35-449d-9d03-d163931dffd9", "sighting_of_ref": "indicator--db0cc275-7bbb-4f76-91cd-4661c9d76d37", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb841b5a-8ef2-450a-adfa-001ff57ad432", "sighting_of_ref": "indicator--79d0f84d-9b52-434e-a113-c852f78ef986", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19d3273-acd3-4795-9425-bf4ac0f46f6e", "sighting_of_ref": "indicator--79d0f84d-9b52-434e-a113-c852f78ef986", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156cb14d-52c0-42b6-a837-122b87e0e106", "sighting_of_ref": "indicator--b198007a-4917-430b-9b64-7918652609dd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7149ce5-0678-42fb-b9f6-2dc84db6d0b8", "sighting_of_ref": "indicator--323b60f6-830b-43c2-a4d0-2b471f35a4ed", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69980d7-c4cd-4da9-ab9c-1b0fdba3fa14", "sighting_of_ref": "indicator--457b4ef4-90f2-46cb-b97f-8771ee4546fc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc84802-d83c-4887-bbfd-007280a7a9bd", "sighting_of_ref": "indicator--479849cc-e009-43a0-93da-c5d030991832", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91dde0eb-6798-46ad-ab01-cbac5ebdd41c", "sighting_of_ref": "indicator--479849cc-e009-43a0-93da-c5d030991832", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d39fea-2a26-4c10-a62b-c1ec601b07a7", "sighting_of_ref": "indicator--76439b6a-7919-496d-8976-a1aa6b6e065f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78931d5-92b1-4e0d-94e3-504b88739a2f", "sighting_of_ref": "indicator--76439b6a-7919-496d-8976-a1aa6b6e065f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6c7673-ada7-453a-bce1-786ea47916fb", "sighting_of_ref": "indicator--76439b6a-7919-496d-8976-a1aa6b6e065f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb8a02d-4edb-4cd6-81dc-a20e3dd93653", "sighting_of_ref": "indicator--61b6e527-537f-4ca4-8451-31f1c23ce8cc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4551a7-225e-4ba0-b17e-a97afe9e075e", "sighting_of_ref": "indicator--66085a2d-949e-4dad-9014-9cdafa30dfa2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e418125b-220b-4184-b521-5e647a06dffa", "sighting_of_ref": "indicator--66085a2d-949e-4dad-9014-9cdafa30dfa2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d53201-c0ce-4ba7-8d32-9b1447cd906e", "sighting_of_ref": "indicator--66085a2d-949e-4dad-9014-9cdafa30dfa2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbf597f-832d-41ae-8541-b41804ee3e4b", "sighting_of_ref": "indicator--0a01c34a-8967-4a60-84ae-f0e1962b3813", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a5f737-907a-44fc-b3ad-9a0546e2b2de", "sighting_of_ref": "indicator--0a01c34a-8967-4a60-84ae-f0e1962b3813", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae37b9ae-b154-4750-98a0-12a11c6d292c", "sighting_of_ref": "indicator--0a01c34a-8967-4a60-84ae-f0e1962b3813", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a002b449-a257-4ae5-bb70-00531d6659fe", "sighting_of_ref": "indicator--acfcf48d-681b-43ef-8d40-95b9e21854be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1c833a-cd8d-4312-854e-4ecc4abfd843", "sighting_of_ref": "indicator--86d3119c-5b3a-4f8a-ba34-258c252f54dd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d292b11e-ae82-4a6f-be03-a781c9105338", "sighting_of_ref": "indicator--f156e3c8-3f13-4c05-9d32-62fb17c3934c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada24005-ef19-4029-a61c-d99d09e64049", "sighting_of_ref": "indicator--ec5b7d6f-35fd-4818-bf8b-e86d7c9ede65", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7026607-71c5-41e7-a9e7-1406a519492e", "sighting_of_ref": "indicator--ec5b7d6f-35fd-4818-bf8b-e86d7c9ede65", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6a5d77-1f04-4a65-b9f0-6b2a667413fb", "sighting_of_ref": "indicator--3a451d0f-7114-4074-b2d9-45e49a93effd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0063d6ec-91b1-492a-a428-4083881c8304", "sighting_of_ref": "indicator--3a451d0f-7114-4074-b2d9-45e49a93effd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e35d259-632b-4f58-9c44-052db0943d51", "sighting_of_ref": "indicator--3a451d0f-7114-4074-b2d9-45e49a93effd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205649df-9184-4443-ab1d-dc089dc50719", "sighting_of_ref": "indicator--2f5e3d90-5ab0-47cf-a7aa-8b4303ecd314", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145884f0-68c5-41f4-8538-9c2ba5d3766a", "sighting_of_ref": "indicator--2f5e3d90-5ab0-47cf-a7aa-8b4303ecd314", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f210006-a461-4a4d-89b6-77f12c66fa89", "sighting_of_ref": "indicator--2f5e3d90-5ab0-47cf-a7aa-8b4303ecd314", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409b7258-28d7-476c-b3a9-8d0128be8037", "sighting_of_ref": "indicator--77655349-ebc2-4a2a-af92-ee380711af8e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c43ca4-6c99-4510-8006-885d817ff4fe", "sighting_of_ref": "indicator--77655349-ebc2-4a2a-af92-ee380711af8e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a253d4a-127d-45a8-8842-2e30d479e340", "sighting_of_ref": "indicator--9cb5aa88-f1ff-4bb6-a57c-9777bd655bf1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8fe041-921e-4796-9bc1-064f4d28b791", "sighting_of_ref": "indicator--9cb5aa88-f1ff-4bb6-a57c-9777bd655bf1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f6e82c-26ce-4d69-b97b-0d96ebaa5f25", "sighting_of_ref": "indicator--9cb5aa88-f1ff-4bb6-a57c-9777bd655bf1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7576d8a-f6f9-444b-bc7a-1caefca6cec9", "sighting_of_ref": "indicator--6b9f0063-0965-44f3-a471-94a43652e053", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf961e4-6027-4fcf-a2fc-9678ea2d2390", "sighting_of_ref": "indicator--9a761a55-a02a-4eef-9ba9-e1a6baae2a8d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b7360f-3aa1-46c7-846e-ad7a85af1053", "sighting_of_ref": "indicator--9a761a55-a02a-4eef-9ba9-e1a6baae2a8d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f43a7d5-92bb-43bf-8e28-7577d168b021", "sighting_of_ref": "indicator--c98fca2e-d999-45f3-a46c-0f4914d9cd51", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db6a9b0-ae6f-427e-b02f-0b04215e2141", "sighting_of_ref": "indicator--0ec112ca-80b4-4aaf-8218-90f79b64082a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52216347-b73d-4d55-b87f-d2f20940a4f2", "sighting_of_ref": "indicator--0ec112ca-80b4-4aaf-8218-90f79b64082a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066532f1-31b5-4e0d-8042-adc87c9d9cf4", "sighting_of_ref": "indicator--2efa3271-f66d-49c2-8d77-a50e80fb653c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee71b29d-bc05-418f-8dd5-1be41104e221", "sighting_of_ref": "indicator--2efa3271-f66d-49c2-8d77-a50e80fb653c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d80f965-5a5c-4e7b-926f-20baa45a3b97", "sighting_of_ref": "indicator--e74cd3d6-549d-429b-9b07-1c3daf87ceec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e18cd2d-99ca-403b-84f2-f49ed86dbb53", "sighting_of_ref": "indicator--e74cd3d6-549d-429b-9b07-1c3daf87ceec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1cec75-b0fa-4574-b888-3dc56caeabaf", "sighting_of_ref": "indicator--05a22343-5129-48c4-9385-80ad64080be9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508c3b0b-844a-4553-87f0-e263e9dc580e", "sighting_of_ref": "indicator--f08d2e00-7ced-41bd-858e-31d0df38aea9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe7fc1e-cead-44e1-a4b4-6f4fd88cb841", "sighting_of_ref": "indicator--f08d2e00-7ced-41bd-858e-31d0df38aea9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fc2f8c-e2c0-46cc-85f8-4e16fc61081e", "sighting_of_ref": "indicator--c26a66b7-f7ef-4c7c-a9b2-369ca4ddf203", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f923eefa-dbe9-4175-b5c8-dbd77e52ca8a", "sighting_of_ref": "indicator--3359f8e7-d9d2-4086-a0e1-92bfd28434f9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5801db-20b4-4e16-9969-d63143878d17", "sighting_of_ref": "indicator--5190a28f-8739-4320-af09-d327ff4d2dc8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcd31bc-f634-4a78-8f59-480ed3f104f0", "sighting_of_ref": "indicator--2afd694b-089f-48bf-b08e-7e2bc0bf5fd2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aceec6b-839a-4330-96b2-98b77f668444", "sighting_of_ref": "indicator--e135c31c-9240-4369-bbc6-21e2911025a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93502b3c-139e-4195-9145-4549e9b70d1d", "sighting_of_ref": "indicator--73250750-42ee-44cd-a6b3-2075852bc2ec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6ef82a-5a60-4b58-ae69-c22100263e21", "sighting_of_ref": "indicator--73250750-42ee-44cd-a6b3-2075852bc2ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e850931-5b12-436a-9bec-573bf81793a2", "sighting_of_ref": "indicator--0a28637e-3b9f-4975-ab89-b94ccbdc39a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e720cef0-196b-4fd2-a694-1148ab75583d", "sighting_of_ref": "indicator--57dec02a-0754-4148-a384-47e779935448", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3df5fe-482d-451b-bf47-4e1dcc61d5b0", "sighting_of_ref": "indicator--7d1476e6-f1d6-4f86-a76d-516b3fcca10d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d843f65-e2eb-4899-b14d-fc128bf07fed", "sighting_of_ref": "indicator--7d1476e6-f1d6-4f86-a76d-516b3fcca10d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d3d2a0-32f3-43e8-b834-47a2a6f7ffa5", "sighting_of_ref": "indicator--730be465-f728-4568-8034-e0205a1586cf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659ea66d-158d-43e1-a6d5-e9b23a4d2d97", "sighting_of_ref": "indicator--886ae0d2-c678-4f93-afec-2effd9d2886d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13510e7b-ebfe-40aa-be97-9557b5cd1e6a", "sighting_of_ref": "indicator--dfc01bc9-6134-4101-b3e2-c6b052a1b0b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bbc971-6a19-474d-a88a-544a549bd771", "sighting_of_ref": "indicator--83d19589-e2bb-4945-9da5-a996b844c98f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298c726a-afbe-4afe-bed9-9c22a2fe316e", "sighting_of_ref": "indicator--cd09da01-afc1-444c-86ac-db449d17e01a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a38995-ed44-45e9-a6bc-ce586b0b6a6e", "sighting_of_ref": "indicator--0b836ba9-b66f-4141-ac95-89c076916462", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d04fd1-0fb2-40b8-9af6-339ebfb5975d", "sighting_of_ref": "indicator--c11f2eff-0c43-4cb4-8760-b209625cd1e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f404414-aa73-4137-867d-4cf12dd161b1", "sighting_of_ref": "indicator--b3d0db7e-8a9d-4235-9024-26eeffdd253d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25abe77f-525a-43a4-922e-1e6630a768ee", "sighting_of_ref": "indicator--801a8f92-c31d-4986-a9f5-2e494ccd269a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da6628e-82d1-4500-83a3-aa32bf7074aa", "sighting_of_ref": "indicator--103c5978-0fe6-46c5-a53b-ae9bfd5e3e38", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96221313-891a-4c28-a24f-ce039a004376", "sighting_of_ref": "indicator--103c5978-0fe6-46c5-a53b-ae9bfd5e3e38", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66d8dea-94e1-4018-b106-736042f5df22", "sighting_of_ref": "indicator--12baa887-a655-439f-bc39-738c292c1d5e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449fe656-5203-425d-9f05-4819e21d22e1", "sighting_of_ref": "indicator--d7bca207-2b8c-4b97-b8b1-110394fdbeb3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0bd827-886e-464e-9167-2877f9f89947", "sighting_of_ref": "indicator--b4840230-e260-405c-b7be-9340b01706a4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecca4d4b-098b-4424-98f3-15559f21ac41", "sighting_of_ref": "indicator--c6be6beb-db26-4764-9eea-306b6baa7c1d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447bf60c-b9f0-4375-8a67-f1f4fd4435be", "sighting_of_ref": "indicator--6932d041-982d-4dab-ae16-66f7fea4dcbf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fb37ea-81cf-494a-9540-b5cc8085c8c9", "sighting_of_ref": "indicator--95132609-2aa5-4e4f-83c8-0f688292e7d6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16801350-9c48-4d67-a402-bf6b7eb03851", "sighting_of_ref": "indicator--0e64910b-d7f7-45e2-9596-640381f82360", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69662eb-bca6-4561-911d-e42c83cc0652", "sighting_of_ref": "indicator--f196c5f7-69ac-44c1-8936-c5330cae9862", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5756929-3bfd-4bc6-a58e-eec7dda9366a", "sighting_of_ref": "indicator--895893f6-8af2-46c8-bcd6-73c101cb2eaa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c989e20e-e92d-4ec8-a6e0-28b7e2db8116", "sighting_of_ref": "indicator--da99fddb-6534-43af-a45f-6f241b490c01", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf1c0d6-2797-4190-a42d-7ece8fdc0913", "sighting_of_ref": "indicator--c9f0551a-7a04-460f-aa02-4e65d1f82595", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f361866f-53e5-495b-ae50-e361f4832c16", "sighting_of_ref": "indicator--5102adec-8f33-4dcd-bef3-98e2977027e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cfe626b-3ae9-4c9b-ac26-05514dab1073", "sighting_of_ref": "indicator--560bec05-0a92-4be9-aed1-c92e74fb5fa3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3d8f27-94ed-49d7-9ff9-8459ef4c9290", "sighting_of_ref": "indicator--f1a58287-892e-4162-847c-68ced058367d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc02dd5-9f4c-4198-a95c-8725f120eea9", "sighting_of_ref": "indicator--43b78c17-2fb3-4da4-bbfe-8b8d4058dbc6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d270c9d-b6f6-462e-8c6a-19ea09b16103", "sighting_of_ref": "indicator--3ba9ce1d-5966-4cf8-b624-59502b851789", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c739b08-f67c-4520-aa9e-49c1f0f41e5a", "sighting_of_ref": "indicator--43a29c7c-70fe-4040-bd46-652d54923505", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab6769b-7722-4f1c-881f-efb576cab01e", "sighting_of_ref": "indicator--534948d6-bba8-469f-81eb-cf4890c2c7d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd1721a-e222-425f-9a69-8d13f3cb8488", "sighting_of_ref": "indicator--54b75d83-9479-4b1f-acfe-fcfb015f0433", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e650f2-f414-4c1f-94a7-6d002394aa05", "sighting_of_ref": "indicator--ba48bc40-0239-4190-a032-29d666188dae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52573802-6fcc-451b-bcee-e9424cabf49c", "sighting_of_ref": "indicator--67b4cc6a-ab9d-410b-af0a-585eaf34e083", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eea235f-7221-4f0a-971b-aa3575761f62", "sighting_of_ref": "indicator--ae0307f3-b5d2-4738-b794-c1c38fd3c789", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf766c79-b142-4638-9018-4eff78bc51c2", "sighting_of_ref": "indicator--19a30363-c7de-42d6-bbfb-025b39369320", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e60582f-2d4f-4ecb-aa64-59db55e062be", "sighting_of_ref": "indicator--a81def6d-11c7-471b-8113-d5f846dd9520", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83ad528-fcb3-4a6c-a7f7-86d9e0680fa6", "sighting_of_ref": "indicator--a81def6d-11c7-471b-8113-d5f846dd9520", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc0c8b6-2a59-4aaf-ac64-07e96cbdda53", "sighting_of_ref": "indicator--2b4b6784-17c7-469f-8969-95d518a5eec8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aebbb6d-4bcd-484b-a545-bb312dd214a3", "sighting_of_ref": "indicator--e332fd00-f657-4d18-940b-7d68cdbe64f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac80fb4a-bb9c-4c65-a533-8944924c2f2d", "sighting_of_ref": "indicator--474a89ee-82fb-4d52-804f-7bf9b6230658", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4344143a-62f8-459c-a2b8-46543cb86811", "sighting_of_ref": "indicator--3bba85eb-97cb-4eaf-9351-3356ff3d1ee9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1511be49-2371-4e38-bef2-407b3fb5052e", "sighting_of_ref": "indicator--d5b0465d-7837-46eb-918c-ad052d29904e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5dda77-5d09-4082-8424-0ddd497af3e8", "sighting_of_ref": "indicator--f7617127-d69c-4e41-965f-03748f9153b7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca8e612-f0c3-444d-94b1-f42984bb48f2", "sighting_of_ref": "indicator--f7617127-d69c-4e41-965f-03748f9153b7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3723ee94-2db4-43ff-a3e6-2442b8518fd0", "sighting_of_ref": "indicator--75ec8792-12e3-4792-a629-d2fd0a928add", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1edfea7-b91e-4975-86ea-9f84432d9df8", "sighting_of_ref": "indicator--7a7deb11-52ab-4321-9434-24b0683eadf4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61ca342-43ce-4c06-914c-953a86753728", "sighting_of_ref": "indicator--7527f88b-da10-4633-b9e4-2248d5370912", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1dee3c-031d-4c8f-99af-43bd20ba644a", "sighting_of_ref": "indicator--7527f88b-da10-4633-b9e4-2248d5370912", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991195b5-2727-4868-a54e-f3ff4ea6975c", "sighting_of_ref": "indicator--c265685d-e510-46ef-95f4-52625196eeea", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c73c07-4962-4af5-8715-259cc8f88213", "sighting_of_ref": "indicator--52f7e885-ec7e-4cb6-b212-c25a740edb69", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5af785-432e-4ec0-8ac8-fab70588d225", "sighting_of_ref": "indicator--bcb5d8ee-a92b-410c-b17b-59708298ce8a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f2af36-92a6-4cb4-9ec2-15ed1112c900", "sighting_of_ref": "indicator--d54d898e-8a8a-4998-bc16-5da4bed50a1f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c13312-dd67-4d28-9645-595e24f5b78d", "sighting_of_ref": "indicator--d54d898e-8a8a-4998-bc16-5da4bed50a1f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a1c721-f985-4bfc-8940-9aa4a8bef246", "sighting_of_ref": "indicator--5c5cf079-49a3-482f-81af-8ea984764ff8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cd4b46-fdbb-44db-9002-85cc75ba6531", "sighting_of_ref": "indicator--039bac7e-327c-4e3b-bf35-97d26b7a8270", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90758c6-2ccb-4ebe-a1ef-cd273c9c3712", "sighting_of_ref": "indicator--6ac91d76-e895-4ca6-8773-b6d7cd9e0973", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08a9ccd-b3a2-4e0b-a64e-8f44bf232a43", "sighting_of_ref": "indicator--7b7d2daf-dfa1-45fb-b3df-d84e774be99f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b66326-2673-4179-b7dc-23273bd6bae9", "sighting_of_ref": "indicator--b577bc8c-262b-454a-b30a-d8fe6e440b95", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085e243c-8267-40a1-bce7-b3c661bdc912", "sighting_of_ref": "indicator--0ba545b5-caf6-4e9a-ac41-eae887c03448", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7602bfd0-b72f-49f7-a204-63b1eb8c100a", "sighting_of_ref": "indicator--022162b4-d33b-4d11-869a-c4169a4954a1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b43db48-3108-4252-8670-1383b2454584", "sighting_of_ref": "indicator--fb8a4b03-d1cf-47df-9d2a-4e8eee9804cb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e2b8a7-83d6-4b83-af9b-b39f28c30055", "sighting_of_ref": "indicator--456254ee-8995-414f-b6b7-e170735f17a0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875096b1-ad1b-45ff-aa3b-9aea09f3447e", "sighting_of_ref": "indicator--456254ee-8995-414f-b6b7-e170735f17a0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c43255-4854-4850-86d5-2afb9797c061", "sighting_of_ref": "indicator--660a5702-f15a-48c8-966c-6d3fffcddc09", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaeca994-4f86-4bf1-87fa-3dfd3718b11e", "sighting_of_ref": "indicator--03719c19-011b-412e-903c-ff79e0715743", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55be6eb-7895-486b-9d06-34137f307f72", "sighting_of_ref": "indicator--4abf49ec-993c-4c81-88fc-3bfc284dd5ca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9e0ba2-1e8e-482d-97b3-20880e038588", "sighting_of_ref": "indicator--b61843ac-495d-4996-8f34-8484ec4bc83a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa6b66f-d9de-4d8a-a6d1-9e1436bbdc16", "sighting_of_ref": "indicator--6e449b97-8d69-4db8-9311-bf133c4bd438", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd2586c-a379-4810-879f-a1582988c915", "sighting_of_ref": "indicator--ca440e9f-1a5b-460d-a56b-d20cc1e8379d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a70dda-4587-4a42-b8d9-0a607e26beb0", "sighting_of_ref": "indicator--eb1ef7a3-a6f3-4172-8ab2-46826e5f64c2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7e277f-ea2a-489f-8a42-f8063299ec8a", "sighting_of_ref": "indicator--eb1ef7a3-a6f3-4172-8ab2-46826e5f64c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455a7401-e0b8-4c11-bb13-338fb7768b41", "sighting_of_ref": "indicator--24b21996-439a-460f-b0c9-de055048f8f4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3563130-76a4-4bc4-a564-19a27fc288d2", "sighting_of_ref": "indicator--cd86cc8d-bbc8-4c3d-bfa2-6a1289b968b6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb66858-2da6-4630-b84e-82d7865ce775", "sighting_of_ref": "indicator--92a430ba-4a00-49e7-97bd-8a67230978e4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f916b7b5-1bc1-4166-b792-c9a32e2fef9c", "sighting_of_ref": "indicator--92a430ba-4a00-49e7-97bd-8a67230978e4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf54c86-1b56-4293-b6e2-357d3be1fffe", "sighting_of_ref": "indicator--62b8c39b-d892-4111-972a-f9d84c1bc629", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e25e12b-a637-4608-ba8d-5dc4f0bd9e58", "sighting_of_ref": "indicator--676881d4-1ea3-4c15-abfd-a4b1fd7eb1a9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f928585-9cbc-4acf-855b-00fdc3996b5e", "sighting_of_ref": "indicator--198def6b-e267-40de-98c6-ebb6c417f6bf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40073528-7847-4819-8d1d-aeb1e21c2445", "sighting_of_ref": "indicator--bf3eb523-ee29-4e1a-b003-4781b7cdee41", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9df578-fafa-4468-8bd6-fe43bce809b0", "sighting_of_ref": "indicator--3654373b-b4d4-4b36-8bb1-62284c8edcdb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb2cfea-711b-481e-a2da-baf23bca011c", "sighting_of_ref": "indicator--3654373b-b4d4-4b36-8bb1-62284c8edcdb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7461da97-fd14-42ea-b4ce-8d4684dbfb5c", "sighting_of_ref": "indicator--9c366358-1740-400d-9562-6a845f51f815", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1191891-da75-4461-a8a1-bc7817aba485", "sighting_of_ref": "indicator--9c366358-1740-400d-9562-6a845f51f815", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4cc123-569f-49ea-bad4-2d167a9b2eb7", "sighting_of_ref": "indicator--53096258-e2f3-4789-9556-b4f3a02e1072", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c210dae4-f654-4fb4-b9bc-841b5077e142", "sighting_of_ref": "indicator--9b6e4d8b-635a-40e6-8a7b-ba51d0742f66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78f6ba3-5c45-45a0-a572-c06da9e060f4", "sighting_of_ref": "indicator--35297631-7621-4ef1-8243-743c2a219d0d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734bc793-88ff-4298-a18a-7c4870038929", "sighting_of_ref": "indicator--35297631-7621-4ef1-8243-743c2a219d0d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2141fdc7-2d95-4891-a446-1d9691bfcc73", "sighting_of_ref": "indicator--87999de9-3867-469b-a11a-545f385184a2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14164da5-7467-447e-af47-87c8b0580e80", "sighting_of_ref": "indicator--7a48b6ca-1b26-4051-a6fb-8a0e7bd1c04b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48607ae-3928-41b4-9c56-c22c344aa784", "sighting_of_ref": "indicator--29984864-dc07-4257-adb3-16641bbffc1e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56ce52e-19c7-42d5-be01-1991db7f1d66", "sighting_of_ref": "indicator--d0fe6807-3818-43ae-9ef9-f86b1e87d247", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f294d6a1-76f7-4b71-8ad2-434c6d6298f4", "sighting_of_ref": "indicator--2d5e68b0-5797-4ab7-a9b8-ceb271060aa0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63eb6c9-8b14-4ab4-bb95-adafd664218a", "sighting_of_ref": "indicator--88461268-4593-4fc8-821e-0d07588eab0c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1b31fe-8dce-4415-bdaa-b92062cf4635", "sighting_of_ref": "indicator--fffbb14f-a5a9-45ec-aa7d-06c573dd0380", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfece52e-cdc4-4d3a-935e-b5dd01549496", "sighting_of_ref": "indicator--fffbb14f-a5a9-45ec-aa7d-06c573dd0380", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b10a34e-0ca6-4249-a42b-a00fe9132493", "sighting_of_ref": "indicator--effa1264-675a-4a5f-a748-1be811377d46", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47384f98-2d3b-4d6b-8ca7-5e45a7d44764", "sighting_of_ref": "indicator--fd91b7cc-c19c-47fa-b631-e051ce4d2684", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c91c17-47ea-4253-8831-ae397ad6f0fe", "sighting_of_ref": "indicator--f5a68bc6-97c0-4941-9afd-d9ad54b7c96d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016d73a1-a051-498e-b71c-d05d9f1535ed", "sighting_of_ref": "indicator--293182e5-3fca-49d6-b828-70a839f99c40", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdc2e58-bfa6-4ca0-b729-682ac21a3225", "sighting_of_ref": "indicator--e79c5632-09b0-49f7-9a87-8566d4d8985c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a2b4d4-35fb-412b-841c-4146f74894fc", "sighting_of_ref": "indicator--e3b6281e-5a63-4914-9800-632b2919be02", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80fd1de1-c227-4dd5-a303-6f9982cab030", "sighting_of_ref": "indicator--32387a59-9ed0-44fc-987d-9d2814bccd58", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2c6366-4363-4671-a1d5-9be8b0a588cb", "sighting_of_ref": "indicator--b355ec62-0b08-4d73-87c3-10937290503e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdab2c20-e5e1-4bd6-a774-ef4f6f0fbbfc", "sighting_of_ref": "indicator--c4a439d8-808d-4435-98f4-5ce76db8c6d4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bebf90b-25cc-45f2-9efe-ef60750536e6", "sighting_of_ref": "indicator--459b3712-27f6-470f-adc5-eddf548a3084", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1023485-2fe2-45d0-ba83-1b266c07d061", "sighting_of_ref": "indicator--459b3712-27f6-470f-adc5-eddf548a3084", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defb6eaf-c2b8-4006-a39b-b0a439b24757", "sighting_of_ref": "indicator--b8490f3c-30ad-4fa3-ac57-b244afbae820", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a703e4c5-883f-4474-a238-d3539a9a1355", "sighting_of_ref": "indicator--e6ff55f6-b52b-4e08-8e44-a6cd6ce8ae65", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac953bc-b0a7-40c6-b838-9758041263cb", "sighting_of_ref": "indicator--e6ff55f6-b52b-4e08-8e44-a6cd6ce8ae65", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d17cc54-1ce7-4115-a16a-d92f32e72732", "sighting_of_ref": "indicator--a2bfe9c4-200f-4f06-b05c-24f41232c3a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f528f06f-5772-4103-a3fc-ecdc85647bee", "sighting_of_ref": "indicator--1803ef5b-43c2-44a1-ba11-9c105007602a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6819e4aa-dbfa-4abc-bd86-60ce15448c0c", "sighting_of_ref": "indicator--b2e3fa7e-c0e1-4edc-a6e6-579625775834", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcf46e9-8ae3-4f77-90be-67e4f832c430", "sighting_of_ref": "indicator--d6321a1f-3bb7-4e49-a26a-9891a3b15e79", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2accf6-e5c5-4838-bccf-36c2cce90f93", "sighting_of_ref": "indicator--d6321a1f-3bb7-4e49-a26a-9891a3b15e79", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14328a42-92fa-44c0-bfea-2ede77d21da8", "sighting_of_ref": "indicator--b62600b3-6628-472a-9709-a3a30b958b2f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abd2321-7ebc-4afe-9ce5-f7b90cb37b9f", "sighting_of_ref": "indicator--e94bf2fc-088b-474c-86da-c175aedb08d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a5977e-5b09-488d-a3ea-90f4d4e838ea", "sighting_of_ref": "indicator--e94bf2fc-088b-474c-86da-c175aedb08d0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348bd7f0-e9a5-41ae-bc66-b8bf5640b9b7", "sighting_of_ref": "indicator--b10c823b-7442-4bed-94ea-cd29c6b975e8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b9b905-c5d9-4253-a872-8770e2ac6fa8", "sighting_of_ref": "indicator--e9ce1016-02e4-4218-a95d-d18133dcf227", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a743fa1d-5c78-4914-a52b-b4f8c571a17d", "sighting_of_ref": "indicator--e9ce1016-02e4-4218-a95d-d18133dcf227", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7edfbf-5490-4f84-b7af-e588d65580f2", "sighting_of_ref": "indicator--0d032941-5a5f-40dd-ae74-65b63e7ce6b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170f9109-e3f7-47c5-ab71-ee4a034f180c", "sighting_of_ref": "indicator--be0c8779-e31e-409e-bcb7-971f322e2cb8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2678ff-5301-4e4d-87d2-060e9a74c616", "sighting_of_ref": "indicator--be0c8779-e31e-409e-bcb7-971f322e2cb8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a32721-43eb-4f75-8f2e-ecc0f41e37ab", "sighting_of_ref": "indicator--79d85c60-14c2-4249-bb1e-d4c398960b98", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7976ff5-b4ac-4c45-aecd-98ff53ac8f5d", "sighting_of_ref": "indicator--79d85c60-14c2-4249-bb1e-d4c398960b98", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc57381-4c53-446b-9c95-89fe2f1f9432", "sighting_of_ref": "indicator--1ae05508-a3d5-4f7e-a313-1dd035bf1043", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b4f446-c5ae-4e31-ac3f-6aa842597311", "sighting_of_ref": "indicator--d2e8e7cf-f6ba-4d56-8a86-da1daef37e4f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dc8a70-3313-483d-93a5-ca6d072d2d75", "sighting_of_ref": "indicator--f5fe18f3-2653-4f2f-abb5-f0b0e9cd7fdc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6ba8a8-57b1-4729-876d-a9eefcdffa3d", "sighting_of_ref": "indicator--17223ebe-29da-4971-928d-81990461122f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97882831-539d-460a-9114-ba607919b9ee", "sighting_of_ref": "indicator--17223ebe-29da-4971-928d-81990461122f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdec34e-8103-4952-b601-75b490ef2ded", "sighting_of_ref": "indicator--bddb27e4-f57b-4612-a524-59427c171df0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731194d1-5424-425e-b5a9-2720ef1357eb", "sighting_of_ref": "indicator--bddb27e4-f57b-4612-a524-59427c171df0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156f2fc4-a882-4fff-b2b8-f65a139de027", "sighting_of_ref": "indicator--feff1f8f-91e5-4cd6-8e7e-85576b0441d5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35565ec5-f096-4a34-a6b7-cc7ba3ed5118", "sighting_of_ref": "indicator--1f17003f-b929-43ce-93c1-252bb16287e4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ede434d-5f18-4094-8cf1-9e11dad82ce5", "sighting_of_ref": "indicator--117716c4-dfe5-415e-817d-d384dfa8ee6d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d45559-0b17-4c4c-aafb-fa62d88ffd55", "sighting_of_ref": "indicator--117716c4-dfe5-415e-817d-d384dfa8ee6d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447663af-01de-412b-962a-17cb2a9f1be5", "sighting_of_ref": "indicator--4f7e83f3-0d88-4334-97b9-db222e25cb10", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8a1c4d-e7b0-4cbd-8984-d314153bd182", "sighting_of_ref": "indicator--4f7e83f3-0d88-4334-97b9-db222e25cb10", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c134aae-5c2d-4df7-92f1-6df96c125f88", "sighting_of_ref": "indicator--4a8b393b-f546-4878-be25-42291380713b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6aaf307-89a9-4cef-b436-9ef4fb1dbdf3", "sighting_of_ref": "indicator--4a8b393b-f546-4878-be25-42291380713b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68574c85-9a1d-4b42-902c-2e494824ee99", "sighting_of_ref": "indicator--83c09a00-598a-41ff-b1ac-686d6cd54435", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38914523-2b92-4c85-b384-f08502e976ca", "sighting_of_ref": "indicator--83c09a00-598a-41ff-b1ac-686d6cd54435", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9198467b-4b47-4ded-9b38-866887d30a70", "sighting_of_ref": "indicator--9e4abccc-c8db-4cc6-85ea-b73e1f821db6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637a6a7e-d2dc-4796-805f-35e60cc383c1", "sighting_of_ref": "indicator--9e4abccc-c8db-4cc6-85ea-b73e1f821db6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e355f9a8-99bc-4b78-9f3a-d6b02a5c2f37", "sighting_of_ref": "indicator--a4504fde-3e71-4a7e-9327-92f234c2f7af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39474595-8275-45a3-8f82-33e00a6a650b", "sighting_of_ref": "indicator--a4504fde-3e71-4a7e-9327-92f234c2f7af", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c403c650-97d5-4507-8fe9-34154d5265e3", "sighting_of_ref": "indicator--180f187a-b9b6-4d32-900d-07ae39914868", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc91bbfa-934d-42a6-bf66-5b3fda373f19", "sighting_of_ref": "indicator--de03c1ae-22c7-4a2c-a79f-ef1d5dd0dd41", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4500849-f91a-41f5-ba15-c7e2349e768b", "sighting_of_ref": "indicator--de03c1ae-22c7-4a2c-a79f-ef1d5dd0dd41", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221266ec-f97a-4d1f-be1a-a93dc5e5549a", "sighting_of_ref": "indicator--2ef19b7a-1ad9-4e71-8010-24c34e53a9aa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1d63b4-89fa-45fb-9537-f7213a968d54", "sighting_of_ref": "indicator--9634c80c-5b43-4514-ab67-3248f333521b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b29d75-17c0-41f7-90de-54fbe78892a5", "sighting_of_ref": "indicator--ee04ce3c-33ce-49cf-b8ba-31cc0aa5735b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b72950-37f5-49e5-831a-d32ee9013395", "sighting_of_ref": "indicator--804f358f-d8eb-400b-8215-8a1b19157ba8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7207da-c514-4a2e-8da5-bb4299b06eb8", "sighting_of_ref": "indicator--804f358f-d8eb-400b-8215-8a1b19157ba8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6089b0-b8dc-43a8-a034-87598391931f", "sighting_of_ref": "indicator--804f358f-d8eb-400b-8215-8a1b19157ba8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87dde0ea-3ad8-411f-bc2a-20674632bd45", "sighting_of_ref": "indicator--ebd6f64c-a73a-4726-b4b5-9857d73cac0a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b754307-f9dd-4c70-a295-cde4dfce721c", "sighting_of_ref": "indicator--9e46c6e5-36f2-4b6d-a9a4-4356ffc96732", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b897f776-0840-4d79-812b-c94e75e8a614", "sighting_of_ref": "indicator--b9b3e9f1-b030-43a9-ad3b-8d97880af06b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f4e130-e0d2-455a-9673-f9239f286273", "sighting_of_ref": "indicator--07024085-94de-40ae-b89f-418a6999f863", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9928eb7a-4cb0-4286-9388-f2c59c7e403b", "sighting_of_ref": "indicator--8153d62c-653d-4575-ac69-26c6935f8065", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2234b2-ff26-4f67-acdc-d91eab8a7750", "sighting_of_ref": "indicator--ca86d08a-a4ac-477f-9ee8-547387e83cfe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3905baf7-21df-4977-81ba-ac43338ea179", "sighting_of_ref": "indicator--23abd6af-579c-49f2-b84c-f68af4a37fc8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf77ef37-3fb6-45f3-8963-b5c76556b252", "sighting_of_ref": "indicator--b717cf1e-a293-44eb-ad7f-5850d050d40d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd95e6af-b1b5-4e04-9a76-d202932611b5", "sighting_of_ref": "indicator--ab32b766-7967-42e4-81d2-de6e24b9bd7f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5688e5c-b4db-4bf8-80c3-865cc1a78a6d", "sighting_of_ref": "indicator--0dade959-c3f9-471d-be0c-bb9350f8c744", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06aa69f0-4454-420d-8242-356554a3a1e5", "sighting_of_ref": "indicator--0dade959-c3f9-471d-be0c-bb9350f8c744", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223d8ffa-4b8e-4aba-a3a9-fe13c4acc145", "sighting_of_ref": "indicator--0dade959-c3f9-471d-be0c-bb9350f8c744", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefd4288-b9aa-40cb-bbef-3e994e04788c", "sighting_of_ref": "indicator--900e095b-7af7-4bd4-b373-e2088fe9fb32", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700fb230-7c22-44d4-9f9f-876558a8d622", "sighting_of_ref": "indicator--900e095b-7af7-4bd4-b373-e2088fe9fb32", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9819b6f-dd85-45e5-98fc-8a1189a5e75f", "sighting_of_ref": "indicator--900e095b-7af7-4bd4-b373-e2088fe9fb32", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60d32a7-b438-4fe6-9b6f-ad6be8dac1ac", "sighting_of_ref": "indicator--e37882a1-4f9a-4ca1-afa6-ba5192ada743", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415491d6-c0f3-48ac-93ec-7b2989f1b553", "sighting_of_ref": "indicator--9ef30fae-099a-42c1-8636-add98b48eb2e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede36b0b-663c-4769-8cb1-993db9df3ea1", "sighting_of_ref": "indicator--5d199dd8-cc43-4d8a-b6e4-b41273f2a81e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e61fd63-b6dc-4213-9d3a-a5c5765eea9f", "sighting_of_ref": "indicator--4323c624-9f03-4fba-95b7-7710acab6667", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db0f5c9-11ec-448a-aaff-3ecb34e32541", "sighting_of_ref": "indicator--ff947d9a-a8b5-4009-92a2-fc76fd7a6ce7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce35de8-565c-4e28-8382-76c23618cc61", "sighting_of_ref": "indicator--ff947d9a-a8b5-4009-92a2-fc76fd7a6ce7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71987623-6584-4511-a898-345e00906027", "sighting_of_ref": "indicator--eae6079c-fd0d-4427-9b97-d7034f674272", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ea9c99-9c25-4675-940e-b7777007497a", "sighting_of_ref": "indicator--a7a170b0-9117-4518-8b19-607a06213790", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294af97c-048a-4f01-a612-cd7ef6b3c8b5", "sighting_of_ref": "indicator--eb27e905-61c8-451b-8625-70039a9340f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91b779d-96c9-40f0-9641-8be317355938", "sighting_of_ref": "indicator--b9049e28-0887-4ce0-8daa-d121544b5739", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5055a21-091d-47d0-a7bf-349556505fdc", "sighting_of_ref": "indicator--5d76ff89-ea91-4798-9185-314f5b00766b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193169ff-34cc-42e0-baa4-7dfef68c4490", "sighting_of_ref": "indicator--52928c30-0bc7-4214-afee-8f770575c0c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77c8177-e53e-4550-b541-1d8359e63770", "sighting_of_ref": "indicator--de8ba857-02b5-4ac4-ac30-ddf7ede33362", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf1b03a-79b6-454a-9726-35dea596d225", "sighting_of_ref": "indicator--de8ba857-02b5-4ac4-ac30-ddf7ede33362", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f778f9ce-aba8-4c51-ba53-e458e7ff70d5", "sighting_of_ref": "indicator--724f9efd-bc19-4c60-90ef-3a671aa4d2f7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f08a0d-6f9c-40fe-bbfd-21171a9955bd", "sighting_of_ref": "indicator--6eba23f1-852a-4453-8109-7975b4c504ea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e0dcfa-3361-4a02-bc9a-2c353e90797c", "sighting_of_ref": "indicator--a7096ff1-e55d-4c3f-8f44-b0cb2ed8c8a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7ab982-51a5-48d0-bc88-e0791aa80718", "sighting_of_ref": "indicator--91b02df5-4f13-4c0b-8f0f-bf69d278eb5c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddb79e0-0797-4bd5-9578-97d10d8b4e58", "sighting_of_ref": "indicator--91b02df5-4f13-4c0b-8f0f-bf69d278eb5c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6065b32d-15ee-4765-a73a-ba6e50bce8ff", "sighting_of_ref": "indicator--91b02df5-4f13-4c0b-8f0f-bf69d278eb5c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f9b69b-b796-4f76-8057-8f61df2d7968", "sighting_of_ref": "indicator--abfec285-8ae5-4106-ad91-421e3d4d6c6d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13a3882-e576-4735-aab5-0f147f295680", "sighting_of_ref": "indicator--8382192e-2e3b-48cb-b8ac-27dc3bd9c7b1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118fd5ed-7530-4b9d-94a1-ca6791d963b7", "sighting_of_ref": "indicator--93282a5d-e700-4036-afa4-8566636dcb8a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965acf7d-ad28-4b82-a40f-93c6ce4b3770", "sighting_of_ref": "indicator--290c1276-59b1-4ce0-81bb-fabfe2434852", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54e3b89-072c-430e-8b23-b3f741ca3852", "sighting_of_ref": "indicator--8095687e-8588-47a4-a948-fe6eaa54d845", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba27431-6270-4a2e-81fe-302e1107f398", "sighting_of_ref": "indicator--8095687e-8588-47a4-a948-fe6eaa54d845", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4d190d-65ba-4835-bda2-c6769d9a5e2f", "sighting_of_ref": "indicator--54bb46cd-e7f2-4fdc-a5de-a589d9a1c20b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986581f2-5bb6-4ea8-bbc2-d1a0583e7533", "sighting_of_ref": "indicator--5341d3d4-992b-4631-9a8f-2cc42e7c2f5b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f5841f-462a-457b-9be5-1cb0b7b17ca1", "sighting_of_ref": "indicator--5341d3d4-992b-4631-9a8f-2cc42e7c2f5b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d47aba-c1cf-44e1-a7b7-da3769fac9ae", "sighting_of_ref": "indicator--61df8507-fba3-416d-9dfb-9c3342d39f4a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e5314b-cb69-4748-acac-4e84de0bc546", "sighting_of_ref": "indicator--61df8507-fba3-416d-9dfb-9c3342d39f4a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dac5856-4eaf-4ffd-96ed-5b868612455e", "sighting_of_ref": "indicator--4378b81a-f296-4151-b844-a8d3a36f941e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1eb435-6747-4688-a897-b3006fc48df3", "sighting_of_ref": "indicator--b9aa2e44-0064-423a-ae40-2a5e127acce2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4845d6e0-c3d4-463f-aaf7-57aa87107b33", "sighting_of_ref": "indicator--cdaa1036-d62d-45ba-bddd-951e1c8bc4f5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aeb2549-eba2-4784-93ff-8eb3cd13c723", "sighting_of_ref": "indicator--cdaa1036-d62d-45ba-bddd-951e1c8bc4f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84d0d04-dc3f-4423-bed8-6bd09eb52ded", "sighting_of_ref": "indicator--cdaa1036-d62d-45ba-bddd-951e1c8bc4f5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f0ba79-d785-4661-a2b9-f92ee05a2b19", "sighting_of_ref": "indicator--3c40ff84-24d7-4f71-8042-1567562c13c1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c11a5c-387e-4df5-b147-e0dc482d3f6f", "sighting_of_ref": "indicator--09492af5-884a-4a18-bb53-f6170745be1d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ced533d-27c0-4da4-b4b8-51e68faf1934", "sighting_of_ref": "indicator--09492af5-884a-4a18-bb53-f6170745be1d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c753bf26-4bbd-4fbc-8761-7e5a659baf11", "sighting_of_ref": "indicator--09492af5-884a-4a18-bb53-f6170745be1d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100a5961-50d0-4bdd-bab6-eed3095183b3", "sighting_of_ref": "indicator--dae35a64-c873-446a-8529-6cb2e3bdeb8c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fce77a1-e922-4ad3-b3b4-b4427275cd32", "sighting_of_ref": "indicator--b4283624-7807-494a-adae-f141b59a8e63", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553782b1-8690-45f9-83d3-76d9a43b3afb", "sighting_of_ref": "indicator--22889937-8c78-48a5-9c9e-e9958183ed06", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e642b27d-c5eb-448f-96c0-98b5509ef7a0", "sighting_of_ref": "indicator--22889937-8c78-48a5-9c9e-e9958183ed06", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fddde2d-8615-4401-9203-7ada24c36a83", "sighting_of_ref": "indicator--63b8533c-ada6-4c47-8517-fa82e42d2d23", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bd34e5-91c1-4a16-97e6-62c924211357", "sighting_of_ref": "indicator--63b8533c-ada6-4c47-8517-fa82e42d2d23", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fdc8ec-fa1e-4562-a6ca-b81bf20c15f1", "sighting_of_ref": "indicator--895c73c8-70d0-4881-9afa-deab2b7e1032", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc3fefa-cf5b-4f4c-a04b-b7fc15047063", "sighting_of_ref": "indicator--895c73c8-70d0-4881-9afa-deab2b7e1032", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572b5ae6-5dc8-4d92-b78a-967e80835493", "sighting_of_ref": "indicator--f1049530-e0e9-4ad1-b1ac-6497348720c5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddc55c9-57a0-4ab0-9d52-d5d3bfbf5501", "sighting_of_ref": "indicator--7a47beaa-f76a-4807-9d33-7d7f8f74ecfb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cfe9ae-dfd8-41ef-84f3-db2ef2065d87", "sighting_of_ref": "indicator--f67757df-b1d9-4f1c-a3eb-7b63ef07baf3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728bc657-fb4c-4dcd-9704-c9eabbb2ed45", "sighting_of_ref": "indicator--3739a902-c159-48a0-9898-812ff5005a0b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d0ae7f-14f6-4f77-9d14-a9f18a13c44b", "sighting_of_ref": "indicator--1f62e21d-a0a9-494e-9eb6-611a61c739ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ac25a7-4b32-4ee6-9a15-9c73e697fda5", "sighting_of_ref": "indicator--100d2bee-ebee-4d07-b238-2faccf11cb3d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726ab6c3-3210-40c3-8960-8b6615dc2c92", "sighting_of_ref": "indicator--100d2bee-ebee-4d07-b238-2faccf11cb3d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bec673-1052-49ac-89e5-879a64ffc42f", "sighting_of_ref": "indicator--83f25bdc-4e87-49a8-b838-01f4fba23e9c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b89a1f-8e02-4e8b-8dac-57bcdd9076d0", "sighting_of_ref": "indicator--2e1e8573-0988-4daa-a72a-b68ff57f7ff5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5085105-ea71-4202-8e40-fb980ea6c438", "sighting_of_ref": "indicator--2e1e8573-0988-4daa-a72a-b68ff57f7ff5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84de0f05-dc04-4ac2-9cd5-18dc16b2d117", "sighting_of_ref": "indicator--5868d2c8-7fb6-4a55-8d6d-26cc643721d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cee8c28-df7d-43ca-9a18-21755e43cbcb", "sighting_of_ref": "indicator--5868d2c8-7fb6-4a55-8d6d-26cc643721d4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb22858-80dc-49d7-9c43-f34f546266af", "sighting_of_ref": "indicator--0039ff81-0692-440d-945d-bf09553f1517", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4830a62-944d-4444-937b-fd9c1e02b1fc", "sighting_of_ref": "indicator--8aa8c5a0-0498-40e7-b9d3-87c78bd00ba4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78ff8a1-a47d-4e0c-b80d-1671e4591ae8", "sighting_of_ref": "indicator--9b80d040-6df7-46f4-97d3-5b414be7339c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2438d3dd-84d6-4227-acb7-d9c82c3dcd71", "sighting_of_ref": "indicator--9b80d040-6df7-46f4-97d3-5b414be7339c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffc1097-2265-4703-8931-81997a7d0769", "sighting_of_ref": "indicator--7b17c96d-4ff1-462d-b559-0c0ee8f1f45b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af4b295-c6e8-4259-888a-afc37b5cd97c", "sighting_of_ref": "indicator--6cf1abc8-baa7-46b1-9a74-77ef6809ee2b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302d8a86-ee77-4b42-b31c-827f31374d64", "sighting_of_ref": "indicator--33d8e84a-b93f-415e-bd46-52ac00f1fb1a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e5cd5e-a089-4261-9fd1-2ae3b9951d4b", "sighting_of_ref": "indicator--2db4edda-83b5-463e-b7bc-d1913e19f878", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c70da30-445d-4f5a-a5c5-e242758d70d7", "sighting_of_ref": "indicator--2db4edda-83b5-463e-b7bc-d1913e19f878", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ee8d1d-29b8-48fb-b04a-bb16ed5097dc", "sighting_of_ref": "indicator--a109e661-caca-4b42-afcd-25089442652d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47f1c8d-64de-4622-b2f7-ef93c65a1b6e", "sighting_of_ref": "indicator--4b44bef2-2bbb-484f-b146-f600a2cf3fda", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efcbf5e-412c-4844-9e87-89f48a13ede4", "sighting_of_ref": "indicator--ec2f48f5-59b4-4d80-bff0-8840f625042e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f454f221-b675-46b9-8c37-c9be3bd5065a", "sighting_of_ref": "indicator--ec2f48f5-59b4-4d80-bff0-8840f625042e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30a1c78-f593-427e-b359-ef6f627c0024", "sighting_of_ref": "indicator--b7d74a2d-5f4a-4907-a455-336221510562", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c5a9c7-0244-4ff9-8c96-3596f8488681", "sighting_of_ref": "indicator--4d4b2366-fb1b-4b78-868e-2c8a074045d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f9148f-d3b2-4155-8869-29673b668ddd", "sighting_of_ref": "indicator--4d4b2366-fb1b-4b78-868e-2c8a074045d0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176f4b25-7578-47e2-a2aa-3fea3d1635b4", "sighting_of_ref": "indicator--156ce5bf-475f-43ba-be75-cf3b5484cf94", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef8084c-066e-4ef3-916c-0bc642c71ffb", "sighting_of_ref": "indicator--156ce5bf-475f-43ba-be75-cf3b5484cf94", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5985d1-848e-4439-aeff-c7dc58c10710", "sighting_of_ref": "indicator--751414ae-ade8-45e4-bf30-571d1b67902f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f729522-2eac-482c-8679-6b2acfb10153", "sighting_of_ref": "indicator--a1c8fa14-5ae9-4f98-83fd-29497655cd89", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3f040e-1f66-438c-8d26-017cdbe15c1d", "sighting_of_ref": "indicator--e57dc74b-e4fd-4286-9d6c-6b6006bfcdb0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f3632b-f498-46a4-a750-22d419f3ec00", "sighting_of_ref": "indicator--6ab0648f-76c3-4e61-83b6-94a32a670596", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f74842-cf06-41cc-94c7-22590039a388", "sighting_of_ref": "indicator--082409ff-ad08-4c8b-bd30-f82afdcf6de0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542f1c96-8823-4326-b381-e6ad508887b7", "sighting_of_ref": "indicator--df3b3e3a-dc4d-4237-bc20-0224f75347e8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb58e03-e45d-4ea2-9474-df3d90ef3316", "sighting_of_ref": "indicator--df3b3e3a-dc4d-4237-bc20-0224f75347e8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3042cd-c7fd-43fc-b94a-c62159729283", "sighting_of_ref": "indicator--c9a9604c-b13b-4050-b816-c3d2abb2cbd4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f786b5c7-4e40-4340-a258-189604631800", "sighting_of_ref": "indicator--6764a20f-a0a8-4d17-9912-b778a4d61e6f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25014bbc-bebe-4072-bd30-e45e83c51f3c", "sighting_of_ref": "indicator--2c59ea64-635c-4a4c-ac79-8f9a23c32cc7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cbf217-3f4d-4a6d-9df8-5baedd112e6b", "sighting_of_ref": "indicator--4c681f47-b1e1-4e26-845c-857b7ecdb9ab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27fc733-75d1-4d9e-a0ae-8eb20f9c11b1", "sighting_of_ref": "indicator--4c681f47-b1e1-4e26-845c-857b7ecdb9ab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c25141-9935-4c54-8125-a742d81277d1", "sighting_of_ref": "indicator--4c681f47-b1e1-4e26-845c-857b7ecdb9ab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07488efe-8692-4724-938b-4f9018eaa340", "sighting_of_ref": "indicator--1435a167-f128-4811-9361-a9ee08bb002d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e689c5-7931-4d5d-9b93-c540119d57c2", "sighting_of_ref": "indicator--c001d3f3-3caa-4478-9c8f-a282aa41b027", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f6aee3-302d-46b3-8077-f3df2454481d", "sighting_of_ref": "indicator--3490503d-d73c-4745-b8cc-6a846b8af59f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c89e6b8-d598-4bb4-9f8b-df506313ec09", "sighting_of_ref": "indicator--3490503d-d73c-4745-b8cc-6a846b8af59f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5644ec21-fc86-4d8f-a57b-5709312dc4c8", "sighting_of_ref": "indicator--4eb91169-999e-4bd7-b060-0ce1796521f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45172df4-bb50-4e51-8b47-4fa4d136a4bb", "sighting_of_ref": "indicator--4eb91169-999e-4bd7-b060-0ce1796521f2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6308fee6-67dc-4e5b-884a-e0dfd28a4dc6", "sighting_of_ref": "indicator--4eb91169-999e-4bd7-b060-0ce1796521f2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9297874-7ea0-44d3-8c80-06b6f412d53d", "sighting_of_ref": "indicator--6073215f-3d8d-484b-a1a8-35d11c57d27e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42543df4-f020-4c3f-84ae-ba45191b3a78", "sighting_of_ref": "indicator--a5462631-4cc6-427b-a5a1-86079b7c8f9f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30a0cc3-2c40-4e62-8339-74e68dc9223e", "sighting_of_ref": "indicator--4ccb022b-c860-4e88-8a25-4c7f76ca3fa7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316f994b-391b-43a2-ba34-912222652c01", "sighting_of_ref": "indicator--4ccb022b-c860-4e88-8a25-4c7f76ca3fa7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cfdae1-4933-486a-8283-73ae47b207d0", "sighting_of_ref": "indicator--468fd94a-0ba4-4c67-ac0c-0b7cf80b68d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8267e8fe-3d07-4927-8e69-e7afc31c1d22", "sighting_of_ref": "indicator--c7ec4e0b-e134-481a-8bd9-96860c6d31b2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563eb219-5ad0-4d99-bb83-129a90384aaa", "sighting_of_ref": "indicator--ee106e7f-c889-4386-956e-ba189ff4b025", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1de3a5d-97b7-4fb6-87a7-d09ecd1c2be0", "sighting_of_ref": "indicator--6a55bcb2-2c61-47c5-a532-1b709d65efb8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b23825b-6f0e-4b9f-a310-54a7ee673cfd", "sighting_of_ref": "indicator--6a55bcb2-2c61-47c5-a532-1b709d65efb8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcbc870-cbae-4f91-922a-735f8f29e70a", "sighting_of_ref": "indicator--9d1c4b57-2b8c-47b3-8129-9b2abfd6b328", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8179ac0f-9d84-4531-a89d-f324aa340682", "sighting_of_ref": "indicator--9d1c4b57-2b8c-47b3-8129-9b2abfd6b328", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31d9e80-b552-4438-839f-ae0c3247d5e0", "sighting_of_ref": "indicator--18f308cf-2459-4d14-a86f-b28d1864eeee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c35728-d2ce-4d6b-bf43-be681f23f36a", "sighting_of_ref": "indicator--18f308cf-2459-4d14-a86f-b28d1864eeee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6f606f-d232-4412-9a60-ddbd3087ce27", "sighting_of_ref": "indicator--827029ea-d9be-42c5-9700-07ed2c08f719", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129b4c1c-5d8f-47d4-9bd1-82859ef02d98", "sighting_of_ref": "indicator--b702650f-13fe-475d-b25f-75dfbaba42e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67687139-1a86-4b46-a5ce-f27fde3c33f9", "sighting_of_ref": "indicator--55ae6890-de3f-499d-939c-a6ed4cd4054b", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f5d645-8fb7-4806-ab05-5194d0a1f282", "sighting_of_ref": "indicator--d5b21373-1d15-4a51-af95-472fff05359f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf31cbd-e69f-4c00-ab8b-7ddd4230ff7f", "sighting_of_ref": "indicator--b54e11f1-e50c-4edc-ac3e-aee5d26f79dd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc70131-f15b-46d2-8f9c-b6af3686df45", "sighting_of_ref": "indicator--45b59e14-10cf-46b0-a512-a741b27061f7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd1385c-2fd6-4cce-a62e-28c4b9821863", "sighting_of_ref": "indicator--45b59e14-10cf-46b0-a512-a741b27061f7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779ea0f8-70b8-4e11-b607-12f7dd3a732a", "sighting_of_ref": "indicator--45b59e14-10cf-46b0-a512-a741b27061f7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a7de3f-a32b-449e-bd90-f62b8c387505", "sighting_of_ref": "indicator--46760250-1ee8-4ae9-af5c-4a407f6ce805", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a85f072-f784-471e-89fe-1c3714d34e55", "sighting_of_ref": "indicator--d3b9ce9b-a7f3-4a65-a046-93f3c0ec00e1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b414ca6-47a5-425d-aef5-1ac422ef7de7", "sighting_of_ref": "indicator--d3b9ce9b-a7f3-4a65-a046-93f3c0ec00e1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57203f08-2a7f-4ef5-a366-9e9696e60ec0", "sighting_of_ref": "indicator--d3b9ce9b-a7f3-4a65-a046-93f3c0ec00e1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920711c6-3606-4c75-9c5b-3d4c90be9179", "sighting_of_ref": "indicator--7fb8cbe5-a2bc-44b3-ad0c-13b20d615002", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc2f3d9-e4b3-4a1d-b3c4-c0c018ceeaa3", "sighting_of_ref": "indicator--0624e09d-12eb-4380-b1c0-ead71f33a200", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6380bc5-e1a4-46be-bd3f-1c31c92fa9c8", "sighting_of_ref": "indicator--57050c4f-c029-4627-9935-05cc30844b7c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d81910-742a-45b9-9bae-1e7ffb23399c", "sighting_of_ref": "indicator--77815d0d-8fa4-45dc-ac61-96ca0873135a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e3d19d-237d-48b0-8ccb-7a8bba7fd16c", "sighting_of_ref": "indicator--14577dfe-1db1-430b-b70f-39079f22573f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459ff5b0-54e8-4cd4-ac4a-8fff6d026cdb", "sighting_of_ref": "indicator--04c9d7fa-9871-42ed-ab21-a96341e5a0ea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98b877a-3f96-49aa-b7e9-5d87500dc8c5", "sighting_of_ref": "indicator--4ffa58ed-e673-4943-abb9-5499531ed150", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b823050f-3993-414e-96f5-469fcf97eda0", "sighting_of_ref": "indicator--7ecee485-2a1f-4a44-8920-7cbdd61e6258", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc102aa-88a1-4849-8c4c-6e7f92c935a1", "sighting_of_ref": "indicator--7ecee485-2a1f-4a44-8920-7cbdd61e6258", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8646f4b-840f-4148-b2fd-899c3b1464d4", "sighting_of_ref": "indicator--66776659-defb-40ea-8356-505bdc03945f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42346c1-4981-4d29-acf6-2a08cd203e1c", "sighting_of_ref": "indicator--13370914-de62-4eb8-9cbc-1fd3867d7a9a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ae0718-c883-48b2-90f1-ee2f9acae040", "sighting_of_ref": "indicator--2c9d3977-7e22-407a-9f24-125b227b9a68", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102b68e7-1b00-430b-8c8f-1a41226a8615", "sighting_of_ref": "indicator--ce9c22b8-3202-469d-9a7b-9241466a2a77", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846760c8-82bc-48f7-93d6-543e6c2e6402", "sighting_of_ref": "indicator--eef1a334-99af-4fc1-8fad-4443d94d154a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0d823e-27dc-4f9c-8f24-cffb51e96130", "sighting_of_ref": "indicator--419829f5-827f-4b55-ba6d-1a403f480f3e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9296b6-011b-40b5-9f28-1fb3fdb8a9fd", "sighting_of_ref": "indicator--644b0315-bc0e-4bfe-b197-5745d8935c02", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5aa8cc4-cf30-4b0e-a0e4-364ba43c45ac", "sighting_of_ref": "indicator--644b0315-bc0e-4bfe-b197-5745d8935c02", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d6c2fe-e355-4254-ac9f-bbda6082247b", "sighting_of_ref": "indicator--644b0315-bc0e-4bfe-b197-5745d8935c02", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a9e8b0-e4b4-4ca6-a8dd-c299bc1d3962", "sighting_of_ref": "indicator--98ed3dd6-3b64-4291-af18-f1bdd9d6ad4f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa66cf1-f083-4656-9ad3-9251adbaa706", "sighting_of_ref": "indicator--e531d38c-d5dc-4501-908f-ade6d1a75cca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2638a34-93c1-4c15-b7c6-64c7ec5147a9", "sighting_of_ref": "indicator--0d435561-3236-49f3-a337-59f50ff03cd4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842adbad-9248-428b-b252-7b6b1075b9dc", "sighting_of_ref": "indicator--44f6ea5a-97d2-4a4c-82ab-bad74dd43485", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473e50c2-da7a-4b34-818a-a68405a3eb4d", "sighting_of_ref": "indicator--0786c6f8-3ef4-4ffc-a47e-57b87c095614", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44880b5-d206-4920-9bf7-a2c42aceeaa6", "sighting_of_ref": "indicator--0786c6f8-3ef4-4ffc-a47e-57b87c095614", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce5741b-2918-4895-a9d1-334dab4cce0c", "sighting_of_ref": "indicator--0786c6f8-3ef4-4ffc-a47e-57b87c095614", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc885b43-6340-4306-a89b-50469c1a28a0", "sighting_of_ref": "indicator--d1edbe7f-39c8-4260-ae8c-e286185212fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96231e22-a3fc-4a3f-b117-7574eaa74313", "sighting_of_ref": "indicator--d1edbe7f-39c8-4260-ae8c-e286185212fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b3c2a3-dc97-428f-9d2e-1f9e97f3802e", "sighting_of_ref": "indicator--61aa891b-3a49-497e-aeff-b423b62d92e8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a255f17-d655-456a-a167-76a4b2733bc8", "sighting_of_ref": "indicator--00bdcc6b-9eb2-4f9c-a09a-ec79bc473f9f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ddea1c-3afd-4a35-b676-220435ce0186", "sighting_of_ref": "indicator--00bdcc6b-9eb2-4f9c-a09a-ec79bc473f9f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3801e2c-7d52-491f-a629-54cf92a63425", "sighting_of_ref": "indicator--00bdcc6b-9eb2-4f9c-a09a-ec79bc473f9f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5da514d-1380-440c-be03-389f0d0b4c84", "sighting_of_ref": "indicator--c8170bb3-c054-43eb-a233-e5ea70639b50", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0c78ac-f856-40f3-8b35-ad615bf409e6", "sighting_of_ref": "indicator--c8170bb3-c054-43eb-a233-e5ea70639b50", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af23e1ab-55d8-44c8-a80f-54b6c3921141", "sighting_of_ref": "indicator--8ea3ab56-6592-4617-8496-0f41be177c66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728c1377-2a72-43d7-90d1-c0f55dec0ec3", "sighting_of_ref": "indicator--c99a2a73-2bdb-4f55-b7ad-c19eb09915ef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2dd0eb-0763-4494-a2b4-5740fc6d5bb9", "sighting_of_ref": "indicator--b8388036-3672-46da-8527-a5811b4afec8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce046c8-7ba5-4a99-b04a-1f67ff3541d5", "sighting_of_ref": "indicator--b24f86e9-353a-40a4-99f5-4786357af73d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9553e4a9-dde6-4494-821f-fad6d8c7314d", "sighting_of_ref": "indicator--b24f86e9-353a-40a4-99f5-4786357af73d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d43f2b-ecc6-4ead-9c47-523b0f9c44cf", "sighting_of_ref": "indicator--1db743f8-74fb-40f6-a677-03caf1fe1bbc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4797f7e8-532e-409b-a7f0-a4d35e7d41fd", "sighting_of_ref": "indicator--1db743f8-74fb-40f6-a677-03caf1fe1bbc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be61a2b-2735-4624-ac0c-1c234919db78", "sighting_of_ref": "indicator--1db743f8-74fb-40f6-a677-03caf1fe1bbc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ea9af4-7c47-4c6e-9a37-a5240547cf94", "sighting_of_ref": "indicator--84c6f3fc-ea03-43db-ac58-b3abc6c6798d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4d8e49-7c5e-4735-a7f9-a1c4b5ab3d36", "sighting_of_ref": "indicator--a2fa0860-03e5-4800-ace0-1415ffe82a78", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b85cf16-4602-4fbb-99c0-2f84a486cfa5", "sighting_of_ref": "indicator--a2fa0860-03e5-4800-ace0-1415ffe82a78", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c84a385-24a2-40b9-90dc-d8d55c748a9b", "sighting_of_ref": "indicator--afa77928-7884-4731-bc8e-3414ea188eed", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfad0d06-ae97-4788-96b3-53860c905d21", "sighting_of_ref": "indicator--759beda3-1ba6-47ae-bfcb-97488c514ba5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cf3cb4-4836-4203-8aaf-0cddfa2ee6b7", "sighting_of_ref": "indicator--759beda3-1ba6-47ae-bfcb-97488c514ba5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045d9418-f76c-4cfb-bc62-6e0e9e650873", "sighting_of_ref": "indicator--759beda3-1ba6-47ae-bfcb-97488c514ba5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ca50c0-3521-468b-a234-c7f3686deb93", "sighting_of_ref": "indicator--f55d974b-6f73-45ce-8159-ae9b63a1ba7c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8676a0da-477b-49bf-85e2-df49146a6b59", "sighting_of_ref": "indicator--f55d974b-6f73-45ce-8159-ae9b63a1ba7c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10887024-e541-4435-a250-313e04f3bdbf", "sighting_of_ref": "indicator--f55d974b-6f73-45ce-8159-ae9b63a1ba7c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d693577f-d33f-432b-ab08-bdd9eea57ab1", "sighting_of_ref": "indicator--6476db25-e918-454d-a00e-ae330b607c5c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a313bd-d5a9-4c49-9556-c7dc3fdddb9b", "sighting_of_ref": "indicator--6476db25-e918-454d-a00e-ae330b607c5c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665de5c3-071b-422c-9f68-b8cd2026c436", "sighting_of_ref": "indicator--6476db25-e918-454d-a00e-ae330b607c5c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01333935-a71c-4add-a754-80716dcd3287", "sighting_of_ref": "indicator--3b390fd2-a75f-4952-8d17-89c996db80b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5639f536-e6f9-486f-a488-dcf233f1f8ad", "sighting_of_ref": "indicator--659022fe-1018-4cd1-83ab-253c7a58779f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d057bc6-6319-4eae-9276-e5758f172416", "sighting_of_ref": "indicator--659022fe-1018-4cd1-83ab-253c7a58779f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c9bf05-afd6-4197-bee5-ba61a2a0eaff", "sighting_of_ref": "indicator--659022fe-1018-4cd1-83ab-253c7a58779f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776b431b-4490-4cef-b95c-deff68791478", "sighting_of_ref": "indicator--21ffa77f-eb13-41d6-bf0a-88ce784ae89b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fb48b3-ab4b-4ffa-8814-2042096e5613", "sighting_of_ref": "indicator--21ffa77f-eb13-41d6-bf0a-88ce784ae89b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4815428-4707-43b5-9a15-e81206c36bda", "sighting_of_ref": "indicator--822726dc-3016-4c08-bbae-fad31615c3f3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585fd0ef-b361-4196-be73-7f4aa45a9447", "sighting_of_ref": "indicator--822726dc-3016-4c08-bbae-fad31615c3f3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b674ab46-00fe-4f66-b48e-2b2abd72f73c", "sighting_of_ref": "indicator--ed976f41-45d4-4de2-86e5-3f015e081bc7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2a43f5-7540-4f1b-924b-6642f225caa5", "sighting_of_ref": "indicator--ed976f41-45d4-4de2-86e5-3f015e081bc7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a23bc6-f302-4abc-9be3-0d1b5a4fa30b", "sighting_of_ref": "indicator--ed976f41-45d4-4de2-86e5-3f015e081bc7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be29e77c-2351-4ae5-9eed-48ad9ad9e346", "sighting_of_ref": "indicator--2158534c-0522-4e4b-8746-698ba36d7e98", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bae10a-8a40-4095-9678-7c83702f11a4", "sighting_of_ref": "indicator--10ffbce6-d4a2-44ea-8785-94368c3328de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2257a033-b0cf-4fda-8b2f-b8817de24ee0", "sighting_of_ref": "indicator--10ffbce6-d4a2-44ea-8785-94368c3328de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--334e4e0a-18e1-4e84-9fde-1053e603f12f", "sighting_of_ref": "indicator--10ffbce6-d4a2-44ea-8785-94368c3328de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77051876-855f-4e61-b98d-81a071906170", "sighting_of_ref": "indicator--eaa83249-42f0-4a5c-b4c5-c4eab0dd981b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c83d59d-9556-4b64-b47b-b4ba04d3abbd", "sighting_of_ref": "indicator--ca582567-8c22-4917-b4aa-651287938272", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3acfc2-89d6-41a5-8051-793637de9710", "sighting_of_ref": "indicator--ca582567-8c22-4917-b4aa-651287938272", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a21360-8001-4a16-971f-e9c42220a62b", "sighting_of_ref": "indicator--e55278c5-52e2-4cbf-b434-117013e2983a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cb5a35-2935-4ff3-918c-85d5cadd364f", "sighting_of_ref": "indicator--e55278c5-52e2-4cbf-b434-117013e2983a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04ec3dd-56ac-4482-9d34-d00bce218727", "sighting_of_ref": "indicator--83784c57-4c5a-4336-aed5-705e4a160a14", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6616db-af52-4a76-8490-393aa29abfd7", "sighting_of_ref": "indicator--83784c57-4c5a-4336-aed5-705e4a160a14", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f413a554-ab42-4130-ae17-aa996e16a4de", "sighting_of_ref": "indicator--d8739dcf-b21e-49de-a223-1440a4d95fb3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c505c1e-98e9-40b3-b3f2-cbb51290f7a3", "sighting_of_ref": "indicator--9a90f486-2d80-460c-954b-6338717d4464", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff77a603-d60b-4de0-9f26-40a4ed039367", "sighting_of_ref": "indicator--faa2189a-d289-46f3-a05a-913b12ee33f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ab31c4-e3b1-4477-955f-edc6d91d151c", "sighting_of_ref": "indicator--faa2189a-d289-46f3-a05a-913b12ee33f2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3ad1f1-8764-4091-aa5b-99a5a4b82bbd", "sighting_of_ref": "indicator--faa2189a-d289-46f3-a05a-913b12ee33f2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55685cf9-0724-4248-915d-90bc742fdf9c", "sighting_of_ref": "indicator--5310ee53-8a76-472d-ad2f-895405331d89", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564ff64a-784d-40e5-99b4-b7849b09427b", "sighting_of_ref": "indicator--5310ee53-8a76-472d-ad2f-895405331d89", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5736f50-a93d-4634-9ca4-fd877b7afc8b", "sighting_of_ref": "indicator--5310ee53-8a76-472d-ad2f-895405331d89", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f3d9bc-68d4-4775-9910-1bac7692c74d", "sighting_of_ref": "indicator--d5b500b2-bdf6-4d62-80c4-23176d702ca3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fbe6bb-f7ad-47f2-a60e-5b52e6c0a0bc", "sighting_of_ref": "indicator--61e55c3f-6479-492f-a97d-4375bd69faa5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751b5210-22b6-404e-8ced-eef6351ba9e9", "sighting_of_ref": "indicator--61e55c3f-6479-492f-a97d-4375bd69faa5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138834a7-8d58-4de3-8a31-512b675901a4", "sighting_of_ref": "indicator--9d053cbd-a70d-4cdc-8929-650972ac901b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfc2b1f-75d0-440b-a5a6-7420fc82fed9", "sighting_of_ref": "indicator--9d053cbd-a70d-4cdc-8929-650972ac901b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477e487a-6e57-4c24-9a04-8c388d6c4919", "sighting_of_ref": "indicator--4ae17ab3-a8e4-48c9-8233-0743f52c089a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5186d80c-8776-4237-9dfc-7f10d71aa045", "sighting_of_ref": "indicator--63aada88-4c1f-49bf-bddc-d68e09a95ba0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3c41f4-c62a-4326-9703-c4b1974388a1", "sighting_of_ref": "indicator--63aada88-4c1f-49bf-bddc-d68e09a95ba0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62924da-ef30-4c8c-a64b-f9faabcba343", "sighting_of_ref": "indicator--63aada88-4c1f-49bf-bddc-d68e09a95ba0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463aecc1-b6f3-4efb-aa1a-0e212015175d", "sighting_of_ref": "indicator--e587d8a4-2467-4373-8b4d-402ebeca5b49", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7381d4b-f3bb-4b7f-9a2a-2afc0d34bc53", "sighting_of_ref": "indicator--e587d8a4-2467-4373-8b4d-402ebeca5b49", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25e8c2a-4c34-4525-a9a7-9be96e38bd38", "sighting_of_ref": "indicator--e587d8a4-2467-4373-8b4d-402ebeca5b49", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c474655d-adb6-48cd-a0ba-b0001fd2f1ae", "sighting_of_ref": "indicator--2aa32cbe-f7b9-48a2-9072-6782a34b2477", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e303cf5c-0f7b-4809-963b-023d7e7768b2", "sighting_of_ref": "indicator--2aa32cbe-f7b9-48a2-9072-6782a34b2477", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49fc84c-cbc2-4420-9a01-03b931ef6c4d", "sighting_of_ref": "indicator--2aa32cbe-f7b9-48a2-9072-6782a34b2477", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f6d8b2-8b5c-41a0-9b8b-b304609d30a4", "sighting_of_ref": "indicator--85630383-2cd0-4148-9492-1c598f5306a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84086988-8f72-46ec-92a4-b6f0258c03f3", "sighting_of_ref": "indicator--85630383-2cd0-4148-9492-1c598f5306a7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd761a6-bd7d-420e-b644-f30c6c473580", "sighting_of_ref": "indicator--e9bc8d50-897e-44b1-a461-d06bdf33b8ab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83b78c9-6943-4219-8aef-04594eda2bd1", "sighting_of_ref": "indicator--79907d51-8c0f-43ff-93f3-1d0b39a134e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb0c43b-3118-4da4-812b-32ac6128a42f", "sighting_of_ref": "indicator--79907d51-8c0f-43ff-93f3-1d0b39a134e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94208b2-a6a3-4f74-942d-f9ccf93e65eb", "sighting_of_ref": "indicator--79907d51-8c0f-43ff-93f3-1d0b39a134e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc222c5-8c29-43d4-b6a0-b59cd2ee6816", "sighting_of_ref": "indicator--b59c1264-f0bc-4794-b0be-b8c68f39223e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c251149c-418e-41f8-a125-baa4c63df6aa", "sighting_of_ref": "indicator--b59c1264-f0bc-4794-b0be-b8c68f39223e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7278b6-a3e1-4c14-8183-18a6135c8778", "sighting_of_ref": "indicator--83891001-3df8-4061-93f4-083b2acd5769", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd70d25-810a-4609-a6db-9f406943bf44", "sighting_of_ref": "indicator--55a8c600-313e-4d69-a918-f5d43df10764", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356690c0-020a-490d-8c0f-5af2421a7491", "sighting_of_ref": "indicator--55a8c600-313e-4d69-a918-f5d43df10764", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b5d56d-95e4-44d9-b43f-e3d9e50c24f7", "sighting_of_ref": "indicator--5c3d41a4-7e18-48aa-9a17-4e78bdf25d2c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e132e73d-e276-4611-906f-2ac8932601af", "sighting_of_ref": "indicator--89cd72b1-ddb7-4051-98d5-3cbdb48c5203", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8c3752-0b3a-4453-bf30-25ab3b6d8036", "sighting_of_ref": "indicator--89cd72b1-ddb7-4051-98d5-3cbdb48c5203", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71405b0-c50d-49b9-92df-30b0373dccb6", "sighting_of_ref": "indicator--89cd72b1-ddb7-4051-98d5-3cbdb48c5203", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6025a9-3672-4978-a143-8ee79c86d43d", "sighting_of_ref": "indicator--0cf13be1-d80c-4dbe-b91a-8f1a74e6fa14", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c88b0b-4717-4a99-9f43-d47dddf325db", "sighting_of_ref": "indicator--0cf13be1-d80c-4dbe-b91a-8f1a74e6fa14", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b66cac-ef2f-4f28-99e8-411330df653d", "sighting_of_ref": "indicator--0cf13be1-d80c-4dbe-b91a-8f1a74e6fa14", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f596d1-5158-4d78-a97b-418c6dc78bc1", "sighting_of_ref": "indicator--54ef65fb-4afe-478c-a760-8e236a77023e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f1aa46-a3d9-4586-9abd-a1c647ed9800", "sighting_of_ref": "indicator--54ef65fb-4afe-478c-a760-8e236a77023e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d21937-e8b5-4672-80ea-4d1ef85186ab", "sighting_of_ref": "indicator--54ef65fb-4afe-478c-a760-8e236a77023e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3680218-9cd8-4647-b801-4f8a890ed79a", "sighting_of_ref": "indicator--595c2f4a-0826-41b2-8006-c5bfa5c560f9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f76908b-dad3-4ad2-8aea-58ec029e5c96", "sighting_of_ref": "indicator--eccdea00-05a3-484d-8a6b-484584e075a1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b8a21c-e3a5-4fc4-869e-66ed9769abef", "sighting_of_ref": "indicator--eccdea00-05a3-484d-8a6b-484584e075a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9447bdab-020c-4e13-ba58-d000b9dec297", "sighting_of_ref": "indicator--049d5ae7-89f7-4a38-848b-e7a40f477a16", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c06bd3-a7e8-4a38-a84b-729fe3fcd22d", "sighting_of_ref": "indicator--049d5ae7-89f7-4a38-848b-e7a40f477a16", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031d1d07-e7e7-4854-946a-127d6c67f5e5", "sighting_of_ref": "indicator--4e025d96-dfb0-4039-bf6c-81e56db2806e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26dc26a6-3407-4a78-bfb3-ae4d816bb281", "sighting_of_ref": "indicator--4e025d96-dfb0-4039-bf6c-81e56db2806e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d00d5b4-ba97-4de5-a3e3-a3ca6ddf5fd9", "sighting_of_ref": "indicator--f671ff78-dd3b-4e04-8f46-acdea9ab9441", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7cb6c5-1664-48bd-83c6-65cd247aa5ad", "sighting_of_ref": "indicator--f671ff78-dd3b-4e04-8f46-acdea9ab9441", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce74c6f-d04d-4e7d-8acb-6f96beb2ea8c", "sighting_of_ref": "indicator--f671ff78-dd3b-4e04-8f46-acdea9ab9441", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa496f95-3191-4990-a1aa-78018beb5532", "sighting_of_ref": "indicator--9e857571-c4c0-4434-9611-8030d0d83496", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f46e227-6e12-4b26-a691-da2e3739c29d", "sighting_of_ref": "indicator--9e857571-c4c0-4434-9611-8030d0d83496", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5022ca86-0cda-4177-b72e-d11ea80b2bef", "sighting_of_ref": "indicator--9e857571-c4c0-4434-9611-8030d0d83496", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91e9476-06eb-4665-9357-a7b560b1b7a3", "sighting_of_ref": "indicator--46d7adc4-8f0a-4131-a885-18dc8fae1f11", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958ecddd-7c9e-4b7e-b9c4-1135837b9815", "sighting_of_ref": "indicator--46d7adc4-8f0a-4131-a885-18dc8fae1f11", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba41b34-8405-446d-b4d2-e51e9042705d", "sighting_of_ref": "indicator--a4438ecc-aa9a-4d17-9d1d-63edd6354c67", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a80e3ab-f7c4-4f0d-96d7-7d4a0c14d29b", "sighting_of_ref": "indicator--a4438ecc-aa9a-4d17-9d1d-63edd6354c67", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb48188f-4204-444a-ab96-b6ab65faa0ee", "sighting_of_ref": "indicator--a4438ecc-aa9a-4d17-9d1d-63edd6354c67", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802094d4-12ad-4fd2-978b-13d3cdffd708", "sighting_of_ref": "indicator--5eacab30-904a-42eb-b74a-8742cf9cc954", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7267b339-092c-4f27-93c9-a6433fc6e186", "sighting_of_ref": "indicator--4939a821-a91f-4349-921d-402e58f699df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f5caa3-713a-4221-96fa-c4606986225b", "sighting_of_ref": "indicator--e993c5ff-7dea-4850-a5bb-6494d71300ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f9df07-f03e-4424-ab2f-64074fe53770", "sighting_of_ref": "indicator--e993c5ff-7dea-4850-a5bb-6494d71300ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a29e7a9-b36d-4484-a7f3-bf1096651c3e", "sighting_of_ref": "indicator--e993c5ff-7dea-4850-a5bb-6494d71300ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3666dd2c-f22c-47df-bb45-c58106d1c927", "sighting_of_ref": "indicator--19be3025-1a08-45f8-9f75-f4d40277f1f5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b537d2-1cc8-4798-bd72-c3efeb5d5902", "sighting_of_ref": "indicator--1b9715d7-cf8b-47b9-906f-bc50c3e06cb2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f72194a-fa19-4783-b995-6af4f135dfdb", "sighting_of_ref": "indicator--dee6c4f6-8ca5-4103-862a-7fe22db24328", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ee59b0-b8cf-4da0-b365-9cb4f5dd143e", "sighting_of_ref": "indicator--dee6c4f6-8ca5-4103-862a-7fe22db24328", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea650e1-52ac-492d-84c6-15c1666d95af", "sighting_of_ref": "indicator--dee6c4f6-8ca5-4103-862a-7fe22db24328", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c802617-c1a3-4413-afe7-cf32be5b8f50", "sighting_of_ref": "indicator--733bf514-32e0-4d90-9cd5-692920db1c6c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e64f904-6ddf-42a6-bd52-477413c1022f", "sighting_of_ref": "indicator--733bf514-32e0-4d90-9cd5-692920db1c6c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580ba633-a9a1-4ac9-bcc4-2ac5a2ef9caf", "sighting_of_ref": "indicator--733bf514-32e0-4d90-9cd5-692920db1c6c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032792ae-5488-4806-b827-33f5477ec4d3", "sighting_of_ref": "indicator--9fdfe241-0dbd-45ad-a136-417f02d24bca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17170467-0916-4254-a3ba-c7e44eb727cb", "sighting_of_ref": "indicator--a015e23e-1e1b-487f-8d20-b8f8b016e3ff", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c801dc1b-02e3-40d8-88e3-0cc9ee460f8c", "sighting_of_ref": "indicator--a015e23e-1e1b-487f-8d20-b8f8b016e3ff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bf1d96-bad3-4f5f-be7a-80c7233e5f9c", "sighting_of_ref": "indicator--a015e23e-1e1b-487f-8d20-b8f8b016e3ff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73bb325-9b26-4608-af85-c11701cfef7b", "sighting_of_ref": "indicator--adf0f2fd-ad2d-4607-a996-b3b8ccda046c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06a4a4b-a8d5-4787-b2a2-6aa9df93b5da", "sighting_of_ref": "indicator--6f01b0ca-3323-4387-8779-5de555bc6d60", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c609074-2039-4794-b050-649f4f7742f0", "sighting_of_ref": "indicator--256d1874-a8ef-479b-83ec-25ac1eec1daf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc3e7b0-d21d-4b2a-9a93-ecf59118e586", "sighting_of_ref": "indicator--a49fcb21-b0b5-47c7-870d-56eae220f64b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f0c76c-2a55-4b32-8ced-bccda3e685fe", "sighting_of_ref": "indicator--a49fcb21-b0b5-47c7-870d-56eae220f64b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fbe413-f722-4700-b7eb-2f18d89a9fdc", "sighting_of_ref": "indicator--a49fcb21-b0b5-47c7-870d-56eae220f64b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c664d6ca-0133-48ea-81ca-d485754a2a3c", "sighting_of_ref": "indicator--c2a3a83e-62d0-4e87-a06d-18cd2db9ae39", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab39e3c-c729-424a-bca2-8bf72a806999", "sighting_of_ref": "indicator--fbdc66e3-be90-4edd-aa4e-4667093f176a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f843e0e-f235-445e-9113-d8f572aee485", "sighting_of_ref": "indicator--f7cd3962-f393-4f74-94e3-e6d278cdf653", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0907abd7-f8ce-431c-8513-3240d06fb756", "sighting_of_ref": "indicator--f7cd3962-f393-4f74-94e3-e6d278cdf653", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ddf31e-bda2-44cb-aa0d-0e43d606cd32", "sighting_of_ref": "indicator--464db98d-611e-42f4-8a83-231211bebed9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17242365-486f-4cfd-a2d0-b673ca9bae54", "sighting_of_ref": "indicator--464db98d-611e-42f4-8a83-231211bebed9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10ec375-3a0f-4db1-aeff-066b59bdc9ec", "sighting_of_ref": "indicator--464db98d-611e-42f4-8a83-231211bebed9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29217e9a-7f9e-4c17-a065-794cd2572b56", "sighting_of_ref": "indicator--aa840ec2-13f2-44b3-a052-be95664bd948", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f134cf6f-3624-499f-b295-9c42f5f73c7a", "sighting_of_ref": "indicator--aa840ec2-13f2-44b3-a052-be95664bd948", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91517499-7139-43a5-b66a-a0cd9d5c758e", "sighting_of_ref": "indicator--aa840ec2-13f2-44b3-a052-be95664bd948", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72afc103-034e-46ad-9012-6821b7e34bdc", "sighting_of_ref": "indicator--bff830b7-fa72-4a43-a85f-d935235196a8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a515457-4b9c-4b9b-a811-85243bbc7eb1", "sighting_of_ref": "indicator--bff830b7-fa72-4a43-a85f-d935235196a8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300a8cbe-b69c-4eb5-acee-020b638e463c", "sighting_of_ref": "indicator--dde8689f-2f62-491b-a70e-8eea6d4b293f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e03d08-44a9-4af9-b801-81cb82b41d7b", "sighting_of_ref": "indicator--dde8689f-2f62-491b-a70e-8eea6d4b293f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c126207-dfc4-454e-8c18-f579f0052e91", "sighting_of_ref": "indicator--a93fc6b6-eab6-460b-9fe7-caea8329b891", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb96408-d431-4848-adda-6c47ba450f8a", "sighting_of_ref": "indicator--a93fc6b6-eab6-460b-9fe7-caea8329b891", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25a164f-8b37-46e1-96d2-aa4fa87e06ad", "sighting_of_ref": "indicator--89bb310e-6f68-4d45-a29f-6a24a2fc609e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4936b19-13ec-42c1-985f-8ca5889caf28", "sighting_of_ref": "indicator--89bb310e-6f68-4d45-a29f-6a24a2fc609e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf6c0b0-3631-4318-a7f3-12659b483c70", "sighting_of_ref": "indicator--7d086bcd-6c9c-4264-9f8b-8bc488fc0b2c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5004c76f-512d-49d7-b03b-97a18326c6b3", "sighting_of_ref": "indicator--7d086bcd-6c9c-4264-9f8b-8bc488fc0b2c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c22aaf0-996e-4aa1-819c-2ab796b56b2f", "sighting_of_ref": "indicator--8bc95a05-5f02-457f-bc3b-c9e8f9eef002", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392e3b8a-29c2-4446-93d1-a51d221f5922", "sighting_of_ref": "indicator--c1ec6eef-3695-49a9-9d0a-e67e15fe08b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f444d67d-515e-423b-97f8-581f31ea0ee3", "sighting_of_ref": "indicator--ef92c20f-f86b-45e6-8841-d71227c6ae93", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446291d8-5f15-4afd-b613-13de35ddd6bf", "sighting_of_ref": "indicator--afbd7537-f683-4f8d-99c1-21c1c0b9e368", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3f262d-3fac-4409-a63d-538a5518c659", "sighting_of_ref": "indicator--afbd7537-f683-4f8d-99c1-21c1c0b9e368", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa828d45-4160-4753-81f4-af2aa32bda2b", "sighting_of_ref": "indicator--2767af6a-fad4-4a78-bf48-f17bceb2460d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832c5213-4fa3-4f17-9b16-4758ebef9110", "sighting_of_ref": "indicator--29b44ee4-3d89-4ea2-a9a1-a17f42361ac7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d59840a-6bc5-4a42-bf69-8184fcbceb01", "sighting_of_ref": "indicator--29b44ee4-3d89-4ea2-a9a1-a17f42361ac7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d844a94f-2f4a-4ee9-a58c-7b9d0762b6ab", "sighting_of_ref": "indicator--29b44ee4-3d89-4ea2-a9a1-a17f42361ac7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ac69c0-34c9-4c18-b97a-c6b5faa17c71", "sighting_of_ref": "indicator--db45fbf0-a0a7-496c-9c49-2e4d514be3c3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca17899a-2a64-4bac-9f47-6347344ae62e", "sighting_of_ref": "indicator--650c821f-ad76-4f37-a134-4876ccad63a4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63aaa43b-2a2a-4a40-b165-b33e118c7489", "sighting_of_ref": "indicator--611c011e-fb72-4698-8471-84870f9d2c91", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94dac653-bb52-43de-b344-343529138913", "sighting_of_ref": "indicator--611c011e-fb72-4698-8471-84870f9d2c91", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d57e102-096c-4512-a77f-5c4039ceaf74", "sighting_of_ref": "indicator--611c011e-fb72-4698-8471-84870f9d2c91", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e9219f-defc-4abe-8cfe-acd3b73c53c6", "sighting_of_ref": "indicator--f33d2f7d-6911-4b6c-aa9d-3209a184d919", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a895c76-e738-475f-aeb4-7c3ce117c0e9", "sighting_of_ref": "indicator--f33d2f7d-6911-4b6c-aa9d-3209a184d919", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe02991-71af-41fd-b707-eddaa69abbd0", "sighting_of_ref": "indicator--f33d2f7d-6911-4b6c-aa9d-3209a184d919", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0487fa18-4c19-4514-a52c-878e44cf3d81", "sighting_of_ref": "indicator--df4bb684-48f9-4b63-a395-758aa4e3de01", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21709fee-5833-4ea5-9ea8-57e673b7eaf7", "sighting_of_ref": "indicator--df4bb684-48f9-4b63-a395-758aa4e3de01", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e52e42-5451-4a74-a479-41f74474ce08", "sighting_of_ref": "indicator--df4bb684-48f9-4b63-a395-758aa4e3de01", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1956f05-bc56-469d-902f-1fa33430dcf5", "sighting_of_ref": "indicator--1008a0c3-c10d-40e2-a382-53d2e7924a33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc7ac52-6003-40e5-96a4-10a188d258e2", "sighting_of_ref": "indicator--1008a0c3-c10d-40e2-a382-53d2e7924a33", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48a2347-4cfe-419a-b117-21a68078124f", "sighting_of_ref": "indicator--eac16b65-3398-4167-82a8-8eb79759a053", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a81ebd-d18d-4db5-a1f3-90bcd8428ffd", "sighting_of_ref": "indicator--eac16b65-3398-4167-82a8-8eb79759a053", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e093a82-9c32-4b12-b371-bda6c816dfc4", "sighting_of_ref": "indicator--eac16b65-3398-4167-82a8-8eb79759a053", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a79b63-47fd-4f1e-96c0-8c5dceaf78f8", "sighting_of_ref": "indicator--bc908904-4a8f-4e4b-9563-ea681c9f8146", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc25b43-8f21-4f99-bae9-b7ed8365ee59", "sighting_of_ref": "indicator--2f0ea578-7e41-40a8-a4dd-bc56d7e6d275", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983f9dbe-f6fd-4e8b-9838-27ce5de02d8c", "sighting_of_ref": "indicator--2f0ea578-7e41-40a8-a4dd-bc56d7e6d275", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ba7c78-9a25-4c89-8ecd-98189852a869", "sighting_of_ref": "indicator--2f0ea578-7e41-40a8-a4dd-bc56d7e6d275", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a48dc0-ed7a-4aef-ab2b-cf0f7736017a", "sighting_of_ref": "indicator--0fe92bb6-1ddf-4e46-b52c-d687351c40f7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc73a83-8808-482f-9434-32b872a032f0", "sighting_of_ref": "indicator--0fe92bb6-1ddf-4e46-b52c-d687351c40f7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9d5384-328c-412c-8ff2-fabc0d957722", "sighting_of_ref": "indicator--0fe92bb6-1ddf-4e46-b52c-d687351c40f7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57dcb52c-1045-4ea1-991c-dbda786b195a", "sighting_of_ref": "indicator--a8287120-f3bb-481e-a79f-70c90eac8dcc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1c4271-f268-4cbc-9a59-f2b851fea6fe", "sighting_of_ref": "indicator--a8287120-f3bb-481e-a79f-70c90eac8dcc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a667fdff-fe91-4609-a3d4-3d4101d9c110", "sighting_of_ref": "indicator--a8287120-f3bb-481e-a79f-70c90eac8dcc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41a3341-cd09-47c9-8038-b32a3a31d82c", "sighting_of_ref": "indicator--72f88a29-fd59-4737-b39e-45cf011538c5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26a5bb9-6c22-4e88-a688-f5c6f3045ecd", "sighting_of_ref": "indicator--72f88a29-fd59-4737-b39e-45cf011538c5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60a9bce-a722-4c11-9647-016e69422da3", "sighting_of_ref": "indicator--72f88a29-fd59-4737-b39e-45cf011538c5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c247fcf-8d28-4ad9-9fdf-7460e4cda795", "sighting_of_ref": "indicator--cf9a52c6-bb15-4e05-a2bb-334a10a8272a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd403f8d-f19e-4d3e-8427-851f7831108c", "sighting_of_ref": "indicator--cf9a52c6-bb15-4e05-a2bb-334a10a8272a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9630aec1-0194-444b-aae2-f65d5bd6cb27", "sighting_of_ref": "indicator--cf9a52c6-bb15-4e05-a2bb-334a10a8272a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36948576-f3bd-47d5-b721-aa6df5d518ec", "sighting_of_ref": "indicator--ac94a637-cd13-4689-8810-f41f5c79ee1d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6547994-f661-450a-9086-1eec74475738", "sighting_of_ref": "indicator--ac94a637-cd13-4689-8810-f41f5c79ee1d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada177c5-7a98-4ab4-9ba1-63fdd773315d", "sighting_of_ref": "indicator--ac94a637-cd13-4689-8810-f41f5c79ee1d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a2c96d-9c94-4cc3-92d2-362c69083ec9", "sighting_of_ref": "indicator--bd5d9450-bee3-42b5-a097-7cc3a85a4c83", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171701c1-0227-4b5f-8cf5-c105bf7d6e13", "sighting_of_ref": "indicator--4a5a7043-2ed7-4079-acab-6ae897e5a993", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8bfcca-54b4-46f7-ac5d-eb125d77740e", "sighting_of_ref": "indicator--4a5a7043-2ed7-4079-acab-6ae897e5a993", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10da1cf4-d559-4538-a313-a1597092a60d", "sighting_of_ref": "indicator--4a5a7043-2ed7-4079-acab-6ae897e5a993", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea37c473-50aa-4335-ba1f-6b20c20dff43", "sighting_of_ref": "indicator--86fdfd84-679d-4509-b2c2-2e21713299bb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5df9a5b-3516-41ba-a875-908cb70dc9b4", "sighting_of_ref": "indicator--86fdfd84-679d-4509-b2c2-2e21713299bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc0300c-1ea3-41a7-aa90-cafb7410f4d7", "sighting_of_ref": "indicator--2d47bf25-2aa1-4251-b439-36804c89e953", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c743a3f-93b1-4a8f-b89d-4838e4ffb7fd", "sighting_of_ref": "indicator--2d47bf25-2aa1-4251-b439-36804c89e953", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72eadf09-166e-43e3-b9fb-2786ecad4f3c", "sighting_of_ref": "indicator--98a488e6-90a5-48db-8184-1b7306845b03", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260dad08-c5e2-441f-acd7-10ac2628192a", "sighting_of_ref": "indicator--98a488e6-90a5-48db-8184-1b7306845b03", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdbb11a-3f71-40e6-ab0d-e5f238c65d46", "sighting_of_ref": "indicator--98a488e6-90a5-48db-8184-1b7306845b03", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff89557-9595-42b4-966a-7b80888ffd92", "sighting_of_ref": "indicator--f88aa02a-52f8-4c10-baf1-6f79fe92768e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e07903-b594-46e8-a6e6-1d08cf8bb79a", "sighting_of_ref": "indicator--251891ce-cd4d-48cf-97cf-9152ddd6712b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab266d8c-838d-46a3-af02-d30ebb630429", "sighting_of_ref": "indicator--89a87f31-2a68-47d9-938b-fde3d929accd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddd77f0-c52f-4b42-99b6-79b20eeb609d", "sighting_of_ref": "indicator--bfa88090-d8aa-4226-a71f-d51df3398a4d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eabcaea-ce62-4226-8cd5-030c1bf8c856", "sighting_of_ref": "indicator--bfa88090-d8aa-4226-a71f-d51df3398a4d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013dde95-eee3-45e4-9af9-1fa77942a898", "sighting_of_ref": "indicator--0544a89b-8353-4b4a-ac7c-488c69ea3f81", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50c516a-4e69-499e-a95b-a925b450ee18", "sighting_of_ref": "indicator--97eb033b-e58b-48eb-8b1c-c71f76fff4da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd8c2ad-05eb-4677-a9e4-e37482a134ca", "sighting_of_ref": "indicator--fb931539-be1c-448c-b906-1f28ba64663b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dde900-5822-4de5-9395-69c53795f5c1", "sighting_of_ref": "indicator--7a828e69-d21b-4ebe-8ee6-211256b56db1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3bd29e-c761-439d-ae61-281a5798bc21", "sighting_of_ref": "indicator--8278b1a2-4a18-42d9-bced-ccc592c3182f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6ab6b9-f9cb-4330-9f0b-bfe785a34284", "sighting_of_ref": "indicator--8278b1a2-4a18-42d9-bced-ccc592c3182f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a044f76a-c2f1-4491-8c8a-af69e50094aa", "sighting_of_ref": "indicator--8278b1a2-4a18-42d9-bced-ccc592c3182f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd04941-ea67-4404-9720-7a9ed5554b84", "sighting_of_ref": "indicator--fac4913a-0791-4381-a498-651ba0a291cb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2028d19f-57ef-4514-b808-027a23d74f6e", "sighting_of_ref": "indicator--fac4913a-0791-4381-a498-651ba0a291cb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6754313a-f1fd-4a6b-ab88-1960aad4a0a4", "sighting_of_ref": "indicator--4b8dd242-5eb7-4900-a69d-88104b46d184", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bf09c4-deb1-4a1e-9d41-84e44beeb330", "sighting_of_ref": "indicator--821d96b2-4d5c-4b4f-a8d4-f720bc639c97", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4fd484-e867-407f-a858-7c967c127819", "sighting_of_ref": "indicator--ac3450b6-15e0-4ad0-bd35-756d922d6339", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c160e4-509a-436b-9914-59e70a4d54ab", "sighting_of_ref": "indicator--ac3450b6-15e0-4ad0-bd35-756d922d6339", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52df29d-abcc-4751-bc31-56ac1c3d2f4d", "sighting_of_ref": "indicator--6bb1f19d-1a01-416e-b18e-ea080d4ee3ea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acdec10-e4d0-4410-a643-105cc5456753", "sighting_of_ref": "indicator--6bb1f19d-1a01-416e-b18e-ea080d4ee3ea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee66e1fb-6104-43db-9fd4-8b58ac09a989", "sighting_of_ref": "indicator--db4b913e-2476-4d0a-8e5d-6b91bcfd0ae6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580c12a2-b0e2-4c93-ad49-59948806d4f7", "sighting_of_ref": "indicator--db4b913e-2476-4d0a-8e5d-6b91bcfd0ae6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156b1dbf-af41-4b9e-b48d-c0284fbae166", "sighting_of_ref": "indicator--db4b913e-2476-4d0a-8e5d-6b91bcfd0ae6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e927312c-21a8-46ad-9037-24e3d1e461d6", "sighting_of_ref": "indicator--aaf47bc7-5c66-43b7-a476-61f54b901ff2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e566f29a-72b5-40c8-845f-82ef7940a78d", "sighting_of_ref": "indicator--aaf47bc7-5c66-43b7-a476-61f54b901ff2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae02ebf-91b0-4aee-ba83-f7501083b9d5", "sighting_of_ref": "indicator--d42797f2-058b-4490-9c5e-d0a8afee6b72", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a025ad10-5bcf-4adf-b559-7b4431b9401d", "sighting_of_ref": "indicator--d42797f2-058b-4490-9c5e-d0a8afee6b72", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb5d628-1803-4313-81b2-ecb4121391c2", "sighting_of_ref": "indicator--8a3f8623-4076-4252-900d-f3727b1b4ef7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca75d87-bd36-4db1-9024-36eb26a2dfe5", "sighting_of_ref": "indicator--8a3f8623-4076-4252-900d-f3727b1b4ef7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9e5008-01e0-4240-bece-61e4a2f0305a", "sighting_of_ref": "indicator--8a3f8623-4076-4252-900d-f3727b1b4ef7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e39183-3af1-4c2e-be5f-9162d6367632", "sighting_of_ref": "indicator--f487bbce-4655-4cf4-858d-48ef90383dc4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4204e3e5-b6f3-49ee-a2ca-2be35f9b5127", "sighting_of_ref": "indicator--bad86d67-5ab2-4425-8cdd-b405e33e688f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17c2c43-a369-4c9c-9915-15fd31da32b7", "sighting_of_ref": "indicator--bad86d67-5ab2-4425-8cdd-b405e33e688f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2925c8fd-dd9b-4d2a-bd44-df1b06c1740d", "sighting_of_ref": "indicator--0a0db14f-5ed7-4cb6-b520-d330848789ea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c543e1-435d-4835-801b-bc41c3ff6167", "sighting_of_ref": "indicator--0a0db14f-5ed7-4cb6-b520-d330848789ea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6a9691-8de4-4361-916d-49841127d813", "sighting_of_ref": "indicator--36878dcd-2b25-4ded-8306-216be765edc6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f665ccfc-177d-4c2c-93f6-2c3d259e798b", "sighting_of_ref": "indicator--36878dcd-2b25-4ded-8306-216be765edc6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c88f72-ee95-4c60-a8f2-9c6c25746812", "sighting_of_ref": "indicator--36878dcd-2b25-4ded-8306-216be765edc6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e1e955-6863-45ae-a8da-71a0685b0392", "sighting_of_ref": "indicator--86da62fa-ccf8-49cf-873d-effcada69dc3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b71000-5259-48ae-b561-1fcc7ab46c6c", "sighting_of_ref": "indicator--87b15411-97f7-4a2e-9fdf-b694f83e6248", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1fa3fc-849b-41d3-978c-854c1c21baab", "sighting_of_ref": "indicator--87b15411-97f7-4a2e-9fdf-b694f83e6248", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22421c2-48e9-4f5b-9803-c5c61634d98c", "sighting_of_ref": "indicator--7e0d1349-50da-4fd7-be11-5ebe78ecf55e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a9f16c-2457-4c7d-968c-3867aea422fd", "sighting_of_ref": "indicator--7e0d1349-50da-4fd7-be11-5ebe78ecf55e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdfb7e4-870f-42b9-a9b1-c0e1349fe9f2", "sighting_of_ref": "indicator--596af8f2-5c33-4a5f-89ee-5595187cf540", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3a2bb3-8292-4dc5-9ba0-6f2f309f2e90", "sighting_of_ref": "indicator--596af8f2-5c33-4a5f-89ee-5595187cf540", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3977608d-777f-4453-9543-a7bf93b4eb3e", "sighting_of_ref": "indicator--596af8f2-5c33-4a5f-89ee-5595187cf540", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b28a297-ed16-4469-a574-4b28105c78db", "sighting_of_ref": "indicator--5bd40a93-f69a-4092-af89-8e9f8b8db49f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a227e9-54b3-4980-9cff-5aeaa70ce18f", "sighting_of_ref": "indicator--5bd40a93-f69a-4092-af89-8e9f8b8db49f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7c2b2a-3682-4c6c-a38c-5a3f1a3e5dde", "sighting_of_ref": "indicator--6616271c-0028-417b-b04c-cdebc107fa4a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d30aa1-c163-466e-a536-97fbe92df471", "sighting_of_ref": "indicator--aca1e48f-03c3-4722-8d81-b43ce5c90e38", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc5c530-76b3-4bc5-96a5-10f6136221f5", "sighting_of_ref": "indicator--aca1e48f-03c3-4722-8d81-b43ce5c90e38", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2235134c-250f-48e2-b91c-0ef9cfc63d10", "sighting_of_ref": "indicator--c291f7a9-0c6f-428d-af22-ab6a738cd643", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670e2c71-3246-41f5-a2fa-a8779fe94c46", "sighting_of_ref": "indicator--c291f7a9-0c6f-428d-af22-ab6a738cd643", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36462686-535a-4ec4-9548-9feabf3b88b9", "sighting_of_ref": "indicator--c291f7a9-0c6f-428d-af22-ab6a738cd643", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb994be-291e-4b9b-b45c-336b199d4b55", "sighting_of_ref": "indicator--f7054598-bc48-424f-a45e-ee6afd11af6e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce422d78-0ff6-4964-9f7a-63f4ba64a142", "sighting_of_ref": "indicator--f7054598-bc48-424f-a45e-ee6afd11af6e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37b3803-0261-4824-99b5-3d7e7c28238c", "sighting_of_ref": "indicator--f7054598-bc48-424f-a45e-ee6afd11af6e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755b2ac8-4a77-4d13-8053-ba5a6b6df14f", "sighting_of_ref": "indicator--9dc517cf-4f6c-4302-88ee-5f81ff8cc36e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0db4227-38b9-4c78-a2d6-61543a93e5c6", "sighting_of_ref": "indicator--9dc517cf-4f6c-4302-88ee-5f81ff8cc36e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3546f4af-6ce4-4d8e-9cae-44bb3c96d38f", "sighting_of_ref": "indicator--9dc517cf-4f6c-4302-88ee-5f81ff8cc36e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8b1ac9-46e7-4fb1-bed4-539ffb793c33", "sighting_of_ref": "indicator--3a2ff2cf-8c46-47d4-bfe9-c710b2396328", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d613f52b-bcbe-4d73-9857-8ad048736c77", "sighting_of_ref": "indicator--3a2ff2cf-8c46-47d4-bfe9-c710b2396328", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d5f7ea-176c-4367-ad85-e50887bdaef4", "sighting_of_ref": "indicator--d8669af1-dbc8-488a-bf77-30b6336bb744", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32f54b3-df18-41e2-93bb-95cf6f6cd207", "sighting_of_ref": "indicator--d8669af1-dbc8-488a-bf77-30b6336bb744", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c25b622-6405-4acb-8bdd-61206dec9474", "sighting_of_ref": "indicator--d8669af1-dbc8-488a-bf77-30b6336bb744", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3610d6b3-0371-413b-be9b-47668bd3d670", "sighting_of_ref": "indicator--ab7d71ad-7d31-437d-bb74-34cdfe5abc00", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0145d5fd-d8c1-423f-ae5c-1b9a2794534d", "sighting_of_ref": "indicator--ab7d71ad-7d31-437d-bb74-34cdfe5abc00", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583b34b1-5364-40fd-b90b-f4045f242fb2", "sighting_of_ref": "indicator--ab7d71ad-7d31-437d-bb74-34cdfe5abc00", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa803c0-a543-4fec-be88-3ef612f8238e", "sighting_of_ref": "indicator--33cb736f-b3cb-453e-961a-498c87deefe2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11389164-c18b-4399-b472-1ac1b684e317", "sighting_of_ref": "indicator--1cd4e1c6-c251-4c28-aa1a-94af3649fd0b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce356110-5dc6-4e8c-9cec-0c130de31be5", "sighting_of_ref": "indicator--37af24d4-bbbe-4797-bd6c-5312f79a91fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bd18e1-6a09-4043-a694-d003e2f85b00", "sighting_of_ref": "indicator--e532309c-05a6-4f4e-bddc-ffa5a361d485", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8073c0e-8ac7-4239-b0df-1312f81d2ea2", "sighting_of_ref": "indicator--e532309c-05a6-4f4e-bddc-ffa5a361d485", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69728082-3b40-4b5c-bd6e-650fa157e523", "sighting_of_ref": "indicator--e532309c-05a6-4f4e-bddc-ffa5a361d485", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131bf392-99e1-48a9-b863-e31475b3227d", "sighting_of_ref": "indicator--48cf7f96-2f0c-4224-852c-b2a3b310ccd7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e36ce32-1f5e-47bb-b48a-9694a811c399", "sighting_of_ref": "indicator--1b9b121f-f0bc-4b25-bd55-24c4ac1acb90", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af47af0-148e-4262-96b6-367127d6fb29", "sighting_of_ref": "indicator--1b9b121f-f0bc-4b25-bd55-24c4ac1acb90", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c785c4ab-2f97-45e5-afb2-0858b16d0569", "sighting_of_ref": "indicator--acc8f5c2-8ad1-44bb-abea-8c71f80b653a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb089e3-0825-460a-8491-0f6ac4416a7c", "sighting_of_ref": "indicator--acc8f5c2-8ad1-44bb-abea-8c71f80b653a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde7a1ed-30cd-4d86-a3e0-9f92a9a805bd", "sighting_of_ref": "indicator--6481b3f1-3ebb-41dd-8fa0-b15166808b81", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47286fcf-e676-44b6-bc95-6df83abc5db3", "sighting_of_ref": "indicator--8eb8fe32-1cf0-4133-91a9-3f53491ee10e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e3efaa-cd43-4fbb-a243-64f32835e90d", "sighting_of_ref": "indicator--8eb8fe32-1cf0-4133-91a9-3f53491ee10e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a65a01-817b-49d3-ae5f-565b8b09e130", "sighting_of_ref": "indicator--8eb8fe32-1cf0-4133-91a9-3f53491ee10e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca8e2b7-8fcc-48eb-b672-5df4fcaed0fa", "sighting_of_ref": "indicator--0407c1c9-c17e-4372-8b78-8100c195173b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c3d476-daa2-4f28-bde4-bf5d39fa423a", "sighting_of_ref": "indicator--3aacf12b-013d-4d29-b94f-117ed37bffe3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd909e0b-fdde-4128-bdb5-30e8f07d0335", "sighting_of_ref": "indicator--62accf95-a12f-4c76-8652-a276f670a812", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17ea5a4-2c53-476c-9da3-7f2f925a20ff", "sighting_of_ref": "indicator--042bf007-5526-4e16-b0ac-c7a547fabcf2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c1f4e24-5b27-4914-9c74-68f98e288ff2", "sighting_of_ref": "indicator--3ef612c1-be2f-4081-8145-f19dbe7a09fe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8103bf62-51ba-48f7-8371-3fdeeed769f9", "sighting_of_ref": "indicator--3ef612c1-be2f-4081-8145-f19dbe7a09fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a66b82a-acbf-4413-886b-50adfa30dbd2", "sighting_of_ref": "indicator--60aa01c6-5a9c-4d89-b5fe-cff939d49343", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3aea7e-ac95-499e-9bd5-e66a98c3def5", "sighting_of_ref": "indicator--60aa01c6-5a9c-4d89-b5fe-cff939d49343", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870cc7be-4563-40bd-87f8-1e822eff3f36", "sighting_of_ref": "indicator--76b58098-a366-4473-ae79-3e6334420c4c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4eb3d88-64d9-49c0-8297-cb11389abf4f", "sighting_of_ref": "indicator--76b58098-a366-4473-ae79-3e6334420c4c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055205d6-8e51-4a9d-beb7-17131752fa2b", "sighting_of_ref": "indicator--76b58098-a366-4473-ae79-3e6334420c4c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0427bdb1-a8d4-4b88-945d-3d75ca2a8c04", "sighting_of_ref": "indicator--53c95269-479c-4f93-9535-e7ea957ab3d2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b92e90-57e9-4125-957f-ab5c7ef38e8b", "sighting_of_ref": "indicator--09a6dcb6-e6b3-4375-a723-b9c7aedf3c76", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58005c90-fef4-4c4e-851d-560b979bf005", "sighting_of_ref": "indicator--09a6dcb6-e6b3-4375-a723-b9c7aedf3c76", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1089b96-9b6f-46ef-a8c9-f943092cec6d", "sighting_of_ref": "indicator--09a6dcb6-e6b3-4375-a723-b9c7aedf3c76", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97dc7426-74b0-4e75-8fb9-e3666634cfc5", "sighting_of_ref": "indicator--3e10b800-782b-4962-9aa2-cfe37496632d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbc8f13-e7df-466c-82d6-cefe97707dd8", "sighting_of_ref": "indicator--3e10b800-782b-4962-9aa2-cfe37496632d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97789ef6-cfc0-4a27-951b-8088b8341dd3", "sighting_of_ref": "indicator--dcddd554-ae13-47f1-9ab0-275e818fa9f5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e76b5a-aa99-4e61-b0d7-87f818452767", "sighting_of_ref": "indicator--dcddd554-ae13-47f1-9ab0-275e818fa9f5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19788d3-c99c-43e0-b0d3-fd21b0703ea2", "sighting_of_ref": "indicator--a24bd70b-dd94-4b02-bdd2-0a13ddbd846d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74f5459-f92f-4934-93d0-87f0e566e436", "sighting_of_ref": "indicator--a24bd70b-dd94-4b02-bdd2-0a13ddbd846d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6ea9b7-5334-4e71-8c2e-36d72dcbbe70", "sighting_of_ref": "indicator--a24bd70b-dd94-4b02-bdd2-0a13ddbd846d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3657d5e3-ea83-4567-9b59-8c442930dc0c", "sighting_of_ref": "indicator--c9d4f8fc-f663-460a-883a-828900367ae8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9f9aee-0443-4f01-8778-4202b99294b0", "sighting_of_ref": "indicator--c9d4f8fc-f663-460a-883a-828900367ae8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3ded60-4730-4a35-9974-798d3d82c59b", "sighting_of_ref": "indicator--c9d4f8fc-f663-460a-883a-828900367ae8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27df5fea-668f-44ec-9b6e-963871909e7a", "sighting_of_ref": "indicator--65c381a9-7d4f-4ca9-81f1-276a16721b03", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8022b36b-1ef3-415f-9ded-99acee45aa9a", "sighting_of_ref": "indicator--40420324-da48-49ad-ac20-62732e75daf2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d587eb19-b0d8-4b42-9312-83090a7878f0", "sighting_of_ref": "indicator--40420324-da48-49ad-ac20-62732e75daf2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5508d2-f177-4661-8d2b-0db7d3a98982", "sighting_of_ref": "indicator--05fe9b18-86ec-4474-b0b7-c49ffb48e152", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949c198e-915f-4ba1-9fe7-f285b8fe35f8", "sighting_of_ref": "indicator--d3272631-a5b2-4532-86d1-b0f22d675d68", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27fed50-08b8-40ad-a461-5ad7e6789a4a", "sighting_of_ref": "indicator--40d55ca5-9414-449b-ad43-e2171ce9570e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e669d26d-48d1-433d-be19-46567065c10e", "sighting_of_ref": "indicator--40d55ca5-9414-449b-ad43-e2171ce9570e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6eea914-eeb0-42f7-ac63-90986d01d802", "sighting_of_ref": "indicator--eee12be9-d7f5-4e71-87cc-e8c6cb799a49", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5fec8b-db28-411b-b700-6df0a6fd78af", "sighting_of_ref": "indicator--eee12be9-d7f5-4e71-87cc-e8c6cb799a49", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd94498-537f-4362-ad66-cbae99bd8b88", "sighting_of_ref": "indicator--63be117e-42c8-40b3-a44d-8ff422840b7c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c009097-90cf-42e3-9430-7f74dd24bda5", "sighting_of_ref": "indicator--bf772db2-d2e2-4af9-960d-a437cba5d363", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cd2cc7-8288-4118-b6e4-5c6b9235b603", "sighting_of_ref": "indicator--bf772db2-d2e2-4af9-960d-a437cba5d363", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0188680-30b5-4b40-9875-4f69437c62ae", "sighting_of_ref": "indicator--41a2d05b-7a9b-4b08-975d-ef7870818831", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6bfcb6-0c90-4f66-a7ef-f84e554432cd", "sighting_of_ref": "indicator--020a0a2d-1060-4333-b05a-95dc91634cd4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455f0b2d-9e46-4217-8aac-d28934b033bb", "sighting_of_ref": "indicator--da65672d-446a-4ff1-8c09-29c00f300730", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63b2f63-2a6b-47d6-9ac8-30eb9e50f6fe", "sighting_of_ref": "indicator--a5482d7e-7f28-4899-828c-19f6522c6ac8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec862fd-3ba1-4c55-a8d3-5f4e8b28631c", "sighting_of_ref": "indicator--8283bd32-9532-48ce-9d13-5479fbf7eb0d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0aae9c-071b-432f-8e72-cf255dc525a0", "sighting_of_ref": "indicator--8283bd32-9532-48ce-9d13-5479fbf7eb0d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428c7d2a-3aa0-423f-877c-444a1cb934f9", "sighting_of_ref": "indicator--94a289b8-0344-4b81-9c00-38b2598256ef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35fb76d-b390-497b-a7de-6de8aaf72432", "sighting_of_ref": "indicator--55952e73-89c7-4d0c-ae7e-4b9de5cfafc8", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834cc664-eea7-48a4-a81c-828c0334a2b4", "sighting_of_ref": "indicator--bc167514-5454-491c-b5c8-379f05604f5e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb52b4aa-3939-4925-9187-18a3e7808894", "sighting_of_ref": "indicator--c6e8da37-6923-4223-bc26-220d2a824c2d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d54472-32d1-4d9f-8c61-4070d4b6f82e", "sighting_of_ref": "indicator--7fe9bf77-5267-4778-859c-c736c8823a36", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d378a80-e084-42d4-8b6d-54d9bc0a4891", "sighting_of_ref": "indicator--8fccb520-05af-4c20-b7f9-ce259e6f0153", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f332aca-fdf6-4a81-aed7-73a3d3500365", "sighting_of_ref": "indicator--2edddc7d-873c-4e75-867a-3b7555fe9e43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4f83cd-f011-4dab-b551-a1553d66116d", "sighting_of_ref": "indicator--2edddc7d-873c-4e75-867a-3b7555fe9e43", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb52cf9-2c50-486c-96fb-bb0686ca79d3", "sighting_of_ref": "indicator--05d55ccb-0030-494c-9c15-bee89d6326c3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcbcfc0-6807-4846-b2d1-6e84ca1d4dd1", "sighting_of_ref": "indicator--15f341f0-b31f-497b-b5f3-7f15ab10dbaf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb9e3bc-dd8b-4064-afde-f459ee05e823", "sighting_of_ref": "indicator--15f341f0-b31f-497b-b5f3-7f15ab10dbaf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01da953e-7a39-4251-8125-18441a13ed6d", "sighting_of_ref": "indicator--15f341f0-b31f-497b-b5f3-7f15ab10dbaf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6770fc-fc75-4761-be74-cb0a4e5944c5", "sighting_of_ref": "indicator--dfdb642f-9c17-463e-95ab-5101166ae967", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f253211-b941-4e03-8c85-db67bc5a9ef0", "sighting_of_ref": "indicator--40857325-0ddc-4b1e-a923-ac7fd1d054e0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6509a6d-d291-4656-876f-d95488e29727", "sighting_of_ref": "indicator--40857325-0ddc-4b1e-a923-ac7fd1d054e0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255f01e4-dee9-41be-a987-abd62145c38c", "sighting_of_ref": "indicator--40857325-0ddc-4b1e-a923-ac7fd1d054e0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd16d2a4-fd62-4624-88f9-5cba0bd3cbf5", "sighting_of_ref": "indicator--b6d95066-d8d2-4097-bd83-772239427e62", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af884b0e-9856-44c2-a3d8-0ab584b5f155", "sighting_of_ref": "indicator--b6d95066-d8d2-4097-bd83-772239427e62", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d98bda-7e06-47c9-b02f-18f3ae6d1d32", "sighting_of_ref": "indicator--b6d95066-d8d2-4097-bd83-772239427e62", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8ae9cf-5b01-4b33-a728-5215fe600a38", "sighting_of_ref": "indicator--194e03d6-8396-4bcb-8ecb-51110532eb43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47730c37-6ab8-431e-ad53-75b8f8552083", "sighting_of_ref": "indicator--b907380b-124d-4174-8a56-f6cd5a34a02b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7c6705-44db-4043-9b2f-93b0ee964993", "sighting_of_ref": "indicator--a254aa94-c5b5-4caf-9b36-4807f0b9be25", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e71318a-c7f7-4cf5-8ab4-8cfe0423d0db", "sighting_of_ref": "indicator--e7357dc8-7a03-46eb-a650-e6e1d03227ca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5181400c-6b03-482f-babb-07d85c7ecf1d", "sighting_of_ref": "indicator--ba752a7e-12f9-43fe-b32b-6787d0f09289", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725f2584-f8e0-40d5-8ab7-918c5aeefaf2", "sighting_of_ref": "indicator--b9937e26-90ee-4dca-8284-feede82f68a9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0368864c-e98e-46d9-8a98-ab1eefdda81d", "sighting_of_ref": "indicator--d3e3e1cb-f353-4d54-918f-503ca9c190b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489fe6b8-f929-475f-8079-e6d776cbe255", "sighting_of_ref": "indicator--c6b76355-5316-4f0b-8454-b5f3e7647912", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c76ff5-2865-4421-8bf4-b991833f75fe", "sighting_of_ref": "indicator--c6b76355-5316-4f0b-8454-b5f3e7647912", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813c1741-7ce5-4524-a52c-cdec7697c06c", "sighting_of_ref": "indicator--ed5e0684-9c55-470a-921d-5b30b7db771e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cd1f8e-5519-45f7-8ca0-05a0de40bf0f", "sighting_of_ref": "indicator--7c966692-db03-4814-a5d6-442a80a58cdf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d11bfa3-1fb5-4d7b-9c13-0cc56b5f3fd3", "sighting_of_ref": "indicator--8e952b71-2fde-477d-a8b6-f80b844a2ba9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766d3cc0-e2bf-4d6b-8b89-8736a43aa904", "sighting_of_ref": "indicator--b52bc450-c818-4f77-aacb-049c51e933f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff735ba-4e69-4d2e-8da7-2e4fee3b9564", "sighting_of_ref": "indicator--d276f13a-356d-49a1-bbf0-d29d83a2f73c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b554975b-ef91-4443-8e82-8e316c8aa28d", "sighting_of_ref": "indicator--74e66030-13c9-4dbf-af12-8b2d717b1529", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9100eb62-071b-4710-9e21-d41323bef959", "sighting_of_ref": "indicator--6e1e0eaa-b8a7-4b3b-9692-1a8c985ee7ed", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c3f515-288a-44a0-b1d6-abdef2dd59ec", "sighting_of_ref": "indicator--340e74fc-a5c5-4e5c-bcea-ff7f4a9a861b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa74748f-6f3f-4d70-b83a-fa5ab473e9b3", "sighting_of_ref": "indicator--c92d9f8e-10ab-40dc-bbbd-7bb4c80e61c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b663b2b-3543-4199-be12-f1ff214e5e04", "sighting_of_ref": "indicator--a7b0f28a-7881-4711-b466-0ad6b9d56fe0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1a8730-12be-4dd9-a900-f12f18592f33", "sighting_of_ref": "indicator--3f306412-4077-4467-a20a-149c67fb5a91", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cfc061-b726-45bb-9df8-63255dd86938", "sighting_of_ref": "indicator--e4552a38-13b4-423b-8d17-a0eb0ba91578", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d4afe7-6495-405b-85fe-cb909fcf90f3", "sighting_of_ref": "indicator--0d43da83-c820-414b-b8d8-6ad3a6565a9a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f965fe4-d5d8-439d-9b2e-68d115ae364e", "sighting_of_ref": "indicator--0d43da83-c820-414b-b8d8-6ad3a6565a9a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf2d2d9-a2a1-472d-b18e-09cf7b72353c", "sighting_of_ref": "indicator--0d43da83-c820-414b-b8d8-6ad3a6565a9a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5b7b11-f82f-4985-a176-f7ce52cd8bf2", "sighting_of_ref": "indicator--840c17cb-1759-40be-abcd-df2df00b0bd4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a973162-6e00-4b9c-aa66-ed4e00048bf8", "sighting_of_ref": "indicator--cb11a28c-8115-43ad-bdea-9e380c6a3a36", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad266a2-d33f-479b-8cf2-8fb2df9d31e0", "sighting_of_ref": "indicator--cb11a28c-8115-43ad-bdea-9e380c6a3a36", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac04929-3a09-48d6-b908-256402a485ff", "sighting_of_ref": "indicator--cb11a28c-8115-43ad-bdea-9e380c6a3a36", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62e430b-2971-4d45-8833-39c591867ed8", "sighting_of_ref": "indicator--141dde3a-7d3e-4b04-9729-83d00a43951c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63b3d35-716e-4753-99c9-08a7d3cd2376", "sighting_of_ref": "indicator--6c02e909-cc66-438c-bd28-8de6c70676dc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ba6309-c880-42b9-a872-4edb7880d50e", "sighting_of_ref": "indicator--6c02e909-cc66-438c-bd28-8de6c70676dc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4bda5b-4927-4af2-a038-450bdeac1c2d", "sighting_of_ref": "indicator--a8963ca8-c449-4728-a496-23df6021e8b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616a92b6-b648-427f-9aa9-aff94331ab46", "sighting_of_ref": "indicator--c645058d-94e4-4a1b-9c81-61a3a9ae425b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1781a5a2-66cc-4ca2-9fb6-70ff1f761974", "sighting_of_ref": "indicator--56dd83ab-8118-4195-ace6-1f52c343ad1b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292887b4-34d2-48a9-9197-412124833b5b", "sighting_of_ref": "indicator--56dd83ab-8118-4195-ace6-1f52c343ad1b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e4f36b-18d7-4daa-bca2-c2e11b28a820", "sighting_of_ref": "indicator--ee7d662a-f430-45b0-a7cd-88c09514c77a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451dbfeb-fe3e-4152-bfc1-7d368068f935", "sighting_of_ref": "indicator--ee7d662a-f430-45b0-a7cd-88c09514c77a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d5bc9e-4318-47eb-bbf2-1c9aa0ac6960", "sighting_of_ref": "indicator--f82aad87-42d7-4881-ae11-585438becf02", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b371fc1c-a833-40a0-a48f-547e81f8bcb6", "sighting_of_ref": "indicator--c545a042-8cde-4a34-b93f-3a108e01c5fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a0aa9b2-7e3c-45f8-8b15-d66286cd3775", "sighting_of_ref": "indicator--c545a042-8cde-4a34-b93f-3a108e01c5fa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc05773b-16eb-4ff7-abda-4c461c1c0974", "sighting_of_ref": "indicator--2c56de37-147c-4c24-b767-79553a538fff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f86f20-197b-4909-b8a2-1990744ce50b", "sighting_of_ref": "indicator--9d739142-2bf7-4282-a5fb-32fca2753461", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a196ef9d-ed56-4ceb-bff8-836126d816d8", "sighting_of_ref": "indicator--9d739142-2bf7-4282-a5fb-32fca2753461", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb56b9c-5049-4f25-8492-f57b6dbb0d5e", "sighting_of_ref": "indicator--65de7d4e-b282-41fb-838c-007703a6fdca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d827a5-c694-43df-828b-51acf5cc439d", "sighting_of_ref": "indicator--4ba1b3c2-3e9c-46c0-a381-6b12eb4f230c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a1e989-7cc2-42a8-aa1f-2bdccc85762e", "sighting_of_ref": "indicator--c8bca6d3-4d93-4fb4-b407-c4340989921d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cde43b3-d8e7-4508-a95f-ec2e1b6366e5", "sighting_of_ref": "indicator--c8bca6d3-4d93-4fb4-b407-c4340989921d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2e4af8-93e2-4a50-836f-85a8bd0f75fd", "sighting_of_ref": "indicator--ae85d232-e375-483c-96ac-2cb92ca3e4c4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef13a22-36fa-462a-ac1c-b524911403f3", "sighting_of_ref": "indicator--c78776c7-2ca0-4565-bbd6-ebfef8c7222b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8955db-2181-4f20-8b55-4791fe4f6665", "sighting_of_ref": "indicator--c78776c7-2ca0-4565-bbd6-ebfef8c7222b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b724e5e-b14b-4ebf-9f97-af24eced0942", "sighting_of_ref": "indicator--94ebbac1-d681-44b7-92e6-6ec3769e46f5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04018021-83d8-405e-9097-571244e9b093", "sighting_of_ref": "indicator--3b391f1e-a7f1-4592-bab2-f7b6287fd364", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e38a974-6194-4c0d-a18b-1a85dfe8d610", "sighting_of_ref": "indicator--3b391f1e-a7f1-4592-bab2-f7b6287fd364", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982ee3d9-e328-4f9a-8de7-a3eb158e9713", "sighting_of_ref": "indicator--7c3362ef-f1a4-40a1-b7aa-23b6da58408e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ebfcee-393f-4c3a-b64b-2161b01c7eba", "sighting_of_ref": "indicator--b2739930-08e6-4bd8-86c4-aae31a9ab503", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04640b93-f2f2-4117-9e5d-656abce1668d", "sighting_of_ref": "indicator--f0f8397b-4517-4ff2-9478-ea15bd3e9d8b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b73f6d3-6340-479c-b124-f8141c0c5f49", "sighting_of_ref": "indicator--e9bfb326-ef04-4ec3-9f9a-e52cdac05bda", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d0e6177-7e05-4625-9cd9-ebb0f0958109", "sighting_of_ref": "indicator--858936be-f8a9-42bf-8211-f5673f787e57", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf143cb-c794-4616-8f16-94677474d02f", "sighting_of_ref": "indicator--858936be-f8a9-42bf-8211-f5673f787e57", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95589ae6-fdc0-4c7d-84e4-383f1f004995", "sighting_of_ref": "indicator--858936be-f8a9-42bf-8211-f5673f787e57", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900fd3ae-5602-4c54-80df-0f27d9d11463", "sighting_of_ref": "indicator--799246a4-252f-4b68-ba58-4a285606496b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbacd808-210f-4cd9-be77-490f328c31d0", "sighting_of_ref": "indicator--934ea2c4-0b6b-4235-b0c9-aebb5baa06be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e317be-066b-4c2b-a5b9-26ff8c54b53e", "sighting_of_ref": "indicator--934ea2c4-0b6b-4235-b0c9-aebb5baa06be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d918a2-9283-45c0-a00b-5557eb48d94c", "sighting_of_ref": "indicator--931fee1d-a989-498f-9922-b2c75661c468", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903bfa6c-fe8e-4b6e-b145-9ae6f42fb89c", "sighting_of_ref": "indicator--b2f1d7ca-f45d-402d-9e9c-a09d074cb477", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec76349-1fec-4c91-855e-9744dc4a142a", "sighting_of_ref": "indicator--96623a2c-873c-433a-aa37-601d0f0cc991", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e2a2e8-83e4-4bd2-a41c-963a4b0b9ec9", "sighting_of_ref": "indicator--5cfbecf1-76ff-4384-8309-309cc8cad1ef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeacf01b-d78c-48cb-a410-a439af104fc8", "sighting_of_ref": "indicator--5cfbecf1-76ff-4384-8309-309cc8cad1ef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21de6ed4-ca8e-4891-9a05-087e73746092", "sighting_of_ref": "indicator--6b6ebb72-df10-4170-bfe3-e1c45c95b499", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca55a439-64e0-4bdb-b347-003981e97206", "sighting_of_ref": "indicator--5155a8a3-5182-468c-9f23-a2de5cbbf972", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d76afc-7929-41ce-83e4-41076220f751", "sighting_of_ref": "indicator--6faacc0d-7da4-46bf-939e-82c557a7ffc1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7da2c33-6455-47ba-9523-03f6fe9a699d", "sighting_of_ref": "indicator--70a1580f-9157-48c7-b38e-316a21049783", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77ba20f-2ee5-4481-b339-37f0522e7ea3", "sighting_of_ref": "indicator--2dd8039e-6886-4d9c-95fe-648537631b17", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad6a1fa-c1e5-4a7e-8a9f-7ee363c250bc", "sighting_of_ref": "indicator--60c9aaaa-55b5-4fdc-acbf-f3ae511991be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bbbab1-0af3-410b-b39d-5e42c8c96426", "sighting_of_ref": "indicator--2214eb3a-ff5b-450c-aa39-b11fa1eaff74", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b131b2b5-41d4-4756-97df-6fe684548a07", "sighting_of_ref": "indicator--ac302daf-b35e-409a-9188-39bff19ff171", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83811cc-241b-4d90-a9d7-2c40691a4a19", "sighting_of_ref": "indicator--1ce1e94e-a465-42e9-b5da-8756276578ce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba186c8-c1aa-4538-be9d-433db556f9c3", "sighting_of_ref": "indicator--991bcb80-8305-495d-a2cd-5bad5670cdc2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce475af-306c-46fb-aba7-ac4d7d35a46a", "sighting_of_ref": "indicator--8191dac5-aec5-4bff-b169-7a04214926b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c789014e-c265-4160-a539-a56a9ded2de9", "sighting_of_ref": "indicator--8489f683-5a54-462c-b16a-92b64adb4500", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd79f93-a682-4035-a19d-3ff7285ea550", "sighting_of_ref": "indicator--97ec7098-7c53-4aac-bd7a-d408b52c6ae9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebc91e5-51cf-4245-a1fa-c10978e2516f", "sighting_of_ref": "indicator--bd33f185-4b3c-44c5-815c-c679d62970d7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e1b6dd-fa29-48e1-8272-f7e404267b05", "sighting_of_ref": "indicator--8219ca23-0177-4439-84f9-17504383f20d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92570c68-8f10-4f8d-bf63-3ffdf29b0879", "sighting_of_ref": "indicator--1be1a931-b467-4bf0-a425-31fa6da1620e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b013a8-4a9b-4373-9a5f-3882c1dc6388", "sighting_of_ref": "indicator--1be1a931-b467-4bf0-a425-31fa6da1620e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50f4b19-ee72-4c96-9367-ab52f856409a", "sighting_of_ref": "indicator--394963d5-e439-49ba-ac53-bd7446add436", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e97a28d-1133-4266-8f0c-679c763e0e6f", "sighting_of_ref": "indicator--8da17d5c-8463-444b-9527-84832096b76c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6026ea-329b-44ea-a445-812decea7c37", "sighting_of_ref": "indicator--8da17d5c-8463-444b-9527-84832096b76c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ffe2f2-2617-491b-96ef-422f156dc258", "sighting_of_ref": "indicator--2e8fc91d-95e6-438b-ad79-392411b8731b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16837e3-47db-4386-bf09-0af11ac30156", "sighting_of_ref": "indicator--2e8fc91d-95e6-438b-ad79-392411b8731b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c485933-c774-4d8c-be6a-c52519f6079c", "sighting_of_ref": "indicator--405821d0-ec4c-4a0d-baea-27f3acea7657", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa95ff5e-13d2-4b75-8f35-a6254a5d1ca9", "sighting_of_ref": "indicator--60455430-607b-4d33-a6c9-6c1a8f95647e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583bc025-b3ee-4acc-8810-9f7099104ba2", "sighting_of_ref": "indicator--81ddcf8e-0e0d-47e1-b517-54cbe5885c2a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af20bca1-69ff-4462-9fe4-2be95ec7fda1", "sighting_of_ref": "indicator--81ddcf8e-0e0d-47e1-b517-54cbe5885c2a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb31070-647e-4133-8d8b-0f5bf7f9d9a8", "sighting_of_ref": "indicator--a4ed1223-bad1-4316-b1ab-657ccb814fc3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac27455-2687-443a-b724-06358fec7ceb", "sighting_of_ref": "indicator--522c3430-077a-461b-a7e9-d6e674877570", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1324894c-c52a-4521-b888-462302487b8c", "sighting_of_ref": "indicator--522c3430-077a-461b-a7e9-d6e674877570", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb97106-af24-4c88-9e84-790f9c52324a", "sighting_of_ref": "indicator--e0435adf-3780-4981-a939-00f7eb91bba5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab21d43-0875-47b8-932e-69d7480d5bb4", "sighting_of_ref": "indicator--f3e1cdb3-62fa-4ad0-8b3b-ee8e429ec7bf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b10bd27-c266-4505-ab3a-d5852b1e946a", "sighting_of_ref": "indicator--f3e1cdb3-62fa-4ad0-8b3b-ee8e429ec7bf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db503a4e-bc69-4c6d-af04-0b9e4dc6ff39", "sighting_of_ref": "indicator--58f666fd-989e-4822-ba67-0dd6a85f3f29", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab334c8-2be2-4b45-bdc5-d002dfe0ee7a", "sighting_of_ref": "indicator--58f666fd-989e-4822-ba67-0dd6a85f3f29", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4518e7-0ade-41eb-9177-c3611617e2cc", "sighting_of_ref": "indicator--da572e43-74cd-4688-b482-c49342a180a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1f7384-a287-4568-aff5-799caf202533", "sighting_of_ref": "indicator--22837797-d139-4c14-8ee1-ddec1c2e99da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72d256c-a661-4629-bde8-f2e2eddc941f", "sighting_of_ref": "indicator--dcc840b1-9db9-4c9e-a05c-2cb1d1d77254", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77ebe07-af98-4f9f-87ec-da5586720d73", "sighting_of_ref": "indicator--65cd330f-5698-4928-a477-b2d16955f201", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6eb174-5674-49c1-bdc3-349cb8647976", "sighting_of_ref": "indicator--963b85b4-b1cd-4c43-a45b-22740df23941", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2b0b65-3514-43e7-aee0-72ab45d62761", "sighting_of_ref": "indicator--f71de108-383d-4edd-a3b9-767a7f835e1e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3aa4b6b-6353-4a0e-90a0-28c80d99f841", "sighting_of_ref": "indicator--f71de108-383d-4edd-a3b9-767a7f835e1e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a14908-9c24-45d0-bb63-37feaa7f5dcc", "sighting_of_ref": "indicator--69ccbb84-61f6-4824-8904-0f68c91c3e5e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dedbfdb-ac8a-4d3d-8fec-980dce328e2a", "sighting_of_ref": "indicator--40156b85-8d6d-4734-bb95-4f03820cc2c5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae7e66a-86ef-4028-8e80-46249d450f39", "sighting_of_ref": "indicator--b41a2a49-4161-4f80-a05e-d98ae58f1da1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c5b11f-d8c9-45c4-80a6-f5fada1bf539", "sighting_of_ref": "indicator--6066c2a8-69a9-4e98-bd05-ff865d9eac0d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63ae7b6-aa2d-4fcf-9c90-cd9a6e45b562", "sighting_of_ref": "indicator--6066c2a8-69a9-4e98-bd05-ff865d9eac0d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43211c7-0eb9-48f0-945a-ac2c7bda3f1d", "sighting_of_ref": "indicator--bec3bb6f-effd-4dc4-be0b-b7f98252bdb9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909f14e8-4414-4f53-aa05-1ed16433ce9a", "sighting_of_ref": "indicator--5557ee54-3564-4626-83b7-eff03b7c1ba6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610d8e1a-432e-4ce9-8b47-11bb89cfe166", "sighting_of_ref": "indicator--530fda9b-171e-40ee-8549-11c55673cfd6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1602b6-1bbb-4eec-816e-a84c4b77bc98", "sighting_of_ref": "indicator--d3cbeaab-164d-4017-888b-99bba5039428", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d6cebc-8499-4f05-857a-2316f2ffce95", "sighting_of_ref": "indicator--d3cbeaab-164d-4017-888b-99bba5039428", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659651bc-b6db-41aa-8290-36d06a835f85", "sighting_of_ref": "indicator--ee967e85-fd7b-49a2-8fbf-0c1d1a814215", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adea9c59-3d95-43d4-8091-75b215166793", "sighting_of_ref": "indicator--71c4becc-58a3-4347-b5d6-2b958063c698", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d64eb1a-fe50-467a-af3e-3aaa19bbc0a9", "sighting_of_ref": "indicator--f1642eb3-e7a0-49e7-b135-a33450101d22", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4b7da0-91d0-409a-b9c7-23503b5b64e6", "sighting_of_ref": "indicator--6fba0f13-20b7-41b7-9c53-b39d5576456b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda31f82-2fa2-40bc-9bdc-061cfceaf5ae", "sighting_of_ref": "indicator--449db81a-dd9b-4294-b9e0-013c58df7324", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1541cca-b3bb-4349-8df7-20bab12bb1f0", "sighting_of_ref": "indicator--818e129f-6bd8-4c46-9004-4a6962a5fd66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea9fe4c-3ec8-4c8f-9b9a-af0af03e4566", "sighting_of_ref": "indicator--818e129f-6bd8-4c46-9004-4a6962a5fd66", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a275e428-e9db-407a-b944-83952c0d77e4", "sighting_of_ref": "indicator--f58731de-7027-4daf-8df4-df4134820b71", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4eb9df-b4be-4d11-bea6-db01c874821f", "sighting_of_ref": "indicator--8ca370f5-d21e-418a-a8c5-7692d5694ae9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f45598a-b940-4d09-9531-58132abe3b40", "sighting_of_ref": "indicator--8ca370f5-d21e-418a-a8c5-7692d5694ae9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7882cf0f-7e34-473c-8ea5-a299ec9376e3", "sighting_of_ref": "indicator--f96981bb-dff3-459c-9f3d-9b556953dbc0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944cc0b0-43b3-4e92-a3d9-09e739d1bf8f", "sighting_of_ref": "indicator--e6f57538-b657-4106-887b-ed159e8b6fa2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013a7b80-445e-4203-8c52-ce72ea747f98", "sighting_of_ref": "indicator--dad00366-a72b-4518-b908-9d1ed5e3e3c5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed05fe16-d125-4b0d-af51-eedf3d803198", "sighting_of_ref": "indicator--d5f61438-243e-4194-b36b-d61cc64599e9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ad41e6-c12e-43a0-b898-e82fda220112", "sighting_of_ref": "indicator--d5f61438-243e-4194-b36b-d61cc64599e9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f95fbe8-6f79-4561-bb7f-0e659e276ed6", "sighting_of_ref": "indicator--67c4e69d-f34b-40a6-9a71-a6c568c4afcb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301663a4-6dfe-403a-960b-c24022d86c42", "sighting_of_ref": "indicator--67c4e69d-f34b-40a6-9a71-a6c568c4afcb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357696e8-0426-43e0-8f68-243bc6ff3ea9", "sighting_of_ref": "indicator--a0450c68-0bf1-4bec-b6f1-969750d31f9e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32109580-5497-484a-8c9a-0b52d9db3a22", "sighting_of_ref": "indicator--85b3efab-aa9e-4a52-80ae-ef645ee296f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641d046a-c053-4bb1-9b19-95ba772912c1", "sighting_of_ref": "indicator--103b1330-efd4-4f09-b1e4-6ffcfec2b78e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852b70eb-b415-4c10-a5f9-41e1166ba3be", "sighting_of_ref": "indicator--a3433b1b-4d20-4966-a9cc-ffe1d5c6b5f3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6e18ae-8fb8-42f1-a0ea-829bb10c0248", "sighting_of_ref": "indicator--fbc45612-e1ad-4a53-b6f3-2a6a88848676", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a580d2-c742-4be3-a17b-cb08a66e84b9", "sighting_of_ref": "indicator--6f19d7d5-3126-49b8-9a4a-fbf0fa316839", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d10f85e-6788-471b-9240-cb2c512cad0a", "sighting_of_ref": "indicator--4406674b-d30c-446d-a011-d19d3cbc4d7c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695f642a-4e67-4e46-b551-f06c37720c76", "sighting_of_ref": "indicator--0d4c42f7-04ff-4bbe-9082-ca4151845245", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f119b5f1-738c-4f0e-bc9f-24f34c6e532a", "sighting_of_ref": "indicator--491f63ba-3263-41c6-a5e7-acb6255428f1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057f69b7-925f-4734-bc16-dc4564fc0c8a", "sighting_of_ref": "indicator--491f63ba-3263-41c6-a5e7-acb6255428f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ea3e72-1970-4115-8b7f-184e9d7a6f49", "sighting_of_ref": "indicator--1a8e09e2-e000-42dd-b214-f2046066aab3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0834640-716c-4667-8c58-5ac4adadbcd5", "sighting_of_ref": "indicator--1a8e09e2-e000-42dd-b214-f2046066aab3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706a7d08-149b-4f4c-8161-35804a3667d9", "sighting_of_ref": "indicator--1a8e09e2-e000-42dd-b214-f2046066aab3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a79b46-3e5d-4f8d-9aca-03f1a475c386", "sighting_of_ref": "indicator--95f09c67-402c-4a95-8734-fda79c187034", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbd53b3-b03d-4b25-9567-6441268c3b19", "sighting_of_ref": "indicator--f19fed4f-1a44-46fc-9d4f-62f2055904c5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efb44ef-f764-41db-ad68-2b9e80d7c2fd", "sighting_of_ref": "indicator--9a579581-6b2d-4e67-8122-7e24521f2346", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f45037-576b-4066-987b-d11d9a180ce5", "sighting_of_ref": "indicator--9a579581-6b2d-4e67-8122-7e24521f2346", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b861ef-cc5c-4866-b86a-a8230343f96b", "sighting_of_ref": "indicator--119fd4a5-a95a-41d8-9b38-99672e3ebe4f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d552b65-feb5-4840-a16c-d56d0664503d", "sighting_of_ref": "indicator--165c433d-9869-428f-966d-a4a4005746cd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e754d756-3d32-4299-a94e-da8b4460f295", "sighting_of_ref": "indicator--e1f1031c-024a-4a32-85f0-b263c103af25", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb14f08-975b-4bf3-b9e1-78f6747ca293", "sighting_of_ref": "indicator--e1f1031c-024a-4a32-85f0-b263c103af25", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7b89bc-2e86-40f4-bab6-cd5b6a50463d", "sighting_of_ref": "indicator--974c51c8-e9ef-4a22-84f4-1a804896fded", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688c3c2c-feb2-4c70-af78-fb41c6d4e0c0", "sighting_of_ref": "indicator--f4838b03-0254-497a-b3ea-3d95d78855ef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111f209c-5bef-419e-91b7-262dda68e572", "sighting_of_ref": "indicator--f4838b03-0254-497a-b3ea-3d95d78855ef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598cafb7-76ca-4ae8-b98e-356a7034a410", "sighting_of_ref": "indicator--e46e6029-8e2d-4c4e-beb7-e8eb4020b826", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431c57cd-2fcf-49b4-91da-4fb4dada3dd2", "sighting_of_ref": "indicator--4c5d2c41-7ada-4780-a6d8-ab8f800b8603", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c01bc10-420b-4a98-8904-5d872f860094", "sighting_of_ref": "indicator--c11a9c4b-f064-4e02-a169-2fc41348e73c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd4f408-d649-4b10-bbcb-dd187ceb83ce", "sighting_of_ref": "indicator--23c3e4e0-61a3-4844-9212-abad3c9762a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d057114-5835-4ae7-942b-80483c57cde3", "sighting_of_ref": "indicator--59eed76c-3c7c-4000-9f02-3925b24386cd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead4297a-437d-4b97-ab0d-d3e893a03b73", "sighting_of_ref": "indicator--5109333f-1a42-4faf-9ed5-cf1241b9bb45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32455ab7-609e-4ac2-ab0c-a6c653197cc3", "sighting_of_ref": "indicator--8030d368-a4a2-4223-9fe1-a88a49463afb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15302fd-9ecd-4c53-9314-6971ef51b1ca", "sighting_of_ref": "indicator--8030d368-a4a2-4223-9fe1-a88a49463afb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05186998-a6fa-4b70-bb6b-4beecb8040fd", "sighting_of_ref": "indicator--375758fc-2c5d-49ab-aec6-b91e51e581ac", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262c546c-968d-42d8-af3c-3cfd30269bff", "sighting_of_ref": "indicator--2f97ccd7-8975-4078-809b-8912c75c7296", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8fb278-a026-4884-9095-96d12265f098", "sighting_of_ref": "indicator--2f97ccd7-8975-4078-809b-8912c75c7296", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7e1f28-bc03-459c-a0e6-dc98c80e332b", "sighting_of_ref": "indicator--2777c3de-8c24-4256-bf2e-4ae032542ceb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6b5968-e5db-44db-a98a-2ad1aca3e5e0", "sighting_of_ref": "indicator--98ad3ffb-7742-4b32-8f27-f323b56a0f6b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c63327-7a34-425b-9a1a-8e3350d32f38", "sighting_of_ref": "indicator--78728bf6-c388-4a5f-b5f6-6616a5624ece", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f112b4ce-2048-4ec5-b728-fcc94d3b6c1a", "sighting_of_ref": "indicator--78728bf6-c388-4a5f-b5f6-6616a5624ece", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd95d16e-932e-47b4-ad17-edb2c758c5b1", "sighting_of_ref": "indicator--4267bdb0-51c5-4b65-ac33-e0239eb7849e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea1507f-84a6-4c32-a397-dd65376fecc7", "sighting_of_ref": "indicator--ec0e4dc8-10de-465f-ac11-e2a65b44819f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8de8264-6cf7-49b5-a43b-c2a751762503", "sighting_of_ref": "indicator--58ff2308-68db-4d61-b8d8-f4118171cdb1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9007fb83-3960-4480-92be-f2269257d35d", "sighting_of_ref": "indicator--28715de6-3cac-414d-8d66-4bd0ac9bb9c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60fdaf5-9b32-4e6b-b6a0-ab87bb7c4cb5", "sighting_of_ref": "indicator--794dd665-5f4a-4cee-9775-95699e4f9e43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1f20b6-7963-4717-9b16-375687691a87", "sighting_of_ref": "indicator--bad318db-a854-42b3-8f88-d6ffdccb54be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86196df4-8761-4beb-a086-43720ebbe465", "sighting_of_ref": "indicator--bad318db-a854-42b3-8f88-d6ffdccb54be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25421db4-d6cb-4c42-9f2a-a494cf455541", "sighting_of_ref": "indicator--e3ac1392-b088-4518-a5fb-1e2d92308c8e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63debab6-460d-464d-bb13-baf84577c47d", "sighting_of_ref": "indicator--2645d1e2-eb7b-48a4-8cdb-644b1b12fd5a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94180bfc-1411-4b82-8388-6c1865bd840b", "sighting_of_ref": "indicator--ad639d66-f0f1-45b4-b4d6-61785ca8ede7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cc3dbc-cc8f-4536-b29a-41547fcb203a", "sighting_of_ref": "indicator--ad639d66-f0f1-45b4-b4d6-61785ca8ede7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5296778f-49d6-4f7d-8a45-d39ae0dc97f7", "sighting_of_ref": "indicator--12736f04-f612-4289-9b31-cb62994fc9d6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f62bd0-7c25-47a7-95f7-25b6a93c3e6a", "sighting_of_ref": "indicator--1c787880-1563-4f99-b71c-61276054a1dd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44d4873-c070-436d-be09-09c0b393592c", "sighting_of_ref": "indicator--67825a43-f6f4-4176-ac3f-ddc84a060416", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc6d4b9-f1a5-45b0-b011-e7650f99e89f", "sighting_of_ref": "indicator--67825a43-f6f4-4176-ac3f-ddc84a060416", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75a6376-6517-421e-bbf9-81e24a7cce0a", "sighting_of_ref": "indicator--19362cee-f7f3-48ee-98d7-9df6e7a24b01", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef6c7a2-69a5-4ee7-a1e1-d17e4f5d0fae", "sighting_of_ref": "indicator--e55d9533-4b95-40a0-8193-ffb90993568b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934bdb06-b3e5-4343-bfb9-9735a7d57108", "sighting_of_ref": "indicator--2d379667-872e-4121-a10d-9ae29a690af2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a4bd70-81fc-4435-af2d-3af99367691a", "sighting_of_ref": "indicator--90084be3-5fc6-4ad5-9e4c-5a301e648c34", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1304af87-5d5b-496f-98e4-f16f6411333e", "sighting_of_ref": "indicator--90084be3-5fc6-4ad5-9e4c-5a301e648c34", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1c5a58-0c6a-4b81-a4b7-582113f9bd30", "sighting_of_ref": "indicator--485a0556-91e2-49cb-99bf-aea1badde0e1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3673a9bc-d8e0-4490-89bd-946e97269598", "sighting_of_ref": "indicator--706e0d20-9cbe-457c-adf4-3ba254f12a97", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05598c7-46a3-424f-93d5-bd305c51aa70", "sighting_of_ref": "indicator--5e9bb7b9-9bcc-4c05-8d2a-4f6985d2f727", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2ed247-8e3a-43d1-9edb-efcd41e80d53", "sighting_of_ref": "indicator--cb93e51f-6ba4-4b84-a5b2-7362dbfe478e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1ecf10-42ee-4034-b8ce-8273b59d8896", "sighting_of_ref": "indicator--d7bf6aec-3645-46dd-9c40-932029b9e73f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4df8ef-07f4-4632-b7d6-3a83ca25b26a", "sighting_of_ref": "indicator--d7bf6aec-3645-46dd-9c40-932029b9e73f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0b0849-008e-476f-988d-84d14a828070", "sighting_of_ref": "indicator--a544dbb5-ad1a-41ff-afcc-608551305170", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7217a0ee-b822-41e6-8d8e-80465205c8b6", "sighting_of_ref": "indicator--63a4c3ed-02e5-404d-b4f1-64abcc5e14cf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71c6eed-58f3-4645-9153-791df9b1b6a3", "sighting_of_ref": "indicator--c2ee70d6-991b-467d-9492-ff360d52e8a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2b7fb0-c223-4665-8b8a-cb2ce21d652a", "sighting_of_ref": "indicator--c979003d-83e9-45a3-bbcd-956ff6f5eebb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f000bfc-d423-4cfb-9d34-dfeb43067ace", "sighting_of_ref": "indicator--6670ec37-b02c-4253-b337-7162368c22a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bbafac-fde6-43aa-ba0c-b096ca5b44d2", "sighting_of_ref": "indicator--6670ec37-b02c-4253-b337-7162368c22a8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57417fdd-b77c-4a4b-a96a-5ee31226fe69", "sighting_of_ref": "indicator--b1f1f8a6-f44e-492a-9092-13284bee1874", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94f0eba-90c6-4b22-b10d-9b37e1b74704", "sighting_of_ref": "indicator--5413cd4f-355e-44b2-b3be-adf539fc92d8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37f7201-51da-487e-97a7-7feee329b275", "sighting_of_ref": "indicator--02964273-df9b-41d5-aac3-f2c9cc0e8623", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139c6292-fe0f-4557-9de9-ad010ed589ef", "sighting_of_ref": "indicator--b4416177-804e-44a6-9843-6d4785f018b7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7860ada7-e7c6-4978-b0ad-4ec3d7ea8f83", "sighting_of_ref": "indicator--b4416177-804e-44a6-9843-6d4785f018b7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1fa84b-3e0c-4920-8185-46980c04dcde", "sighting_of_ref": "indicator--932017a7-dab4-4859-add8-842df18ff1a2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e823dc79-402c-49d3-a44b-2adb15dee8da", "sighting_of_ref": "indicator--240c9abf-fb91-4237-bf72-e5b01ba2479f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5f2ef5-18c5-4c48-ae80-ca1da5c78709", "sighting_of_ref": "indicator--fcecf58d-494f-4e62-8d03-0bc0311efff3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15548159-92e7-4ed6-880e-5e5d86d2d5d0", "sighting_of_ref": "indicator--685807b4-04ce-4189-9ec4-6103c774df1c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979dbda2-6f9a-480c-83d7-f8642d569176", "sighting_of_ref": "indicator--9af90c8e-75cc-4653-8a57-f9e430d14a10", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05796d8-0f15-4b31-b8ae-3532df2b06a2", "sighting_of_ref": "indicator--bbc3f4d6-6001-4195-964f-7dbd522da2cb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9231390-4653-4ae3-bc51-31a538a42065", "sighting_of_ref": "indicator--ec26a3f7-1bc8-4f1b-91f0-c5b26f014d11", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5e2761-8f0e-44cb-96c8-cb7597fea683", "sighting_of_ref": "indicator--cc476aea-afee-42df-a2ef-852fabe04675", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775d1b0d-4102-4bae-bd12-207e61ea1a0c", "sighting_of_ref": "indicator--c70bd96f-60f1-4460-9c22-63fb93341a1a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52ad3a6-097a-4f09-98e2-45928c9e57a6", "sighting_of_ref": "indicator--4b1c8d72-a749-4948-9085-4aee9c725752", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1928d0f9-4843-45c1-9005-d2d5bcc40666", "sighting_of_ref": "indicator--4b1c8d72-a749-4948-9085-4aee9c725752", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9218c78d-4bee-408a-afbc-37c75e50c4bd", "sighting_of_ref": "indicator--4b1c8d72-a749-4948-9085-4aee9c725752", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3ea95f-fe54-4816-b406-c1b5d178e3e2", "sighting_of_ref": "indicator--4b7e16b8-f44a-4445-80a6-751185b057d2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5668599a-a39d-4e15-9951-c556af546d9e", "sighting_of_ref": "indicator--4b7e16b8-f44a-4445-80a6-751185b057d2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e4f0a2-67c6-43c9-be89-cad38adb4e91", "sighting_of_ref": "indicator--029c89e1-d782-4152-9198-01787a33e74c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976b0cf8-dbc4-498f-bd6c-f271a9401c1e", "sighting_of_ref": "indicator--029c89e1-d782-4152-9198-01787a33e74c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06189fd9-3247-4918-95cf-574a9e74f4a6", "sighting_of_ref": "indicator--029c89e1-d782-4152-9198-01787a33e74c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8645524b-c2aa-4a03-a759-1d66065cb2db", "sighting_of_ref": "indicator--290ae234-195f-44db-9e2e-337c30a4104f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99221dea-d25b-45eb-8d2a-dfb675e8f9f6", "sighting_of_ref": "indicator--290ae234-195f-44db-9e2e-337c30a4104f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f14747-7a27-4beb-8f0e-f009c497ad2b", "sighting_of_ref": "indicator--290ae234-195f-44db-9e2e-337c30a4104f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77b6fa3-3d72-4103-9037-282065aa2ca0", "sighting_of_ref": "indicator--f0d4e9d5-a62e-4b12-a72e-6c23be82a291", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498fad4c-352e-4884-8f45-6ef4d5439ee4", "sighting_of_ref": "indicator--f0d4e9d5-a62e-4b12-a72e-6c23be82a291", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a0a435-5402-4e55-82c7-ac50e70f6a90", "sighting_of_ref": "indicator--f0d4e9d5-a62e-4b12-a72e-6c23be82a291", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b89823-8f57-485d-bdf2-c2ff42f5a0d0", "sighting_of_ref": "indicator--eb1ab0f4-2147-46b4-bb8b-96bd85ee216a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5b5fec-7d5c-4150-b607-dfde2d6c95ae", "sighting_of_ref": "indicator--f321431d-589e-4eda-8269-f83155857723", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3880ba44-e6cf-40ec-9614-c01a2dcdfd2f", "sighting_of_ref": "indicator--c51f9e34-f3e4-41eb-879c-133777cbd218", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e973620f-42c8-497c-b68a-badc74ba867f", "sighting_of_ref": "indicator--aca6fe61-e066-40cd-8e9b-b54b39de0dfb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15a654b-e346-473e-ad68-ee8fd84b0d91", "sighting_of_ref": "indicator--d4a3af6b-921a-4005-8b0a-bf5197999dff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b2e241-ed12-4470-8b6d-ef2ae8266b40", "sighting_of_ref": "indicator--237b37d4-4ff4-4197-9d0b-6183d481d693", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84782798-b5ff-40ed-a5e3-2c12eff8afcb", "sighting_of_ref": "indicator--135875cd-acc2-4e76-8ea8-3efac3db74c4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4647156b-b942-4b98-a6c9-e1e05ccb3a93", "sighting_of_ref": "indicator--ba322a82-8e24-4add-a05e-c80ed8ed3ea2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bd8d86-17f7-472f-a8c3-81992850b014", "sighting_of_ref": "indicator--305619f0-64a0-469f-b4d6-275eea5a3838", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5465dbcb-e85c-4113-ac9c-ae4addf1a600", "sighting_of_ref": "indicator--71ea2f8f-3d5f-415b-9c27-721b2b186d36", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9370f710-1299-4ccb-a94b-b8d1e3883c80", "sighting_of_ref": "indicator--9e9eb0c5-06c9-4129-88c2-cec43e4bdab6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eceb66d-b85b-44f2-8eb7-cdb4f668788b", "sighting_of_ref": "indicator--ad2ae5b3-0b1e-4c1e-bdb2-2fd8ad7c7bed", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc557002-cac2-46b9-bc43-e505fbe978c9", "sighting_of_ref": "indicator--e87a2b84-b104-4893-a4e7-3e75755ec7e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beef3470-0d26-4b89-8097-2d636fb812a5", "sighting_of_ref": "indicator--e87a2b84-b104-4893-a4e7-3e75755ec7e2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727c2388-90b6-4e0f-baba-fce62f0a037d", "sighting_of_ref": "indicator--ac764165-6503-4e71-a0b2-5ccc4ad402a2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde2b329-e6ee-40cc-a143-79717139579a", "sighting_of_ref": "indicator--537afcdb-9363-46ba-9d4d-c61b0892df16", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf5f30c-0032-4f24-b087-d89f05c236eb", "sighting_of_ref": "indicator--e0159ae8-e21c-4850-8ab5-5488d4998c4d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f0c73d-656e-4316-98b1-73ff59b19803", "sighting_of_ref": "indicator--89937b0e-ae14-4034-8feb-ab07e6dec02b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b6e384-72bf-4293-b34e-b8d06068edf5", "sighting_of_ref": "indicator--ceae323b-d221-4789-95fa-05ecbfc74781", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15848ecd-b7fa-4da9-afc6-96826a057e5a", "sighting_of_ref": "indicator--3f3d0a74-a679-4eb0-ae3c-fad67da9dbae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bde9fb-4c25-4496-87f3-fc6f71154985", "sighting_of_ref": "indicator--47a44c26-2255-4f4b-9d4e-1dbbf7df031f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0a138d-cdcc-4c38-834b-1a93f22c0edd", "sighting_of_ref": "indicator--a59465dc-6d78-4e85-bc54-d853df85e439", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ac7820-9b54-4403-8fe1-798dd3459e18", "sighting_of_ref": "indicator--6893b6a6-4aab-4fc6-a626-9e76ea7291b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea02791-5d4a-4ae9-888f-e2268172ce12", "sighting_of_ref": "indicator--fa0b80e5-aa40-414a-8daa-3290220c9a69", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6bcdcb-3ad1-47e9-a7c7-24bf23a2d683", "sighting_of_ref": "indicator--f670b162-aac6-4ffc-a7b0-10f1acc1a74c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aff041c-d5af-4b85-b4dd-7a78c1f7b2c6", "sighting_of_ref": "indicator--858f4a62-84f6-4242-8d9b-abf227249dde", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87409bee-f88c-425c-aac5-652c14f11a9a", "sighting_of_ref": "indicator--2c9a3797-9d4c-4ae0-ba55-2b93e39103d4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea403857-f9d3-4917-bc7a-abcbd7e87af8", "sighting_of_ref": "indicator--adc2f220-7a6c-44eb-89d2-586cf9ed5531", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4631697f-1c53-44d7-88c9-cd41aef8e649", "sighting_of_ref": "indicator--0bf8d23b-57c0-4b7e-ae47-23834a5ce5a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fce205b-5200-4642-82a9-cf8f2d677a00", "sighting_of_ref": "indicator--68fc8f43-27f7-4867-a4d7-d34539fe674b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1134ed8b-c5e4-46a3-8d5f-593c5dfe1382", "sighting_of_ref": "indicator--0d659909-6177-40f5-9428-9abcdc75f393", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6211e7-a8af-421a-9d18-a68520509df6", "sighting_of_ref": "indicator--f5f71e17-b0cf-419e-b299-789ed9166b7e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f95e85-7b5e-4b24-a158-efe2799c54ef", "sighting_of_ref": "indicator--20c2af82-a95a-444b-ac8a-d34bc4ba149c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd34a5e-20ee-48aa-a7df-a314698fbcc1", "sighting_of_ref": "indicator--65c73c6d-20c2-4a12-a572-3de9e0afd336", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37083fbf-af9c-4532-9ff6-7eeb9b8fda62", "sighting_of_ref": "indicator--a42534a1-b453-4703-a077-a42dd52ba674", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5e0910-0c06-48d7-8697-d42c1e3cd55a", "sighting_of_ref": "indicator--cbebcc59-bf06-4eee-afd5-ee4e7f293477", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e242adc8-1083-42eb-8dd7-9b329146e32b", "sighting_of_ref": "indicator--404ea64b-eb30-40ba-a8dc-94a4576c106e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38c2f03-daa3-4b77-bda8-f5cb3f5ce8d2", "sighting_of_ref": "indicator--668fc8fd-a326-466e-91ad-17ef7ea918a6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00561640-4033-45e3-82b6-fc99be74ff03", "sighting_of_ref": "indicator--4a26145c-6fc7-418b-ba66-db0487b89ec0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fbcc4d-b81f-4f1f-812a-9745a04c34b2", "sighting_of_ref": "indicator--2796529a-7405-4a65-a882-861471c95145", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5479e736-bcdc-40d4-9490-e71d62ecb8c5", "sighting_of_ref": "indicator--c5c7ab7a-7ae7-4bdc-ac87-945d38b14413", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ba8594-957e-4c90-9971-31b63b59ed92", "sighting_of_ref": "indicator--c5c7ab7a-7ae7-4bdc-ac87-945d38b14413", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b993251-bb38-4262-a3dc-830ced9b9c99", "sighting_of_ref": "indicator--282ec95c-be51-46e8-bb92-9237c342d8f4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b98646-59ff-4aae-b767-6c5dc5ff9c36", "sighting_of_ref": "indicator--c5d88e5b-61b8-4a01-b5a7-76f6f10cd29e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46189b1d-0fe7-4fbc-b414-c1482cfba9a1", "sighting_of_ref": "indicator--c5d88e5b-61b8-4a01-b5a7-76f6f10cd29e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe283c3-ebea-4e1f-a4c4-71aeda4053ee", "sighting_of_ref": "indicator--a4a6c9ad-e6a1-44d1-8c89-2e6cae218207", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78b28d2-814d-4ad5-a70b-629812f2225c", "sighting_of_ref": "indicator--3ed21067-d40a-4441-83cc-e4f68775db93", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7301ac-e046-4dff-b082-1febdfa46363", "sighting_of_ref": "indicator--35f8f2d8-2c54-4c00-9d71-a586f6502681", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9009ba-f960-477f-a835-ad4d4bc83da8", "sighting_of_ref": "indicator--35f8f2d8-2c54-4c00-9d71-a586f6502681", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cb69a9-a818-48dc-84f2-54ec25494d47", "sighting_of_ref": "indicator--fdb50f34-2e14-4811-bf13-4861cb13c2c9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ea8455-360d-4d49-a99c-6b85f1bfaa62", "sighting_of_ref": "indicator--4b8de381-2c45-48cf-971f-f572e10ef76d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b13b227-3c43-446f-9283-41c21c7fbd2f", "sighting_of_ref": "indicator--4b8de381-2c45-48cf-971f-f572e10ef76d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e3b087-c179-4e99-a72a-9b9e3d01ad8f", "sighting_of_ref": "indicator--f75a4bd5-4b62-46af-bcca-fbe5e0081c26", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa829f5f-a412-4a73-ab4f-a3d54cb7f842", "sighting_of_ref": "indicator--a38d4291-2a98-4554-a6ef-42a8b266300f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e30ae00-a0f5-44d6-babb-4ebcab1c2ef3", "sighting_of_ref": "indicator--cbea30a6-ad16-4243-b863-a2ac69c60da5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955a099d-0513-439c-b2db-6eb815e2acdc", "sighting_of_ref": "indicator--cbea30a6-ad16-4243-b863-a2ac69c60da5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8efe0b6-2193-40a9-a856-47494812cf81", "sighting_of_ref": "indicator--e1dfca47-05ec-452f-b017-95b921e809d5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d23bd0-ee2d-4cd0-a1a2-451d0fbab732", "sighting_of_ref": "indicator--5a7aa255-715e-4715-8e9a-c6ba834e639f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ca885f-4cdd-4ab2-b54c-84cae82f45d9", "sighting_of_ref": "indicator--e55352a3-e11d-43fa-945f-5e5ec5762333", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee56a06-3db7-41ab-bdb9-a173351caec3", "sighting_of_ref": "indicator--b90bac05-bc6e-4314-92ee-da8e7031b340", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f05792b-0374-4e90-b9af-4a24baeb685f", "sighting_of_ref": "indicator--82b7b993-755b-410e-8c8a-80cfe9568e83", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085c7dfa-6024-4a0c-aadc-c1288aba3120", "sighting_of_ref": "indicator--f3a0e755-510e-4e84-bc30-ee7580f5de3e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ee5e53-87bb-460f-b04b-dd00577af896", "sighting_of_ref": "indicator--78f2ee0a-c5d6-4cde-b37f-803eb796146b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded5c1f3-d783-41e4-91af-aaf007416287", "sighting_of_ref": "indicator--2425ae00-4203-470a-9bc7-8c79bb56270d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f10e5c-f6ad-47b9-819e-c4dd0343192c", "sighting_of_ref": "indicator--b1a7062b-4695-4a8f-9f07-b8ddd1e25916", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4875367e-95b8-4950-96a9-f96eb0ef6cad", "sighting_of_ref": "indicator--b1a7062b-4695-4a8f-9f07-b8ddd1e25916", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a84998f-ea36-4f13-a8df-d6572360eb76", "sighting_of_ref": "indicator--ec2e8ec8-87de-4f04-8b50-9563cc624fc1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdc7fd0-0834-4041-b3c8-db84bccce2d6", "sighting_of_ref": "indicator--c89bba1c-23fc-44ff-ace3-80f4201b99ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd73adc5-8e18-4943-97d9-02ece485c1d6", "sighting_of_ref": "indicator--85cdf8f6-84f7-42d9-bab9-8bd3fb3f342f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20b88ab-b496-4abb-bbd8-e7eb190c9230", "sighting_of_ref": "indicator--0283f9c2-fe1c-408d-8e21-fb5fa5dd3542", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b3d26c-589f-4c94-84ae-777049ced24e", "sighting_of_ref": "indicator--b65ea154-90ea-4776-8982-125061a1b86b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb6106d-cefc-431f-b9ce-3ff81fe48073", "sighting_of_ref": "indicator--06d5610e-e195-46de-a758-43dbee0e89fd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625c5661-e575-410e-b909-b2a72e1162e6", "sighting_of_ref": "indicator--74791f92-f6bb-4a99-a004-f35817f2a4e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240a3324-649f-40fd-9363-aadd1c447cac", "sighting_of_ref": "indicator--3839f7b8-4c10-4b5f-9530-ce2f7008e99c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6036d8ce-057b-4576-b5b5-f2a71c36ba18", "sighting_of_ref": "indicator--8694948a-9013-43af-8f04-e6d41263b8e0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e451bd96-dc51-4943-b381-12fb0476c28d", "sighting_of_ref": "indicator--d20e9cf3-bd55-43a0-bd5f-e3380e6f4191", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510649ee-e37c-4704-8c78-467f3fd157a8", "sighting_of_ref": "indicator--ff3d3610-fbbb-48a3-a3bc-84be87b12af5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84c1071-63fd-4aa3-ba6d-088ee1865ed7", "sighting_of_ref": "indicator--2d304f23-c2de-47e7-bd39-8d834b1973f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadc7ccb-642c-4d4b-8310-93ccd77073d5", "sighting_of_ref": "indicator--04995d2b-f310-4bd2-bef0-84996483f755", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948722c5-3ada-4db1-b158-1dbde852f556", "sighting_of_ref": "indicator--04995d2b-f310-4bd2-bef0-84996483f755", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6cac44-3df4-45ba-864c-d3389a767d67", "sighting_of_ref": "indicator--1ae3b5d4-b0bf-4a67-96e0-fafcf1d860b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd6c3ef-8e9e-4da6-89be-38883b8cbc07", "sighting_of_ref": "indicator--9e7de905-f8aa-4be3-8605-0ed8744fbb99", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd58fedb-914b-4e98-bb98-7442a01da194", "sighting_of_ref": "indicator--643ebdd3-173b-43e6-b9e6-56717807099a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9640e097-337c-4bbc-8941-1f1cf7a5a7b8", "sighting_of_ref": "indicator--14993401-1f65-49a8-a0ee-e22a8d9a811c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b2b305-978a-4ff2-8751-b04ff05fbc9f", "sighting_of_ref": "indicator--b9b2d371-55fe-49aa-88f6-73a58bc4fa3d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bf6de7-86ca-4440-8e82-34cd24482104", "sighting_of_ref": "indicator--b9b2d371-55fe-49aa-88f6-73a58bc4fa3d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b789486-881c-4ebd-9fde-76c80159cca6", "sighting_of_ref": "indicator--d16c2693-0e21-49e6-a590-51ba94eb3ca0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8747c5c-e051-4e5c-881c-7d60190e99ad", "sighting_of_ref": "indicator--81acc09e-e865-4533-9090-155c68ee3465", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd05f19-f41e-44f9-bb63-ced6365d0f3b", "sighting_of_ref": "indicator--1082feeb-c80b-4818-9063-3835851e90f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826d2653-8425-4a39-ac1b-2d550a88eca5", "sighting_of_ref": "indicator--59b4aaed-0def-4f5c-9dc9-6b04b7b2a3cf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e54d073-26dc-485a-97cb-3f09496a20f0", "sighting_of_ref": "indicator--59b4aaed-0def-4f5c-9dc9-6b04b7b2a3cf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd421733-fa59-4925-b0e3-94e83acbfe60", "sighting_of_ref": "indicator--a8bf3c57-71ef-4992-b66e-c1f75c7de326", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb7302a-7a2f-4217-afb5-a6cccd538d12", "sighting_of_ref": "indicator--26556611-bfa0-4787-80b2-7a1f0e62811b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c410eb3a-dcac-4330-a7eb-971f63ea09d3", "sighting_of_ref": "indicator--9b71185a-cd91-478c-a8bd-aff95ee4ea71", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d370f37-23c8-4bd1-a95c-7c6b71c93860", "sighting_of_ref": "indicator--e46f5d58-cbf8-417e-bfe8-79531d161869", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883d3e21-7bc0-49d8-a6b8-e0d98e2e740c", "sighting_of_ref": "indicator--0adbbf4b-7449-493e-8316-fe2c55066279", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c5ff2d-77e6-49cc-821b-2b6358a8c388", "sighting_of_ref": "indicator--0adbbf4b-7449-493e-8316-fe2c55066279", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723efdac-be5e-45ca-9147-0c57c3748046", "sighting_of_ref": "indicator--52c4f4ac-6e1e-4b31-951c-9c1b8e1778de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d6ed9d-5901-4780-a6b9-64aaea2e9333", "sighting_of_ref": "indicator--0373c37a-c213-4878-9963-7abf59214467", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8a00ef-65ca-44b9-8701-adad6bd51ede", "sighting_of_ref": "indicator--dff7faa6-875f-46f9-ace1-a6301fb108c5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94d1779-660b-404a-b0e3-82e0bae73daa", "sighting_of_ref": "indicator--dff7faa6-875f-46f9-ace1-a6301fb108c5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd35660a-aab9-4356-abb4-71d1b098c622", "sighting_of_ref": "indicator--81fe8d45-7c9f-4de0-a91a-31d6a00aa8eb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45967bbe-a19e-4472-85f5-da0d55b76b63", "sighting_of_ref": "indicator--a4f365de-7639-43a8-ae17-ed05d71e5844", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9585ad-a629-487d-ad79-fb1e0e48a864", "sighting_of_ref": "indicator--cbd11ad7-78bd-4f6e-b3a2-76f51e3b0daf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc5c2ba-b4dc-41b0-b5e6-5eac13e4544e", "sighting_of_ref": "indicator--f51b80cf-6b83-4f4a-9f89-d975f3087f96", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df395357-9333-455d-9b17-96741a5f8b41", "sighting_of_ref": "indicator--1492545a-32bd-4eed-b605-d2c983f6245e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64c8ab6-54d1-4ffa-a7c1-69e203a2b21c", "sighting_of_ref": "indicator--bb4576f6-d173-447a-8e4a-170ec8dfa025", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6bad0b-1cdf-4825-baff-827970ad8eff", "sighting_of_ref": "indicator--3cfd3efc-f355-4872-adbb-9c2bc8542b22", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89b19f7-850f-48a5-abb4-4fec71ea1b9d", "sighting_of_ref": "indicator--3cfd3efc-f355-4872-adbb-9c2bc8542b22", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f45a13-f24d-4b73-91ce-7339f1a5d303", "sighting_of_ref": "indicator--28eee2cf-df4b-415b-b5c1-b9e38c06f42d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5d1098-32f5-4c1c-9cf3-2d379a4cc364", "sighting_of_ref": "indicator--ce96ef6b-fc55-45f7-bb0a-c98404700b3b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f48e72-5950-4eb6-8f2a-9e2c2fa62405", "sighting_of_ref": "indicator--a4bbf8e1-2d9a-4870-b284-0d38c13feea6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fe5831-3e9c-4d5f-930e-57d3ed1a1b2b", "sighting_of_ref": "indicator--43a2035f-afd9-41f2-ad36-da56248364db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644692f7-3abb-47b9-a4bf-9a3085fe0d3e", "sighting_of_ref": "indicator--9f68ed45-45b7-4981-9143-bc38b04937ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2639c20f-70f7-4751-a1a1-e239b1ec9ae8", "sighting_of_ref": "indicator--24e95531-ba44-4f76-b355-d0e87606a97b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4106995-cab7-4acc-a3d7-c0e3f78f999c", "sighting_of_ref": "indicator--74035121-cd25-4875-9635-64f5ab6c8287", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db730869-18b3-448e-90ea-8c7683806a84", "sighting_of_ref": "indicator--74035121-cd25-4875-9635-64f5ab6c8287", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96af4b4e-94d1-4803-a4fd-c09b5c265612", "sighting_of_ref": "indicator--f3dfb8b1-1a7c-4d0c-8db2-c100b730ce25", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c66e06-3dce-4822-b301-df7886d8115e", "sighting_of_ref": "indicator--7b31d03d-1863-42b8-9142-aeb9e33f7a1a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a7e2a9-6b55-4c50-aed6-67920063f13e", "sighting_of_ref": "indicator--cdf28d43-1fd2-4f0a-b0ba-6539ec057d0f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2548d952-6890-42ae-afc3-ebcbb671ca5c", "sighting_of_ref": "indicator--12f09d8f-30c7-42b9-9fe6-81017f1622ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f554842c-349f-4409-88ea-50a949fca374", "sighting_of_ref": "indicator--111ca2dd-4080-4064-a94d-ba81e31798fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5ae447-0d88-48ee-89d1-54bfe8a26a04", "sighting_of_ref": "indicator--fb3aff12-d18a-48bb-94a2-54441d8de641", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211ba457-c2ce-418e-9b50-563029e6cd8d", "sighting_of_ref": "indicator--ea4618d4-7c1c-4586-878d-aae162d6d9fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fc2046-7ae0-43f4-9cb6-bf6923fc294d", "sighting_of_ref": "indicator--f19aad48-bd89-4a0c-b630-8722c0b7d5b2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167905a9-ee77-43e1-9dca-eb220042c564", "sighting_of_ref": "indicator--7d4ff11f-626d-4ff6-8573-b342ce6aa0de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad205641-5d94-44e1-81cc-138952026dc3", "sighting_of_ref": "indicator--4234067e-6123-4b0d-8234-11ca3544619a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5aa241-954c-44d1-837d-fecc03171fca", "sighting_of_ref": "indicator--b1ab8555-1238-4e7d-9d29-fd881f664253", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db63bdc-ee0c-4ea2-ba09-d601d9890e2a", "sighting_of_ref": "indicator--5d014b63-ed98-4ec2-b1c1-1b36e3623135", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceddab38-e441-41fd-a780-9f39dda36ac8", "sighting_of_ref": "indicator--ffb6ca5c-bf59-44ba-8b9a-a9f89e03a606", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80521cb3-dd0b-4389-9ad6-0502007c3543", "sighting_of_ref": "indicator--f70b941d-8123-496c-9a54-92c4872821bf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2c5f37-3aa8-4954-9236-568cc07b9bab", "sighting_of_ref": "indicator--b536c9a3-a407-42a6-89a3-97d08968e694", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd08fcb1-3e9a-44ff-b08f-6b79618ab5e9", "sighting_of_ref": "indicator--6b5fce41-fcc6-4558-b80b-e1095dbe3820", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549cb6e1-e0be-445f-9078-901a8cf108de", "sighting_of_ref": "indicator--abe8dbdd-d07c-4794-a4aa-406f43fe3b7a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31902b4d-6727-46df-8c3b-b3ae06039f9a", "sighting_of_ref": "indicator--abe8dbdd-d07c-4794-a4aa-406f43fe3b7a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e8c919-1322-402b-b7d2-9c9a6f7373ab", "sighting_of_ref": "indicator--57c6da03-d872-4307-b7da-249f72641dbb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40076c6-9359-460e-95e1-bb06100f0a7e", "sighting_of_ref": "indicator--6710f945-6593-45e5-9624-13e6cc4cf9c0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981d46a3-d1e5-4063-87af-cb606a4e2c3c", "sighting_of_ref": "indicator--a67d704b-e80d-4442-87c0-b80baedc41d7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00c2ccd-1834-4e58-b313-0d5b3622e2f2", "sighting_of_ref": "indicator--a398ce60-779d-4f68-a40e-b52bac1121da", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578ea566-34fd-4ade-b469-34ba5634e085", "sighting_of_ref": "indicator--a398ce60-779d-4f68-a40e-b52bac1121da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2339dbe-6436-4964-98e4-b65c666297f8", "sighting_of_ref": "indicator--ecfb4b5e-e22d-41b0-b8cb-53fa51bd786a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862093df-8bc3-466f-9ff2-35f0f2752975", "sighting_of_ref": "indicator--ed74621c-b2d8-4737-b44a-7cda2e3c2fc3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4b5b7e-fafa-49ec-a3c5-5b2de7c477d0", "sighting_of_ref": "indicator--4df00ab5-64e7-4bf7-9b8e-1732813a8ffd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6600c1-bdbd-4fec-a2bd-0227ae820565", "sighting_of_ref": "indicator--4df00ab5-64e7-4bf7-9b8e-1732813a8ffd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23b19ef-e786-4387-8ce8-91ed0614be3a", "sighting_of_ref": "indicator--d6098f8d-9247-4780-892c-01ce709468a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b572d4-d203-40e1-8c22-3959dfb733e7", "sighting_of_ref": "indicator--3b535701-78fa-4339-a6d5-a7ecc0f2b890", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57b566c-b87a-43e1-a278-fa0d4d4e9a20", "sighting_of_ref": "indicator--3dc1e0f4-31fe-471b-9a0b-2608ca651567", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47522e9-21b7-4b56-8a31-c9fec5407c0e", "sighting_of_ref": "indicator--8c6e62f0-9620-4d09-bddf-125d0d505f1f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b579b877-a297-472a-b064-a6a295bf67d6", "sighting_of_ref": "indicator--5ac478b5-9017-4d14-9136-74a0bc36a492", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f00869-a303-48d5-af33-a49e18d1fdea", "sighting_of_ref": "indicator--fce33ba8-8fbd-4a78-9f03-bae87be3a228", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d328d3b1-166d-42e9-bc69-5b8711e9ae5b", "sighting_of_ref": "indicator--b4a8bafe-d620-4ccd-8e3d-c72576c15012", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f54ee30-c2f1-4ea1-b70f-bcac9b462bda", "sighting_of_ref": "indicator--3b3600e3-e203-4a05-aefc-bab9c553af8e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778d1bcf-fea7-4004-8051-993296ba9e26", "sighting_of_ref": "indicator--cbce4c22-d330-4f73-86c0-daf3cd91a214", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b54809-b9d6-44a7-9e58-4c81f04c313b", "sighting_of_ref": "indicator--0ae2cfe8-ef3a-4176-876c-458ba72e36c6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32dc4390-27fa-4d3a-81ee-3e3ff6d08aa7", "sighting_of_ref": "indicator--9107a5a8-f813-454f-a096-38a8fe873bc0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72f0371-5419-4e8c-b758-2060acc40216", "sighting_of_ref": "indicator--c1e65b12-e6e1-4f6d-8ec6-68d82dae0628", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c83030c-127a-4b6b-a390-87cb92d6c3cc", "sighting_of_ref": "indicator--c1e65b12-e6e1-4f6d-8ec6-68d82dae0628", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46b1329-a61c-4dd4-937a-ee2fc5642778", "sighting_of_ref": "indicator--17c7bbbf-db09-4e8e-b838-3c34ba188328", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b37486e-a941-473c-8f21-75b799c14e00", "sighting_of_ref": "indicator--17c7bbbf-db09-4e8e-b838-3c34ba188328", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f32e1bf-c105-4fe7-ae4b-94ef068c0bae", "sighting_of_ref": "indicator--abef815d-578c-4cfe-bf41-965e39560113", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--712ea549-c5d0-4bd6-b523-30320277ec1b", "sighting_of_ref": "indicator--2076e36b-4aa8-4d3f-967f-14d069da4457", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f1e973-2b80-4f75-894e-d98afa718181", "sighting_of_ref": "indicator--4fa0995f-c480-4a7a-8f30-5a6987f84e46", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20620449-b534-4cfd-9261-637706dbcbdc", "sighting_of_ref": "indicator--286ad1ee-2ff5-44b1-a23a-e3f596c088ab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cce3ae-2165-4c19-90b1-8777d88c653c", "sighting_of_ref": "indicator--ac857453-175a-49f2-9c0e-ed9aee30a825", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c041a1a5-e8e5-4c9a-9032-82bbafebea69", "sighting_of_ref": "indicator--67f6dbb9-affb-4660-bd78-70b458615ad0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63526fe5-6de5-4814-b5e0-a0d0e2ea44af", "sighting_of_ref": "indicator--67f6dbb9-affb-4660-bd78-70b458615ad0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76d3acb-e246-4c5f-91fd-abad51c89e3c", "sighting_of_ref": "indicator--8df4f227-bcdf-467f-a276-1019f65be8c4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015fbf10-a9c6-4a39-a60f-28cea534dce8", "sighting_of_ref": "indicator--67d0dc89-fe9e-44a2-b5e4-ca340f97a418", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b85456-6b84-4cd3-af77-e8516b4560ec", "sighting_of_ref": "indicator--f9de5b87-a711-4eaf-b3e8-0df5b3abed61", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1e91d2-de3c-40bb-8aed-8feaf9309bdf", "sighting_of_ref": "indicator--db7be68c-d622-4894-95af-984f69243815", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f791f6-2051-45a1-b134-425459fc6ff4", "sighting_of_ref": "indicator--a70f73de-0ba0-41d3-ad47-2a0a81177904", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbafe9af-a458-470d-b0bc-9b641f5b49e5", "sighting_of_ref": "indicator--c61799db-e8c5-47a8-8ad6-9f7d7748df4e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77f76e7-9f95-4600-a805-0ed4412e4fb8", "sighting_of_ref": "indicator--f392c20a-876a-43a6-8609-e0026b4b881d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e875780a-3a20-4ec0-8804-a717fb3fd080", "sighting_of_ref": "indicator--d32a2234-ba54-4c94-926e-4f59826cf7f9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950683b8-72d6-41ca-afd8-58538d2150a6", "sighting_of_ref": "indicator--27acadcf-6c4d-474f-a2e3-b6d54b74be23", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfac45f6-4d67-495f-8855-5a29ceafa00a", "sighting_of_ref": "indicator--71580d35-1b5c-4a14-a622-cbe5f8ac2a6e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f963009f-a675-457c-b760-8d74e8ec4cff", "sighting_of_ref": "indicator--71580d35-1b5c-4a14-a622-cbe5f8ac2a6e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b668cc5-5969-4e2b-984b-aa9e2f291bc1", "sighting_of_ref": "indicator--dd87ea5f-854c-4251-8110-b4489d4b6564", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39fbad7-110e-43b6-a966-96fc1a51bcd7", "sighting_of_ref": "indicator--7b34072b-6bba-490a-b0da-b4bc2d02c1f0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291f39d6-0522-4cca-acc3-9e965801d1dc", "sighting_of_ref": "indicator--cc00f32b-d66e-4ca8-a2b5-fe1553d61872", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2620c30e-d823-4784-adc4-818bbe89ee3b", "sighting_of_ref": "indicator--c4d679e8-5356-42a8-94bc-2d091d6d2d47", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf86092-9a1b-4f50-a482-66ea58296692", "sighting_of_ref": "indicator--2065744e-293d-4a61-af53-3e4283c6fa22", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6931b0cf-2773-4949-a13e-df15ef41cac2", "sighting_of_ref": "indicator--c40572bd-1fc1-4805-9dd1-9bdb0f2cb2b7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf70c61-0e08-4945-a7c5-e854705d9e48", "sighting_of_ref": "indicator--65db25f4-f68f-48aa-9d2b-f63df73422bc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614fff1a-9ada-440f-8e7a-9e22dc18a2be", "sighting_of_ref": "indicator--ef0fe775-1875-45f1-a05e-678c3314c7e1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e0b38a-85bc-4298-ae39-ca2c26bf67d9", "sighting_of_ref": "indicator--1d5d04e5-1c7e-4751-8e5d-68ada06f630d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017e40bc-ae2b-4c57-ba47-346f07c361c1", "sighting_of_ref": "indicator--46a365e3-1910-4cc7-a538-8384efbafa54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46834e53-3a98-4eb1-b398-d41ec89cc453", "sighting_of_ref": "indicator--ad9c1c0c-9c6d-4260-a373-359e30d3ca40", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c8fed1-b2b7-4a96-9e59-ea2e57ca9da7", "sighting_of_ref": "indicator--2d199f63-af4b-43aa-90a2-a41df45a4bdf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd2dda4-e3bb-43ef-b803-a0e078f0247c", "sighting_of_ref": "indicator--6eecef33-3a06-476d-993b-c9ecf4fda71f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786cb04a-07e6-4424-801f-351d3ab793dd", "sighting_of_ref": "indicator--af18f23b-ac31-4a8b-b2d5-b0c8edf373a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e43a9cd-aa8b-4f11-b732-84697dcf759a", "sighting_of_ref": "indicator--8c41e02b-0b3c-4be9-bf09-fb4734739e46", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d15d7a9-03b4-40a1-b9f0-c9a62197bd0c", "sighting_of_ref": "indicator--a94ad79c-6177-427d-bdf1-fc5b97eaa311", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174cd6a3-ca0e-4a98-8131-10cd9844dce3", "sighting_of_ref": "indicator--f68fbdae-d0be-440e-aad7-effa355a41d5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9172c736-9ed0-4b45-92e8-1fe2b5a14e01", "sighting_of_ref": "indicator--f68fbdae-d0be-440e-aad7-effa355a41d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fce2617-0c0a-4602-bd48-0f50f428e5a6", "sighting_of_ref": "indicator--229eedbf-1c1c-4bea-a838-183e7bb9caf4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1622fd07-2feb-4c81-890d-47ba5558da2f", "sighting_of_ref": "indicator--80d708ad-dc3f-4f2f-a8cc-35f0165405fb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1111aef0-6347-4493-b6cd-0ad6cf77d196", "sighting_of_ref": "indicator--8776b3e3-7c71-41a2-9469-a054fd46174f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af3ce21-4484-44ee-aa97-0e333a35c42c", "sighting_of_ref": "indicator--8776b3e3-7c71-41a2-9469-a054fd46174f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e185d91a-9116-4f8e-bcd6-b431b8ac9193", "sighting_of_ref": "indicator--2f03dd00-dee6-4f86-952b-d9c86c315817", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff9122d-32bc-4668-9bf4-437f993a85cb", "sighting_of_ref": "indicator--880a74e8-2318-4ce9-ae59-811fec654aa3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23737a8-cfaf-4858-9716-0986d8b82e9f", "sighting_of_ref": "indicator--880a74e8-2318-4ce9-ae59-811fec654aa3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea3cf5a-4998-4780-b31d-4ccd3f49bbd6", "sighting_of_ref": "indicator--ff47d17b-4ed5-4b29-8395-a11efaa6cdfa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28f82f8-1a2a-430b-8132-18e239fb810b", "sighting_of_ref": "indicator--2ec63f9d-4588-4ecf-8991-b34d4a06451c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6eeb7cb-82a0-417d-979a-ef9dcc2c6a1b", "sighting_of_ref": "indicator--dc10a2fa-41ff-4b37-914e-79620153fe96", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15ff074-afc6-47fa-934c-f6deb4e3a96c", "sighting_of_ref": "indicator--d81ce2b5-6b4e-41c5-9d79-1d6fbd434174", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f377aa6-f6d4-41bd-8263-f79f310b935b", "sighting_of_ref": "indicator--4aab38d6-bb88-47f4-a1fb-0ee3fdcca164", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18398e6e-da87-445e-8d8c-abf47abfc8ed", "sighting_of_ref": "indicator--6c870d25-90b7-4ada-9f9c-a4ea03bc7f71", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72aa1f0-b1af-4b5f-b47f-16f29506caad", "sighting_of_ref": "indicator--6c870d25-90b7-4ada-9f9c-a4ea03bc7f71", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03cb324-e194-4676-9de1-66d520c6d9b8", "sighting_of_ref": "indicator--2e123cb4-fd0d-45c7-8cdc-a8f6f1eca84f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0695b772-31ae-4641-9d4e-25b1d52d08ae", "sighting_of_ref": "indicator--01254994-9cc8-4a3a-8b33-435d7bb57064", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29431c19-edc9-44f2-979f-c897abcf3706", "sighting_of_ref": "indicator--1d168712-7cb6-4559-bf0a-8888ab1d12dc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08413615-74ce-4fd4-ad41-64d7570770bc", "sighting_of_ref": "indicator--9bc91d29-4d2a-4a57-945c-2c65ead73b2b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ba6410-c3d8-4133-9321-7739c2718a35", "sighting_of_ref": "indicator--5b6de72b-3d42-44e8-9a7a-fcbe2ef261c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54a5ab3-c1ba-4fc4-a811-791ec92a530e", "sighting_of_ref": "indicator--98383c2b-61ee-485d-a65b-9df608f7b4dd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9073c87f-3009-46e3-a588-5793c5796fc6", "sighting_of_ref": "indicator--780f26c0-f45a-45a3-8e79-54d6980458a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf947ec2-aaf4-4671-8f8d-51395cd7175f", "sighting_of_ref": "indicator--a6602fb5-b83d-4a64-b067-3e97499dbf8d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8be63b9-57f9-4302-b54f-f5fd9b4827bc", "sighting_of_ref": "indicator--b7eaea25-539f-4df2-ab0b-606d0087ba9a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e8aefa-48b9-46fd-88fd-775db46bb728", "sighting_of_ref": "indicator--101eb55e-f73d-4b1c-aa8d-bcc84d591161", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c054384-0623-42b9-b69b-e6f3a48792ea", "sighting_of_ref": "indicator--9df81705-d7d7-4e83-99c5-a12283c568ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39aa4c49-2d97-43ba-b007-b95083ced4f0", "sighting_of_ref": "indicator--035f98fa-51b2-464e-ac8c-064979394930", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f138ac7-3f2f-4c3b-9f15-96f70d4e159b", "sighting_of_ref": "indicator--5c6cee52-0998-4e46-8b62-75cb55e42911", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85407cc9-0b41-4263-8c63-f8fa9cb9f4bc", "sighting_of_ref": "indicator--78fe69db-b0eb-4799-8523-440b6e408d92", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cdcdb3-a575-4b46-9a6e-494d3f7ad0e5", "sighting_of_ref": "indicator--db451a55-f5d3-4ea1-8b58-199549bb628d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae90562-9187-437a-8b9b-670647943094", "sighting_of_ref": "indicator--b5a2119c-469b-41a2-b6c2-8bb90186b12a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55eddb98-7e0d-4824-957d-ba8512f56509", "sighting_of_ref": "indicator--2bb0909d-c3c9-47af-84ee-fbe735c1602e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c894d1-cd74-4b0f-a3e3-61383eace09d", "sighting_of_ref": "indicator--a62097ff-6492-489f-86e1-6b06e23c0888", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9da2703-8afd-4fa3-94d3-1a480f7fbeaa", "sighting_of_ref": "indicator--95530b71-1de0-4b46-9284-c846382edc6b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f17775-6b7e-41da-824b-4c71dd2d5a6b", "sighting_of_ref": "indicator--95530b71-1de0-4b46-9284-c846382edc6b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef1aac5-7436-4aea-8e48-42885dd01f8c", "sighting_of_ref": "indicator--6121079f-34e0-437e-972a-4f4e31294e14", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be86551f-c5fd-41a5-b5c4-e89cd5377d68", "sighting_of_ref": "indicator--8eeff1b0-0430-4753-ae0c-5803b1926072", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155e2bc0-356a-4c8d-9d1c-d9a6dcd76314", "sighting_of_ref": "indicator--56bb7bee-9b60-4cc3-9238-1a19611d71a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6cecb5-1adb-4302-a6bd-b868f7fec968", "sighting_of_ref": "indicator--94ea09b5-3f69-4874-8bf3-00c1b512a0bd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe80d899-f082-4d27-92fe-6408a2393c9a", "sighting_of_ref": "indicator--94ea09b5-3f69-4874-8bf3-00c1b512a0bd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5a4e27-b162-47d6-acf4-d50701738d2d", "sighting_of_ref": "indicator--2a634389-cbe6-4ec0-ad6a-83ba5f05e803", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1e9224-0439-4775-b439-b40572a8f631", "sighting_of_ref": "indicator--fb5352c9-b76d-44e7-aff6-e74ce3a186b2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93194630-032b-4d6e-b0d4-ba5392731d13", "sighting_of_ref": "indicator--a752050d-40b0-4801-924c-af67ed22f387", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f2f9c2-f0c8-4c1c-865b-6e00f7585536", "sighting_of_ref": "indicator--3689b7d8-1ef6-44e3-a2a0-1df77b5c3433", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5554c6-d6f1-4d03-918f-33dd8458878d", "sighting_of_ref": "indicator--5fdca360-1def-4fa6-81e3-32cfb4d48b19", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb5a99e-582e-4da7-930d-91e95bf7b9b5", "sighting_of_ref": "indicator--cea707c4-7c1e-49d2-ad84-09877e2af7be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b3ee98-c6e5-4109-9915-512619748372", "sighting_of_ref": "indicator--92854985-ec61-40ea-8968-0ea21c28e584", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e32c2a-262d-4824-a2ce-ea4105598726", "sighting_of_ref": "indicator--9d76992b-d68a-48aa-a242-eff7236f12dd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c94773b-68f4-4477-8063-f2e63f8b4c1c", "sighting_of_ref": "indicator--771e49a1-2a41-4c2b-9d5e-ae9484a19d63", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0af506-b55c-486b-91c1-076a0aedf798", "sighting_of_ref": "indicator--771e49a1-2a41-4c2b-9d5e-ae9484a19d63", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da16966-abd9-4b7a-989f-19d305bd7faf", "sighting_of_ref": "indicator--85cb5566-5029-4b73-8f8b-334a0c9ba4fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a2a3c6-3262-4b8a-b135-4e0f2c88669a", "sighting_of_ref": "indicator--0fa0eec4-d70c-4ad9-986a-13c0568da78e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c739b6a5-3b74-4e97-9612-7273c0eb57fa", "sighting_of_ref": "indicator--4bf816bd-f73c-43dc-b18a-df3e35697e65", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5488c1a4-e7da-441f-bf40-95f9cea7cf3a", "sighting_of_ref": "indicator--8c069c1d-e730-4038-8e2b-b1c481e82c5f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ea27cd-c344-4d36-a30d-d73e28299e10", "sighting_of_ref": "indicator--b759d301-8cf4-4516-85ac-45db617ad903", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98936f7a-3453-4bb5-8996-1429731a0d38", "sighting_of_ref": "indicator--b85d285f-7fcd-4742-940c-9698f12347d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f24c20e-3209-4132-ac44-3af3dacee1d0", "sighting_of_ref": "indicator--fa1aa8ce-a505-401f-9f8e-a9c208963eb0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e3b56f-2580-4608-bb97-3122456a2674", "sighting_of_ref": "indicator--83eb6058-800a-4109-90de-329eb6daffb6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f737dd32-9f9b-4cab-b702-d789cbbaeb1e", "sighting_of_ref": "indicator--0216edde-01b3-459a-b1b9-18482e0b345b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03abfc51-fe6f-41fb-8928-19fca45cd140", "sighting_of_ref": "indicator--14725dd9-fdd5-454d-8bac-c20e954de9a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76812f1a-aed5-43ec-b982-5ccd164ce6b4", "sighting_of_ref": "indicator--63d4492c-a99c-40f7-9b7c-89d1d9a9a680", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc7bd51-73ea-445e-9265-b1cd32046459", "sighting_of_ref": "indicator--63d4492c-a99c-40f7-9b7c-89d1d9a9a680", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cf4f69-334d-4ba0-82a9-89f03f53e47c", "sighting_of_ref": "indicator--5f6c5564-eaf1-4696-a8ed-41364f0f4c20", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ada5bc1-bcba-400a-8817-3b640c0fffd2", "sighting_of_ref": "indicator--adfd5982-4873-4bb0-9640-af7e0c7dd264", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f7b8bb-257c-4986-95e9-c45999f92bd5", "sighting_of_ref": "indicator--229e6f50-f0c3-4879-93d8-f5fc36ce880a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708aff0e-6de6-46a1-8e36-39384833f1f1", "sighting_of_ref": "indicator--76a6039e-1e4e-4dd5-89fb-a5b54cd15a3b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14e9329-7757-4566-a16f-4f3842fd4e42", "sighting_of_ref": "indicator--fc1a4f82-96b3-4066-8524-51acc9ee2551", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90b0ac9-44e6-448c-bb00-383fd36fdc2c", "sighting_of_ref": "indicator--ed49f088-d650-4777-a86a-2b494ca129df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff35a05f-4720-4651-86bd-36fc79587bc2", "sighting_of_ref": "indicator--ce971ea1-8962-476e-bd7b-4045fd308330", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a81f586-5db2-4943-a506-ec73d71399a9", "sighting_of_ref": "indicator--ce971ea1-8962-476e-bd7b-4045fd308330", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a03d330-54bf-4600-aea0-23ce22e40401", "sighting_of_ref": "indicator--f098a552-7573-4960-b687-254f633a6be7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cac1eb-d6b5-443b-bdd2-2147f7c31281", "sighting_of_ref": "indicator--1b9ace66-1b39-4b50-ad31-4b12a6b19c9c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ec6d06-6909-4b0d-9a0e-5538d5dfe4ac", "sighting_of_ref": "indicator--1b9ace66-1b39-4b50-ad31-4b12a6b19c9c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7f7eab-c4ec-4a5b-b9da-75f56b030862", "sighting_of_ref": "indicator--29e42168-faad-4f5b-a975-a83c085a19f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39c08e8-ebc2-4e51-8b89-c93ecd8ef5b0", "sighting_of_ref": "indicator--29e42168-faad-4f5b-a975-a83c085a19f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c1cb2a-24dc-410d-8955-e14225859ce0", "sighting_of_ref": "indicator--9309a1b8-0856-4a3d-95c4-1754450a1cd5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7dfc89-bb1f-4459-ba69-83b548ed7973", "sighting_of_ref": "indicator--b37e398e-46a3-4f1c-ae74-e697388962a1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313ff422-d351-469a-be5a-801d784ee5d0", "sighting_of_ref": "indicator--5e932f68-5cb0-47fd-95ed-78ae6f6355a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32214a8-48d8-4ac7-898f-b956cecc21a3", "sighting_of_ref": "indicator--d3070d5a-85ee-4c89-bf5b-fde418ee0d17", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59ec92d-131f-404a-b8a4-545297018adc", "sighting_of_ref": "indicator--f85d88ac-e7cd-4cc1-bce6-6e7589c40a94", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb7f664-4ab7-45e1-b4b8-f50341c074ad", "sighting_of_ref": "indicator--1ee8be2a-3563-417d-bdf4-ba1980b694d1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63b8c13-195c-4816-9e81-a286f45040fe", "sighting_of_ref": "indicator--c7d239b7-bf86-41c8-8a16-4df213311cdd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e8ac34-4071-4d5c-a0cb-9590e970e0db", "sighting_of_ref": "indicator--c7d239b7-bf86-41c8-8a16-4df213311cdd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a525f4ba-171a-4888-b856-18e28edce3e8", "sighting_of_ref": "indicator--79932179-5ae3-4ec3-99cd-a5baffb55aab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb1618e-ea20-4c95-9f9f-a7f51a881cf2", "sighting_of_ref": "indicator--0d6e8e8b-e167-413d-8395-3f63618d3be1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1697522b-1bc3-4a1a-92ac-61ca4fc4f1ed", "sighting_of_ref": "indicator--26d28670-73c2-4edb-b28f-6c16b2867f8a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a10879-0069-4ae3-8dd2-777fc0ee0e79", "sighting_of_ref": "indicator--4e12b3f1-036d-45a2-a887-b663cd0d478c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963028c5-1c8f-4f1d-82d0-73911c780d11", "sighting_of_ref": "indicator--7c4daea3-ca6f-4d6e-bafd-fdc74c9211c1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e095d36f-7de9-4c96-94b9-84471dfadf11", "sighting_of_ref": "indicator--59f0f6c8-068f-471f-ab53-71b855f0e2cf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a995617-5b2e-43e9-8253-7332d7f11c8c", "sighting_of_ref": "indicator--986c2228-87fb-48b2-8600-b4dc0798a7a4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9047c17-7622-4b91-9ea0-2cd0f6499e07", "sighting_of_ref": "indicator--9c4a484f-aed3-4e30-ae42-bd21680323e9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491dd39e-6498-4409-9eae-fe8aa7cccf00", "sighting_of_ref": "indicator--a135adc5-9adb-4617-ac73-a3b0fe01b178", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f401ac-ace7-4d2f-bd90-cfe73bdcb517", "sighting_of_ref": "indicator--3e7fb375-bcfd-4235-92bd-d3630e647f36", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0115d7f-ad1c-412d-98b4-e9dc81dcdca7", "sighting_of_ref": "indicator--3059f668-f224-4cca-b2bf-7f770ab70d00", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc0eff4-5468-477d-b4d9-c4e848b7c8aa", "sighting_of_ref": "indicator--f48b9337-21d6-4b3f-b6a6-6f7916572952", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca455467-bcbd-4887-b142-232817eac02b", "sighting_of_ref": "indicator--88e1eb89-7362-461d-b27a-d44fc9a5f4c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1d79b5-0814-4d84-8b1c-9dab0449154d", "sighting_of_ref": "indicator--78465e65-2c26-4448-be1f-db0f9089a412", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d1c4c1-1e43-46fc-bc70-0c502d2ecb66", "sighting_of_ref": "indicator--78465e65-2c26-4448-be1f-db0f9089a412", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a3c9ab-4acc-4b40-bdd4-7b28c28cea08", "sighting_of_ref": "indicator--78465e65-2c26-4448-be1f-db0f9089a412", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3621ddff-dd9e-459e-94d4-745833a41c0d", "sighting_of_ref": "indicator--a719d3de-0b3e-4c7b-a9b7-e55043c71202", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c5d610-876e-4369-ab37-cbab1c0ce568", "sighting_of_ref": "indicator--ef0c81b5-77bd-4b92-88be-4d3aa1b1f0db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9ee74f-8e68-4952-8ebf-5f07095d8399", "sighting_of_ref": "indicator--ba3fe06b-d5d5-4549-afd7-36c2e9d75cbe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41759ff4-cafb-4641-afd6-b46d689a0fc6", "sighting_of_ref": "indicator--2bad6cff-7bb2-4de0-9a62-72bc2c034867", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c124b377-1377-4c8b-99e3-d8dd8e1dedb6", "sighting_of_ref": "indicator--2d4d9bbd-708b-4aa5-9ec1-537972e990ad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4afb4b-1968-4f03-a5e1-81a955d286b1", "sighting_of_ref": "indicator--8b85f51b-fa1d-4f0d-8f0a-a9c2967ec858", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea03f86-fe14-41fb-ae7c-28e78f5268ad", "sighting_of_ref": "indicator--73a31c64-d44c-4ec9-b1e3-8ba8423334f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee75e397-bb6d-47be-a09a-dd26ecd6b45c", "sighting_of_ref": "indicator--8809b86a-dadd-4775-9ca2-0854dd705ce0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de2b09a-334a-4f30-b579-5730918e4f81", "sighting_of_ref": "indicator--7d53cb89-d88a-4ebf-9520-cf71588857aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da16d4a-ef05-4fbf-acda-590a4fbe4405", "sighting_of_ref": "indicator--d2841f51-c480-4e88-8c66-89082c87f126", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40475456-1871-4da9-bf9c-121c1ab1c9f9", "sighting_of_ref": "indicator--3d444242-80c8-475f-81a9-9b8c8fcea37e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087c4c50-16f1-49ce-84e6-513a7a005254", "sighting_of_ref": "indicator--e6f98360-f17e-4ac0-bf1a-a9ce2bcda61b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122440c9-8ac3-4a0f-be50-0a44232527db", "sighting_of_ref": "indicator--4fba32a9-e3dd-42e8-a4bf-98ef7554a4aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb25bfb6-2261-4ef1-a70e-b267892a06ca", "sighting_of_ref": "indicator--e289219c-6804-406a-84f7-4d84db3fd125", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39442ca9-5b5a-4bb1-96d0-abc17b0244e5", "sighting_of_ref": "indicator--1840cd93-e320-4ca8-ac0e-00497a2b6223", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0eee16-4a92-4b5b-baa2-89e9b0814ea2", "sighting_of_ref": "indicator--c83821c6-2f32-4cb7-9a46-0a5e63d32ac5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449fb339-129a-4218-af4f-5a0c8a2eb5be", "sighting_of_ref": "indicator--964181fe-fdd4-47c8-af0e-0ea553e978aa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28b7484-3f64-4533-8900-4886d993d2e9", "sighting_of_ref": "indicator--80d3cb96-4e1b-46b5-b6fa-fa046fd85463", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7c6a2f-cc30-42e5-b52c-1da05bed4b2f", "sighting_of_ref": "indicator--392e3f93-7441-46fa-9d89-85d6b31e9b12", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a3e35e-0759-4500-a33e-d87d9bdefdaa", "sighting_of_ref": "indicator--686d0b0d-b2b7-493c-a2c9-61cc9f8e9b94", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4066f144-9ae3-4c40-a70e-5a39a63862a9", "sighting_of_ref": "indicator--74878b07-dea6-4f83-9fda-59c4ac598023", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122392d9-1abc-42d5-93e9-fe6ee477ce98", "sighting_of_ref": "indicator--31593631-f80e-43d9-9493-8f1564abff9a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a04120-68dd-4fef-a8b5-b97294541136", "sighting_of_ref": "indicator--08a019ac-38c4-4f82-8ce6-a7a37ab19d52", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3749586a-5e9e-4484-8718-55739e626686", "sighting_of_ref": "indicator--08a019ac-38c4-4f82-8ce6-a7a37ab19d52", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d4279f-4a91-4b0f-baf5-2685d539b550", "sighting_of_ref": "indicator--08a019ac-38c4-4f82-8ce6-a7a37ab19d52", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344f4ab8-ec05-4bb6-9c9a-96dcd0812904", "sighting_of_ref": "indicator--7efc1e41-f29e-4ec8-9b3e-2feb7f55c160", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc625129-2f14-4b59-baa9-1d4296cc57ae", "sighting_of_ref": "indicator--45590e89-a747-4580-83c5-f5dc1c9f590c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71577e37-a5fa-4e4f-bf1d-1ec232daa410", "sighting_of_ref": "indicator--42f5f495-32e7-4aa7-b6a0-b0f6a6d2cf7b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55c707f-612d-4678-82df-cc168a5a800e", "sighting_of_ref": "indicator--39a1cb7f-732a-430c-bc0b-056642479c64", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1d0e26-5fdc-4b30-b3ab-52c68eb74ef9", "sighting_of_ref": "indicator--cdb964c8-3a62-445a-b8d6-6b9e3c88f7fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c675d3-2936-46b3-874c-326281e2e012", "sighting_of_ref": "indicator--bf9ab998-3cac-4d9a-86b4-6be658eea5ea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae56fcc-c618-4d76-897f-c949c8bb39a9", "sighting_of_ref": "indicator--241b9eb0-d8dd-4ee3-b639-749fa431b7b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfd838c-3cd5-4e6c-a496-76737bb993bb", "sighting_of_ref": "indicator--241b9eb0-d8dd-4ee3-b639-749fa431b7b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26086595-54fb-4092-aeac-63bf0b2b8b54", "sighting_of_ref": "indicator--241b9eb0-d8dd-4ee3-b639-749fa431b7b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572d6ee9-66aa-4d49-b59b-92f5a9fd3ab5", "sighting_of_ref": "indicator--fb97f52b-369d-465b-814c-1b6203a5e358", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d521c6-4445-4d63-8ceb-b75e66fad750", "sighting_of_ref": "indicator--93ce57b2-7348-463e-8960-a6e1cada38f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d2135a-af82-4a0b-bb65-f04d0e2da18d", "sighting_of_ref": "indicator--93ce57b2-7348-463e-8960-a6e1cada38f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2880e5c4-abb9-4e6b-aa43-61fbbf57f875", "sighting_of_ref": "indicator--ae6c9c8d-86c8-49c8-b82c-61035f1bd042", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a97a038-068e-45a3-a431-240ddc3b7eab", "sighting_of_ref": "indicator--c749aa84-3cf6-40d9-8e78-c8c889463227", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6707d056-8279-4a0e-9808-3e78b2639042", "sighting_of_ref": "indicator--18400488-8605-4228-ae9a-04a762c7235b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecedb59a-57d1-4914-af3c-64e59cc64464", "sighting_of_ref": "indicator--a465c456-8b3d-4627-8d59-7774785e2f48", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19bd88c-3682-4c35-a98c-7202cd7be927", "sighting_of_ref": "indicator--a465c456-8b3d-4627-8d59-7774785e2f48", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac54e1f-7417-4d6b-9dbb-01441f1a6f14", "sighting_of_ref": "indicator--1f682ba3-24a2-4056-8e55-933e17c0681e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0251b8b9-8292-46fe-ab8c-73925bcf707a", "sighting_of_ref": "indicator--1f682ba3-24a2-4056-8e55-933e17c0681e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf14983-0a2f-4270-92bb-7984ed67338b", "sighting_of_ref": "indicator--54aeee83-9f15-4976-922b-5e9da4d843d1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9525b2-6049-4b07-86e3-cc9f38625319", "sighting_of_ref": "indicator--7a66dec1-94f3-4ee1-8278-bc1946de75c2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937a8133-c372-4f81-aad5-a10064f2a4cf", "sighting_of_ref": "indicator--7a66dec1-94f3-4ee1-8278-bc1946de75c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41cb103-dd0d-4b12-94aa-b51f28b73837", "sighting_of_ref": "indicator--7a66dec1-94f3-4ee1-8278-bc1946de75c2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bf16ce-990a-4bff-a3c8-34b651168764", "sighting_of_ref": "indicator--269583a6-f1c2-42f6-9362-70e390119ead", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f950aa5f-5ade-4906-baaf-40273c67c6df", "sighting_of_ref": "indicator--269583a6-f1c2-42f6-9362-70e390119ead", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635854a2-d469-406e-ae14-65eb626f81e4", "sighting_of_ref": "indicator--c0a52e76-dc69-4a26-be92-1d87b1b217dc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f76d58-021e-413f-bf42-10a098e65921", "sighting_of_ref": "indicator--c0a52e76-dc69-4a26-be92-1d87b1b217dc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9acbab-88e7-4566-bf22-92d0d18f2fc4", "sighting_of_ref": "indicator--877ebaaa-c2e3-4678-b34a-12d406242ca0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6362834-778f-47c0-a243-aef3a4d8fb05", "sighting_of_ref": "indicator--877ebaaa-c2e3-4678-b34a-12d406242ca0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7e4a05-53b1-4e9d-8c46-74eb14c47407", "sighting_of_ref": "indicator--877ebaaa-c2e3-4678-b34a-12d406242ca0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddda6847-2450-4e74-83f6-3428c2e1c6ea", "sighting_of_ref": "indicator--75590a34-6bd6-4196-aa4d-7f4c8497db93", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e74c37a-f11e-49ae-be70-0fe1c5ae1ffe", "sighting_of_ref": "indicator--75590a34-6bd6-4196-aa4d-7f4c8497db93", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ce10e5-3707-4c7a-ad60-9d100d909a17", "sighting_of_ref": "indicator--3bb3cd4b-11eb-4a22-b621-5da658469cef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d104fc66-9a10-443f-878e-f26513b6202f", "sighting_of_ref": "indicator--3bb3cd4b-11eb-4a22-b621-5da658469cef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6644d8e4-1cbc-4a88-81ca-107aebcf1e35", "sighting_of_ref": "indicator--2e20b501-3937-4b57-9561-9ad595d6c7f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4857dbb2-8249-4359-98e4-24e31595fb32", "sighting_of_ref": "indicator--2e20b501-3937-4b57-9561-9ad595d6c7f1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c90a76-02f8-45a7-ae5b-c3fecb0137c1", "sighting_of_ref": "indicator--2e20b501-3937-4b57-9561-9ad595d6c7f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a09678-f534-4777-80cb-f15bedad6bc5", "sighting_of_ref": "indicator--4bed732a-fa1f-4a1c-898e-a9695ff0c894", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d48f9a6-c1c8-4129-8a4b-c631f548d471", "sighting_of_ref": "indicator--f59e0c33-a0f2-453b-885e-97ef9a098586", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b10ab6-b799-4bbc-9673-e4dfd8670e48", "sighting_of_ref": "indicator--f59e0c33-a0f2-453b-885e-97ef9a098586", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49508aaf-f6a1-43ef-b823-8525ddfd2af7", "sighting_of_ref": "indicator--2fe16e57-6fa2-4d8e-a3b9-a51af24ef66a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c59e148-9164-4465-99af-4bbef5578391", "sighting_of_ref": "indicator--8db62b81-226b-4e7d-847f-391338c4a0cc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba3a04c-38d9-4b0a-beb8-9be158791379", "sighting_of_ref": "indicator--0272e215-e9a4-43f0-ac53-7525c7d35833", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee2c7fb-4820-4829-93dd-aedd09173a93", "sighting_of_ref": "indicator--33a41060-ea23-42f1-8cb1-fbd64ccfd25f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5db4a5d-1c76-483d-8277-79b90e860236", "sighting_of_ref": "indicator--2683c546-61f3-4305-bf62-fd3be10f0544", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc46e0d-99e7-4983-abac-6e6ee33abad2", "sighting_of_ref": "indicator--04e05f6b-3bb3-41d2-bb2f-ea47e33cbf2d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6733c2-fee7-44f1-b2be-79bfc61dfefe", "sighting_of_ref": "indicator--1ad88a8d-3a41-4f29-bb2c-29a9ee30a2d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d31b3c6-d504-4bc5-92cc-e6d96a6eedd9", "sighting_of_ref": "indicator--1ad88a8d-3a41-4f29-bb2c-29a9ee30a2d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06993763-2118-47f6-8970-720b68c3282f", "sighting_of_ref": "indicator--1ad88a8d-3a41-4f29-bb2c-29a9ee30a2d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0894e348-b98e-4e17-822e-c67314da709b", "sighting_of_ref": "indicator--0edd0829-9d41-460f-b170-3a6e5ec15350", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3de043f-3d09-42fe-975b-2953512c7147", "sighting_of_ref": "indicator--3a668400-c1a2-4d09-8df7-b0ea02713b1e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0066e50b-4785-44c8-bede-c8e00a0e6bfd", "sighting_of_ref": "indicator--72415827-35be-4aee-9403-ad21d6da94f6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4836e2d1-961c-491d-a923-457622b0aa23", "sighting_of_ref": "indicator--72415827-35be-4aee-9403-ad21d6da94f6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e591496-2327-4fd4-a52a-ba104ddd6dc6", "sighting_of_ref": "indicator--a3e83f2e-a871-4b2a-aaec-879662088964", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32be8bc-6723-4411-8fd1-da001c64170e", "sighting_of_ref": "indicator--a3e83f2e-a871-4b2a-aaec-879662088964", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c53ad93-46ad-401f-bf45-c4b57b67770d", "sighting_of_ref": "indicator--a20c46cf-5159-4f3b-abe0-a359f89a256f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c5b42c-6bec-4a22-bf03-75195dc9c579", "sighting_of_ref": "indicator--a20c46cf-5159-4f3b-abe0-a359f89a256f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fd57d7-089c-4a4c-9c17-9bc5eb1f1be1", "sighting_of_ref": "indicator--44ac77d9-f492-4bad-aecc-e6a9c27139d1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca44fb8-fe32-4cb8-81d1-1d0edfb7c872", "sighting_of_ref": "indicator--44ac77d9-f492-4bad-aecc-e6a9c27139d1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1e8261-36a9-4965-b131-a78b6dad7afd", "sighting_of_ref": "indicator--e387d371-3733-42dd-98db-0f8f9e062c9d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778c797c-e511-44f0-a478-fed4a4e0c221", "sighting_of_ref": "indicator--53d3d20b-c4ef-4142-9d5f-0379e5c7294d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a302972d-f471-48b1-9059-10e68186d8b5", "sighting_of_ref": "indicator--53d3d20b-c4ef-4142-9d5f-0379e5c7294d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86a0a16-0697-4a29-b3f5-e9451bf4787e", "sighting_of_ref": "indicator--075a20ae-7315-43fe-a85b-ab6b042878a1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8cac6d-abba-4b3e-98bb-d7d81246e6d4", "sighting_of_ref": "indicator--075a20ae-7315-43fe-a85b-ab6b042878a1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bb4118-d288-478f-bd3e-c96ddadde0f6", "sighting_of_ref": "indicator--075a20ae-7315-43fe-a85b-ab6b042878a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923f5a71-d335-4322-8141-5c579470d105", "sighting_of_ref": "indicator--5019afd3-c83d-448f-b967-fabdb4f08883", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8507a9-8e10-421f-82f6-fc7b7f6bad23", "sighting_of_ref": "indicator--5019afd3-c83d-448f-b967-fabdb4f08883", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917da9e1-6ca9-4aa7-bbc2-74bfd4e11ebb", "sighting_of_ref": "indicator--ddfcd380-28fa-4494-91ee-6b75e9b435f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abf4a13-bb73-4156-9c98-9ed69fee29b9", "sighting_of_ref": "indicator--c4aec7d6-b299-4323-b277-a85a52b3b9a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06db7730-b7e7-4c5d-bdaa-0f882711f984", "sighting_of_ref": "indicator--2bef7452-a49d-4b5a-a603-9d724d635f17", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96a2578-aa77-4623-b192-f6f4d7e2e5ef", "sighting_of_ref": "indicator--07bbc128-6914-413a-88d8-6d57bbe7842b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da695ec6-2b41-4663-b0fd-3610fc78e087", "sighting_of_ref": "indicator--ee59d1eb-d9f8-4aa4-9f3d-c67ca524b7f8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6f2090-fef3-4390-b2aa-163716bf6c3b", "sighting_of_ref": "indicator--ee59d1eb-d9f8-4aa4-9f3d-c67ca524b7f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e04fb7-7e37-4acc-9719-5f04484f2565", "sighting_of_ref": "indicator--ee59d1eb-d9f8-4aa4-9f3d-c67ca524b7f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3db6842-982b-4efd-94c3-b619172b81e1", "sighting_of_ref": "indicator--2fd7970a-a196-4162-83d6-95719889bde2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170bbe89-df79-4945-893a-75eb8fcb0997", "sighting_of_ref": "indicator--33d7de05-2eb5-4044-82f4-d3e8f8908976", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddec3400-edc7-4141-8cd6-0bc8fa02002d", "sighting_of_ref": "indicator--33d7de05-2eb5-4044-82f4-d3e8f8908976", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d3f13b-fe59-4132-ba28-c5387afa737a", "sighting_of_ref": "indicator--33d7de05-2eb5-4044-82f4-d3e8f8908976", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9978e8-dc17-492e-b3da-b046ad8444fc", "sighting_of_ref": "indicator--7df75cab-f199-488d-93c9-21a0833d4df9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed7c826-fb44-477f-a34a-fd4bb1b785ca", "sighting_of_ref": "indicator--7df75cab-f199-488d-93c9-21a0833d4df9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac52039f-f8c2-4075-83f7-11922866572a", "sighting_of_ref": "indicator--7df75cab-f199-488d-93c9-21a0833d4df9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c793c0bc-c503-43a6-9b61-23568a102412", "sighting_of_ref": "indicator--68639f30-097b-4cc7-b2e9-2ce4091caebc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5bd04d-c07c-4208-9cc5-580def751cfe", "sighting_of_ref": "indicator--831f4e87-9dcd-46ce-bc14-c8e1d6a8bb26", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a400302b-f1d2-474c-8b8f-f02f571be937", "sighting_of_ref": "indicator--d8f34fd3-d43b-4387-89c5-ba3422af0655", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad052ca-0893-4367-b522-e193de532ec6", "sighting_of_ref": "indicator--d8f34fd3-d43b-4387-89c5-ba3422af0655", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032eb8ee-8db0-42b7-ab7c-b542287b39ae", "sighting_of_ref": "indicator--d8f34fd3-d43b-4387-89c5-ba3422af0655", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cef3c0-632d-4500-9cf1-f6f25001a5fd", "sighting_of_ref": "indicator--db535e39-e3de-4c1b-a3ec-6cae81766aa7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac219248-dba6-4774-8c9f-a9ef7f78120b", "sighting_of_ref": "indicator--db535e39-e3de-4c1b-a3ec-6cae81766aa7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a97a57e-fa99-4b8a-8857-b7a480dfe006", "sighting_of_ref": "indicator--225a61e0-b900-4de9-a8d5-901ba43b05f7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbee66c-417d-4928-94b3-bb07e83b1b89", "sighting_of_ref": "indicator--c99a70e4-3ab6-4e33-ab43-fd1c7783eac8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1160b16-a549-41ce-940b-08bf5b031992", "sighting_of_ref": "indicator--c4ce832a-5364-4952-9400-4c0634dd5b0c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca859832-f44e-4813-ae42-1263178462b3", "sighting_of_ref": "indicator--c4ce832a-5364-4952-9400-4c0634dd5b0c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a1c194-6c5d-4100-a2a3-b4d48b442775", "sighting_of_ref": "indicator--c4ce832a-5364-4952-9400-4c0634dd5b0c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19765fe3-396b-413a-9732-d5549a0f1c23", "sighting_of_ref": "indicator--b8a08ad9-3337-4e90-a407-23b2b3d9cf46", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd95dee-fc75-4f7f-97d9-29882ea7a284", "sighting_of_ref": "indicator--b8a08ad9-3337-4e90-a407-23b2b3d9cf46", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72565e6-27d5-4d1a-bb74-5de4ecce7059", "sighting_of_ref": "indicator--c71005d3-d8bc-4e67-bf52-6791ab0e7fd9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60bc82d-f750-4f7c-9412-dabd74aa8900", "sighting_of_ref": "indicator--4b8738b4-c7cd-44db-a971-c441f4d30919", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f99e55b-2ece-48b6-a5c9-a39775d1b791", "sighting_of_ref": "indicator--4b8738b4-c7cd-44db-a971-c441f4d30919", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da7e0f0-759e-4592-bf63-48a796693db0", "sighting_of_ref": "indicator--13b89163-c3ea-4613-a2ff-8b507db42b96", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505e48db-2c47-4a40-a3e1-0fc42864c9a6", "sighting_of_ref": "indicator--51f229b1-83d8-431d-ac97-9ba952c0ce0e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3a6b1a-04d0-4b0a-b33b-ec36f9f54540", "sighting_of_ref": "indicator--51f229b1-83d8-431d-ac97-9ba952c0ce0e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3eee755-250f-40b9-b398-23d20ea06104", "sighting_of_ref": "indicator--51f229b1-83d8-431d-ac97-9ba952c0ce0e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53685df6-c894-4382-9c1f-8234d4ab564f", "sighting_of_ref": "indicator--149a37ac-1c81-433e-b8ec-3a68b91d8213", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03769b3c-0808-4253-86ed-5717d57e8847", "sighting_of_ref": "indicator--d7c130f5-9de6-4e1d-b328-614a67f74b85", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79add79-700f-4d01-a718-bab7a086220f", "sighting_of_ref": "indicator--4d8cff57-ee27-4524-9639-0cc9fded0536", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ac7f69-1c2a-4fb0-a581-36944d7a2723", "sighting_of_ref": "indicator--4d8cff57-ee27-4524-9639-0cc9fded0536", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f1cea4-6571-453d-a1a6-aa07a9ed2ce5", "sighting_of_ref": "indicator--bf83fb9b-ba92-462c-9b96-3cecb44cb980", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1d4e0a-dffa-4264-b47a-247704313326", "sighting_of_ref": "indicator--f3992ab5-4804-4a37-820f-4f91ef907b7d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10df0d77-1f59-4b09-a7f4-193bd4739450", "sighting_of_ref": "indicator--f3992ab5-4804-4a37-820f-4f91ef907b7d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6262bc64-33a8-4e45-b1ca-0b139ca959b0", "sighting_of_ref": "indicator--f3992ab5-4804-4a37-820f-4f91ef907b7d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b22737-da55-4496-9f05-1e5ef89acd22", "sighting_of_ref": "indicator--ed44522a-7d56-476a-b2ce-a14eff07bca3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87713b29-f5c6-4a01-9b5b-466b39888d38", "sighting_of_ref": "indicator--ed44522a-7d56-476a-b2ce-a14eff07bca3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0e716a-2af0-4f11-9f88-f5f89caf84b9", "sighting_of_ref": "indicator--ed44522a-7d56-476a-b2ce-a14eff07bca3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0e2aa9-9857-403b-b963-f84ceea279ca", "sighting_of_ref": "indicator--5c9b1b8a-92d5-4317-8a05-884e4a5398c0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9052bfa1-da70-494c-bac5-29fdec9308ad", "sighting_of_ref": "indicator--c9c7ce2b-53a0-4ddd-96fc-fc823721b7bd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36262718-5100-4073-b474-1f401c319f59", "sighting_of_ref": "indicator--3dcd164c-58dd-4ec5-92f0-d0223af11ee9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b36e51-084f-4ba9-8a39-954d14e5409a", "sighting_of_ref": "indicator--2b2ead92-3aed-431c-acc3-f18a1855a13e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db2f454-5e81-434e-b915-09849647c644", "sighting_of_ref": "indicator--15c286e7-2d2f-464b-af4a-70436f4023bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c886891-709f-4e70-bb11-55838dd09e61", "sighting_of_ref": "indicator--870e6758-a03b-4272-bc19-f5891782f5fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3819f9d0-68bd-4c5f-99ac-9847b51f74ba", "sighting_of_ref": "indicator--870e6758-a03b-4272-bc19-f5891782f5fa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2247e052-b3cf-4fdf-93c1-58128b309f5b", "sighting_of_ref": "indicator--bebbeb90-51c8-4179-9aac-af5369e4a2ed", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570001d4-bcd5-4d8a-8e8b-14f13b454721", "sighting_of_ref": "indicator--d742045e-5b39-435c-b158-3f336ff4afd2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65e84fc-a42b-4105-9853-894e93db724a", "sighting_of_ref": "indicator--f41415f2-d1cc-4fbb-a7d0-9a8a3fc1f002", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61ec113-2ec4-4454-b611-f0a092ff90e4", "sighting_of_ref": "indicator--c04ffdbf-be8d-4fda-ab9c-fa0daeab4bbb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b07e5b-b00e-435a-b22e-276e84b7f595", "sighting_of_ref": "indicator--c04ffdbf-be8d-4fda-ab9c-fa0daeab4bbb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9561cff-deb9-477f-aee8-3dd58bc3d16d", "sighting_of_ref": "indicator--0276a1b5-3cee-4e6b-942d-ffa2f0d51c88", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa7100c-b621-4481-bd3d-52341f067786", "sighting_of_ref": "indicator--cc37aa87-bf2c-4f12-b113-0213b5706dab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322e8e8c-6a97-4d3a-92c0-b3ecf9278ea2", "sighting_of_ref": "indicator--cc37aa87-bf2c-4f12-b113-0213b5706dab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ffd59c-5a77-4248-9c24-0cca52d81867", "sighting_of_ref": "indicator--759d7b09-f0b1-4ad4-83d4-fc9ce507d462", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869d138c-4f54-4263-8537-aee10abc6f51", "sighting_of_ref": "indicator--d8b0c940-bb7f-4821-9fc6-402169138ef8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0decde-a4b5-487c-a5ee-bfc919ae9854", "sighting_of_ref": "indicator--798060cd-0dce-4ad9-b485-ff5fa436a98f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73ed942-86cf-4ff3-a3ed-0cb26c9003fe", "sighting_of_ref": "indicator--cc73a3e4-946a-4037-83e7-dc5858a8b376", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24efc64-e39d-4658-ba2c-c26ba9d9f69e", "sighting_of_ref": "indicator--6802f6e0-ec87-42a5-aabf-84042f760859", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afeba81b-fd00-4c14-bc4c-c2672a69ce22", "sighting_of_ref": "indicator--29424767-2d99-434c-a316-3c4a68c8354f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153afef6-0705-48d6-9410-e1575ac03b09", "sighting_of_ref": "indicator--7bb901a9-ae7e-458e-8082-adbb08fc327b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd60edea-e961-445e-8fe8-1e29dedf6d97", "sighting_of_ref": "indicator--0810ce8f-7e1f-45ba-b98d-23ca7e1b5242", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be667026-c2ef-4295-8bb8-426dc15e7c87", "sighting_of_ref": "indicator--fc8a4274-1373-4ab7-a4cf-bd9292d786d8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4212c39e-291b-4ae6-a6f8-4159fc85a899", "sighting_of_ref": "indicator--fc8a4274-1373-4ab7-a4cf-bd9292d786d8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7b16d2-fcf3-4339-9329-22a4f697f719", "sighting_of_ref": "indicator--51ef4dc1-0578-4e97-8898-f7d291de46ff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8663e05-44a4-42fc-baec-f3322dc9f104", "sighting_of_ref": "indicator--561d7691-86ff-4286-b989-2882d6c3fb25", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8f70df-a4a2-47cd-b87b-ba04fb403696", "sighting_of_ref": "indicator--561d7691-86ff-4286-b989-2882d6c3fb25", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64194848-fbe8-45e0-b162-c4084b66ab88", "sighting_of_ref": "indicator--561d7691-86ff-4286-b989-2882d6c3fb25", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc53d97-b87e-4e1c-a2ea-d618190cfab8", "sighting_of_ref": "indicator--5c667afc-ed50-4c69-a029-b7a50ec1a92a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fb79cb-7a51-4c0a-8fe2-d81546ec1f25", "sighting_of_ref": "indicator--8a18a8ef-3eec-4d59-af49-98995f5e5621", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d8d67c-d669-4b62-924f-5023927c847c", "sighting_of_ref": "indicator--1f8b207d-4a80-4ef5-ac6c-7f0a98dde697", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc99794-5bc0-4595-bf0f-a7d79befd881", "sighting_of_ref": "indicator--1f8b207d-4a80-4ef5-ac6c-7f0a98dde697", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06df995-9976-4bd2-9189-4d8862106cd9", "sighting_of_ref": "indicator--247a6693-3371-4ed9-83d6-cdf0f1bfa1ea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4bd5aa0-c532-4361-ae51-2a71beda55e3", "sighting_of_ref": "indicator--91ed0278-06f9-4068-b4c3-ea2f1ffae2a4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae7bc0f-bf4b-480d-8475-813af5a9e971", "sighting_of_ref": "indicator--2b483a8d-d213-496b-b478-664f1e461c73", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8d4a52-169d-4b41-98b9-081d6e881004", "sighting_of_ref": "indicator--0c3cd938-d813-4d0b-8bed-0417fa647317", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117c782c-62e8-4759-962e-b6873121e272", "sighting_of_ref": "indicator--88c18014-26ee-4aa5-a2c5-14ebe42d7ec3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9408b169-6758-4fb1-b7c4-2b82607a5fbd", "sighting_of_ref": "indicator--88c18014-26ee-4aa5-a2c5-14ebe42d7ec3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce555cc-10c8-4567-a16a-8326390dc15d", "sighting_of_ref": "indicator--bc2572b4-67f0-44eb-a489-22d584590d1a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde9a75c-8f11-407a-8849-08daca765b11", "sighting_of_ref": "indicator--000eac0f-5261-4edb-8a2c-d973d397fc21", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9edc5b-b915-45eb-9881-992c618465f4", "sighting_of_ref": "indicator--9557ace3-cd4f-4055-a5a0-7003d9c5b472", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ac241c-d028-4f24-9705-84c85539e127", "sighting_of_ref": "indicator--9557ace3-cd4f-4055-a5a0-7003d9c5b472", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ede44d0-d570-4471-9ad5-536258808059", "sighting_of_ref": "indicator--9557ace3-cd4f-4055-a5a0-7003d9c5b472", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62867fc-7477-4fec-8ea0-c7254a6ffb4d", "sighting_of_ref": "indicator--2c769e1b-4116-462f-9057-07e42b4fde73", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4948267-5650-42f1-8cea-db572d44754c", "sighting_of_ref": "indicator--2c769e1b-4116-462f-9057-07e42b4fde73", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f731f4ab-670b-4488-8822-a4c69c7426d8", "sighting_of_ref": "indicator--63110d84-8196-4554-ad89-f04220bfa3d7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0132b4-3b5d-483c-b14d-362bb85ccc86", "sighting_of_ref": "indicator--63110d84-8196-4554-ad89-f04220bfa3d7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f613103-29f0-4236-89d3-e838a7a250de", "sighting_of_ref": "indicator--ca7c477f-fa18-4f63-95f5-0ab149fdab30", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ecb5358-291a-42ff-a6bb-3d2533280dbc", "sighting_of_ref": "indicator--da05b64f-c939-4c76-a5db-044ae047419b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd607893-9b42-4bd8-b4ff-5781ad5f01d1", "sighting_of_ref": "indicator--74db6ff6-0835-4511-abe3-6b429a182cc7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4409ddc-2637-4483-a884-5badf79f397a", "sighting_of_ref": "indicator--d1cf0b82-b01f-4e80-a3c8-13e4298b4b16", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a90b361-55c9-4f8c-a2da-690e52cadd72", "sighting_of_ref": "indicator--b9fda1a5-fc21-40d8-aecb-36d1a801f3e8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cd0bca-8b87-4dd1-9424-af5ff9458c72", "sighting_of_ref": "indicator--37b0a14e-2706-4a4d-83d1-f900f52d36dc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab11df1-796d-415b-b953-542bf31f3b0b", "sighting_of_ref": "indicator--37b0a14e-2706-4a4d-83d1-f900f52d36dc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5789369-238a-492f-bff5-f04c26c3dd57", "sighting_of_ref": "indicator--734435b0-f3d3-4025-a792-abb16856b006", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81763f1-0e9d-4344-8fbb-b63d3eba3090", "sighting_of_ref": "indicator--23f31c91-ad82-458d-be9f-f469ddf7f610", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d5009a-5d94-4b80-a736-f1d014e82cdb", "sighting_of_ref": "indicator--5e533980-ef4e-46af-9eb3-a1acd44f73b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f094680a-c16e-4538-ab60-90a178c7cdd9", "sighting_of_ref": "indicator--ef00d126-a82a-44db-96a2-df15bb96da4c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eab84b9-9166-4040-a597-9c32490338e2", "sighting_of_ref": "indicator--f1cb490d-b3fb-477b-a94b-4082d2c4ac64", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2a6f19-fb86-42f8-9792-af6ac3db7044", "sighting_of_ref": "indicator--f1cb490d-b3fb-477b-a94b-4082d2c4ac64", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc64abc9-9812-45ce-b676-1491a9fabd6d", "sighting_of_ref": "indicator--0213352c-18d4-4f49-81fb-5d659263191b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b03a25a-585f-4e62-9f5c-efc28fd5b7eb", "sighting_of_ref": "indicator--dd772a78-393f-4dff-87ec-a4e594fe5a36", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bc59d0-4394-4aa2-ba81-66d9f71a12d0", "sighting_of_ref": "indicator--80fc06e4-696f-45c0-9490-d1411b3267a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6abe5a-8fbe-4bd6-8da5-e660c1dcbc97", "sighting_of_ref": "indicator--80fc06e4-696f-45c0-9490-d1411b3267a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1fa157-7e0d-4ae0-b9f7-0866dd72592f", "sighting_of_ref": "indicator--de75ae9c-25b0-45c8-a434-ebea007f836d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cd5859-1264-458b-97d8-51b0f6aaac54", "sighting_of_ref": "indicator--9b32fa55-e6b1-4517-9371-fbb98c2364b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b79dcb-3645-44e9-a904-f20cd5318001", "sighting_of_ref": "indicator--5de46d86-b1a5-44f7-bc0d-0af268ae098a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b2ef1c-f5bf-476c-9ead-328bfb121b8c", "sighting_of_ref": "indicator--d0bdd880-c0fb-473f-af04-e3f2f308aa02", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36664edd-7b26-4f03-9768-25bf1409eb2a", "sighting_of_ref": "indicator--d0bdd880-c0fb-473f-af04-e3f2f308aa02", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116afcd5-7506-4b15-8d22-79394841ed58", "sighting_of_ref": "indicator--ece3bc25-c453-4cf3-b22d-90bf6b54f6f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05325f71-ec6b-4018-8b9a-2be9e26fd591", "sighting_of_ref": "indicator--e571a59f-bbfd-4695-9e5a-4b4d94f23adc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0db93b-1cdf-4d58-b997-cfc7a3d557d5", "sighting_of_ref": "indicator--e571a59f-bbfd-4695-9e5a-4b4d94f23adc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32347743-5a70-4ee1-b036-cfaec534e0aa", "sighting_of_ref": "indicator--db8e2252-e112-481e-a784-80f0c5cffcb0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845f8f4f-1178-4614-9bbf-6e5b0b5212c2", "sighting_of_ref": "indicator--db8e2252-e112-481e-a784-80f0c5cffcb0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3cf228-2620-4071-974d-35c78ee51db8", "sighting_of_ref": "indicator--cfffa350-d882-432b-a747-57835c1dfed6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451f61fc-4158-4abf-81b3-b3ef7590d298", "sighting_of_ref": "indicator--5c07021f-ebc1-46e4-bd6f-64528dc48183", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e7e3ad2-b713-4bae-9849-47a32fce1367", "sighting_of_ref": "indicator--5c07021f-ebc1-46e4-bd6f-64528dc48183", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b091c2-fa9d-4473-8813-5d673373f558", "sighting_of_ref": "indicator--bd6abba6-e78c-4aa4-b8e8-235aaf93279f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e5dde3-c9f9-4ae4-a2a9-01706dc0f66a", "sighting_of_ref": "indicator--bd6abba6-e78c-4aa4-b8e8-235aaf93279f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fa76ae-c188-4a9e-9bfa-c566a10de87c", "sighting_of_ref": "indicator--eacf18ce-b1e1-4031-9fe5-03d813ad3f04", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f71fd1-4df0-44f7-8043-665f2f94a81d", "sighting_of_ref": "indicator--c9aaf0bd-89c6-46b1-a795-cab27ec94534", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231c28ef-4080-4d1d-8d5c-ef3da108bc52", "sighting_of_ref": "indicator--c9aaf0bd-89c6-46b1-a795-cab27ec94534", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26cebd0-6a2c-4b2c-91f9-bd524c3b87eb", "sighting_of_ref": "indicator--0fb212cf-3674-444d-938b-a919f8a6a2b1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88f99c3-58d1-4393-9822-77e167f9c4d4", "sighting_of_ref": "indicator--bd8a675b-4c3c-4510-aa04-4fbd9011e6f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa2dc48-cb0d-46cf-bb55-64f85b33f638", "sighting_of_ref": "indicator--30305ac3-8fb7-4c10-a894-66d2cfb6386b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e394e0e3-0e22-438a-a523-0481213bb8ec", "sighting_of_ref": "indicator--30305ac3-8fb7-4c10-a894-66d2cfb6386b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e7aec6-78ce-4f29-b052-662015e2fcbf", "sighting_of_ref": "indicator--270af45b-b46d-43ee-99e9-a96e5ad9a902", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce675839-fc01-4d4c-983d-45a8924dca30", "sighting_of_ref": "indicator--d01a2c8c-492f-4720-a66c-5eb255d4079d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a27784-b554-4394-84d5-c7e1cc1117ae", "sighting_of_ref": "indicator--d01a2c8c-492f-4720-a66c-5eb255d4079d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e499dcb-6bfd-48d1-9e26-4e9ce5306708", "sighting_of_ref": "indicator--4f67fd5c-1722-487e-9111-09baf9c41c4d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad6296d-e939-40cf-840f-c7b04da550ad", "sighting_of_ref": "indicator--c3f5cf51-5199-4990-809f-e789accba6af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad0385f-1ace-4372-a399-6133818bd868", "sighting_of_ref": "indicator--c3f5cf51-5199-4990-809f-e789accba6af", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676896d9-94e2-431d-9536-84852c773c24", "sighting_of_ref": "indicator--fea1ff03-1cd1-4ea3-b32a-01fcdbb2d119", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f270f2f8-4aea-4bf2-af9d-9d44bd4f54ed", "sighting_of_ref": "indicator--fea1ff03-1cd1-4ea3-b32a-01fcdbb2d119", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0815997d-1f04-4983-bfc0-65766fc8ca04", "sighting_of_ref": "indicator--8199a0c3-f2d9-4f4d-a86a-1fc23b1b390a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9666e604-90e0-4608-bee9-addd5c4db1d7", "sighting_of_ref": "indicator--8199a0c3-f2d9-4f4d-a86a-1fc23b1b390a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3e825f-8fec-46d0-848c-323714c75ec4", "sighting_of_ref": "indicator--bcbd2f92-c09f-4fc4-b32c-9cc23a7b5074", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27eddeff-f5fa-46c0-95b3-5ab4cb2cddf3", "sighting_of_ref": "indicator--215ac019-f921-45f1-a512-b9824db9fb27", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77b1512-d809-464a-8659-d13b78a095dd", "sighting_of_ref": "indicator--215ac019-f921-45f1-a512-b9824db9fb27", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3d7461-8b62-4843-9e77-d05f39399f4d", "sighting_of_ref": "indicator--ab7b35d4-147e-423e-abc0-b1c0cd001ba9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c69108d-b1cb-4b75-acfe-5410c95dcde6", "sighting_of_ref": "indicator--c975c44b-1b7c-44d5-b12f-4a9021b592e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2e2ccd-7426-4a70-b812-19b244bac3b1", "sighting_of_ref": "indicator--ace07b9e-936a-4222-80d3-7ec5371b8864", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0709f45-a14b-4e31-8994-6af0fa12ff2e", "sighting_of_ref": "indicator--ace07b9e-936a-4222-80d3-7ec5371b8864", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ed91cd-bd84-47ca-9142-1de1c60f5777", "sighting_of_ref": "indicator--ace07b9e-936a-4222-80d3-7ec5371b8864", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0f8b0d-28c3-411f-9200-99dbf7f79ab5", "sighting_of_ref": "indicator--26b8b712-5c26-453d-a041-e7ecb7e83a3b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2576d325-3b2c-4d61-adeb-3b0dd93dd664", "sighting_of_ref": "indicator--49caaea6-afb2-4af9-9b9c-83c030d8c0cc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e462aba2-04c9-489e-b644-237cc3591cf6", "sighting_of_ref": "indicator--f585151e-222c-43b4-9b51-4471bf20e425", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b867ecc5-b257-436b-b8ed-e1c26cd46e48", "sighting_of_ref": "indicator--9809e054-9edd-443a-8bdf-b8860ece518a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c020dd33-0bd3-44d8-8515-fd3df8d536f9", "sighting_of_ref": "indicator--9809e054-9edd-443a-8bdf-b8860ece518a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fa0a93-79af-4689-9d4e-ed060b8f8a1c", "sighting_of_ref": "indicator--eb82bdd7-c113-4a4f-8611-c6ae6887501d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3048a779-ee6f-4316-9630-dc4a45d131b0", "sighting_of_ref": "indicator--eb3bfdf6-b0f4-45d2-9131-c1f3b2b88346", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1995c1-4b7a-4002-b734-a76014ed931a", "sighting_of_ref": "indicator--2d48a6ba-9f97-402a-a51c-d25eb4fbabb9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20a13da-0ab9-400f-910b-cb80b5db0de5", "sighting_of_ref": "indicator--2d48a6ba-9f97-402a-a51c-d25eb4fbabb9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462c780e-ce1a-4be2-a7e6-c01b162ba901", "sighting_of_ref": "indicator--22d7974a-56e5-4c0c-abb4-1074f4c40abd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d732f4b-50aa-4f00-a238-91a84745279a", "sighting_of_ref": "indicator--22d7974a-56e5-4c0c-abb4-1074f4c40abd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60402331-1a4e-4007-8ceb-4ddfc11744cb", "sighting_of_ref": "indicator--5227f0c1-ea7f-4ef0-ac74-f61fe27d9164", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bca1408-a70b-4e0b-a24f-e71c7c1de6f4", "sighting_of_ref": "indicator--8705e708-8687-4ba6-ba60-8e9789452ee9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b82d99-314d-451a-a108-f77e3b5527bb", "sighting_of_ref": "indicator--f3a60dff-4cc8-4a07-a7a5-a902b35ceac1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a504bd-2b51-4e19-ac0e-826445b7ed9a", "sighting_of_ref": "indicator--f3a60dff-4cc8-4a07-a7a5-a902b35ceac1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c52db6b-3faf-4d45-a921-04882608511c", "sighting_of_ref": "indicator--b028fd0a-eb51-4bff-b87d-d01908ff70cd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4c0cce-e27e-46c3-b3dd-6dd688bc902e", "sighting_of_ref": "indicator--f8bd7ac5-73a7-43e8-915f-01dfec10eb29", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bebec7-d39a-4c8b-8ea1-f90ae98a3d35", "sighting_of_ref": "indicator--f8bd7ac5-73a7-43e8-915f-01dfec10eb29", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0435e5-9e33-4465-9788-c096c887b8f6", "sighting_of_ref": "indicator--271fa86d-5aa6-4f5f-91ff-ea95e41b8014", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e1c1e6-fad7-45b1-95fd-a19d08f7cd31", "sighting_of_ref": "indicator--3fdbaff2-4c9b-45e3-8d6a-563dfc44e356", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13c9ffc-f0f0-43f6-bf6b-00c01b3a90b7", "sighting_of_ref": "indicator--3fdbaff2-4c9b-45e3-8d6a-563dfc44e356", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dad18d-ba9d-405a-af97-f74b165475a9", "sighting_of_ref": "indicator--c73ee111-6710-41e7-adfc-6666da3d4a76", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898badbb-8a25-44b9-936e-4177302c4ed9", "sighting_of_ref": "indicator--ee901b84-6e09-4b07-a359-949cdecb5d31", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e947fcf2-11a9-4ecc-b62a-93b91741534c", "sighting_of_ref": "indicator--ee901b84-6e09-4b07-a359-949cdecb5d31", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582d9781-0697-402a-9c4e-9a7371580244", "sighting_of_ref": "indicator--ee901b84-6e09-4b07-a359-949cdecb5d31", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2038465-6eeb-4189-adcf-f5095c734691", "sighting_of_ref": "indicator--df95e136-532c-4bb4-9b54-ac8c7872c8b8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604c448a-0682-4df5-bc48-1d4e12006c19", "sighting_of_ref": "indicator--df95e136-532c-4bb4-9b54-ac8c7872c8b8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ea4ea8-1061-4528-8a5b-a00442602585", "sighting_of_ref": "indicator--fd54d353-3033-4392-b2b3-bff918a3a67a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ba0732-aeda-405a-8740-3ec0a2ebf125", "sighting_of_ref": "indicator--fd54d353-3033-4392-b2b3-bff918a3a67a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d61de4f-4e17-4395-b625-d13bfec0f100", "sighting_of_ref": "indicator--fd54d353-3033-4392-b2b3-bff918a3a67a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89982337-5a90-432a-9d91-da1c06b6e295", "sighting_of_ref": "indicator--ef4680a1-c648-4149-a3b3-823658215dbe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef19dce8-893f-4df1-b5be-f9ffba8d55a7", "sighting_of_ref": "indicator--dcc7cfda-d06d-48d2-9821-ac66dbf6ddf4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3e49c5-43ad-4e69-9b48-715a0488850d", "sighting_of_ref": "indicator--dcc7cfda-d06d-48d2-9821-ac66dbf6ddf4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26f3657-cf0a-4a5c-89f0-aff3efc8d92e", "sighting_of_ref": "indicator--5490a6e2-6f20-44dc-818a-a15992df83c4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801474dd-288b-4627-bb3a-9a61eeb31117", "sighting_of_ref": "indicator--5490a6e2-6f20-44dc-818a-a15992df83c4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ec1e1d-c9b7-43a0-95a2-4b0ad882d984", "sighting_of_ref": "indicator--5490a6e2-6f20-44dc-818a-a15992df83c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a66d65e-ab6b-4cd0-aeae-6986079102f5", "sighting_of_ref": "indicator--b53d01d2-9abf-4f19-bd6e-1cb7794b28b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7108e037-e1fd-400c-9dcc-f9955170f223", "sighting_of_ref": "indicator--1f8e7476-9b24-4414-b3ee-a5cd3f1c125a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7663cf9-0d55-4de5-8704-0a44c1e33be0", "sighting_of_ref": "indicator--5e5fc4ac-8b13-4aef-ae01-cfdb3b4fdc99", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bea247-bb3e-4caa-aba0-cae734f5fbed", "sighting_of_ref": "indicator--9fae87cc-9a6b-4d47-8f0a-7990412d413f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b3baff-5368-402e-92ce-16d376f52ae1", "sighting_of_ref": "indicator--9fae87cc-9a6b-4d47-8f0a-7990412d413f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e410c7f0-0c84-4f48-88aa-c05390ce3376", "sighting_of_ref": "indicator--36e6270e-19c0-47dc-96c6-1573adc02e66", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4a3e29-9a09-4594-b9c7-9588c5891a23", "sighting_of_ref": "indicator--c7d6b608-0e61-4682-ba9d-659961f50d1e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a08119-afcb-4fca-85a2-918543ae2212", "sighting_of_ref": "indicator--c7d6b608-0e61-4682-ba9d-659961f50d1e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680e1269-944e-4a23-9663-86c87ac6ef79", "sighting_of_ref": "indicator--4cfa4825-65a5-4af0-b571-34a582ce01ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29aeed8-c2ce-43b1-aba8-e025e3facff9", "sighting_of_ref": "indicator--14909ba1-b257-4d56-9d38-449339998386", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0835cbd-b4b5-4e92-b071-a86146b12423", "sighting_of_ref": "indicator--14909ba1-b257-4d56-9d38-449339998386", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dddb2a3-ee53-418a-8e62-883005348fed", "sighting_of_ref": "indicator--71aa7815-6f58-481c-9fd5-4369bd959c11", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d20e369-145e-487f-9972-bd3fdc415b1c", "sighting_of_ref": "indicator--5b3ab03e-d083-4017-8c88-ce6b6621d96b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bdd7e7-2629-4894-81bf-95f8e3f73716", "sighting_of_ref": "indicator--8320fee9-affe-40db-876f-2f7074d3b7a6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03372dfe-eb60-4755-8391-03fbc98c0ef9", "sighting_of_ref": "indicator--8320fee9-affe-40db-876f-2f7074d3b7a6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4cd5e7-83ee-4727-b2da-c3d8da09a3a6", "sighting_of_ref": "indicator--8320fee9-affe-40db-876f-2f7074d3b7a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e952dc5d-14b5-4a31-a2f8-c953f8b72ce3", "sighting_of_ref": "indicator--7d03c969-0bfc-4410-80bd-71a50a123f0a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742c829c-6998-40a3-b87a-477bb369128c", "sighting_of_ref": "indicator--7d03c969-0bfc-4410-80bd-71a50a123f0a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf989016-05a0-49c0-8a0a-bfd20a4043b6", "sighting_of_ref": "indicator--cbfafd45-5535-4e57-89ba-45d99a1e9dc0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8182274-579e-4384-9316-02285de27a26", "sighting_of_ref": "indicator--cbfafd45-5535-4e57-89ba-45d99a1e9dc0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe223086-3759-4438-bf48-38a784b049d3", "sighting_of_ref": "indicator--889cb13c-f8a4-4aac-b586-50b2a04f6c8a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d09838-8f1d-408d-bf49-2600b6885dc0", "sighting_of_ref": "indicator--a5f304eb-c657-49e7-9adb-ecc0b66f80bd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819191b2-def7-46f1-8aa4-372b70ffa250", "sighting_of_ref": "indicator--a5f304eb-c657-49e7-9adb-ecc0b66f80bd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230dfcc2-4449-4e51-9790-78f4b7161aba", "sighting_of_ref": "indicator--a5f304eb-c657-49e7-9adb-ecc0b66f80bd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d448e3-134c-4fad-841c-4b17e85c3877", "sighting_of_ref": "indicator--bc532ce5-1fea-44a0-981e-84f31bcfdf5c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e92ddab-84d2-426f-9022-f4061a7b7d4b", "sighting_of_ref": "indicator--bc532ce5-1fea-44a0-981e-84f31bcfdf5c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c034579b-b0ab-483e-8dac-0d362d9aa373", "sighting_of_ref": "indicator--bc532ce5-1fea-44a0-981e-84f31bcfdf5c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d19c8b1-d542-4e86-aaeb-66456638cb6c", "sighting_of_ref": "indicator--2d289d84-c10c-4796-93ec-2050109d3133", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd57fa4-bb4e-4dc7-a8aa-8c1a2a1914e2", "sighting_of_ref": "indicator--461967f5-fd8a-4b6d-9071-e382d0d42c95", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12be5fc-7aa9-4344-a318-0eae796103c0", "sighting_of_ref": "indicator--02135653-06c5-4295-8448-d074c0a6ddff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412aa013-245d-42d6-8031-1ef9122cc4bb", "sighting_of_ref": "indicator--da05a37a-404d-4418-97a0-bea18d399f9a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97fccd4-1377-4722-aaab-639b1afede6a", "sighting_of_ref": "indicator--ee3125a0-3239-442c-88ba-c7a5c1d7d65a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0addd63-6379-4b95-a422-3937c7a0ad81", "sighting_of_ref": "indicator--83a38ef8-8c2c-4bf8-81aa-4b1dcc0701b2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44571a94-0cba-4a13-afc5-cd2c9e739193", "sighting_of_ref": "indicator--4e75d4e0-b2c3-4dfc-afe5-2aebd24bf57b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f91fcdb-6e05-4245-8ccd-6aeca36fe7dc", "sighting_of_ref": "indicator--4e75d4e0-b2c3-4dfc-afe5-2aebd24bf57b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b67e572-3c0f-4dc7-b66f-8b9b82e614a0", "sighting_of_ref": "indicator--4e75d4e0-b2c3-4dfc-afe5-2aebd24bf57b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9750086-a3e7-4c4e-bbdf-1217bb4a0ed4", "sighting_of_ref": "indicator--75e2c89d-8069-45be-ac25-86e2bc72e6f2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f22f31-cb50-48b6-8a0f-f2303a3f3b64", "sighting_of_ref": "indicator--fe1153f1-c228-42c2-9cbd-60b95a1d92ca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f7369d-936e-44c1-848b-d4bf55b8ee10", "sighting_of_ref": "indicator--68cca0d6-15bb-4220-a25f-4c69df627d54", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c284311-7868-486f-a2e7-563d6d92bab7", "sighting_of_ref": "indicator--dcecbdcf-2742-41d4-bc60-d15b0c16f756", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8017987e-004b-4d33-8ed9-5c2a6635059b", "sighting_of_ref": "indicator--dcecbdcf-2742-41d4-bc60-d15b0c16f756", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e797c0c6-ddad-470d-b080-bc6c8aba792d", "sighting_of_ref": "indicator--517f7d36-705c-429f-827a-f07dc8f8c65f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ffdf01-cf41-4b21-a3d7-a8abe02be920", "sighting_of_ref": "indicator--517f7d36-705c-429f-827a-f07dc8f8c65f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8530c2-6ab9-4544-90bd-72147824c9bd", "sighting_of_ref": "indicator--66683818-165a-480a-8de7-f826ac990ae5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb77759a-3a34-431e-9a9c-089894b250c1", "sighting_of_ref": "indicator--02381593-38a0-4838-b4c4-1cb2861b88e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9e575b-fa94-4ccf-9a3c-be94f3c83e55", "sighting_of_ref": "indicator--842d6aef-6c27-47db-a364-a3de77cab44d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce364a3-05f9-4ed1-b81f-be3a351e8b7c", "sighting_of_ref": "indicator--842d6aef-6c27-47db-a364-a3de77cab44d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa52644-e619-4c00-9ba6-c98a76cfa824", "sighting_of_ref": "indicator--8ee4b2c1-c8c1-44a8-a0c2-705c1c9a926b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144f825b-ee98-4ab6-b29a-1cd82fef076b", "sighting_of_ref": "indicator--8ee4b2c1-c8c1-44a8-a0c2-705c1c9a926b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f024bc9c-9c13-4b58-9e46-b78a5ca6c78f", "sighting_of_ref": "indicator--8ee4b2c1-c8c1-44a8-a0c2-705c1c9a926b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0fbac5-1a7e-42e6-b57a-f789ee5391b8", "sighting_of_ref": "indicator--975ce9b3-e742-4d19-a831-2bc53644b934", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa7648c-8cc8-4c9c-953b-2e327e3ad7c3", "sighting_of_ref": "indicator--975ce9b3-e742-4d19-a831-2bc53644b934", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a34559-77bc-40ae-87f9-bd93f0c90028", "sighting_of_ref": "indicator--78d78ef4-fb33-4cc3-8714-b994b1aff123", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b77b16-d827-414e-83ac-ff11ccd4897a", "sighting_of_ref": "indicator--d1ab5d00-a11a-4cd4-b482-d33fa40350b8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700fb9ea-e5fd-4b3c-b5b3-20cf372e7cb6", "sighting_of_ref": "indicator--7f5dc537-013d-4861-96f3-826eebbbb115", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ae0c50-5dd1-4479-877a-ad41404f18b7", "sighting_of_ref": "indicator--7f5dc537-013d-4861-96f3-826eebbbb115", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f336d30b-88a1-411b-b291-03e378375ea5", "sighting_of_ref": "indicator--683812be-ac39-4f2f-ac54-40b314fbbb79", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d88abaa-417c-4c4a-898b-f95060f3899b", "sighting_of_ref": "indicator--683812be-ac39-4f2f-ac54-40b314fbbb79", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31163c01-9db2-4b95-8c88-92bc81d1bad7", "sighting_of_ref": "indicator--88edbef6-80ef-471e-9108-08567db346f6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8220c6b6-cd32-4f30-bc01-e2e0092f88a5", "sighting_of_ref": "indicator--88edbef6-80ef-471e-9108-08567db346f6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ae2302-8220-4245-9422-29148c67ba33", "sighting_of_ref": "indicator--46df4253-79ec-4448-aae6-85aa1b922ddc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4d6aa3-c716-48fa-9ddf-56713651239f", "sighting_of_ref": "indicator--6b34b578-8f58-4f00-8951-8000cdd993aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010d8c14-57c2-42a0-8a38-41489b0680f2", "sighting_of_ref": "indicator--87828cd6-736f-4cfa-a368-0dd8eec10d0c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddc31a0-8e39-40ee-8925-729dd01d99f4", "sighting_of_ref": "indicator--26348672-1b10-4759-9afb-3bc9a5755d0d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d34da8-1bb8-4afc-bb04-d11c7de56549", "sighting_of_ref": "indicator--08990287-9470-49c5-8bfd-57f8cb3ac8a6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb8a407-5e2a-4c86-ab19-730bc085d3be", "sighting_of_ref": "indicator--99cea49f-6e85-4e2a-b104-9d9a9565acd6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dadb101-df64-4883-911d-cf3a0bcad8b4", "sighting_of_ref": "indicator--c0265604-3b87-4c69-9339-e571d1f8a71a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f94d70d-69a8-4ea9-a8fb-d0b0dbc66973", "sighting_of_ref": "indicator--7456b7c9-cf9f-4293-acae-c3ceeff3a180", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6692bd-7246-4cd6-8875-9d7b927f5a73", "sighting_of_ref": "indicator--b12c5126-a726-4e78-a34e-ca8a59e55c08", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13532b0-9914-481e-a3b2-4188d0fa6b69", "sighting_of_ref": "indicator--73bd2f3c-6185-427a-b829-51c104b0f984", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e259cecc-66f6-4152-982e-45e936307a39", "sighting_of_ref": "indicator--73bd2f3c-6185-427a-b829-51c104b0f984", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e07ead-14ce-45c9-9ce3-122b28273e15", "sighting_of_ref": "indicator--a75d5563-09fd-4628-8887-55f1959b9e49", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204fd761-5ded-4d87-aad3-a1386c7f8065", "sighting_of_ref": "indicator--d886555c-aefe-4f6b-8604-73e582268862", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dbe4892-4e74-46c4-ab74-eba94ba8de33", "sighting_of_ref": "indicator--d886555c-aefe-4f6b-8604-73e582268862", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06cec31-79bb-4ee2-a42f-193d662fe5e6", "sighting_of_ref": "indicator--04d688ca-fc08-4d7b-89c7-00c0bf0c35c6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d119d2b-c87b-4291-80be-cb8fe0dc6ea3", "sighting_of_ref": "indicator--04d688ca-fc08-4d7b-89c7-00c0bf0c35c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e4d614-6b62-4f8b-b798-4a3860ef1d92", "sighting_of_ref": "indicator--0ef7072d-b7f9-49ab-81a8-f5aa302e8988", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff73a8a3-5c06-47d3-8721-763a4170c8f8", "sighting_of_ref": "indicator--18aad387-51bc-42ea-a307-567f90f3400c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d462fe1-f1a2-4713-98be-9bc1e1630795", "sighting_of_ref": "indicator--18aad387-51bc-42ea-a307-567f90f3400c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3cfd73-16ec-46f9-b9b9-50ee8d1f37a5", "sighting_of_ref": "indicator--18aad387-51bc-42ea-a307-567f90f3400c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8e4411-cf84-42f4-8395-50ff4f6fcaa3", "sighting_of_ref": "indicator--e1811483-9317-4008-9d6b-4d1be354c88f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c76f844-f37a-4894-a2f5-170e71ab2a74", "sighting_of_ref": "indicator--b1aa937e-99c8-4e09-aafe-eb98b56d9294", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b90eed1-0138-48b8-8756-fe3da4c0c21a", "sighting_of_ref": "indicator--b1aa937e-99c8-4e09-aafe-eb98b56d9294", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc86bc2a-9b43-49c5-b4fc-5bf9a576fe23", "sighting_of_ref": "indicator--b1aa937e-99c8-4e09-aafe-eb98b56d9294", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626f9608-32fb-49a8-a7d6-0342036d39d1", "sighting_of_ref": "indicator--f7b7060f-2135-4d66-9807-22ef14d2c894", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6227b9ed-fad2-4e48-bc94-f8e234123dee", "sighting_of_ref": "indicator--f7b7060f-2135-4d66-9807-22ef14d2c894", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9381c652-f906-4b8b-ba95-f65061fa4117", "sighting_of_ref": "indicator--f7b7060f-2135-4d66-9807-22ef14d2c894", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8ef838-d24f-4046-8968-3731f5f563c0", "sighting_of_ref": "indicator--8ba12663-35f9-48f0-8e0b-11cd5838281c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd4f927-75c9-4c58-afc6-10396ac0b83d", "sighting_of_ref": "indicator--8ba12663-35f9-48f0-8e0b-11cd5838281c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed111c7e-c5b9-4279-bf7b-ec1eb1c8190e", "sighting_of_ref": "indicator--18f2ac47-29f2-4396-bcf8-4acd4e6903cd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95de319-f089-4034-ad8c-9d84fc1f1a48", "sighting_of_ref": "indicator--18f2ac47-29f2-4396-bcf8-4acd4e6903cd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae29a52-3054-4abf-9873-f534bfff27c1", "sighting_of_ref": "indicator--45a3c966-4663-4583-96b7-7a454f495dbc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b296dbed-a0fc-4c58-b818-db5752eacbff", "sighting_of_ref": "indicator--45a3c966-4663-4583-96b7-7a454f495dbc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72276778-82c7-4a16-b032-68bdf641315f", "sighting_of_ref": "indicator--45a3c966-4663-4583-96b7-7a454f495dbc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38224c68-c49b-4c4c-b885-c8b3ec0a4354", "sighting_of_ref": "indicator--af8d0e43-b4d0-426a-9a0d-d0268fcdcd57", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6912782-bad0-4f2d-8903-4595f5363b95", "sighting_of_ref": "indicator--4c5a140a-a729-45a3-9ea2-3bb86e032015", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42db3e50-3e40-4bac-8f7c-f9842777e88b", "sighting_of_ref": "indicator--4c5a140a-a729-45a3-9ea2-3bb86e032015", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78cbaf5-6cb6-48f5-9b0c-96b55d6fbee5", "sighting_of_ref": "indicator--ca7cf21b-3c00-4fe7-88f6-e5d6c261cd32", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9490430a-eead-453a-8f5d-a38c01a5d7c0", "sighting_of_ref": "indicator--6fefcdce-e025-4ba7-a25e-cc2cd6e54557", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea78500-298c-4a67-9c5e-44c8997c8c4f", "sighting_of_ref": "indicator--6fefcdce-e025-4ba7-a25e-cc2cd6e54557", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2669d191-95ad-4c93-987b-614daafdac91", "sighting_of_ref": "indicator--f3b17ecc-4aed-4067-8313-f8fe2454f1ae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5f35c0-8241-4a7e-9ffa-7fa27e75d13f", "sighting_of_ref": "indicator--f3b17ecc-4aed-4067-8313-f8fe2454f1ae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbf1043-e696-490d-a132-35b91b5e1e2d", "sighting_of_ref": "indicator--5993ab88-3bba-4808-a034-d43c5860006a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8019d39-3c93-4009-b1f7-78788347b75c", "sighting_of_ref": "indicator--5993ab88-3bba-4808-a034-d43c5860006a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39cfef26-0b9a-431c-b143-4637ee51a7e3", "sighting_of_ref": "indicator--5993ab88-3bba-4808-a034-d43c5860006a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46b7d56-2bbc-4133-9c72-e2a90e401456", "sighting_of_ref": "indicator--7eeb94e4-457a-4781-895a-27af271f83e1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8e2937-3f83-4496-a3d7-982f6ff0af6b", "sighting_of_ref": "indicator--3f5facc4-dc51-4ec0-85f5-337513b257e9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ff4b3c-3a28-49f3-b194-a6d02266131a", "sighting_of_ref": "indicator--3f5facc4-dc51-4ec0-85f5-337513b257e9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f6b4d9-f963-4155-82f9-5486313c5319", "sighting_of_ref": "indicator--a0589683-b7ef-4297-ad86-377c2c216fa8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157fc71d-eb39-40ad-b8d9-9f0f329fb0a7", "sighting_of_ref": "indicator--a0589683-b7ef-4297-ad86-377c2c216fa8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f2a95e-754f-4cb5-a798-90dd6b5a0758", "sighting_of_ref": "indicator--f49390a3-b46a-47bd-a75f-1c41ed52bf28", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4e343a-708b-4d95-b7f1-c55722ccddc0", "sighting_of_ref": "indicator--b8d68172-acf8-4944-8bae-f972ae414f83", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01064aa-6d09-4f42-876e-fe945ab197be", "sighting_of_ref": "indicator--b8d68172-acf8-4944-8bae-f972ae414f83", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fe1437-1632-4863-bf4e-a10633fa95fe", "sighting_of_ref": "indicator--18342592-326f-41f4-8556-d9470a8ce5db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c2325a-ea30-409c-8e62-b8171ea61b00", "sighting_of_ref": "indicator--18342592-326f-41f4-8556-d9470a8ce5db", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cfc82b-d42d-4f65-87c1-0a113db4dc3e", "sighting_of_ref": "indicator--532c6b6d-ebac-4392-85b5-ec23c8feebbe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e63311-1ce3-41b0-99b2-7e5bc927ed93", "sighting_of_ref": "indicator--241691af-4ba7-4017-849e-bc8e1002a237", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc52a01-8183-480c-9ba3-8c8fb73849a5", "sighting_of_ref": "indicator--241691af-4ba7-4017-849e-bc8e1002a237", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4712bcbe-e5e2-4a94-a796-b5d874c2d2f7", "sighting_of_ref": "indicator--30a83779-5dde-4d5a-b7b0-e58219440f06", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5fb12b-4114-4c0b-a456-b5d7ae5a6058", "sighting_of_ref": "indicator--7e2b1d3b-8db1-4434-b50b-df3d8f87dc29", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50264426-589c-402b-9771-21a38b818780", "sighting_of_ref": "indicator--dbf9131a-ced2-4d9f-af5e-c85ff51628ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77f1438-6d17-41fe-a81d-ed3d3a3ca541", "sighting_of_ref": "indicator--dbf9131a-ced2-4d9f-af5e-c85ff51628ba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6fa6bf-3fc5-4c27-8b57-b11999062ff7", "sighting_of_ref": "indicator--272f5446-7fb4-4361-a354-0c76587df90e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c186be59-6efc-4978-8fb7-83451f463061", "sighting_of_ref": "indicator--272f5446-7fb4-4361-a354-0c76587df90e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6da315-094b-49b5-aefc-02f3e27f6918", "sighting_of_ref": "indicator--37eed7aa-a6b1-413c-9498-45d173540955", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6615acfa-aec8-402d-95ce-74dcdd70f649", "sighting_of_ref": "indicator--37eed7aa-a6b1-413c-9498-45d173540955", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b3c396-1d6e-4d54-83d1-54d1bbe6b9a9", "sighting_of_ref": "indicator--37eed7aa-a6b1-413c-9498-45d173540955", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb151c8-8c9e-4e48-90c1-3b5203eb6c7f", "sighting_of_ref": "indicator--b41b6719-a3d2-4d60-9336-9c986ee18a74", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11db667e-6c85-4b6a-9baf-e4cd42d21941", "sighting_of_ref": "indicator--67948e89-1048-42fd-b878-27456bc2b96d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43113bd7-178c-4bff-a3aa-83d2cb7bd51f", "sighting_of_ref": "indicator--67948e89-1048-42fd-b878-27456bc2b96d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4386eca-a3a4-4325-934c-b7f648092ced", "sighting_of_ref": "indicator--67948e89-1048-42fd-b878-27456bc2b96d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a32cdf1-17af-4f9c-846e-52e2aa5629fb", "sighting_of_ref": "indicator--0c9d9734-3d2f-4d1b-bea6-5523c6688301", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d8485c-0589-454b-bdba-0f160431e14c", "sighting_of_ref": "indicator--3993b237-b9c8-4dd0-bcdf-1df391359310", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6b3be9-3844-4f31-a5f7-ad6c589f123a", "sighting_of_ref": "indicator--3993b237-b9c8-4dd0-bcdf-1df391359310", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d038b361-3882-4e02-9dd0-ed941fecec24", "sighting_of_ref": "indicator--ef2ba66b-49b2-4559-9290-d6ed807a7d11", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0af222-a774-4d53-96f9-94160cf7ca5a", "sighting_of_ref": "indicator--ef2ba66b-49b2-4559-9290-d6ed807a7d11", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031dd029-dc9d-4181-98b6-4d4cb3233bee", "sighting_of_ref": "indicator--ef2ba66b-49b2-4559-9290-d6ed807a7d11", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f227f830-5a52-4183-9c4c-ea5e80471585", "sighting_of_ref": "indicator--e7b20a81-8636-490d-b7a3-cf916a0e96de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88eadb4-a6fc-4496-a166-2f9115d7dae5", "sighting_of_ref": "indicator--e7b20a81-8636-490d-b7a3-cf916a0e96de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2991509-3e0f-4c6f-bd47-99bda89ce56d", "sighting_of_ref": "indicator--e7b20a81-8636-490d-b7a3-cf916a0e96de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a37dd6-cc1b-4566-a681-af532f35e5bf", "sighting_of_ref": "indicator--bfeb20ef-7285-43fd-9525-eaeda5510cf2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f6eb0f-f273-460b-a7eb-be35e463df25", "sighting_of_ref": "indicator--c8a08df4-6c95-4661-b74a-e7c24fc092ad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fbb9f8-63e2-4c0a-81b6-c2d375496b69", "sighting_of_ref": "indicator--ad06540b-c585-4de6-8f24-51774ddc2de2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5611c781-b02d-4c70-8f79-52040874806f", "sighting_of_ref": "indicator--ad06540b-c585-4de6-8f24-51774ddc2de2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bc600a-66f9-4a83-a1aa-d08beb0fe779", "sighting_of_ref": "indicator--a37acb1c-4307-40cd-b4ca-facdaff3ad48", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1976d3-8266-4e88-b722-ae4702f5ebe6", "sighting_of_ref": "indicator--ae102536-67f6-4999-803b-a857049c6ae5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e327171-eab8-45b3-a09d-4e8389d74e7a", "sighting_of_ref": "indicator--ae102536-67f6-4999-803b-a857049c6ae5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bfc91f-8679-4825-9971-2aeac9b7ce03", "sighting_of_ref": "indicator--aab518ad-859e-450c-be74-f11855be1d3e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633ecc59-ee41-4e62-a9af-29ce5601c248", "sighting_of_ref": "indicator--aab518ad-859e-450c-be74-f11855be1d3e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d027f359-9229-4744-a035-7664b65cae76", "sighting_of_ref": "indicator--886a2a14-6b2a-4cc1-86e5-de59f28247f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0d819a-7ad9-4e40-8777-3304c4c84957", "sighting_of_ref": "indicator--7724660b-3483-44cc-8b37-fe2b6ab78057", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07a4d28-8ce6-4eb9-b468-d137ecb06e14", "sighting_of_ref": "indicator--48493761-0a47-457e-8a25-b5ef2957881d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f487ee-0f18-4fe8-9195-a61bedaf9ef8", "sighting_of_ref": "indicator--79190242-ca1d-4fdf-a97c-525181516b1e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d61403f-18c2-45a6-816b-5f913429ddee", "sighting_of_ref": "indicator--2e93ecff-abc4-4bc0-90c3-466208aa4fa5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f10eac7-c7cc-48a1-ae08-2b9d4b5cdb4c", "sighting_of_ref": "indicator--8cd505c4-4067-4cfc-b2a3-9a68701fa754", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8be4008-91c2-437d-ba97-aca089dc7f3e", "sighting_of_ref": "indicator--8cd505c4-4067-4cfc-b2a3-9a68701fa754", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd69d8d-67e7-403a-8f25-85f553242c81", "sighting_of_ref": "indicator--76152059-3972-4aae-a693-0cf9d714fe32", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0f63e7-cc22-4919-9288-ca4fe5805efe", "sighting_of_ref": "indicator--8c320110-ccca-4a41-b84e-e9d285ce19d0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e69b79-768e-4492-99f0-d5bedb361e72", "sighting_of_ref": "indicator--fb762e36-ecd4-44ec-ac9d-415ef644ecba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7199d2c6-b6a6-428b-b4c5-946d8a22208e", "sighting_of_ref": "indicator--fb762e36-ecd4-44ec-ac9d-415ef644ecba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d00591-9ff8-47f3-b822-a19dbb95a464", "sighting_of_ref": "indicator--fb762e36-ecd4-44ec-ac9d-415ef644ecba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dec7422-4d41-405e-9547-e9862ab1ac3c", "sighting_of_ref": "indicator--7e4aaf8d-a8a6-48cf-8c14-e161d3bb6301", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47d151f-3884-4f15-8959-31d625033628", "sighting_of_ref": "indicator--7e4aaf8d-a8a6-48cf-8c14-e161d3bb6301", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418a6348-10fe-4461-bd93-e11b3f5e96d1", "sighting_of_ref": "indicator--5a3be449-6b34-4a30-8652-ba7a8f86fa90", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca87d9de-063e-4136-8f21-9eb3d272a980", "sighting_of_ref": "indicator--547b808f-2206-4524-b6b9-4342eb2caace", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcfccc5-2557-4f9b-86d3-8e70a7aa8e1f", "sighting_of_ref": "indicator--d3d7bbac-3cda-4e14-9afc-6c535bb143b4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93162787-e5df-41b5-bbd1-3a5d54d2809b", "sighting_of_ref": "indicator--802caf03-2729-4d38-a4d2-c1ea70f1fcd2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ee1a1d-6b75-4780-b21e-cdddd33155b6", "sighting_of_ref": "indicator--3a39bcf2-bf4f-4f63-bebe-5c4f68edb325", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3156b6-40e1-4050-a272-61f6dd24a5b6", "sighting_of_ref": "indicator--3a39bcf2-bf4f-4f63-bebe-5c4f68edb325", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896be921-8474-4cfd-8836-76c809c5b0a8", "sighting_of_ref": "indicator--c00330b0-720a-4c24-a3e5-09838a023468", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ba5430-bcd1-4695-aa9e-d1f6047fc726", "sighting_of_ref": "indicator--23ab3992-67df-4dd4-96de-c741c7085aa2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2aadca-c97b-4eb3-a7b6-feff4efd2233", "sighting_of_ref": "indicator--8a2985ac-40d2-42c4-a7f1-46cd834e8017", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b922cee-dd10-487e-85b8-fa9cc0913e64", "sighting_of_ref": "indicator--b843906f-5bc0-4040-82fa-92bfab3b826e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81abcd8b-e560-4bed-bab0-c204fb922af5", "sighting_of_ref": "indicator--29745827-c7fa-4137-873d-3615b9530ee0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad41e27d-802f-4fcd-8a95-e13a9bf3219a", "sighting_of_ref": "indicator--d14299b1-4c4d-4c9c-9c73-6b393f41fc2e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f500769-d7d1-4d52-abcd-3fca83fdd17a", "sighting_of_ref": "indicator--4aa623d7-9634-4300-b406-28696f125475", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5317d52-cee4-4751-ad30-f50711ce0424", "sighting_of_ref": "indicator--a9238201-3d85-418d-b900-449543abf9d4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2c471d-1b60-4653-8e5a-aba0f5a75441", "sighting_of_ref": "indicator--6caa38e5-ce16-45cb-8de0-1370ad8009df", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1cd145-4c3e-4310-bf54-c78705661f85", "sighting_of_ref": "indicator--00e81e6c-8a97-408b-9204-903b77f23edb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275d7eb3-e8ce-4af7-bf2a-1205492c294b", "sighting_of_ref": "indicator--8a8ab557-5399-406f-b5f4-2b96b43f38ed", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c9d1eb-27f7-40b3-b39a-6cb84e2dc0e8", "sighting_of_ref": "indicator--7de922f0-e598-4c45-833d-702b43972da6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed5928d-8bc0-4be3-b949-0c7a39c7a2d1", "sighting_of_ref": "indicator--8036a37d-3fdb-46ee-b2a2-9802dce64e96", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae565f90-b6d6-4295-834a-57301061b4e2", "sighting_of_ref": "indicator--307d7bbd-e67c-4dc1-9ba4-fdb066d4f705", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd4bf6b-cc49-48e8-8cc4-83a961141523", "sighting_of_ref": "indicator--1bd0d22e-b19f-499e-9312-17bf4f621684", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1765281d-e7c6-4089-a340-369c28efd487", "sighting_of_ref": "indicator--1bd0d22e-b19f-499e-9312-17bf4f621684", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432907bb-501e-4cbf-b484-a41a2df12dd0", "sighting_of_ref": "indicator--da885110-8968-43ef-9e79-e3907cebe875", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e3a5fa-e1bd-4ccd-b2ac-68101dacb434", "sighting_of_ref": "indicator--04e6c7a1-b716-43ed-a01e-eb23a1c06636", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ace8997-1de1-476b-a1a0-85968144a18e", "sighting_of_ref": "indicator--04e6c7a1-b716-43ed-a01e-eb23a1c06636", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95e27e1-b520-4e8d-b0d6-16fc38c64857", "sighting_of_ref": "indicator--04e6c7a1-b716-43ed-a01e-eb23a1c06636", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6031e025-22bc-4e5a-b48e-8ccb6c104af8", "sighting_of_ref": "indicator--5f9a8198-9f65-412e-8830-60f37f407672", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90e535d-e2c3-460b-a133-73c3a619da49", "sighting_of_ref": "indicator--19ab988e-e034-4568-be5e-71f00d7a16d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d86527-9102-4f7c-af88-2583b7d57683", "sighting_of_ref": "indicator--19ab988e-e034-4568-be5e-71f00d7a16d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9395f87-9871-42f8-be6d-592326f78936", "sighting_of_ref": "indicator--068cb56f-f71c-4e4a-b8e2-926d83712de9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d3c1c5-2b0d-40f6-b5e6-d34f1a725682", "sighting_of_ref": "indicator--c6e8994f-841d-4ee6-b788-b76aec46aab2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52031a11-daa9-42cb-9fb5-9ccc4d828c36", "sighting_of_ref": "indicator--b8730cb9-c44a-4f85-91b2-65674f429725", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5498d9f-92a9-4914-9950-fd4464b7ef70", "sighting_of_ref": "indicator--b8730cb9-c44a-4f85-91b2-65674f429725", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9744b2af-2bba-40e4-94bf-db7f46924aee", "sighting_of_ref": "indicator--b8730cb9-c44a-4f85-91b2-65674f429725", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6601cf-9872-479b-aa92-bf60acaa0144", "sighting_of_ref": "indicator--05e2f054-6c4d-4f8c-97b8-dbdd8d7c3234", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d195c385-036e-4284-8538-b2be3a22eadc", "sighting_of_ref": "indicator--05e2f054-6c4d-4f8c-97b8-dbdd8d7c3234", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bda8b8d-f844-4330-a1b0-f0c28cba1c62", "sighting_of_ref": "indicator--05e2f054-6c4d-4f8c-97b8-dbdd8d7c3234", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c098aeb-4699-4593-8fe0-73427abd178b", "sighting_of_ref": "indicator--b6f7dbc7-b92a-42ed-a8bf-45d89f2c0177", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262c571a-ae34-489a-872c-d3ed03cbd7ee", "sighting_of_ref": "indicator--b6f7dbc7-b92a-42ed-a8bf-45d89f2c0177", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cafcda-0941-4ffd-aeab-9a45b5b7ffc5", "sighting_of_ref": "indicator--fddee2fb-e3e1-423c-ba5d-76b333956ed0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d82a43-d073-425f-b817-6763457a69a3", "sighting_of_ref": "indicator--fddee2fb-e3e1-423c-ba5d-76b333956ed0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501334ca-1fab-4326-8789-1918f59e307b", "sighting_of_ref": "indicator--fddee2fb-e3e1-423c-ba5d-76b333956ed0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8322271-5fdf-4366-9ecc-faced54f48dc", "sighting_of_ref": "indicator--6d95373f-5d7c-4319-b304-20fd8077fe6d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b029be7e-7687-4afc-a60e-58d18c8f5e05", "sighting_of_ref": "indicator--6d95373f-5d7c-4319-b304-20fd8077fe6d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d505d7a-1c0f-41e6-9043-e05ac09048bb", "sighting_of_ref": "indicator--6d95373f-5d7c-4319-b304-20fd8077fe6d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a3ec6b-4b6f-49c8-bc40-160dd15c9a41", "sighting_of_ref": "indicator--0e78ac49-4465-4280-ae79-1eb06b2c0858", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63f0df6-3b18-4e3d-a07e-2d61f73e0698", "sighting_of_ref": "indicator--0e78ac49-4465-4280-ae79-1eb06b2c0858", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343c0a53-d8ee-4ee3-a7d4-65666ae8e3fc", "sighting_of_ref": "indicator--0e78ac49-4465-4280-ae79-1eb06b2c0858", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5967b484-9992-4d18-9272-ec3a2d81767f", "sighting_of_ref": "indicator--ae2b3ff9-1274-4cc7-84fe-c6b2331c9a9c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e839f05-a6bf-4082-8acc-1b11974a6ea6", "sighting_of_ref": "indicator--ae2b3ff9-1274-4cc7-84fe-c6b2331c9a9c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac4090f-2ac2-4e14-9cec-fa74c9e6b37a", "sighting_of_ref": "indicator--1e375992-5814-48ac-915e-17aeadcd45a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d25125a-4aeb-420a-b728-20d67fb71e8c", "sighting_of_ref": "indicator--1e375992-5814-48ac-915e-17aeadcd45a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed65c9b-2e38-4200-84d2-4c8c66d683d2", "sighting_of_ref": "indicator--1e375992-5814-48ac-915e-17aeadcd45a2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e61997-3d1a-4c75-a90c-3c5514b4e3cb", "sighting_of_ref": "indicator--b37e7910-adaf-450b-994f-85236239c521", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4cdaeb-eb1e-4ce2-bd80-0b44c3c729b6", "sighting_of_ref": "indicator--b37e7910-adaf-450b-994f-85236239c521", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aeb3c79-d890-4389-b1b1-569b27432175", "sighting_of_ref": "indicator--b37e7910-adaf-450b-994f-85236239c521", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e292b7-d28a-4756-b95f-147dee5034c7", "sighting_of_ref": "indicator--e99b16d1-83c5-4b26-99fe-e609e8dcc9df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a566f5-e4e5-4a22-b7c8-07cd8e37d5e6", "sighting_of_ref": "indicator--e99b16d1-83c5-4b26-99fe-e609e8dcc9df", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0662be-c91e-45b7-b39c-a984fc4b0a27", "sighting_of_ref": "indicator--e99b16d1-83c5-4b26-99fe-e609e8dcc9df", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e3c507-dec8-4e20-9bf5-efc75697be19", "sighting_of_ref": "indicator--27a4528e-8720-4b11-9aaf-ed936dd1034a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c84eed-8fa8-45a3-8e0c-19ed1d2418be", "sighting_of_ref": "indicator--27a4528e-8720-4b11-9aaf-ed936dd1034a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de9b792-0c10-410f-a44c-5e0f3da855dd", "sighting_of_ref": "indicator--27a4528e-8720-4b11-9aaf-ed936dd1034a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f191efa-8161-4a8c-9e68-1ba658f4ab51", "sighting_of_ref": "indicator--dc9cee87-b257-4dd4-a24d-ac834b5930be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0af9df-f133-480a-a1fc-0a19af4c83d7", "sighting_of_ref": "indicator--dc9cee87-b257-4dd4-a24d-ac834b5930be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4832ddf2-1509-44f0-bc20-4c812cbc6a04", "sighting_of_ref": "indicator--dc9cee87-b257-4dd4-a24d-ac834b5930be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a996e7c1-28ba-43c8-95c8-c78dc1cac785", "sighting_of_ref": "indicator--3d98e179-e42d-4777-bbca-5b1efe0253fb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab10a1f9-f48f-4a25-acb8-b6d28a597957", "sighting_of_ref": "indicator--3d98e179-e42d-4777-bbca-5b1efe0253fb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02374bb-3c9f-4696-82fa-fb05d9c2b477", "sighting_of_ref": "indicator--62155911-808d-422d-be2b-02e5ad3db1bb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9894d259-8e62-416d-bb8d-bf33147fa354", "sighting_of_ref": "indicator--62155911-808d-422d-be2b-02e5ad3db1bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b11157b-be46-4f5e-9ddc-b0f7a17311b5", "sighting_of_ref": "indicator--62155911-808d-422d-be2b-02e5ad3db1bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38857607-9dc3-4ae5-9128-c42edf47edfd", "sighting_of_ref": "indicator--d64d0811-ec45-40dc-9461-4a3d60719262", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06249743-fcd5-46f3-b765-cc54fe5b05b7", "sighting_of_ref": "indicator--d64d0811-ec45-40dc-9461-4a3d60719262", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b13999-ff74-4a0a-9463-4b2bdb5a59e6", "sighting_of_ref": "indicator--d64d0811-ec45-40dc-9461-4a3d60719262", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8971f088-d50d-493f-aff7-06fd6f520764", "sighting_of_ref": "indicator--8c9c7cd0-11f9-4775-8f7a-27daf229818d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c75db42-12f1-4178-a206-6e8dce3c92dd", "sighting_of_ref": "indicator--8c9c7cd0-11f9-4775-8f7a-27daf229818d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d63e416-7398-4be8-9d5b-761e356a314a", "sighting_of_ref": "indicator--8c9c7cd0-11f9-4775-8f7a-27daf229818d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43edbe1-3691-4d43-82f3-17c3212e88fc", "sighting_of_ref": "indicator--ea1ecdc7-3c53-40cc-9386-219122289da6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c9ef96-bcfe-46aa-9e0d-36915b2055cc", "sighting_of_ref": "indicator--a333d310-70ba-44fb-ab6d-2fa6a95c9d94", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0662fe-ee5f-40d5-be59-e85f093b0d67", "sighting_of_ref": "indicator--9b4e87c1-28f8-4bea-bb6f-f2f04298b0d2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04865ef8-c8bc-4135-964b-e2c994914e50", "sighting_of_ref": "indicator--02e4ea59-5aa7-4296-bcdb-2484c0771631", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0054700-5908-4153-8b5c-eab2b6be4f1d", "sighting_of_ref": "indicator--d7dfe654-c6a9-4315-bc61-3933c6753017", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f12ddc9-ceea-4e87-9d70-7e39902900f7", "sighting_of_ref": "indicator--4ff24ace-c509-4efd-a96e-b5893178c41d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4d582a-2105-4c32-8899-d5eba17f638b", "sighting_of_ref": "indicator--4c4b829c-83f8-4370-8e82-e313f1010223", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0602e122-66f5-4f76-9830-fd9e5af50116", "sighting_of_ref": "indicator--1e0d3103-0990-4e01-9381-90e104dde013", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25771370-7b5e-40fe-9137-a142dbc7a999", "sighting_of_ref": "indicator--7a1c7649-b3b6-4dcf-ac9b-d8a3efc87b9c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71589169-3462-45f5-be4d-878f48a533d1", "sighting_of_ref": "indicator--d43abd76-0adf-4732-8903-19f9cf3f406e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1818a51-35f1-4cd5-bf6e-7bf770c8ff5f", "sighting_of_ref": "indicator--13e4efc5-6614-47ae-88a7-98ecf4b5b72e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d4031b-55b0-413b-a42f-6003d241a553", "sighting_of_ref": "indicator--2c110ac3-6047-40b4-af3f-e3667dbbc672", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfc7880-a503-4c7f-944b-52a05eb612ce", "sighting_of_ref": "indicator--8b78a160-4eea-4359-9189-b9ef9f8f8b66", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46eb9ad1-9a19-485d-93b7-8e57c1000238", "sighting_of_ref": "indicator--e0fab1d3-d2c8-4c83-9e15-16754b721555", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81d6a2c-9dff-4360-8c64-bd855b14d7a2", "sighting_of_ref": "indicator--93647e4d-f53f-4af5-a87b-9c328206e1e4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42aaa6c3-f72f-415b-8ad2-7e4c028374d8", "sighting_of_ref": "indicator--54a40a38-235c-4b00-87d4-d899cb132e78", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac08d47-8a57-4400-9fd9-7363bb5ca9f6", "sighting_of_ref": "indicator--bb602a26-cc41-46dd-9f35-2793c44ec289", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1207f8f5-956a-4e62-bb10-3bd6ff619484", "sighting_of_ref": "indicator--1fbe9e63-44fa-4dd2-88ed-3f615cb08ec6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad72edf4-1ab6-4852-902a-1eda610b5775", "sighting_of_ref": "indicator--2735307a-e880-44e3-86fa-d2a67bbd8ef6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b69c52-ba15-4491-8653-e34925403eee", "sighting_of_ref": "indicator--95349b56-11e5-4d5a-ac96-0590d874bcd2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd536e8-f717-429b-8025-5dcb10601626", "sighting_of_ref": "indicator--1f20d6b0-9a1e-4dd8-823d-bcf585d0ca63", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fc8017-3731-441a-8c2a-1a291bb42e89", "sighting_of_ref": "indicator--8c2ea829-e831-4e46-af36-e398ab0ae8a0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73262c80-3d1e-4d1b-a53b-028cc702b1bb", "sighting_of_ref": "indicator--8c2ea829-e831-4e46-af36-e398ab0ae8a0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04b079a-11fe-42dd-bd42-05486f9c9271", "sighting_of_ref": "indicator--f2a7ff6a-4ed7-45da-bd33-9769faa00eeb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626f88d0-155c-4dca-83d8-489a14dfa5c5", "sighting_of_ref": "indicator--aeb8f5b0-fa86-4a27-883b-0ea2add822c8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebebde4-4057-4251-9998-183f7991635d", "sighting_of_ref": "indicator--3beb49ca-d9ed-4296-9be9-7cbbdbd700b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9245d9d-1977-42c6-a9db-aee967b69e4c", "sighting_of_ref": "indicator--204fabc1-54c0-4fcb-8e1a-137cb01a693e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1c6cfb-2305-4ddb-8a45-0af1729e2211", "sighting_of_ref": "indicator--204fabc1-54c0-4fcb-8e1a-137cb01a693e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3fd5d7-8668-4483-8e1a-376b1cefaf29", "sighting_of_ref": "indicator--d1aa9714-605c-4bf8-bace-e6ab96c19c4a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a937f9b5-6f04-42ce-b684-935c91e389ae", "sighting_of_ref": "indicator--d1aa9714-605c-4bf8-bace-e6ab96c19c4a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7167132d-2cb0-47d0-8238-05026c1ca4f2", "sighting_of_ref": "indicator--972d4a50-69cd-4cf3-84c7-e05776290bb9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a68e037-4459-4330-b51a-833e93df6812", "sighting_of_ref": "indicator--6e98db1e-de53-4f28-9381-f7535a9f162d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd8fa1b-5b11-431c-ab42-1ecd56602372", "sighting_of_ref": "indicator--5bba940a-ebc4-403e-a397-041fa0466879", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e087efa-2142-43a4-9455-a7a2f4010e04", "sighting_of_ref": "indicator--5bba940a-ebc4-403e-a397-041fa0466879", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72614ae-e9e8-4b19-972d-9c110e0503fa", "sighting_of_ref": "indicator--e80ca0dc-1dd9-435c-a294-fb7802380816", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145adfa3-02a2-4718-8f42-a0ee54a6448d", "sighting_of_ref": "indicator--fe6a32e5-5e4f-4eb3-ac4c-d695116cea2b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5140d8b5-a5ed-4fcc-9354-e1ff9f03057f", "sighting_of_ref": "indicator--4f9efde7-18e1-486b-8960-bb85d2988f8b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4053733d-6ae2-49d5-bb0d-7e001450f1fa", "sighting_of_ref": "indicator--4f9efde7-18e1-486b-8960-bb85d2988f8b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0195034-64d5-49a3-94bc-52d4c6613410", "sighting_of_ref": "indicator--9287ca59-d472-4cf0-9d1b-e240b7de2a3b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4716bc8-a886-4e0c-9dba-ae19ca5d25c2", "sighting_of_ref": "indicator--9287ca59-d472-4cf0-9d1b-e240b7de2a3b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c10a352-f0d0-41ab-83f4-aa6db0089d27", "sighting_of_ref": "indicator--4ea271f3-2e4b-48aa-8896-67825a86674d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d4fb52-4341-4559-a67c-4fe36b4aa9dc", "sighting_of_ref": "indicator--4ea271f3-2e4b-48aa-8896-67825a86674d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb23f6f7-d2a9-4533-b764-5dbf96166231", "sighting_of_ref": "indicator--4ea271f3-2e4b-48aa-8896-67825a86674d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cbc2e2-d82d-4e45-aa8e-4a0eea557d44", "sighting_of_ref": "indicator--f1968f4f-78a9-4c7f-b811-f5158335c9fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcc452f-8400-43c4-a5ea-b62ff45f6412", "sighting_of_ref": "indicator--f1968f4f-78a9-4c7f-b811-f5158335c9fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28272f49-e8ca-46fe-be46-3cf73d3e288b", "sighting_of_ref": "indicator--d4c3d165-220f-419a-a958-94a2451e3b88", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf6a80c-0b0e-41dd-ba99-acec86a5f61a", "sighting_of_ref": "indicator--d4c3d165-220f-419a-a958-94a2451e3b88", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fbb560-9fb6-45cf-96df-3f52affe2317", "sighting_of_ref": "indicator--d4c3d165-220f-419a-a958-94a2451e3b88", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8d09dc-2d60-4091-88dd-a27177c927dd", "sighting_of_ref": "indicator--0553eb2b-9032-437d-9cd1-b8ee75a3c21f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66aca9af-c113-4990-b69d-20f8f8790904", "sighting_of_ref": "indicator--0553eb2b-9032-437d-9cd1-b8ee75a3c21f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929a2d01-52e9-4d2f-b99b-4bb1dc7c2408", "sighting_of_ref": "indicator--3d677dc0-01b4-41e5-8427-012c8505a9c8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5279863b-7563-4a32-a507-39673a34edc1", "sighting_of_ref": "indicator--3d677dc0-01b4-41e5-8427-012c8505a9c8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd1702d-9bd0-4f5a-8f78-72b5aec7ec0b", "sighting_of_ref": "indicator--12bcc5ee-81e2-430f-af24-04231ca8c491", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d11d456-be6c-4831-bcb8-d030ce94a941", "sighting_of_ref": "indicator--bb0aa0b5-ed6a-4417-b406-f741be0e283f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c300f7-8134-4776-831f-dc8f4eb16b35", "sighting_of_ref": "indicator--bb0aa0b5-ed6a-4417-b406-f741be0e283f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a23cf4c-e8e9-4791-92bc-82357ffd41d2", "sighting_of_ref": "indicator--bb0aa0b5-ed6a-4417-b406-f741be0e283f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6058311d-c70f-4c0b-b8e5-efb6913391ef", "sighting_of_ref": "indicator--913f42da-a01a-4cca-ac0b-c881e23e6552", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a4548c-d820-4041-9341-205e76deb6b5", "sighting_of_ref": "indicator--913f42da-a01a-4cca-ac0b-c881e23e6552", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb237ead-6adf-40b3-a1a9-a67ab035e86e", "sighting_of_ref": "indicator--913f42da-a01a-4cca-ac0b-c881e23e6552", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29361f9a-732f-435f-8d2e-3ad9fba826ca", "sighting_of_ref": "indicator--e94d319f-723d-4381-927f-a99d99f53514", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a34d21e-2a7d-42ff-8a84-fd1069c18ae1", "sighting_of_ref": "indicator--68110182-dd82-478a-8336-ea02f4c9b8a7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0734e2b-e9f6-49a5-b5cd-b4793dcefdb0", "sighting_of_ref": "indicator--748b7208-a9a8-4a00-a8d0-9a1dfb635ceb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f963c77a-c0cd-4b6b-a206-eb01aa144702", "sighting_of_ref": "indicator--d7365dc1-aab0-4e3e-a950-50518292d32b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21de4e4c-1337-4c27-8f22-8d6a7587495e", "sighting_of_ref": "indicator--079d701a-bef0-4e15-8f9b-10a418a8f16b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d4bc74-8bf9-4487-a78f-f5b5c31ba9e1", "sighting_of_ref": "indicator--a43e417b-5c04-4d84-82bb-ee9a033041c2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598f0afb-3cb3-4bbc-9850-a8d5e4b0cbd9", "sighting_of_ref": "indicator--31394c42-df77-4b16-9db4-39acbfbd1754", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fd665e-926b-48ef-8aa2-707e29ddf6d6", "sighting_of_ref": "indicator--798028b7-d781-4b7b-87b2-a0857350993e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7b6260-fdc4-4415-a291-22d9d4e5fc7e", "sighting_of_ref": "indicator--0fe55f89-cc3b-48b2-a781-e5f5da9ea0c3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ccee18-30c8-4985-a108-ef0c79df4d6c", "sighting_of_ref": "indicator--d5e149d3-17b2-4fdc-9e05-202af3bb71fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46eac995-e5c3-4105-9ed9-c039cb1911cd", "sighting_of_ref": "indicator--c8e25ea1-a1d2-4aa7-9543-aba780ce7626", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e9ea61-5334-4362-bf59-8f86873cf98f", "sighting_of_ref": "indicator--6bbd8bc1-9a8e-4984-b974-8d16fe38352f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8702bf47-9e4d-4909-a82e-e53f22265e83", "sighting_of_ref": "indicator--6bbd8bc1-9a8e-4984-b974-8d16fe38352f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e247f54-a395-4470-8e90-8a40f940791f", "sighting_of_ref": "indicator--6bbd8bc1-9a8e-4984-b974-8d16fe38352f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877425a7-858d-4a82-b808-58db1ff0fe16", "sighting_of_ref": "indicator--4d4dc341-3f19-4765-8b2f-9494215bea8c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351a7fbb-0532-43ae-b785-39313d5a3c81", "sighting_of_ref": "indicator--696c5900-3776-42d0-a20d-018bcb8eee27", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d7112e-af49-448c-a3ea-71429a6b5f5b", "sighting_of_ref": "indicator--541cfdda-c80e-4200-beea-8f8ddbda2be1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827e58df-c419-43f2-8139-1f97a1f21136", "sighting_of_ref": "indicator--c2408a4a-cd63-4372-8e3d-86e4ee6da379", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1db2978-a4b0-4ee8-b119-9afece1824d7", "sighting_of_ref": "indicator--f1504fcf-c74d-40ce-8260-4b71c6142f73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c82afd-2419-4580-8e36-34d9df3a28d2", "sighting_of_ref": "indicator--5a3b1b3c-4358-4334-bb68-39aa3c30f5e4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7679caa-1968-4ad0-bfa3-04c46673d601", "sighting_of_ref": "indicator--5a3b1b3c-4358-4334-bb68-39aa3c30f5e4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adc2221-dab3-46c7-b12c-9b6c9eb969ee", "sighting_of_ref": "indicator--b4bae084-265e-41e4-9d22-eafd881aae5f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1b3a90-5707-4ff6-892a-44f7a7666bfc", "sighting_of_ref": "indicator--dc289cd0-fdce-4bd1-bf5e-d95e55f8f58f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6b71be-cae4-4082-931e-eed2fbfbb3ca", "sighting_of_ref": "indicator--792440bf-b6bd-44f6-bb49-a0127a5068d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ec3716-1d9a-43aa-a25b-ea256d039773", "sighting_of_ref": "indicator--7488ede1-4a17-4a64-9aac-42aefca9cf18", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16ce0de-1da4-4100-be5e-8653c0d381f3", "sighting_of_ref": "indicator--5d28525b-9aeb-4730-9f9c-b765f4570fa3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502af487-a0a2-460b-99d6-466d2744fb56", "sighting_of_ref": "indicator--5d28525b-9aeb-4730-9f9c-b765f4570fa3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a12ef46-2f57-47c1-994b-199c4957d674", "sighting_of_ref": "indicator--0a12e053-6554-4d96-8419-2e42b4756a66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2d9574-0ce9-412c-aed8-b19b41745b5a", "sighting_of_ref": "indicator--d0e0c579-96a9-42a6-9de5-f44e5e8be418", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ea3a18-e813-4498-9c62-0ad916594302", "sighting_of_ref": "indicator--633938eb-04ff-4d5d-85bd-76fccc84c276", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e257936-6dae-4f9b-aa3e-5f69bcdf3184", "sighting_of_ref": "indicator--f22a7cb4-5f09-48b0-bca9-ac2941a6443d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8aa6154-7232-47d4-9a0f-3002e376cf2a", "sighting_of_ref": "indicator--540161b1-0d5c-4506-a094-e650c8a1c56b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814f2947-5c3b-446e-a26e-e8479fcfd8a1", "sighting_of_ref": "indicator--9a286262-3343-4e8e-b458-4fae58d83eb8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d111eb07-82e3-4e3c-940c-d1dfa8e60656", "sighting_of_ref": "indicator--2d5d474a-5897-4e7e-9a65-035597bda99a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f3d8c6-2f89-45e0-83cf-33dc360678eb", "sighting_of_ref": "indicator--8536e336-e017-46c2-834f-ab86b97e7ea8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa34d84-b8cf-494d-bcf7-5c03fbc4611a", "sighting_of_ref": "indicator--8536e336-e017-46c2-834f-ab86b97e7ea8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15c4927-4a73-4ec9-ad24-fc02a9f532e5", "sighting_of_ref": "indicator--3816b0d0-b598-4f9c-9e2d-2fc930384f84", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7492267-dbcb-463c-925b-75be46a4ca09", "sighting_of_ref": "indicator--3509d23b-8493-439f-80da-087db65c0890", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d850140-72d3-492a-a02c-092cfac81503", "sighting_of_ref": "indicator--a74081f5-393d-4ca7-9672-3b8c01116a9f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38f5242-41e5-4df6-9b86-99396c563cfa", "sighting_of_ref": "indicator--cd82050b-a47c-45a6-8c3c-836abd60b796", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31db145c-0433-4fec-980a-c7e4e6b33aeb", "sighting_of_ref": "indicator--cd82050b-a47c-45a6-8c3c-836abd60b796", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bda2ae0-7712-4f10-996d-ba7f41ed7a74", "sighting_of_ref": "indicator--46795f1b-ba26-4d9f-950d-b9146bb5e6ab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6c7d3f-2748-4630-a369-1cb886846b89", "sighting_of_ref": "indicator--46795f1b-ba26-4d9f-950d-b9146bb5e6ab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a028957e-01f1-4312-903d-87b8f799d507", "sighting_of_ref": "indicator--bdd64398-4d61-4d04-90b0-8262148ccbe2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e9f388-057a-465a-82ba-c53a1b7a7122", "sighting_of_ref": "indicator--e090bd10-0c72-483b-b7c6-9a61c84ca3a0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8896e25b-c576-4cb1-8baf-df79d6957b36", "sighting_of_ref": "indicator--0381b05a-eada-4eef-b671-dcf106eba0b3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7a4677-3391-4608-a795-ff954c1b47ec", "sighting_of_ref": "indicator--0a43de89-585d-462d-9519-76be19a1705a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4f920c-c0e8-46c2-b21c-f59430c7c154", "sighting_of_ref": "indicator--e5aaefec-df18-4999-91b8-ae961a52f7c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb61da8-365e-4136-85b9-196503543ebf", "sighting_of_ref": "indicator--6e0049d0-155e-42c8-bf38-733c6957b9a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e7b690-83d4-48fb-ac18-44d54951f418", "sighting_of_ref": "indicator--db47e1d5-6945-4df5-814d-35c5eddd9ff8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d912b2d-dc88-4d53-8d9a-b62f792bf9b5", "sighting_of_ref": "indicator--27e6df0c-4972-49d7-9d9e-39895be1ba39", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6cb3c9-3b06-4750-aa43-b00e3a7f0274", "sighting_of_ref": "indicator--75f8a1c4-c8de-412b-84eb-afdcfc1709e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab1ade5-46e6-4afb-af06-4e78f52056ed", "sighting_of_ref": "indicator--081e1aad-c7e2-454e-9bd9-eee715e65a59", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8ae775-098b-429d-b47a-b200e23efab7", "sighting_of_ref": "indicator--081e1aad-c7e2-454e-9bd9-eee715e65a59", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42049973-f200-42e5-84c5-f81b30a91022", "sighting_of_ref": "indicator--17807612-f2bd-4805-8d02-e4c0ad37ce3e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ba9c91-8314-4ce2-949b-ecb6b595a725", "sighting_of_ref": "indicator--cce3c9d3-dc7e-4949-972b-fefcbebfb823", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab242a7-f5e3-4554-b6ec-fa2118fae35b", "sighting_of_ref": "indicator--f2d754f9-5538-4790-b7cc-e916ca141ee1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f90c87-b55e-4c0b-b9ba-5b7fb444c25a", "sighting_of_ref": "indicator--764407f2-ba9a-4fb2-b456-2471137555e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5f70f5-a07c-4332-a4cc-1eb7ee43c2c7", "sighting_of_ref": "indicator--7582bb96-dae0-4304-8575-ba955174d87d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030db25d-4f12-4b82-b009-4d2d965704cc", "sighting_of_ref": "indicator--bbcbd0cc-f0a0-4dc5-ad29-d3e30617ffc3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ead48d0-7103-4e4c-abc5-b6cbae0f4455", "sighting_of_ref": "indicator--bbcbd0cc-f0a0-4dc5-ad29-d3e30617ffc3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d1a801-078c-45bc-9472-b32aec9302fa", "sighting_of_ref": "indicator--bbcbd0cc-f0a0-4dc5-ad29-d3e30617ffc3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ad85db-241d-4c72-9b79-5c9e79d04387", "sighting_of_ref": "indicator--43d724ac-ae79-42ac-a800-d6cdb617bfce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b859d217-48b5-4d6f-8ab1-b96b2cee2c3f", "sighting_of_ref": "indicator--43d724ac-ae79-42ac-a800-d6cdb617bfce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcd31e0-2076-4539-a027-0748d86c367c", "sighting_of_ref": "indicator--43d724ac-ae79-42ac-a800-d6cdb617bfce", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db40f5bd-06c8-4019-af11-2ddf9936e05a", "sighting_of_ref": "indicator--fe9e74b2-fda0-443b-bb37-7eaa0d69ed10", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce1d925-6c3d-48a3-9f7e-047a11b5fa27", "sighting_of_ref": "indicator--fe9e74b2-fda0-443b-bb37-7eaa0d69ed10", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d7c4c9-e425-4a4e-b9f7-3a2bd4fb806d", "sighting_of_ref": "indicator--fe9e74b2-fda0-443b-bb37-7eaa0d69ed10", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b8d56f-0511-4b73-ad77-7ff6199921d5", "sighting_of_ref": "indicator--a8287478-c79c-41b9-b8ed-4e0d622e61e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4176b75a-f5f4-4ebe-b8a1-81674a082481", "sighting_of_ref": "indicator--a8287478-c79c-41b9-b8ed-4e0d622e61e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18eb0ef0-96e0-449e-b1bb-aee552320f1b", "sighting_of_ref": "indicator--a8287478-c79c-41b9-b8ed-4e0d622e61e7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4818a287-95a9-4201-a665-582931e63c92", "sighting_of_ref": "indicator--a47b561c-de16-4b0f-8dd1-9f22e9809872", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffd4778-6606-48c8-8e13-84cfac33ced9", "sighting_of_ref": "indicator--a47b561c-de16-4b0f-8dd1-9f22e9809872", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d4c7da-018c-4987-a96c-7a3b8af26c3c", "sighting_of_ref": "indicator--a47b561c-de16-4b0f-8dd1-9f22e9809872", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64398bb4-d8e1-4e85-b48e-595f717645d8", "sighting_of_ref": "indicator--1838cb62-cf28-4520-93e0-315bf719bee2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93eaadf8-363a-4a38-abea-960595e42d4f", "sighting_of_ref": "indicator--1838cb62-cf28-4520-93e0-315bf719bee2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3eb1dc4-ab7c-4dc8-95d7-39ce7b6fab83", "sighting_of_ref": "indicator--1838cb62-cf28-4520-93e0-315bf719bee2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b630944-d0d0-44bb-99da-eb7a1c9e033b", "sighting_of_ref": "indicator--8348abb5-c13f-4fdc-8fe4-7f9286c82873", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894f8639-2009-4910-b7d6-be0f98c6f00e", "sighting_of_ref": "indicator--8348abb5-c13f-4fdc-8fe4-7f9286c82873", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addcc4da-f20c-43e5-a502-795a5729d974", "sighting_of_ref": "indicator--8348abb5-c13f-4fdc-8fe4-7f9286c82873", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714700c1-b9b4-4a64-9c8c-491d90c148a4", "sighting_of_ref": "indicator--f57d130b-2e3c-4f7c-a388-102aa1f920d7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7751889b-f3a8-47f6-beb4-47b6b6c776da", "sighting_of_ref": "indicator--f57d130b-2e3c-4f7c-a388-102aa1f920d7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e99018c-a109-4795-86e5-9703ce8404a8", "sighting_of_ref": "indicator--f57d130b-2e3c-4f7c-a388-102aa1f920d7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d9a068-0672-4e02-bbb7-a4204ea5a2c4", "sighting_of_ref": "indicator--49dd7389-a1aa-47f0-83d5-97abc0d044ab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e83b5d2-e7ba-48d5-8984-8d3a946cba4f", "sighting_of_ref": "indicator--2648b6fd-d0b0-48d9-b67d-9bbbe1157d60", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a754509-fc63-48f8-889c-7d615abb4386", "sighting_of_ref": "indicator--0d06b0c7-8a3b-43d7-acd2-baa85c7b0c59", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13d4f40-e140-4494-b972-188aab6e6433", "sighting_of_ref": "indicator--9d35281d-3d1e-42f9-90e4-ea554e9cf2c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed249b4-7708-4fcf-8be9-4140da53fb8b", "sighting_of_ref": "indicator--a8c86275-3a47-493e-a778-818027ed9cff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aee22f4-1a35-4162-be53-dcdf647779bc", "sighting_of_ref": "indicator--d819442a-2abb-4d4e-8c24-19c72d8e7494", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d7d871-0058-46e8-830f-6caac3e87b63", "sighting_of_ref": "indicator--b18ceda6-b615-4905-ade2-072b39507885", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa685384-f233-49b2-b060-eca52a2c0500", "sighting_of_ref": "indicator--97fbd486-3c79-4181-979a-7d903e7dd5dc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e42e9d6-062c-431e-9d48-7dc178a5dcf1", "sighting_of_ref": "indicator--7cf1a14b-1b0a-4242-942b-8381f7b7de1d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adebbe33-610f-4d81-9534-0c5d0beaa6ab", "sighting_of_ref": "indicator--533e5dfd-f83e-498b-ac59-8a7d3799b60e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bc0e8a-03b2-441f-9f41-d3958ce3d767", "sighting_of_ref": "indicator--533e5dfd-f83e-498b-ac59-8a7d3799b60e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f440fd3-1a71-4ad6-97a5-2f5c05014454", "sighting_of_ref": "indicator--3fbc8f3a-08fc-4bc8-bad7-94d144a943e2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4baab9-9304-4ad6-a043-52052dfcb921", "sighting_of_ref": "indicator--200046fc-af6b-4372-8d6e-6dfe34714d6c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0c8aef-4617-4ce0-ab5d-e052efede4f8", "sighting_of_ref": "indicator--f5e64dd9-66f7-44c5-aac1-bc99f355b6f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5deb084d-10b3-44ce-b3e6-678c9d25271a", "sighting_of_ref": "indicator--005cb49d-8448-4f83-b9ec-33859a9a2e1f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9948891-372f-439e-8a46-805c1cc5afc9", "sighting_of_ref": "indicator--715b85d6-8ff5-487d-be6b-133143bc38c2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba3bde7-1db9-43a2-a20c-1d579604cd1f", "sighting_of_ref": "indicator--6881a9a9-adef-4184-b974-ab3498374ddf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad2913b-5b5f-4e19-8a27-7955461bb371", "sighting_of_ref": "indicator--17bc241b-c34f-410d-8ef0-7df107edd5c5", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e13111-d9c1-464a-a9d5-3a65a3434f46", "sighting_of_ref": "indicator--9bba7712-5d54-4cc3-a554-4237f981695f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9c7436-c813-4adb-b3e9-9e4c9eefa68a", "sighting_of_ref": "indicator--6cf126e4-f584-4616-bfaf-e4ac85ca2732", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f23f8df-0322-41a9-93de-292445e36f4c", "sighting_of_ref": "indicator--83fa3282-ffaf-48c5-9a86-01263e690683", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e52757d-5b9b-42d3-987a-e5eeb6d0d921", "sighting_of_ref": "indicator--83fa3282-ffaf-48c5-9a86-01263e690683", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14080f51-2957-410e-a956-3e65e782ebea", "sighting_of_ref": "indicator--fd6b0f94-b48e-44a0-b472-c4bd1dc5712f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e066c8d-f607-462f-b66d-7d78ce327ac9", "sighting_of_ref": "indicator--3afa1086-67d3-45c1-9fca-582aab71aa25", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bd5272-cee3-4555-aa89-5c7d9446e8d8", "sighting_of_ref": "indicator--213fec48-ed5c-4948-82e0-8bb1c5d9e3c3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6026dde3-a2c6-4faf-aaf6-468c594d02b8", "sighting_of_ref": "indicator--e2aa7db0-c4d4-47f5-92c5-d7cabc6aaa86", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32518ce-7482-419c-a6a8-e1e3aae96302", "sighting_of_ref": "indicator--13f4e4d6-f05b-4113-9cf0-18d9284e5585", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7af221c-c20a-4e28-96c0-1b3e9beab37f", "sighting_of_ref": "indicator--13f4e4d6-f05b-4113-9cf0-18d9284e5585", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71334ac-64b8-4c12-9ff3-38ddd3cff66d", "sighting_of_ref": "indicator--cb9677de-3667-4f50-a3e3-fe6cc0f42ee0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb8f077-2685-4197-86ab-d785f2e6410e", "sighting_of_ref": "indicator--8947aabe-21eb-4a31-805c-c7171e364f5a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a8bf8c-6774-4361-9f4f-5a510436d67d", "sighting_of_ref": "indicator--a65338c1-2d38-47a6-a1f8-662a40e8d316", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9028345f-fcb8-472c-b883-21ef8de5c84a", "sighting_of_ref": "indicator--53db5d35-40a1-4021-af73-8dc74e266805", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab7d73f-220d-4730-951e-07038159d68a", "sighting_of_ref": "indicator--53db5d35-40a1-4021-af73-8dc74e266805", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5d0761-ca9b-426f-9f6b-eaa12ab02abe", "sighting_of_ref": "indicator--53db5d35-40a1-4021-af73-8dc74e266805", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb22813-48d9-4ed4-84da-58c1e269d554", "sighting_of_ref": "indicator--176454ed-b55e-4bf3-ab20-1b002940ada9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e27f58b1-9afb-43d5-b1ca-105819ef814f", "sighting_of_ref": "indicator--c9569531-c6b7-4427-8cfa-350f3abdfc6f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3611070-bfb3-48a0-8bb6-95c87f73224c", "sighting_of_ref": "indicator--c9569531-c6b7-4427-8cfa-350f3abdfc6f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85262cbc-c645-49a1-bc8a-ea08f794f64e", "sighting_of_ref": "indicator--a9756ebe-15c5-4525-8487-53afd220dfac", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da59f7b-90d1-4686-92df-1093d4681f01", "sighting_of_ref": "indicator--ff3dfe04-4bae-401b-883a-ff964040c7f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09875b87-1b1a-461e-b886-f73a8b02e75b", "sighting_of_ref": "indicator--b724a3d9-0c92-42e8-9550-e83b5f365a12", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efacafb4-cb8c-4bdb-aeb8-b15a75fce685", "sighting_of_ref": "indicator--22581088-e09f-40b5-a321-0c7936d6dab0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae12d126-8f37-4b61-8718-fe22263d7915", "sighting_of_ref": "indicator--22581088-e09f-40b5-a321-0c7936d6dab0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42aec95-d54d-4d79-980f-b01e48595ff3", "sighting_of_ref": "indicator--6827aab5-d48b-47f3-884d-734f2eacc401", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6be7a39-b54c-414b-8896-4d216b3b5e6a", "sighting_of_ref": "indicator--af5e903e-cec9-46ef-b02e-c01c410afbc7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1642dd34-1026-4967-8d0a-ae6bef9ef689", "sighting_of_ref": "indicator--e968438d-b861-41d6-862b-64e7390c7e65", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c604c0ee-6244-482f-894e-fa775d9d3aa0", "sighting_of_ref": "indicator--1be1425a-6596-418d-a518-6cbe70de1def", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd634e1-bde5-4696-aa63-90ae6720d3ef", "sighting_of_ref": "indicator--412b6358-74d6-4eaf-b92f-e63fe0a4eaec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd623b3-f87a-4570-a8be-e6b86c733a5c", "sighting_of_ref": "indicator--d86b1781-f2e2-4f49-9d94-f4417dd97104", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295f743d-aa0f-47e6-8e96-73d38d557de7", "sighting_of_ref": "indicator--3435071e-cf3f-4ee3-919b-af327326b0ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d71b9ad-2e75-4c3c-a362-e6bdbffe3770", "sighting_of_ref": "indicator--3435071e-cf3f-4ee3-919b-af327326b0ae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccf8411-ca2d-458e-a62b-dc6f5ebe67a0", "sighting_of_ref": "indicator--123666ea-bfce-4b83-b80c-33b9198edd7c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef4eb10-3b35-4883-a98a-e443a3eb00c9", "sighting_of_ref": "indicator--f5e0722b-7efd-4076-b26a-60a095e32434", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1607967-5e6e-4d39-a184-47d4c6a55291", "sighting_of_ref": "indicator--ba6f8557-faf9-4dd8-ae98-4bfbbd43cb89", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c13fd1-7cd2-48c7-8dd9-e9857d841a61", "sighting_of_ref": "indicator--ba6f8557-faf9-4dd8-ae98-4bfbbd43cb89", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8667bad-603d-4ac7-8eea-25225fafb4a0", "sighting_of_ref": "indicator--932f08b4-32f5-4b93-a25b-4a9a59d8cd74", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74be443-c7b5-4044-904e-900816307204", "sighting_of_ref": "indicator--ae90abd5-45b1-4d3d-9743-e0754923d103", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c738a3cf-2183-4a8e-bbff-4fb27aa97bbc", "sighting_of_ref": "indicator--29b11cb3-0896-4648-9239-2c65fa9fd314", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2fcd20-8f52-48a5-bcb7-19e13ae909ff", "sighting_of_ref": "indicator--29b11cb3-0896-4648-9239-2c65fa9fd314", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5872f576-86ba-4b48-a59d-105e01da1bf6", "sighting_of_ref": "indicator--15e7d9ea-6c94-4b8e-9a6c-a5eff5990835", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c25147-3e60-4d4c-a368-c700455ce3f4", "sighting_of_ref": "indicator--721fe101-4a83-47da-87dd-aedfc2ecfdb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb7097b-0bdb-4e61-8f03-3c421f04b577", "sighting_of_ref": "indicator--721fe101-4a83-47da-87dd-aedfc2ecfdb4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c3c0f9-e9ff-48bd-a67e-9e3d838a4d55", "sighting_of_ref": "indicator--721fe101-4a83-47da-87dd-aedfc2ecfdb4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b512d78-53b0-4cb3-8490-be6f5638d413", "sighting_of_ref": "indicator--aaa22307-b838-41ad-af06-f09a22ef0b48", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f286d7ff-8563-46ec-9134-a39dfaa2c02e", "sighting_of_ref": "indicator--aaa22307-b838-41ad-af06-f09a22ef0b48", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b48bc03-73a5-4bec-840b-6e1d2f37d1ed", "sighting_of_ref": "indicator--d287e40b-8b25-4426-9545-647559b0cda0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52f248e-e3d7-4ab4-95b1-bd0337d5e1d9", "sighting_of_ref": "indicator--d287e40b-8b25-4426-9545-647559b0cda0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c721e7-5c10-4097-abee-3fdeb2fd789d", "sighting_of_ref": "indicator--d287e40b-8b25-4426-9545-647559b0cda0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113b5031-d171-45af-92c9-f5f16d0bf7c1", "sighting_of_ref": "indicator--fbf69c61-eea7-4988-8726-264c6a5d9b4f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d5f913-2e42-4e5a-a91a-7dc40ebe1dfe", "sighting_of_ref": "indicator--2672f3ff-75f6-4bcd-a802-b2c5c0030d61", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f756ee-c153-46d5-949d-64fc5c0b227a", "sighting_of_ref": "indicator--39c1d275-5f31-4b5c-b744-e20b53189d9a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda6600b-8c1b-4fd4-b196-a94bb9721c34", "sighting_of_ref": "indicator--75fe06b2-a981-442d-b7b5-aa8b9b7792fb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bd4059-18fe-49a1-b3d0-9b6406277dd8", "sighting_of_ref": "indicator--0c16604e-38fa-4269-a3bb-456467b91021", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe0a155-d1a6-49dd-8721-72ce0dbd920e", "sighting_of_ref": "indicator--1f9e3234-d03e-45c3-a092-611003facd8a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d806be-bfcd-46e8-8423-37e3b7184654", "sighting_of_ref": "indicator--9b190b6f-681e-45b3-b986-ddbec43fc409", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baff9e65-3a84-4427-838b-adc151cefb37", "sighting_of_ref": "indicator--d60e10cd-9735-4361-ae00-8b96a71133b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59d5737-dcff-4a65-ad4c-f4782710a316", "sighting_of_ref": "indicator--b8e9c681-2d82-4228-a532-717c1081ea8d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a871b302-1046-4435-a247-10a18a26f278", "sighting_of_ref": "indicator--b94386e6-e9ac-4805-a17a-29b08187cb13", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88153cf3-d902-4098-9c60-c568ec876770", "sighting_of_ref": "indicator--a765e7f5-ee6e-466a-9417-a7e166958dc3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdafc02-2d0f-4754-9f8e-521dcfdf0f19", "sighting_of_ref": "indicator--ef36b872-630c-4e2c-9137-1e2a48dbd9a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf032d43-c3d3-4357-a4d5-d56f1dcf33f6", "sighting_of_ref": "indicator--d2869811-e788-4ee9-b00a-57bbc73d4588", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8222799c-7937-4176-9627-b2c960e3215e", "sighting_of_ref": "indicator--69e52227-e261-45e5-a42f-02b419548cf6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bd9bd8-bab3-4f74-9e71-d976e69da4f5", "sighting_of_ref": "indicator--4b4baa38-b786-49dd-a6ed-d6d2a1fbfbc0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86e89dc-6d93-451b-a15f-305492eb92bc", "sighting_of_ref": "indicator--4b4baa38-b786-49dd-a6ed-d6d2a1fbfbc0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d0d0e0-e892-4c2a-9a7b-b3268b57eedf", "sighting_of_ref": "indicator--7d0299ef-94e8-45f9-82a3-693e1aa5fd00", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae5fd7f-b0d3-4197-9077-9d77044dfd84", "sighting_of_ref": "indicator--33a553b9-b8ce-4b35-8a67-28fc34398d58", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56956fcb-a1d2-428e-9f2e-c43956b50ac2", "sighting_of_ref": "indicator--0ff1f0dc-8584-46a9-a11e-cb84a18f8e32", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a22e964-e105-478a-817b-33deb2447ae1", "sighting_of_ref": "indicator--0ff1f0dc-8584-46a9-a11e-cb84a18f8e32", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95678f03-6b9b-4b7d-bad2-0e42badd71cf", "sighting_of_ref": "indicator--5413cc66-25a6-44ed-80f6-e318c1960f90", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0562c77e-0457-4029-98c9-e47f2d982a0f", "sighting_of_ref": "indicator--2ddfee9c-4ca4-4da6-a066-79d914e915ac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac6c173-da1f-4faf-a688-976246893324", "sighting_of_ref": "indicator--cda6f2d2-7322-4267-8205-87c221494548", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad822a3-ff26-4c49-9d77-f5503618310a", "sighting_of_ref": "indicator--e14726ff-1b4f-4278-8e40-23f4232837d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90631fe-ad96-4fad-b793-f2a310b3f1b4", "sighting_of_ref": "indicator--1a9d161d-4b95-4e73-acc8-d6ffcc32343d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ed9c31-d009-4e1e-b512-3419823b2220", "sighting_of_ref": "indicator--85e773ac-04c2-48d2-ac94-f286529748d2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2156e8f0-7e69-4af8-b6a3-4cdbd37ed09e", "sighting_of_ref": "indicator--ba8abfea-86ee-4f1e-a0d9-2ed8cef5721f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b57172-d99a-4cb2-943d-04ec44361705", "sighting_of_ref": "indicator--4ff638a1-74fb-44f3-b00e-72f9d196a6a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0851e2f-56c2-4578-a68f-8656b6b0e396", "sighting_of_ref": "indicator--25abb8ad-0a56-493c-a647-d3bce0da9e2e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d29d4c2-89ff-4c7d-999a-7d755a6a8003", "sighting_of_ref": "indicator--c861b98d-e8e7-4fd9-a346-d6b706bae858", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e03456f-544b-434c-809b-1b6b2986ea4b", "sighting_of_ref": "indicator--a5abdc99-8017-459a-8542-7f9986b4aed5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91aaef86-764f-4696-b067-aa0addee7870", "sighting_of_ref": "indicator--f78f8532-7ad9-40aa-b6cc-2346cea82bfc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34df048-bf05-45d7-b3f9-cb16f71dc4b3", "sighting_of_ref": "indicator--f78f8532-7ad9-40aa-b6cc-2346cea82bfc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003870a3-4328-4588-bf87-76db8d9911f4", "sighting_of_ref": "indicator--1cbeb887-46d5-46ac-b5d4-a53bfebbbd64", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc117720-1032-4a36-bc4c-3dbd2ee91cd0", "sighting_of_ref": "indicator--95e05095-a9eb-486d-9bad-037fa63e654e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f93332-b271-4234-ac7c-c2462b374626", "sighting_of_ref": "indicator--8212a6f4-59e5-4943-9099-24a61dc69168", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ae6545-4120-4948-a3b5-50999b0732ac", "sighting_of_ref": "indicator--139ad3ee-e75f-4e23-ab39-d634a0390565", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68afe9d9-7a69-4e50-8d4f-a4aa8216e04a", "sighting_of_ref": "indicator--139ad3ee-e75f-4e23-ab39-d634a0390565", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14806d6c-610e-402f-bf19-f4184fba5aea", "sighting_of_ref": "indicator--aef35968-99f0-4d28-baa7-38e5682bc948", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c43cc9-fcb4-4bc4-bb70-bc74db024578", "sighting_of_ref": "indicator--aef35968-99f0-4d28-baa7-38e5682bc948", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94da2ee7-c31b-4476-8401-89ff5bdc483f", "sighting_of_ref": "indicator--85e65f6c-79de-4579-8371-2404bb627d9f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439edc94-6256-48cc-af52-e3d8620f778c", "sighting_of_ref": "indicator--84b1fd6e-38f8-4769-9162-23c4e42bf513", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a34de9-5f3d-4029-b362-8bc617873656", "sighting_of_ref": "indicator--a22ef399-4e96-4196-b489-cd6e68a48e31", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d7b471-8e4f-4b0e-a280-9bff7ded225e", "sighting_of_ref": "indicator--9ed689a2-b5b7-4b99-a3fa-1b1c018af2d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532f6cb1-42da-4c5c-bd76-d2113649446b", "sighting_of_ref": "indicator--a3bf4018-1009-4226-ad78-d3907c6464ea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58707b39-2081-46e5-8beb-0f800f8ccaec", "sighting_of_ref": "indicator--1b309695-ef9f-435c-8640-74a3b366b6a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bddeed-634b-418c-8aaa-e1e799702314", "sighting_of_ref": "indicator--76b88a9a-472f-4dc3-b1eb-a9f883b11ef9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eca0be6-4c1d-4d5f-b212-85e441efecc2", "sighting_of_ref": "indicator--76b88a9a-472f-4dc3-b1eb-a9f883b11ef9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb14e5a-a5f1-434b-a906-914ed10ef6c4", "sighting_of_ref": "indicator--f461b79a-2840-4ff8-a521-4ebcd1785c86", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3951a648-f190-4390-bbbb-97f80a9f8148", "sighting_of_ref": "indicator--344ecbe5-69ff-40a8-9ff6-7e6461b3831d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14521969-be65-4bf5-b63f-53f9e3953fbc", "sighting_of_ref": "indicator--34f7ba67-9a8f-4ea9-a4c2-6d6b00af28a9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54d3cc5-1a5a-4be3-b75e-0ca297d06c7c", "sighting_of_ref": "indicator--5d1a9453-1d8d-4e4d-bd3d-819edb9c1ae6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e440cd46-c0df-46f5-b987-a16b0f7deab4", "sighting_of_ref": "indicator--7806cc18-b436-4db9-8c25-4593892c0bdf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a01fae-009e-4294-b4bd-48f64921a838", "sighting_of_ref": "indicator--883b2c21-4752-48f6-8a43-d4241f5e7ba9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d6b0ad-78bb-4aa2-a6ef-e40aef1ea9f6", "sighting_of_ref": "indicator--883b2c21-4752-48f6-8a43-d4241f5e7ba9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6ccf4c-00de-42de-b781-3ac1e3e40f5a", "sighting_of_ref": "indicator--1aa6745b-e585-4486-9c5c-fbb05cf34ddd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184efa89-cd5f-4b69-b4bf-0577e840c7e2", "sighting_of_ref": "indicator--1aa6745b-e585-4486-9c5c-fbb05cf34ddd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1f9843-467f-4abd-a301-abafc6318452", "sighting_of_ref": "indicator--1aa6745b-e585-4486-9c5c-fbb05cf34ddd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697306f0-f885-46f1-b11f-c74c8bc5a8e8", "sighting_of_ref": "indicator--9f45189c-bbaf-4813-84fe-e3f19e5518a6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcf248c-f076-435b-97c0-eacb1294362f", "sighting_of_ref": "indicator--9f45189c-bbaf-4813-84fe-e3f19e5518a6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309cbcc6-04ca-43a0-abb2-e8b236b25cb2", "sighting_of_ref": "indicator--9f45189c-bbaf-4813-84fe-e3f19e5518a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f452c67-4137-4d97-9e77-899eb0ee580a", "sighting_of_ref": "indicator--c3813679-2319-48ea-96af-b612bede75d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236b59c9-708b-443f-9622-7fc0732db337", "sighting_of_ref": "indicator--c3813679-2319-48ea-96af-b612bede75d0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce3dbf55-3449-4af6-8075-3561c2c7dddf", "sighting_of_ref": "indicator--c3813679-2319-48ea-96af-b612bede75d0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfca1cf-6f4d-4463-959d-7c3edd5f2dbc", "sighting_of_ref": "indicator--24d27cf5-9fdd-48a5-89b1-739a8b5ab823", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a37a1c-b1af-48d2-9a06-6ae3580db4fb", "sighting_of_ref": "indicator--24d27cf5-9fdd-48a5-89b1-739a8b5ab823", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df7609b-fba7-4680-812d-85432186b8e4", "sighting_of_ref": "indicator--24d27cf5-9fdd-48a5-89b1-739a8b5ab823", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f24165-e0e3-4ef2-80b4-04647fd9faf3", "sighting_of_ref": "indicator--5bb689b4-2cc6-4665-b971-b92ee6aa6dbe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd24362-fe50-4e62-9eb7-9a79fb162ee5", "sighting_of_ref": "indicator--5bb689b4-2cc6-4665-b971-b92ee6aa6dbe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfb9b00-c6ee-4da6-8d81-56b8c673deb4", "sighting_of_ref": "indicator--5bb689b4-2cc6-4665-b971-b92ee6aa6dbe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef7aff3-87ae-4699-8341-6fe93b018965", "sighting_of_ref": "indicator--bd0c10d9-d911-4960-8db3-7326eaf98ae1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53805d55-d5e4-46da-91ab-2f1b83584e6a", "sighting_of_ref": "indicator--38d96c36-a983-496a-8851-1af4666af3ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6678b8-12e0-47c2-b2e7-fe266c6c5487", "sighting_of_ref": "indicator--38d96c36-a983-496a-8851-1af4666af3ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3bf0ce-01eb-4322-862e-d85bbc2034e0", "sighting_of_ref": "indicator--38d96c36-a983-496a-8851-1af4666af3ba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5c56d9-d1f5-445d-95ed-2beb90e58d3f", "sighting_of_ref": "indicator--14c9c39a-f1dc-493d-a6c2-783b966b28b2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef0b0e8-c2e6-4044-88f4-e5ab9a7cd010", "sighting_of_ref": "indicator--14c9c39a-f1dc-493d-a6c2-783b966b28b2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e68f24-2734-4f12-96e1-e4c99543a7ac", "sighting_of_ref": "indicator--14c9c39a-f1dc-493d-a6c2-783b966b28b2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c59c412-8cbe-41ba-aa03-5356fefd2108", "sighting_of_ref": "indicator--d28231f6-12d7-46d0-9fcb-9cee756ac561", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a663cce-30c9-49e8-9d57-ee7090a2f448", "sighting_of_ref": "indicator--d28231f6-12d7-46d0-9fcb-9cee756ac561", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84f0eb0-c62f-4c03-a04e-a28c9addd681", "sighting_of_ref": "indicator--d28231f6-12d7-46d0-9fcb-9cee756ac561", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c8f30f-afb9-45f7-a2e2-a4476189cb06", "sighting_of_ref": "indicator--fa093e2d-d4c7-4e45-837a-0a9886586dde", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0201c1-b29c-417a-8246-708491502293", "sighting_of_ref": "indicator--fa093e2d-d4c7-4e45-837a-0a9886586dde", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a4d6a6-f1c3-4196-8010-4f03df226c4a", "sighting_of_ref": "indicator--fa093e2d-d4c7-4e45-837a-0a9886586dde", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f37ab31-6964-4718-89a0-713847fbe997", "sighting_of_ref": "indicator--3d1ae652-6337-486f-9b42-67404f9bd125", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea6fc08-ebb7-4ba8-b990-676cea55a498", "sighting_of_ref": "indicator--3d1ae652-6337-486f-9b42-67404f9bd125", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d255ed0-0d9b-482f-b08e-dc2cc1b886c2", "sighting_of_ref": "indicator--3d1ae652-6337-486f-9b42-67404f9bd125", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee032593-db61-4faa-9ec1-32867128a314", "sighting_of_ref": "indicator--3e7be8bf-82d7-4cba-955a-fd79aabf378a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590e68c9-22a6-41bf-ae8a-b0d0be120c35", "sighting_of_ref": "indicator--3e7be8bf-82d7-4cba-955a-fd79aabf378a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51da0336-98b3-431c-9dee-ea100adcf87e", "sighting_of_ref": "indicator--3e7be8bf-82d7-4cba-955a-fd79aabf378a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b6f753-12b1-4ea3-87b3-87cb538be368", "sighting_of_ref": "indicator--41f144b7-04ad-48c2-9d4e-e03674fd86b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9b58fe-fc32-4daf-b31a-4877a74a8fec", "sighting_of_ref": "indicator--41f144b7-04ad-48c2-9d4e-e03674fd86b1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342992d9-39b1-4c51-b091-50f1719b4536", "sighting_of_ref": "indicator--41f144b7-04ad-48c2-9d4e-e03674fd86b1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda703c5-cf47-4b6b-b8e5-689654d6cc29", "sighting_of_ref": "indicator--8760e72e-75dc-4cdf-878f-336b1b7b776c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a14c47c-44db-437a-b6bf-c9aa2ab79932", "sighting_of_ref": "indicator--8760e72e-75dc-4cdf-878f-336b1b7b776c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83d14a7-6e58-4234-8717-8e565f51675e", "sighting_of_ref": "indicator--8760e72e-75dc-4cdf-878f-336b1b7b776c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cf1541-3b81-457a-ba33-a828b170ca67", "sighting_of_ref": "indicator--fa0a588f-f037-4186-851a-2b4e7352d6e4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61f8709-3219-4ecd-a4fe-54a91c6844d4", "sighting_of_ref": "indicator--fa0a588f-f037-4186-851a-2b4e7352d6e4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1162bc-6c80-48bc-9ce0-9eaba8438b99", "sighting_of_ref": "indicator--fa0a588f-f037-4186-851a-2b4e7352d6e4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60912729-6559-4529-98a4-3c27168aa9ba", "sighting_of_ref": "indicator--5767644b-b972-4462-b2ea-370c0fc44264", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5607e17f-87af-43fe-b9b6-e5dbb7f81327", "sighting_of_ref": "indicator--a751a76c-a599-4ba3-a287-588356482f01", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091ddb42-1d24-45a1-8898-cdd0ccd83d37", "sighting_of_ref": "indicator--a751a76c-a599-4ba3-a287-588356482f01", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6778303-a147-4e59-9168-f8012b2151b9", "sighting_of_ref": "indicator--a751a76c-a599-4ba3-a287-588356482f01", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39168236-2ea6-44ba-b3ec-cdd7f6c774e1", "sighting_of_ref": "indicator--efc87f10-1075-4da2-845e-0c8cf07a530a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243135e9-a43e-4967-9096-defc7e64ddc1", "sighting_of_ref": "indicator--efc87f10-1075-4da2-845e-0c8cf07a530a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c2529d-dd10-4023-8e04-d54c2db4bd89", "sighting_of_ref": "indicator--efc87f10-1075-4da2-845e-0c8cf07a530a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d357c296-d9b6-4230-9271-80c46f79f337", "sighting_of_ref": "indicator--0ab9dc52-9d2a-48e4-b712-b25444116276", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ab45a2-19fd-4651-9d35-56f1669296c5", "sighting_of_ref": "indicator--0ab9dc52-9d2a-48e4-b712-b25444116276", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b8cfe5-d6fd-418b-bb79-ce021a68fb14", "sighting_of_ref": "indicator--0ab9dc52-9d2a-48e4-b712-b25444116276", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d903e7-82c7-4305-b77f-7a37bc08effa", "sighting_of_ref": "indicator--fc59e8e8-ef4d-458f-a936-63f36bfbd86a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790e59ec-158d-4d8b-9388-fa43ffe374e5", "sighting_of_ref": "indicator--fc59e8e8-ef4d-458f-a936-63f36bfbd86a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0f57d2-a1bc-405d-850f-67c74e9cb0ab", "sighting_of_ref": "indicator--fc59e8e8-ef4d-458f-a936-63f36bfbd86a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c92db4a-3a6a-45bf-8662-803e957cc5fd", "sighting_of_ref": "indicator--1d3a5db4-edc6-4864-8fcb-5ba42f20cf9b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a2c0be-6296-42f3-a5e3-1adcbdb43124", "sighting_of_ref": "indicator--1d3a5db4-edc6-4864-8fcb-5ba42f20cf9b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04eba8a5-b0d9-4ab5-b79e-11f0e5a9b12d", "sighting_of_ref": "indicator--1d3a5db4-edc6-4864-8fcb-5ba42f20cf9b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbd7a63-7cc6-4f6a-b288-6465cbd200ff", "sighting_of_ref": "indicator--05fa5eb8-4b60-4aee-a0d2-3216032de3be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c27d0b-0158-4619-8efb-1afb78cec089", "sighting_of_ref": "indicator--05fa5eb8-4b60-4aee-a0d2-3216032de3be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0f9c6a-4fea-4ed5-a4e0-f1d1cd99b28d", "sighting_of_ref": "indicator--05fa5eb8-4b60-4aee-a0d2-3216032de3be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ed4d5e-81bb-4a69-b4d1-9b1719b3e82c", "sighting_of_ref": "indicator--acccee3f-a6fb-4a6b-8df3-5c1c25e1e595", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3f6dce-63db-49a3-8317-0ed79b7630ff", "sighting_of_ref": "indicator--304d98ad-22a9-4334-9a44-484db6207aa0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413e4de6-9682-4333-9da1-47310c13e0c5", "sighting_of_ref": "indicator--304d98ad-22a9-4334-9a44-484db6207aa0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bf55f8-f23a-4b4f-85bf-139b1746461b", "sighting_of_ref": "indicator--304d98ad-22a9-4334-9a44-484db6207aa0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354b216d-33e3-4307-be36-49fd9c17c870", "sighting_of_ref": "indicator--326bb3d2-23a3-4188-85af-0ef918b39adf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1f9c2d-eba0-4513-9543-43b58f4e0131", "sighting_of_ref": "indicator--326bb3d2-23a3-4188-85af-0ef918b39adf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c266df96-87f1-48aa-9067-0277535823a3", "sighting_of_ref": "indicator--326bb3d2-23a3-4188-85af-0ef918b39adf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1351c6e5-1a4b-48b7-90f6-cdcacb18a5c3", "sighting_of_ref": "indicator--e239c34e-f002-4451-98e9-781a5cd94e8c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3234b723-dc16-49c7-8823-754fbcf221c9", "sighting_of_ref": "indicator--e239c34e-f002-4451-98e9-781a5cd94e8c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4619c99b-6295-4c0e-a3c4-d550088cc82a", "sighting_of_ref": "indicator--e239c34e-f002-4451-98e9-781a5cd94e8c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78895f29-1484-4578-a570-a5cab993fd9d", "sighting_of_ref": "indicator--287f71aa-8eea-408d-82ac-894e74912313", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a082b273-eaae-4a05-af01-be32048152f7", "sighting_of_ref": "indicator--287f71aa-8eea-408d-82ac-894e74912313", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41b3ac7-37d7-42bb-bb3e-164f67c9aae2", "sighting_of_ref": "indicator--287f71aa-8eea-408d-82ac-894e74912313", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee938a0-85f3-43f9-a18d-30241560df23", "sighting_of_ref": "indicator--f61a7f6a-0a3c-4028-b103-d8d4fe27f7ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189f55a3-9d28-41e3-9719-e348a9a557a6", "sighting_of_ref": "indicator--f61a7f6a-0a3c-4028-b103-d8d4fe27f7ef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cead32b3-327e-4432-82f9-c29fab84bd89", "sighting_of_ref": "indicator--f61a7f6a-0a3c-4028-b103-d8d4fe27f7ef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec3d9aa-7a31-4e92-8e85-dc9cca93046f", "sighting_of_ref": "indicator--010712f7-1dfb-4d3a-8eec-e00464068409", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b88422-5469-4a44-8e34-c72a35883882", "sighting_of_ref": "indicator--ee69205d-0a50-468e-b28c-1fe6cfc4b7c1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca87cebd-06a0-4226-8449-2b467246da61", "sighting_of_ref": "indicator--ee69205d-0a50-468e-b28c-1fe6cfc4b7c1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e7db71-60e0-4646-a3f5-abfe3cd74f6a", "sighting_of_ref": "indicator--6e6de8e1-3722-4dba-a31e-f32445712f4b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775e3596-15d9-45f0-8166-95c6ae8783d9", "sighting_of_ref": "indicator--6e6de8e1-3722-4dba-a31e-f32445712f4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6df45dc-1d0c-4532-b6d8-df25e7f2eea8", "sighting_of_ref": "indicator--6e6de8e1-3722-4dba-a31e-f32445712f4b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4207374a-354a-4db3-9677-61330bb5f643", "sighting_of_ref": "indicator--0fe26fe6-2776-4af3-8949-cfde1dc96506", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b2642d-caed-4203-913b-5fb33d1792a7", "sighting_of_ref": "indicator--0fe26fe6-2776-4af3-8949-cfde1dc96506", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d99a74-803a-4dd7-be57-ed111569d5d2", "sighting_of_ref": "indicator--0fe26fe6-2776-4af3-8949-cfde1dc96506", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fab0ef5-24ff-49bc-a90a-d15eb5fe1977", "sighting_of_ref": "indicator--ac2bccea-6cd7-4568-948b-4b657008fbe0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca82eaa-fef4-47cb-b5c7-bcebbdb0057b", "sighting_of_ref": "indicator--ac2bccea-6cd7-4568-948b-4b657008fbe0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dcf491-6441-4c33-ba22-8f5186415d94", "sighting_of_ref": "indicator--ac2bccea-6cd7-4568-948b-4b657008fbe0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f149a784-3260-4439-a565-330f77aa5945", "sighting_of_ref": "indicator--a890a451-c9fe-40f4-af28-cbe03d5c2877", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78188dd0-8f6d-49c4-ae7c-7e716f99d0c6", "sighting_of_ref": "indicator--a890a451-c9fe-40f4-af28-cbe03d5c2877", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7be424b-9c4e-4260-89c9-53388f7c7b08", "sighting_of_ref": "indicator--a890a451-c9fe-40f4-af28-cbe03d5c2877", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99497de9-87ad-4d14-a72d-a82b01cdc48a", "sighting_of_ref": "indicator--ddbf636e-7cb9-4a7d-9361-56f4a98ad02e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d438044-e98e-43a2-baea-852f78e327e9", "sighting_of_ref": "indicator--ddbf636e-7cb9-4a7d-9361-56f4a98ad02e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52771c6-d5c5-484a-b986-e28c2215272a", "sighting_of_ref": "indicator--ddbf636e-7cb9-4a7d-9361-56f4a98ad02e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885c55ed-9087-4a8b-8a13-b432f23b4f30", "sighting_of_ref": "indicator--c0545ae0-f1d5-4aca-b91f-3ac44c56acb8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f70ca8a-4bd5-4b75-9376-c08328a5ea6f", "sighting_of_ref": "indicator--c0545ae0-f1d5-4aca-b91f-3ac44c56acb8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c5f7ec-0b00-4094-84c3-b331e24b0c31", "sighting_of_ref": "indicator--c0545ae0-f1d5-4aca-b91f-3ac44c56acb8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c10ade-12c0-4ab1-a6bb-611d7a6e1423", "sighting_of_ref": "indicator--0d11553c-79de-415c-b6e1-50de2ef98538", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8600fd8-c3c5-4b58-be3e-67c76b5700ad", "sighting_of_ref": "indicator--0d11553c-79de-415c-b6e1-50de2ef98538", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10402760-02dc-45db-98d2-963fd73aaca9", "sighting_of_ref": "indicator--0d11553c-79de-415c-b6e1-50de2ef98538", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c6cf3a-9eb0-4beb-b67c-4c58e911136f", "sighting_of_ref": "indicator--43c5afc9-b2de-492b-8620-f78fa16e89f1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69655162-4408-49a4-9d70-005fe684c1cb", "sighting_of_ref": "indicator--43c5afc9-b2de-492b-8620-f78fa16e89f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6832abf4-9212-4ba9-bb98-7da3b73f335c", "sighting_of_ref": "indicator--bd57532d-a2cd-4b01-acb1-3978bf45c40f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b74d33c-e7f8-41a0-86df-84c4d1f404fc", "sighting_of_ref": "indicator--4e37c212-ab95-4aa3-ac3f-315693f9660f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053d6a1c-c568-40fa-8298-1dbab65f7cac", "sighting_of_ref": "indicator--4e37c212-ab95-4aa3-ac3f-315693f9660f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772183fd-a087-4f68-b608-636b3fc2550c", "sighting_of_ref": "indicator--fd63d08c-82f2-464d-9285-6afa213d2319", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131a3595-a788-40b1-b967-948df69764ba", "sighting_of_ref": "indicator--e0914601-9653-4786-9cc3-40bb17e4676f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377a7b58-8436-4a2b-98bc-f3dc518291a6", "sighting_of_ref": "indicator--1749a18b-4ba5-41a4-9c73-f055df04913e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b120a3-bb42-4ff6-943f-59008ef8066e", "sighting_of_ref": "indicator--ed0807f4-9ee3-4d57-a113-6fcba367546a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4016c1d5-3efe-4d26-b8e2-4019791f2459", "sighting_of_ref": "indicator--d8b60fe1-ba86-4270-81ad-374b6d8c44ab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fbee51-ee72-4d63-acde-115bee2bc55c", "sighting_of_ref": "indicator--71860b86-5fb4-4a98-b658-4e25d2c3481a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d9557d-9be3-449f-bf22-43bf2106df2d", "sighting_of_ref": "indicator--9d481d4d-a780-4a12-8614-33b40560bfaf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a6ba9a-3e94-4895-b918-abc5f6a13444", "sighting_of_ref": "indicator--1e4c4ac0-87ff-471d-af29-3fa0f6945ccd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57340b3d-4939-45bf-bddd-2bfb56cae5bd", "sighting_of_ref": "indicator--782240a8-ca4d-4a8e-a54f-20ff27ee3fb7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4ec79a-762c-4393-a09c-b7ce08bc7974", "sighting_of_ref": "indicator--782240a8-ca4d-4a8e-a54f-20ff27ee3fb7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23597f0c-2b13-444e-b329-76ec21972305", "sighting_of_ref": "indicator--782240a8-ca4d-4a8e-a54f-20ff27ee3fb7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9840d90d-cfb2-43c0-8fd3-3fa8084fb62d", "sighting_of_ref": "indicator--6405327f-2b00-4969-a038-4e91b75edccf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23afe4ca-23f3-46f1-a20b-e3172f01fef5", "sighting_of_ref": "indicator--86209788-f033-445b-afe7-97b4ed98b23d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e71ece-db87-4d0d-93af-d324d149e581", "sighting_of_ref": "indicator--86209788-f033-445b-afe7-97b4ed98b23d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab9ac0f-e54b-44f5-b247-1750fd688a52", "sighting_of_ref": "indicator--86209788-f033-445b-afe7-97b4ed98b23d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc874f9-ca5f-48d9-b710-202382e86013", "sighting_of_ref": "indicator--0a895a1e-dfdf-4ce0-914c-18e707ce8647", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26caab93-0674-4e41-829c-da3c432cf5cd", "sighting_of_ref": "indicator--0a895a1e-dfdf-4ce0-914c-18e707ce8647", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de04d3b-7184-4378-8904-dd2cc3548c38", "sighting_of_ref": "indicator--0a895a1e-dfdf-4ce0-914c-18e707ce8647", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66585d93-21f1-4990-ac97-2abf32ed987e", "sighting_of_ref": "indicator--e3ea2083-5a42-4209-9e55-838098c8648a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3522f330-de55-4e19-8cfa-5ba2d3e28e2a", "sighting_of_ref": "indicator--e3ea2083-5a42-4209-9e55-838098c8648a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3354a37-b7da-4ffd-a63d-2f398cd991c9", "sighting_of_ref": "indicator--e3ea2083-5a42-4209-9e55-838098c8648a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc58a20-07d2-4503-94ab-b64907eef165", "sighting_of_ref": "indicator--707a4a26-4527-4820-bb3d-605f950a03e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b16f73-1cd8-4e03-82ba-4f8327bd2f58", "sighting_of_ref": "indicator--707a4a26-4527-4820-bb3d-605f950a03e5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de44dfe-2a6d-4878-9118-b2b33e9165cf", "sighting_of_ref": "indicator--707a4a26-4527-4820-bb3d-605f950a03e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b7f3e1-9ff3-4829-a760-f05f031a139d", "sighting_of_ref": "indicator--b8251853-ce55-44a3-ab6a-4ed308b91f61", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e22f481-0af7-4f65-809e-7cd2afc6c69a", "sighting_of_ref": "indicator--b8251853-ce55-44a3-ab6a-4ed308b91f61", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c35dce-5f97-4fe8-bba8-a7d41c05c0c1", "sighting_of_ref": "indicator--b8251853-ce55-44a3-ab6a-4ed308b91f61", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae37cd45-37f8-4640-9f19-da9a0336b185", "sighting_of_ref": "indicator--347afd6a-eb94-4613-b2d6-6f20f441810a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e9a8cc-ce58-48b6-b1cc-be368100ac2b", "sighting_of_ref": "indicator--347afd6a-eb94-4613-b2d6-6f20f441810a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ede0a0e-391e-495b-896b-dc571ff53a37", "sighting_of_ref": "indicator--347afd6a-eb94-4613-b2d6-6f20f441810a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a073279d-4689-4689-8dca-1b8be12d10e3", "sighting_of_ref": "indicator--beab4738-9995-4a0e-9f26-7fea0427e9ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cc8d86-987a-469d-b324-ae0ef7e01c3f", "sighting_of_ref": "indicator--beab4738-9995-4a0e-9f26-7fea0427e9ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf44ff7-474b-446b-b16c-085ba78cfb00", "sighting_of_ref": "indicator--beab4738-9995-4a0e-9f26-7fea0427e9ba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14f8bda-ce65-4af7-a991-989ffe57ff0c", "sighting_of_ref": "indicator--e4083a9c-87f6-4f16-93cc-82243bce8459", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9ea71b-0d68-4feb-8425-f82b14c135a1", "sighting_of_ref": "indicator--e4083a9c-87f6-4f16-93cc-82243bce8459", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8341fdb2-2c0c-4eb1-8adb-3ec84704ad1f", "sighting_of_ref": "indicator--e4083a9c-87f6-4f16-93cc-82243bce8459", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fafac9-2fac-46e7-81b2-222abb819dc3", "sighting_of_ref": "indicator--0c31f1be-6b28-4a79-897a-825d34e424fd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f71dc8-80e1-4d7a-8104-395abf368aaa", "sighting_of_ref": "indicator--0c31f1be-6b28-4a79-897a-825d34e424fd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2580c1c5-b274-42e9-8c6a-eb2496e00898", "sighting_of_ref": "indicator--0c31f1be-6b28-4a79-897a-825d34e424fd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f3cbb1-d1a6-4c7a-9659-99cc2e07d9b8", "sighting_of_ref": "indicator--0bd6d710-2159-43cd-87c1-80942e1c534e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9bde15-c5ec-4610-813b-8c9da6ebe973", "sighting_of_ref": "indicator--0bd6d710-2159-43cd-87c1-80942e1c534e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7c96d3-4106-4d9f-9f6f-ce0cd98d7185", "sighting_of_ref": "indicator--0bd6d710-2159-43cd-87c1-80942e1c534e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352f7bb2-4466-400b-a7d0-51568eff2cb2", "sighting_of_ref": "indicator--33573b0e-75d1-4727-b8b7-a7a923806b6e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed1ea4a-94b7-4228-8190-bd305e2deb9b", "sighting_of_ref": "indicator--33573b0e-75d1-4727-b8b7-a7a923806b6e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e12a0e0-e1b6-4beb-bc45-449c2ea6847c", "sighting_of_ref": "indicator--33573b0e-75d1-4727-b8b7-a7a923806b6e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3538ef-4a64-4e57-8dcc-f3cde875e87e", "sighting_of_ref": "indicator--6e0e3e6d-f693-4b1d-accc-7009588291d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8287b2-fb2b-4250-a95a-36609c7cda0c", "sighting_of_ref": "indicator--6e0e3e6d-f693-4b1d-accc-7009588291d4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba246a7-28c5-4eac-9ce9-2b2e12793a3a", "sighting_of_ref": "indicator--6e0e3e6d-f693-4b1d-accc-7009588291d4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b02928f-72e2-435a-88a5-4f4621336d36", "sighting_of_ref": "indicator--d4ed7758-2cd4-4f3a-87a8-c96cca66cf82", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef85d08e-dfea-43b4-b1f4-b3b308f39aed", "sighting_of_ref": "indicator--d4ed7758-2cd4-4f3a-87a8-c96cca66cf82", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2944554a-b603-46dd-9c5f-953bac269557", "sighting_of_ref": "indicator--d4ed7758-2cd4-4f3a-87a8-c96cca66cf82", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b357a335-ac1d-4aa9-b315-71ad96bcccc4", "sighting_of_ref": "indicator--19b64b76-f029-4773-b533-64c2f623f3f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7e60cf-2eb5-452d-942b-ce4907f678d5", "sighting_of_ref": "indicator--19b64b76-f029-4773-b533-64c2f623f3f2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47534225-48d4-48ee-9ce9-8b5ec4e4ddb4", "sighting_of_ref": "indicator--19b64b76-f029-4773-b533-64c2f623f3f2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5249c0-1d63-476f-96b3-e0af863d3c66", "sighting_of_ref": "indicator--049ab0ba-b793-43ca-950f-3df1708991d9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28d73a8-6acb-4812-8af8-07d52279f483", "sighting_of_ref": "indicator--049ab0ba-b793-43ca-950f-3df1708991d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f0e890-9df3-402e-819c-ee0d9d7d4c3f", "sighting_of_ref": "indicator--049ab0ba-b793-43ca-950f-3df1708991d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c088f1-3b97-4395-8862-49e88333ab94", "sighting_of_ref": "indicator--21feefc7-c6e3-4054-8590-77d4f5e15567", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac64e865-321d-48d1-bbe4-78a3d75adbd2", "sighting_of_ref": "indicator--21feefc7-c6e3-4054-8590-77d4f5e15567", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39345aaf-e8bf-47be-b871-99d75f324159", "sighting_of_ref": "indicator--21feefc7-c6e3-4054-8590-77d4f5e15567", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56f8cfd-0bdc-4851-a522-bc626f3bdbff", "sighting_of_ref": "indicator--7c3368b0-70fa-4180-8641-0d6b69a53f8a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a363f64b-adbd-4a61-b6a1-302016acb98c", "sighting_of_ref": "indicator--7c3368b0-70fa-4180-8641-0d6b69a53f8a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a090e4-8d3e-4775-9fb4-492ad9dfc324", "sighting_of_ref": "indicator--7c3368b0-70fa-4180-8641-0d6b69a53f8a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6cca957-ff86-4ddb-942b-680611b758df", "sighting_of_ref": "indicator--65d1eef0-5b2a-471d-89be-eaee9a5de379", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59193428-1624-4a33-a77e-9457258178c7", "sighting_of_ref": "indicator--80c8fbdf-8248-487a-b0e2-479bcd1e3769", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99a9f07-035f-4e7d-89d7-006a4933eccb", "sighting_of_ref": "indicator--3b49be9c-ccdc-44da-9289-a74d2eaf0318", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99914b3f-581a-40d2-87bd-749c1f2f9a45", "sighting_of_ref": "indicator--3b49be9c-ccdc-44da-9289-a74d2eaf0318", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da0449c-4c42-4baa-ab81-f748c2944477", "sighting_of_ref": "indicator--5eb3cdab-da44-4c9c-afb8-9d05b3dc6cdb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3354b5ee-b2b5-4ffe-96b5-21657516a03c", "sighting_of_ref": "indicator--d8deee7e-55fa-4e05-9622-8c72d5e9c703", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b98fab9-1459-46ec-bf6d-413d0326c897", "sighting_of_ref": "indicator--eb711ebf-4334-426f-b062-505ebdffcce1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa75646-0ab3-4f8d-a32d-46bb029330f6", "sighting_of_ref": "indicator--36437b00-a368-4519-aa34-b1e7cd9366f3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d9de78-d66f-4aeb-b99a-84eada37500d", "sighting_of_ref": "indicator--0fa31c65-37b0-433e-9570-75655b13e272", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413ae1ab-3acb-4996-aa9a-67a5e16bcbfc", "sighting_of_ref": "indicator--8b7927b6-c0bb-429b-a20d-1df3b317b9b7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2d4b30-2c51-4275-bd07-d7a292eb26c1", "sighting_of_ref": "indicator--ec210d90-45d0-49b7-8415-b49070283b75", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9feee5c6-81c0-4513-af4e-3aed847ea0d0", "sighting_of_ref": "indicator--83ae93cc-8919-472d-b09d-c9c7dc151dc5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b878c54-e7f9-453a-b901-26e2151f1f74", "sighting_of_ref": "indicator--1be1301a-1ead-4279-b67f-c2b4150838d5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaaa72fd-0399-4392-ad99-726d35886e8e", "sighting_of_ref": "indicator--802d5b94-cb5f-40ab-85bf-8e9f4ded85c4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c51fa64-7daf-446b-8260-2d6b46cb0209", "sighting_of_ref": "indicator--1c9608ad-e40b-4431-93de-59df212c6f60", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21738ac8-a471-46ac-90a8-8f5be6aa60d0", "sighting_of_ref": "indicator--1c9608ad-e40b-4431-93de-59df212c6f60", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d1915e-e1e6-4b81-8394-50286e526bfb", "sighting_of_ref": "indicator--1ef7d85f-4da4-4168-9191-e2f67de2b274", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03c5fb6-e0c9-405f-b0af-ee07a6715a8d", "sighting_of_ref": "indicator--b3e9faa1-a3ba-4048-bc47-7a8ef920fe37", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5f5656-cbdc-4193-8b02-e2f93b4c6ff8", "sighting_of_ref": "indicator--b3e9faa1-a3ba-4048-bc47-7a8ef920fe37", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e72a429-f6ba-4fc7-bc08-154e91db4940", "sighting_of_ref": "indicator--b3e9faa1-a3ba-4048-bc47-7a8ef920fe37", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b73d91-0af9-4652-abc6-ad0bca34909b", "sighting_of_ref": "indicator--3a835563-2b17-4de9-8fd8-d6c3156420e4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d938fc64-edb9-4251-bce2-043dbff5db47", "sighting_of_ref": "indicator--3a835563-2b17-4de9-8fd8-d6c3156420e4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e58c29f-37f8-4c5b-bed3-95b4566142a4", "sighting_of_ref": "indicator--4c63ecb3-e9e0-4b3d-a584-6b69c1c8fec5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d97ebd9-2b17-4e11-9e96-7df0e89bf58e", "sighting_of_ref": "indicator--4c63ecb3-e9e0-4b3d-a584-6b69c1c8fec5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93adc941-d122-4954-ba63-eee23a9931d3", "sighting_of_ref": "indicator--4c63ecb3-e9e0-4b3d-a584-6b69c1c8fec5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86214dab-bae7-41d2-ada9-b4432661032e", "sighting_of_ref": "indicator--222bb9c4-8665-4a73-8381-8eec0c285b41", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8499c2-87e3-4c70-af99-8cfe327762d4", "sighting_of_ref": "indicator--222bb9c4-8665-4a73-8381-8eec0c285b41", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48378498-a7d5-4854-b097-86e55e3b1418", "sighting_of_ref": "indicator--88e406a6-04b7-4d9c-88b6-aab7d9bfd37b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adde724-90b4-440b-bda3-17d892961e30", "sighting_of_ref": "indicator--88e406a6-04b7-4d9c-88b6-aab7d9bfd37b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fff95eb-6838-439e-8dd7-e45d12a1b809", "sighting_of_ref": "indicator--88e406a6-04b7-4d9c-88b6-aab7d9bfd37b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b41947-ae43-4b38-8e72-684753c82b1c", "sighting_of_ref": "indicator--e2a90ecf-9cd7-4481-9eda-a22a424cac28", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c6022a-ff28-43cd-bbfb-cf33af308769", "sighting_of_ref": "indicator--e2a90ecf-9cd7-4481-9eda-a22a424cac28", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e6f63c-40aa-4dd3-a954-9b38da982c97", "sighting_of_ref": "indicator--747e77a0-226f-4160-a1d7-8dd1ab74c63b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e60ead5-7a97-46dc-94c4-bb4767c42f30", "sighting_of_ref": "indicator--15077818-c500-4544-9b47-dcdef4ca3ae0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d463e46-d74d-42f6-b133-679b99a3e920", "sighting_of_ref": "indicator--9a343450-6693-45a0-a791-56e9ddc160c7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b5f2ac-50d9-415d-87dc-e28052b5083a", "sighting_of_ref": "indicator--aa22c492-fc77-4d86-957a-2c853157502f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f008ae8-c58f-4a2a-9b36-78d61c69a902", "sighting_of_ref": "indicator--87d8c7e8-3e0a-4eb8-8fe8-27d66459de82", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6a8928-ffa0-4f05-9d91-7b59f6d4c398", "sighting_of_ref": "indicator--87d8c7e8-3e0a-4eb8-8fe8-27d66459de82", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0343707-2a81-4e2c-8606-4092aca30365", "sighting_of_ref": "indicator--def386c6-4a84-4763-a2ce-20413de74f26", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96191ad-74ed-4cca-ba8c-70a2f528b6b9", "sighting_of_ref": "indicator--ca4f7941-3aa2-4ebe-b357-5aa97dd8f43f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52de2443-8d24-4899-90d2-152222b79f04", "sighting_of_ref": "indicator--ca4f7941-3aa2-4ebe-b357-5aa97dd8f43f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0664ec-1d75-40ce-8b84-53e6352f8fad", "sighting_of_ref": "indicator--ca4f7941-3aa2-4ebe-b357-5aa97dd8f43f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c57ac6-060e-4d5f-8d75-1b32d4436d30", "sighting_of_ref": "indicator--a8661924-d3d6-4193-9d43-583f8b5b7ae7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977d0227-939f-4a87-aa57-15a97dda29fc", "sighting_of_ref": "indicator--6fcfbe64-97ba-4820-a754-7f829ed1874d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9137a634-f591-4768-886f-279ecd10ca9d", "sighting_of_ref": "indicator--24e64435-bb49-4e8e-bb45-2a7c9a279c1f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2df4431-cd51-4182-b5ff-141304d44ac5", "sighting_of_ref": "indicator--24e64435-bb49-4e8e-bb45-2a7c9a279c1f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff4afb0-61b3-4d15-a92b-546bc68b114f", "sighting_of_ref": "indicator--0eb02bc6-6c4e-4a43-a5ab-f30345f4878c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f66f453-5b8e-4d37-9d46-761e33786f84", "sighting_of_ref": "indicator--0eb02bc6-6c4e-4a43-a5ab-f30345f4878c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516ede14-07f5-433c-95a1-8aaa11900b33", "sighting_of_ref": "indicator--0eb02bc6-6c4e-4a43-a5ab-f30345f4878c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62198983-990a-4cfb-b823-7eb2d2ad2d41", "sighting_of_ref": "indicator--0d103834-feb1-4652-8b67-100975dd6714", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f34fe0-97c3-4b3e-b7a8-554537ff5609", "sighting_of_ref": "indicator--0d103834-feb1-4652-8b67-100975dd6714", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f400b584-42eb-4bfb-9b1f-3975ff26cac7", "sighting_of_ref": "indicator--e36cc2ca-8aa0-4091-a8c3-bc90faadcdaa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1292ab2c-fa3f-429a-80a4-895e444f53af", "sighting_of_ref": "indicator--e36cc2ca-8aa0-4091-a8c3-bc90faadcdaa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bfcd3d-893a-4466-9c1e-03f9924e5902", "sighting_of_ref": "indicator--e36cc2ca-8aa0-4091-a8c3-bc90faadcdaa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b11df07-766a-4f69-bb8c-e2975d88e43a", "sighting_of_ref": "indicator--2ef3dfd6-22d1-4793-b1fb-04fa9ff9a225", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9087ea4c-a3e3-403d-98ea-e4978bc850e7", "sighting_of_ref": "indicator--2ef3dfd6-22d1-4793-b1fb-04fa9ff9a225", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac326374-cd02-48e7-8c61-5f61ec29014f", "sighting_of_ref": "indicator--2ef3dfd6-22d1-4793-b1fb-04fa9ff9a225", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683af9b5-3fd1-4d25-a89a-a81efefdae4c", "sighting_of_ref": "indicator--29ed93e4-147e-482e-8c31-6df26271efea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f557940-ad48-4d40-a92e-2e2ec9d4cabc", "sighting_of_ref": "indicator--29ed93e4-147e-482e-8c31-6df26271efea", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53082998-fe98-4e2b-b5e1-55886e070e1b", "sighting_of_ref": "indicator--29ed93e4-147e-482e-8c31-6df26271efea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdbb024-a964-4553-b6be-c2fc3f57a6a7", "sighting_of_ref": "indicator--a61d3968-3382-45dd-8d87-860e6ee0bb12", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43eddd83-9340-489f-b946-f2eb0a6704d6", "sighting_of_ref": "indicator--a61d3968-3382-45dd-8d87-860e6ee0bb12", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a28181d-20fd-4e88-b1bc-c85a1f100945", "sighting_of_ref": "indicator--a61d3968-3382-45dd-8d87-860e6ee0bb12", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c9c4db-b0ea-417c-b15c-893483747a93", "sighting_of_ref": "indicator--3710d730-826b-4a1a-a328-7459411cb1b8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1bbf3e-407b-437a-9238-31d6523b0c95", "sighting_of_ref": "indicator--3710d730-826b-4a1a-a328-7459411cb1b8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fba7fb3-6b75-4e7f-b2fa-028e84b3731e", "sighting_of_ref": "indicator--3710d730-826b-4a1a-a328-7459411cb1b8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edc2a36-f8e7-4cca-8e7b-76f915d400b1", "sighting_of_ref": "indicator--efcb3e70-fcab-4ee9-8810-6a3e960f87fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d7bae3-78e4-4b89-bd22-fca95d91c423", "sighting_of_ref": "indicator--efcb3e70-fcab-4ee9-8810-6a3e960f87fe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524ab0a7-5c78-4651-b110-4dbc714010e7", "sighting_of_ref": "indicator--efcb3e70-fcab-4ee9-8810-6a3e960f87fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d70e5a5-d2ab-455b-a32e-654622ebecb1", "sighting_of_ref": "indicator--23b655d6-5c75-4359-9349-2197013bcdc5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9203d85-a54a-49fb-bf6d-4beddc47b27b", "sighting_of_ref": "indicator--23b655d6-5c75-4359-9349-2197013bcdc5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973d0310-0abd-4af3-a7a0-02fa2f1914ca", "sighting_of_ref": "indicator--23b655d6-5c75-4359-9349-2197013bcdc5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f389fb2b-bd6e-4989-abb7-573ebf9fda93", "sighting_of_ref": "indicator--0779cda4-6492-4ecd-a33b-d54955986955", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be7a031-9701-498e-9382-b5851cfc040d", "sighting_of_ref": "indicator--0779cda4-6492-4ecd-a33b-d54955986955", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fb7545-b06a-431b-9547-564657de5256", "sighting_of_ref": "indicator--0779cda4-6492-4ecd-a33b-d54955986955", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31251f7-57fa-49f9-b93f-6defed9e6986", "sighting_of_ref": "indicator--cf832d74-3e4b-4078-aa56-f2c1f100785f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58791df-8682-4219-80f9-82907ba9ba8e", "sighting_of_ref": "indicator--cf832d74-3e4b-4078-aa56-f2c1f100785f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767232ad-f6dc-47ee-b99e-7fec460c2f76", "sighting_of_ref": "indicator--cf832d74-3e4b-4078-aa56-f2c1f100785f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c7a107-8d8d-4078-a0d2-ed250f0271cd", "sighting_of_ref": "indicator--708e45dc-aad9-4461-bd36-b12014c15e32", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef36ba3-9540-4a92-a775-cff413bd94b1", "sighting_of_ref": "indicator--708e45dc-aad9-4461-bd36-b12014c15e32", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317e5814-62b7-435c-8188-89a1e284dc30", "sighting_of_ref": "indicator--708e45dc-aad9-4461-bd36-b12014c15e32", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9eeae32-9f9e-49c6-8af6-a34be3004593", "sighting_of_ref": "indicator--a624cafe-0ae4-4615-8762-6bb76dd2da6d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64c4d06-1cbf-40f7-b325-ecfc041cdcf4", "sighting_of_ref": "indicator--a624cafe-0ae4-4615-8762-6bb76dd2da6d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17d3782-4a50-4086-b12d-c78c2d112f8b", "sighting_of_ref": "indicator--a624cafe-0ae4-4615-8762-6bb76dd2da6d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3947a6d-a086-4c44-a0f7-48ccc456d8f2", "sighting_of_ref": "indicator--a6d37db7-aef8-47ef-93d4-68302c6d5568", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56d52f0-2bd4-494b-a5bd-2230a0a4efb9", "sighting_of_ref": "indicator--f1e417ed-1291-4d99-909f-c6f1cfc80b22", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44aba46d-fd3a-429c-b6db-ff7d8cdf1cb3", "sighting_of_ref": "indicator--f1e417ed-1291-4d99-909f-c6f1cfc80b22", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a780aa96-b08e-4d1f-b539-2ee6a5861fc3", "sighting_of_ref": "indicator--70be00eb-bd97-4572-bd28-472d292e7d33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef477be-ea7b-47a0-a09f-981089a47364", "sighting_of_ref": "indicator--b13d50fc-ba88-4640-904b-59591747cc3c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b000314c-561d-406b-b444-1e9a3c25689f", "sighting_of_ref": "indicator--fa28d7d9-bf5b-4675-bf9a-8860482cfd66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c90336-6836-49e8-bfa7-4f2bd9aff4c4", "sighting_of_ref": "indicator--db11970c-6aa9-4837-aba5-0234b1d30143", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9ed4fa-be3d-4fd0-b844-a8a0203e3fd6", "sighting_of_ref": "indicator--db11970c-6aa9-4837-aba5-0234b1d30143", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0b92e6-0543-4d10-9fd6-fbb8ab224f72", "sighting_of_ref": "indicator--c95a4b4c-2407-4f03-910b-e64cfc104fb8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fcff33-c394-4313-b42d-bc669e65198b", "sighting_of_ref": "indicator--2ac0e351-90bb-444d-8f47-69698151fe83", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb263fa5-d5bc-4db0-9211-254cac754771", "sighting_of_ref": "indicator--2ac0e351-90bb-444d-8f47-69698151fe83", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc49714-1fe5-4c1f-bccf-d291145d8cb4", "sighting_of_ref": "indicator--76580c08-06bc-4e71-b566-f3519ef0c553", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d1147d-3d57-4625-b1dd-68dc52db96f5", "sighting_of_ref": "indicator--f210b76f-4bc4-42b2-9604-6e91ab861da8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2471d7a-7ab7-4c9e-abf3-77888cb4a5a4", "sighting_of_ref": "indicator--f210b76f-4bc4-42b2-9604-6e91ab861da8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11801a5e-9447-4693-a189-95d5edf486f2", "sighting_of_ref": "indicator--85ba253d-8298-43d7-8524-2e0e1d763464", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098b074d-19f9-4318-9c6f-7c62c97b2039", "sighting_of_ref": "indicator--85ba253d-8298-43d7-8524-2e0e1d763464", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07311c3-a585-4943-8a4f-8fc9f158a0a5", "sighting_of_ref": "indicator--85ba253d-8298-43d7-8524-2e0e1d763464", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79698c8-dfa7-45c2-8d34-68d7b34de29a", "sighting_of_ref": "indicator--bd14f588-97cd-4e10-ba88-88779a70787a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30faf329-9f42-47f3-9571-690b839554c3", "sighting_of_ref": "indicator--bd14f588-97cd-4e10-ba88-88779a70787a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b74db8-35a7-436b-b2a8-d61f1e3cb24a", "sighting_of_ref": "indicator--bd14f588-97cd-4e10-ba88-88779a70787a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514877ed-79d8-4ab3-aead-6bdd62028819", "sighting_of_ref": "indicator--8c6445fb-408d-4237-9b3b-4bbbebb1890c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dd04e4-cb38-45a0-9d48-44454e46f987", "sighting_of_ref": "indicator--5cb896ce-de2b-4b24-9cf7-6cacd224e638", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eaa1c11-c305-4327-a0b7-241a8d6df5e9", "sighting_of_ref": "indicator--6cffa083-ffd2-457a-aaa3-b576da5ad04b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fcddc3-767c-49aa-bf31-ca9cc878e6af", "sighting_of_ref": "indicator--4c9aacd3-14d9-470d-b6cd-5702c513a718", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fb94a4-406e-4eef-8133-ecff94bf2d81", "sighting_of_ref": "indicator--4c9aacd3-14d9-470d-b6cd-5702c513a718", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07373400-15c9-4af7-ab05-670842c5871b", "sighting_of_ref": "indicator--4c9aacd3-14d9-470d-b6cd-5702c513a718", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6933cf-9f50-4436-9c00-e15f3ada4a55", "sighting_of_ref": "indicator--2ab85259-b108-4ac4-97dd-614f5aee0d15", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b98b92-54fe-4ee9-b108-1c3d266f3abd", "sighting_of_ref": "indicator--7374d0c1-a733-4841-87c8-3785d77811cb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e46c225-60a4-4fd8-bea2-1241d19466fb", "sighting_of_ref": "indicator--1efe5fb4-898e-4047-8b82-4245a56e1581", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a27170-e80e-4cdf-8aee-d211bd2e0394", "sighting_of_ref": "indicator--1efe5fb4-898e-4047-8b82-4245a56e1581", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869ad81b-4b23-4c9a-bc7a-eb18a913dd0e", "sighting_of_ref": "indicator--a0a1945e-fe58-4c51-937b-2d5ff39ff491", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb6901d-8692-4819-af33-98582b749b13", "sighting_of_ref": "indicator--f4cc2f32-bd8e-4c07-9fd5-0717672965b3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1074018b-b77b-4e18-b284-12b89ec49a48", "sighting_of_ref": "indicator--63c0fb0b-35cd-4957-b862-559381fa648e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d475dc8-fa65-426d-b883-a04ffb39d8bf", "sighting_of_ref": "indicator--60ced70b-4073-4d27-bb55-5f6d77cc7923", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d07945-aad0-4fa0-a39d-31376d80ef7f", "sighting_of_ref": "indicator--92442e48-b418-4240-bf55-77659e93e129", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913093a9-0f43-442c-9a9f-db88f81416ac", "sighting_of_ref": "indicator--92442e48-b418-4240-bf55-77659e93e129", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c51d0b0-0e08-4984-9806-2b5b6deaf462", "sighting_of_ref": "indicator--92442e48-b418-4240-bf55-77659e93e129", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26d3dd6-beb9-46c5-b0b9-7a9c1c67dd5f", "sighting_of_ref": "indicator--bb932643-a20f-4b95-baf6-3b33c55be91b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdbcb96-07c8-45f0-b591-ca336e8a5ea1", "sighting_of_ref": "indicator--9f150740-891d-4bf4-936f-a681ce909e1c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b35f947-cb32-4746-bc80-c9d5ea24e45d", "sighting_of_ref": "indicator--c4820d40-426d-40b0-be30-f0e7f4c1c540", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b48afbc-7ece-49eb-9642-d8474a2f40bf", "sighting_of_ref": "indicator--566a224f-97a3-41e3-a121-dc22f1b7e105", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e2f91a-4346-4ad4-bf87-531a00e686f5", "sighting_of_ref": "indicator--eeadf32d-b46e-4592-9a0b-8b2a2d3d3a83", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614385d4-2b7f-4f38-b24e-191ed8bf7d0f", "sighting_of_ref": "indicator--306619c6-123b-4c99-b28e-6a228484701c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a06967-4e58-4160-a44a-1a90ef5fbfad", "sighting_of_ref": "indicator--33c7628c-1074-4d32-8220-9d0dd688a6b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dce001-0f2b-4f09-b54a-ce236e55073c", "sighting_of_ref": "indicator--047dcca8-c1ce-4bb4-9d44-a32acfbce9fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41129eb4-3c83-410d-b838-9bdbfe7f4fee", "sighting_of_ref": "indicator--ea408a2d-b3e7-4f65-b374-408fe250cf78", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2ea843-5f2f-4952-9a45-cc8ec30e4939", "sighting_of_ref": "indicator--368d633f-649b-422d-9c6e-d486f35e7461", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbdd22a-1912-420a-9e30-c4475619dd55", "sighting_of_ref": "indicator--d3298454-47e3-4515-9445-8e23f6b89cd9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e0f5bd-58ab-46da-9042-5156c142d061", "sighting_of_ref": "indicator--fc5f26b2-c39b-48f9-a0a9-72e95ee8330d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb69555-a233-4eb3-af80-9d1fa6568c53", "sighting_of_ref": "indicator--8bc3ebf9-4370-4839-ba9a-e22c5b0af8ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a5bf50-09b5-4dc7-a2c6-c260f1e20724", "sighting_of_ref": "indicator--b1919e72-5f1c-41b6-9bee-65fab943199f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d03ee6a-4d99-4bbb-8007-37c91aa20888", "sighting_of_ref": "indicator--6f0844fb-67f7-4959-a414-4eda025e3d4b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577d7760-88c4-4904-9188-72633bf788ed", "sighting_of_ref": "indicator--04a602e9-9918-4743-bd4c-b6370c0b9a6e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56477f68-9ac2-430c-9e64-88006f31ef5e", "sighting_of_ref": "indicator--f5aea26f-cb8b-4ece-b2f4-76990d4d5c72", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5045ea-cf0d-4cb8-8506-c44b270988a5", "sighting_of_ref": "indicator--f5aea26f-cb8b-4ece-b2f4-76990d4d5c72", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1d7c92-c929-497b-81a9-2a100c6123bb", "sighting_of_ref": "indicator--f5aea26f-cb8b-4ece-b2f4-76990d4d5c72", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e98a811-787e-4463-b97c-bf42cde0c805", "sighting_of_ref": "indicator--3b070b78-06c2-429a-97bf-82c851ae2f56", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f166d5-a3ce-4d54-a501-02f20f26c87b", "sighting_of_ref": "indicator--3b070b78-06c2-429a-97bf-82c851ae2f56", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af0af2c-33f4-408e-8cc6-82bb33e9c26e", "sighting_of_ref": "indicator--f1432ea7-d34d-4101-968e-3c53340cf33f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fad1f0-9324-4bcb-969f-0925f9064a35", "sighting_of_ref": "indicator--f1432ea7-d34d-4101-968e-3c53340cf33f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0386dfd-7298-4e16-a321-02a2bfb577d0", "sighting_of_ref": "indicator--f1432ea7-d34d-4101-968e-3c53340cf33f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d96435-288e-4f79-aac1-27e14afe7456", "sighting_of_ref": "indicator--5d19c7d0-2685-446f-b2cc-8305b63225e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328fb824-5c57-4941-9a65-bf9237ca0065", "sighting_of_ref": "indicator--5d19c7d0-2685-446f-b2cc-8305b63225e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550d6404-284b-4cba-bc3f-9bc6cf6258fd", "sighting_of_ref": "indicator--fa2b3e6a-f9a6-4197-8d02-73c7c1c7c2c0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abbc2e8-f2f4-4d5d-9117-2765f88cf151", "sighting_of_ref": "indicator--ba3ea200-bdab-43f2-a647-2e487f4ecb2c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dd569b-9ce6-4e54-8109-dbe283c2b24b", "sighting_of_ref": "indicator--8fce150b-211a-40f9-8705-798f7617b419", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e97717b-7641-4b3f-8642-79c829acb0c4", "sighting_of_ref": "indicator--3397e7fe-e601-47d5-a00e-4982506f5343", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36590ce-3bba-493e-93ed-cc5fc884bc4c", "sighting_of_ref": "indicator--73c005cd-f13c-41a6-9cc9-f2a3b078b9d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f8b44e-c181-4c21-b54c-cb150807c7a0", "sighting_of_ref": "indicator--93f765b7-a427-43af-bac9-55f6dbb49d55", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ecd5ff-ff99-46d3-acd7-c9681e7e4ffc", "sighting_of_ref": "indicator--106fa1fa-e5f5-4e39-88c8-0479c606348e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a80355e-02f8-44ae-99fc-67d7e455a941", "sighting_of_ref": "indicator--aecf97a2-97ea-4ebe-aa1e-007ca3042c3e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af8e375-2d7f-4a5f-a675-ccacb2f4399b", "sighting_of_ref": "indicator--77db8809-2948-4ee8-adfe-819153b4a9e4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44247952-ed5f-401d-8c39-499c1529c934", "sighting_of_ref": "indicator--77db8809-2948-4ee8-adfe-819153b4a9e4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a262b0-efc7-4f79-af05-92959f9769cb", "sighting_of_ref": "indicator--1c9cb981-5a48-4956-acbe-2d6f18ce9991", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4ec9f7-c299-4040-bcce-3f53167fbece", "sighting_of_ref": "indicator--1c9cb981-5a48-4956-acbe-2d6f18ce9991", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15b8653-1ece-4947-804c-069f87cc70c8", "sighting_of_ref": "indicator--1c9cb981-5a48-4956-acbe-2d6f18ce9991", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec0cc66-1467-46c7-859f-01da7574262a", "sighting_of_ref": "indicator--1c9cb981-5a48-4956-acbe-2d6f18ce9991", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c523653-6979-4a9e-ab79-0cd12775e5bb", "sighting_of_ref": "indicator--1282b1b7-b308-47b7-91cf-50eb9e28b50b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4c62bd-4ccf-4484-ad7b-6ef1387cf4a0", "sighting_of_ref": "indicator--1282b1b7-b308-47b7-91cf-50eb9e28b50b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e31b4a-ade9-48a7-8a38-2f669ed593ad", "sighting_of_ref": "indicator--1282b1b7-b308-47b7-91cf-50eb9e28b50b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efe9f10-e0d6-4085-95e6-3e74a52e2cac", "sighting_of_ref": "indicator--fd224bb4-a5c5-4569-b682-e2dbff52d4ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80acaa6e-ddee-4faa-bc7d-c36d68747547", "sighting_of_ref": "indicator--fd224bb4-a5c5-4569-b682-e2dbff52d4ec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756f2cc5-e271-4d5e-9338-73464b820b88", "sighting_of_ref": "indicator--fd224bb4-a5c5-4569-b682-e2dbff52d4ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0769ec12-87fe-4aaa-85b5-ab0072a77a4a", "sighting_of_ref": "indicator--30ea7564-2004-4673-90c4-1d2bdb6f22a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6434410-ce6a-46e1-a1cb-ba1a7909ef3a", "sighting_of_ref": "indicator--30ea7564-2004-4673-90c4-1d2bdb6f22a8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a762740e-2df1-4ee8-bee4-3400827812c2", "sighting_of_ref": "indicator--30ea7564-2004-4673-90c4-1d2bdb6f22a8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b9d135-e8c3-4ac3-9442-e8bfa07ae521", "sighting_of_ref": "indicator--30ea7564-2004-4673-90c4-1d2bdb6f22a8", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42650ddf-38ff-4012-ab54-8f74bbf7f8fe", "sighting_of_ref": "indicator--1340000f-2e63-4df1-989d-60697c203909", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88506198-86c9-481d-885e-331f10bc6897", "sighting_of_ref": "indicator--1340000f-2e63-4df1-989d-60697c203909", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac86585f-c8b5-44b9-835b-aa2b0b510721", "sighting_of_ref": "indicator--1340000f-2e63-4df1-989d-60697c203909", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36b6623-792f-46f6-ba08-7ea30e198e21", "sighting_of_ref": "indicator--13b1cd66-8098-4280-a2a3-e2b4bd9c2119", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fad9c7-9131-437b-a126-8d58743dc4a7", "sighting_of_ref": "indicator--fd580c48-a398-4795-abb1-98180d5a4f1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13116e31-8fbe-4b92-afe7-8c300326775b", "sighting_of_ref": "indicator--82bb8758-f450-4e19-a10c-aea6f1b1409b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a855b56-412c-4297-9f46-3e8ae60e16d5", "sighting_of_ref": "indicator--7f59eedf-d1cd-436b-a6d3-bd3068906540", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212d07a9-f152-4efe-aa90-d330d15eb26f", "sighting_of_ref": "indicator--e52b702c-9595-4740-b323-54a080ed402e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ba7abd-2a81-4b74-8a45-942e6a3113ac", "sighting_of_ref": "indicator--01b28841-d5c2-4d48-a010-850a5ffac9d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f733394-3b5b-484b-a6e7-5127479011f1", "sighting_of_ref": "indicator--01b28841-d5c2-4d48-a010-850a5ffac9d4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027ceb1c-5301-45be-9eff-5e9f00732aef", "sighting_of_ref": "indicator--01b28841-d5c2-4d48-a010-850a5ffac9d4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c935d11-c698-469f-b868-812f779762a3", "sighting_of_ref": "indicator--788d6b83-f597-4668-b845-9d47c685b083", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b0e1d7-fd4b-4d2d-8e3a-e616573df350", "sighting_of_ref": "indicator--788d6b83-f597-4668-b845-9d47c685b083", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aeab04b-a95f-42d3-9e3e-90258b49fd65", "sighting_of_ref": "indicator--788d6b83-f597-4668-b845-9d47c685b083", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf94283-3815-46c2-8dcb-fff075e7e70a", "sighting_of_ref": "indicator--1d3f9bfd-8071-4802-a763-53a99d2f0af3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868d0b4e-dec4-43d3-ba18-77ef100aa8f8", "sighting_of_ref": "indicator--1d3f9bfd-8071-4802-a763-53a99d2f0af3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fb8ca4-0b3b-4e87-b99f-da9ba5ceb9f0", "sighting_of_ref": "indicator--1d3f9bfd-8071-4802-a763-53a99d2f0af3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6b6826-34d1-47ca-87bf-01e1faa95f19", "sighting_of_ref": "indicator--76e26dda-2051-45a0-916c-02a5698807c5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf00483-dc0b-4d61-b7a5-37490081596e", "sighting_of_ref": "indicator--76e26dda-2051-45a0-916c-02a5698807c5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24227199-9098-4d8d-a1ef-71837d369979", "sighting_of_ref": "indicator--76e26dda-2051-45a0-916c-02a5698807c5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd91dfef-1c84-482b-a058-fcd2c95a8201", "sighting_of_ref": "indicator--5d058b31-78c4-4853-ab90-9e6514147896", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e496d9c-a030-4177-9260-02166858b888", "sighting_of_ref": "indicator--5d058b31-78c4-4853-ab90-9e6514147896", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a3225a-c57f-4633-a162-2ed643b024a4", "sighting_of_ref": "indicator--5d058b31-78c4-4853-ab90-9e6514147896", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4820475e-d0eb-47e2-a178-587e507a2191", "sighting_of_ref": "indicator--30c39929-6a5f-4ba1-9cc4-2e39b3bef7ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93673b5d-3a77-42a4-bdc7-faef12918437", "sighting_of_ref": "indicator--741e0e54-ac48-4bff-aa4f-daf0f9125716", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fca6b2-291e-499f-8ec7-5befa24f9122", "sighting_of_ref": "indicator--741e0e54-ac48-4bff-aa4f-daf0f9125716", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73095e91-1810-4bfb-81f2-299f03cd8966", "sighting_of_ref": "indicator--741e0e54-ac48-4bff-aa4f-daf0f9125716", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94668e07-365c-4e99-8b99-1cb90435e9a9", "sighting_of_ref": "indicator--b34624a7-1e67-41eb-9f3f-51bb5b6308b7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d6c91b-a236-4103-8315-2eab16edb2e2", "sighting_of_ref": "indicator--7404f506-f511-410c-99f0-dfc14224a8c4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e38742-fae7-4675-a05d-651088f3e411", "sighting_of_ref": "indicator--7404f506-f511-410c-99f0-dfc14224a8c4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b623846-3c98-45a4-886f-3f299c1c3639", "sighting_of_ref": "indicator--7404f506-f511-410c-99f0-dfc14224a8c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6aa6c4a-9558-45f2-bbb5-ac42de8a6710", "sighting_of_ref": "indicator--bcc941e4-5693-48d5-9ebb-539728fe4e9c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a8be8b-1fb6-47fd-a1db-6961b4c59486", "sighting_of_ref": "indicator--bcc941e4-5693-48d5-9ebb-539728fe4e9c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bed9bdc-e6f0-449b-9bb3-d8f3140dcfcd", "sighting_of_ref": "indicator--bcc941e4-5693-48d5-9ebb-539728fe4e9c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80041d4a-6b7b-4cbb-8b15-17bd5ded457d", "sighting_of_ref": "indicator--f8fa5eba-70c9-4476-bff1-d21c13e253d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f419de6-66cd-4c38-942d-6bff2285d721", "sighting_of_ref": "indicator--f8fa5eba-70c9-4476-bff1-d21c13e253d4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc55d52d-153c-45df-8088-11a40c37cc48", "sighting_of_ref": "indicator--f8fa5eba-70c9-4476-bff1-d21c13e253d4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adc29f7-b9ac-4891-9af5-3c3ade5c2bbe", "sighting_of_ref": "indicator--798fc382-d4a0-486e-a535-759b32bbf322", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61cf8eb-72ef-4252-8198-8117bfd0b209", "sighting_of_ref": "indicator--798fc382-d4a0-486e-a535-759b32bbf322", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a137b45-445c-4474-8de7-89ac16f488e1", "sighting_of_ref": "indicator--798fc382-d4a0-486e-a535-759b32bbf322", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e17199-4ce7-44aa-9e7d-f2112a2274cb", "sighting_of_ref": "indicator--d2c000f1-ff5b-4ba8-af78-dafff690995f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df97c32-d94a-47ea-b82b-0c7a2de06841", "sighting_of_ref": "indicator--d2c000f1-ff5b-4ba8-af78-dafff690995f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04429339-2a02-46cf-997b-5ee4b13a4b9d", "sighting_of_ref": "indicator--d2c000f1-ff5b-4ba8-af78-dafff690995f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e6ba9d-5dc1-4639-b428-6be6ee913b61", "sighting_of_ref": "indicator--8398b20a-a762-478e-9189-91876641a0d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be140cd-b3e5-4ed9-8e3a-d1debece93f2", "sighting_of_ref": "indicator--8398b20a-a762-478e-9189-91876641a0d5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad522959-a050-425a-a7a4-6dc22a92d87f", "sighting_of_ref": "indicator--1654aa99-8a48-41ad-b3de-0c4275b7b120", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88f1920-0846-4b52-bfbb-9d53a6bfcce3", "sighting_of_ref": "indicator--1654aa99-8a48-41ad-b3de-0c4275b7b120", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040d1c99-2710-4538-a3f7-644c1e5b0603", "sighting_of_ref": "indicator--1654aa99-8a48-41ad-b3de-0c4275b7b120", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e37643-08e9-4849-8a36-009ccabd556c", "sighting_of_ref": "indicator--e5592697-6708-4073-aee6-b46c5c42dd2d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f690c6-ed1f-43c1-8d6c-447c4ce6eae1", "sighting_of_ref": "indicator--e5592697-6708-4073-aee6-b46c5c42dd2d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c226c6-c8ae-4bb9-9113-3ed673aabdcd", "sighting_of_ref": "indicator--e5592697-6708-4073-aee6-b46c5c42dd2d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3976c4d1-2d74-4d0d-ba22-89ef89f9dbfd", "sighting_of_ref": "indicator--e238c8b1-392d-4b6c-ae98-381b925d015f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809837c1-9f62-4670-bfeb-ed6eb59928e7", "sighting_of_ref": "indicator--e238c8b1-392d-4b6c-ae98-381b925d015f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57809d65-7c80-4fb9-aeaf-7ef484809abc", "sighting_of_ref": "indicator--e238c8b1-392d-4b6c-ae98-381b925d015f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d97108-44fd-4c59-9f4e-61f512df92d8", "sighting_of_ref": "indicator--43796c07-abdc-45e0-abd7-fcb52668d644", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9598de2e-1b6c-46d0-bba0-21ec4aebff9c", "sighting_of_ref": "indicator--43796c07-abdc-45e0-abd7-fcb52668d644", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9e78d8-6856-4a0e-ac14-fb272c8752bc", "sighting_of_ref": "indicator--43796c07-abdc-45e0-abd7-fcb52668d644", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c058903-2dfc-4f2a-b04d-ccf1dcba22c4", "sighting_of_ref": "indicator--fb2b8ba6-0e45-4c18-a1d8-f9960f5c44fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d30301-19dc-4bc1-8ff5-8725004f9a65", "sighting_of_ref": "indicator--fb2b8ba6-0e45-4c18-a1d8-f9960f5c44fe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626316dd-10a7-427a-9700-9cdd5fe03e4f", "sighting_of_ref": "indicator--fb2b8ba6-0e45-4c18-a1d8-f9960f5c44fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608309d7-141f-4480-b5b0-82349b9dfba2", "sighting_of_ref": "indicator--52ff1d69-81b8-402f-afd9-abca4c1558c7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29eda75-1c81-4e6e-8d8c-215d1933f893", "sighting_of_ref": "indicator--52ff1d69-81b8-402f-afd9-abca4c1558c7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba61ba8-f573-46a3-8d1b-fd1ea21e8b0f", "sighting_of_ref": "indicator--52ff1d69-81b8-402f-afd9-abca4c1558c7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9239346-e1f6-48a7-8f1f-05cc08a63fb1", "sighting_of_ref": "indicator--42f7ff04-5be2-424a-9121-87360cd54732", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3764a2e7-cb21-4343-960b-2534fb0179a1", "sighting_of_ref": "indicator--42f7ff04-5be2-424a-9121-87360cd54732", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03699f8-6e2a-402a-8a75-8dfc399362c7", "sighting_of_ref": "indicator--42f7ff04-5be2-424a-9121-87360cd54732", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32dcf9d-a404-4873-b291-0daabeaa68b7", "sighting_of_ref": "indicator--d555c856-bf97-455d-bee4-082cfd2cf552", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598ebef1-e7aa-49f5-ac2c-484044de5d8b", "sighting_of_ref": "indicator--d555c856-bf97-455d-bee4-082cfd2cf552", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18a14b7-f9f0-43cb-ae23-a6ee1875531a", "sighting_of_ref": "indicator--d555c856-bf97-455d-bee4-082cfd2cf552", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e99322-168a-478d-a131-7d98ae110c07", "sighting_of_ref": "indicator--7f15877b-5de7-4665-8575-4ae72ff1e13a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8def97c-27f1-46cf-a484-f31fb6ff9a14", "sighting_of_ref": "indicator--7f15877b-5de7-4665-8575-4ae72ff1e13a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a614c1-73bc-47ef-8bd5-0cbfcd077b8e", "sighting_of_ref": "indicator--7f15877b-5de7-4665-8575-4ae72ff1e13a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f31429a-9d54-4e10-85c6-1c3aeb6c58b7", "sighting_of_ref": "indicator--54a4f37b-9611-41c1-9740-e8fc7028abc2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ca332c-de60-4848-9f04-74b758bf2cd7", "sighting_of_ref": "indicator--54a4f37b-9611-41c1-9740-e8fc7028abc2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea84a0de-28a8-4ebe-93cf-43016dfb1949", "sighting_of_ref": "indicator--54a4f37b-9611-41c1-9740-e8fc7028abc2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7327bc-19c2-4ec9-ab74-54bd64416937", "sighting_of_ref": "indicator--fff7d4ab-11a6-4859-bcca-8b162b43dca7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a89d6c-157a-4044-8599-7d8e30d6b9c9", "sighting_of_ref": "indicator--fff7d4ab-11a6-4859-bcca-8b162b43dca7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747881b5-fe76-4a1e-a5e0-932d085a8e1a", "sighting_of_ref": "indicator--bf0bb612-ae50-41b8-b4a2-96417c5e8efb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650b7c4a-2353-400e-9104-7b4a8d256d24", "sighting_of_ref": "indicator--bf0bb612-ae50-41b8-b4a2-96417c5e8efb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2067f0-71f4-437a-bf88-042598d6f56b", "sighting_of_ref": "indicator--bf0bb612-ae50-41b8-b4a2-96417c5e8efb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7034f77e-f3ab-41ee-9aeb-89ab683ef64d", "sighting_of_ref": "indicator--4fcf1549-8400-49af-b93d-cbb414e9fad0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8aa982b-399b-450a-a928-1f275f555da0", "sighting_of_ref": "indicator--4fcf1549-8400-49af-b93d-cbb414e9fad0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703496a4-0cb5-4542-8880-c78412a25402", "sighting_of_ref": "indicator--4fcf1549-8400-49af-b93d-cbb414e9fad0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cabcc93-cdb9-4b32-9259-ea744e5d2697", "sighting_of_ref": "indicator--73a09bae-b4f7-4d49-94f0-342bbe7c6c8c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2194caf6-8147-491e-96af-601b0cffa552", "sighting_of_ref": "indicator--73a09bae-b4f7-4d49-94f0-342bbe7c6c8c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c2472d-0467-4ac4-97cd-9a8ac083b98e", "sighting_of_ref": "indicator--73a09bae-b4f7-4d49-94f0-342bbe7c6c8c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05560262-61d3-4693-95e6-b580a92e7722", "sighting_of_ref": "indicator--c5bc4149-c741-46d5-9c0a-2e13ead31cf9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e431bb3-f584-4f4c-901f-16bd935f8f90", "sighting_of_ref": "indicator--382d38ed-4a1b-4e5e-9e2f-8a47ea79e029", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812133b9-f29d-4162-992f-a88d87d94a07", "sighting_of_ref": "indicator--3dbe4112-9498-44e3-a5e3-09ba3659b4a1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6fe48d-b186-441b-866a-b8f0661e7541", "sighting_of_ref": "indicator--6679ca5d-1f29-4419-903c-51ca03388b4f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c79e757-1258-4ac5-bc59-4dd6663f44bf", "sighting_of_ref": "indicator--e10cd1bf-5261-4c19-af39-26ccb67c554c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964d8471-e3d9-4b98-ba80-ee1ec51e8e3e", "sighting_of_ref": "indicator--7ec0ec3d-20e7-4605-abe7-c72492f97331", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff945c40-8bbd-452c-b439-e6fc14e2495c", "sighting_of_ref": "indicator--c0c95980-4d01-4216-8d57-0a658b000a6b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823e467a-d871-4d1d-ad8c-3563271bae94", "sighting_of_ref": "indicator--d8557a0b-749b-4df5-a80b-5011747bae99", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e11cd68-8f2e-4256-a76b-5394c693e75b", "sighting_of_ref": "indicator--cfc2dbe4-395d-4504-ac0d-998373c2db61", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3b2f71-f3b5-4c4d-a77f-d2d9e3cb4ff4", "sighting_of_ref": "indicator--3e554e21-8d53-46fb-9d22-fc0951f0077e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19ddc35-5d4c-40c3-9f22-00b689452fd8", "sighting_of_ref": "indicator--5f5e815e-98af-40f3-b317-a9aa053416e4", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ff5890-68c7-4726-86ac-b54044d19dd9", "sighting_of_ref": "indicator--893f6d83-7bb2-4f64-9139-bf48759cb56d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaebfea6-8289-42a2-9df7-541d57b49544", "sighting_of_ref": "indicator--893f6d83-7bb2-4f64-9139-bf48759cb56d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208d3e95-1548-4783-92c5-e9b78c59e885", "sighting_of_ref": "indicator--893f6d83-7bb2-4f64-9139-bf48759cb56d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92af027f-176b-4290-8939-efb6cb617cdc", "sighting_of_ref": "indicator--bc448626-1981-4f92-8039-4869288ac7da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc91dd3-b6df-4a5d-bf09-65510cbb7320", "sighting_of_ref": "indicator--0b2e4627-859c-4ed4-8280-44485bb50d79", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b26820-384e-46dc-9b7d-1549bc9ba0a0", "sighting_of_ref": "indicator--b57afe65-7045-464f-a741-f4d5d462a191", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f546399d-caf0-4a0f-8ba5-c155a572d1de", "sighting_of_ref": "indicator--5532d75e-d474-4955-8db3-473ae947a28b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9aebb8d-c6c2-4167-9f0f-06829962b5dd", "sighting_of_ref": "indicator--e2feb125-4998-4938-8c11-c0c37c21ccde", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b387f5aa-d69a-4a94-9bc1-8d19e35b6bbc", "sighting_of_ref": "indicator--ecd5b978-04fc-49d9-865a-225a9314875a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2dbf33-032e-456e-9fc4-3508557b935d", "sighting_of_ref": "indicator--8bf6cef5-d51b-4737-862d-676da6c52cd2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb541ac6-76c8-4965-90a2-abb9f1f9484f", "sighting_of_ref": "indicator--99611186-6d3a-4b25-9cf1-d5e07569c6d1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abc730e-fd23-49ee-8325-993d2681c303", "sighting_of_ref": "indicator--cfff251d-2fb6-467a-b1dc-351d06067302", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e980300c-5657-41fd-8bc2-42af81c536e7", "sighting_of_ref": "indicator--cfff251d-2fb6-467a-b1dc-351d06067302", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bac30e-e5cd-4e27-8982-0fda02b0eb2a", "sighting_of_ref": "indicator--3846560f-beaa-4e66-8eda-4195cb8e68f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e375fa8-0ff4-4f0d-8406-7f089bbe3cfb", "sighting_of_ref": "indicator--3846560f-beaa-4e66-8eda-4195cb8e68f1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c459130-d0bd-4320-a0b5-ca9e0569294a", "sighting_of_ref": "indicator--0d2fca03-5a5b-4420-8c23-efab24699d59", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad88b5a0-f47b-43f4-8c92-f7105c1666fb", "sighting_of_ref": "indicator--0d2fca03-5a5b-4420-8c23-efab24699d59", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8c5ef4-ec08-4f8e-b570-dd824c6e4574", "sighting_of_ref": "indicator--e82097e1-c739-469c-8653-2ea406f8cebf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883093c6-fc0b-4b39-9d14-16f392f5ba7b", "sighting_of_ref": "indicator--d1ba591b-b8bd-4583-b61d-f7f3903e8cf2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51793b31-b7cc-4bf5-9920-f776e5da6eb6", "sighting_of_ref": "indicator--d1ba591b-b8bd-4583-b61d-f7f3903e8cf2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c759126d-2c0a-4494-8269-af8e6400c35b", "sighting_of_ref": "indicator--4c68e396-ee30-4e96-aa35-40379a937ee1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ad66d6-4600-4a31-a32b-eaeee9c2ccba", "sighting_of_ref": "indicator--cd2d8b2f-a3d1-43b7-a633-4d98a0df08ac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7f8058-5633-4f9f-b544-43c8c6a5c76f", "sighting_of_ref": "indicator--0d85faff-448b-42fd-b13f-f1da87ccbdd2", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92206735-9c9d-4e55-8e4a-203ea907be09", "sighting_of_ref": "indicator--51383bee-dc4e-4168-bffd-9ffd76b48a75", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b264c70a-b324-46b4-80d4-9b6ff7d17001", "sighting_of_ref": "indicator--51383bee-dc4e-4168-bffd-9ffd76b48a75", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c9e8bc-480f-4e58-9e53-22ef9256ce13", "sighting_of_ref": "indicator--2667a931-e11d-4b20-89b8-24d1d7295189", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa6c63a-add7-485f-adf2-c851db37f519", "sighting_of_ref": "indicator--2667a931-e11d-4b20-89b8-24d1d7295189", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feedbd09-f49d-4291-b31b-acc8de0f4f4a", "sighting_of_ref": "indicator--2667a931-e11d-4b20-89b8-24d1d7295189", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273b0cae-4090-44e0-b51d-490c1d42df99", "sighting_of_ref": "indicator--edde3e43-7d5e-40b5-977b-81019a128f66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3a077f-e6d2-44d8-aeb9-b208bc5a825c", "sighting_of_ref": "indicator--edde3e43-7d5e-40b5-977b-81019a128f66", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6bc596-32a6-4909-a285-7d4694f7d3df", "sighting_of_ref": "indicator--edde3e43-7d5e-40b5-977b-81019a128f66", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c456c5-4964-41f7-b0b9-5c2f74321e0b", "sighting_of_ref": "indicator--e2d62699-3045-44e8-a1ea-389f457b0bfc", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98ec0c8-9660-4480-a734-b5fe736e01e5", "sighting_of_ref": "indicator--5bf8102c-9182-47fa-be2a-cc04af944db1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb101955-2129-44c3-b591-4e9ab6db92b0", "sighting_of_ref": "indicator--f9528242-3fe1-47a0-9a7d-984ef2fe7da5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1de4e7-edab-4d8a-8de8-86769e7361bb", "sighting_of_ref": "indicator--42edb6ee-3801-4a41-8abc-42be44623c47", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31066060-e49b-4e69-9199-6f3b0f95bbcd", "sighting_of_ref": "indicator--759fbcab-0f17-458b-b125-1f7be40c6624", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62a578a-0328-4faf-82f0-5b6b256a9dd1", "sighting_of_ref": "indicator--886b5f00-4c21-46aa-80bd-ff5c181c6600", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d24516-0ac6-4b01-a86c-1cbbbf3088dc", "sighting_of_ref": "indicator--7497c904-bf21-441d-b00b-91613ecac426", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08843af-167e-4384-83ea-244c57564838", "sighting_of_ref": "indicator--8fe5cc3e-37f9-4e46-bb11-7546794821c3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9479460e-3503-45ab-a32c-f3c56201564d", "sighting_of_ref": "indicator--759010a1-9a77-488e-af28-5964073e9dd2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c04e65-39f5-4d6b-a099-20606ccec278", "sighting_of_ref": "indicator--d10d7ca8-c137-46ad-a3db-722bac8d7781", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae1cff3-45c9-4022-bb62-68c825e80331", "sighting_of_ref": "indicator--f225c342-996f-436f-86cb-17a7b6c71d48", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9772ea17-6397-4f3a-91ef-d2fce349b770", "sighting_of_ref": "indicator--16973d55-435d-4928-b876-73117ea0bc25", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0270b027-d117-41fc-86a0-ca5194bb9723", "sighting_of_ref": "indicator--16973d55-435d-4928-b876-73117ea0bc25", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f89fc42-0912-4a4c-b0d0-d5b3072ee9af", "sighting_of_ref": "indicator--16973d55-435d-4928-b876-73117ea0bc25", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f13969-4fef-4c1f-9397-1853b878da5c", "sighting_of_ref": "indicator--cd4029c3-18a3-4c0b-aab5-4d000fe63564", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39797b4b-7bf6-417d-b1bd-2d636ef577fe", "sighting_of_ref": "indicator--9926719a-7432-4fba-a6e8-3188a530f985", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132ca0fe-a876-4b7a-a0ca-efb73a48a671", "sighting_of_ref": "indicator--9926719a-7432-4fba-a6e8-3188a530f985", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c0a68d-f32d-4e36-8b7c-cc443fea7e8a", "sighting_of_ref": "indicator--e706afa3-8919-4a93-a5e1-6b5f9ae844e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b169a65-ff21-43e8-95eb-0d879097d6ae", "sighting_of_ref": "indicator--9f90fea2-af47-49b8-9f01-f297b7537e6e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe54bab9-b465-4ad8-8983-05924ab9f7a2", "sighting_of_ref": "indicator--9f90fea2-af47-49b8-9f01-f297b7537e6e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efddd32f-d76e-4ca4-b557-82b53bb1cd5d", "sighting_of_ref": "indicator--9f90fea2-af47-49b8-9f01-f297b7537e6e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85db271-aca7-4392-83c6-7492a5a7b1e0", "sighting_of_ref": "indicator--e710a564-8be9-41ec-a04c-2a1be0da6252", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edc6520-44e6-4705-a52c-b41ad96d1689", "sighting_of_ref": "indicator--e710a564-8be9-41ec-a04c-2a1be0da6252", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8235d3-4749-4e67-b2cf-4555338b3c95", "sighting_of_ref": "indicator--e710a564-8be9-41ec-a04c-2a1be0da6252", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7fe2c6-c5d0-40eb-ab7a-ded0154f4958", "sighting_of_ref": "indicator--90e262e1-b4ca-46b8-88f5-b828b9a7c050", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537c3d8e-832a-491e-b3cc-70e0a36e9de4", "sighting_of_ref": "indicator--90e262e1-b4ca-46b8-88f5-b828b9a7c050", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c73ba2-25c5-4d14-b271-f5c757060261", "sighting_of_ref": "indicator--90e262e1-b4ca-46b8-88f5-b828b9a7c050", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fedc0e9-43f3-4e81-8aee-acd7e74e83ed", "sighting_of_ref": "indicator--30e65d5d-66ac-446c-81ec-90a96c20666b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ee86ec-7cb7-417c-9e2e-bad4384b6f37", "sighting_of_ref": "indicator--f78ca025-156d-48ff-a6a0-1ebc807cf78b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9078fce6-b336-475c-8cb6-bbdfc11d0fbd", "sighting_of_ref": "indicator--06b028b7-4387-40e2-925a-eeae8436e93d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94465670-c1c9-4faf-b41b-9e7383a93dd4", "sighting_of_ref": "indicator--372a4359-a03c-4e90-9a4c-fa20e6a99832", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62554542-5e6e-478d-b79c-e3905a51a42c", "sighting_of_ref": "indicator--9a1c5a3f-5b18-4d5d-924b-aea29c4a3f77", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254ea51d-fe71-4e9a-b83f-7094a2142350", "sighting_of_ref": "indicator--c96ca869-4b2d-4d0d-8e58-d3df1cba2623", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dff3305-5fae-483e-a957-252c452a02dd", "sighting_of_ref": "indicator--e09d4dfe-96fb-4733-8e13-b26526e17aba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b232e3-56ad-4ec3-91ab-0fc826c71aeb", "sighting_of_ref": "indicator--b2ca8597-8d03-4b3f-85dd-53dcd86ed8b1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c375c80-ddd9-4461-92dc-47eb107b9e33", "sighting_of_ref": "indicator--f9ba2fa1-91c7-474f-b283-71d3d4b2a54a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc31442-3822-4c9e-828d-852729bf1160", "sighting_of_ref": "indicator--f9ba2fa1-91c7-474f-b283-71d3d4b2a54a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c0d012-ba76-4cfd-a818-7365bd9b5749", "sighting_of_ref": "indicator--f9ba2fa1-91c7-474f-b283-71d3d4b2a54a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4607b99c-66a8-4913-8fef-9bc86dcaa111", "sighting_of_ref": "indicator--3ee0f49f-d2c1-4741-aeec-b4b821ec510b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156b679c-56ed-46fa-9f45-3f651316daec", "sighting_of_ref": "indicator--3ee0f49f-d2c1-4741-aeec-b4b821ec510b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40432d78-acc1-47d4-bb1f-5b2089a1b6c7", "sighting_of_ref": "indicator--3ee0f49f-d2c1-4741-aeec-b4b821ec510b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f858a647-b054-41b2-bbdb-fcd3bd8dcb05", "sighting_of_ref": "indicator--ed6fff66-3b23-4fd4-8f00-95146c4b92ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79afd82d-eb8c-436b-86bd-16bc82436e2f", "sighting_of_ref": "indicator--4a2d50a4-1e10-4926-aecd-ffb0fe496909", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a90509-27cf-41aa-8ee9-4fa1cbe1e88b", "sighting_of_ref": "indicator--4a2d50a4-1e10-4926-aecd-ffb0fe496909", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b33cc1b-3a72-4ab4-838b-1d87a3c96802", "sighting_of_ref": "indicator--4f2ee7d2-0d54-466e-b8b8-c4dd88c086ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23f540e-4151-4baf-a8a5-62f6858d6364", "sighting_of_ref": "indicator--4f2ee7d2-0d54-466e-b8b8-c4dd88c086ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d380094a-5b44-49d0-80bf-9ae2846208d7", "sighting_of_ref": "indicator--4f2ee7d2-0d54-466e-b8b8-c4dd88c086ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48977d2d-267f-4ada-90cc-32ddc21c2bec", "sighting_of_ref": "indicator--4ebb2fe8-5ffa-4d1f-8a0d-8656ac85cb89", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b71d25-646e-4106-ac8f-560e1c4cd32b", "sighting_of_ref": "indicator--4ebb2fe8-5ffa-4d1f-8a0d-8656ac85cb89", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e49135-7ead-4fcc-a8b9-9acc88aeaf6d", "sighting_of_ref": "indicator--e13b3666-39dd-4a68-82c5-2c1a7b7faee8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fa28f5-16c8-48c9-9240-0395af365692", "sighting_of_ref": "indicator--e13b3666-39dd-4a68-82c5-2c1a7b7faee8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b7f24d-8226-4749-b092-aaf8066bbb89", "sighting_of_ref": "indicator--e13b3666-39dd-4a68-82c5-2c1a7b7faee8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2d2a5e-f959-4138-be0f-442cf62cf6ea", "sighting_of_ref": "indicator--f06751e8-6d5c-4422-a163-bb72e3d71791", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419772aa-1424-4267-912b-cb49f6c04184", "sighting_of_ref": "indicator--61093968-7d78-4299-bdba-c02732d35729", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfd7323-e606-4838-bac6-bd06c5a281ad", "sighting_of_ref": "indicator--2c4ab0ee-4354-41a6-8663-35914c815292", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd00171-18b9-4418-a44d-dcdc9a91d5de", "sighting_of_ref": "indicator--6e5f171b-6d18-4940-8a03-548d9fe7d31f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909ff899-68f1-4845-a50c-8313869788c1", "sighting_of_ref": "indicator--6e5f171b-6d18-4940-8a03-548d9fe7d31f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad5ba1f-e664-4262-8f5b-ab454b80a8a4", "sighting_of_ref": "indicator--6e5f171b-6d18-4940-8a03-548d9fe7d31f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66648915-5b29-4c17-883d-73e8dbec01b3", "sighting_of_ref": "indicator--458bfc1b-7653-4043-8d44-2b1a7b2d49b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999b90cc-b8db-4169-8ee8-25d85182b14c", "sighting_of_ref": "indicator--458bfc1b-7653-4043-8d44-2b1a7b2d49b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2514d1aa-7c76-4682-9fb8-c1cab99d0816", "sighting_of_ref": "indicator--458bfc1b-7653-4043-8d44-2b1a7b2d49b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e4bee7-8637-4485-93cf-b1070989d8b1", "sighting_of_ref": "indicator--48e89aca-4eae-4ddc-969f-f1757a20e4c7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa5ed87-b53f-46b5-8dec-cc35adebf269", "sighting_of_ref": "indicator--48e89aca-4eae-4ddc-969f-f1757a20e4c7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89964a4b-22a9-4b44-9058-2e615cb2788f", "sighting_of_ref": "indicator--48e89aca-4eae-4ddc-969f-f1757a20e4c7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93947b56-4263-448b-afc2-defbfd8b2c49", "sighting_of_ref": "indicator--ee91e793-149e-48dc-a729-441917ce5c74", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f605e13-1150-4aca-90f4-fdaa2f0120f1", "sighting_of_ref": "indicator--bc4c8a1a-b7cd-4902-970b-0ceab542b139", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e400ed6-7bf4-4e37-90cf-96292f7d77b3", "sighting_of_ref": "indicator--9a50dead-1ead-4cd7-949a-150035a161e8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c07398-dbf0-4852-9f94-7a0f5fa9f970", "sighting_of_ref": "indicator--5b08e43a-e1a2-4a01-b254-d5e3332f709a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16961687-a171-4f33-b705-080918ae7e91", "sighting_of_ref": "indicator--ff0b2068-2181-4a60-b0e5-9f38471a8cba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb99e025-4f09-490d-964a-0ad6e57e072e", "sighting_of_ref": "indicator--8a7195ac-ca7c-4df3-a8f2-fca458ce8b8a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bae1a46-a9f1-4ea1-89ba-295b046fef5f", "sighting_of_ref": "indicator--dac4dd0a-0ec6-4a48-8c76-fdf8f8cd1d66", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42ba57a-3f3d-43dc-a6dd-2977b2c75b09", "sighting_of_ref": "indicator--fc9e5859-27ac-4fea-89d7-cfbb88654d88", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb478b97-ba3e-4eb0-87fb-77ff2c96a41c", "sighting_of_ref": "indicator--39cb8eeb-bbca-4985-a335-8f489ec61600", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432b153e-14d1-41ec-ba8d-4265b7d081ba", "sighting_of_ref": "indicator--d09a1701-28f6-4d20-88b5-dd7e6c50dcb7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546fadff-f3fc-4010-916f-d8278e7b135b", "sighting_of_ref": "indicator--9f5b0146-981b-42c2-859d-8ccc118e28b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898a76ce-faeb-4310-a732-d9a378314687", "sighting_of_ref": "indicator--da03b27b-b499-4e90-a220-a8514c04161d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1a6428-6b0c-4fe6-92cf-ee0066867117", "sighting_of_ref": "indicator--5ca23e07-61fd-4575-92e5-e3c4b2fdd762", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60b7738-89d4-4de9-8836-89e67d871a0c", "sighting_of_ref": "indicator--e916826e-2575-4098-bc19-406124f97b54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b1f6f9-df89-48f2-bea2-f4eae31ddf68", "sighting_of_ref": "indicator--5f877af1-b562-4204-b499-694a352c99f6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2bb37e-fc97-480e-8ef1-7d2835c1405c", "sighting_of_ref": "indicator--41a586bc-f9a0-42b4-899a-520cd8b714b8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4dd590-0bfb-4dda-95ed-8ce01e8e4d42", "sighting_of_ref": "indicator--93091dc7-b58e-4bff-b363-ecfb06fdb125", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c2fb93-5437-4399-8f04-ab6f3c87626e", "sighting_of_ref": "indicator--93091dc7-b58e-4bff-b363-ecfb06fdb125", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3450a23-c8a7-4e48-a9b8-2caa2e9d4b17", "sighting_of_ref": "indicator--72fa249f-f3de-486e-a15d-1d95e821afd1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280f9fa3-fd46-40d9-94b1-21440a75c024", "sighting_of_ref": "indicator--2227ab41-1006-47de-b60b-f309958f7a2f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f843fe20-0ac7-4c43-9e36-f7e4a52552e9", "sighting_of_ref": "indicator--2227ab41-1006-47de-b60b-f309958f7a2f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fa0feb-753b-4f46-883c-dae5230ff519", "sighting_of_ref": "indicator--3c9445cf-b477-4e06-a177-947e69924cf1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08dd02d-80b8-4dff-a45c-05b8cfe3019d", "sighting_of_ref": "indicator--d2978dc9-67d3-4e9a-bb3d-6f7186be3c84", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989ea913-1cea-455a-b9d8-688c49c53079", "sighting_of_ref": "indicator--19e7f917-3b13-45de-b653-3967353583e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb8c227-c5a8-4fcb-b107-cd6398a1d064", "sighting_of_ref": "indicator--e74f7052-4df6-4634-b588-cd100879c9c8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5061b58-9ab3-4c51-8c44-dbb223c3c20e", "sighting_of_ref": "indicator--0e7503f4-d805-4e64-8707-eec1a8073bd6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f430cb9-0be6-4e37-b9ed-e44ed80d4d87", "sighting_of_ref": "indicator--fdbec6aa-7c00-4872-af10-68667de98efc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995d73a4-4555-4375-842b-cabc11cff9aa", "sighting_of_ref": "indicator--0e139478-e7b2-47dd-bd96-198707a757eb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6d7b2f-75b0-497a-91ef-a94d1ada943e", "sighting_of_ref": "indicator--0d2d1eb1-a7af-4c09-8492-19ca64a11f9b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f713d4ae-4a73-4ea0-95fb-480cc14f8df6", "sighting_of_ref": "indicator--624f267c-d03f-4682-95e8-6766eb01c764", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c6f0e3-2ff7-4b2f-9394-d36e9c0dd8b1", "sighting_of_ref": "indicator--a8e1dc1d-128e-470b-80b8-1da3f0da7c28", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b9350b-6a75-4ff8-a40e-1b5cf869e817", "sighting_of_ref": "indicator--a8e1dc1d-128e-470b-80b8-1da3f0da7c28", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a912c09-aeb3-4529-bbf3-e2c6e178fa75", "sighting_of_ref": "indicator--f910d9e8-2843-4537-a46c-59998b9d4d7b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f9668c-098e-472f-9b64-f85663806102", "sighting_of_ref": "indicator--b9592099-cf91-486a-8497-90481f80d6a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4860ea01-1db3-4a63-8d5f-803e7116ad26", "sighting_of_ref": "indicator--d3f33a51-1f0c-4c1b-ba38-b1c5d2711aa8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c65556a-4f12-48de-87d9-113f01500732", "sighting_of_ref": "indicator--a6ba9186-9217-40c3-b2df-5f83d209ccb0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41e3457-d3de-4ef8-86ce-a9a21a8e20cf", "sighting_of_ref": "indicator--e7e03d3c-1e70-4926-b65b-d4e629441069", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6266591-7c83-4c11-8dbf-95ae90560447", "sighting_of_ref": "indicator--279123a3-f80e-495e-a2d6-9742152090cd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe764bf-49bd-4f95-b827-b2824b065de6", "sighting_of_ref": "indicator--aad49543-5b54-4a21-b146-cdb67916b3d2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24ed28d-e03d-4d24-a5b9-6520761a6aec", "sighting_of_ref": "indicator--26f4424e-3c18-4d0c-a409-b564f9010db8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7560c0fa-e8ca-4e51-b8df-e105a5b1c3e2", "sighting_of_ref": "indicator--26f4424e-3c18-4d0c-a409-b564f9010db8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca1ac7e-a175-4063-aeef-3802b401127f", "sighting_of_ref": "indicator--26de3ce0-efc3-4b65-a6a3-8026814813f7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--757bb4a2-969b-4ec2-8c0d-a3a0ecfda99d", "sighting_of_ref": "indicator--7af55ada-06d6-41a5-a01f-7991603ed496", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd17eb8-f369-49bd-9b76-d4f123c6e0e0", "sighting_of_ref": "indicator--11b88980-80af-4969-8388-e61495b7d236", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45778b5f-1421-45dc-9660-282473ecc3cf", "sighting_of_ref": "indicator--2a295f91-9c85-40f5-a0b4-69a8499560ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78d0f74-6bee-4d5b-85cc-ed3a6f5aa607", "sighting_of_ref": "indicator--de62e0bb-ed99-48fc-9081-05693ebdce5e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ef69ad-791a-42e1-9c83-b5c43641743e", "sighting_of_ref": "indicator--29e0262f-06ab-4f5d-8fc6-f060b0e3c1b8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef590094-b0be-4428-a347-a3f233589cdb", "sighting_of_ref": "indicator--9e4397f3-3758-45bd-852a-6437da7623bd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5831110-4ffc-45e5-be51-d0ca08e06f64", "sighting_of_ref": "indicator--94ea85b3-91f0-4d53-809e-03b31a53cf8a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46227cfb-7052-484c-85d7-e87409ba0a2d", "sighting_of_ref": "indicator--d9ebd554-99ba-4d6b-ace8-502374845c0e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2523cfb0-4e16-4636-b11a-443acc403f51", "sighting_of_ref": "indicator--47a5be33-7722-48de-b4d5-0a5d9212ee46", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49848031-8faa-4e6c-b16b-93816baa7c70", "sighting_of_ref": "indicator--5794aee9-8075-4b83-9f3e-8cba9fc16007", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baffe8e2-196a-4f98-a3d7-6fe0faa1b671", "sighting_of_ref": "indicator--a0828083-5a42-4c79-97c7-74551775fc49", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bdfffb-ca47-48ec-bcce-19d25a333f24", "sighting_of_ref": "indicator--06454acb-2871-4c96-838e-7885b2320e30", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a22be3-3db6-46bc-899e-1def67026bb7", "sighting_of_ref": "indicator--06454acb-2871-4c96-838e-7885b2320e30", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c770e9-09ef-4fe4-9100-a1a98d06aecb", "sighting_of_ref": "indicator--06454acb-2871-4c96-838e-7885b2320e30", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf0696b-c725-498b-92d0-f065f86db39a", "sighting_of_ref": "indicator--073f9323-e7de-4a1c-9b19-9aedd893a3eb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2618b970-8a60-4025-9589-ed32a1ed82e8", "sighting_of_ref": "indicator--18edf4ed-eb42-4b95-aa31-e1f1321cfeec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7e48e5-62cc-488e-81e2-95fcdce8e3e9", "sighting_of_ref": "indicator--a3b799f8-599b-421b-9220-bd5f86a83422", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a725017e-016d-48f4-8b9c-e6c3cb95ba26", "sighting_of_ref": "indicator--3d5c8a76-8dc9-40a7-95a5-8a975fb018bf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2937f7f-4b10-4248-90ba-4b21cb11d052", "sighting_of_ref": "indicator--90c183da-f9eb-40c0-838d-659013b79363", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--853beaf0-f580-4200-b944-8c50724e7b9a", "sighting_of_ref": "indicator--d638c5c5-e503-4077-a5a5-d80e19fadf65", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9197f450-645d-4841-bd80-4750c4decf9d", "sighting_of_ref": "indicator--69940294-079d-4066-b649-412b48a35ace", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee0a4b5-e701-4cc2-9c97-56fc353254c2", "sighting_of_ref": "indicator--c6965554-9394-4524-b5ac-7d86e93d0f54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766473a0-7d95-4c2c-a7cd-d1fe45426dcd", "sighting_of_ref": "indicator--f17359de-e7cd-4230-a397-f92f9c471bba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9a0145-3aa8-4d71-b6c0-3b78cf3fdd47", "sighting_of_ref": "indicator--f17359de-e7cd-4230-a397-f92f9c471bba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dde7597-b2d2-4318-81a9-285b5995aa92", "sighting_of_ref": "indicator--3d0c9d67-8938-4b05-a40b-b00363fa5637", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0dc12a-b2f7-43a4-b5d4-4d23fa59f179", "sighting_of_ref": "indicator--9a3f9c61-9f01-4531-9a9a-33fcb7507c58", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2169d4a6-dfd3-48c4-936c-efb4e693fe00", "sighting_of_ref": "indicator--2fd15b3b-c303-4dfe-8c5a-24ad13450c0c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80edeefe-1d77-4f3f-b3ff-251530ef4deb", "sighting_of_ref": "indicator--a355cba8-3748-452f-b869-7074b8cda92c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128afe8d-7e6a-45b4-b8ba-3a909980f4e5", "sighting_of_ref": "indicator--4f888211-5c78-4479-828a-48943a4940d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eebb61b-d347-40ec-9dd0-322f680351a6", "sighting_of_ref": "indicator--169cd78a-8b7a-4cbd-9070-90b876cd982e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ca89d2-2bda-4d6d-b19a-c577083eae99", "sighting_of_ref": "indicator--0cb497b4-bfc9-4d57-a8ac-3598bc07a1b8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc0b5b9-f365-4ef9-9980-91464e46a13e", "sighting_of_ref": "indicator--bb64283f-0b6d-467c-b7fb-f82091c8b70e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f35bf2-3290-48d7-bfcf-6e3b668fcc74", "sighting_of_ref": "indicator--b6a79f65-e36e-4948-9b49-9e2da621ca64", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a792bb79-34fc-4ffc-9fa1-89c254a83019", "sighting_of_ref": "indicator--ac6102e7-423c-4458-86e6-c575b5576b16", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497dab6c-d79c-43f5-ae6e-283c17d40c98", "sighting_of_ref": "indicator--37d54dc9-2c82-4a1c-9359-d885e70f2ea2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83930f06-8786-4b90-b9ca-92918388c9d3", "sighting_of_ref": "indicator--def1e110-8ead-4e84-800e-85fa8ec6ceaa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36885407-2b86-4ff7-9447-9e51488f1b22", "sighting_of_ref": "indicator--b6ce2d7d-215d-42d2-bc7c-065480cf8aea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2368f1-62ad-40e0-a94e-a9200c440609", "sighting_of_ref": "indicator--b6ce2d7d-215d-42d2-bc7c-065480cf8aea", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a67575-fb3b-4dc9-b10b-4519fc7f782d", "sighting_of_ref": "indicator--bbc1efc9-3623-4f13-883c-7b80ad554351", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb82e13-6c2d-4c51-9a71-688e99fe0cdb", "sighting_of_ref": "indicator--bd0e5a77-8047-4521-9721-80ca394c6791", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574da37c-1abc-42e7-a7dc-f6d06d10a343", "sighting_of_ref": "indicator--3b2c6298-2702-466f-abe9-cd8893166523", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a79681-c4f5-41de-ab21-1a327463bc66", "sighting_of_ref": "indicator--5d4dbef1-857e-44c3-814a-e828e88f92f7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3dda03-8a45-4651-8b37-a2bc01293758", "sighting_of_ref": "indicator--5d4dbef1-857e-44c3-814a-e828e88f92f7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c3ea1b-4fd5-4e75-900f-74b092db8391", "sighting_of_ref": "indicator--c9ac9f2c-3a74-4666-bad0-a025a529201c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e921ba0-baca-43ef-bd02-2105ed44cd87", "sighting_of_ref": "indicator--c9ac9f2c-3a74-4666-bad0-a025a529201c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b342c11e-4d2a-49f8-bf32-361dfa1a58b4", "sighting_of_ref": "indicator--c05ccbc4-733f-4a8b-9e5d-39ef5a39c340", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58e9ca6-9fa8-4550-9a28-6c8dfef6fb8a", "sighting_of_ref": "indicator--c05ccbc4-733f-4a8b-9e5d-39ef5a39c340", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff6dc548-0243-484d-913b-4fc369d0e1b8", "sighting_of_ref": "indicator--ec1662cb-63cb-4233-96d4-4cebcbe2acea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0888225b-19b0-4bdf-9ad4-42a4a0818cb5", "sighting_of_ref": "indicator--26fa44e1-1751-44a6-b467-542181142bb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d4a043-3fc0-4d66-8c85-48ac67a552da", "sighting_of_ref": "indicator--289c72be-452b-43b2-bc0f-8106f7d2e74f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faed3e28-8b36-41e2-abe9-f78dd938c254", "sighting_of_ref": "indicator--89eb745d-a1d9-4537-9858-4e523589f75a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a59909-7190-446a-8572-ac32edd92d5e", "sighting_of_ref": "indicator--89eb745d-a1d9-4537-9858-4e523589f75a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabf17bd-f0de-4ce4-b732-1d77a638c06e", "sighting_of_ref": "indicator--45e1f54d-dea2-4f7c-9c3a-a1abea7876f0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c5590a-851e-4688-90ed-85027a0f178c", "sighting_of_ref": "indicator--c7957522-6d27-438d-94de-9bb60f79b029", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b822f4-8e0a-4741-8385-d4cc881b743b", "sighting_of_ref": "indicator--c7957522-6d27-438d-94de-9bb60f79b029", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63577e34-6d87-44d6-b272-0fe6d17387d4", "sighting_of_ref": "indicator--1db751e1-4132-448a-a86d-45249edbbb9e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0b9b36-7cbf-453b-adc9-465aa2068dac", "sighting_of_ref": "indicator--1db751e1-4132-448a-a86d-45249edbbb9e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce87879-5834-44ed-a899-59a128346376", "sighting_of_ref": "indicator--43fe5121-58a7-44d9-9d74-6bba5d914170", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2907c9b0-450a-48e0-9143-dd5b467900c5", "sighting_of_ref": "indicator--43fe5121-58a7-44d9-9d74-6bba5d914170", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa8bb05-f8b5-4505-8a06-b324ea1c976a", "sighting_of_ref": "indicator--48e92d12-95b4-4bb8-b8aa-85bca39dbfb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8d6f41-b18b-4e4d-9e63-9fd82391034f", "sighting_of_ref": "indicator--3fa279bb-bdac-40e8-a040-5da8f5317bf2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc10af4-9d62-41a3-a77c-d6612fe9c9b7", "sighting_of_ref": "indicator--0c48b99d-7984-4ced-9839-5de0f9b4329f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a03a97-b9cc-48e3-a32a-89bf0005e2af", "sighting_of_ref": "indicator--0c48b99d-7984-4ced-9839-5de0f9b4329f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e971392c-dfc2-42b3-b5a6-c097617156bf", "sighting_of_ref": "indicator--0c48b99d-7984-4ced-9839-5de0f9b4329f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfee336-1046-4dd2-9e39-51a6e187c6cb", "sighting_of_ref": "indicator--f0bbc4e4-f643-4f20-9ad0-a4c2d5369faf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1704b1-d8fe-4167-bf4f-98bfc1604f2a", "sighting_of_ref": "indicator--c12bd2f3-1318-4c31-b1fd-c90d0c60e3ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb563cdf-37d4-4be8-b374-09bde23e3b7f", "sighting_of_ref": "indicator--de17c187-446d-454b-8725-59d0fe2a5eac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5790c1-2b4d-478c-90ae-105fdb27fcdb", "sighting_of_ref": "indicator--04e372e6-93cf-40ec-a01f-7cc9a0ccc34e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b753ab04-6bb1-4be3-9140-85e7a598b2cf", "sighting_of_ref": "indicator--301f1bec-371b-41bd-8cef-62380670bb1e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0aa87a-0cd0-4b9d-825a-edbf31a5d94b", "sighting_of_ref": "indicator--301f1bec-371b-41bd-8cef-62380670bb1e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1211994-cec8-47f6-81f1-30616c1e34b6", "sighting_of_ref": "indicator--963bb90c-cfb4-4566-8a0a-3f6180187d51", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fbdeab-96c6-41fe-b5ea-869e83d87f73", "sighting_of_ref": "indicator--8192dbcd-7a38-4b1f-82c5-30a2d8ab5efb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e143b700-2761-4128-bdd4-441575fa8f14", "sighting_of_ref": "indicator--8192dbcd-7a38-4b1f-82c5-30a2d8ab5efb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f04265-8059-48d0-a8a4-eac9f7a75cef", "sighting_of_ref": "indicator--16c7cfd4-016f-455d-8dcc-de47ed98141a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f96f45-f2b0-4431-87c4-7e2f73249d6f", "sighting_of_ref": "indicator--16c7cfd4-016f-455d-8dcc-de47ed98141a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d5734e-216a-48f3-8b59-b3c9ee093c44", "sighting_of_ref": "indicator--358b739a-1373-4484-b5c0-71c3c26de39d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67e95af-a89a-4de4-a0ea-a67d88fc2b3f", "sighting_of_ref": "indicator--358b739a-1373-4484-b5c0-71c3c26de39d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9589c79f-108f-4664-b376-db8a9088811f", "sighting_of_ref": "indicator--3ecb05f2-1ecf-4ffb-b778-f9b5e6e9d10b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cc84cc-d9f4-468a-ba53-69b8ccb29e56", "sighting_of_ref": "indicator--617854c3-600c-46cf-b1cd-ab3e1afbb1c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57146a97-ad05-4ce7-994a-a85119aa82ff", "sighting_of_ref": "indicator--71738b47-c29a-4b21-98a2-31cd3de8e664", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb9f9b8-3147-4c62-bcc8-a6419ea92438", "sighting_of_ref": "indicator--310396c2-ac76-4035-a55f-2022a2989d82", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74d19c9-046e-4c70-a8d4-5fb6c905c4dd", "sighting_of_ref": "indicator--5b5db88f-95d3-4a0a-9127-56be5200c28a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b7c52c-8cc1-4cf4-9e66-4d3b91ce06a6", "sighting_of_ref": "indicator--676fa5d5-9d2a-45f1-b292-02e29de32fb7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b2755c-a7fd-4625-b8ed-d0736a0b7595", "sighting_of_ref": "indicator--7ab74dae-eb0c-4f76-bb3a-34fc2943c716", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7732a1-a9c3-479a-8e57-765a85787d06", "sighting_of_ref": "indicator--48c80fd5-0345-484f-a3c6-f11e2e2b07dd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5f7a8a-381e-4c18-927a-57d2f44db43c", "sighting_of_ref": "indicator--6b77eb48-ba9c-4c56-a7ed-ba1da977b78c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2caaf8-5311-48e6-b4ff-30a1e8cfef69", "sighting_of_ref": "indicator--6b77eb48-ba9c-4c56-a7ed-ba1da977b78c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201a6164-6843-4c35-9a05-7f6c5fbeb3b5", "sighting_of_ref": "indicator--bf2c0be1-be2f-48f9-8e83-12576781540a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7d353a-4cfe-4fa2-94f8-e1d5c7d7be08", "sighting_of_ref": "indicator--63357fa7-83a2-4484-9cfe-4f43f91355fb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6399f908-d015-4143-a6f2-395a8c4fd8e3", "sighting_of_ref": "indicator--527fc661-24e5-4291-9053-05e0e11b059e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459f6025-31b3-4442-afae-9ee562968833", "sighting_of_ref": "indicator--8d016594-c6fd-4f65-b6e8-0e7ebe222c50", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c5e408-9cf2-41a5-aeb0-253a3dece406", "sighting_of_ref": "indicator--8bd5d9da-5b24-4ecd-a46e-25dc35b56e9e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c83a63-42db-4115-8cbe-bf44232ab3d8", "sighting_of_ref": "indicator--8bd5d9da-5b24-4ecd-a46e-25dc35b56e9e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e18ad3-7e0a-435d-9096-1563e106ccc2", "sighting_of_ref": "indicator--d9ba386d-2030-4b38-b776-30194770e82e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac8c2f4-cc2f-475b-ab86-ab1baeef19ea", "sighting_of_ref": "indicator--d9ba386d-2030-4b38-b776-30194770e82e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b62e155-8b2f-4d07-aa61-84433e9eb68e", "sighting_of_ref": "indicator--9a5433aa-9c10-46f2-89fe-c399c2bc1d63", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ffe90b-8b64-45b7-bcd9-8df0f9c27512", "sighting_of_ref": "indicator--dd7b22f2-99db-4014-b36a-89398f95cbed", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e2f9b6-7fe0-4a8b-b166-c4f04aef1bfb", "sighting_of_ref": "indicator--1f54e7e9-94d9-4d13-92f7-b2e7e35444ad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c85867-58ee-4a5e-8d44-2cd0ee4b62a8", "sighting_of_ref": "indicator--9be4990b-07b5-44a9-b164-9572c98bb49f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a66d1e3-44b0-4bc2-a972-4864a1ca8f38", "sighting_of_ref": "indicator--b91a45f7-f1b7-4d2d-8023-463fd54fab84", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e27669-9314-46c5-9fe8-90c5badedb63", "sighting_of_ref": "indicator--6b946f4c-a275-4f14-8339-1dba02a00a8a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c1002a-f59b-4dc2-a67f-198dba88fd80", "sighting_of_ref": "indicator--2cb3f075-b8d0-45c9-84b4-feee13207ae0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded9659d-dc5a-41cf-9999-3ef8d45f4c83", "sighting_of_ref": "indicator--e9559872-a9e9-4539-b6fd-0a2a95518039", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303a2c38-65d9-4647-b618-f7c2ef952645", "sighting_of_ref": "indicator--e9559872-a9e9-4539-b6fd-0a2a95518039", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4281b202-b3d7-4d06-8e3a-7c35971c2f59", "sighting_of_ref": "indicator--e9559872-a9e9-4539-b6fd-0a2a95518039", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55db6ada-8edd-4a78-88ba-986be8e60a1f", "sighting_of_ref": "indicator--606cfdcc-dae6-4480-8bd6-e66950e111f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30589b15-e0c9-4a93-917c-138a8b66a21c", "sighting_of_ref": "indicator--7c9357f7-d77f-4752-bf73-34f624ce4f08", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0439426d-7b45-48b4-90ff-75d0fb0c80e7", "sighting_of_ref": "indicator--7c9357f7-d77f-4752-bf73-34f624ce4f08", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b13221d-76d8-47a9-80d9-1ab5cd6ad25f", "sighting_of_ref": "indicator--a4be63cd-38e7-4a80-b35d-b9c8764c0c5d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3425c405-56cd-43ca-ae94-89c1f2ba1651", "sighting_of_ref": "indicator--a4be63cd-38e7-4a80-b35d-b9c8764c0c5d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e6836f-9af4-4b36-8a43-e331f1b8f111", "sighting_of_ref": "indicator--2d856d20-f2d1-434e-a954-12bf591c7f7f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a132a973-142a-444f-9328-cc9b14ae73bb", "sighting_of_ref": "indicator--6b998841-5905-4e37-b9d8-2e637adc97c4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447b8089-7030-43e1-887b-b713484f7fcc", "sighting_of_ref": "indicator--f537d971-eab7-4be7-9270-dd99fb4523da", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ae7819-8d28-4634-ae47-3b01a4bce373", "sighting_of_ref": "indicator--f537d971-eab7-4be7-9270-dd99fb4523da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fe97a0-68b0-45d4-8340-e3345680fd21", "sighting_of_ref": "indicator--d3f2e4c2-b579-4927-8809-875f6d2143f9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedbc613-f594-4e33-a509-7c98d566c5db", "sighting_of_ref": "indicator--d3f2e4c2-b579-4927-8809-875f6d2143f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8545e404-3856-4c1e-9000-dfbe7c6d3b1e", "sighting_of_ref": "indicator--93614ee2-6827-4151-9912-25c09408fb02", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9472fd82-e638-41bc-8e92-78171a45ba65", "sighting_of_ref": "indicator--93614ee2-6827-4151-9912-25c09408fb02", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36571e9-e135-42ae-a041-c1c874a20d72", "sighting_of_ref": "indicator--93614ee2-6827-4151-9912-25c09408fb02", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b15052e-7011-44d4-a60d-26b48f66f35f", "sighting_of_ref": "indicator--b0cc1882-64e8-49e6-9543-b9598373fcd1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b374240-7dbc-4c72-b8f1-2e6e3d7098cd", "sighting_of_ref": "indicator--200768a7-4c05-496a-a42c-91e491c08bd7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26e88c6-f073-4ad9-abe2-421500b7bc61", "sighting_of_ref": "indicator--756cf549-68fe-4ab5-904b-35afe0fd3465", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949e4f13-d41b-4c88-8d60-0573e393d43d", "sighting_of_ref": "indicator--2eba51d3-a79b-4739-a51a-ccf81d408534", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c855dd2b-5274-494d-b20e-98353c27ab2c", "sighting_of_ref": "indicator--2eba51d3-a79b-4739-a51a-ccf81d408534", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653fde05-e7b0-4ca8-9bd2-06872dfb0f0d", "sighting_of_ref": "indicator--b986a3e9-6083-4c17-a377-048747437b6b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2025cc64-21db-461a-b14a-3770a71953ab", "sighting_of_ref": "indicator--55de3b84-1235-4c47-81c1-fa8a6fc65478", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604bff19-320b-46ba-8e1f-44f06b24d523", "sighting_of_ref": "indicator--55de3b84-1235-4c47-81c1-fa8a6fc65478", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79104b3-6500-4d5a-8c36-d94ac10ceb56", "sighting_of_ref": "indicator--4c9a8b37-64ba-4e10-9b1f-e1462f8bf399", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e106297-be47-4a98-a6e8-9ff48d92a55e", "sighting_of_ref": "indicator--bce98329-64c5-48be-a942-16d18286c44a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb95624a-333d-40d1-9b90-517b456c4539", "sighting_of_ref": "indicator--bce98329-64c5-48be-a942-16d18286c44a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d76bf7-8956-4a1c-9877-74a7f7f74d90", "sighting_of_ref": "indicator--9f17a5c5-2f1d-44f1-850b-227daeaf8e9b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60142f57-02d1-433b-8e69-62fc34bdce00", "sighting_of_ref": "indicator--31314e17-986f-4585-8fe3-1827a998f3e9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0fb919-ffc4-4c25-9fdd-c7d52be72254", "sighting_of_ref": "indicator--49c29f23-6ee1-4b58-b949-786834121819", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b76581-7b07-4fe4-8591-a93a4c8653b9", "sighting_of_ref": "indicator--785ef743-62e2-4702-add5-1a3cadb0af78", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb1900d-a021-4826-9495-c370be6fcbb7", "sighting_of_ref": "indicator--785ef743-62e2-4702-add5-1a3cadb0af78", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefbf044-6377-4e74-a8db-78b00ca815e1", "sighting_of_ref": "indicator--785ef743-62e2-4702-add5-1a3cadb0af78", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27c5842-1c82-4474-8668-20bb84ae7a66", "sighting_of_ref": "indicator--a59bc627-fa09-41a9-8c9f-e7f2159a309d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f67a6b6-9ec5-4935-bb97-f15d391f5aa7", "sighting_of_ref": "indicator--a59bc627-fa09-41a9-8c9f-e7f2159a309d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d0504f-d7e0-461b-8863-f552ab62acb0", "sighting_of_ref": "indicator--fa5787f8-73f5-42dd-b347-003cfc660fdd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc6cba9-1c06-4375-82a4-cf3ee94f1ec2", "sighting_of_ref": "indicator--49afe256-55db-45e5-8346-fe22454034c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ec7436-b2f9-4719-b290-dce3ac9b7d49", "sighting_of_ref": "indicator--435b5928-bfc0-470d-a072-1c3ef2330762", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41e736a-c3a5-4622-8c1c-094950eab8cd", "sighting_of_ref": "indicator--435b5928-bfc0-470d-a072-1c3ef2330762", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ba80ff-c59d-430d-a4e4-d545b14f96aa", "sighting_of_ref": "indicator--435b5928-bfc0-470d-a072-1c3ef2330762", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b89985-20eb-4300-a2df-07f84b3a529e", "sighting_of_ref": "indicator--773b48be-77bb-4b82-8ae8-890d42ff8aff", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57669055-1caf-45bf-a2be-07180a0577e7", "sighting_of_ref": "indicator--52427a48-ae6d-49ed-a5a8-f4d85dba7910", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d820ec-8982-4f79-bc1d-5425364c3a4a", "sighting_of_ref": "indicator--0161e3eb-057e-4412-bde0-275ea1686999", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c942a719-ea3f-4792-95e8-4c3819a542de", "sighting_of_ref": "indicator--9b4ae7e9-5f5e-4fa7-be0b-0332dd909f22", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275e9f5a-bd75-4dd4-b26b-336f068521be", "sighting_of_ref": "indicator--2cf40422-9291-4993-99da-503470d76c01", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791c5644-649c-4634-86ee-45190086614c", "sighting_of_ref": "indicator--6a7e93f3-d1ba-4817-86f5-5a581f96ffe5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2d0e70-0c15-4769-9c13-b87ded32ef8e", "sighting_of_ref": "indicator--3bafd967-5d82-4488-b159-0c39d97a85af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16934dff-ef25-47c7-b89e-8b01735054e0", "sighting_of_ref": "indicator--133f2e54-282c-492a-b7c7-047aaa14edf0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b2c6a1-e14c-41ba-afdd-62fa38b32824", "sighting_of_ref": "indicator--c8d2f3ed-6ace-4729-9cec-d07fb1f07b86", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e465dd4-eaf9-4e68-a349-ce69cdfc748f", "sighting_of_ref": "indicator--b658fbdb-4d42-4614-8e7a-25f70a754838", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad5de93-0dca-4460-8f62-33641017d0eb", "sighting_of_ref": "indicator--9aade21c-069c-4ed0-b9bd-4c6c3876c2c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f139cc0-75fa-4832-be74-8318da5e8566", "sighting_of_ref": "indicator--f3c69379-629f-43a7-a6f3-63599d73bb72", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ad0e7c-6e51-4a8c-9fca-6d55871a7224", "sighting_of_ref": "indicator--4e568948-4954-4a6d-8a1d-b397fedb39bb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc62c90-4314-4a7e-8f3f-50e08aaacada", "sighting_of_ref": "indicator--35b653e8-ec19-4819-a416-cfc03ee0b6ad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e91725-0966-4b14-89e1-32218e908c6f", "sighting_of_ref": "indicator--c408b8d8-98a0-4c72-b7da-5abe1a20fe35", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f82a1d-19af-4e8d-b3d1-d8dbc6b57fb9", "sighting_of_ref": "indicator--10907756-2def-4bf5-a589-6ce8edc40e5a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca892946-788c-4f49-81b4-3054d3d6d349", "sighting_of_ref": "indicator--96a41365-6af6-460e-8f22-fc17faf7fbf1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8520159-644d-475c-a0fb-406666f62170", "sighting_of_ref": "indicator--eea36551-993d-4aa8-b2c1-cd728eb6fbfb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad71a58a-c022-4096-842e-6496ebe05235", "sighting_of_ref": "indicator--cc4e988c-1481-4e4e-8e3c-0eba69f8d8ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a28bdd-345e-4a38-b846-95df1ce838cd", "sighting_of_ref": "indicator--8a16e72c-7b40-438f-a1ad-164b9636c9cd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6fda6c-596f-44f6-825f-d4c935ac466f", "sighting_of_ref": "indicator--d17a3299-a5c8-44b6-adfc-6d904dba78ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cc5e6c-b9e7-45ce-8011-ea8c39e81aea", "sighting_of_ref": "indicator--80d4fe18-c2f4-4422-8c78-f5d128ac984a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e61dbd3-2157-4e68-868a-f43fd7c7ddd2", "sighting_of_ref": "indicator--2fb864ff-a6de-47c1-99e2-e74117763a64", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7742e084-12dd-4775-975d-4ad2147cdff8", "sighting_of_ref": "indicator--1b88698d-2c4f-43dc-82aa-013395a197d7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed010b4-41f0-4529-81f0-7bb48a053941", "sighting_of_ref": "indicator--93bb7dd1-0ed3-42ac-b968-79754c365390", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f348139c-07d8-4cd9-952c-28c4640fb5e2", "sighting_of_ref": "indicator--f705dbad-9632-46de-b760-90fef5ed3249", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bb966f-d5c8-41e4-ba25-23252a5d7c93", "sighting_of_ref": "indicator--615ed99f-e428-445b-a57e-51b22b0d3578", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aece352-5b50-4388-9150-ef1e91079322", "sighting_of_ref": "indicator--af3e6ca3-aa5e-43c2-99ba-8050d2eb1e10", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cd5a12-aafd-48c7-bced-5215b1942641", "sighting_of_ref": "indicator--d9550536-1f2a-466e-9a31-00446300d591", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee762a68-e835-4097-91cf-1ad63371e2ac", "sighting_of_ref": "indicator--628ddb69-5668-4b8b-beb2-dc898fe494b6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1055e9-a2b6-41ff-be72-7f2e4be5bbce", "sighting_of_ref": "indicator--b62d83f0-03ef-4ce4-a448-736bc5add91c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2e895d-07d1-4204-91b2-dbd9a1c22493", "sighting_of_ref": "indicator--4b8e61d4-9f9f-4372-a23d-f4822b656545", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c871bbad-cdf4-4e76-bef5-cbe835518f33", "sighting_of_ref": "indicator--4b8e61d4-9f9f-4372-a23d-f4822b656545", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf28d244-7d13-4608-b0fd-a2446e77647c", "sighting_of_ref": "indicator--4b8e61d4-9f9f-4372-a23d-f4822b656545", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0120a7-49d8-403c-9eec-b5af50763e73", "sighting_of_ref": "indicator--b79aeb6c-e6cb-4aa2-b1a2-dc9973f18267", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abda08f8-d32e-4952-86ee-c285eca5cb67", "sighting_of_ref": "indicator--b79aeb6c-e6cb-4aa2-b1a2-dc9973f18267", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc36df9-a028-4186-9e2c-4b11d34d873f", "sighting_of_ref": "indicator--b79aeb6c-e6cb-4aa2-b1a2-dc9973f18267", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d02ef5-21fa-4d3b-9f3c-97dc2fcfef53", "sighting_of_ref": "indicator--6c5d36d4-486a-49ac-b8a9-d0fa507115c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46befbd2-e891-4383-84c2-3afef605a862", "sighting_of_ref": "indicator--6c5d36d4-486a-49ac-b8a9-d0fa507115c9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e30837-b7c2-44e6-9857-40fa354368fc", "sighting_of_ref": "indicator--6c5d36d4-486a-49ac-b8a9-d0fa507115c9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4a2bb5-0db7-4e26-9676-aa73a6b9b5a0", "sighting_of_ref": "indicator--1c39b721-00dd-44c3-837b-1cfed73fa4ab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b706e902-fd13-47ea-ac2e-51a5342d2bd1", "sighting_of_ref": "indicator--1c39b721-00dd-44c3-837b-1cfed73fa4ab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c2c07f-d1f8-4302-9217-47bb9af8e941", "sighting_of_ref": "indicator--1c39b721-00dd-44c3-837b-1cfed73fa4ab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5042f6e-fd42-4d27-9eec-d07a53b7611d", "sighting_of_ref": "indicator--9c3a07a9-a7fa-479b-9de9-5819b54e574c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccac230f-ed6c-4a06-9ea0-64c52c86ad03", "sighting_of_ref": "indicator--00548204-a5ad-484a-87f6-911d5417ae50", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba5e992-0735-4b43-b8b0-ef66b3c31fac", "sighting_of_ref": "indicator--47969717-906a-45f3-b07f-e3be527139d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7591d34-1d41-46e8-b98c-f705ced40860", "sighting_of_ref": "indicator--703bc2d5-d5cf-41d3-b04d-4cc1f7a9420e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77f027a-dbb0-465a-94e6-b58172e94399", "sighting_of_ref": "indicator--f1187d33-e936-4346-8e27-b4d84af24cb2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071425bb-e493-4697-8695-802eb70497c6", "sighting_of_ref": "indicator--67532daf-a169-478a-84b1-5010c48ce646", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c14525ae-af71-47ce-9b9a-d76e4b7760c4", "sighting_of_ref": "indicator--84343c54-f143-416d-a628-2f4e19471605", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755b815f-b793-4ef6-bd7b-4b6a78bc73c0", "sighting_of_ref": "indicator--84343c54-f143-416d-a628-2f4e19471605", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a1224d-c28e-4108-bb95-0e10fe00917f", "sighting_of_ref": "indicator--6938296c-3ecf-4cfb-b132-360915e779b5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87f1ba7-87cc-4b9c-a64a-bada9efc461e", "sighting_of_ref": "indicator--1a400754-5451-489d-a7a2-8fabac09e343", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da25808f-d793-418d-8b4b-d12aba4c2165", "sighting_of_ref": "indicator--1a400754-5451-489d-a7a2-8fabac09e343", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f393b06-d055-4572-9be6-282a33296433", "sighting_of_ref": "indicator--64c09f89-e533-4132-b2b2-28fdb045e1ab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78a8df5-7e52-4892-9416-3f1293a89267", "sighting_of_ref": "indicator--64c09f89-e533-4132-b2b2-28fdb045e1ab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad11ee4-6070-474a-b30f-82ed8c192dc6", "sighting_of_ref": "indicator--64c09f89-e533-4132-b2b2-28fdb045e1ab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad5c210-6250-4974-94c1-41703210f784", "sighting_of_ref": "indicator--5523c1a0-0f81-4bcc-89fd-dbb6e0b1a922", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ae762c-2e37-4522-8a9b-a84b455e2f69", "sighting_of_ref": "indicator--5523c1a0-0f81-4bcc-89fd-dbb6e0b1a922", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc42a50-3a20-4210-98cb-7a81a202cc40", "sighting_of_ref": "indicator--5523c1a0-0f81-4bcc-89fd-dbb6e0b1a922", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14242c8f-c716-41fb-8154-54d9e500e5ae", "sighting_of_ref": "indicator--4e8653a0-10db-4559-9d8f-7fc9e92df249", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcd9b34-8441-40ab-88b8-84e95fe0cc62", "sighting_of_ref": "indicator--545e5b75-44ff-46b7-9d29-66c7ffa639a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a25c40-d7c0-4aae-97fd-4170ba5fcd58", "sighting_of_ref": "indicator--bb2da84b-1a1b-446b-b845-21b07bf7692b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938e5f91-9e05-413f-911f-c653e50fabd9", "sighting_of_ref": "indicator--97723817-db1c-4283-8bb3-9f7cbc48dc84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e26c82b-841b-42e5-baed-82a7a0947370", "sighting_of_ref": "indicator--a0238bdc-38d2-4e21-bf54-0306b8bf9122", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf59613-1080-4bf3-948a-f335727f3800", "sighting_of_ref": "indicator--d6ccb6a0-e901-401f-a178-34116325a766", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b5b94a-beaf-4e5d-9e2d-81ba9a73665e", "sighting_of_ref": "indicator--7b8ae870-39fc-41d7-8a3c-184e2da23e65", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff366267-31ec-4be4-be74-f5e5888c71a0", "sighting_of_ref": "indicator--c3e297ff-bf11-417d-ad27-ed63609fbb85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ede2921-6534-48d4-9d2e-3147b9bd299b", "sighting_of_ref": "indicator--4fe24a49-8df0-4c40-adfc-959f3145b615", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f605c7-19a3-43f5-ba19-2aa5d10bf2f9", "sighting_of_ref": "indicator--1c6c495c-470b-4924-9057-a7c2273947b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b37f01-a950-48cd-8506-2a8617e3aa44", "sighting_of_ref": "indicator--6698e22a-940b-40fb-bd73-7c67c19fb138", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d21276-c22e-4d45-854b-9b884000a583", "sighting_of_ref": "indicator--7d3fb768-921e-46a5-9d86-2005fd8915b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a88d246-52b7-4177-bb1c-9b372d5b5722", "sighting_of_ref": "indicator--097b9ed4-d80b-4086-a61c-09e5f9fde048", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa457958-a26f-41b7-9791-a5dac70ab2d7", "sighting_of_ref": "indicator--9cb9533d-98b9-4829-bd75-6ffed3ffc653", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df27b0c0-b134-4b20-85cd-797e1e89591a", "sighting_of_ref": "indicator--28ada7af-58db-461d-9545-6e898139b54d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2ef067-792c-4e4e-b3e7-f00515fa0db7", "sighting_of_ref": "indicator--3c6a13f2-25ea-43b0-a512-2e6c743dbbd6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92952c66-6138-4ba1-8e19-37a8e4bfd80e", "sighting_of_ref": "indicator--6b43d30d-a79c-4510-9a74-0bb5eb38798d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2179a2-c626-4d1d-aa77-42e754a16698", "sighting_of_ref": "indicator--f3373086-d0cc-4b74-be5d-b656b6f55cd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3e5d93-e8cf-44ea-823a-4bfaf893290d", "sighting_of_ref": "indicator--ba8a0234-4c29-48c0-b2d0-87fe0f7c17c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a71e352-5315-474b-bd45-882fd00ab8e6", "sighting_of_ref": "indicator--8d17cce5-d55a-4899-bb5e-3a042743dfeb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ae601d-df03-4afb-b8f2-d3ee9ad39d4f", "sighting_of_ref": "indicator--a8ef9e2b-b25a-49b1-9aeb-d2ab103bb0a0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e4b8d2-2e3b-48d2-b8a0-95c9f0b6530e", "sighting_of_ref": "indicator--a8ef9e2b-b25a-49b1-9aeb-d2ab103bb0a0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ced0280-5499-4d57-9199-ff3da621289e", "sighting_of_ref": "indicator--a8ef9e2b-b25a-49b1-9aeb-d2ab103bb0a0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7b1d13-bec6-41bd-9792-b2abc150356d", "sighting_of_ref": "indicator--be82c619-04f4-488d-8993-931788b88063", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f5d8a4-caab-4576-bead-3db129d42a94", "sighting_of_ref": "indicator--be82c619-04f4-488d-8993-931788b88063", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4d1e71-0513-4311-9854-a1423b04be7c", "sighting_of_ref": "indicator--be82c619-04f4-488d-8993-931788b88063", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee172079-f335-4280-8250-78ff1b0075ba", "sighting_of_ref": "indicator--be142698-1697-4255-b526-c701a304e4bd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf337b92-a00b-4c9f-b641-cafe13555cfb", "sighting_of_ref": "indicator--be142698-1697-4255-b526-c701a304e4bd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e992c7-b184-48c9-a181-2c9d3717065f", "sighting_of_ref": "indicator--be142698-1697-4255-b526-c701a304e4bd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54166008-2c72-4b17-8be3-eacd6c2e6b1d", "sighting_of_ref": "indicator--227460bc-4a86-4a35-b7da-5e81c7755fc7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1323800a-053a-4d35-8330-157ae7c82177", "sighting_of_ref": "indicator--227460bc-4a86-4a35-b7da-5e81c7755fc7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3075f763-3bb7-4958-9b8c-1d530de4bfb4", "sighting_of_ref": "indicator--227460bc-4a86-4a35-b7da-5e81c7755fc7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f5653b-dc44-4f4a-ad8f-0ed2484c419c", "sighting_of_ref": "indicator--05ed8993-1085-4118-b942-ec4d71159f15", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779c42d2-8d1c-435e-9a1f-d05f867db00b", "sighting_of_ref": "indicator--05ed8993-1085-4118-b942-ec4d71159f15", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3469b507-4faf-4495-8c42-9d94b5d95b37", "sighting_of_ref": "indicator--05ed8993-1085-4118-b942-ec4d71159f15", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e9c3f2-6870-4aca-8c37-9c1752522e3c", "sighting_of_ref": "indicator--a3ab1667-cfc2-4dc3-88b6-8534feef6e5b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c7c953-09ba-4009-8f21-540e08023da7", "sighting_of_ref": "indicator--19858d47-e790-4b4f-9b2e-6bea625859d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c37d3a-e46b-4151-82dc-99e4bad3136e", "sighting_of_ref": "indicator--3c158187-06ed-462b-b169-da08f996f6ed", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297e8890-7468-4879-8f0d-3b173e378c38", "sighting_of_ref": "indicator--b362138d-21bd-4b0c-9c33-ba277977a886", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ddbeb4-c0fd-4d05-ba5b-3a4be322ff89", "sighting_of_ref": "indicator--1ebf85e8-08e4-4fec-8289-f50f5dcb8701", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9eab42b-da9c-44d3-b76d-f28554322ebe", "sighting_of_ref": "indicator--1ebf85e8-08e4-4fec-8289-f50f5dcb8701", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7966f77a-f37c-4884-8fc2-cb58a31efdba", "sighting_of_ref": "indicator--1ebf85e8-08e4-4fec-8289-f50f5dcb8701", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87dff35-9509-4a9f-8861-24e3c81fc39d", "sighting_of_ref": "indicator--26c23e8d-9f19-4957-9354-8888143ca005", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60d29e6-ace8-4b5d-97d4-fbce3bf66880", "sighting_of_ref": "indicator--26c23e8d-9f19-4957-9354-8888143ca005", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a026c93-7650-4fa0-9473-97a6f4a5b418", "sighting_of_ref": "indicator--616eef4b-64db-4d54-a1e0-d6ad830f8b77", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f40676e-f880-4e2a-a105-8f5ccd16a9a4", "sighting_of_ref": "indicator--25a328c2-5923-439e-a1fa-127054f0495c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016c1418-9a87-438e-a6b1-bbd0f7b066cb", "sighting_of_ref": "indicator--244d9996-e8e6-4a66-aa14-f877b8e15c1f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f3a01a-1351-46e5-a92d-a0027bf229d9", "sighting_of_ref": "indicator--5bfeab47-2308-4ef5-96b2-3be2132bea98", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44073f6a-d112-4153-8985-c803959fd9d9", "sighting_of_ref": "indicator--fe85595f-694e-40ea-bfac-cc3161702424", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df07194d-a564-4d12-8523-d105f9ea6e60", "sighting_of_ref": "indicator--7192c5e0-d2ae-4d8d-a195-a64f4521d808", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880b09c2-c444-4ad4-b68d-79ef06c2eff1", "sighting_of_ref": "indicator--7192c5e0-d2ae-4d8d-a195-a64f4521d808", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dcf5a8-a248-44fa-b931-0bcdee9cd5a9", "sighting_of_ref": "indicator--7192c5e0-d2ae-4d8d-a195-a64f4521d808", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ed2bca-5820-44bf-816a-b0e3426ea411", "sighting_of_ref": "indicator--d822e116-fb4e-4653-a063-b9f8f51ec952", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dbe0c7-d6d3-4d72-bb34-7564ea950759", "sighting_of_ref": "indicator--d822e116-fb4e-4653-a063-b9f8f51ec952", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103f3679-66ed-43fb-ad44-46ac42ad9f52", "sighting_of_ref": "indicator--d822e116-fb4e-4653-a063-b9f8f51ec952", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ed8ae8-8cd5-41a6-bbd4-06ddecab1562", "sighting_of_ref": "indicator--1d80fefe-1703-408a-87bd-2da4de2b46be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fedf34a-1e9b-4dca-a98b-b49efb5639ce", "sighting_of_ref": "indicator--1d80fefe-1703-408a-87bd-2da4de2b46be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b36d98-b157-433b-b778-de2b662f5455", "sighting_of_ref": "indicator--302bfca6-070b-4e3d-b4c3-f756dd57fb1a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e331ea6-b8b7-4b37-a2d1-88dcca6ff3f7", "sighting_of_ref": "indicator--72d62808-721c-4720-935b-883791fd3890", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4291f7cf-2d05-4cdf-9996-4f7d3f8bd01f", "sighting_of_ref": "indicator--6decae54-9978-4fbc-8154-79d62c02cc7d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf382f9-e766-4c4c-b7c1-ed9e03015fac", "sighting_of_ref": "indicator--5160e874-f035-4ec0-abf5-a9d851df93e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ae085b-641b-45fe-bf4d-54f3d60b1e33", "sighting_of_ref": "indicator--653c0cdb-625f-4759-afe3-49ff0152c701", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb82487-897a-44fe-bbc3-4ffbaece29ab", "sighting_of_ref": "indicator--a160a4c8-4f91-4081-bfc6-f5186c0544b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c7cbc3-ef7b-451f-a6a0-da59782e1767", "sighting_of_ref": "indicator--d90ec1f4-0f93-4744-bfb7-669cb4b850b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f22476a-1400-4bfd-8dc6-afd3cbf61f7c", "sighting_of_ref": "indicator--d90ec1f4-0f93-4744-bfb7-669cb4b850b7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a186e9-180a-4515-acf0-a7ba50e215d5", "sighting_of_ref": "indicator--d90ec1f4-0f93-4744-bfb7-669cb4b850b7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e02e043-4316-475e-930d-3273a4a80098", "sighting_of_ref": "indicator--60d63f09-a417-4ed7-9dbd-ce73a054c0f9", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e66d53f-0ece-48f5-a6dd-ebe1a30b6f33", "sighting_of_ref": "indicator--cc9d4ad1-ee63-4545-bdeb-cdce296e7243", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f44c52-ff25-4cb8-bcee-2dd36dee6540", "sighting_of_ref": "indicator--691fa7ca-e3b4-4fb3-863c-d88e1f1ff846", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fba926e-6944-45a3-9308-a6d86ad8d4d6", "sighting_of_ref": "indicator--cb60b935-1b8e-41e5-9ef9-9c8e642bf58f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c339fb-e5fa-4fbf-a91e-6d00517c009f", "sighting_of_ref": "indicator--554b0b84-ebcb-4b7b-8cd9-38190899d346", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dbdcec-98e0-4c3d-96df-9653743142d2", "sighting_of_ref": "indicator--834cc284-af01-4d66-a4b6-88b6344b5f07", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34f8b64-cdee-4b69-a3fc-933d97613630", "sighting_of_ref": "indicator--c1c0714e-68d5-4ff8-98e6-82a5a1a5040a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e0aa49-14d4-429b-a0e3-3e64dab2573b", "sighting_of_ref": "indicator--a8d1dbf5-eace-41cf-b87c-cb3bf70803e2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0a9ba7-91aa-4890-91d5-d20ac76b7f32", "sighting_of_ref": "indicator--d4960722-bd9c-4b35-a9c1-b45ac75d6ffa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0067fdf9-5131-4e76-b08d-f0125d623cff", "sighting_of_ref": "indicator--1a152c19-ce0d-4b59-baea-34874e8effc6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261e6c8d-8b03-4432-b58e-90369d14afe2", "sighting_of_ref": "indicator--8fcc95b6-17d1-4728-9695-c4d0ee5420e7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0454a422-18aa-40b7-9f43-c3e62c17ba90", "sighting_of_ref": "indicator--cfa26c9b-3a2d-488c-ac6e-e0f9b2c89009", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686c581b-8cb7-4454-9e70-08d9108d012e", "sighting_of_ref": "indicator--95827ecc-b565-4056-bd1e-818085498234", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b0c63d0-43c2-4b34-be01-e77b57f0b84b", "sighting_of_ref": "indicator--08b3f1bc-435a-4259-948a-f06085e09fa8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1487301-1a1f-401a-b33e-26fa8e34afed", "sighting_of_ref": "indicator--cf960b39-b928-4951-a43a-069bc11049b4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec17b25-6ff2-4c89-8b2b-9f3cc8f505c2", "sighting_of_ref": "indicator--dfdf18d0-9873-49c6-a2d9-dcdaca814a99", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f20aca-dca5-4bf2-9987-5781cf4b16d6", "sighting_of_ref": "indicator--146da34f-1aeb-4e16-9dee-225f61f5944c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ef5269-f7f0-44fb-960b-b38678d47442", "sighting_of_ref": "indicator--ea421944-733b-40a4-9f72-dddf53d9280d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886a1b5b-cc12-44a0-bdf4-c25e2b63be43", "sighting_of_ref": "indicator--3799a32c-735a-4ee5-8dd6-cdf500dfdfb8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5a836c-d605-41d6-b5c3-ad252ae20906", "sighting_of_ref": "indicator--3868e844-d1af-427d-b7e4-28aff4ea418c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49653e52-2ea7-4303-9c91-10037cecf21a", "sighting_of_ref": "indicator--28331a9a-70c1-47a6-a738-dfe87dccfb8f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d0a446-e3b8-4fcb-aa46-9fd425cd31ec", "sighting_of_ref": "indicator--0c358022-9c96-4cba-902c-21fabf6c4ca3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599ea1b8-cbc6-4fe8-8a6c-15b906618ce7", "sighting_of_ref": "indicator--b6d1dd68-79b6-46bd-8b59-88448b51a187", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c469dd11-d815-4e5f-bd09-a07e997c0aee", "sighting_of_ref": "indicator--b64727d0-e9ef-476d-af54-094a84e9ed38", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d7671d-c8e7-411b-bf62-81a06b177a3a", "sighting_of_ref": "indicator--0ce694f9-50b1-4c61-8ae7-48dabcacfef5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd974dc-2c44-4632-be41-e96332b84b86", "sighting_of_ref": "indicator--a964192a-b195-466c-bf43-84c4d034566b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238a166f-250c-4690-829d-68f250ae7967", "sighting_of_ref": "indicator--158ecf59-8ff0-4886-9610-c87b9e25c640", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac015e8a-9a81-4828-a0da-635ff195a68c", "sighting_of_ref": "indicator--925b141a-b5d7-484d-a2d0-0cfe7be9762a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572282d0-1cc4-42e7-b1fd-3908effcddd3", "sighting_of_ref": "indicator--bd1058b1-6989-49fa-90d1-5b9c2331b7a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79f1a43-bb04-45e9-802d-5ab6e08e06eb", "sighting_of_ref": "indicator--77f07cfe-2534-4fc2-b56c-e87389d521b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd7d214-4e9b-4acc-a2ca-b7614d2f6d21", "sighting_of_ref": "indicator--fc0ba877-a03f-435f-9707-5ca119ce9f65", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d1e548-cb44-4e84-b349-55c2844c2109", "sighting_of_ref": "indicator--dc795b19-0396-43ac-b69b-5463d6ded329", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ed4aa1-44ab-4698-b094-323eacef6869", "sighting_of_ref": "indicator--451f5e1f-252b-4060-93df-3f8c85c7542c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0619353-dbba-4301-8714-08fb68722722", "sighting_of_ref": "indicator--02e3a09d-3de8-48b1-9666-49c85a4940ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b3f316-b4f0-4714-87fb-5d2d349fd341", "sighting_of_ref": "indicator--c0f9c15f-58a8-4a5d-a9c3-a912be28fa83", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1e8e9f-9392-492c-be81-9f7c7e4e942b", "sighting_of_ref": "indicator--f9d36937-e65b-4b35-b69e-9f1a5859097b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f8fbe7-acea-48f8-af56-caccff0e7653", "sighting_of_ref": "indicator--6927185c-6969-49a8-bb18-2b4f73957566", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0ca3d1-f893-428c-a03c-75bea63f7924", "sighting_of_ref": "indicator--98ea8fc9-f3bb-45b7-8723-59eef55bbfbb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52368a9c-5c0b-4c47-a3e9-7a6e960648ea", "sighting_of_ref": "indicator--28f0c069-bdc6-470f-b841-0134dc4b75b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b554071-772b-4391-bb95-07b07dae4ea8", "sighting_of_ref": "indicator--c6089836-4d7a-409c-880e-7a63c3e18bab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9dbde5-0c8e-47f2-9026-7e4fd84b8ae6", "sighting_of_ref": "indicator--fa58c563-26ba-4548-8489-0d0876f120ac", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893a2ff0-1e27-44c2-a13b-f0c9d8e697e0", "sighting_of_ref": "indicator--6e3038b9-9091-4515-b940-37df7635a641", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b06ae25-5bb7-4c67-be50-09f07ba8b0ed", "sighting_of_ref": "indicator--d21563c9-b8ea-4f61-9f0a-a1b5522bc13c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf905216-3971-495c-b87e-1cb634fa65be", "sighting_of_ref": "indicator--c220dd86-51a6-41c6-bdb4-66e6442d980c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb830216-dbce-4abb-b0e2-300c78aff4bb", "sighting_of_ref": "indicator--27540c57-a007-4cc0-a794-03a34a5a6981", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b31e88e-fcd7-45fb-8215-f3c2861a1187", "sighting_of_ref": "indicator--54daf9b8-a054-4492-96f2-a5c31841eaa5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94d0d6e-e4b8-4b14-afd1-b5c9ce37ec82", "sighting_of_ref": "indicator--d939b4b7-7cda-4d4e-a4fe-c989b94def24", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3233943d-f335-4c64-bb07-37d7bdb70768", "sighting_of_ref": "indicator--4fe69a6b-6634-4061-9169-0ff20fa5ff32", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7ce38f-5bf6-452b-a4db-5392ce414ba1", "sighting_of_ref": "indicator--2062f6c4-430a-450a-8b14-ff1564c9f137", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e40057d-b593-4ba0-8665-279799469a1c", "sighting_of_ref": "indicator--0843b3bf-8702-45d3-8b43-1461ff285a13", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25460f9a-9502-44a6-8bbb-71d5a5b4a9a7", "sighting_of_ref": "indicator--211b8b49-ce69-4178-93a6-9f36242785ce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc63119-d3c8-4ffe-9904-3d6a6ec93f49", "sighting_of_ref": "indicator--c6e75b57-2007-4ddd-843d-02494af28f72", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c916f49-426d-4203-b64d-a7a6db9091e5", "sighting_of_ref": "indicator--d59bd054-76a9-4d6a-9884-8f08af9fb143", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751a4b95-7263-4ba3-84ae-fa1d5c13e7d2", "sighting_of_ref": "indicator--5c1146a1-72f1-4c5e-9898-503bc44b2653", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1611dbed-2991-4296-aa8b-b0bb71fd6ed6", "sighting_of_ref": "indicator--6e70d54b-c831-4575-907e-b74a8b4e8676", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f984755-0170-4ff0-89b2-16543d69e037", "sighting_of_ref": "indicator--0dd11a56-5673-48a2-abc8-6e8c3e652dcb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f146306-0606-46f7-a21c-e12bc5d7773f", "sighting_of_ref": "indicator--0a3c7e54-cb9a-402f-8558-53bdf2105d83", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8030db-cce9-4cc8-9031-78bff7c11c5a", "sighting_of_ref": "indicator--c22a946a-dfad-43ea-979d-a72836cdddcc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7ed0ff-e862-40f7-8f7c-78c2dc410b80", "sighting_of_ref": "indicator--3ca8008a-17e6-4b80-94f5-a8ec3c4d0101", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7f020e-c9da-47bd-94fc-acb1fbc39771", "sighting_of_ref": "indicator--50bd559e-5c6f-4261-8628-de031e45608c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3af813f-bfb9-47c0-8867-cb312a7fbe2f", "sighting_of_ref": "indicator--c7182f51-6f89-435c-95e1-57629256fb86", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54545bbc-e9cd-4369-b7b1-c6afeb541893", "sighting_of_ref": "indicator--e90d3677-e1ff-4289-bc09-bcc84243d16b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10668918-1b61-4816-abfb-80a02ff9037c", "sighting_of_ref": "indicator--07d9f868-3afc-46af-a456-0eee2ac87762", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e93e78-407c-4bb9-adaf-c9f7c272c8b5", "sighting_of_ref": "indicator--45770a47-0f1d-4276-b675-86ca0b6b520c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b979d4-297c-4ed1-8103-800ff2cdda46", "sighting_of_ref": "indicator--56af6313-f411-4d73-9732-2519228c94e0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0020ef4-87a2-4074-bbf4-91355d06eb21", "sighting_of_ref": "indicator--f950dec6-df94-4593-bdab-c97774979883", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf85fb9-ebab-4fe4-af50-92af3237b7b0", "sighting_of_ref": "indicator--52760b7b-975f-4460-8a61-550e933b9eee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7191af-3810-447d-a97e-1cc281f5430d", "sighting_of_ref": "indicator--2f157f52-b919-4e47-92f3-bf5a6931d603", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cd7aac-b251-40c1-9079-9886835c38cd", "sighting_of_ref": "indicator--bd10345e-15bf-4ed8-be0f-b2cb65b8588b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8eaa66-b150-4aae-ac72-0cda8fa63ea9", "sighting_of_ref": "indicator--cf448ce4-8191-4fc6-86bc-5bb60cf12234", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b448d2d-1a81-460a-91ad-29e312fa5ea6", "sighting_of_ref": "indicator--04345916-58fe-4dbe-9cb9-920d02c1088c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ee3495-1c98-4e26-9176-db0413360cf8", "sighting_of_ref": "indicator--b07e8064-1c02-4389-b03a-3079df57f74b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70616c3b-d061-4963-9b16-a256f0ef9508", "sighting_of_ref": "indicator--0dc5a6b9-967c-49d0-8a97-5653e49bd60a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933e06fa-e9ac-473e-b691-70f79288b882", "sighting_of_ref": "indicator--45857067-8dd0-4ca2-9b03-11050dc948e0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c306f5-37b8-4b48-aefe-1dce897e7405", "sighting_of_ref": "indicator--bc826c5f-46ce-40ac-b491-a464a7f38e98", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56aee0c5-8011-48c8-aada-afacbd364d0c", "sighting_of_ref": "indicator--af2efa50-c8f4-4ae5-aab1-96752df91956", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada4a3a8-c4b0-4614-8d54-fc60aed6eb57", "sighting_of_ref": "indicator--9f447faf-0492-4ce1-ba6d-e3896cde2a50", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25a47062-460f-4ac4-b370-d70e6c9b32d1", "sighting_of_ref": "indicator--714cb237-ee6e-4c5e-aa8d-347c0601fe90", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865751d4-4b70-4acd-9e76-7f78deeafa4a", "sighting_of_ref": "indicator--563e4d5a-20ec-4e2c-9b31-9aaa9b3de31c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1304ce81-1dd5-4691-ae22-25e3c2f9ed76", "sighting_of_ref": "indicator--d2f3f1ba-add9-4aa4-9d46-92b222858bc6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8953af0c-15f6-43a6-9695-6d21fb70bc6f", "sighting_of_ref": "indicator--2eb82f9d-8073-43ad-8be0-9fdb6f9ab792", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6dcc78-d92e-4c29-955a-954337a58540", "sighting_of_ref": "indicator--bc00541f-88d9-4b17-9a49-9370da679679", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a68f2b6-5ba4-4c71-a2ef-73bc0e463acd", "sighting_of_ref": "indicator--b7223820-90ba-47e6-bf00-c424a541eb12", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a492788-ba4a-4611-a066-8b16d819eb5d", "sighting_of_ref": "indicator--db7fe3ba-eb1c-49e0-a35c-23b271447772", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affcf227-1245-4027-b59a-96a47df46d3f", "sighting_of_ref": "indicator--a5e86713-cdf8-489c-8844-e798f5e4db4e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c24eed-c699-417c-ba5c-83ba5dc4c420", "sighting_of_ref": "indicator--36b1073e-8c08-4caf-b484-273f8cc54af5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb72df4-da22-4061-b194-0a5013e0caaf", "sighting_of_ref": "indicator--65024925-2fc5-4353-9e0e-34a87f261f2b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f23c454-e4b6-469e-8889-8df0c1aa1a5a", "sighting_of_ref": "indicator--e1b37894-8289-4049-b0ba-55fcbb1e9468", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576ad9e9-8e36-4c63-94b6-4bc269dd8e4e", "sighting_of_ref": "indicator--59889a86-89d7-430d-94af-8ca0673d9397", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32c3a64-cfa0-4c1b-93c8-67d8e011810f", "sighting_of_ref": "indicator--163b4b08-b1c3-4f22-9f11-e6ce66f801d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c42212-3a59-4a7f-8256-8f51f5d4cd94", "sighting_of_ref": "indicator--cde486bd-9dd2-4f21-8eaa-c98968bf8bd3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079d5930-2970-44ea-87fd-1f15266b83b0", "sighting_of_ref": "indicator--d363d60d-ce24-4f4d-bbc0-293cbc892cc9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97c507a-a163-4ab9-8aa6-2418fffe2d20", "sighting_of_ref": "indicator--c41e8c8c-477c-48e3-86eb-306a97231e3c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8848c301-e56f-4b59-b6f8-192c2d124c8a", "sighting_of_ref": "indicator--c5cfd33f-1469-42ca-9e41-d7a5502294f0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608387a5-daed-4e2a-9e53-62fe0e670292", "sighting_of_ref": "indicator--fdc097ef-2d72-45d0-93fb-4dbdd017579a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab693ae-593c-4408-8b96-8e299e8c5c0b", "sighting_of_ref": "indicator--8579d157-5e21-4e0b-87f5-1062c1a6c756", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f046396d-819e-4dbd-a2e9-df3caf02e0f8", "sighting_of_ref": "indicator--72872fb5-c417-44df-8658-36dc411940e9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab0c2fd-6ee2-4937-bf9d-5a04d578a8c9", "sighting_of_ref": "indicator--305913c5-4f6d-4507-aaa6-1ad30b0fbba2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c70ddbe-1f9b-4b76-8630-7c6bf956ae2b", "sighting_of_ref": "indicator--1d006e68-09c2-4add-9f34-2d1d55a42373", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b20bc12-232f-4a02-ba30-72b44143ca59", "sighting_of_ref": "indicator--fc1a0b8a-928f-491b-9c9c-3afd084fb82d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384fb0fd-c89b-4c73-8e60-333d8be4c1ac", "sighting_of_ref": "indicator--a7e04012-672e-4e07-abec-225d679b7ec6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e3a86d-1b42-4e5c-b74f-4b6ec1d98adf", "sighting_of_ref": "indicator--314107be-7feb-4975-aff0-ff0af788d96e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e612234a-e86b-4173-bc2c-b2742ef2c55b", "sighting_of_ref": "indicator--3218f81a-bacc-4edf-998f-71b28b15b5bd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed75715-4db3-484b-bc73-d03c1bfa6633", "sighting_of_ref": "indicator--77ae6f80-f078-48c3-b374-e1bfb824040a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ab565c-01a4-4775-84f8-ab7cfe7d1761", "sighting_of_ref": "indicator--7e633d94-e149-4e7f-abf8-9e9c5d858ef6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768e92b8-6e7f-4855-8c4c-eab41d9576b3", "sighting_of_ref": "indicator--53996541-498e-440e-8a7e-2ce7c3e59f38", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb08ea1-5423-4c8a-986d-64105453f6f7", "sighting_of_ref": "indicator--8b544bb1-5f49-42bb-82c9-e56c17c3b187", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817c7ad1-4a42-4bbe-99a6-b46d376f862a", "sighting_of_ref": "indicator--03347c30-038e-493a-a6fd-1e6863e2c1e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ce8b8e-2c61-4393-b283-cf66d98806ff", "sighting_of_ref": "indicator--e5c7fd81-25a7-48a7-a2ff-726225a55ab2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835f2ca1-860a-4429-a107-49348c2f85e7", "sighting_of_ref": "indicator--cb6bc63d-82d6-449a-8933-a4b4aa50faaf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a2e148-c3d8-4505-b64e-01d60591da4b", "sighting_of_ref": "indicator--aae95289-651e-49ed-b089-7748efb9ef65", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292230a2-6c99-4b68-81c4-6d32185ff4fa", "sighting_of_ref": "indicator--a41dd696-c19d-4ef1-b466-d8eadfc1eea0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6e14ed-63c0-4f6b-89c1-d91c7889bed3", "sighting_of_ref": "indicator--416a06bc-979c-4f51-86bd-a80779712dfb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ab062d-eb25-40d3-90dc-e6481e7ff416", "sighting_of_ref": "indicator--34e6f02c-9e18-4e82-921c-471722594a24", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c421f651-e833-41ee-a2c3-bebfa320f577", "sighting_of_ref": "indicator--6754f543-de98-40f0-bdf5-cdf4bcd87649", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcdcff2-6041-4769-b02c-e6e1408fd3a0", "sighting_of_ref": "indicator--6f903ac6-6c86-4b13-b8c7-acf70f20ae54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e6b159-1b36-4a7a-8616-2d0e7fb00947", "sighting_of_ref": "indicator--efb8ca04-bf5e-4041-b9f3-d29cfe878bdf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a61e93-22af-4027-8c54-d7597846b626", "sighting_of_ref": "indicator--779d4e6d-80aa-42fa-8d70-5c1684cbf940", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116ab3d3-4523-4e69-bd83-fed7f86c0ca8", "sighting_of_ref": "indicator--f62c0578-8b49-4ea1-bb4b-e1e90640f7c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c498ea46-d55a-4c40-97be-b6104f93143a", "sighting_of_ref": "indicator--0e1a3dbe-c3a2-48be-9447-b525cd450157", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf98ddb-b8dc-4c0e-a34d-0f0ffdda758f", "sighting_of_ref": "indicator--418e428d-d44b-400e-bfd6-e13feee3fce8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb254e6-175e-47be-a3c8-dee5656086a9", "sighting_of_ref": "indicator--0741a4e2-1eaf-425d-9911-a3e27750722e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663b5efb-0297-4a08-8973-8268c9579029", "sighting_of_ref": "indicator--71fcdae2-7bb5-40dd-a6cc-bc9ddac6a9bb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d768d2-2a0d-4f90-97f8-ad694bf4fe56", "sighting_of_ref": "indicator--e09b60c4-6aa9-452b-91ef-5547c3059ff0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18464e8-1837-4654-b6a0-5e1f94498752", "sighting_of_ref": "indicator--ab1f76e3-5146-49fc-917e-ea7d833646ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6bb2ee-fed2-46e5-a15e-1ecf943913c6", "sighting_of_ref": "indicator--42596cd2-0350-4bb4-b391-d908b8c727d9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bed8107-ba4b-4907-b9b0-5cfa12fd127b", "sighting_of_ref": "indicator--befa97e4-5e11-4bcb-ba10-66d62984f465", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd173b7d-52e7-4b58-832b-6adfd4f8b88b", "sighting_of_ref": "indicator--6b2ce02c-0263-4ca3-9627-141a3ea73ce6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4e6372-bb99-4616-b784-c759d587200b", "sighting_of_ref": "indicator--be2579b4-032c-4521-9809-2c4e24ea15d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df54c10-6c3f-4a48-b048-f14fd937296c", "sighting_of_ref": "indicator--5a843b3d-9094-4c03-9312-5857157b1bcc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5058fdb7-f32d-4e18-a42d-27be0f3a8cac", "sighting_of_ref": "indicator--53524441-b1ba-422e-b8d1-8367930edd80", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33653e7e-4c4f-450a-aef8-56c7cab632e5", "sighting_of_ref": "indicator--aa140ce2-6db6-4972-b028-ded0247d8d4a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f838376d-f1ee-4414-aa2a-839fd77b579f", "sighting_of_ref": "indicator--59bb9ecc-21b6-42c1-948d-5c8f4bb7decc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e16e7fe-c875-49f3-bba6-2e59e1beb834", "sighting_of_ref": "indicator--38d23cc7-0618-43e3-8d52-477ac2cd6b18", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd267dbd-c77d-47ef-a137-59b27f76cf97", "sighting_of_ref": "indicator--81caa4ae-e00d-4232-a2f3-9e7de56affbe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8099b2fd-fdac-4431-9521-6aea022ec21a", "sighting_of_ref": "indicator--48b3b26c-8a7c-4527-a61d-13b5210c4668", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5ba557-5366-492c-9862-1b40c0b20a9a", "sighting_of_ref": "indicator--c250dfe0-19db-4b06-914f-3b5aed5b70af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a12eda-6c6b-49b4-8547-612f9f86a29a", "sighting_of_ref": "indicator--16fbfe26-6ccb-4049-aea2-4fb75d0fca7b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7862d65e-0cd7-4387-8478-9b0c535ff6a2", "sighting_of_ref": "indicator--89a769df-119a-4072-a89e-955d1b438924", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1621bf9c-4245-44b3-92a0-d7ed72de73f3", "sighting_of_ref": "indicator--355d30b6-c4be-43ac-880f-4960fa1e69e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cca56a-a849-499d-bd88-4184f38275bd", "sighting_of_ref": "indicator--aed0fbdf-6670-4adf-ae6d-d91988fe4004", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170f07dd-5268-4c46-82fb-5245ac736f5d", "sighting_of_ref": "indicator--fe30035a-2d99-498c-ab38-ecc307591069", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153ac139-606e-4efd-ac99-8739061a2ef4", "sighting_of_ref": "indicator--8f908dea-2392-4fab-933f-065b00bb49c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f98276-4e6c-4497-955a-37a4e5915a15", "sighting_of_ref": "indicator--c292b0ac-d765-47e4-b156-9614fd942fcf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcb34a0-dcf9-4ed8-84d5-647b6ee9935e", "sighting_of_ref": "indicator--ed02b4bb-64dd-4db5-8ebc-37237e37d7e9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c5d126-9556-496b-8121-2b76b6ea1874", "sighting_of_ref": "indicator--b983c571-3eeb-4b28-ad89-5fcfc3a892bc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35424ae-3f9f-4af1-89e3-34c380d58eb6", "sighting_of_ref": "indicator--ba9cb344-46fa-49b1-910d-385b06c42695", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ee13f8-95d2-4fef-82be-06fe2197f303", "sighting_of_ref": "indicator--03fdb135-8df8-450d-89a5-bfea0ab51752", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b74a240-81ed-495c-bd33-8896cb23aeba", "sighting_of_ref": "indicator--b9c452c6-bd15-4989-83c3-c5001dc1deb8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d9f7ba-bb53-41ed-b45f-97d0615bd3ec", "sighting_of_ref": "indicator--cdd17835-4bb6-4191-bd9a-e8741fc451c0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd255d3-e571-4352-8de7-298fdb283ddf", "sighting_of_ref": "indicator--8ebb2a6e-5276-4479-8cdd-b2a5079c3eb2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52274152-5162-4589-9b27-efd98681e642", "sighting_of_ref": "indicator--3404398d-b683-43c5-aae9-93d784496f2e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2eaa0c-e0d9-43e2-a383-563de074c2b7", "sighting_of_ref": "indicator--6f105f00-cd25-4f11-8b03-0070c86cc887", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776d635b-7ca5-4669-8b2a-6812e997c4fb", "sighting_of_ref": "indicator--abf284d2-7427-4533-9a12-154f2fe2342e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d992f3fd-c4f6-4cbd-84bd-a34daf79cc29", "sighting_of_ref": "indicator--f0fd4de8-e35a-44c2-9acf-52eac28947dd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e0f4f9f-ba3a-4fba-9b47-157dfe414472", "sighting_of_ref": "indicator--7e11eb04-8514-4f8f-b9bf-8061e038aed2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c924d2b-a268-4377-b879-a0519303c9e5", "sighting_of_ref": "indicator--aed234d4-9031-4e04-920e-03684e11d261", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a533eba-cd30-46c8-a33a-86d2f102fc3e", "sighting_of_ref": "indicator--87bc1777-e3c1-47c1-ba41-21fab7d98bb5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96892339-cbba-4069-a110-5e6005b4b5de", "sighting_of_ref": "indicator--d19fef07-2da2-4538-ac20-664ea61fe215", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670ef2dc-b32c-40f9-8454-655bf6f159ba", "sighting_of_ref": "indicator--9cafa076-736c-48bc-a80a-0a9f10f4f172", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc50e50-d832-483d-9e1b-0d6eceb298d8", "sighting_of_ref": "indicator--bafe1776-3b1f-4b57-9b33-a4b3051daa0b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca9f470-c4e9-47ca-aaef-eaed39507281", "sighting_of_ref": "indicator--a2f160b2-77f7-44c0-b329-9bf0b3986690", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9b44f1-ffb2-478f-8d1a-13531e7cc23d", "sighting_of_ref": "indicator--aa419188-8390-4b9d-a327-051954b08233", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615e8a1f-41f9-4243-861a-1cf1bedceb79", "sighting_of_ref": "indicator--ad55d779-c312-41c0-b22a-ee4626d20a79", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c4bf64-ea86-4b89-bb03-53b831a3b5b6", "sighting_of_ref": "indicator--f3cb181c-9865-4a3d-b8e8-024dd6a92429", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315434b5-92c0-4776-8754-0f72db6ea5a0", "sighting_of_ref": "indicator--d57ac6bc-c1bd-4ed2-a763-274029331ebd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9092b3c2-2a7b-4a69-b13e-6354eca339ad", "sighting_of_ref": "indicator--97aac01d-372f-44dc-afc9-d768c84ce35a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8719d7-f940-41db-824e-617989292108", "sighting_of_ref": "indicator--ff235385-8141-4ca6-b168-c26da1b08194", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64c8337-3c5b-4a6b-ae28-8271c33153bf", "sighting_of_ref": "indicator--0620be7e-3750-4d46-85bc-332c19d9fcb6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c05362-9cc6-43ab-9388-a0c3e85d3cdd", "sighting_of_ref": "indicator--14671a53-d7e2-465d-8612-5676c40928b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b47ce63-019a-4cda-8dd3-2cbdc45ad8b8", "sighting_of_ref": "indicator--b154fee9-5948-4276-81b3-8d83e6f5e13a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440778d7-33b3-49df-ba00-36d3a05858bc", "sighting_of_ref": "indicator--360e24da-4b1c-43a4-9728-8debe364891f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3135997e-60bd-4d28-a8d4-d0973f30fad5", "sighting_of_ref": "indicator--85093768-225d-4982-be83-4552d749366e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3327d7d-7155-43b3-9431-51aa39f9c558", "sighting_of_ref": "indicator--d20f0349-70d9-43df-9cfb-b0972cdf4c14", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee45eae3-5fcf-483e-8bef-466ea4b6995a", "sighting_of_ref": "indicator--e7c07190-1a32-4c6a-81a3-33e56cc1d5c8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd70a610-2982-4564-8d47-e582ce0db7ba", "sighting_of_ref": "indicator--cacc1448-b694-47c9-98d9-54aa23aa3fd3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c270ae-f0ee-4e6d-a3af-9a705c606db5", "sighting_of_ref": "indicator--09cdb3b4-accd-4185-93b8-b63fe866ff65", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e516c04f-8c36-49dd-94c3-bbdb27886c5f", "sighting_of_ref": "indicator--63e5462d-d028-43af-a926-15e44d890f13", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42aa3699-2f64-4b1a-83d9-48259792f2ab", "sighting_of_ref": "indicator--5861b359-efa0-4065-9c63-03c9412c7544", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c479c3-1ac2-4950-8451-4001c6e0d2e3", "sighting_of_ref": "indicator--950ec6fe-7f1f-45e3-a7b8-b2852961374c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60172bd3-98ce-4f06-9741-5226aff28d27", "sighting_of_ref": "indicator--7880412e-9e62-469c-a419-1e3440523462", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f877bc7-2475-487f-8e97-b438ecdd9378", "sighting_of_ref": "indicator--9e73ffcf-4b08-4fe7-8ec9-dec5b5b96b72", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551ec8c0-6a9c-48de-898b-1d2332571293", "sighting_of_ref": "indicator--f58ab9aa-352f-4fa3-a7c4-1fd12406d54a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92888128-6d5e-4d58-8cce-842ab769fe41", "sighting_of_ref": "indicator--801d8290-8f7d-4e40-a249-baf61623bf7a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac10baa-7d39-4ce2-a4f5-7ae3ad999ad9", "sighting_of_ref": "indicator--733e7526-9989-4b4f-a118-f23d19cc0aef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae244d4-0678-4249-921e-fb8383e42ff7", "sighting_of_ref": "indicator--70877ce8-cbe8-43b6-832b-e73944e32611", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c747c9-3a6a-4655-9099-a9f41fb3464d", "sighting_of_ref": "indicator--15720b26-4503-4dae-bf25-ab08ff590129", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d025abb-ed20-41bb-a1f2-ef8daf73fd74", "sighting_of_ref": "indicator--27a06ecc-9703-49da-8f8a-74280626bc20", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4540b48-89bd-4bd0-af70-02457714b2f4", "sighting_of_ref": "indicator--498e2178-0b71-44ce-945d-f2fe82ba2373", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea556a1-308d-4742-9259-0e53eae35c16", "sighting_of_ref": "indicator--d188d4bc-c949-4def-bf2e-2aa8b66fdea1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d71237-8b44-4f8b-94b7-620eedc8ffdb", "sighting_of_ref": "indicator--ff146f57-fe42-424e-8cc6-4b23ab7987ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f55e5e-dcbe-4243-9702-e3e49b6926b0", "sighting_of_ref": "indicator--3526a9f5-fb21-48ee-85f0-3f989c35804c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7f1870-cce7-4118-9c2e-506f843a4829", "sighting_of_ref": "indicator--ee3ce772-e617-4e2a-97e5-18b80584fb3b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64928c76-ed8e-44d4-adde-71fb7771a863", "sighting_of_ref": "indicator--b5ec0823-c9b1-431f-ab31-d74bd5021506", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d5ce06-02eb-45f8-91b0-7129a978f855", "sighting_of_ref": "indicator--f7bbc7d7-47a8-4964-9ef3-16a172e16fff", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a351e435-94d4-43c1-adfe-2e6d7454539d", "sighting_of_ref": "indicator--c7afb8fc-697c-4b24-a7eb-125c5888c39e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4949b5bb-471d-463f-962e-b397dfd94dd1", "sighting_of_ref": "indicator--83e08be0-27e9-415b-b1e8-626704ff418b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d568128a-6d41-4978-a4d0-16f0b33613c6", "sighting_of_ref": "indicator--1fb464b7-a4d8-4ab3-8487-844ae5509409", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e685509-fd27-494f-9735-0716387ab99e", "sighting_of_ref": "indicator--4a38a112-bcd1-4638-8183-b71c01999e37", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c21af4-0250-4cc8-a990-6f5a81014a7f", "sighting_of_ref": "indicator--0233652d-aa7e-463b-9d42-6569ee9dda91", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3834f8-f820-4c5b-8aa6-5afc6326b781", "sighting_of_ref": "indicator--be1003b0-a981-4489-9199-54e45e22cfaf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b578e0c8-842d-49a3-8452-786bebe1f902", "sighting_of_ref": "indicator--689270ca-2b74-4be8-a88d-dcd83ef62132", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c913817f-f662-424a-a0e7-a89249c94bfb", "sighting_of_ref": "indicator--b9b4e84f-0376-4c7a-bace-3505e6cbc286", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bc1379-86f5-4ea3-95fb-71b10df4fa7a", "sighting_of_ref": "indicator--ffc9788c-f905-4381-a44b-9523b1da9bc2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945fb235-cf4b-4988-a42d-4be089f46138", "sighting_of_ref": "indicator--bea89d49-26b0-49f0-b91a-3e3f32b22f9f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9bf319-e155-4a39-8405-d9a78a4b140e", "sighting_of_ref": "indicator--588ccf9e-870b-4f05-9e0b-de27e89872f7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7dd4423-bbf7-41be-b30a-ed39bcc47a6a", "sighting_of_ref": "indicator--8b57bc68-9f48-424e-bd30-2e92a3177a03", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f13e1c-7492-4632-9cb3-0130290672f2", "sighting_of_ref": "indicator--e75254a0-bea6-4f90-a455-2ad19c9fde13", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868a095e-0f48-4e0e-821f-9b1ca1a50d5f", "sighting_of_ref": "indicator--27b9a89e-f17e-4831-be7e-60cc896c3de2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74703c58-6ec7-49fa-8349-d55ce776a304", "sighting_of_ref": "indicator--fe453b23-5227-46ef-a26e-a44a97501e16", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a316364f-2fa7-4a80-870b-a353a74f6819", "sighting_of_ref": "indicator--71b68b08-e96c-4b35-96ae-30340f397b71", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99c3e68-1ad5-442f-858a-a65b92bff78c", "sighting_of_ref": "indicator--2235e283-a306-46c9-9bdb-1301414c7dc0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a1feaf-f406-40f5-91da-9fdc79eeed82", "sighting_of_ref": "indicator--95a1b6be-25c4-401f-b304-8c1cf68128a3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c28a255-0efc-4225-b35c-3bbc0aae7573", "sighting_of_ref": "indicator--fd30a93d-2873-441b-aa77-c5b9f8c69184", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768a688d-9720-4be0-a446-5a052a9be036", "sighting_of_ref": "indicator--98a770d1-0b4f-436e-a6a3-885be1d30ff7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031deae7-3f93-413d-b0b9-25d720fdf5d2", "sighting_of_ref": "indicator--9a0ab37e-06a5-41c9-a38d-359afcd0e69f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651690eb-b6b4-4fe8-87ff-64010eba7692", "sighting_of_ref": "indicator--196df5e4-0659-4d30-81ef-c1dbfec362d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542df3f9-4fa1-4aa3-b379-6487aa366e4e", "sighting_of_ref": "indicator--a2918b3f-5afc-4446-8e0a-0f0dafd8aa5d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0579ce9-25d3-48e7-a05a-db8cfa9dc215", "sighting_of_ref": "indicator--86324dff-c242-43a9-b485-92bd1e8d1f70", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f573579e-b43b-401b-b451-b1cf0ab3f13f", "sighting_of_ref": "indicator--f7ad088b-0ecd-47a1-abcc-94cb8467a36a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b686576-8954-450f-af81-81aa83e2e4cd", "sighting_of_ref": "indicator--aedb33ef-9f58-4106-a51d-00fca5767939", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000a36aa-db57-4600-8800-e46335f5c810", "sighting_of_ref": "indicator--da68f9a4-ac66-467c-8943-8952055544bc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107dc56f-7479-439f-ae36-12f84bbf953e", "sighting_of_ref": "indicator--8aecea66-54a0-4a92-bd1e-9d28fa92b87d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a794d19a-5859-4d19-bf95-b144ba9279f8", "sighting_of_ref": "indicator--1bba4aab-5fe3-4904-8a8a-6749206e7bb3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5e6546-8519-4b40-af38-d208755d9636", "sighting_of_ref": "indicator--f9de85a4-fc9a-455b-9a0e-1c628ab0ee2c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859d4766-ee4c-4966-9b1d-8634982fedaa", "sighting_of_ref": "indicator--036371cd-bd78-4c56-ac5a-d68c4a0c27f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f5c07a-f814-4d36-981b-1ec815455acc", "sighting_of_ref": "indicator--f05c8a2d-6099-4555-9b1b-cde241d7341c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544c5345-4937-41f3-a21f-d4510ecf0ec1", "sighting_of_ref": "indicator--0e677753-e37b-47a9-94cb-f95734701512", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14fb697-e123-482e-ac9e-c0d09643b84c", "sighting_of_ref": "indicator--6781359b-e1f9-4b5f-ad31-29ceb193f0d5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad85c49-4e28-4e43-97cd-5ed25f47383a", "sighting_of_ref": "indicator--132add8f-7481-4226-b2ce-3fa68db4bb18", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e136041c-2d96-4c48-831f-cad27675b93d", "sighting_of_ref": "indicator--5db9f0a6-ba0a-4643-9381-c965da05f49a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca1873a-31c3-49af-9977-0ae82112a2b0", "sighting_of_ref": "indicator--070c4975-d3d4-475c-9eb8-3cd047957550", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d50a4de-a0a3-40d1-8a4b-c49a8d12f74e", "sighting_of_ref": "indicator--6b2a8074-22b0-46fe-8a1c-a97a170be11e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04eb358-2157-4244-aec2-21cd550090c4", "sighting_of_ref": "indicator--556beeaf-ecdd-4852-a3e6-79e023481de6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5dd4a3-750b-496c-b770-9ce2b87b54fe", "sighting_of_ref": "indicator--1a547cd0-f689-4348-82d9-8150779f2367", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0d22b1-b5dd-4c6c-88f8-328bd1c71c11", "sighting_of_ref": "indicator--d2f05a9b-d81b-4274-9d20-006101da6e7a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d721613f-f310-431f-b56a-bda41aa239fb", "sighting_of_ref": "indicator--77b2a838-fb4e-4e5e-8266-991a6e7653ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfc2bec-fe21-4e0f-99c4-42672ed92cbe", "sighting_of_ref": "indicator--dd0655ae-68ef-481d-a0af-0aea8a575f26", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d540b4da-1798-4ee2-9f23-5da5a9ccc884", "sighting_of_ref": "indicator--49dafbf2-f066-4bef-ba10-9bcbd2443d95", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23f75de-a4d4-4c05-8f50-a1e79697bfba", "sighting_of_ref": "indicator--3fd9dcc0-8895-4b5c-a376-f5feb731644f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a9e580-780b-47d0-bae4-44394182250e", "sighting_of_ref": "indicator--3e8e9096-90c7-494e-9582-477cbf335647", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18eb39d1-cc12-40f2-9928-312a7e2575ed", "sighting_of_ref": "indicator--3e8e9096-90c7-494e-9582-477cbf335647", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96544d5f-a826-4085-9d4a-ea9a6c5f0141", "sighting_of_ref": "indicator--e347603d-3639-4fe3-ae0d-52f54b83e8b2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490f8de5-399c-40ab-a5dd-455c23640448", "sighting_of_ref": "indicator--69605fa4-17df-4841-a25a-9bdc0e4dfdfa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8d862b-067f-420e-96e2-3a829bff1a5d", "sighting_of_ref": "indicator--69605fa4-17df-4841-a25a-9bdc0e4dfdfa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a653bb11-753e-47ca-894f-e0ecaa2d4c6e", "sighting_of_ref": "indicator--69605fa4-17df-4841-a25a-9bdc0e4dfdfa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81c5aa9-71fd-416b-955f-f85f68ec753b", "sighting_of_ref": "indicator--6e7f8b0b-5fed-4284-ba5f-f48c3669dd55", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dabbb9d-c4d7-469e-b124-c7c379da0bbe", "sighting_of_ref": "indicator--6e7f8b0b-5fed-4284-ba5f-f48c3669dd55", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd272eaa-9d9d-4bd8-9ed5-e7c61ea48866", "sighting_of_ref": "indicator--ad45fdc1-7a9b-4479-98c5-7e7e7656cac7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d3ed65-71f1-4286-bfb9-0fcad26d0138", "sighting_of_ref": "indicator--bf5df756-e2dc-4c19-86f1-230290c8584b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8096c77b-c171-45cf-ba11-0d11d7ce034b", "sighting_of_ref": "indicator--09840db0-a7ea-4d7e-a388-441307d03b41", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5fa108a-f7bf-420d-b81e-a6e05108bcbe", "sighting_of_ref": "indicator--09840db0-a7ea-4d7e-a388-441307d03b41", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b11d85-2ae3-453b-adc6-9d3c6a1fc92f", "sighting_of_ref": "indicator--09840db0-a7ea-4d7e-a388-441307d03b41", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b4acd7-13cb-4188-830a-d570db6cc0e7", "sighting_of_ref": "indicator--1289df66-333d-4d7e-ba58-27d35ca0ab27", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2b8fda-ac38-4c11-bc63-70a7a2b6f6b9", "sighting_of_ref": "indicator--1289df66-333d-4d7e-ba58-27d35ca0ab27", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcb839f-6cba-418d-a7af-5cb4a4b568a1", "sighting_of_ref": "indicator--1289df66-333d-4d7e-ba58-27d35ca0ab27", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b533c8-aad4-449d-9148-4fe73c25e1d0", "sighting_of_ref": "indicator--fc7d5e54-ff74-48a6-aba2-e3f03ba3177f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde2cb25-0d5b-4bdc-80a8-5462975155a5", "sighting_of_ref": "indicator--fc7d5e54-ff74-48a6-aba2-e3f03ba3177f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9314f92-fa24-47cf-9d25-f2e10fa45664", "sighting_of_ref": "indicator--e9c8bf16-a2b8-4683-b49a-47b4459b1288", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786dd5e1-c36c-44c7-a5d1-872e1a8b3c3c", "sighting_of_ref": "indicator--e9c8bf16-a2b8-4683-b49a-47b4459b1288", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97d0c2f-4c2b-42bf-84a3-fe4490ebdad9", "sighting_of_ref": "indicator--e9c8bf16-a2b8-4683-b49a-47b4459b1288", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4162fef1-81b8-46f7-82cf-55c1e90d039a", "sighting_of_ref": "indicator--ec8f9b42-20a9-4ef2-af23-aaaec5f61fce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72310294-c224-4bc7-9779-501256ced902", "sighting_of_ref": "indicator--4c98168e-a8ed-4f6d-9343-fb50556ed8cc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c86afd-f434-4457-a7be-7d17fc45ccd7", "sighting_of_ref": "indicator--0577a888-e5b9-48bb-b331-e42cb3b36e2d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329c3a1c-2000-4684-82bf-1a9001c40f28", "sighting_of_ref": "indicator--0577a888-e5b9-48bb-b331-e42cb3b36e2d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3917c4e-e52b-474c-b28c-50b9b8158a8b", "sighting_of_ref": "indicator--0577a888-e5b9-48bb-b331-e42cb3b36e2d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f60f0c6-9afb-4d95-b510-bbe7691b8ede", "sighting_of_ref": "indicator--ad50c435-b835-4a93-8477-cdbcc536a4ca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82411d54-07aa-47c3-8246-5f9269870314", "sighting_of_ref": "indicator--ad50c435-b835-4a93-8477-cdbcc536a4ca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75e11b1-3d60-496b-ac6a-2a06b786fc23", "sighting_of_ref": "indicator--362dcdd9-f64f-42d1-951f-0fb133d9e4af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2e76fc-c803-47e7-a288-4106e83b4944", "sighting_of_ref": "indicator--362dcdd9-f64f-42d1-951f-0fb133d9e4af", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee401dd-deec-4693-8b23-0e6e1ac7ae89", "sighting_of_ref": "indicator--362dcdd9-f64f-42d1-951f-0fb133d9e4af", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004e5138-5df3-48f7-8906-2777d89b26a0", "sighting_of_ref": "indicator--f6dfaf88-5f57-427a-bc62-5a38ceea3c7a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31749047-62af-4e8d-88a4-815833b92850", "sighting_of_ref": "indicator--f6d48b2e-4759-42f1-87fe-5bedc10ef918", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc473b7a-b9e3-4007-a645-3913e54cadbe", "sighting_of_ref": "indicator--f6d48b2e-4759-42f1-87fe-5bedc10ef918", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7e7975-2d7b-4e9e-b3c3-9a1a5581f041", "sighting_of_ref": "indicator--f6d48b2e-4759-42f1-87fe-5bedc10ef918", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73658cc5-2c4d-41ae-8ff1-5f8cf57bfeaa", "sighting_of_ref": "indicator--ba4bea35-b322-4520-b0ab-4d5836f850e4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2526be-6bbc-4a34-bc35-4c5e0d8c407f", "sighting_of_ref": "indicator--ba4bea35-b322-4520-b0ab-4d5836f850e4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e897e723-5eb6-4fdf-9455-5db152ca9cab", "sighting_of_ref": "indicator--ba4bea35-b322-4520-b0ab-4d5836f850e4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c023d1ca-cf5f-484c-a015-e4903261f181", "sighting_of_ref": "indicator--0ccf7b31-029f-4c27-b552-582026df35a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a8043a-fe5d-45eb-b0a3-d90a1440a0af", "sighting_of_ref": "indicator--0ccf7b31-029f-4c27-b552-582026df35a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169b2246-2f7e-48e6-96f0-0e5341da5fe0", "sighting_of_ref": "indicator--0ccf7b31-029f-4c27-b552-582026df35a5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a76ceb-b5f3-474d-82ba-f5123c8dc28e", "sighting_of_ref": "indicator--2a836870-c8f9-41b8-a231-4267846d3ef7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e9ee12-aea7-4ae4-846f-ae17dd093acd", "sighting_of_ref": "indicator--2a836870-c8f9-41b8-a231-4267846d3ef7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b85e4b-8e53-4d46-8437-48edada696c9", "sighting_of_ref": "indicator--2a836870-c8f9-41b8-a231-4267846d3ef7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef298d42-50a3-4e3c-b045-8cb968f90654", "sighting_of_ref": "indicator--8a19fc39-ff55-41c1-bca2-36efc919fc8b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a1c3ab-0890-40a3-853a-4114244c5c68", "sighting_of_ref": "indicator--8a19fc39-ff55-41c1-bca2-36efc919fc8b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23f532f-75e4-4726-9313-0a9a64ecc196", "sighting_of_ref": "indicator--8a19fc39-ff55-41c1-bca2-36efc919fc8b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd78ab1b-0512-4718-b7d9-b17b7b8733ec", "sighting_of_ref": "indicator--dfb235e6-5b5e-4591-9a81-3e6864b4a8c1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d29d07-d34d-4f5e-a89a-50893ea99c50", "sighting_of_ref": "indicator--dfb235e6-5b5e-4591-9a81-3e6864b4a8c1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51023634-4b67-48cb-932d-29efe9b05990", "sighting_of_ref": "indicator--dfb235e6-5b5e-4591-9a81-3e6864b4a8c1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770f5f94-59e2-4541-a6b0-72e9e558a69c", "sighting_of_ref": "indicator--a6f91886-ea61-4e0f-b5f6-d7a9bb22b537", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21409211-eee3-4886-9d82-fbfb6b090ba5", "sighting_of_ref": "indicator--a6f91886-ea61-4e0f-b5f6-d7a9bb22b537", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5175c5-5947-48f3-82bc-d01f4c770e9b", "sighting_of_ref": "indicator--a6f91886-ea61-4e0f-b5f6-d7a9bb22b537", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917baa0e-04f3-41ba-933d-b297726c3a45", "sighting_of_ref": "indicator--3b10349c-5f11-4a9b-b0cd-6728192b5a22", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec67b23f-6a04-4752-9d10-65db7a8d1fe5", "sighting_of_ref": "indicator--3b10349c-5f11-4a9b-b0cd-6728192b5a22", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192a32c2-78dc-40bc-8c60-cf9e044f6e2b", "sighting_of_ref": "indicator--3b10349c-5f11-4a9b-b0cd-6728192b5a22", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c923082-3866-4aed-8606-5cff9fe121bb", "sighting_of_ref": "indicator--c8b480f8-e3fb-4757-bfba-64b319f03282", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651bc5cf-1ff7-4762-81ef-093cceee2f72", "sighting_of_ref": "indicator--c8b480f8-e3fb-4757-bfba-64b319f03282", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22d5583-dcf2-40c3-af6f-39f8f75d9678", "sighting_of_ref": "indicator--c8b480f8-e3fb-4757-bfba-64b319f03282", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3499f009-f6d0-4495-bf87-0df05c8ec099", "sighting_of_ref": "indicator--cf3588f0-86cb-49cc-ad74-6291d4ac24fe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadba5b2-85b7-4ad9-a46c-fd9b7833a89a", "sighting_of_ref": "indicator--76ecbbf0-05b9-4478-99d0-aa8483c03519", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70205a7-e649-4d28-a65b-9d6f86193634", "sighting_of_ref": "indicator--0ff5619c-efbc-4497-b343-12d3e5cfcaa1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b51504a-692f-4b3d-9e54-48784ccc291c", "sighting_of_ref": "indicator--0ff5619c-efbc-4497-b343-12d3e5cfcaa1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc3459a-5694-4835-9405-8f3d656ce926", "sighting_of_ref": "indicator--0ff5619c-efbc-4497-b343-12d3e5cfcaa1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb3ce08-ddae-4570-9544-ae020ae465d4", "sighting_of_ref": "indicator--7931c32e-6b4b-40e7-a15f-ce1c8a75f0f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac78a10-e9dd-4dc5-8422-3f23e68c3dd5", "sighting_of_ref": "indicator--7931c32e-6b4b-40e7-a15f-ce1c8a75f0f1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9d119e-eff5-4c46-b9cd-8539b0375048", "sighting_of_ref": "indicator--7931c32e-6b4b-40e7-a15f-ce1c8a75f0f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c1ce55-0714-4cf4-95e3-557d37b1a42e", "sighting_of_ref": "indicator--6d051595-8b45-41b3-b04c-2cde4e978aa7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86dd50ab-2102-404c-a8ed-f3191a57079d", "sighting_of_ref": "indicator--6d051595-8b45-41b3-b04c-2cde4e978aa7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b33490-67ca-4ae7-a4cb-b60052d14e8d", "sighting_of_ref": "indicator--6d051595-8b45-41b3-b04c-2cde4e978aa7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f00829-32ba-4bdc-b176-f5e724440212", "sighting_of_ref": "indicator--aa10e820-7cf7-410b-baa1-d462828b516d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254c5641-d529-40b8-972d-e389741241cb", "sighting_of_ref": "indicator--aa10e820-7cf7-410b-baa1-d462828b516d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4e2850-5bb5-406f-bda4-ecad73934c13", "sighting_of_ref": "indicator--aa10e820-7cf7-410b-baa1-d462828b516d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd4ad9f-4917-44b1-91eb-9b553403f848", "sighting_of_ref": "indicator--5ddc1ca9-d4fa-43de-bc89-6ee11fe236b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4299cf88-426c-4e7e-8c98-0c8e82ffbded", "sighting_of_ref": "indicator--5ddc1ca9-d4fa-43de-bc89-6ee11fe236b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d95e6f-ff4e-4cad-a3cc-2bdc201fa88d", "sighting_of_ref": "indicator--5ddc1ca9-d4fa-43de-bc89-6ee11fe236b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b538a5fc-c832-47b6-a512-adc259fa8caa", "sighting_of_ref": "indicator--a379a137-d967-428d-b1c8-f1abc687febc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51493d6a-b6f3-4a62-8194-4ef43567085b", "sighting_of_ref": "indicator--fbc7ae73-ee70-4bf4-906b-18cf8bf58353", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63127576-82d8-4e79-830d-c679e7e44f6a", "sighting_of_ref": "indicator--50243b8b-efb3-4437-9515-f1767582154e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a54b6bd-4fef-4d7d-b525-ffa162d639c7", "sighting_of_ref": "indicator--6a64e5de-71c9-4a25-bd15-551ff74505b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba32722-5d24-4c47-aecf-6c201b524def", "sighting_of_ref": "indicator--f28ebb98-efb6-468a-86a3-f29412168f8b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7af475e-0e74-43b0-9e2d-9432d177cce2", "sighting_of_ref": "indicator--6978900d-4969-47dd-bed3-db5f33f85682", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acef14c1-ee10-45e9-b58d-245c67bcb77d", "sighting_of_ref": "indicator--55c41745-6ef9-48b2-ac7f-60ab1d07b54f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc165669-699d-45b1-a678-de78ebb4a588", "sighting_of_ref": "indicator--55896067-b595-41a1-a8d5-600d5a4e9ef7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d59040-d9aa-4286-ad11-efdbd8bb780c", "sighting_of_ref": "indicator--cef29111-f9b3-4aae-aa4b-c2a0fba4fb69", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e9d3d4-12bc-470d-a0f9-e7925f1cd4f4", "sighting_of_ref": "indicator--cef29111-f9b3-4aae-aa4b-c2a0fba4fb69", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb589ec7-b376-42e8-bcb0-71efb77fac40", "sighting_of_ref": "indicator--cef29111-f9b3-4aae-aa4b-c2a0fba4fb69", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2512b7cc-8e07-4e56-ab47-40b72b1f279d", "sighting_of_ref": "indicator--d3651e3f-1661-4955-80dd-08234d008ea7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2485ee1-cf48-4bb7-873d-b4baefb13253", "sighting_of_ref": "indicator--241bd2f0-19f1-40de-8868-f90a5f12bd85", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00289bf9-a3b2-4f28-b1be-232203add134", "sighting_of_ref": "indicator--43e6e422-c07e-45fa-9abe-333c44a2eaf5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261bfc42-fa45-4eb4-bccb-b705dcfacedb", "sighting_of_ref": "indicator--f8a9f1b8-786b-4c99-bce9-91527ec79c68", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53724bb5-726a-458f-afe4-b62d5b50e4ec", "sighting_of_ref": "indicator--f8a9f1b8-786b-4c99-bce9-91527ec79c68", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cde5c98-8452-4ac1-a6b8-a33157cf46c6", "sighting_of_ref": "indicator--592a7c45-012e-484d-8181-2090cb2b4571", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94234724-9520-4804-8d17-b2ad3b76c053", "sighting_of_ref": "indicator--9ccaf7b9-deb3-4a6c-91c3-a886f9676a30", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0464fa7-0d58-4e6b-99ee-ec903dc9766b", "sighting_of_ref": "indicator--72269330-f486-446b-bd4f-b5ca26ecd728", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c65764c-c3f7-439e-9fd0-432795084348", "sighting_of_ref": "indicator--e9a071a5-e6ed-4305-b877-142d4629a368", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d803371-c6e6-4b2d-a8af-b0bb3ff6d615", "sighting_of_ref": "indicator--e9a071a5-e6ed-4305-b877-142d4629a368", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d27508-5047-417a-a30d-01637cc7ab66", "sighting_of_ref": "indicator--46f0e63f-d518-48b5-99eb-5c38af7361c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c81760-d863-4a60-a77d-12181a3e4365", "sighting_of_ref": "indicator--7725a22b-18d0-4cb3-a139-5044d74ef0e4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd85532-d20e-4f9c-8f62-7097bfc62b06", "sighting_of_ref": "indicator--7725a22b-18d0-4cb3-a139-5044d74ef0e4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9eb7106-447a-4e73-894a-5833746778b0", "sighting_of_ref": "indicator--f0d7e007-0029-46cc-b38c-ebc0e14e49dc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a944de-8f95-4c29-9eda-ecea3c5e7856", "sighting_of_ref": "indicator--f0d7e007-0029-46cc-b38c-ebc0e14e49dc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c81ffa-8301-4044-ab81-9ab7d08cae10", "sighting_of_ref": "indicator--f0d7e007-0029-46cc-b38c-ebc0e14e49dc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997c1f26-5a0c-4d6a-a558-bb6abf764a79", "sighting_of_ref": "indicator--c8dc4329-caff-4a8c-8dbc-f2bbccc238e6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47960f4-233e-4a69-9944-24d3c6106294", "sighting_of_ref": "indicator--c8dc4329-caff-4a8c-8dbc-f2bbccc238e6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11689570-c492-44cf-99cc-3de12a402c3d", "sighting_of_ref": "indicator--c8dc4329-caff-4a8c-8dbc-f2bbccc238e6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97ede21-b60f-46be-af83-6896f00c76c8", "sighting_of_ref": "indicator--775592db-d4a9-4566-a738-5c4183b4d729", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3767c9-cd6f-494a-a967-9c31dc132823", "sighting_of_ref": "indicator--ce7d8043-4e2f-4707-97ee-625612e43654", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab1a43d-3e38-4521-8db1-6505b62984a7", "sighting_of_ref": "indicator--b25b891d-327a-4d38-9f05-56e678494d40", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c05093e-a5f8-462e-a643-f51a950534d5", "sighting_of_ref": "indicator--d52f018a-9256-47cd-b449-7ffd6b859a04", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f360e3ea-806d-4139-8777-a1f564dda5aa", "sighting_of_ref": "indicator--5347748a-36e8-4f6b-a659-049d0e3ed854", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f476e9f0-8f21-4222-9d28-04426ec95292", "sighting_of_ref": "indicator--6e9058a2-4110-4c49-97ae-c9665bc11255", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d3cf18-6a7a-408a-8f14-d9a9c0717285", "sighting_of_ref": "indicator--b25b9046-372f-4450-aec0-8aa48f7a2247", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31f75c7-bf37-43a7-9caf-f3fc04724d33", "sighting_of_ref": "indicator--8628ba93-d71d-464a-b712-ebbe893c1fac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc6920c-a268-41c4-84ef-f9760849cd5d", "sighting_of_ref": "indicator--e7f00316-4dbd-49a2-9625-aa9a8878898d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54850fee-a4f1-4b30-b6ad-43a386851e39", "sighting_of_ref": "indicator--1cf48efa-a3d7-492d-8aba-9b38b9c9c174", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a17f1b9-e513-4df7-87d3-50ac08ea1f85", "sighting_of_ref": "indicator--1cf48efa-a3d7-492d-8aba-9b38b9c9c174", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12347044-d5d1-47e6-9951-15d788d2a950", "sighting_of_ref": "indicator--ee1b8901-ac0d-4381-bdd5-d1e0ff6085e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9528c32f-a9e3-4b23-ae48-4d50e8075d20", "sighting_of_ref": "indicator--be670b2c-d2f5-4346-8b47-b0ab808ff745", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccdc671-c22d-4cf2-8f47-218dd3956976", "sighting_of_ref": "indicator--3a28d2f7-5113-46f5-b110-e5cc7235115a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2aedab-679b-4d7f-8622-35603dbd7bb1", "sighting_of_ref": "indicator--333adab7-39f3-4cb9-90cb-6b8f2af998b3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675af6c5-c891-4c25-aaa1-6c29a1b83b76", "sighting_of_ref": "indicator--02b8c6ad-e424-4782-957c-0ee163690501", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63edc9a8-503f-4907-b74f-dea6095c0d9a", "sighting_of_ref": "indicator--02b8c6ad-e424-4782-957c-0ee163690501", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf9d658-ed89-4934-969f-c0ae98d5c420", "sighting_of_ref": "indicator--96c09acb-a86a-4d99-9748-2b595e9ae2cb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ba99b0-a8f7-4b94-b164-28c3a32701dc", "sighting_of_ref": "indicator--8320d9bf-9da5-4e81-8da2-5228f475ff4f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbe1a8d-67f3-4aa1-8086-07ac90d62f7d", "sighting_of_ref": "indicator--c4afdfc5-ca3c-4040-a701-f5b9669bafae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab65f75-ae4b-4be8-92d0-914ffb381d92", "sighting_of_ref": "indicator--b8a65e4f-ba62-4d9b-a522-eaeac8df0fcc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974e3a95-a31e-414a-bb72-edf375e8c5cc", "sighting_of_ref": "indicator--d2b383f1-d945-4e8f-8670-5c80544fdaf8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e566c7f0-e104-4ae1-bea4-80bea24e5b8c", "sighting_of_ref": "indicator--d24f479f-2f7a-4d80-8316-bbc21c2d79df", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578d3dd8-b925-4ab1-a744-bc2af5322cf8", "sighting_of_ref": "indicator--e52268b4-a5cb-4815-9ba6-026e7b6fc92c", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d36594-c16a-4cff-8205-59c271ff939d", "sighting_of_ref": "indicator--e7923df0-3bd7-4ce3-8955-817240538127", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f23cc8-b049-4a27-adc3-5da5e072e7cc", "sighting_of_ref": "indicator--b9be7de5-3b6a-401e-aef0-9f49ab1f1252", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf332cce-658c-4bed-b845-1365387618e6", "sighting_of_ref": "indicator--405b9292-ae87-4dda-9c7e-f7cb9e4c3b65", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9280ea10-4792-4373-a7d6-b23b211a161f", "sighting_of_ref": "indicator--81cddd4a-61d9-411a-8403-c62705f00671", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb7e1b6-4ea7-47c0-b42f-4076904c279f", "sighting_of_ref": "indicator--aabd2fd6-1726-4a44-acf9-e216e79a2ff1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86678299-d5fe-4bd9-a5a6-3f50dbc91c3f", "sighting_of_ref": "indicator--17b5364b-4bed-4783-bbfb-c58667d45819", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22420f1-5b2f-429d-bcd6-c8c81b240a2b", "sighting_of_ref": "indicator--402361dd-5a96-4030-8c61-1fba85ea2280", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32852991-0c40-468b-b7e5-61fc8c20d0f5", "sighting_of_ref": "indicator--402361dd-5a96-4030-8c61-1fba85ea2280", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625a556b-1b8d-40e8-8570-d3a940a46df8", "sighting_of_ref": "indicator--402361dd-5a96-4030-8c61-1fba85ea2280", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71028067-8cb7-437e-82c7-e923229ca906", "sighting_of_ref": "indicator--ff7945c7-2b6d-461c-b6e5-127eb723816f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3284e9f2-5a61-4dd8-b0eb-981540a8f463", "sighting_of_ref": "indicator--3d4067af-09ab-4170-b146-9d2f974a21fb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1342e5-ef49-424e-b513-64c35476fb36", "sighting_of_ref": "indicator--2f8d6b8a-f7ae-4c89-abbb-076b93bb1393", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0f6994-94ad-40e5-a24e-c796e4b1a71c", "sighting_of_ref": "indicator--569d7ec3-2fe3-4070-b0e7-851314c51486", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b65b59-5e4a-482a-9150-b1e2fe209683", "sighting_of_ref": "indicator--d8f6203b-e92f-4023-8d4f-31168e99067d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58156a25-2619-4e60-9074-c922d72f1b4c", "sighting_of_ref": "indicator--a65bafd7-8cf2-420f-89fa-9057286325e4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdecd7b-ba48-48ba-a30d-e593b8c8fc82", "sighting_of_ref": "indicator--f43970b9-7c27-4e43-ae07-43a680283e3d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced6788a-ea08-466b-8be1-84b74d9b4c1c", "sighting_of_ref": "indicator--d7905b76-cd35-4fe2-8660-bf2fe5d7b6c4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d8ca84-3ac7-4203-906e-a7c973562f95", "sighting_of_ref": "indicator--150f2b43-4b8e-450c-97e3-89931fde8ba8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d756c0-da9a-4072-a556-d08c449d71fb", "sighting_of_ref": "indicator--d85df998-894e-4d44-8714-aa1557f6547d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f00e1e1-7ec3-454e-a321-2de93718e3d6", "sighting_of_ref": "indicator--696a6f3e-80c4-4970-b31d-62094af8a2bd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ca70b1-99d4-419d-bb9d-d8cf1b2ff0fe", "sighting_of_ref": "indicator--eafa162b-fdb4-4d46-9f63-165d02799213", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b10d90-7ba9-4ff1-85a9-437cb66b9e08", "sighting_of_ref": "indicator--bd83068d-f570-46d1-b14d-7303cac4ad8c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779c9de3-04f3-4346-bb4e-282eb1069d52", "sighting_of_ref": "indicator--6bc8dcb0-cc14-46f0-9aea-ec1e274a8bb1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967fb151-59b1-4866-b8f1-af975008d206", "sighting_of_ref": "indicator--6bc8dcb0-cc14-46f0-9aea-ec1e274a8bb1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaea3a8-54c8-49dc-9267-36e77c91cc6d", "sighting_of_ref": "indicator--6bc8dcb0-cc14-46f0-9aea-ec1e274a8bb1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc52c20e-756c-4c9f-9e3c-f13d24e8649e", "sighting_of_ref": "indicator--eb2fa0c0-1963-46e6-b0c2-c853ddd27c2f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62c593d-dfa4-4de0-9e8f-f07b5678fc78", "sighting_of_ref": "indicator--eb2fa0c0-1963-46e6-b0c2-c853ddd27c2f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e8d903-3eb5-492d-84db-eaa5f76fdd01", "sighting_of_ref": "indicator--5117aab3-6900-481f-9ac8-30f547566b7e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fddfc8-f76f-40c2-9ebf-0c8db7f67120", "sighting_of_ref": "indicator--f45e9d5a-5272-42df-ae05-81532c99500d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c4b2a5-b26c-4c5b-acb4-d1c3c63d4767", "sighting_of_ref": "indicator--f45e9d5a-5272-42df-ae05-81532c99500d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c9e081-fd1a-4447-9631-6a1eb300f678", "sighting_of_ref": "indicator--48d28347-4ebf-4c3f-ae7c-1491288cbf21", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc045f85-ab92-4abc-a7a6-06c6b471840a", "sighting_of_ref": "indicator--12f62c29-6b9a-4ff3-a9dd-fb405d856634", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e71bdc-b19a-474f-80f6-f5aaac3fc4d5", "sighting_of_ref": "indicator--566b7e67-80b6-44b0-bb67-5da43e0a9c3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d047c1-d781-4e78-a45b-681a50f675aa", "sighting_of_ref": "indicator--48f05e18-2864-4703-9683-99758b79eaeb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b20d24-e01e-4946-a489-90e69bf95400", "sighting_of_ref": "indicator--7b23f97d-1360-418f-9eb8-d936b885e7da", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09165909-9dc2-40c0-8830-f02254d0b6c6", "sighting_of_ref": "indicator--4539341f-4008-4cea-8183-cd35768f3ec9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f314eb-a4a7-455a-a0a1-fd23f2a3b928", "sighting_of_ref": "indicator--695f41ad-c9b1-436e-b54f-4d6b0b95c722", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8322a7d7-db6d-4166-a009-59d667744d13", "sighting_of_ref": "indicator--695f41ad-c9b1-436e-b54f-4d6b0b95c722", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c29daf5-57c2-46dd-bed9-e550624cd7c2", "sighting_of_ref": "indicator--bc59c3a0-c6b3-4e10-a1bc-e682d2461f62", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33784f94-868d-413a-a1d1-55bd0545d2e6", "sighting_of_ref": "indicator--37b67ded-8c24-48cf-aa9f-c8510a61415a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bc767a-88af-4403-b71e-f02d1328e1d2", "sighting_of_ref": "indicator--45d19646-b061-4039-af3b-de41143e7c3e", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b7577f-a297-47b7-86bc-172b3f535698", "sighting_of_ref": "indicator--74128397-baff-4e6e-a1b0-c7db95b1ea14", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a2ffc8-e7f7-48c2-b421-fd8f2e1f2f6f", "sighting_of_ref": "indicator--c9249ae1-8780-4902-bbdc-660312dc432c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdd0336-a366-4fec-86bd-7af2d090c507", "sighting_of_ref": "indicator--6ecd6cc5-1c39-4c28-8fa4-13ab515f929b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da73677c-58c0-4fc5-abc6-627b393f7e25", "sighting_of_ref": "indicator--c800f106-798b-40a3-8a97-7e3f0b45134c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb74ef3-01b3-405e-8f9b-3cab0f612c41", "sighting_of_ref": "indicator--5df309bb-ac61-4b6f-9d21-10f18d3b3d0e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa84bbcd-4d29-4759-ac92-2486b3408d33", "sighting_of_ref": "indicator--437b8a3f-f65b-4c8a-ae0f-1866de85259f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcba283-75b9-4872-a98e-a8436e571f42", "sighting_of_ref": "indicator--d56ada49-62f7-49a3-bd60-2ec9dec9c4a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a83a0d-7a55-4bce-9044-1972332906eb", "sighting_of_ref": "indicator--3adada06-cbfa-4154-a0d3-6dc38fb94373", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502a5d93-15a8-4830-83ed-d6d478ab00b4", "sighting_of_ref": "indicator--ffc360f8-2972-4b2c-834d-9ca1f328bb74", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6297d4aa-0916-493c-851e-efd044e52c37", "sighting_of_ref": "indicator--78ed3c62-88a4-4bf2-9335-430f47c08923", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13378c19-3267-478c-9a51-850f0be0767e", "sighting_of_ref": "indicator--78ed3c62-88a4-4bf2-9335-430f47c08923", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cad6c88-bd70-41f2-abbf-354ebb58f792", "sighting_of_ref": "indicator--b59072d3-527d-4f56-94b6-a78472f09df7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae1851e-b2ac-4e4c-b966-3d3f6f0b0b34", "sighting_of_ref": "indicator--b59072d3-527d-4f56-94b6-a78472f09df7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f72d092-ca2e-4c57-bf62-c1d1b7568ae8", "sighting_of_ref": "indicator--a3e1961e-9c41-4a64-b046-818d15a4f992", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c584baab-c28d-4ffe-b821-0a6d8993cb96", "sighting_of_ref": "indicator--d84e8e4c-1bca-4fff-b36e-999b02b708c5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1f2651-f6ed-44b6-96e5-6990836d163c", "sighting_of_ref": "indicator--d84e8e4c-1bca-4fff-b36e-999b02b708c5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ecd822-6fa0-4e29-b1db-0d20073511ad", "sighting_of_ref": "indicator--7dbdec3f-6c58-4821-b080-724af7db3d0d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc864fa3-e081-4e6c-934d-01d6d82bd4b8", "sighting_of_ref": "indicator--fc872e02-95de-4550-b642-50bf930d5239", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960d5c59-e480-4f5d-86d8-ebdcbac19a9c", "sighting_of_ref": "indicator--61563cec-58f3-4c1c-bfd5-9070158af2d8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d693ad0b-8fa7-4b54-829d-4a58f9915489", "sighting_of_ref": "indicator--61563cec-58f3-4c1c-bfd5-9070158af2d8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d571381-1b3d-4978-80d2-e9a4fae0ef5b", "sighting_of_ref": "indicator--61563cec-58f3-4c1c-bfd5-9070158af2d8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dd6d05-92cd-4360-b199-fbf08c576fb7", "sighting_of_ref": "indicator--135f26f1-b937-4ab4-a94d-2d86ac99e284", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8716f27-e760-4ed6-b469-cb60e63d1268", "sighting_of_ref": "indicator--135f26f1-b937-4ab4-a94d-2d86ac99e284", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759ea058-4ab6-4916-9efb-7201c2564245", "sighting_of_ref": "indicator--135f26f1-b937-4ab4-a94d-2d86ac99e284", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59845c77-bc6e-43f6-8d9f-82805f2e81a4", "sighting_of_ref": "indicator--9d987bdd-e3fe-4b74-932b-6c7ee7174f4c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e60333b-3e9e-4fff-bbc7-897bd6ab1e24", "sighting_of_ref": "indicator--c0566ef8-9064-43a1-af40-74317485f56f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49a95d0-77c8-41fa-9570-742610691c06", "sighting_of_ref": "indicator--c0566ef8-9064-43a1-af40-74317485f56f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c457f2b7-8480-4987-b20e-db3e750521d6", "sighting_of_ref": "indicator--c0566ef8-9064-43a1-af40-74317485f56f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb77d05-4af2-4b5f-92ce-30b11f4b6494", "sighting_of_ref": "indicator--c3d3b040-7b1c-4cec-9318-b5ad3e550f5a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cece0ba5-f73b-4961-826c-8711e33ca8e1", "sighting_of_ref": "indicator--000466e1-a5c4-4f25-904f-7e6d551f600d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c65a68b-d855-477c-b2a8-a7673a213b84", "sighting_of_ref": "indicator--000466e1-a5c4-4f25-904f-7e6d551f600d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe76381f-5217-4a50-8de3-d1dcb81de333", "sighting_of_ref": "indicator--000466e1-a5c4-4f25-904f-7e6d551f600d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b185ed-191f-4203-9785-5cdd63ac29fd", "sighting_of_ref": "indicator--3f8e31e3-10b2-4b9f-a800-2c029d6838e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d88f00-e2a0-4110-8e55-dfbbeb1bce4c", "sighting_of_ref": "indicator--f53e1d61-1cfe-4397-995b-462b0717ef29", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa9d6ad-9dab-40e7-a767-5cff68ee46d3", "sighting_of_ref": "indicator--b7bfc9a3-c903-4f06-87b9-9c77b0a4984a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5171e9-eed9-4a33-88b3-f91d17340c47", "sighting_of_ref": "indicator--2bb87cb9-ebc0-425e-9d89-18dbf2d9f4af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a78480-d780-49d4-bbca-4060c5636874", "sighting_of_ref": "indicator--2bb87cb9-ebc0-425e-9d89-18dbf2d9f4af", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4cd0c0-aab1-4443-bc72-7e5f7c7c39da", "sighting_of_ref": "indicator--69e38a92-660a-4ced-897b-932dad50bc1f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a931808-45a7-43af-b088-840487ca3e3d", "sighting_of_ref": "indicator--66121eb3-070f-4273-b804-2e2807f71ae7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb94735-3e99-4532-8585-df297086bcb9", "sighting_of_ref": "indicator--66121eb3-070f-4273-b804-2e2807f71ae7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afbaaaa-37a2-404e-bd6f-b188e6c6b435", "sighting_of_ref": "indicator--d6208b46-6629-41fa-9c3f-7cc5448bc72c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfcf4b0-ad1e-49ea-8742-8dd6e332f4e5", "sighting_of_ref": "indicator--937e206b-2ee5-4962-8e52-8769590fb7e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b25d16-2f15-4b1d-955b-947e779916a8", "sighting_of_ref": "indicator--83bc83f8-da85-4424-96ef-8524ebd806d4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8c89ae-f5e4-464a-b716-2ba8fbe52a72", "sighting_of_ref": "indicator--75a3d58d-10d5-433f-92f5-570b8a524d86", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c631779-6017-4194-bbf5-1d58428a09a3", "sighting_of_ref": "indicator--1f4fcd31-4628-4d12-a5b2-3ed7f9642f67", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d1c72a-7b4b-48b3-9c80-839ea7aeb8b9", "sighting_of_ref": "indicator--1f4fcd31-4628-4d12-a5b2-3ed7f9642f67", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d8de1d-4d9d-429c-9dd5-f4fe1f8134e0", "sighting_of_ref": "indicator--1f4fcd31-4628-4d12-a5b2-3ed7f9642f67", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e8bff7-4eb7-474b-a1b4-7acf494c5c19", "sighting_of_ref": "indicator--4d319dfc-a6bc-4284-bca6-92b60b01c326", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5006ed2-1a78-42d4-83e6-d01715f4a651", "sighting_of_ref": "indicator--4d319dfc-a6bc-4284-bca6-92b60b01c326", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6258da8f-8063-4ce8-9163-3a22d8a51bba", "sighting_of_ref": "indicator--4d319dfc-a6bc-4284-bca6-92b60b01c326", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fe532d-0671-4b31-852c-1f2ba8948cd3", "sighting_of_ref": "indicator--2cb8c17d-1f7d-42bb-8c2c-5bb25bf36362", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ec50a7-f347-4400-9202-f538ad1c1c0e", "sighting_of_ref": "indicator--096f453c-6c7c-413e-8199-7e0c1b33ea0a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73ba230-c4d8-49fa-86ef-f51f5f25aeb1", "sighting_of_ref": "indicator--077a0f2f-edbf-4d43-a168-177e4db5da0d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591a0d14-523e-4c66-95f0-6729f64a6ee3", "sighting_of_ref": "indicator--077a0f2f-edbf-4d43-a168-177e4db5da0d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b8786b-703e-4962-9165-3f28e9f369d8", "sighting_of_ref": "indicator--077a0f2f-edbf-4d43-a168-177e4db5da0d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b844ef3b-4a82-4ceb-8871-53a646226d59", "sighting_of_ref": "indicator--ddcbbbd8-531d-4c25-aab4-8bcd965ec378", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9b41ef-ab33-4bb8-a1b0-ca253f533d06", "sighting_of_ref": "indicator--652c0b59-a2c7-45e0-82a3-e13bfd02f894", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b926f1a-588b-4d3c-a9e9-b16d2f7ffbb3", "sighting_of_ref": "indicator--3f0465f6-e331-4173-9721-40b61fec93aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420d15fd-520a-4887-872d-d1702edb7424", "sighting_of_ref": "indicator--3f0465f6-e331-4173-9721-40b61fec93aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f03da8-2f68-47a1-b2c6-e67879f0aa9d", "sighting_of_ref": "indicator--18c0723d-b80a-4c9e-ba5c-b19feffc5e73", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c856801f-e899-4e9f-b81d-438ab49a86c5", "sighting_of_ref": "indicator--18c0723d-b80a-4c9e-ba5c-b19feffc5e73", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6006797-34d5-4706-9de5-56c596eb9f53", "sighting_of_ref": "indicator--60aa4336-aa33-4752-a7d2-a1b101ed397d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c6e83e-47ac-4f18-9628-5194cc7ad92a", "sighting_of_ref": "indicator--346caa0f-7c32-444b-ac8b-8e31399d4f15", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a35c656-68df-48f1-8523-eb95394149f2", "sighting_of_ref": "indicator--5980cd51-e2eb-470f-80cd-229f8a5c4ec0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2deab39c-264e-4459-81f1-85bbbd794636", "sighting_of_ref": "indicator--a8152cd8-50f1-4f24-a9c2-4ab31f776dd2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05340932-261c-4d9d-afe0-5fe527fb0126", "sighting_of_ref": "indicator--07c5b501-a268-40d6-ac5a-d7858ba6e390", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3c6ddb-24e4-44c3-ab84-216f4441415c", "sighting_of_ref": "indicator--fa822f36-be5f-4396-a823-9cf800117426", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17d115b-0107-43df-a14b-143768f5f7eb", "sighting_of_ref": "indicator--8458870d-008a-4333-bd1a-9bcf988148d1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1933a76-7179-4d8f-a35c-76b4f69daec0", "sighting_of_ref": "indicator--be67ba99-7166-479d-a99a-34d64044b399", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbd6485-408f-43d3-81b7-6935f022367a", "sighting_of_ref": "indicator--4395e89b-780a-4b09-a4b8-2e5a9f6f5933", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2d833c-e244-4d9a-8619-6fba389b1835", "sighting_of_ref": "indicator--1f232b9f-311d-4dbd-87f3-6a49978ff7e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593bfbc7-4d8a-4b80-ba55-e9789781ff02", "sighting_of_ref": "indicator--b6786c1b-f614-49b3-a0fe-b21f15dcdd1f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b29f013-e790-4ceb-aae1-b68b751da923", "sighting_of_ref": "indicator--fc429167-bcd9-4bb9-9a54-013ab6415d9f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355844b3-3d2c-499e-b2ed-0441cc58678d", "sighting_of_ref": "indicator--2e1ac5d3-9e99-4a77-8397-b91b07ad1e34", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ed1b1a-db35-4c23-a152-79470bfa8abc", "sighting_of_ref": "indicator--2e1ac5d3-9e99-4a77-8397-b91b07ad1e34", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eba7a12-fe29-4451-82af-3083051ec0b7", "sighting_of_ref": "indicator--ee1cbdbd-a7c2-459d-a9e8-9874112548d7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ed78d7-e361-4c4d-9145-756575875ffd", "sighting_of_ref": "indicator--a2d6c6c7-a9f4-44b7-94cd-c43c8c88d74c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b536400-c876-47be-8aaa-5da66f4fee6e", "sighting_of_ref": "indicator--d9e193d0-746a-448d-bcb1-b9ad4f3c9966", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eca228f-127a-4793-b159-23b52cfba4bd", "sighting_of_ref": "indicator--d9e193d0-746a-448d-bcb1-b9ad4f3c9966", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce4a8c0-a32e-4684-a075-396ff63a2df4", "sighting_of_ref": "indicator--610d954c-400c-403e-b615-3cc5b5b4c9bf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c5ed98-4bc6-4e17-a171-494436239fd1", "sighting_of_ref": "indicator--610d954c-400c-403e-b615-3cc5b5b4c9bf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7173fc-d5ae-47ed-96ba-9c09eb80c58e", "sighting_of_ref": "indicator--3fd77571-cbf4-496c-b2a0-b9447b5ed22b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3317212a-7b24-4e69-bb70-da0a41187224", "sighting_of_ref": "indicator--08494728-6f8f-4f9b-99c5-b7003975838f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bc1ac4-ead1-4f5a-85b1-2c5aea586583", "sighting_of_ref": "indicator--a1ec4e17-57a9-4914-a37c-d50722e2516b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f47029-b447-483e-9182-7cd37230b43e", "sighting_of_ref": "indicator--e367af1e-178f-4a5d-804b-5e9e2d326bad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d78f60-888c-41c1-a118-77f53479421a", "sighting_of_ref": "indicator--e367af1e-178f-4a5d-804b-5e9e2d326bad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb2a23d-d33b-4ac6-8e86-bc9421b096d4", "sighting_of_ref": "indicator--e367af1e-178f-4a5d-804b-5e9e2d326bad", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de18dce-3ef5-4e2b-9fc2-32e668df84e0", "sighting_of_ref": "indicator--a7993491-d48d-454e-8ffa-aaa677ef09ac", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad74eac5-51b7-4f63-8124-0689ed630463", "sighting_of_ref": "indicator--a7993491-d48d-454e-8ffa-aaa677ef09ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685233ab-8f44-44af-9cf1-e77f75e541e9", "sighting_of_ref": "indicator--a7993491-d48d-454e-8ffa-aaa677ef09ac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97ed3ee-00ee-4797-92c9-5a8383869d1d", "sighting_of_ref": "indicator--3dcf01f4-ffde-4dea-87bf-824b9d1cb77f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1b0851-1b3c-449a-9065-809347fc3234", "sighting_of_ref": "indicator--3dcf01f4-ffde-4dea-87bf-824b9d1cb77f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a4f2ea-209e-47f2-a2fb-83c4725aa5bb", "sighting_of_ref": "indicator--3dcf01f4-ffde-4dea-87bf-824b9d1cb77f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b877c6-2126-478e-b090-e935cfa779e2", "sighting_of_ref": "indicator--0c810f8e-457e-4ff4-8888-ccdc2d3f543a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430adaa2-792c-49e7-bd04-66dcaac75a40", "sighting_of_ref": "indicator--0c810f8e-457e-4ff4-8888-ccdc2d3f543a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7cfd43-c818-4296-a09b-9f84b1885434", "sighting_of_ref": "indicator--0fe4dff3-5dd3-49e5-804e-a5868242a5f9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474c8f2c-45f8-4163-b562-69e0b09c59c3", "sighting_of_ref": "indicator--0fe4dff3-5dd3-49e5-804e-a5868242a5f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56a7c5f-e955-4a88-ba72-f850a119a2c4", "sighting_of_ref": "indicator--0fe4dff3-5dd3-49e5-804e-a5868242a5f9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c67efae-c02b-40da-b951-196747d3ee4a", "sighting_of_ref": "indicator--4392abc2-2eb7-4588-8a0b-ae3cb50d20cd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0b9f99-e39a-4eec-92c7-1707f9a89512", "sighting_of_ref": "indicator--4392abc2-2eb7-4588-8a0b-ae3cb50d20cd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb91a2d-09df-4d43-8e4a-1b2dd3c9c8c7", "sighting_of_ref": "indicator--4392abc2-2eb7-4588-8a0b-ae3cb50d20cd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1dcfe64-e9a9-434f-a646-80cc3574f04f", "sighting_of_ref": "indicator--d87900ca-5e1b-4236-a7bd-0f9480b42872", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a2934e-2557-4587-bfd5-2cdb2b5ed032", "sighting_of_ref": "indicator--d87900ca-5e1b-4236-a7bd-0f9480b42872", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a870326-3ece-48fd-9a67-293747697437", "sighting_of_ref": "indicator--d87900ca-5e1b-4236-a7bd-0f9480b42872", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07eceb9-2dd4-4614-a0aa-0131cfb6a4db", "sighting_of_ref": "indicator--be00fd80-7324-47a7-9e10-cba7f7f2dce5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9f9808-31d3-41e6-b520-32064789abf6", "sighting_of_ref": "indicator--be00fd80-7324-47a7-9e10-cba7f7f2dce5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567bb0f5-0d5f-43d8-81c0-62bf8cae6308", "sighting_of_ref": "indicator--be00fd80-7324-47a7-9e10-cba7f7f2dce5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9084420c-6afc-4668-b123-9ddf33fafc7c", "sighting_of_ref": "indicator--712c541d-9301-4cee-8388-130142d19d28", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22ddf6a-be4c-48a8-9739-38db444d2c27", "sighting_of_ref": "indicator--712c541d-9301-4cee-8388-130142d19d28", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8d1032-c64f-40f8-84cb-7f6c9899e180", "sighting_of_ref": "indicator--158d380a-bf18-4a40-99be-5c2b887a9052", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ecf703-b426-4f9e-a92f-5afd34da5a33", "sighting_of_ref": "indicator--158d380a-bf18-4a40-99be-5c2b887a9052", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c2d556-1c89-4707-b651-9a7dc604bc02", "sighting_of_ref": "indicator--158d380a-bf18-4a40-99be-5c2b887a9052", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daac81d8-4c72-4a89-8d60-e0d0bfebc3f8", "sighting_of_ref": "indicator--8524e0e7-c212-46a8-853b-441293a88aa4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4ae82d-293c-45b3-a5b3-6ef2228d0596", "sighting_of_ref": "indicator--8524e0e7-c212-46a8-853b-441293a88aa4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45163351-4acb-4234-abd7-5d966185c4c7", "sighting_of_ref": "indicator--8524e0e7-c212-46a8-853b-441293a88aa4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3e9915-267d-45a4-bebd-42b54c3386c6", "sighting_of_ref": "indicator--27de9ca7-b8aa-400c-b18d-2c07d6229bcf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177e3ddb-cda3-4bd1-9804-fbc02842e734", "sighting_of_ref": "indicator--27de9ca7-b8aa-400c-b18d-2c07d6229bcf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321882fb-27e8-4d8d-ad8d-68470ee52fa3", "sighting_of_ref": "indicator--352ddcfb-214a-454a-a1a3-e660520d5450", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5638d890-89fe-4a21-9997-2471465ffc7e", "sighting_of_ref": "indicator--352ddcfb-214a-454a-a1a3-e660520d5450", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2189f6d-dd95-408b-a82d-de95d798cd28", "sighting_of_ref": "indicator--cc205f5b-eaa9-4ee3-b8f9-658f178179b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35def892-0959-4aa6-a80b-651ac92e0402", "sighting_of_ref": "indicator--cc205f5b-eaa9-4ee3-b8f9-658f178179b5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b36c8e-dfe7-44fa-9ca1-0b8a84f7fa0a", "sighting_of_ref": "indicator--cc205f5b-eaa9-4ee3-b8f9-658f178179b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0efc7e-ec25-44db-9ebd-7cf1a9f845ca", "sighting_of_ref": "indicator--11dfc7e3-63ea-4fa2-857b-7a231e907a68", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833c602a-2758-4faf-b5be-949569ccbaf5", "sighting_of_ref": "indicator--11dfc7e3-63ea-4fa2-857b-7a231e907a68", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886b1431-0048-4fc9-917c-f53b3f0a852f", "sighting_of_ref": "indicator--aad7921c-31f1-4e02-84fc-c05fa217ba6b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6be3ebf-3be3-4537-bff2-515666291a45", "sighting_of_ref": "indicator--aad7921c-31f1-4e02-84fc-c05fa217ba6b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546b0038-d1e2-4f1b-bc19-7f74715f8296", "sighting_of_ref": "indicator--aad7921c-31f1-4e02-84fc-c05fa217ba6b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccdac6c-22ff-469e-9e82-763c8908bae2", "sighting_of_ref": "indicator--b02530cc-e8a0-4789-8b5a-b5db6c1f7741", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f807ad-7759-4cc9-a8e2-6e271836233d", "sighting_of_ref": "indicator--b02530cc-e8a0-4789-8b5a-b5db6c1f7741", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fa461e-f152-4e99-b9bd-cab9382d08dd", "sighting_of_ref": "indicator--b02530cc-e8a0-4789-8b5a-b5db6c1f7741", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be66156-dea3-4314-9694-a0d0f244aa07", "sighting_of_ref": "indicator--5aebb127-701f-4884-bd1f-ea37157bdf3c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610e01ec-c2f0-4fdd-bf25-aeb0c75b80a5", "sighting_of_ref": "indicator--5aebb127-701f-4884-bd1f-ea37157bdf3c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd320236-efba-4ec0-8260-424da35e2323", "sighting_of_ref": "indicator--5aebb127-701f-4884-bd1f-ea37157bdf3c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd35b10-290d-4c2d-9268-df58fb2a9efa", "sighting_of_ref": "indicator--3c106d5a-c4ee-4633-9a43-594f1df26deb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7676e00-8389-4e29-bb64-b065e7fded30", "sighting_of_ref": "indicator--3c106d5a-c4ee-4633-9a43-594f1df26deb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4791b76-357f-4994-a03c-6c0d19e1b225", "sighting_of_ref": "indicator--3c106d5a-c4ee-4633-9a43-594f1df26deb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b199b13-12b8-4353-9a25-f70d59524127", "sighting_of_ref": "indicator--dc30834e-3603-4523-a72c-0c958c4f8bec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea308d62-975e-4105-94da-102b7db7a157", "sighting_of_ref": "indicator--3abd7302-d379-4088-8bcb-caf221d3a159", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ec651e-1d90-4db4-9a69-8f27bc25e2d4", "sighting_of_ref": "indicator--3abd7302-d379-4088-8bcb-caf221d3a159", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1c5e56-42ac-4cee-bd8f-22992c8b2198", "sighting_of_ref": "indicator--a5d76304-d4ee-4ccf-87be-eee4e97bfa12", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d35bb2f-7dda-4b5b-b9f1-5130e4900713", "sighting_of_ref": "indicator--a5d76304-d4ee-4ccf-87be-eee4e97bfa12", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df69e42d-1c22-4931-9de2-f4d95805ddd8", "sighting_of_ref": "indicator--f6eb6506-6137-48a9-9a87-c498f1b88c5c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b9a62b-a134-4019-a0f6-90a25e095c0a", "sighting_of_ref": "indicator--8559e979-350a-416c-919a-e86740e211fc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61e55da-7cd0-465e-bd9a-ca90c23f264a", "sighting_of_ref": "indicator--8559e979-350a-416c-919a-e86740e211fc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae940fcc-af0b-42f9-ad6f-816f903d43bd", "sighting_of_ref": "indicator--d51e1e60-744f-46b2-8998-94f6da005c68", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c9bc29-dd84-43f8-9cd3-cf189665df91", "sighting_of_ref": "indicator--d51e1e60-744f-46b2-8998-94f6da005c68", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc08ee3-89c7-41fa-9402-533afe43a77d", "sighting_of_ref": "indicator--43202f77-4585-44d9-8dfb-934b946f3a8d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c683c6e0-6039-4a55-a570-8806fc89916f", "sighting_of_ref": "indicator--43202f77-4585-44d9-8dfb-934b946f3a8d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633950a9-6023-45dc-9316-1b38a82075ae", "sighting_of_ref": "indicator--11e1bd2a-eeab-4c79-84ab-bb770f5e9f45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ec1db5-c1f2-4bcc-8442-94b61a2c1405", "sighting_of_ref": "indicator--f328c08a-ddcf-4dac-bc08-be8d8ac21716", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbe8219-61b5-4e2c-b514-048a6de04c63", "sighting_of_ref": "indicator--f328c08a-ddcf-4dac-bc08-be8d8ac21716", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd898ea-389f-4cec-975c-a1905af620fc", "sighting_of_ref": "indicator--1ea49f7b-5c79-4c05-ab01-935c08ef5ec1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cea718a-1b8e-4c61-b441-a16d7c500630", "sighting_of_ref": "indicator--1ea49f7b-5c79-4c05-ab01-935c08ef5ec1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13c9eb2-58ff-4d77-abca-ab71f36d8cc3", "sighting_of_ref": "indicator--5b2a72e3-567d-4017-8a96-b719c64caf62", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f35603c-0d8d-404a-b467-5a3d957a43db", "sighting_of_ref": "indicator--5b2a72e3-567d-4017-8a96-b719c64caf62", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7450e9de-940e-4694-8e46-609dcec58d24", "sighting_of_ref": "indicator--a5b9720e-5516-42f9-b997-4d354ee9c40c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59d3e33-8f1e-4220-8c78-8712d3368710", "sighting_of_ref": "indicator--a5b9720e-5516-42f9-b997-4d354ee9c40c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f166b9-f399-4aa3-ab98-92e5d1fd8853", "sighting_of_ref": "indicator--55cd62a2-8e13-4b12-a193-209ffafbce6c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92e3d30-97dd-4e69-886b-632e3fcec014", "sighting_of_ref": "indicator--55cd62a2-8e13-4b12-a193-209ffafbce6c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d2e807-6fa6-4b5d-bf7b-8ddab1971dea", "sighting_of_ref": "indicator--f18ce07d-5c73-4773-b9d2-04b58db80a83", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c495f3-5b30-4e9d-bc41-0d7a7e2ddd46", "sighting_of_ref": "indicator--f18ce07d-5c73-4773-b9d2-04b58db80a83", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c82e85-5233-4879-a6bb-73f60bf66295", "sighting_of_ref": "indicator--09d44711-2506-4207-ad49-bcf39f3161ce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491f6b38-cba5-4463-9fc9-3ed6e9e79686", "sighting_of_ref": "indicator--09d44711-2506-4207-ad49-bcf39f3161ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c59165-621a-4125-a29f-a55b0f8c5d62", "sighting_of_ref": "indicator--f2f10ff2-4251-4a06-ada5-dfdd409ab472", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8e222e-e965-418d-b41d-c3390cdfa563", "sighting_of_ref": "indicator--f2f10ff2-4251-4a06-ada5-dfdd409ab472", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b8c0ee-859e-4b0a-b8e2-90abdcabdd35", "sighting_of_ref": "indicator--b2f5de81-f298-4b78-a5d2-760afdbf9658", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d390a9-4e28-4041-b505-3b96d1948505", "sighting_of_ref": "indicator--b2f5de81-f298-4b78-a5d2-760afdbf9658", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a373be-e54f-4610-8695-e1c4915666de", "sighting_of_ref": "indicator--52873fe0-bfbc-4761-b8b6-03708de2203e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6ddc97-f5b1-4519-b714-ac1aecf4d9d0", "sighting_of_ref": "indicator--52873fe0-bfbc-4761-b8b6-03708de2203e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a1bb85-0768-4548-96d8-d28f7e8285a0", "sighting_of_ref": "indicator--80049654-8f51-4126-82e8-2a9525786651", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c0a7e5-92c3-4e82-b806-a9a31f88ebf0", "sighting_of_ref": "indicator--80049654-8f51-4126-82e8-2a9525786651", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1ac982-f83f-4bcb-807d-7345f9cddcca", "sighting_of_ref": "indicator--62a37be2-0f9d-450b-9053-323693f03d83", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aaffd86-c0c9-4f86-a5f7-0be2ca960f66", "sighting_of_ref": "indicator--62a37be2-0f9d-450b-9053-323693f03d83", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dd3439-fa80-4ce3-b523-aa9f51489216", "sighting_of_ref": "indicator--fa3a6e46-b77b-4914-8fcd-1d2bb520ed39", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e1ac8d-fde1-421e-80a5-2c5a9e803f0d", "sighting_of_ref": "indicator--fa3a6e46-b77b-4914-8fcd-1d2bb520ed39", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6ad3ee-f017-4e8f-bba5-dccd24fb6ab6", "sighting_of_ref": "indicator--70d89305-a33a-4a91-985f-9790657bb319", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c544af5a-2f67-4e07-a929-1225d9257c11", "sighting_of_ref": "indicator--70d89305-a33a-4a91-985f-9790657bb319", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832f7720-b77c-435c-b7f4-c7d15e6faad2", "sighting_of_ref": "indicator--70d89305-a33a-4a91-985f-9790657bb319", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8accd9c4-4ad1-4689-86c0-3d4c2208e57e", "sighting_of_ref": "indicator--404770a3-44f1-4694-99ca-8c81072f92e0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4500a222-0305-49b0-bc0b-5870862a2796", "sighting_of_ref": "indicator--404770a3-44f1-4694-99ca-8c81072f92e0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44ae7d4-b70d-4de9-83ff-4524dc399f7c", "sighting_of_ref": "indicator--8c310359-4eb4-46d6-9a4d-dfa8c6713c99", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470faee9-1c3e-45f5-8635-dd23019dc780", "sighting_of_ref": "indicator--8c310359-4eb4-46d6-9a4d-dfa8c6713c99", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e840e394-bcc3-4734-8f76-32951227bdce", "sighting_of_ref": "indicator--0738c15a-efb1-416b-b767-f9c2088cf9a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56adc840-ca86-4a44-a428-efdfa54877a0", "sighting_of_ref": "indicator--0738c15a-efb1-416b-b767-f9c2088cf9a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54454866-ac04-4003-8c6c-77cd0feea04e", "sighting_of_ref": "indicator--eabf210d-d6e9-462d-8a6f-54360ebe3e62", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047363b0-c003-46e8-b9ec-7b709b65cb81", "sighting_of_ref": "indicator--eabf210d-d6e9-462d-8a6f-54360ebe3e62", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eecbb8a-325a-465e-96c0-64bfffa4f7ff", "sighting_of_ref": "indicator--42dc1f85-f71a-4d76-b2f6-ca7e0486ac51", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26da4a59-f4b2-405f-8851-df7b297ef420", "sighting_of_ref": "indicator--42dc1f85-f71a-4d76-b2f6-ca7e0486ac51", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24df48b9-4922-4625-9074-210ba94b6618", "sighting_of_ref": "indicator--5c84fdc2-6b13-43a2-bb27-56009733bff1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337f625e-8ef7-4146-9e18-533a73ba0fa1", "sighting_of_ref": "indicator--5c84fdc2-6b13-43a2-bb27-56009733bff1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145dc9a9-8946-46e5-9475-e664013c17dc", "sighting_of_ref": "indicator--1868c36a-32c0-4bc3-97d8-f231418b905a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d370f8-cbca-4356-9684-d9363ad1e2c2", "sighting_of_ref": "indicator--1868c36a-32c0-4bc3-97d8-f231418b905a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a71889a-c742-4e02-8e45-a7fef824cb99", "sighting_of_ref": "indicator--44acb2e7-7288-48c1-b730-de62fd285687", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315affb8-be4d-4e8f-bf01-b7478027abd2", "sighting_of_ref": "indicator--44acb2e7-7288-48c1-b730-de62fd285687", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af1325b-d521-4f48-bf7f-053384fbb42a", "sighting_of_ref": "indicator--df1cd918-438b-4ad8-9870-f44205474a57", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d57ff49-4cd0-497d-ba83-d1b73b16ac4f", "sighting_of_ref": "indicator--df1cd918-438b-4ad8-9870-f44205474a57", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7102d00-3209-4f2c-8bdf-3ec759d76565", "sighting_of_ref": "indicator--821fc874-f236-4de6-83a4-af33cfcb1daa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df77ecb-d6c7-4c5d-9c1c-7f79256cf00b", "sighting_of_ref": "indicator--821fc874-f236-4de6-83a4-af33cfcb1daa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e72daa3-810b-4e20-9d35-ecb73c654ead", "sighting_of_ref": "indicator--cc5adac2-3995-4aec-9068-2ba2a039d608", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b73021-e6ad-4e2b-8eed-62be3b2bf2c5", "sighting_of_ref": "indicator--cc5adac2-3995-4aec-9068-2ba2a039d608", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e931542e-f9e0-4989-9708-d89669bad895", "sighting_of_ref": "indicator--8d44c957-c798-4031-8517-3863d3efb304", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acb9731-508a-415f-8d65-678aa34d7e73", "sighting_of_ref": "indicator--8d44c957-c798-4031-8517-3863d3efb304", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4993892-f077-4e94-8b1b-66a12914e5ba", "sighting_of_ref": "indicator--7241126f-1f77-4401-959b-a86b0f60c1b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138cee5a-9946-4bce-a430-0dec9ac930ad", "sighting_of_ref": "indicator--7241126f-1f77-4401-959b-a86b0f60c1b1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f354e1-5edc-4c70-a9b1-cdb34aa55bdf", "sighting_of_ref": "indicator--cb961a9a-8d29-4e30-b5e5-7b8dcf801acf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf6afe3-c8d2-4cf6-a750-48ae5ed9a66d", "sighting_of_ref": "indicator--d3c4c9a6-1f91-4bc2-892c-1ffe98077734", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b0bd63-1395-4300-80fd-987c451982a4", "sighting_of_ref": "indicator--ca2d772e-e206-49b3-ba3a-ba66c2e19493", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7111063f-5b2f-45db-90f1-7c9b4e79aabb", "sighting_of_ref": "indicator--ca2d772e-e206-49b3-ba3a-ba66c2e19493", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abc5958-4a1f-47f3-847d-f8a2ab619442", "sighting_of_ref": "indicator--97b0d87a-42ff-41eb-8615-4a94bcaa70e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27942a72-d691-41da-a35f-d22d4db9eb75", "sighting_of_ref": "indicator--d99d6d0f-6f91-4d85-bae4-7b8ad091263b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f661ff78-56ae-44b6-b258-b4ef000392c4", "sighting_of_ref": "indicator--c691ebae-32ad-48d4-8afe-a99453aed770", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7ed9d6-04be-4d80-bf32-c695f130ec9c", "sighting_of_ref": "indicator--4ae6b1d6-21d4-4243-954f-de243df4ebc2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e03bafa-1d4a-41bd-8dd6-45fb69ed17cd", "sighting_of_ref": "indicator--91993c53-cfdc-493e-8e07-dd84b389856c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd00b47-097e-4aca-a5b8-e79f437123aa", "sighting_of_ref": "indicator--02d2890b-2dc4-495d-ace9-2aff6d3240bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e2f80d-bd14-432c-9f0c-41c2c85f88c0", "sighting_of_ref": "indicator--4fda000b-db5c-4339-a87c-5c2db7b9c5f7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fe9a1e-953f-459b-b925-7fc33b33de91", "sighting_of_ref": "indicator--4d216095-9733-4a63-aa63-19dbc1f19b55", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5476fd-0c4a-4822-a803-5e061e0473b9", "sighting_of_ref": "indicator--22756f0b-b7f4-409e-92ce-a6eb5677e46d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a105ed3-f526-4c22-8a42-256be565b462", "sighting_of_ref": "indicator--8793ec80-a17f-4f21-9dc7-c41450d4e346", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521f2642-e92a-4547-8f26-50773f6b7d35", "sighting_of_ref": "indicator--8793ec80-a17f-4f21-9dc7-c41450d4e346", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8894dc2-0c0f-4ce0-8a20-6d94787df6a4", "sighting_of_ref": "indicator--f8e2cbd1-a032-4d1d-9fe6-df2ef25566bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667bca5d-364e-4c58-b7cd-d4476881b31c", "sighting_of_ref": "indicator--c505bb09-93f7-49dc-8f5e-ed48d871478b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b886975c-1dd1-4941-a992-16fc26c6b9b7", "sighting_of_ref": "indicator--e2dce913-5f30-4dd4-a888-643d86953a67", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906888bf-4f34-474b-a9d9-eac3fd4a4e50", "sighting_of_ref": "indicator--55e10fac-ec47-41b9-a383-bab79b55c560", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2394c11-627b-43d8-b8a8-d24db80c7afd", "sighting_of_ref": "indicator--feb8f3ec-2216-42b5-93e3-a47b8c7259a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cda1d1e-680f-4369-8bcf-f25d60f4b668", "sighting_of_ref": "indicator--46c2d908-2448-490c-834b-0e6f6b67851b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76954690-a763-448e-ad42-e68b94e335ea", "sighting_of_ref": "indicator--fe5e847b-a88a-46bd-a28f-c05e3d04dbc0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed73ab5-fa79-4b1b-be54-298681eb9cef", "sighting_of_ref": "indicator--f3c531c2-1fdb-4656-a259-2107f8165a40", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd99557e-0ad9-48a7-a2ef-31250d4e362a", "sighting_of_ref": "indicator--0c225363-f38d-444a-8b56-348f87341df8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3194173-e833-49cc-8440-5ef9c3af2c71", "sighting_of_ref": "indicator--1c4791c2-4423-4a72-8e66-2545a4a6c0ce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e69761f-1a84-41dc-83cb-6ba685e636d5", "sighting_of_ref": "indicator--1c4791c2-4423-4a72-8e66-2545a4a6c0ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac70fe08-ccd8-4bb1-9a0e-b9a0005b0e88", "sighting_of_ref": "indicator--7a60e251-4ada-4de4-b50d-b170f9868cf7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8900c69-823e-42e9-a234-3c22bec8d39f", "sighting_of_ref": "indicator--d05d0777-3a8a-490d-94d4-f016bf86760a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dea0b8e-2321-435a-b94e-6398bc48f6ec", "sighting_of_ref": "indicator--b140d410-c721-4c2d-befe-a999f1e61794", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72cb80c-4e59-404b-a498-77d0e97a3a6f", "sighting_of_ref": "indicator--5acf75d6-c384-4ae1-8648-a757ceec3d78", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c94b701-7ca4-48b3-9755-049d77bdea83", "sighting_of_ref": "indicator--b99795a9-320b-4eba-a312-106f58343081", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2427942c-c513-44cf-99a8-d1d56ed74f0f", "sighting_of_ref": "indicator--934d46cd-4b87-4ed3-bcc0-060d1ac97fdf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409bc091-09dd-4871-a74e-76e5fbd42dae", "sighting_of_ref": "indicator--4e314f84-654d-4a24-8d0e-287d511dfdcb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13eba68-2e2c-4828-b72b-4931f4c6cc12", "sighting_of_ref": "indicator--338b6f9e-790a-43db-bdbb-0ce19c91172f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84135589-c0c4-4719-8b1a-bd4c9f598f8a", "sighting_of_ref": "indicator--79ce9dcc-e206-45d9-81bc-6cc78ef8d458", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5639a5e1-62be-43f3-bed5-8ce5f3505754", "sighting_of_ref": "indicator--ebb15b8b-c5ba-4821-9671-228ac89b251c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc36765-05bb-4ae3-8469-7c56fb774d2a", "sighting_of_ref": "indicator--84574a3e-1409-410f-9c85-e9b8e44a5161", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c948664-d4ba-4314-818e-ff88a46dc945", "sighting_of_ref": "indicator--84574a3e-1409-410f-9c85-e9b8e44a5161", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb76aaf-6bef-4d4b-8a60-2ebe9c0ffae8", "sighting_of_ref": "indicator--7469dcc3-20a4-41dd-a96a-aa9d3212e0bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18843e00-c09b-4ed8-8680-4f3ae95fa734", "sighting_of_ref": "indicator--24bf0cb6-34aa-4013-bf66-bbebb6801046", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696da4e7-2786-4c4f-9534-8439a0110745", "sighting_of_ref": "indicator--a9e18642-60f9-4132-861d-021727e2ca4e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31bf25c-8bdb-49a5-87a3-b018f0d7c1a6", "sighting_of_ref": "indicator--522b3bb9-5358-463a-8195-122ca5400de8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7de7017-71c4-4dfd-a3f4-b1de422b2979", "sighting_of_ref": "indicator--658cab3d-0e99-4535-ae2d-3a9ef9d3f000", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ea321a-53bd-4bf5-97ea-1ee7c572c39e", "sighting_of_ref": "indicator--658cab3d-0e99-4535-ae2d-3a9ef9d3f000", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4960263-d58a-4af0-9799-045c1d2f6924", "sighting_of_ref": "indicator--251f3d72-6579-45fc-921e-a39f5cc61b05", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c73e8a-ab24-4139-bbcf-e61d2b048fce", "sighting_of_ref": "indicator--251f3d72-6579-45fc-921e-a39f5cc61b05", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4232c0db-17a1-4af7-88bf-a26b849516b8", "sighting_of_ref": "indicator--a35818eb-5c3e-42bd-b5c5-1d244e641f25", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8ee6af-7453-4e16-97a8-83f2595e2b6c", "sighting_of_ref": "indicator--480e10bc-0bb9-462f-89d0-02e3a2a6c961", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440d9130-2a11-4923-954c-5fb9e4a852ae", "sighting_of_ref": "indicator--7b475dc5-f707-40fc-9809-3e136041acc0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdb72c9-5a77-4db7-9227-f0583dec447e", "sighting_of_ref": "indicator--a768826a-303d-47a3-b899-2fb5361f777a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d16abea-c321-4fd0-8ffd-2d04d207193f", "sighting_of_ref": "indicator--4f5d57d5-d321-487f-9314-bf6d509ca8a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f52cac5-aa3e-4a95-ae01-93a383d205fd", "sighting_of_ref": "indicator--c10b3a07-c8ed-4951-a554-f688c842017d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fbfde6-16cd-4e3e-9e46-67c03db647f4", "sighting_of_ref": "indicator--d0eddfee-6ac0-49ee-8ad7-20b102a0d088", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a006e73-1a9a-4d7a-b79b-964a617a5b44", "sighting_of_ref": "indicator--d0eddfee-6ac0-49ee-8ad7-20b102a0d088", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6893373d-a466-4538-a6b1-c80d35bfe60d", "sighting_of_ref": "indicator--181cb0a8-a4e1-451b-bd71-044273d0d485", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42b0fb3-6e6e-4971-a24d-b5062ce8bec5", "sighting_of_ref": "indicator--d4c2cc81-f572-4b10-a352-2bd824c7f1c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14096b91-f644-430f-847e-7df941b26e42", "sighting_of_ref": "indicator--284d0506-d475-497e-8ca0-631c4889d1c1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35261f3-2ec4-4f02-a4b6-e372b0fa06c5", "sighting_of_ref": "indicator--284d0506-d475-497e-8ca0-631c4889d1c1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f26097-6f9e-4c29-bc34-37534996caef", "sighting_of_ref": "indicator--284d0506-d475-497e-8ca0-631c4889d1c1", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee64f81-aad4-4c61-a1ed-fcdf19b1d6cf", "sighting_of_ref": "indicator--d24fac5b-69ef-4e6d-b9ca-0a6c6b493a57", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21dd0c6-3a4b-46d0-abc9-77db03353faf", "sighting_of_ref": "indicator--d24fac5b-69ef-4e6d-b9ca-0a6c6b493a57", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d185153c-3608-45e0-bd6a-2f2707b7ceaa", "sighting_of_ref": "indicator--d24fac5b-69ef-4e6d-b9ca-0a6c6b493a57", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0e6756-32b3-4ec0-8430-254f464b3a2f", "sighting_of_ref": "indicator--4ea3e965-627e-4290-a66b-2b9e6631cebe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4041aa0f-c3ac-4ebc-b8d0-ba73cf108684", "sighting_of_ref": "indicator--2fdf0ef4-6095-40a3-ad65-a03586ceb261", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89951075-4ace-40e2-a26d-311388eb887a", "sighting_of_ref": "indicator--2fdf0ef4-6095-40a3-ad65-a03586ceb261", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d59e91-6c96-48ed-8411-9ed21a001cdf", "sighting_of_ref": "indicator--2fdf0ef4-6095-40a3-ad65-a03586ceb261", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ea347e-e4ab-4020-a689-07fc8e3d079a", "sighting_of_ref": "indicator--12fe1479-a313-4d95-91db-f07d0884963c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5103b1c3-aa60-4697-91ee-f60641a9ed3f", "sighting_of_ref": "indicator--acb4da2a-0b90-45f4-94d7-e966fae722fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63fdc5a-2ac5-46b5-8a6f-27feab08fe28", "sighting_of_ref": "indicator--8b47deeb-8462-4f76-8419-9f8c3c4fda6f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8721471c-69b4-4d63-8efd-97931d57bb02", "sighting_of_ref": "indicator--8b47deeb-8462-4f76-8419-9f8c3c4fda6f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0b057e-a63f-4f60-9543-1da378b943cf", "sighting_of_ref": "indicator--ac26182b-0c43-4815-95f0-69784a7eb224", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c155e79b-af5e-415a-aec1-a3755f8b9573", "sighting_of_ref": "indicator--1235aeb5-0380-4ad1-9312-d15d673c2673", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fce8d83-0bea-41e0-b643-132bdab122cb", "sighting_of_ref": "indicator--1235aeb5-0380-4ad1-9312-d15d673c2673", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9de3e00-e127-4a47-a9ab-8ea84f0a77ce", "sighting_of_ref": "indicator--9fefa713-8899-4f12-b046-05bff3bbaa84", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638d49a8-fd8e-40e7-bd2c-6ed0690dcb44", "sighting_of_ref": "indicator--9fefa713-8899-4f12-b046-05bff3bbaa84", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ea4a56-62c0-4170-8220-6e3d32b359b5", "sighting_of_ref": "indicator--211546e7-a569-4878-a8bd-2d01d035acc1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e67f56-2715-48b4-88b6-6d9e7997b38d", "sighting_of_ref": "indicator--a539f100-76ee-4749-bc66-543774742423", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053ac2fd-9496-45b0-a9cf-feb67ea16da8", "sighting_of_ref": "indicator--a539f100-76ee-4749-bc66-543774742423", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2a11b7-8be4-43e8-9ad0-87aacc0c11b0", "sighting_of_ref": "indicator--d29a64c9-5594-42ea-b8a7-fe32f3062933", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d9e8b6-cb42-4447-a774-55c840be1723", "sighting_of_ref": "indicator--d29a64c9-5594-42ea-b8a7-fe32f3062933", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c24ca08-dd37-435d-a6d6-2e15284cfb45", "sighting_of_ref": "indicator--d29a64c9-5594-42ea-b8a7-fe32f3062933", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e4648f-0f2b-42a8-9087-4fe9b9d8b991", "sighting_of_ref": "indicator--efab19e6-9d3f-4b3a-8ff3-c10cd326ce7f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa999f5-3c51-42cf-8683-12c1a6efef50", "sighting_of_ref": "indicator--efab19e6-9d3f-4b3a-8ff3-c10cd326ce7f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb558ede-d49e-4c5e-99af-cc8c95b06f12", "sighting_of_ref": "indicator--efab19e6-9d3f-4b3a-8ff3-c10cd326ce7f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9497cc5-71f0-43bb-92c0-6a3a6f2f5f58", "sighting_of_ref": "indicator--e04e565d-c986-4b46-b322-a99cd6cfa23a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9606866-9eb6-43f5-a46b-6faf7a6d3d2a", "sighting_of_ref": "indicator--e04e565d-c986-4b46-b322-a99cd6cfa23a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc054eac-fb2c-4642-963a-6b742800fdc4", "sighting_of_ref": "indicator--e04e565d-c986-4b46-b322-a99cd6cfa23a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd22ec0e-25f4-4174-ac71-8d290264fe45", "sighting_of_ref": "indicator--375ae3b0-209b-45aa-846e-ff478189811b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced93b52-f8fa-40d5-bd3b-fd1c5d802d48", "sighting_of_ref": "indicator--28a6cf57-79cc-4c49-bdb9-1c5c31eedd02", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6987be91-7ddf-498c-9d41-dfb84e144987", "sighting_of_ref": "indicator--5523ae5b-39ac-42f4-8f7f-53dd6cd18e76", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0f296f-682a-4c01-abe6-412ea2259840", "sighting_of_ref": "indicator--a2b3209b-9747-4824-bb91-a3bc3df1cbcc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdc503e-3486-41ff-a8bf-f8e40517f306", "sighting_of_ref": "indicator--a2b3209b-9747-4824-bb91-a3bc3df1cbcc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46ddc63-04e2-4c88-8cf9-7d592cea23d7", "sighting_of_ref": "indicator--48cff71c-e3e4-4a62-8853-ba7abde32dbf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027eee68-4d75-4f96-b4a1-6382ff9ca322", "sighting_of_ref": "indicator--48cff71c-e3e4-4a62-8853-ba7abde32dbf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c7f9b7-4839-4870-b694-657b9e7b6b49", "sighting_of_ref": "indicator--48cff71c-e3e4-4a62-8853-ba7abde32dbf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744b2479-9e45-4bab-abd9-0875568dc4a7", "sighting_of_ref": "indicator--48cff71c-e3e4-4a62-8853-ba7abde32dbf", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d757b2ba-1031-4280-bab0-daa05193544f", "sighting_of_ref": "indicator--22b82c46-f121-4ff2-b0de-a15cb8c04aae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6e7cf6-fb1c-40c8-980c-a54f80ecb042", "sighting_of_ref": "indicator--2f068bd2-4d33-4610-8930-01c1224f44a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35f2e30-5912-462d-81ac-1bc4aa9c02f1", "sighting_of_ref": "indicator--2f068bd2-4d33-4610-8930-01c1224f44a8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23774c09-7da1-406b-a0b8-523e2d35f914", "sighting_of_ref": "indicator--917d3955-474a-44ac-b5e6-421b7ba4b098", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd21266-68bc-457f-b91b-dab3bc082dfc", "sighting_of_ref": "indicator--917d3955-474a-44ac-b5e6-421b7ba4b098", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc1ef85-e8a8-4207-bb9d-58e37bba9d18", "sighting_of_ref": "indicator--917d3955-474a-44ac-b5e6-421b7ba4b098", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12dfb6cf-8529-4f55-9142-3555faba5239", "sighting_of_ref": "indicator--7fb67544-8180-441b-ae15-c6e6d5895fa4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0c21b4-3d44-44bd-9114-be0a5505e21b", "sighting_of_ref": "indicator--7fb67544-8180-441b-ae15-c6e6d5895fa4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799ee16a-5226-44e1-999a-870a8fcb4a8c", "sighting_of_ref": "indicator--401ff588-60ed-4b58-a10c-18dd72b14c03", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65f0348-9b79-4347-b188-19534d7b1bcf", "sighting_of_ref": "indicator--401ff588-60ed-4b58-a10c-18dd72b14c03", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c4b597-82ee-4be3-9dec-0dc08c7f2958", "sighting_of_ref": "indicator--1b864635-0572-447d-8d0f-9d1f554c28b3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77e28d9-7150-4390-9b78-4c01b612501b", "sighting_of_ref": "indicator--1b864635-0572-447d-8d0f-9d1f554c28b3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11d815e-b54d-4286-a02e-1d0de3e3bc65", "sighting_of_ref": "indicator--2dc0b2e9-d1ca-4035-a67b-3756187ea37b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26ed0ed-473b-4a47-a6f0-0c02d56ea8ab", "sighting_of_ref": "indicator--a991b70b-ab59-4537-93b7-97c14f39b477", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8709d2e4-32cc-410f-bf96-8d31dcd2d38d", "sighting_of_ref": "indicator--a991b70b-ab59-4537-93b7-97c14f39b477", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09e3036-5640-4e1b-8fb4-2c937fe2e251", "sighting_of_ref": "indicator--069189f9-dbf3-4684-844f-f249d376157d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaea19a7-379a-484f-89ad-e15c337d5457", "sighting_of_ref": "indicator--069189f9-dbf3-4684-844f-f249d376157d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27518ea2-5239-431e-a49b-ffcc2b174c9b", "sighting_of_ref": "indicator--842b94a0-35f8-411c-a54c-ede64c8ebe5b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01370652-685c-48e5-a7eb-b41b59252561", "sighting_of_ref": "indicator--842b94a0-35f8-411c-a54c-ede64c8ebe5b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeeeaa1a-f21a-4dcf-8458-f7b672a86ffa", "sighting_of_ref": "indicator--842b94a0-35f8-411c-a54c-ede64c8ebe5b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ea8e13-5e2f-42ca-a6bf-7a80935cfd0b", "sighting_of_ref": "indicator--a59d7134-e14d-4e85-bdd6-66a6c0bfb7a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244e0370-f63f-4d99-b143-c4b699fbaaac", "sighting_of_ref": "indicator--9add19dd-34f1-4801-b8ca-5dcfc4b360c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27364276-9c23-46b8-a194-744f1b446052", "sighting_of_ref": "indicator--b003d3e8-c8d8-4aac-9df2-aaee5e44cb46", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d569a43e-6b68-47cf-a1be-b4cdb4225abe", "sighting_of_ref": "indicator--337f77ce-3c90-4be5-8a43-1c612b902e62", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acc9c62-a403-4b5e-8185-343aad164730", "sighting_of_ref": "indicator--3f9e12c6-57e2-47da-bb63-900d54d0f5c8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96507b19-13b3-4637-9b07-81b0341fdd1f", "sighting_of_ref": "indicator--3f9e12c6-57e2-47da-bb63-900d54d0f5c8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541b5edb-9dd1-419f-a4c1-6521bc1ea8d5", "sighting_of_ref": "indicator--3f9e12c6-57e2-47da-bb63-900d54d0f5c8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e0382c-6e63-4f78-95a6-182bea8bf703", "sighting_of_ref": "indicator--1d219bf5-758a-4ebd-b880-87b5976cc508", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8318480e-516c-4da7-9c2d-2efe61ec0ca3", "sighting_of_ref": "indicator--1d219bf5-758a-4ebd-b880-87b5976cc508", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94e85b5-b86a-485a-9d11-e9f8456f761d", "sighting_of_ref": "indicator--1d219bf5-758a-4ebd-b880-87b5976cc508", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45215f77-70ec-4889-86ae-91e514d3ae1d", "sighting_of_ref": "indicator--b0c7c813-318a-432f-9815-80b76844cb77", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd89eb68-8162-4968-8404-76319b77f275", "sighting_of_ref": "indicator--7f29a5b3-a5ad-42cd-b653-76615b4324f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a5d70d-3f97-48ce-aad6-05b40e02a12c", "sighting_of_ref": "indicator--7f29a5b3-a5ad-42cd-b653-76615b4324f2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cefddd0-fb57-482b-8b26-11f2cf71652c", "sighting_of_ref": "indicator--7f29a5b3-a5ad-42cd-b653-76615b4324f2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c000a4-4522-432d-94f6-7d31bcb71877", "sighting_of_ref": "indicator--17d86a80-69b0-4724-9783-fee6b232d34a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fc80fe-963e-4ae2-8e18-9e0b4fec3815", "sighting_of_ref": "indicator--17d86a80-69b0-4724-9783-fee6b232d34a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ca1432-44cb-4dbd-80f8-943442f3d660", "sighting_of_ref": "indicator--17d86a80-69b0-4724-9783-fee6b232d34a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b492352-6d61-4012-a3b6-49901f03ad8f", "sighting_of_ref": "indicator--04262f71-8d69-4264-8ba1-9ce4b6661f96", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7004ed8c-1bcf-4aed-8a4f-1a542ac054b7", "sighting_of_ref": "indicator--04262f71-8d69-4264-8ba1-9ce4b6661f96", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8997650c-64ef-4be8-aa7a-79dc6260586e", "sighting_of_ref": "indicator--cf6f241d-72c0-40eb-bed2-5bde7c0cb338", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18b7cec-b62e-4597-8f7a-0c4085c94dd2", "sighting_of_ref": "indicator--463873d2-b8df-4db6-a23a-6aefbae8c3b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c28f7f-6644-4ac1-9579-40f22680a03c", "sighting_of_ref": "indicator--e9a19729-b1fe-495c-a127-378e511154cc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbf0ad4-df13-496e-8188-92b6539eaf96", "sighting_of_ref": "indicator--c7a16ef1-37fe-483e-8d05-8cc1f3e25fd6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c42c139-e861-4a86-886d-fc5cc04ae395", "sighting_of_ref": "indicator--9ae660d8-8516-46f5-a3fa-92b3f4cf0a17", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd39fe76-7abe-46ad-82b9-c9c0e3387a3e", "sighting_of_ref": "indicator--6a0c93b9-2157-4b7d-92ef-b95de8212c3b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51451bd2-27d7-495c-ad96-2c7dd2c36585", "sighting_of_ref": "indicator--e232679e-6911-40c0-9293-24580d824fb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9d80e8-8240-4cf3-9b21-4983f58080df", "sighting_of_ref": "indicator--966bceb6-596f-4645-9d7a-ffb63e402a71", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fa24ee-95b8-4151-944a-0a11c501811c", "sighting_of_ref": "indicator--0ec75c9d-1ba5-4555-b85b-976bf22a218f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3816ba4f-e23c-43d7-a544-eaa4f9827e03", "sighting_of_ref": "indicator--587f290b-eb93-436e-b3ed-df0434f35cbd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8430e837-1eaf-47ab-a743-be9edeac9578", "sighting_of_ref": "indicator--d3306979-c0d4-47f7-93bd-3f5103777420", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2dc21c-8d5b-47df-9d59-1eea82252d0f", "sighting_of_ref": "indicator--d006f8cf-aa8b-4082-98f5-b257586db392", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1970922e-0ca6-4893-b72b-9b2884347c5c", "sighting_of_ref": "indicator--28679ce9-e959-455f-bf90-ab6a3829e7eb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe240afe-8aa5-4c2c-af54-ef5df5208e82", "sighting_of_ref": "indicator--294e2015-4a65-45a5-9300-fa111ff9f7b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8faf089-2fb2-484d-9774-23ddb923a8a8", "sighting_of_ref": "indicator--255e0b16-412b-4d5a-bb45-1394155d7e53", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae76e9a-f291-4f8b-9c02-4357e28db4ea", "sighting_of_ref": "indicator--5595e3b6-9672-498f-9015-2f72037a264a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec8c81b-0e7c-4f84-bc6d-9b234900453c", "sighting_of_ref": "indicator--5595e3b6-9672-498f-9015-2f72037a264a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beeea263-8f1d-474d-b8bd-6936a6bb5457", "sighting_of_ref": "indicator--634579fc-2b73-458a-a228-2436273a9916", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affb6a0b-9d19-4d08-8829-76a2dbc17d88", "sighting_of_ref": "indicator--1fc29782-9987-40fb-8162-0d9624031cfd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d5f4d3-cc63-4cf2-94d0-cd578c5aafd2", "sighting_of_ref": "indicator--1fc29782-9987-40fb-8162-0d9624031cfd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cac8a1-b7fd-4e69-95f5-a3d888c1794a", "sighting_of_ref": "indicator--06ffcf98-b68f-4464-a626-a0b3de87ee19", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09add901-0f7d-4e81-ba9a-03de896bc8a9", "sighting_of_ref": "indicator--06ffcf98-b68f-4464-a626-a0b3de87ee19", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefce561-f5b3-4eca-808f-1994b17758ab", "sighting_of_ref": "indicator--04865615-0066-4bab-8f82-153ba65d6160", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb0a30a-6f8e-40db-8813-f7436054375a", "sighting_of_ref": "indicator--04865615-0066-4bab-8f82-153ba65d6160", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1daa8f8-2358-4145-af31-417f4d0b4411", "sighting_of_ref": "indicator--04865615-0066-4bab-8f82-153ba65d6160", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58fb748-d45f-41a0-b958-2326f5a153ff", "sighting_of_ref": "indicator--43e8f6d4-4a9e-4a61-a00f-f08683260126", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070c3072-caf3-4877-9e06-2e02ec1ed5f2", "sighting_of_ref": "indicator--bf8d7508-0de0-46bf-b58a-089be3866d5b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1525778-3f0a-4214-bbf7-7e32d193eee9", "sighting_of_ref": "indicator--e8454a48-2dba-4016-bffc-7ad6a9666c4c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba46abc1-1599-4265-9f14-1161a7147396", "sighting_of_ref": "indicator--a649d19f-60b4-49df-b8aa-5b4628c093de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f93826-6aef-44b0-89ec-317f96b344b3", "sighting_of_ref": "indicator--a649d19f-60b4-49df-b8aa-5b4628c093de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebbb39e-23c4-43bd-ada5-ade3fa75a6ea", "sighting_of_ref": "indicator--a649d19f-60b4-49df-b8aa-5b4628c093de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7443fa56-d324-4f31-9c8c-c6205373f9df", "sighting_of_ref": "indicator--da239fb6-8154-49d1-9841-e7aee27dd13c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d370a7-f514-433d-880e-62d7796f2b63", "sighting_of_ref": "indicator--da239fb6-8154-49d1-9841-e7aee27dd13c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493b1c8a-36fc-4d3a-857d-62d5d7c6f651", "sighting_of_ref": "indicator--06bd1646-d882-4a7b-8e53-1f438592f6ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11e27a8-31fb-43a2-a509-3e98ee50fa63", "sighting_of_ref": "indicator--d06c4c52-ada1-4d3b-a1b1-e77e42e14ec9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c48e365-ded9-4370-a513-cce790e30bab", "sighting_of_ref": "indicator--d06c4c52-ada1-4d3b-a1b1-e77e42e14ec9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d86d7b-d395-4890-8261-d6a81c1d02be", "sighting_of_ref": "indicator--673ca833-f425-41ae-b90a-dc5d2498086a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709a87cb-0361-4c94-aff2-400f49d572b2", "sighting_of_ref": "indicator--673ca833-f425-41ae-b90a-dc5d2498086a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd98665-e368-4d7f-9f93-630e5c584b1d", "sighting_of_ref": "indicator--2b227fd2-4394-443d-ad70-27a7f62c0330", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1ca636-47a6-48ca-bc4b-3269042f7162", "sighting_of_ref": "indicator--2b227fd2-4394-443d-ad70-27a7f62c0330", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c178d964-8915-4661-8270-5ea8238e43fe", "sighting_of_ref": "indicator--453bd9dd-26ce-4845-81ed-dcc4edcc6ed6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985018ae-d18e-4486-87b5-e46360726dc7", "sighting_of_ref": "indicator--453bd9dd-26ce-4845-81ed-dcc4edcc6ed6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d356a5-05cf-435a-bcae-a3a9bc393291", "sighting_of_ref": "indicator--2b15df7d-876d-4d55-9b26-6a5479ad047a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0254e033-5f2d-46b0-8329-1246156f9559", "sighting_of_ref": "indicator--dbfbc0bb-0622-406f-858b-594284032417", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6934efa-d680-4405-b240-ac05937143ba", "sighting_of_ref": "indicator--dbfbc0bb-0622-406f-858b-594284032417", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29128bc5-78ae-40cc-971a-64321223e36f", "sighting_of_ref": "indicator--0da7be3e-849f-49ac-b07d-10e77c101e13", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fb96f0-ab9c-4bfa-9d92-d36e4ccfe4be", "sighting_of_ref": "indicator--1971cadd-cb24-40a9-94c2-9aac9c8fb4d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9135ae25-1134-4609-8cad-dee1fa7d71d9", "sighting_of_ref": "indicator--1971cadd-cb24-40a9-94c2-9aac9c8fb4d4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed8e050-9015-4ccc-88e0-ec6d38e45bfd", "sighting_of_ref": "indicator--1971cadd-cb24-40a9-94c2-9aac9c8fb4d4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9af7d2-2e44-4b4e-bbc9-afe5a227cb57", "sighting_of_ref": "indicator--c81f99f8-c3c3-4ebb-a85c-d6030a856eb5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86cdda8-fdd9-4713-987d-ed40a68f0ada", "sighting_of_ref": "indicator--c81f99f8-c3c3-4ebb-a85c-d6030a856eb5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ece5bf7-6b76-4846-bdcf-95be9a619600", "sighting_of_ref": "indicator--c81f99f8-c3c3-4ebb-a85c-d6030a856eb5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6a1435-53d8-4cf4-9c2a-851b5781d25f", "sighting_of_ref": "indicator--6c1a0f21-c213-4fea-a4b1-514477a58819", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd6ef42-da2c-42d5-aa80-bf7be40e2eb8", "sighting_of_ref": "indicator--6c1a0f21-c213-4fea-a4b1-514477a58819", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a922aa-091c-41f5-85b5-a52e9368cce8", "sighting_of_ref": "indicator--78ea1f0f-42bd-4380-a809-bc60e24086af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3eebcf-f21f-449c-b6a7-9f63e413446c", "sighting_of_ref": "indicator--8f92324c-82c8-4414-9d76-1081c8c5a4c5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aad5023-0750-40c2-b775-f65861c26766", "sighting_of_ref": "indicator--98d4a894-188b-4048-88fb-98e171e1819e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee79c80-a6f3-43a0-b008-895a55af91a2", "sighting_of_ref": "indicator--98d4a894-188b-4048-88fb-98e171e1819e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0892d00-f43f-462d-8c86-1d358da98173", "sighting_of_ref": "indicator--98d4a894-188b-4048-88fb-98e171e1819e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f6ba5c-c74d-4595-acdc-9fac65bf80b3", "sighting_of_ref": "indicator--75d902c4-5749-472d-9c2f-0b03faba0717", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f031880-18b2-4653-8bfa-51bfd426ff28", "sighting_of_ref": "indicator--75d902c4-5749-472d-9c2f-0b03faba0717", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296cdb0e-1216-4083-842b-5e8c57c4334c", "sighting_of_ref": "indicator--75d902c4-5749-472d-9c2f-0b03faba0717", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e8eb4f-c695-4d6d-bd40-cea293738339", "sighting_of_ref": "indicator--9c78bdb1-cd4f-4b99-975b-50e3caf5f5d2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce05e1cb-3fc9-4819-b04b-0281f71257c6", "sighting_of_ref": "indicator--9c78bdb1-cd4f-4b99-975b-50e3caf5f5d2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf983d6-28cd-44dd-b56f-813b8d87f596", "sighting_of_ref": "indicator--9c78bdb1-cd4f-4b99-975b-50e3caf5f5d2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed544064-9c74-4da3-afdd-fa458ec0718a", "sighting_of_ref": "indicator--1b12f417-b7ef-4e93-90e4-a57f6985640c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ca6251-fee6-4f24-8ef9-5c5eee1e694d", "sighting_of_ref": "indicator--1b12f417-b7ef-4e93-90e4-a57f6985640c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1c2b93-cc37-4d5d-904a-c444f75921e9", "sighting_of_ref": "indicator--1b12f417-b7ef-4e93-90e4-a57f6985640c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f399d0c-006e-479d-86dc-65187572dafc", "sighting_of_ref": "indicator--84f819d7-7c22-46bc-9c70-1835d58978e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e02329-969e-4300-9868-45154eb45942", "sighting_of_ref": "indicator--84f819d7-7c22-46bc-9c70-1835d58978e5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d4ec8a-fc3e-4a2c-b215-f53fb36396e9", "sighting_of_ref": "indicator--84f819d7-7c22-46bc-9c70-1835d58978e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f21317-7d07-48b4-88f9-3e36567c04e5", "sighting_of_ref": "indicator--f5794cb0-ffe3-42c1-921b-0a16d01b61c5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8345f470-df1c-4e06-bdfe-2a4d92c25b65", "sighting_of_ref": "indicator--f5794cb0-ffe3-42c1-921b-0a16d01b61c5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ebed9b-1ce0-4140-9810-fe561497981c", "sighting_of_ref": "indicator--f5794cb0-ffe3-42c1-921b-0a16d01b61c5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e8e899-1e08-4fea-b91d-d844665ac6bc", "sighting_of_ref": "indicator--e1b8d131-e8b9-42ed-bda4-54954280a065", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306ed3e2-b6f0-4e1c-ada3-d100c4259a7a", "sighting_of_ref": "indicator--e1b8d131-e8b9-42ed-bda4-54954280a065", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2c924e-14a5-40a9-81a6-e1a002b0944a", "sighting_of_ref": "indicator--e1b8d131-e8b9-42ed-bda4-54954280a065", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88889a6-1a88-434d-98ad-79f244608525", "sighting_of_ref": "indicator--6766fcbc-ef08-4348-bd57-aad4471618cb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c869cab-3339-418a-8b28-b0c582af2f69", "sighting_of_ref": "indicator--6766fcbc-ef08-4348-bd57-aad4471618cb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93467de9-0e10-4a07-817b-0980970c92d5", "sighting_of_ref": "indicator--5d930635-6a99-4ad8-99ac-88443619f182", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f399e964-d4ae-4366-8746-a38a900ebcdc", "sighting_of_ref": "indicator--5d930635-6a99-4ad8-99ac-88443619f182", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645ea304-0136-4cce-a091-5c9a8a1d4b82", "sighting_of_ref": "indicator--ff1cf20f-a6ef-430a-8073-acca017aff35", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a02fc59-79ba-4747-885b-ecaf5eb6af3f", "sighting_of_ref": "indicator--ff1cf20f-a6ef-430a-8073-acca017aff35", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bec1597-f560-484e-b529-9689aa482416", "sighting_of_ref": "indicator--3e3d24a6-6b19-4724-b079-ce6970cdc1db", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae788ed2-2686-4863-a218-ed0b49bb1a7a", "sighting_of_ref": "indicator--3e3d24a6-6b19-4724-b079-ce6970cdc1db", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2897ff1a-a203-4ce0-b36e-f3cba9562260", "sighting_of_ref": "indicator--9bae42ee-f07e-4787-b640-dd5f30e9c161", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409d791d-d1ec-4d8b-8eed-1867ae6db3b9", "sighting_of_ref": "indicator--9bae42ee-f07e-4787-b640-dd5f30e9c161", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14cc863-3518-4d17-8c64-7655abe8a064", "sighting_of_ref": "indicator--183c5ed6-0f86-4252-9ba0-26ee32303fef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d4c312-217b-4e8c-b5be-ad5a912644ba", "sighting_of_ref": "indicator--183c5ed6-0f86-4252-9ba0-26ee32303fef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259d8dce-da86-4415-9c85-3adcd0f8be37", "sighting_of_ref": "indicator--f2e6afcb-6bb0-48b6-9dc2-44e6aee3b8b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1714251a-f5ba-42f6-93ec-32aaffd9f65b", "sighting_of_ref": "indicator--16d4f729-7c5c-407e-94aa-bb2658b22ed7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26503b9f-bc85-47dd-b417-d45436d6b134", "sighting_of_ref": "indicator--5c22c5b5-175e-41ba-b863-75e374db84f8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b62a35-b451-4671-8569-9e357bee95e0", "sighting_of_ref": "indicator--ba09577a-1455-4a46-8f87-63849bb190c4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031d264b-ff0c-43c4-84b6-05f513c5d02a", "sighting_of_ref": "indicator--ba09577a-1455-4a46-8f87-63849bb190c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df26ea54-cf13-4209-9883-f1157ccc079c", "sighting_of_ref": "indicator--7f1667a9-4a21-429a-8cc8-9be463a8cdd3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05dc030d-6bbb-4f9a-94b5-e7224e818a8d", "sighting_of_ref": "indicator--7f1667a9-4a21-429a-8cc8-9be463a8cdd3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997d7f4f-82c7-430f-bab7-79aaa6c15957", "sighting_of_ref": "indicator--7b68e4da-9309-4e3c-9629-0a80a012547e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd4c20d-d6a8-42fd-9c4b-ddb1480ccc8d", "sighting_of_ref": "indicator--979bd571-55eb-4394-baf7-aeb74e146614", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9da684f-9dd8-48b7-a939-fba4dab8152e", "sighting_of_ref": "indicator--979bd571-55eb-4394-baf7-aeb74e146614", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2dd1b1-459c-436c-8f88-fa579cd07d2b", "sighting_of_ref": "indicator--c9ac4f6e-9711-426e-bdff-5b4837d6b12d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f2d3a3-d5ba-4f2c-ae70-511a4cfd4cfc", "sighting_of_ref": "indicator--044c820e-a71a-40d1-af82-432672b2aa9c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab413836-c7cb-437b-9c52-76db3af545a7", "sighting_of_ref": "indicator--c9eec4ec-7ca9-44a6-958a-032bc6cb5495", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c946e9-7ef6-4713-b2cc-5790fdf53de3", "sighting_of_ref": "indicator--4056aca0-3aaf-4826-a45a-80325e419d6d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122b0e85-76aa-401e-b1c5-69c01e4d7a9b", "sighting_of_ref": "indicator--7f6bb389-a7a3-40d4-85aa-2b58b2af568c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16766f3e-bc3b-4568-8478-dc6dd27a3a70", "sighting_of_ref": "indicator--7f6bb389-a7a3-40d4-85aa-2b58b2af568c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1a7f03-66ea-4df5-a3dc-1a23a047b57e", "sighting_of_ref": "indicator--cb978e32-cfcc-40e2-8fa0-5a799a2eff9b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57d7908-cd83-4d2f-8cf9-a464955de229", "sighting_of_ref": "indicator--d96493c0-13e6-4213-9322-6f5c05a3365b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83815df2-6cb7-4895-a96c-c77a844cb78f", "sighting_of_ref": "indicator--ff67e7ac-bfe6-4ff1-b441-839c429a1684", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dce2a9c-26a6-4dcf-9b88-b320cc3cab6b", "sighting_of_ref": "indicator--c866ceb0-f85c-42db-a773-c14f0d5d3f67", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcdacf7-b7fc-400c-9b0d-23af263d25e5", "sighting_of_ref": "indicator--c866ceb0-f85c-42db-a773-c14f0d5d3f67", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd59dc0-db71-48c7-b17d-fca8bd33be38", "sighting_of_ref": "indicator--c866ceb0-f85c-42db-a773-c14f0d5d3f67", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c12f67a-c1b0-4f53-9381-f6abd3b59d54", "sighting_of_ref": "indicator--1bddbc28-15cb-4087-a82b-961810e883df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc7f147-a24d-455c-84b5-482f1c0fff00", "sighting_of_ref": "indicator--3ee2ab1e-2dc1-4caa-9639-dac64d324a02", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fa6534-7805-47e9-9077-aa85c063e5f7", "sighting_of_ref": "indicator--3ee2ab1e-2dc1-4caa-9639-dac64d324a02", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f443e4-7636-42eb-bcdd-447af2429693", "sighting_of_ref": "indicator--3ee2ab1e-2dc1-4caa-9639-dac64d324a02", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7555f477-e4a0-4c38-a3ec-fc2b28976f11", "sighting_of_ref": "indicator--6fb948dc-290e-4aa1-bd85-492dba95656e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568739b8-95cd-4fd2-a0be-f53b75b44969", "sighting_of_ref": "indicator--f78544af-3933-4c8d-9a4c-cb82a95277a3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a23b370-2ca8-40ac-8ab4-0642558e6bf8", "sighting_of_ref": "indicator--6719b5fd-66ba-418f-a225-e594d9f9f30e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852d0081-2f2f-4e94-89bb-195e2729fa55", "sighting_of_ref": "indicator--9ea0dc1d-8414-4b10-8794-cb558db711a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b906009-8a71-44be-b9c1-823eeb6af17e", "sighting_of_ref": "indicator--e810f6ae-58c7-4b73-bd53-f8764db09b42", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3596c31a-0d2e-46cb-aea7-3a95781fddde", "sighting_of_ref": "indicator--05573665-85db-40e1-b1a2-e1f1218798c7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3873edd7-3af2-4762-a156-8c8127176e12", "sighting_of_ref": "indicator--05573665-85db-40e1-b1a2-e1f1218798c7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1fd569-0200-4046-a9c4-f3e1bac4aaec", "sighting_of_ref": "indicator--23842c3b-7e18-45da-aa3a-0350b15d22c0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b66fc94-33b8-4d82-8266-1ba23b633b58", "sighting_of_ref": "indicator--23842c3b-7e18-45da-aa3a-0350b15d22c0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b873ebc3-d4fa-4795-9f4e-13aa4fa75a37", "sighting_of_ref": "indicator--3bbe5e62-ea48-4357-ba6f-868007a946b5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4b37c7-3a72-408a-a7ab-953fc935e3f8", "sighting_of_ref": "indicator--3bbe5e62-ea48-4357-ba6f-868007a946b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654487be-a8af-4bd2-805b-17a034c4c3c0", "sighting_of_ref": "indicator--b28098a8-b58b-450c-abb1-db1f1bfba170", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb84b40-149c-4b14-890e-c1e3e047fd64", "sighting_of_ref": "indicator--b28098a8-b58b-450c-abb1-db1f1bfba170", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f06678-bc87-4e95-89f5-f507a6c298fa", "sighting_of_ref": "indicator--709c0944-91af-479b-bee4-57c705464cdb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79894ef6-b7ce-4704-9828-048dbd963cb2", "sighting_of_ref": "indicator--0277b747-0972-48ca-8db1-b0fc2551360b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71249068-046f-4af7-b82c-54cb11c04c61", "sighting_of_ref": "indicator--43761156-573d-49bb-883b-f679b16d8422", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf1e07b-04bd-46ac-8765-8bcac981a106", "sighting_of_ref": "indicator--43761156-573d-49bb-883b-f679b16d8422", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a18a2b-381a-4f21-aac0-a3acda662d1e", "sighting_of_ref": "indicator--b81c69c0-81ec-4e25-926e-73cb6dfae57e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9ecf34-a3a6-4a4b-977f-be7efa554667", "sighting_of_ref": "indicator--b81c69c0-81ec-4e25-926e-73cb6dfae57e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9391a03a-176c-485b-bf9d-1651a4338547", "sighting_of_ref": "indicator--4da01ff4-b0d3-43a8-a7c2-5d5cb7031111", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55465f63-0220-47b0-b959-8cf233eaa1a7", "sighting_of_ref": "indicator--4da01ff4-b0d3-43a8-a7c2-5d5cb7031111", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0352062b-c178-4539-8139-9b954479192e", "sighting_of_ref": "indicator--4da01ff4-b0d3-43a8-a7c2-5d5cb7031111", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4770dc50-5013-4e27-85fc-8c2ae95ec307", "sighting_of_ref": "indicator--c310ec97-cde4-4254-9fdc-40fc07109523", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21936c12-9200-4a61-88a5-bf7e94a7531b", "sighting_of_ref": "indicator--c310ec97-cde4-4254-9fdc-40fc07109523", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e8b526-f7cc-43f9-a36b-aef81b2a84d0", "sighting_of_ref": "indicator--9434e076-1ef2-4c30-87bc-7c9bca299c5e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2d23d6-4ba3-429e-b663-f7d39a275141", "sighting_of_ref": "indicator--9434e076-1ef2-4c30-87bc-7c9bca299c5e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9a1558-129a-44ac-899e-61814bc550d9", "sighting_of_ref": "indicator--40fa8d73-d324-4ba5-971c-0ae4bfe45ba9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc813e7b-460a-4281-b247-903973779e85", "sighting_of_ref": "indicator--40fa8d73-d324-4ba5-971c-0ae4bfe45ba9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8806fb5c-bb2c-4b34-9cb8-f9fcdd3ccaf3", "sighting_of_ref": "indicator--bfc4ad70-1b87-4c28-a307-7668c4e801d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5367cc63-441d-4caf-8d0c-17b8336cb4d1", "sighting_of_ref": "indicator--bfc4ad70-1b87-4c28-a307-7668c4e801d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62439c8e-4a34-4d22-b96c-090f3926a407", "sighting_of_ref": "indicator--ddfe86fd-1013-415a-8c5c-bfc4f3c1bb2d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656aaa26-49fe-4df1-8127-b0472fe609db", "sighting_of_ref": "indicator--ddfe86fd-1013-415a-8c5c-bfc4f3c1bb2d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15518f7a-da1b-4321-a42d-e2b1bc74704f", "sighting_of_ref": "indicator--58e98a96-9adb-4a18-90cc-8860aefca030", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e00eac-7580-40ad-b4a3-b1ad277f6009", "sighting_of_ref": "indicator--f7fda4f3-4d8b-4fd7-a5ea-31104e9af338", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07af4c0-cf8d-4828-9fba-50eb320d0f2d", "sighting_of_ref": "indicator--fb2d9cb3-1227-4a3a-a057-701b8a91aecf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9a2441-bdd9-4f5a-9254-1b14490a6883", "sighting_of_ref": "indicator--760f7560-3f10-4720-873d-7375b1d2f1e0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b51e6ac-a8d1-4b65-b041-b3fe323d9b8e", "sighting_of_ref": "indicator--760f7560-3f10-4720-873d-7375b1d2f1e0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f62c92-722e-4a04-b9e4-a4c429501f87", "sighting_of_ref": "indicator--b18500e6-b7e1-4ab9-b88b-050a5d115cb8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38987ef-3543-4d30-a729-d4db6c24f35b", "sighting_of_ref": "indicator--b18500e6-b7e1-4ab9-b88b-050a5d115cb8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942d66b0-70fd-4363-8c00-68717f4944b4", "sighting_of_ref": "indicator--79a88dbd-f773-4e69-9402-f6fa8e60a778", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c266e91-2c59-4a27-99d8-981aa3a531b2", "sighting_of_ref": "indicator--79a88dbd-f773-4e69-9402-f6fa8e60a778", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc6eae7-057f-465b-a4bc-8c4c55249e4a", "sighting_of_ref": "indicator--c5d36f68-fd1d-46d3-9284-20064f4e82ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546fd757-0b6c-413e-9bfb-b66df55dc26f", "sighting_of_ref": "indicator--c5d36f68-fd1d-46d3-9284-20064f4e82ae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c4df9c-8aef-452d-96cb-f5fb745bbfdc", "sighting_of_ref": "indicator--ae683181-ced0-4f4b-89ce-8ac7764dd247", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d62de63-4d47-44dc-8424-5fe70f3e51ae", "sighting_of_ref": "indicator--ae683181-ced0-4f4b-89ce-8ac7764dd247", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949dc28b-4193-4633-bb82-342a08f57e39", "sighting_of_ref": "indicator--98f9881c-0f10-4cd8-ab7d-0d31f8f310a1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--217904c6-6c44-44b1-a993-f4d8369e1a3e", "sighting_of_ref": "indicator--98f9881c-0f10-4cd8-ab7d-0d31f8f310a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8122381-f4ce-4052-9756-680580892168", "sighting_of_ref": "indicator--2f89ef14-3918-46c9-b076-c08633bcca7f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134a8b47-c7aa-492c-90f9-4b4089219eb4", "sighting_of_ref": "indicator--2f89ef14-3918-46c9-b076-c08633bcca7f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f7dfee-7615-4ede-9d14-c4fc22369bde", "sighting_of_ref": "indicator--cfe69641-fb8c-4168-8ed0-63c736a471be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05feb303-71f4-4550-9870-dbe808df8582", "sighting_of_ref": "indicator--cfe69641-fb8c-4168-8ed0-63c736a471be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e939058f-9048-46d2-aee4-923519e74f66", "sighting_of_ref": "indicator--6acd51e2-a7aa-4f6d-9d1b-418953b40add", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9475f7-2b7c-4ca2-80cc-775ab0931dfc", "sighting_of_ref": "indicator--6acd51e2-a7aa-4f6d-9d1b-418953b40add", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74e343c-2c2f-4a73-bbe1-85bd6b0badda", "sighting_of_ref": "indicator--7e111533-c238-4434-bf59-e60705dcb07b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c41526f-a7d7-4f64-b91f-8cdc8d8b5588", "sighting_of_ref": "indicator--7e111533-c238-4434-bf59-e60705dcb07b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cc73e3-835e-412e-9232-9ba735bcba6c", "sighting_of_ref": "indicator--8cec5fd9-068c-4c63-8e7f-41ec7dad5877", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed3402b-a945-45d0-94ee-cee729f152ab", "sighting_of_ref": "indicator--8cec5fd9-068c-4c63-8e7f-41ec7dad5877", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fed0e66-997e-4f36-b979-41d4067d9ae9", "sighting_of_ref": "indicator--4d976e1b-fc68-43be-beaf-6c503ffda1be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbb76cb-d0d3-459c-af5b-98fa185ffa42", "sighting_of_ref": "indicator--4d976e1b-fc68-43be-beaf-6c503ffda1be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bef937a-5ac0-4f52-9ae4-ffd237c6a922", "sighting_of_ref": "indicator--103e4440-f8b0-4526-9e79-08b6a9f76734", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d53899-6e04-46ef-b191-03c0e89ce7a6", "sighting_of_ref": "indicator--103e4440-f8b0-4526-9e79-08b6a9f76734", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee7abee-cc55-403c-b16c-a6ab93c272f9", "sighting_of_ref": "indicator--2ab83f90-9a3d-475f-ae56-baeee19da2ad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bb36a9-8578-4856-9926-66d2fedab7cd", "sighting_of_ref": "indicator--70c8f362-4d16-4109-bbf9-91062053b79e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2227c12f-8048-49b6-8b71-56777ad3d55e", "sighting_of_ref": "indicator--70c8f362-4d16-4109-bbf9-91062053b79e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cb8bbe-2028-4e12-a554-ece7226f4ad2", "sighting_of_ref": "indicator--a874ef68-3916-4a4a-9644-fa35fc234d56", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434a267f-dc9d-46d9-94e4-9618ec0c0981", "sighting_of_ref": "indicator--a874ef68-3916-4a4a-9644-fa35fc234d56", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e50da9b-e75d-40a2-9645-b1754043426e", "sighting_of_ref": "indicator--2986f97c-0049-4920-90be-8e00bbb19091", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11aea72e-e9ed-4ebf-9e5a-cea353e69ea1", "sighting_of_ref": "indicator--2986f97c-0049-4920-90be-8e00bbb19091", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309f0fe1-a5b4-4a31-a6d3-eeef596c7d22", "sighting_of_ref": "indicator--a0c5354f-aa04-4186-8ebc-7b8826093744", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe53ac3-3b20-4f37-81bd-018245751475", "sighting_of_ref": "indicator--a0c5354f-aa04-4186-8ebc-7b8826093744", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648b8db6-8bdc-4fca-9fd2-462fcd718c09", "sighting_of_ref": "indicator--2edf83b2-2ff3-4d2b-b7ec-0ce8ecbaeeba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72db0f54-a2b7-46a3-b040-98cad638030a", "sighting_of_ref": "indicator--2edf83b2-2ff3-4d2b-b7ec-0ce8ecbaeeba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb21b7ab-85f3-4ad8-a85c-d3e04dcf4d7d", "sighting_of_ref": "indicator--a86b29ed-289a-4e25-bf32-e0cb323850d6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30edd37-7998-48a3-ae9e-707752a7c897", "sighting_of_ref": "indicator--a86b29ed-289a-4e25-bf32-e0cb323850d6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1df477-22dc-4f12-bab4-31acf750e1f9", "sighting_of_ref": "indicator--c53d08bf-51f3-4747-8257-30b96dc2fffc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f3fcba-a76c-4873-aec6-11ebdb0a5371", "sighting_of_ref": "indicator--c53d08bf-51f3-4747-8257-30b96dc2fffc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc782b7d-ef6b-42da-af28-63e6ff4e327b", "sighting_of_ref": "indicator--db65d5a7-6f22-463d-81e0-b1cf997640fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcb4913-950b-4e91-8f6c-a7bfa20d6b2d", "sighting_of_ref": "indicator--db65d5a7-6f22-463d-81e0-b1cf997640fa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a78425b-bb38-4247-80fe-4824e6359d06", "sighting_of_ref": "indicator--79b92b92-7afc-4a36-b6e9-903991459b75", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f7a1eb-4ae0-4753-80d0-ea7b181e27f3", "sighting_of_ref": "indicator--79b92b92-7afc-4a36-b6e9-903991459b75", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf41a2e5-9a25-48cf-9cc1-09ed78e89c3d", "sighting_of_ref": "indicator--8e266fd1-ce1a-4389-88d6-b935f7d7f937", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777529f4-d454-4215-829b-a94de6104a4b", "sighting_of_ref": "indicator--8e266fd1-ce1a-4389-88d6-b935f7d7f937", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5f5f70-07c2-484f-855c-01620a94d5f2", "sighting_of_ref": "indicator--0cd0e933-1182-4ff0-994b-14d50f816491", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2b1db9-b6c2-4f93-bff0-bdf259d1e363", "sighting_of_ref": "indicator--0cd0e933-1182-4ff0-994b-14d50f816491", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5668e82-e32a-483b-a087-0ddf0b82e95d", "sighting_of_ref": "indicator--1504c1aa-9b17-4359-9340-ee6f0aa9983c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d804fba9-1620-4114-80db-6c057993a507", "sighting_of_ref": "indicator--1504c1aa-9b17-4359-9340-ee6f0aa9983c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5bcc52-2e12-4666-9eda-ab1fe96087a3", "sighting_of_ref": "indicator--94618d36-9269-4090-98d5-9146c928fa85", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ae5607-4c21-42c2-a62c-78856cf1fca5", "sighting_of_ref": "indicator--94618d36-9269-4090-98d5-9146c928fa85", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9c2ae5-2d2c-4e24-9adb-9702979fa940", "sighting_of_ref": "indicator--5bb30af5-57bf-48d4-8a01-ba1e8917ec39", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f532f15a-a5c8-41d5-b41d-d290623fdf97", "sighting_of_ref": "indicator--5bb30af5-57bf-48d4-8a01-ba1e8917ec39", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca4315c-dd70-4401-a820-05c34b6048e8", "sighting_of_ref": "indicator--82e8fc69-db76-4a8a-8fcc-a7af56c03ec6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b0ac28-c846-414e-8ca9-40b893a61377", "sighting_of_ref": "indicator--6c99def7-5db0-4fb0-80a8-72ab9b6d1fea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a717c32-0fd5-4e6c-b1a7-af3dee12eae8", "sighting_of_ref": "indicator--245944b0-6111-4d4d-9a84-edf1228627b6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a9693e-9cd4-4da9-9dee-9c533e996451", "sighting_of_ref": "indicator--245944b0-6111-4d4d-9a84-edf1228627b6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133b3fd4-5f3b-4bf1-ac1d-229e9b6f2132", "sighting_of_ref": "indicator--971a21c2-22b6-4f91-b974-f6495efac27f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05161625-23e9-4616-8ce6-24be2899cee1", "sighting_of_ref": "indicator--620afabb-c8c1-4bd4-8ce7-a706df8cfb2d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661687a8-a265-40a9-833e-a453c34d5539", "sighting_of_ref": "indicator--efd060ef-0a00-45c6-a1d8-5cca91c42b0c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdfe8da-fd82-4d9a-99d5-172b8ddbed33", "sighting_of_ref": "indicator--efd060ef-0a00-45c6-a1d8-5cca91c42b0c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c5890f-b299-4c20-8475-4f2042c1d4d9", "sighting_of_ref": "indicator--3229ac7a-6e7a-4256-9b9e-2ecdcce98b0e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302cdb2e-728d-43f5-8143-044c9525c361", "sighting_of_ref": "indicator--3229ac7a-6e7a-4256-9b9e-2ecdcce98b0e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16dfdb61-aadf-48f2-9f75-1039fff8dd97", "sighting_of_ref": "indicator--d8962e05-ff70-4e87-9a22-da4564d0409b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930206da-768a-4716-a6e4-9a8f0a5fa507", "sighting_of_ref": "indicator--d8962e05-ff70-4e87-9a22-da4564d0409b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f084c1-140c-4427-8057-7f955c511f06", "sighting_of_ref": "indicator--d7393cfa-b51e-41d8-bdcf-845b47de47ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8e65c4-ea54-445e-a720-0740c6208627", "sighting_of_ref": "indicator--d7393cfa-b51e-41d8-bdcf-845b47de47ba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71822c3e-d350-4972-866f-f45c25fcf614", "sighting_of_ref": "indicator--5fd98af7-f988-4546-ad56-ad75570a15ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed652a62-0a5a-44bd-bea3-eaa34258d4b3", "sighting_of_ref": "indicator--1e3ab67a-9935-42d6-a2d8-796f44dce974", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fdf8a8-7972-49ac-bb62-e22e2c565bd9", "sighting_of_ref": "indicator--1d3a6697-fb99-40d4-b32f-6e0147a25bc5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc7462e-3bf2-408c-abf9-5ad7065baff9", "sighting_of_ref": "indicator--1d3a6697-fb99-40d4-b32f-6e0147a25bc5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c81839a-776a-49be-9226-2cbf8b42a075", "sighting_of_ref": "indicator--e2d5a1dc-426a-4987-bbc1-aceb7080d890", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d665f34f-c3db-414c-8faa-eda04caca8dc", "sighting_of_ref": "indicator--e2d5a1dc-426a-4987-bbc1-aceb7080d890", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53282698-acad-4447-8b07-f4f27a309a40", "sighting_of_ref": "indicator--4a5b556c-9f27-4260-af18-b5a03696d81b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afae7daa-dd9b-49b8-9666-6a8bca79a978", "sighting_of_ref": "indicator--4a5b556c-9f27-4260-af18-b5a03696d81b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0068e9a7-4a51-41b0-8fac-57c56cb30cda", "sighting_of_ref": "indicator--2715c8d9-eda1-4d89-b34d-6a4b0f70c745", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f754007-bb86-4ccf-932e-980e52ecd9cb", "sighting_of_ref": "indicator--2715c8d9-eda1-4d89-b34d-6a4b0f70c745", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924b6cfd-429c-4f57-a29d-4edfe43cbe4b", "sighting_of_ref": "indicator--3ea4b047-f24f-45c4-87b6-227e028e18b8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73dc4dd-80dd-47ce-a261-8ed2f571516c", "sighting_of_ref": "indicator--ae26ba75-df45-4752-b5c3-eb6f4762a843", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fee0f0a-5e69-4100-80a0-c9a4c1f6180e", "sighting_of_ref": "indicator--ae26ba75-df45-4752-b5c3-eb6f4762a843", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df613e70-7304-497c-812a-1bfe37f29d9f", "sighting_of_ref": "indicator--48b66eba-c1ad-4994-a9c0-9a4a84d7dba8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa22270e-4bb6-479b-8532-cc492795bd22", "sighting_of_ref": "indicator--48b66eba-c1ad-4994-a9c0-9a4a84d7dba8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2781cac-751d-42be-b0f2-c4beba0d1423", "sighting_of_ref": "indicator--89889f86-5fcc-4168-8fc0-ffddf9d3314d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d6fe5b-7a9d-4eeb-b216-a85ce6114410", "sighting_of_ref": "indicator--89889f86-5fcc-4168-8fc0-ffddf9d3314d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b999e7-eb9c-4d7f-9ec9-b9baa3d9b02a", "sighting_of_ref": "indicator--8701eed8-79fd-4fe4-9dfe-5553fc7434df", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca7d0d2-b238-4443-a328-ede5a6aeba5e", "sighting_of_ref": "indicator--8701eed8-79fd-4fe4-9dfe-5553fc7434df", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d90893b-a61a-4b09-9982-0e2adf940364", "sighting_of_ref": "indicator--73eaf92a-68a4-409e-98ff-dcf1da22faae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d74325c-366b-4436-aa82-53b5f915e506", "sighting_of_ref": "indicator--518e5f48-a8aa-4768-95db-849fcb83545c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9aa1a5-0f65-438a-a176-468ca4d266b9", "sighting_of_ref": "indicator--518e5f48-a8aa-4768-95db-849fcb83545c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df1b0ee-8949-4d37-b057-7061689e515a", "sighting_of_ref": "indicator--c681be4e-df78-4d6c-8722-dc4d3eb051e1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307f69a3-c510-43dd-b2e6-519f191687db", "sighting_of_ref": "indicator--15e7ee3e-8de8-4e4f-a2a2-4292ac272712", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c4b553-c3ad-4c79-b008-310dedc0cb40", "sighting_of_ref": "indicator--98f00782-9145-44cc-85ae-4b7a7578e39d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9e3b7a-02b9-4640-b9cb-3b129cca8c1f", "sighting_of_ref": "indicator--3a1f7391-98c5-44dc-93fb-ddc56acbaf0d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d874a7f1-1b06-4269-9885-a78b820bcd55", "sighting_of_ref": "indicator--3a1f7391-98c5-44dc-93fb-ddc56acbaf0d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378ccefa-2965-4fba-83af-02ae3b1cbfb8", "sighting_of_ref": "indicator--cfc90960-9d38-4619-bde5-3bb927d9a89f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd4a1f8-8e3e-450b-a32e-095aff4d0490", "sighting_of_ref": "indicator--a130bbc0-514c-4be1-a6f0-b8f76062760f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b40c473-70ab-4f65-a89e-568045941668", "sighting_of_ref": "indicator--a130bbc0-514c-4be1-a6f0-b8f76062760f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee4ff49-413b-46c2-89cb-0ce7123be89d", "sighting_of_ref": "indicator--41af14d7-a0cd-4be2-a28b-756bdd650903", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71824bc-5d4d-4e28-ad77-eabd38ffdabf", "sighting_of_ref": "indicator--41af14d7-a0cd-4be2-a28b-756bdd650903", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bdaa2f-b581-4cb0-8890-35752652ceb9", "sighting_of_ref": "indicator--e8a72644-726c-4717-8695-d56908b757b8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb75bbd7-5db9-43b3-ab33-43e96098c562", "sighting_of_ref": "indicator--0f235658-1169-4403-a9d4-946aa326c95c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657feec2-628b-410b-af48-6f669117a899", "sighting_of_ref": "indicator--0f235658-1169-4403-a9d4-946aa326c95c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b235b3-75ba-4858-99a1-63961cf8b892", "sighting_of_ref": "indicator--272bc549-2f49-47c2-91af-05fb1a81ee18", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd0d42e-f25f-472d-8243-2b6028e524f9", "sighting_of_ref": "indicator--206421d9-7c17-4c3b-9b27-7700c59ebc35", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271ca6be-657c-48b8-951e-e1aca180b160", "sighting_of_ref": "indicator--8d590d68-afd3-4fc0-bd41-cd0796fc0d5f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf6b2e7-0ee0-429f-a1dd-7e90b8ba7c9b", "sighting_of_ref": "indicator--16676130-bee0-42c8-a03c-ce843696408f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddb2ed2-ac27-4bc2-87c9-bddb89626cd6", "sighting_of_ref": "indicator--889cf647-c4a9-4e0c-a71b-b11593e424f8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4f9a87-a0e3-4a55-9c5c-670bf2b5482c", "sighting_of_ref": "indicator--324bbc87-2218-4d6a-92f9-fbaf1f95d43f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edbb19e-950c-4b5f-9bdb-5332c2ae6739", "sighting_of_ref": "indicator--971e2589-3b50-4d4f-bae0-7a32c575261b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad21e006-29aa-48ca-9a48-80ca1be5d79f", "sighting_of_ref": "indicator--971e2589-3b50-4d4f-bae0-7a32c575261b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0320c2ac-4e5a-4784-b814-f1fb994c5190", "sighting_of_ref": "indicator--335f7447-e208-4380-b583-7c5b614b7e6a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899ec577-c688-42bc-95ef-1b2c19f694e5", "sighting_of_ref": "indicator--335f7447-e208-4380-b583-7c5b614b7e6a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d298bdb-a680-4d77-8ecb-0469423509ed", "sighting_of_ref": "indicator--ca080a7b-590a-4d05-a683-a7dfbb60ac13", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6c23d8-66e9-4c38-b950-062572f7d531", "sighting_of_ref": "indicator--ca080a7b-590a-4d05-a683-a7dfbb60ac13", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee58e22c-511c-42b3-83eb-44f2f00a620a", "sighting_of_ref": "indicator--c279b2f0-93d3-4ae5-b179-b72ab0fa390d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55701442-a2c2-4cce-911b-f2a099fdfb88", "sighting_of_ref": "indicator--c279b2f0-93d3-4ae5-b179-b72ab0fa390d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c7987d-5b0f-461e-85f8-7f9d0d93f679", "sighting_of_ref": "indicator--0d8adb7a-bdce-40ed-9037-bc85cdc854e6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db85fb6-77f2-4b43-9d66-0bd3637e58f4", "sighting_of_ref": "indicator--0d8adb7a-bdce-40ed-9037-bc85cdc854e6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30d64c9-acf2-46fe-820d-97aa69e477a3", "sighting_of_ref": "indicator--9e88fe2a-02db-4831-983c-8274f3e3bed2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cbee1b-7684-4c33-a540-0d6ce248900b", "sighting_of_ref": "indicator--9e88fe2a-02db-4831-983c-8274f3e3bed2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99745ded-77a3-4941-a0fc-1077957f4770", "sighting_of_ref": "indicator--2f0f8ffa-8f4a-4b42-8b5f-6a6f14c7620f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691c9b0e-b523-464a-8ae1-c0d0998a003c", "sighting_of_ref": "indicator--b086064f-0b14-44b7-a910-f498cc90e10b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7f782a-6b07-4d3b-a0ec-d5e51fc4edfa", "sighting_of_ref": "indicator--9221b4c5-c303-43c3-8d7f-013088f17023", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619f6f05-d855-46a3-9bd6-ea024a777296", "sighting_of_ref": "indicator--9221b4c5-c303-43c3-8d7f-013088f17023", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e163f4-33f8-48ec-973c-4a2cbf99fb44", "sighting_of_ref": "indicator--9221b4c5-c303-43c3-8d7f-013088f17023", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4778f5-eea5-4698-8991-e78370740f11", "sighting_of_ref": "indicator--f4f43282-a2f9-48e4-ab87-45022a9bbab3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eba8eb2-cb71-4b3d-a36e-f617ce569454", "sighting_of_ref": "indicator--801dea86-f19f-43ae-af50-c37d4a61ef9f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9057027-0bec-42dd-b511-7aad26babd2e", "sighting_of_ref": "indicator--49b8d0b5-d2be-4f88-9ec4-90f0d7e0a0be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8100b643-7dcf-4575-9704-b9d0193c1c72", "sighting_of_ref": "indicator--fc34d846-6366-46a8-8aee-b20bd00f2156", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af77f70-db4c-4230-b811-f509a114f5b5", "sighting_of_ref": "indicator--88d27356-3813-49b2-bf57-1b16a6e3989a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517daab5-949b-4ecd-85c7-9c9fc08dd7e9", "sighting_of_ref": "indicator--88d27356-3813-49b2-bf57-1b16a6e3989a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48249875-bc3a-4008-b335-e07bc8402940", "sighting_of_ref": "indicator--80ccc7a0-dd5f-4d1a-ac10-c4a4f628a756", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a7d8fc-3459-4bb4-be5c-61114db25715", "sighting_of_ref": "indicator--e7575fc6-63df-45cc-83d1-509bb2fe816e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628e150e-aa41-49bf-9534-39caf343690e", "sighting_of_ref": "indicator--312009aa-2bb2-4212-87d9-1a2bfb6878e9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c869168e-9204-4f6e-8a49-813dc982b630", "sighting_of_ref": "indicator--7e9fecc3-b3ac-4289-84b3-49146e3f52d1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df90f63e-0179-4dcd-94ad-cfe047fcf675", "sighting_of_ref": "indicator--848c4a07-d5b1-4c29-bfe8-7690613ef3ff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc6784e-5cc8-41ea-91f6-75444ac9bd91", "sighting_of_ref": "indicator--001991e1-6fba-4a5a-af6e-d73a21dc6e02", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2362a7e-1765-43ed-8f29-d1c12f982669", "sighting_of_ref": "indicator--3e34420b-dfc7-47ca-8c96-f69936f758f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8b3c46-78fb-488b-958f-1ca0cb9899a3", "sighting_of_ref": "indicator--84ad448e-f104-4d22-9b3c-ae5db90b4faf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08a95af-d1c6-4707-8455-15eb794e2f8c", "sighting_of_ref": "indicator--3cf35a13-32d8-452a-aa02-26d51562e90f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e00c7d-8e57-49cf-aee4-911e69c564cb", "sighting_of_ref": "indicator--3cf35a13-32d8-452a-aa02-26d51562e90f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6492856-4b3d-4cc5-8fde-65f225bf86fc", "sighting_of_ref": "indicator--24185779-a8cf-47c7-a81d-255a063c09c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1ea551-2cd0-4932-98f2-e1d060cda71e", "sighting_of_ref": "indicator--55493676-43dc-4df8-9a79-817fe349ac05", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad70278-8303-42e2-8319-119adf0f04a1", "sighting_of_ref": "indicator--7e1abf40-7ea6-4fd3-a5eb-68b1c8ed0159", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ad7912-0b74-4c8e-a276-8ca02d4e9b89", "sighting_of_ref": "indicator--c59f0632-3430-473b-9370-affc02c08f26", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87279118-5366-45c1-8376-9ce1bb8100ba", "sighting_of_ref": "indicator--97bf426b-71e1-4577-ab08-c43612a48ffd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613ce7c4-fb69-4cc6-b50e-38913925f2da", "sighting_of_ref": "indicator--20cb1016-4805-4182-a36c-ec80071938b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901c8d62-d1c4-4576-9656-401fa0f87820", "sighting_of_ref": "indicator--522c0f00-3e86-4a38-8d64-ce9254bda75c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95398078-dafb-4a04-9bc2-37443112b6bd", "sighting_of_ref": "indicator--6504c15f-b612-4edc-ac5c-f34818aebbd2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7369bcb-b4e3-4204-9ad2-b5c5b2046d74", "sighting_of_ref": "indicator--2d7a7a27-7f34-494b-b56e-aaab2a543e05", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8dcf45-5e14-4926-a178-dff48d1dfb44", "sighting_of_ref": "indicator--2e19b9ff-429c-4dbb-9f75-1dc28f8a38cc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ded96c-06db-44c1-bd14-173c011b2c62", "sighting_of_ref": "indicator--2e19b9ff-429c-4dbb-9f75-1dc28f8a38cc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2459b528-5b4a-4f69-8ae3-478dc769947f", "sighting_of_ref": "indicator--3aca70be-5901-4713-9afe-9928ff6239e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4563168-be35-49c7-95c4-a87a9f738205", "sighting_of_ref": "indicator--9c5963b6-1dfb-4bef-b252-a37da4a2d84c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7d4204-0fbe-4a4c-9f79-454c1df39fb2", "sighting_of_ref": "indicator--292076ad-5b58-47aa-85fe-d1e038f30a91", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fa23ab-db1d-43d9-9203-4138d29ea9bc", "sighting_of_ref": "indicator--0f5e6ee8-62ac-4778-95da-9ea902c6db8f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6b47d4-70a0-4c48-a9af-b3ef00493fbf", "sighting_of_ref": "indicator--917bf2b6-bc45-4add-a889-3af1ff64529c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49a5fa4-96af-4b8e-b320-8f0562ec1588", "sighting_of_ref": "indicator--6c58a387-ff3a-41c8-88ba-8462ff537304", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b509ac96-6d4f-4e1c-830f-8af1076e2d15", "sighting_of_ref": "indicator--27d44628-6f64-4f45-8255-37c17bf90976", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5be83d4-3fe1-4afb-a012-a90108a4b0b3", "sighting_of_ref": "indicator--804dcbaa-e91a-4cb5-a357-a0765554e094", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9fa419-fd2b-41aa-9acc-cffdcc0979d4", "sighting_of_ref": "indicator--29b5cb6b-4557-4ffe-8e2f-dc0326b6c54d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12363b12-4877-4643-b680-74edcef10697", "sighting_of_ref": "indicator--db722c2a-bc09-4446-8311-4ce643ca3d8f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46aa4abf-c90a-476a-b80e-ec4e01885e21", "sighting_of_ref": "indicator--bb20752d-9210-41ee-9694-69ffa334cd04", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e97c53-eee0-4517-a86d-862e23906c13", "sighting_of_ref": "indicator--bb20752d-9210-41ee-9694-69ffa334cd04", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8589f87-8bb0-40ac-b0fe-98c6e6d66422", "sighting_of_ref": "indicator--bb20752d-9210-41ee-9694-69ffa334cd04", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a07829-a098-4858-a101-7e8cb8c24a4e", "sighting_of_ref": "indicator--84f9cdad-b74a-4a49-9753-2ef158a88a7f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b715678-9ede-4a59-9d53-f12ad11eab79", "sighting_of_ref": "indicator--84f9cdad-b74a-4a49-9753-2ef158a88a7f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27040952-8ab8-48e2-8466-3bf2f11b3ab3", "sighting_of_ref": "indicator--84f9cdad-b74a-4a49-9753-2ef158a88a7f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6487205a-2a8d-4134-b872-cfc5cd58dfe9", "sighting_of_ref": "indicator--5d361a39-5cb0-409d-a828-ffe820c48b43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdfb13ef-f2eb-4e0f-bc41-d89df0228859", "sighting_of_ref": "indicator--5d361a39-5cb0-409d-a828-ffe820c48b43", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724c17d5-6a11-4b51-b049-918e8fc00c1d", "sighting_of_ref": "indicator--5d361a39-5cb0-409d-a828-ffe820c48b43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7af8bad-f8de-4097-9c85-ff66950a0f39", "sighting_of_ref": "indicator--1afcdc27-aa75-4b8c-a174-430772f0a069", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d610704d-9422-45f6-b89c-2b8986ab9224", "sighting_of_ref": "indicator--b78da358-91ea-4400-a968-34607290ca8c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443e23fb-086b-4880-8997-6ae4da14881d", "sighting_of_ref": "indicator--9f40488b-3024-4667-b9a3-15a0b5dee186", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b3e083-034d-4d24-a58c-62dbef0574c4", "sighting_of_ref": "indicator--9f40488b-3024-4667-b9a3-15a0b5dee186", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6335c875-32e2-4e3e-b2e9-f2c142cd4e51", "sighting_of_ref": "indicator--9f40488b-3024-4667-b9a3-15a0b5dee186", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b22eaad-0cf0-4f0b-8e23-c64f2dd7ce70", "sighting_of_ref": "indicator--43c61778-daac-4a28-9d0e-9112037eea6a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a38c7eb-c8b1-49ba-8370-ddbb4ff4192a", "sighting_of_ref": "indicator--d9ea134a-0ff5-4286-8319-3dd1d69ac339", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3015b8bc-4509-4625-a721-51688ad459ed", "sighting_of_ref": "indicator--d9ea134a-0ff5-4286-8319-3dd1d69ac339", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abf3dd2-f176-456b-8e84-0e0626e8a129", "sighting_of_ref": "indicator--ff4e6c69-bd52-4374-b784-c22e296853ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beacb997-c6b9-4f01-8658-2a385bba5b6c", "sighting_of_ref": "indicator--ff4e6c69-bd52-4374-b784-c22e296853ac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92e7281-4b67-4ac2-9e83-e4461c523752", "sighting_of_ref": "indicator--9d3e012f-34b5-48bb-aa57-8d545bd9c7f1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c98f1e8-ce28-4d3c-a9c0-d780e35dd1d4", "sighting_of_ref": "indicator--7bcb06ba-15b8-4fde-8830-7e48077cef9d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc6b10e-45d8-40ec-8299-14c1da65d414", "sighting_of_ref": "indicator--7bcb06ba-15b8-4fde-8830-7e48077cef9d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cea9f89-8738-4fab-a641-75c0c200c0ae", "sighting_of_ref": "indicator--7bcb06ba-15b8-4fde-8830-7e48077cef9d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afbaa57-e95b-4ecf-9f85-791c16cb8435", "sighting_of_ref": "indicator--d02f95db-8b05-404a-92a6-99c44823439c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d243dc3c-3a63-4dba-9aaf-72fbcc6b3eb6", "sighting_of_ref": "indicator--dec44098-1d76-4cf2-aad0-950885bcf4f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee9faf4-c8af-4a60-a68c-81fc262795d5", "sighting_of_ref": "indicator--dec44098-1d76-4cf2-aad0-950885bcf4f3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d3e7a3-4272-47c1-ad7d-36792baf152a", "sighting_of_ref": "indicator--51b4c330-c954-420b-b32b-6f8496c2e5e0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8eb92f8-4f42-46f4-8e1d-789f645b3e33", "sighting_of_ref": "indicator--51b4c330-c954-420b-b32b-6f8496c2e5e0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e0acf30-3177-4609-9cab-69c58b6a1a06", "sighting_of_ref": "indicator--e7dc9829-ed92-48aa-819e-fa5a90c4eaad", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1211bc0-4bf8-4c88-b6ee-5dcef375729d", "sighting_of_ref": "indicator--a2ac17e8-f5c7-4c07-8fe4-a4902a560a99", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80202fd-c2bf-4b2a-9066-eafc9ee1e2ee", "sighting_of_ref": "indicator--a2ac17e8-f5c7-4c07-8fe4-a4902a560a99", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c99cb5-80af-4c0c-8ab6-87ced5b8111e", "sighting_of_ref": "indicator--b4e7115a-02c5-4c6b-a869-c996d4ca662e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c134d3-9aa0-4196-b8af-1a10ae858559", "sighting_of_ref": "indicator--b4e7115a-02c5-4c6b-a869-c996d4ca662e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a4d832-74c6-47da-be11-fcd47f027e63", "sighting_of_ref": "indicator--1b35ecec-1242-43a9-a209-32dcf228a956", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e1c705-08cd-4d6b-9954-596da090efc1", "sighting_of_ref": "indicator--1b35ecec-1242-43a9-a209-32dcf228a956", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ff655d-a42f-4b00-879d-502840bb2462", "sighting_of_ref": "indicator--1b35ecec-1242-43a9-a209-32dcf228a956", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116b2544-72f6-4882-a47c-5fb1690ae99b", "sighting_of_ref": "indicator--90d98c6b-4fc1-4586-bfc6-35535b83f45e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f663d585-bd06-435c-9a2e-3449238b2b5e", "sighting_of_ref": "indicator--90d98c6b-4fc1-4586-bfc6-35535b83f45e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44f16d3-4c56-47db-b147-70cbfcbd7edb", "sighting_of_ref": "indicator--83fc67cc-420d-4cf7-88c7-a1ac171e4290", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90393b5d-b06a-480a-b203-d7ae5f2aab28", "sighting_of_ref": "indicator--83fc67cc-420d-4cf7-88c7-a1ac171e4290", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81b63fb-6ee8-4401-9b70-a55d171f1f3e", "sighting_of_ref": "indicator--83fc67cc-420d-4cf7-88c7-a1ac171e4290", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848cf3fb-0f79-4370-a580-f37b4f8f6858", "sighting_of_ref": "indicator--c37e2e4e-a8fd-42a7-80e6-af6a48104b2f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dc948b-57f0-4d3c-875f-04e7ffd57221", "sighting_of_ref": "indicator--c37e2e4e-a8fd-42a7-80e6-af6a48104b2f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca9670d-1c52-4284-bd40-df18fd006920", "sighting_of_ref": "indicator--c37e2e4e-a8fd-42a7-80e6-af6a48104b2f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf6ccb2-d24c-414c-a184-fb34c9e2a1c1", "sighting_of_ref": "indicator--9fb03934-1c92-4e3f-b6b5-2f6ac374d71a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f40ee1d-33eb-413c-8191-bd4c0c49a032", "sighting_of_ref": "indicator--9fb03934-1c92-4e3f-b6b5-2f6ac374d71a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48c9339-0812-4edd-85fa-13df8eb3cb2a", "sighting_of_ref": "indicator--9e46bc33-cc7e-4a62-ab54-beae7b7d8799", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9871b0-bc74-42e7-99cb-8bf12d27cfbf", "sighting_of_ref": "indicator--9e46bc33-cc7e-4a62-ab54-beae7b7d8799", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f23f17-2ff0-42ab-b479-5d75a09f82b9", "sighting_of_ref": "indicator--3e748377-25ab-4fd8-bb98-f40d71e61a74", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d95777-709d-4742-92c3-d0c4a23ba64a", "sighting_of_ref": "indicator--3e748377-25ab-4fd8-bb98-f40d71e61a74", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4be65c-7fc6-48a5-bd12-e2ae58b08ebb", "sighting_of_ref": "indicator--3e748377-25ab-4fd8-bb98-f40d71e61a74", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602f3d84-7551-4f6f-9fb0-0fdf1cbd7a0c", "sighting_of_ref": "indicator--3eb11472-b253-45ac-95e5-3dd6277a9462", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58dbd05-134a-427f-86fd-98f988a1fc80", "sighting_of_ref": "indicator--3eb11472-b253-45ac-95e5-3dd6277a9462", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0064170c-72e1-4c64-a706-d51adf23d7eb", "sighting_of_ref": "indicator--272e9695-cd2f-4f82-bf0b-eb69abc14913", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd5033c-0d2c-46fd-91b9-6bc2b484218b", "sighting_of_ref": "indicator--272e9695-cd2f-4f82-bf0b-eb69abc14913", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe085a4-d447-4892-9128-eef9ed27a7e4", "sighting_of_ref": "indicator--25ba7447-464a-4e2b-984f-f62ea83c4ba4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2c4cc6-7a97-4d54-a64c-dd57fab204e5", "sighting_of_ref": "indicator--839ca857-1b83-4692-b593-5c8f329071aa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79aa22dc-3148-42b9-b2db-a6fb5ea9a22b", "sighting_of_ref": "indicator--839ca857-1b83-4692-b593-5c8f329071aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067f9461-32cc-4735-8d1a-956d09110cf4", "sighting_of_ref": "indicator--09f62192-f985-465d-b7c1-9864c367258c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03efe0b-c649-432a-97f4-36ccc95d300e", "sighting_of_ref": "indicator--09f62192-f985-465d-b7c1-9864c367258c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768ae781-7082-466a-9186-5808edcedaba", "sighting_of_ref": "indicator--99ac56a0-962a-47b2-8c13-11957fcc44c3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d679fb-8299-469b-bdf8-25753b79099c", "sighting_of_ref": "indicator--99ac56a0-962a-47b2-8c13-11957fcc44c3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3640466-f6ca-49d1-9b42-ee9bc8ffac10", "sighting_of_ref": "indicator--99ac56a0-962a-47b2-8c13-11957fcc44c3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9788e56-e6d3-4f60-bfae-ca3b3a72a89d", "sighting_of_ref": "indicator--5b6246d6-65f7-44f0-a5c5-0adf02915b43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e48bd35-2baa-43a9-b092-29700ff85f4f", "sighting_of_ref": "indicator--5b6246d6-65f7-44f0-a5c5-0adf02915b43", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad842580-1c60-4de3-bf84-c820c96a1ca9", "sighting_of_ref": "indicator--5b6246d6-65f7-44f0-a5c5-0adf02915b43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcff01be-2fd6-4822-b906-809e3b74799e", "sighting_of_ref": "indicator--24591b68-eecf-446f-87e7-ac5511a017f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4875467-6a97-4974-8c6f-d57dab7aaf64", "sighting_of_ref": "indicator--24591b68-eecf-446f-87e7-ac5511a017f4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc90d075-258e-4678-8c78-b84cca1d2168", "sighting_of_ref": "indicator--24591b68-eecf-446f-87e7-ac5511a017f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb7b060-10b5-466e-b3ca-2f15e60c861f", "sighting_of_ref": "indicator--76094446-aea4-4c2a-85ce-9b40b382ee0f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6ceb2e-8847-41af-bd5c-2b81dfb95889", "sighting_of_ref": "indicator--76094446-aea4-4c2a-85ce-9b40b382ee0f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1104e0d7-4657-4c31-b2e1-6a503a489d4a", "sighting_of_ref": "indicator--76094446-aea4-4c2a-85ce-9b40b382ee0f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c1a7a0-6f2c-463d-97d2-73edde26755c", "sighting_of_ref": "indicator--acc43a7c-c439-4649-aa51-e5fa3bcf39d7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4100253f-e269-41ee-9d05-76e1f09177cd", "sighting_of_ref": "indicator--acc43a7c-c439-4649-aa51-e5fa3bcf39d7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a3a082-f040-4335-b534-37b7dca6f900", "sighting_of_ref": "indicator--86fd8b47-c772-441f-8d54-5427e52c0ac6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a8bde5-9737-4aaf-a012-2a65f13e9edf", "sighting_of_ref": "indicator--1449529c-e2e1-4c89-bb6a-021dc20aad3b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015e8be0-9b2d-4758-a1a7-47cb0511bf62", "sighting_of_ref": "indicator--408d2d9e-c94e-4173-903c-b5e5a5cc8378", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4be984a-fb33-4bf4-842f-570b2f25e961", "sighting_of_ref": "indicator--cf6fd92d-67f6-4c4a-93c9-9ae0ffb12aea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5369dcd-1e95-402f-ae38-3b49f8fca52b", "sighting_of_ref": "indicator--b97d7f0d-af94-4055-9e7b-6869f1c7553f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5379dabb-aee5-482f-9baa-31f6fd2d651d", "sighting_of_ref": "indicator--b97d7f0d-af94-4055-9e7b-6869f1c7553f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b78759-a588-4e10-837a-54a64dad83d2", "sighting_of_ref": "indicator--400481c7-c78e-4d06-b48a-cc1eac325d0a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30005137-2f4d-4a9d-98f6-d61d32129621", "sighting_of_ref": "indicator--400481c7-c78e-4d06-b48a-cc1eac325d0a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e5a97e-45b8-401b-b8b8-eaf072eeb1d9", "sighting_of_ref": "indicator--4dbe1f35-357d-4497-a145-c05433ca4564", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff49910e-8464-4a26-a321-0b62d651f769", "sighting_of_ref": "indicator--e6ce8cbe-9b5f-486e-9a63-6f96260c32b6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73a0ab5-1746-4c95-baa7-db951943b5fa", "sighting_of_ref": "indicator--04099053-d224-4e82-ae6d-cce1481bc009", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6bba63-0824-42d6-8f57-1f761941a80e", "sighting_of_ref": "indicator--8a9cf5c0-b76c-4563-8a16-fea10da85425", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea865a8-3614-448f-b92d-72f6a3ed812a", "sighting_of_ref": "indicator--8a9cf5c0-b76c-4563-8a16-fea10da85425", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0264d0d-df20-4618-b676-88b5946b4ae4", "sighting_of_ref": "indicator--0b4c48a8-8c95-4dc2-9681-e4653cf897f4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d01df4a-83e9-4acb-be02-abdbf84a46c9", "sighting_of_ref": "indicator--9676b9a2-bc68-4603-a351-1d71db4c3dc7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae5d85e-1619-48fb-adb3-9adb3ed5187c", "sighting_of_ref": "indicator--3e0911e9-8132-4f78-b87e-a02b61b2f691", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17f2c4a-6c47-41bf-a273-8cd9673ba4fb", "sighting_of_ref": "indicator--3e0911e9-8132-4f78-b87e-a02b61b2f691", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05851764-b543-4568-bcf2-db5e5a30803c", "sighting_of_ref": "indicator--97e1c901-9eeb-4726-a01f-378c740ca0e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101e125e-1b07-4e2e-a380-0f18cc4991f2", "sighting_of_ref": "indicator--d7ca70b9-7984-489c-a3d6-1121f36f300f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb675d7a-8208-4a4e-b0c5-4da76df6eb9f", "sighting_of_ref": "indicator--d7ca70b9-7984-489c-a3d6-1121f36f300f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53271d5a-86c3-4dd9-813d-6eeda79dc981", "sighting_of_ref": "indicator--d7ca70b9-7984-489c-a3d6-1121f36f300f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4752a5-a58d-4cca-b574-e3604e58c2da", "sighting_of_ref": "indicator--d6f12f2f-5f1f-4c91-9313-f38e0d1b6b9d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfd5a8a-0d6b-4e2f-89b6-1631999e1a3e", "sighting_of_ref": "indicator--d6f12f2f-5f1f-4c91-9313-f38e0d1b6b9d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93005b5-eeea-46e5-9863-bc92803a0d14", "sighting_of_ref": "indicator--d6f12f2f-5f1f-4c91-9313-f38e0d1b6b9d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23cde69-c7a0-40f7-8fde-e0b971e0ee6f", "sighting_of_ref": "indicator--940e7ea3-a69b-43d3-a841-516881497825", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8443ca-ed1c-4e2a-a9fb-e9de9b7f0503", "sighting_of_ref": "indicator--940e7ea3-a69b-43d3-a841-516881497825", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369b269e-f47a-44d5-b60d-9e80a3af3dcf", "sighting_of_ref": "indicator--940e7ea3-a69b-43d3-a841-516881497825", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87181da5-17db-41a7-a6d3-2c2f9db477af", "sighting_of_ref": "indicator--fcd658d8-3119-4842-b63b-31d6e27c7440", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab7de4a-e998-4386-bb9d-c8e08eb33e3e", "sighting_of_ref": "indicator--05efb68f-eb36-41f2-87f7-220f0dca56b2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4035b9c-9347-4790-9138-f2d5cc98fdb7", "sighting_of_ref": "indicator--05efb68f-eb36-41f2-87f7-220f0dca56b2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a281bded-0737-4ed6-872b-6d3696b513ae", "sighting_of_ref": "indicator--049881bb-4ccd-4c68-98a1-2f5847925259", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baeebf43-798e-47a6-9313-7d39bb1882b4", "sighting_of_ref": "indicator--049881bb-4ccd-4c68-98a1-2f5847925259", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cd6134-f621-4986-88fe-debbae728953", "sighting_of_ref": "indicator--049881bb-4ccd-4c68-98a1-2f5847925259", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918e27c4-985f-49d3-bb2f-9213223b1aa1", "sighting_of_ref": "indicator--fe5b40fd-2c8d-4d56-8a80-ab61ef2783bc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7b92c6-28b4-492c-a989-ad57ca1a27d2", "sighting_of_ref": "indicator--dc630fbf-7707-4c79-8266-c716aa8e66d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5a8919-9313-4e61-9652-d0beec6534a1", "sighting_of_ref": "indicator--7ad3094b-5994-4478-a470-409ddff72dbf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ead9ce-c515-49bf-9d93-7cd83689f2bc", "sighting_of_ref": "indicator--7ad3094b-5994-4478-a470-409ddff72dbf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d636c9-f8ce-436d-a446-2b1fcb99eaaa", "sighting_of_ref": "indicator--7ad3094b-5994-4478-a470-409ddff72dbf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d628da9-c846-4b99-a88e-daa74f3e9bcf", "sighting_of_ref": "indicator--a797de00-3873-47eb-84be-c28be39b9028", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9731fad7-6b72-4bf4-a4d1-e549e811cf7b", "sighting_of_ref": "indicator--97aa0b61-0a2b-41d8-a2f3-5c2fda1f5594", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a06e8c9-1ecc-4e47-9f2e-922435104f7f", "sighting_of_ref": "indicator--97aa0b61-0a2b-41d8-a2f3-5c2fda1f5594", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44316c5-2322-48dc-bb67-67d098eec9c6", "sighting_of_ref": "indicator--6b0ba3e1-87c9-4e68-863e-ca8a5f1f39b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b5d7da-6777-4a8e-accd-052e98b52977", "sighting_of_ref": "indicator--6b0ba3e1-87c9-4e68-863e-ca8a5f1f39b1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf460e8c-a397-41d9-8a4c-fab11faa9acf", "sighting_of_ref": "indicator--7eb20154-b6b1-4e56-8dad-4316fac46292", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcead10-ae1f-4f85-b661-0ae27009e4a5", "sighting_of_ref": "indicator--7eb20154-b6b1-4e56-8dad-4316fac46292", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b81f0c2-5a07-444e-85aa-74226814296f", "sighting_of_ref": "indicator--da71cc46-4f72-4452-a440-85a51fd3593d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a3ca96-7e97-4101-be2d-987caf3c672c", "sighting_of_ref": "indicator--80a8aaa3-a565-485e-b7f1-4409ff495693", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354c52c1-cc5e-473a-b40a-fd13f5f0c38f", "sighting_of_ref": "indicator--ed3bad98-fc04-40bf-aca9-eac5ac43dffa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728944ec-97d5-42c3-8a32-5cacdb407a38", "sighting_of_ref": "indicator--ed3bad98-fc04-40bf-aca9-eac5ac43dffa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f4e2b0-a57e-4d20-86ae-f4971f325dd6", "sighting_of_ref": "indicator--d732d5bd-69a7-4b27-97ac-29cb957967be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf46c51-f389-49b8-8a08-a3bbc86da7da", "sighting_of_ref": "indicator--9b40ba23-80ee-4a15-ab47-7aba9f56a6f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7887911-1fe3-4dc3-a690-729a052ca74c", "sighting_of_ref": "indicator--9b40ba23-80ee-4a15-ab47-7aba9f56a6f2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64437ef-e392-4e66-b3bd-fc5867077d79", "sighting_of_ref": "indicator--b4f70be1-3d2b-4464-a453-809525ca4ac5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578f07b3-92ec-4552-ac7f-ca1b6c89a463", "sighting_of_ref": "indicator--b4f70be1-3d2b-4464-a453-809525ca4ac5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cbb655-e61e-4baa-a804-23a7ceac6b9a", "sighting_of_ref": "indicator--b4f70be1-3d2b-4464-a453-809525ca4ac5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0f1fcc-23a2-4091-a9d6-83d467f17a75", "sighting_of_ref": "indicator--54dc224b-9b26-48ef-8c8c-3dd0dc8fa997", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd893e2-59ff-4882-9ef0-a0d4bba13954", "sighting_of_ref": "indicator--dc4f11f5-31a1-4965-a172-e16ebe82eb0b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a8fbaa-5563-4227-afda-7bceb113ec2e", "sighting_of_ref": "indicator--c8c765ac-d440-4cb3-a2a9-0b702647952b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a57e58-0e9b-4e0d-b6a1-5da503db4fa7", "sighting_of_ref": "indicator--c8c765ac-d440-4cb3-a2a9-0b702647952b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd6083b-2e0f-40f5-a0f7-aa0848864858", "sighting_of_ref": "indicator--4a462849-7614-4cc0-a990-3ecfbf2e50fc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d065ffd-dfa9-4857-80d2-99a86358df89", "sighting_of_ref": "indicator--306c0fc3-1135-46bc-a73f-f984863ea1f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238286e6-fdcd-4659-ae8d-65dfe45625cb", "sighting_of_ref": "indicator--306c0fc3-1135-46bc-a73f-f984863ea1f3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451d3970-8532-47d8-b884-1bc7d6c6a15c", "sighting_of_ref": "indicator--97826d84-f1ca-4b61-bdbf-4304eda4747a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26475849-6ba2-4b6f-823d-50a5bed9e41e", "sighting_of_ref": "indicator--97826d84-f1ca-4b61-bdbf-4304eda4747a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74f3c11-a85c-43f8-ac73-aa66d767a0a4", "sighting_of_ref": "indicator--c86b61f2-8989-4e9c-9305-8c692fae7ca6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995e27af-91f2-4db8-89a9-e1eb57e48c2e", "sighting_of_ref": "indicator--00db7fce-e261-4e28-8aa5-6635f9df7686", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971af789-3c32-47b4-9e14-1ba2512acc15", "sighting_of_ref": "indicator--00db7fce-e261-4e28-8aa5-6635f9df7686", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af089cd1-0eb1-4b5d-8773-14a3851e950a", "sighting_of_ref": "indicator--00db7fce-e261-4e28-8aa5-6635f9df7686", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23a412d-3fe2-4af6-a321-fd7c7ba247f0", "sighting_of_ref": "indicator--5066969b-bd7c-46df-b532-83300f38057d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6935f41f-f747-4414-a370-7adfcaa21777", "sighting_of_ref": "indicator--a7144319-1e6c-4571-9311-c82ec29d5534", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada81286-9689-425b-8866-c3a764ec94e5", "sighting_of_ref": "indicator--3cedc013-b4c0-493f-bf5a-35626acf4622", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009b4957-0c51-44dd-9a89-b638dbf4b221", "sighting_of_ref": "indicator--3cedc013-b4c0-493f-bf5a-35626acf4622", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0826491-a00d-4cc7-a4b2-7fa62dd48323", "sighting_of_ref": "indicator--e5513a4f-9860-420a-931a-d43bf7355280", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d34d22-6040-44c4-b314-554f1c842554", "sighting_of_ref": "indicator--e5513a4f-9860-420a-931a-d43bf7355280", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f3c7b6-55ad-40a4-8473-7be41461622d", "sighting_of_ref": "indicator--bf12fbe0-bcbf-4e58-bb01-c324f23bfcad", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca131217-ca29-4de0-9d05-7606e9cc0c95", "sighting_of_ref": "indicator--bfc589ea-3bb6-4ed9-b8f3-b80c49c5855d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fcee51a-fd82-472f-9bb7-df858c95c391", "sighting_of_ref": "indicator--bfc589ea-3bb6-4ed9-b8f3-b80c49c5855d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652cf9a0-e097-4701-98eb-9e13a29fd943", "sighting_of_ref": "indicator--bfc589ea-3bb6-4ed9-b8f3-b80c49c5855d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a18b6a-0501-4806-badc-8d08237e70ff", "sighting_of_ref": "indicator--c0b87272-eb57-4871-b791-81edbe122fa8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d2e535-12cb-490b-9228-d2c8b05b6c54", "sighting_of_ref": "indicator--3e0f64d9-0776-494d-b297-2d7069ad02ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dccedc4-bb17-4e1c-bec5-c4e82c7bf99a", "sighting_of_ref": "indicator--ae80253d-210a-4b79-b06f-7ae0155b5b37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb50acb8-08af-41fd-b4f7-fc93b7bc0669", "sighting_of_ref": "indicator--ae80253d-210a-4b79-b06f-7ae0155b5b37", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a213e094-50b3-4ff0-a8ab-7e4b0a4e52dd", "sighting_of_ref": "indicator--9b3b95e9-12d1-4e07-8867-770e0f4c5967", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311ee58c-2168-4e30-9423-244e0a2e3681", "sighting_of_ref": "indicator--9b3b95e9-12d1-4e07-8867-770e0f4c5967", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84d7d74-6366-47a5-8528-f17d8b5b0081", "sighting_of_ref": "indicator--9b3b95e9-12d1-4e07-8867-770e0f4c5967", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309cca32-d563-496e-942c-dd9251a92d30", "sighting_of_ref": "indicator--d26e63e3-7e85-4249-aa03-f36b004a775a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa90d54d-0aef-476f-ba58-a353be3d7ab1", "sighting_of_ref": "indicator--d26e63e3-7e85-4249-aa03-f36b004a775a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6941ff-1fe1-4c96-b93b-ce61565b076d", "sighting_of_ref": "indicator--d26e63e3-7e85-4249-aa03-f36b004a775a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf633e2-18da-41dd-a478-54518b32f9b0", "sighting_of_ref": "indicator--b139a72a-cbc2-4d90-9541-84a242abc4a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ce0598-b3e2-473c-be06-02f21b3c9b2f", "sighting_of_ref": "indicator--b139a72a-cbc2-4d90-9541-84a242abc4a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ae31b6-5e39-45d7-9e0d-795a130740d5", "sighting_of_ref": "indicator--b139a72a-cbc2-4d90-9541-84a242abc4a5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f047f441-db69-4064-a914-12bf961d170b", "sighting_of_ref": "indicator--7ccdd18d-444d-4e9e-9536-200fdc266a34", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a388709e-335e-4d9e-a0b1-72ae16afb931", "sighting_of_ref": "indicator--7ccdd18d-444d-4e9e-9536-200fdc266a34", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4cd4ac-ade3-4a01-93c1-56446ad64e89", "sighting_of_ref": "indicator--7ccdd18d-444d-4e9e-9536-200fdc266a34", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f73db0-9744-4479-9a75-b6ef8d9e7df5", "sighting_of_ref": "indicator--7696a76a-4887-4a7a-9062-0178e26f6381", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755070aa-6a40-41af-a927-f7984966515e", "sighting_of_ref": "indicator--794cd62a-de52-47e8-a8d9-be8b8b0e9f91", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715ecdfb-140e-459c-a4ca-dcd9a66b5d96", "sighting_of_ref": "indicator--794cd62a-de52-47e8-a8d9-be8b8b0e9f91", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da768527-c6f6-4afb-bc56-d8ac54757a53", "sighting_of_ref": "indicator--794cd62a-de52-47e8-a8d9-be8b8b0e9f91", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fa92ee-88f4-4ab9-99d2-f30a06a7a7bb", "sighting_of_ref": "indicator--f64bb949-3048-4ce7-ba9f-5dc93de948c7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7d1708-3bc2-42d2-b708-40b8052c4b03", "sighting_of_ref": "indicator--03706380-da23-4c4b-882d-4d6f7185fc00", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d86fbb-070b-446e-b25a-c75df254a825", "sighting_of_ref": "indicator--03706380-da23-4c4b-882d-4d6f7185fc00", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d88896-bdeb-42ad-9626-8ad61963a49c", "sighting_of_ref": "indicator--03706380-da23-4c4b-882d-4d6f7185fc00", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90a36ee-d2d0-458b-9444-5f52812fb6ce", "sighting_of_ref": "indicator--4da4a4c5-ad02-4c42-8444-cdc5ff356c07", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98cf8b0c-ac9e-406e-b3e7-209d2978f366", "sighting_of_ref": "indicator--4da4a4c5-ad02-4c42-8444-cdc5ff356c07", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8595e2-1ac7-4795-bfc8-2cd8b2540743", "sighting_of_ref": "indicator--4da4a4c5-ad02-4c42-8444-cdc5ff356c07", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d012a3-eea6-4993-92e2-c6432852c4d4", "sighting_of_ref": "indicator--6bae9fec-8990-4abe-8273-038abe8776e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f43aac-7aa5-4fa7-92cd-f184bc0c382f", "sighting_of_ref": "indicator--6bae9fec-8990-4abe-8273-038abe8776e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad133d6-e60f-4691-b8a9-cb8708053722", "sighting_of_ref": "indicator--6bae9fec-8990-4abe-8273-038abe8776e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a91987a-8fb3-47c5-aaf7-6cb54b70175f", "sighting_of_ref": "indicator--aa17aece-5e51-4b53-8a21-f43e2349cd6c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172c619b-6317-47a0-97b8-3cb10a5fd0b6", "sighting_of_ref": "indicator--2170be56-ae89-4155-acae-39e31c535cb0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c8bdcb-2c7f-4ca5-8796-8666dd8e6d58", "sighting_of_ref": "indicator--2170be56-ae89-4155-acae-39e31c535cb0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15df8f2c-48e4-44a6-8eb7-0f9c236137db", "sighting_of_ref": "indicator--8b04e4af-0cba-4e89-ae73-735d3cc0a995", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0535887d-7d8f-4fdd-bf1d-9e650fe06c9b", "sighting_of_ref": "indicator--8b04e4af-0cba-4e89-ae73-735d3cc0a995", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a4cfbd-3dc7-4c3b-a073-4f5f0b0e42b2", "sighting_of_ref": "indicator--8a5883e1-9acf-4e1f-8675-d540b4be7942", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cf2d10-f995-4aec-ad32-7d47cb824084", "sighting_of_ref": "indicator--8a5883e1-9acf-4e1f-8675-d540b4be7942", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76394b15-8886-4bab-acdb-1b8b555f3595", "sighting_of_ref": "indicator--820a2230-2451-4c20-8242-7f2d19a94835", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc73c32-88a9-49fb-b658-ba473981f77e", "sighting_of_ref": "indicator--820a2230-2451-4c20-8242-7f2d19a94835", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86adab3e-f878-4840-b498-159874f9298b", "sighting_of_ref": "indicator--820a2230-2451-4c20-8242-7f2d19a94835", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d7b627-2418-4403-bbca-0774564f9dd5", "sighting_of_ref": "indicator--da82bb07-2d5d-43ab-88d0-e50d8bed561f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67985245-9bba-4ca5-9e4a-853d3c7654b1", "sighting_of_ref": "indicator--da82bb07-2d5d-43ab-88d0-e50d8bed561f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8772c39-d392-49ab-9328-d3e3cd1b696c", "sighting_of_ref": "indicator--5418db7c-1d5b-4ec1-a286-28e73161f8d1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41e0723-efd5-478c-8a9a-15efab2e2d8e", "sighting_of_ref": "indicator--5418db7c-1d5b-4ec1-a286-28e73161f8d1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bbbe25-64b1-4826-8c53-0e8e790d9742", "sighting_of_ref": "indicator--2b53baa5-9348-48df-a160-6a83c997b10c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a763a124-82b4-44d3-b708-434cb11ee70d", "sighting_of_ref": "indicator--2b53baa5-9348-48df-a160-6a83c997b10c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98847dcb-be8c-4d23-9d23-fce6b7af3336", "sighting_of_ref": "indicator--fb3208c2-5618-4b2d-8857-3aaf2589294f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fffff9-5165-4dab-bb2b-0456393b9a1a", "sighting_of_ref": "indicator--fb3208c2-5618-4b2d-8857-3aaf2589294f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2f53d8-5f6e-47ba-b9eb-2c84d811532b", "sighting_of_ref": "indicator--fb3208c2-5618-4b2d-8857-3aaf2589294f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36292e5-230e-4a03-8fcd-17080010afb7", "sighting_of_ref": "indicator--363730fd-499b-46f1-af4d-3df1f07c42b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759e6424-4082-4343-b206-8f670d40e6db", "sighting_of_ref": "indicator--bec4f257-5936-4abf-8918-4eccc19e8df0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40585aa-0e6f-4a09-bf74-ae656825b643", "sighting_of_ref": "indicator--bec4f257-5936-4abf-8918-4eccc19e8df0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc956c50-f0d0-416b-9ab8-0b13e2bbf52e", "sighting_of_ref": "indicator--964e26f5-968a-48b0-9b52-1c4d278715ef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60b0034-8ffd-43f0-abdc-04b7923ac136", "sighting_of_ref": "indicator--cfd3c863-dded-4101-875b-b5ffabd91fca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3d0299-e502-4fad-b324-abc9ac7bae69", "sighting_of_ref": "indicator--cfd3c863-dded-4101-875b-b5ffabd91fca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca20d4f-0a65-4bef-adc9-750ffae6bc4c", "sighting_of_ref": "indicator--5b80e5e1-c1ec-4adb-9c9a-047447189e5f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9303bc-fd26-42cd-937e-14b6cafeeba2", "sighting_of_ref": "indicator--5b80e5e1-c1ec-4adb-9c9a-047447189e5f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc02af11-d826-46f9-901d-d5c84ae75eef", "sighting_of_ref": "indicator--8dc44154-3caa-41aa-a016-3d26ca24b370", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7be04f5-1bc2-4844-98e6-6e6ffd3dc2a6", "sighting_of_ref": "indicator--8dc44154-3caa-41aa-a016-3d26ca24b370", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9392d84f-5c80-4b3d-9297-473fa8128eee", "sighting_of_ref": "indicator--a1267ef6-6700-47ae-9a66-2f3770d32157", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3e7957-278d-453b-acdb-65c07dd14d41", "sighting_of_ref": "indicator--a1267ef6-6700-47ae-9a66-2f3770d32157", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b798da0-2820-47b9-86b9-c478c2e4182e", "sighting_of_ref": "indicator--fe50a16f-8275-4439-98a8-d702ea963b60", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639607e0-3b97-436b-a773-d28a18971df4", "sighting_of_ref": "indicator--fe50a16f-8275-4439-98a8-d702ea963b60", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb4411e-d302-4fb8-9644-145c79ac8e25", "sighting_of_ref": "indicator--fe50a16f-8275-4439-98a8-d702ea963b60", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d6402b-b928-4aee-a653-10a956be29a7", "sighting_of_ref": "indicator--4e60cb86-c77f-4945-829a-ef348d39b72a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc89ead2-3294-4bd4-a36f-1153c0082c0c", "sighting_of_ref": "indicator--e7618e32-8979-4751-90d3-0c739de94b25", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5df252-7d12-43df-8e41-19b3168f80eb", "sighting_of_ref": "indicator--e7618e32-8979-4751-90d3-0c739de94b25", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431e37af-a2f0-416e-90a6-dd6e1900d45d", "sighting_of_ref": "indicator--e7618e32-8979-4751-90d3-0c739de94b25", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6aabde2-bcbe-4671-a869-8c02e8a70d35", "sighting_of_ref": "indicator--714f9b17-3969-4746-b1f8-1ed58e94ee6e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7613a28f-2f75-40fa-96f8-3a66db0d2214", "sighting_of_ref": "indicator--36b41cb0-0518-4907-838d-c6eeeb7d86ec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb5107f-2318-4884-ab7d-b509d0665447", "sighting_of_ref": "indicator--36b41cb0-0518-4907-838d-c6eeeb7d86ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74ca867-b1ca-4d3a-97f5-5a14e7417710", "sighting_of_ref": "indicator--d221bc42-04d4-4b51-8c03-527ba1a24869", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6fd14b-5065-4267-af78-930b1a79e73c", "sighting_of_ref": "indicator--d221bc42-04d4-4b51-8c03-527ba1a24869", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad7fcfd-ce75-42c8-85c8-a02249c0005c", "sighting_of_ref": "indicator--5cab207d-b5d8-428b-a95f-f56f2912dc84", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea6db38-64a9-43cc-ab6f-024fee3b2a06", "sighting_of_ref": "indicator--5cab207d-b5d8-428b-a95f-f56f2912dc84", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cb7f46-5148-4223-8722-fed9cd35862b", "sighting_of_ref": "indicator--fdf00d95-fbc6-4c4c-889c-fdcce61c7c78", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658584e6-4cac-4689-9f66-e650718d6828", "sighting_of_ref": "indicator--fdf00d95-fbc6-4c4c-889c-fdcce61c7c78", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f28836e-eafc-47bb-8d14-af61fd3ae820", "sighting_of_ref": "indicator--f3e06b41-5e5c-497d-aac5-76b05edf7537", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5e65a8-cf2b-49ab-acbb-f64a92d2e87f", "sighting_of_ref": "indicator--865bbdee-f048-42fd-84cd-81d0a6551a04", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930f81c2-2c59-41d0-b0c2-504f0977ec36", "sighting_of_ref": "indicator--c3b25436-ec1a-4762-9fa4-50ec2bef2e40", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eedaa09-ebab-48bd-bc99-2f2401b4a04a", "sighting_of_ref": "indicator--5053c585-fdc6-4a9b-b1bf-f6e53b3672a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dab2358-5820-4fcd-a980-a8c7bdf2bee7", "sighting_of_ref": "indicator--41987e36-0834-4d9d-a029-0358e05aff37", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d062f719-beef-4386-96fb-cd130e941739", "sighting_of_ref": "indicator--b710698d-32cd-4393-9df3-0c421f262a16", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ef0a74-3f8f-439b-906c-fe1421301bbe", "sighting_of_ref": "indicator--639ec4ae-14b1-46e0-880d-b94431f0e57a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0a77f4-2871-47a9-aa48-f3e9a8eb95f5", "sighting_of_ref": "indicator--0f9f5344-6697-4330-8de1-671d75661f62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7f4ea2-9231-4f76-96b0-fbc8c2a0256f", "sighting_of_ref": "indicator--9bc2dca5-0b92-43b6-a0bf-41fe9fb9dbf1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf955055-ad2e-44b2-8284-fae282121121", "sighting_of_ref": "indicator--9bc2dca5-0b92-43b6-a0bf-41fe9fb9dbf1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef65fd2-2cb0-4d03-a232-9d01698a431a", "sighting_of_ref": "indicator--393e3d6e-2f03-4a47-b110-98a4946f0d1d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbd7861-f047-4099-9873-95a543b71d6b", "sighting_of_ref": "indicator--393e3d6e-2f03-4a47-b110-98a4946f0d1d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76ccc3c-e56c-480a-befb-60453d8e4c59", "sighting_of_ref": "indicator--393e3d6e-2f03-4a47-b110-98a4946f0d1d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d546e4c9-8494-4cd9-a7a9-40ceec3f5e0b", "sighting_of_ref": "indicator--99165af7-af72-4914-8d83-37f9b5f0480d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5b4339-4f00-4937-9c6c-3585407fa255", "sighting_of_ref": "indicator--99165af7-af72-4914-8d83-37f9b5f0480d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d98b39-59f6-48e0-91fb-559a9dfbe005", "sighting_of_ref": "indicator--c9d70f74-a173-431c-a14f-7d0ea9a4e7cb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0bc271-022b-47fe-907a-7cc1b9a566e4", "sighting_of_ref": "indicator--dcafa0be-0dbd-4df3-a331-5b75aea006fb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe7b115-82e6-42df-b600-8cbb34e7004c", "sighting_of_ref": "indicator--d15c6456-b19a-46ed-bdee-fa954ef0bef1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e1146d-ef8d-4d55-9add-5077841ce1fe", "sighting_of_ref": "indicator--d15c6456-b19a-46ed-bdee-fa954ef0bef1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8152e3dd-2514-417f-beeb-c9eb7598393d", "sighting_of_ref": "indicator--d15c6456-b19a-46ed-bdee-fa954ef0bef1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85647ca9-c6dc-452f-a4fb-60e2063ed676", "sighting_of_ref": "indicator--08e0053b-d029-497d-ac6c-b42e8e0d18fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfa071b-f50d-47a1-af61-547ee30aae7a", "sighting_of_ref": "indicator--08e0053b-d029-497d-ac6c-b42e8e0d18fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c2e84e-c128-4ccd-adc8-04008b8084f9", "sighting_of_ref": "indicator--5b227b7d-3e7c-4ca6-a619-9fa8989ee88f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abd0887-7e33-4ff8-81c2-7b660e90a1be", "sighting_of_ref": "indicator--5b227b7d-3e7c-4ca6-a619-9fa8989ee88f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71fea29-7acc-41bb-ac9a-dc6e402af79a", "sighting_of_ref": "indicator--f219abcb-e922-492a-a410-991bcae37967", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c87090-47b8-485d-8e39-f2b62f56622c", "sighting_of_ref": "indicator--bcd7e112-4d29-4ff8-a4da-9af341f921ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b55a2d-48ff-4185-96c2-e147e3da5e1c", "sighting_of_ref": "indicator--bcd7e112-4d29-4ff8-a4da-9af341f921ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51046884-2467-4bbb-a47b-3413aa5eb78b", "sighting_of_ref": "indicator--bcd7e112-4d29-4ff8-a4da-9af341f921ba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0e8605-f01d-42ea-8b99-0d3f8b626dc4", "sighting_of_ref": "indicator--931185f7-d37b-481c-94a9-e44951e7d1a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e67edd-e1ef-4c52-83be-39f3c707dfc1", "sighting_of_ref": "indicator--931185f7-d37b-481c-94a9-e44951e7d1a8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d5197f-b3c0-48cb-8b0e-c2c3d122ab75", "sighting_of_ref": "indicator--931185f7-d37b-481c-94a9-e44951e7d1a8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac1aa7a-f079-4fde-b87d-0825bc54b71b", "sighting_of_ref": "indicator--c0173d6c-4117-4566-8ac9-0172fe099e76", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6592b346-68fb-4b33-b95d-83c1bf2f5eb3", "sighting_of_ref": "indicator--07fb72d7-8c37-493b-a699-d6f636c20789", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa22eab-1568-4c04-9a60-97fef51b8994", "sighting_of_ref": "indicator--07fb72d7-8c37-493b-a699-d6f636c20789", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab73ab2-3685-4e52-99bd-f6a2a4ceaf0e", "sighting_of_ref": "indicator--45be5dc8-ee92-4e31-9958-548ea6c27943", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae0d005-6f91-4286-bfd5-0c8e4f985952", "sighting_of_ref": "indicator--45be5dc8-ee92-4e31-9958-548ea6c27943", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f0e147-02a6-40de-b82a-11f74f4cf00c", "sighting_of_ref": "indicator--45be5dc8-ee92-4e31-9958-548ea6c27943", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc2e72e-207e-4e48-bad8-14718ab0aa46", "sighting_of_ref": "indicator--c3ed19de-d08d-4dd4-a7b7-87a3f8c7c96a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208d22e4-6915-4803-8920-82ca29bc62ab", "sighting_of_ref": "indicator--c3ed19de-d08d-4dd4-a7b7-87a3f8c7c96a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfcbffb-f32b-496d-b22c-1893f7b6b2e8", "sighting_of_ref": "indicator--c3ed19de-d08d-4dd4-a7b7-87a3f8c7c96a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0080ca2-36c8-4e0b-90e4-b5da860a6d46", "sighting_of_ref": "indicator--744836a4-fe15-4d38-8ed4-b7c9ea1c2f44", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c1f268-4f1a-4108-85bd-f6f75ab32c77", "sighting_of_ref": "indicator--fcb5be02-24a6-4d4d-8b9e-df60c09f3906", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac22d36-cf0f-4f69-9e41-b63e3dc23a65", "sighting_of_ref": "indicator--fcb5be02-24a6-4d4d-8b9e-df60c09f3906", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9232035a-6162-4ec9-bed0-29a9a3ad47fd", "sighting_of_ref": "indicator--fcb5be02-24a6-4d4d-8b9e-df60c09f3906", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fae8ec-b860-460c-a682-7cf588838380", "sighting_of_ref": "indicator--3c95682d-f44d-4f4c-9b1f-1795fa3ddd3e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57451cf3-9473-43c7-83de-70f34b0bbd31", "sighting_of_ref": "indicator--e34e02a7-9fd5-45bf-a4ed-77bef6ae541a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f5d662-3086-484b-9bc1-5534615087d4", "sighting_of_ref": "indicator--e34e02a7-9fd5-45bf-a4ed-77bef6ae541a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593dccf1-aa0a-4b89-b40b-8f2f1f10f18e", "sighting_of_ref": "indicator--e34e02a7-9fd5-45bf-a4ed-77bef6ae541a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad57fbf-27ff-41df-a49c-7fa8dabdef60", "sighting_of_ref": "indicator--a34c3866-c2a2-42ea-9a49-b35bcacd28d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829653aa-db48-417e-a810-459cb0bac05a", "sighting_of_ref": "indicator--79cd0371-5e26-49a5-add6-1b562b484cdf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1c06ee-b82e-464f-806a-791c0b6b6b8e", "sighting_of_ref": "indicator--79cd0371-5e26-49a5-add6-1b562b484cdf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f6910f-30af-451a-b873-fc4a07cf3649", "sighting_of_ref": "indicator--79cd0371-5e26-49a5-add6-1b562b484cdf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90447f12-3e2a-46b0-961a-31711f686ee8", "sighting_of_ref": "indicator--2a276d29-7b46-4e84-bdd0-f4b517e5c5b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d9d295-df56-46e9-90cf-3a4b7c3e6437", "sighting_of_ref": "indicator--2a276d29-7b46-4e84-bdd0-f4b517e5c5b1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd2fee5-2cf1-452f-8997-c3232fd3c4dc", "sighting_of_ref": "indicator--f249afbc-859d-407e-9593-75619d42922b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec67905-2a6d-4fee-95df-fd60978707a0", "sighting_of_ref": "indicator--f249afbc-859d-407e-9593-75619d42922b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433ae6d2-4ab9-4b12-88f2-02f9cb32d785", "sighting_of_ref": "indicator--060b7309-a17f-4ac7-a2df-c5fcce489a8c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf0ef60-c6ed-4838-bada-5bff0ea0b540", "sighting_of_ref": "indicator--060b7309-a17f-4ac7-a2df-c5fcce489a8c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc443285-0157-42d3-bf4b-7aee7d9c1232", "sighting_of_ref": "indicator--060b7309-a17f-4ac7-a2df-c5fcce489a8c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e53030e-f8d8-4308-987a-e8200b452a97", "sighting_of_ref": "indicator--f04cca8d-f38f-4564-9026-432ddccd2e6d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37b21ac-35a2-4724-933a-4e2f079e1310", "sighting_of_ref": "indicator--13f831c7-06cf-4b55-bcc7-385da9c72fc4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84622591-e428-4a95-91c1-fb35c5a3ce5b", "sighting_of_ref": "indicator--13f831c7-06cf-4b55-bcc7-385da9c72fc4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cf22a1-3ba8-4e50-9c0f-33ecb90efa44", "sighting_of_ref": "indicator--df16a742-9fde-43ef-b9a9-0ca164d52653", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62793bac-ef61-435a-9702-d5d04770778b", "sighting_of_ref": "indicator--3d8f5f9d-b54f-4624-bee2-154097c63b59", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a31ce9-634a-46dd-9000-50854732baca", "sighting_of_ref": "indicator--3d8f5f9d-b54f-4624-bee2-154097c63b59", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b755af73-1eac-4557-8ad3-51f1b2a91576", "sighting_of_ref": "indicator--3d8f5f9d-b54f-4624-bee2-154097c63b59", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421370a5-9f7a-46e1-9d6a-5bd66cee4709", "sighting_of_ref": "indicator--447ba7ad-0145-45c5-8b1e-4999cbc0a68b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0decde1f-fd36-4e47-804f-f3e3926ea876", "sighting_of_ref": "indicator--447ba7ad-0145-45c5-8b1e-4999cbc0a68b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233bba67-1cbf-4ee2-90ce-a75daf45c189", "sighting_of_ref": "indicator--447ba7ad-0145-45c5-8b1e-4999cbc0a68b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61101d4-ff46-430e-8cc6-da686099c2a8", "sighting_of_ref": "indicator--466bc088-5cc5-40e6-8e42-573ffce7f048", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04466992-24f8-4045-a593-32295f9009bb", "sighting_of_ref": "indicator--1ba27afc-82b0-47b3-bef7-98c972ee6826", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50676110-8ee8-492c-bd27-4d86ca0bb09b", "sighting_of_ref": "indicator--1ba27afc-82b0-47b3-bef7-98c972ee6826", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10915bd-291b-4545-be9a-bfd5d31cf51e", "sighting_of_ref": "indicator--300bd553-cb57-4f3a-8a9f-0f8066aa8c5f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6744e10-f352-41de-9141-d8c4a1793398", "sighting_of_ref": "indicator--ea8425c5-50dc-45fe-997e-4e74a5862f6b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e47257-529e-4c28-9a96-8b6816752a56", "sighting_of_ref": "indicator--5961b1b2-9f19-4de9-878d-263b743f901c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff31bbc-a45d-4744-b09c-21d2f67e88db", "sighting_of_ref": "indicator--5961b1b2-9f19-4de9-878d-263b743f901c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a6c23b-27e5-499b-868b-994f9164f72d", "sighting_of_ref": "indicator--97ffbc64-4249-424c-9005-616b97b09955", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db7d2fc-aca1-4ada-b937-d9a2bb0ddb12", "sighting_of_ref": "indicator--979d5c19-213f-4f5f-a920-7a061b446b7e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55a9ffd-7ba5-425b-af67-3f16a859b51a", "sighting_of_ref": "indicator--63fd065f-6245-4d1d-bb98-01e8ed334f73", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a6d05e-3691-405b-a04f-9a29ccd91eb7", "sighting_of_ref": "indicator--63fd065f-6245-4d1d-bb98-01e8ed334f73", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf220b2-5d3f-4c8d-8a05-1474de716abf", "sighting_of_ref": "indicator--bbdec7e7-f0f6-4cbe-8732-81640ff9a931", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c096e90e-3bc7-4e6f-a9f7-234a0365e9a6", "sighting_of_ref": "indicator--bbdec7e7-f0f6-4cbe-8732-81640ff9a931", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e61875-4707-4cde-a997-eca2b223b27a", "sighting_of_ref": "indicator--028b843b-d908-4e29-85d3-b4bb187fe899", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e02514b-c539-4ddf-8f66-7e23c51f7eeb", "sighting_of_ref": "indicator--a236ad93-8db0-4626-9b90-e2ddcad43674", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753faecb-a059-4f35-8ac7-db351850241c", "sighting_of_ref": "indicator--a236ad93-8db0-4626-9b90-e2ddcad43674", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551a456e-505f-47d7-9a04-898cd48075f1", "sighting_of_ref": "indicator--0945e2ce-ec22-4b9e-94db-a48219e124fc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96353dbd-d2f6-4b9a-a6ad-6a7bbdde56aa", "sighting_of_ref": "indicator--aee8c8d1-8806-4fcc-9d5a-577be5e3f5de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d656e3b-eeab-413a-9421-0318b3ae7398", "sighting_of_ref": "indicator--d43a3ad5-7693-47dd-94d1-ce85d0368e8e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd27b428-3da0-45c2-b319-404cb326dc27", "sighting_of_ref": "indicator--d43a3ad5-7693-47dd-94d1-ce85d0368e8e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca93c9e2-5aee-4322-9efc-71d33d97ee15", "sighting_of_ref": "indicator--66a2aacb-3fe9-4f41-94c6-623dd5817b1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37df6ceb-4d44-4056-b5be-7a06cbf46405", "sighting_of_ref": "indicator--66a2aacb-3fe9-4f41-94c6-623dd5817b1d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650fa24b-3401-408a-98ca-59a571da1c4e", "sighting_of_ref": "indicator--a6083501-87df-424d-a24b-7194969ab1c1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c073d6c5-1997-4299-80a8-d21deb0b0f13", "sighting_of_ref": "indicator--a6083501-87df-424d-a24b-7194969ab1c1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9645ae73-45cf-442f-b183-0fd7bd4762c7", "sighting_of_ref": "indicator--a6083501-87df-424d-a24b-7194969ab1c1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c06cbd-d07a-4272-b9f1-2d337ca8ce56", "sighting_of_ref": "indicator--7290c8e6-b1d1-4aef-bf37-32f49bd8d529", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cac20d-6c64-4168-a898-f3d8435c5e5e", "sighting_of_ref": "indicator--7290c8e6-b1d1-4aef-bf37-32f49bd8d529", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d691c9-95f9-4138-88bd-98e4f657bed2", "sighting_of_ref": "indicator--2820490f-ef87-4872-a1f0-d024296d046d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8621faa-2b3b-4a3e-999b-c0d6c3d053e5", "sighting_of_ref": "indicator--2820490f-ef87-4872-a1f0-d024296d046d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b669353-1984-4e92-9a57-f9f1957afe38", "sighting_of_ref": "indicator--2820490f-ef87-4872-a1f0-d024296d046d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77bfb12-8cea-4def-9b86-7ac5890167bd", "sighting_of_ref": "indicator--24e3d0f8-b147-434a-a798-df8b13b1841e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26198d3e-1421-4400-8a32-b587e8bf000a", "sighting_of_ref": "indicator--b2d4aaed-13d1-407f-b9b1-dd2bad85e87a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c62c3fe-4235-4c8f-b676-341e2ba76f7e", "sighting_of_ref": "indicator--b2d4aaed-13d1-407f-b9b1-dd2bad85e87a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f43746-d573-42be-931e-70c9389ee6e3", "sighting_of_ref": "indicator--f8bb8b4a-efd1-4881-a77e-6131be79e409", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c2112e-3490-4720-b6d2-05877ff1c483", "sighting_of_ref": "indicator--077030b9-5c5b-4404-adb6-990242b7f28e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5d647b-e65a-4955-b5c6-9740de8f60fb", "sighting_of_ref": "indicator--2cf67910-9c69-438a-87c5-48869aed580f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42feb695-8b9b-48c6-b959-672914f9d0af", "sighting_of_ref": "indicator--e674ab9a-a5b2-4ca3-88c5-e7c8845c22d0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a17b5c-3cb8-4164-be94-5438eaa7ee43", "sighting_of_ref": "indicator--34a12702-580c-4a58-a0de-c3b42fff4cf3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45a479d-282d-4156-bfea-7b9683d249f4", "sighting_of_ref": "indicator--34a12702-580c-4a58-a0de-c3b42fff4cf3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f63f5b9-f98e-41ab-b0e1-a18273e79e9c", "sighting_of_ref": "indicator--09090174-2036-4480-93df-ec687ca4faa4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8582132-44a8-44d3-a28a-7054537524bd", "sighting_of_ref": "indicator--015642ee-1a2e-4500-a2ef-486e4df55166", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4acf4ba-9e77-4510-a724-1acd1a05fa43", "sighting_of_ref": "indicator--6e4253b1-4121-493a-ac7e-665f312da0da", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f24793f-4051-4c27-b7cd-13646971ff8e", "sighting_of_ref": "indicator--6e4253b1-4121-493a-ac7e-665f312da0da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7aa464-ae5b-4299-a4c9-2d6df35cc1d6", "sighting_of_ref": "indicator--a1c6faf2-c7ab-4f8e-8ebc-d89e5bd85769", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb43808d-fe3c-4a1c-85d1-aa0f837ac111", "sighting_of_ref": "indicator--f2a53fae-3cd4-4843-8a93-492ae85650a4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4645a72-eacb-4f96-9f42-a6ceb8f00edb", "sighting_of_ref": "indicator--f2a53fae-3cd4-4843-8a93-492ae85650a4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146fe6e5-824c-4ba9-9bf2-09f3616d7d22", "sighting_of_ref": "indicator--f2a53fae-3cd4-4843-8a93-492ae85650a4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5480888-7fe5-4f88-a256-1210a95829af", "sighting_of_ref": "indicator--cec171f8-7bec-4031-9ebe-115abcb0639c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27364da1-c868-43d6-aa39-d9d1e6dc68a6", "sighting_of_ref": "indicator--3f01de06-8ab9-4c01-ac58-4a4e4e679ab1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52ec74c-47b2-4bb8-b72f-8128ceb1932d", "sighting_of_ref": "indicator--01eac2b7-2cde-4931-b6a1-970aa44503e0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c99bad-b141-480b-a7c7-572d827a8ca6", "sighting_of_ref": "indicator--248bd467-f34e-431a-a4a7-f112a85608fb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b573e2fa-5a60-4573-857f-40293f05572a", "sighting_of_ref": "indicator--248bd467-f34e-431a-a4a7-f112a85608fb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de853281-e5d8-4fc9-9a5f-7b6482fdbe3a", "sighting_of_ref": "indicator--248bd467-f34e-431a-a4a7-f112a85608fb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bcb6ee-6932-4352-9be8-36d901f6e709", "sighting_of_ref": "indicator--bbb844ce-0477-4787-975c-d3ea342c9548", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00e2a13-190d-4e5e-9047-52c86b2bb928", "sighting_of_ref": "indicator--5641ef76-845a-425c-9cc6-d25c40d6a87c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86266e9-23d0-4ea9-aa09-eee09e071ba3", "sighting_of_ref": "indicator--39c65749-044c-48b8-8b30-b4cd41746c25", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63bb210e-baee-48b0-8e68-4ff7ae6f837d", "sighting_of_ref": "indicator--3125054c-76dc-42c2-b116-3d7ce8a267bc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7054d21-16ea-4276-9eb5-0c0b162a508e", "sighting_of_ref": "indicator--e1fd79a1-5e8c-4c03-a723-d55a4795ce64", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a39f0f-1c8f-412e-8817-c8877197651d", "sighting_of_ref": "indicator--f5b9ea47-8af5-4bd9-85a3-4cb4da353635", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e8eebf-e356-4f88-83ce-65dbdc7244cc", "sighting_of_ref": "indicator--ac03a612-ab6a-4727-a59a-f4837ca8fa6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ddc331-8319-4b89-9a01-d4d625d51b16", "sighting_of_ref": "indicator--9bb965d3-1a05-4f59-b1cf-d8130594ebfc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259f3fc5-5a10-4c97-838b-973370c60608", "sighting_of_ref": "indicator--9bb965d3-1a05-4f59-b1cf-d8130594ebfc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a66085-9a9f-43a0-bb61-bed81b0af720", "sighting_of_ref": "indicator--9bb965d3-1a05-4f59-b1cf-d8130594ebfc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec815ac0-9ec1-4c66-8bf8-e2aa1f1cbcf2", "sighting_of_ref": "indicator--50d81d89-9f0c-4ba3-9626-f8f94b282c02", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d6ceeb-405f-4544-8c03-bca2783332e4", "sighting_of_ref": "indicator--50d81d89-9f0c-4ba3-9626-f8f94b282c02", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0be745e-1fd0-4cab-badf-9d5966057472", "sighting_of_ref": "indicator--36a3f250-805f-4391-875e-37831efcaee5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0265dac-ec00-4b22-a0a3-2c40aafede0c", "sighting_of_ref": "indicator--36a3f250-805f-4391-875e-37831efcaee5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bef9ca4-fc37-4d65-9bc4-2aa76734077f", "sighting_of_ref": "indicator--e4d90527-4be3-4310-8eff-f894e5b16416", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7141c2-58bc-4a4a-9487-9cbe5e3b17ad", "sighting_of_ref": "indicator--e4d90527-4be3-4310-8eff-f894e5b16416", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fc1159-ba8d-41f1-b4e9-330f436fb5d6", "sighting_of_ref": "indicator--3db2b2de-b06e-4875-92f2-422e8596f87a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b5b7a3-5eaf-4661-9ad8-5e9dae7d2dcd", "sighting_of_ref": "indicator--9247939c-28de-4d81-a9cc-0c400e6eb5bf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e14da40-0d9b-40aa-8168-622a164448ca", "sighting_of_ref": "indicator--5dcd4ac6-c309-4391-945a-3b8fe0314a25", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c450eb-2d40-4b0d-bbba-440bde7300f5", "sighting_of_ref": "indicator--668a4143-60a9-40ed-82d6-c82e9d5c3861", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732b5dca-300c-42ab-8650-7d19494826cf", "sighting_of_ref": "indicator--a793d7d0-4ceb-4dd9-9640-a4089226bcb8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13416e99-84c1-446e-b2e7-54d7c20cc476", "sighting_of_ref": "indicator--3a6e32d7-0d6d-4ff9-b6c0-bbd3d5945502", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734b82bc-c700-40d0-9594-ea4b0fab0520", "sighting_of_ref": "indicator--3a6e32d7-0d6d-4ff9-b6c0-bbd3d5945502", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f0ada2-a1fd-4d31-88b1-4f24f575ea4d", "sighting_of_ref": "indicator--3a6e32d7-0d6d-4ff9-b6c0-bbd3d5945502", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f261dd0d-3ec1-4361-b9e9-4353556183c7", "sighting_of_ref": "indicator--094c8e14-79e5-4490-b9da-f7e896e57640", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb5d62e-a727-425b-a170-18fcbd95eb42", "sighting_of_ref": "indicator--60116f5f-8c9d-423a-9ef2-f0c70f2fb10b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4423dbc0-226f-4c7c-ba20-7c33c68e2643", "sighting_of_ref": "indicator--a65dc1c3-c000-4b6c-8f07-bef23b781b0d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28957999-4da3-4f9f-bd09-2d546b4481dc", "sighting_of_ref": "indicator--2f8acf41-541a-4cc5-b189-12fac48770c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e02fff6-01db-44cb-99f5-2f10ab8b0aa0", "sighting_of_ref": "indicator--2f8acf41-541a-4cc5-b189-12fac48770c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6368a9-e78e-4f62-9e45-876de1e6b5bf", "sighting_of_ref": "indicator--fc9d52ca-b68c-4941-883f-f944df1e739a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40175326-9222-4807-bd84-1bbb11129bef", "sighting_of_ref": "indicator--fc9d52ca-b68c-4941-883f-f944df1e739a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bf1d0d-f2f3-4140-b602-16e6e7eaeda0", "sighting_of_ref": "indicator--fb258e2e-f17a-4bec-b7ea-5f0625530af6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3132aa4b-4e73-4a4e-9f46-f3ca816e89bf", "sighting_of_ref": "indicator--835538d3-a88e-4d55-8174-f8cfaa037526", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e5173b-ebd0-460d-b098-4b4e82404167", "sighting_of_ref": "indicator--835538d3-a88e-4d55-8174-f8cfaa037526", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd96279-3327-42ce-9127-40861e5c850c", "sighting_of_ref": "indicator--3240fcfc-d713-4e77-95ef-72b3fc4ac3d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb970328-6d15-428d-8bbc-46364e3bad78", "sighting_of_ref": "indicator--3240fcfc-d713-4e77-95ef-72b3fc4ac3d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb444d6-48b7-4a74-a6e0-117ef4858847", "sighting_of_ref": "indicator--7d5f9199-84c3-4c36-9f29-754b9378760a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5077238f-8c6e-4ee6-b4b7-60b4813a8595", "sighting_of_ref": "indicator--36d2c69e-9e7d-40bf-a1e3-236aa6c3187f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e37ddf1-8321-4e95-9105-e32cd1915953", "sighting_of_ref": "indicator--6f6de34a-7102-4488-b763-e392715ea3e5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bebc068-e5da-471f-a82c-76b69cd16582", "sighting_of_ref": "indicator--790a7bec-5176-4b0c-a43f-8cc1a7310e79", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe94ba3d-0b54-49df-be03-df58df1ab267", "sighting_of_ref": "indicator--247dd55a-2b51-4873-9d79-07197b840c29", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea914ea5-23ca-46e1-abd7-80181b590b48", "sighting_of_ref": "indicator--399e89f6-60b5-40eb-9607-e4a5aaa8eb58", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e3401b-d647-4e82-8960-d0009edd81f9", "sighting_of_ref": "indicator--8eb3979d-306e-4b47-b106-fc07b290c285", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4799515b-1f34-4b6b-8826-ccd53e37d9c0", "sighting_of_ref": "indicator--29818d49-c1e8-4b1b-b435-33851b1e443c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b9f943-32ab-400f-9029-8354df2c31c3", "sighting_of_ref": "indicator--7f04f17a-61d1-49e4-b791-9c95d9bf9eb9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8b4f7e-9b4f-471f-addc-14a891188cb8", "sighting_of_ref": "indicator--7f04f17a-61d1-49e4-b791-9c95d9bf9eb9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f49903-fac1-4a00-92c9-403cd0875d6b", "sighting_of_ref": "indicator--6e047b4f-fb9d-4280-9687-39564e55958e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c615000-4afe-4591-b9f6-9e9d2bb29a78", "sighting_of_ref": "indicator--6e047b4f-fb9d-4280-9687-39564e55958e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50cdf2c-b060-4cfd-b4fa-0415443720e3", "sighting_of_ref": "indicator--cd9944d1-bad4-447d-a25e-9ea569387ad3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a455add7-d85f-4a48-82d6-1c143bc6ab4b", "sighting_of_ref": "indicator--cd9944d1-bad4-447d-a25e-9ea569387ad3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1583e578-5afa-4ea4-8f39-9dced5e49a4d", "sighting_of_ref": "indicator--cd9944d1-bad4-447d-a25e-9ea569387ad3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de85d5f5-2720-490a-aabf-60ced584d7fe", "sighting_of_ref": "indicator--37c547cd-11e5-4cb1-818a-b27749727b49", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9cc024-aa4b-47ad-85bf-b869bc2041ec", "sighting_of_ref": "indicator--37c547cd-11e5-4cb1-818a-b27749727b49", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa25a9f-ab18-45e8-99dc-b6633a5ccb2c", "sighting_of_ref": "indicator--37c547cd-11e5-4cb1-818a-b27749727b49", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5a6fdb-ccfc-4031-8ddd-010f6d94e482", "sighting_of_ref": "indicator--1f888a37-a9ef-4bf1-89d7-6ac62bd3f039", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef90e507-f783-428d-ba69-60beb8cab750", "sighting_of_ref": "indicator--1f888a37-a9ef-4bf1-89d7-6ac62bd3f039", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bb6e56-69d6-4ab3-957f-b421e35a817f", "sighting_of_ref": "indicator--1f888a37-a9ef-4bf1-89d7-6ac62bd3f039", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4600173-5555-4bcf-8031-6f160cc2ac21", "sighting_of_ref": "indicator--528b615e-d0ef-4c04-b387-08d71874fce6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bbf635-67a2-426a-a90a-d1248f27d0b7", "sighting_of_ref": "indicator--528b615e-d0ef-4c04-b387-08d71874fce6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac7db9a-e962-4cfd-9f52-84d31564ec1c", "sighting_of_ref": "indicator--528b615e-d0ef-4c04-b387-08d71874fce6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db77259b-c632-466c-a724-6961d2073b74", "sighting_of_ref": "indicator--1b9f95e1-60fb-4482-9f71-8c58f2d6d782", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e0a965-0601-4507-b452-df2aa47a7d14", "sighting_of_ref": "indicator--1b9f95e1-60fb-4482-9f71-8c58f2d6d782", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cc6b2d-ea38-401e-91bd-67e2718d794f", "sighting_of_ref": "indicator--1b9f95e1-60fb-4482-9f71-8c58f2d6d782", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c41fb3-4422-49fc-8496-739560d9fde4", "sighting_of_ref": "indicator--c9ed8978-9f7f-4b5d-ab1a-8d375d55e9e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3209fd-6965-41c1-8058-4f82c0d395b9", "sighting_of_ref": "indicator--c9ed8978-9f7f-4b5d-ab1a-8d375d55e9e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af408ff-d8cb-4490-8042-88d2c99f660f", "sighting_of_ref": "indicator--c9ed8978-9f7f-4b5d-ab1a-8d375d55e9e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db36a16c-33ba-42fb-ad6e-687df1464161", "sighting_of_ref": "indicator--4fbedc42-cd76-498b-a9e5-3c45f6be93d6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410d264d-7967-4c23-849a-25f0df3c7a92", "sighting_of_ref": "indicator--4fbedc42-cd76-498b-a9e5-3c45f6be93d6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a5f7dd5-6af1-43de-9785-edf6c1b40033", "sighting_of_ref": "indicator--4fbedc42-cd76-498b-a9e5-3c45f6be93d6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5441dad-61de-4756-84fa-81525e1bfbae", "sighting_of_ref": "indicator--644f66aa-8b09-43e8-8e8a-39459dbd34a4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd194999-3e25-4fc5-a6f3-c8cd2f831184", "sighting_of_ref": "indicator--644f66aa-8b09-43e8-8e8a-39459dbd34a4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59422e5b-7101-495c-956e-76be143b6b31", "sighting_of_ref": "indicator--644f66aa-8b09-43e8-8e8a-39459dbd34a4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f6bdf1-1d8a-464d-9dfb-131069bfef89", "sighting_of_ref": "indicator--e32b1adf-f7cf-4637-b8b4-8462520fcde8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13308a12-2b1c-4e9d-883d-a784971b4c21", "sighting_of_ref": "indicator--e32b1adf-f7cf-4637-b8b4-8462520fcde8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cf469f-405d-483e-aeaa-e756d16ea229", "sighting_of_ref": "indicator--e32b1adf-f7cf-4637-b8b4-8462520fcde8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6bcd99-ece8-4902-94e2-0fec0f255717", "sighting_of_ref": "indicator--a5f1d468-e003-4627-82af-0ed053ba34b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6394a6bf-40b9-4ad5-a344-ee1498325752", "sighting_of_ref": "indicator--a5f1d468-e003-4627-82af-0ed053ba34b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff7b850-2df2-4767-a301-5b160109365c", "sighting_of_ref": "indicator--a5f1d468-e003-4627-82af-0ed053ba34b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55904c32-67b2-4217-b71f-e8e93277d0fd", "sighting_of_ref": "indicator--9c5bcc55-fc60-44cf-a248-1cc823a1ecf4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d2fbbc-e504-43be-a458-cdf6ee7beb11", "sighting_of_ref": "indicator--9c5bcc55-fc60-44cf-a248-1cc823a1ecf4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929b6b35-da9c-4072-b28b-e7e77fff6b37", "sighting_of_ref": "indicator--9c5bcc55-fc60-44cf-a248-1cc823a1ecf4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7c01d2-a926-4667-ac3d-f008f6fa81a8", "sighting_of_ref": "indicator--06ddee43-99b4-4d5f-9b17-8018cb5a64d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f75a22d-033b-469a-8bd2-100254bc840f", "sighting_of_ref": "indicator--06ddee43-99b4-4d5f-9b17-8018cb5a64d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601735f0-cc80-4e7f-a688-5aefc54b6c81", "sighting_of_ref": "indicator--06ddee43-99b4-4d5f-9b17-8018cb5a64d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a88fa01-a8ec-427e-8f64-94b25f646785", "sighting_of_ref": "indicator--decd28f2-8903-4533-9eba-e95964006944", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2776b114-ebd7-4ab6-b3b7-6260610ccb09", "sighting_of_ref": "indicator--decd28f2-8903-4533-9eba-e95964006944", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ad7918-b3ea-4ab7-b31f-26850bb879ad", "sighting_of_ref": "indicator--9667fa3a-9ba6-41f8-b4f8-14c5152e9d18", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a09636f-1463-4417-939e-c4c2b792e6cf", "sighting_of_ref": "indicator--9667fa3a-9ba6-41f8-b4f8-14c5152e9d18", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfa3ff4-284c-41a9-b519-8a4bd97ff1dd", "sighting_of_ref": "indicator--9667fa3a-9ba6-41f8-b4f8-14c5152e9d18", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee81d2fc-5ca3-485f-978f-62d0c96545e8", "sighting_of_ref": "indicator--80d54549-c6e0-4e90-8d9d-a4f908838d19", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cec27d3-faf9-4b09-947c-1d84a785c5cb", "sighting_of_ref": "indicator--ada7c36e-6113-4051-99a9-8d39eac226f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145cc0a2-58a2-4587-8c11-166cbf78ba6d", "sighting_of_ref": "indicator--7c46da21-bf99-4ba7-b5fb-031f0ec7faf1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f56ff2-77b3-44eb-a7f9-dd58a865605b", "sighting_of_ref": "indicator--7c46da21-bf99-4ba7-b5fb-031f0ec7faf1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c2f6a0-eb34-47f9-856d-525f202957c2", "sighting_of_ref": "indicator--eca342be-2e37-4dad-99a2-72f6e0f66f19", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8393366-0876-40fe-ab0a-4ed22e2ed125", "sighting_of_ref": "indicator--ec421865-8e20-41c4-9603-bc9f5c06c425", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1638dd07-2a44-4864-a4e4-4656a15d99d7", "sighting_of_ref": "indicator--ec421865-8e20-41c4-9603-bc9f5c06c425", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91170751-695d-44c6-a586-b8f745faef05", "sighting_of_ref": "indicator--cdf2c6bd-aae2-4cd5-857c-decf09ec29c0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7362162d-cede-4e94-a7c5-286cf8654f57", "sighting_of_ref": "indicator--fbe258a9-5086-498f-8800-f8e8995b8282", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5521f99c-1464-4bfd-a134-354de42b378c", "sighting_of_ref": "indicator--70cc86a4-b895-4869-a175-367cf5da0040", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164077ba-fe1f-4bc2-a73e-14be96f3a4f0", "sighting_of_ref": "indicator--1787a5d6-4fa8-4aff-8894-e57996413fa3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6612fd-8ed2-49dc-8c5a-f70d2debc7f6", "sighting_of_ref": "indicator--7f00ecd1-d5b5-4157-bbe1-ced2c97a576f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd470248-eb9a-423b-9833-b59adf262b81", "sighting_of_ref": "indicator--d080d739-cac3-48d1-bc58-045435b34c48", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3b4c77-a314-4e56-934f-b7647d60daea", "sighting_of_ref": "indicator--6a20883e-8b45-4c11-adc4-d3b69747693d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f725f22e-f162-4d9a-939d-e91d4edfac6e", "sighting_of_ref": "indicator--bb5ce354-1536-48d8-b490-38745677be2e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97b89e6-9e88-4ceb-9855-7d7f87311057", "sighting_of_ref": "indicator--b6b941b2-c359-4d17-8e41-63c75c8d32bf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388687ec-86d9-4c17-b9e3-1b79828f043d", "sighting_of_ref": "indicator--4bfb7892-f775-427c-aede-590297841297", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bc91b1-95fe-44f0-aa0b-0af3a845694a", "sighting_of_ref": "indicator--6696ea2d-9352-4f33-90b4-bcd4a0b4a92f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b1e305-73f3-4656-8365-a4d310f23437", "sighting_of_ref": "indicator--733ec9de-954b-45de-bfc1-788aa2287ae4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65136b6c-0f5e-4498-8a6d-33b569219af4", "sighting_of_ref": "indicator--3b671221-ff2e-4538-b54c-f249fe3865b3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de28fe0-4745-49aa-970e-0bc26e42415e", "sighting_of_ref": "indicator--84d8f09c-d48c-4cb0-8844-5fbfadffa4c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529d8de1-e45d-416f-bf35-550ea37a69ef", "sighting_of_ref": "indicator--84d8f09c-d48c-4cb0-8844-5fbfadffa4c6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd083853-cdb6-45a7-ba3a-6c832728ab7a", "sighting_of_ref": "indicator--a0c47c3e-68d5-42f7-bcb9-f2ba150f01ff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3091966-cc70-4cae-bcc3-126956af759b", "sighting_of_ref": "indicator--430dedef-9a80-4da4-8d3c-a5ee76489f05", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7223204-cf05-4057-a5b8-1ea6e8c990cb", "sighting_of_ref": "indicator--89ffd05c-f3ac-48dd-a300-8dde8206605f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9ff099-8723-4770-99df-11732b4f52b2", "sighting_of_ref": "indicator--89ffd05c-f3ac-48dd-a300-8dde8206605f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03145a8-24c1-4865-b8c5-a507e180c809", "sighting_of_ref": "indicator--bf719c52-0fa0-4ff7-9c3b-9a5c8dee1760", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f6edf2-8c43-4c8d-abc9-dc24306fecb5", "sighting_of_ref": "indicator--eadd91d3-6584-4702-9e4e-5176362a8a27", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710d90ff-4c3e-45b6-9810-14968dff6993", "sighting_of_ref": "indicator--eadd91d3-6584-4702-9e4e-5176362a8a27", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb7f6e3-8c3a-4cc9-a914-c04efbd7e6df", "sighting_of_ref": "indicator--eadd91d3-6584-4702-9e4e-5176362a8a27", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee00e7a6-ac02-4563-a13d-b32b6d70c7b3", "sighting_of_ref": "indicator--53aeb319-0890-4f47-85d5-d3b3914136b8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257264f0-94da-49b5-ad1d-af19a13fa4d4", "sighting_of_ref": "indicator--53aeb319-0890-4f47-85d5-d3b3914136b8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5a8bfd-19eb-451e-b5c8-d273ba586af4", "sighting_of_ref": "indicator--53aeb319-0890-4f47-85d5-d3b3914136b8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb6ac36-5e00-41f5-8fca-a5628c0ca2fd", "sighting_of_ref": "indicator--53aeb319-0890-4f47-85d5-d3b3914136b8", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a66a85-4026-48f4-ad4d-a5e7e8589357", "sighting_of_ref": "indicator--73ad2112-8ea7-4e0a-ae0e-5b1eebebc4f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5847d7-4790-46a8-aab5-df21e16d0938", "sighting_of_ref": "indicator--6c802999-dca7-432e-8ce0-2a5794105627", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48770cc-0c71-483d-955a-12cecff91bf5", "sighting_of_ref": "indicator--893861bb-68c9-4cbc-a9c0-7757e38217d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8ddad3-6d87-495b-95de-f8a09d63bfd0", "sighting_of_ref": "indicator--d2b35b2d-8b7a-4a16-9a82-ab8178e7f58c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9664063f-dc5a-4139-816c-817061c067f5", "sighting_of_ref": "indicator--b40c0d2e-f7ce-4a52-b6cf-1a11109b736f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae125909-5447-4a1c-b28f-1a6bfc3895f3", "sighting_of_ref": "indicator--abbcc4d1-849e-4a9d-b0de-cff39c905f34", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f532513-f4b9-415f-8cf8-04bf321211e1", "sighting_of_ref": "indicator--a8271b7f-6f5c-40b8-b898-577ab111870b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4aa7b2-bc9b-4b22-a728-166c5bb350f3", "sighting_of_ref": "indicator--dfbd7834-1e03-437f-ba3f-19314eeb8c9c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750ff539-5e1d-4762-bda9-b0123f0f9415", "sighting_of_ref": "indicator--efca0bb2-f3c8-4bbc-981f-5954070fdf21", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2951371c-13ee-451b-a487-581ad1838437", "sighting_of_ref": "indicator--efca0bb2-f3c8-4bbc-981f-5954070fdf21", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6286548-1cae-4d25-895b-445c978da2af", "sighting_of_ref": "indicator--9a7c01d4-f89b-424e-9af4-91450d8258dc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13a894b-32f4-427a-ad65-d7b6f8c188c1", "sighting_of_ref": "indicator--a718eb93-40d1-45df-902c-1301c9d7c33c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64321b00-c918-449a-93a6-07bd2d0cd9e4", "sighting_of_ref": "indicator--2129ab87-37ee-468b-b538-ea3f041103cf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8234e0de-4b66-41be-a05c-a7b61cdc4b0b", "sighting_of_ref": "indicator--2129ab87-37ee-468b-b538-ea3f041103cf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7b7eda-f9b2-4a3f-9856-153352f18e0c", "sighting_of_ref": "indicator--7bf0188e-f871-41bd-9ecd-19210a9822c4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3953948f-3673-416e-b06b-15728cf95352", "sighting_of_ref": "indicator--7bf0188e-f871-41bd-9ecd-19210a9822c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c5402d-00ec-4744-87a0-fda5b906e254", "sighting_of_ref": "indicator--dea8677a-a56b-4b36-91f3-e01b152230d8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3cbca8-72a4-446d-8f36-7d8b9fef3d70", "sighting_of_ref": "indicator--70824bca-8eed-4b91-b6f7-d214706e9b60", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df9a1f8-dd3f-4658-93ca-13d83ad800e1", "sighting_of_ref": "indicator--003a7a9f-0906-46a7-9231-376752d03e12", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6e13a2-4c22-4afc-b05c-9b7ec7c90098", "sighting_of_ref": "indicator--d9dc3073-315a-4a66-aa31-b49b39ff2245", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2feb9a98-bfef-4111-8874-e78195d27347", "sighting_of_ref": "indicator--880bee32-546f-40b1-bdeb-989b6dc85df6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c58e9c4-b052-41a2-8ba4-dd741eb1ed8d", "sighting_of_ref": "indicator--15ef89d4-1de7-4a23-82ae-cfcc16372ae8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efab6c37-efbf-4a7b-8764-e650d8ff9679", "sighting_of_ref": "indicator--5a731106-84f9-40b8-adac-b2d2beeffbba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd477d3c-0c03-4d26-aa45-7bd5d090a231", "sighting_of_ref": "indicator--bcb25982-078c-402a-9e10-aee4e6e4488b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc3ede4-5732-41e2-871d-d8b310d34a94", "sighting_of_ref": "indicator--b2d2c472-3c39-47f9-8ba9-079d5afb1e8b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429215c7-02b4-40a5-a2ce-7ebbe2edd219", "sighting_of_ref": "indicator--4e5556eb-5191-49fc-886e-ebcc7af8fc9c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67aff1d-7456-466a-8669-ad5139e67598", "sighting_of_ref": "indicator--4e5556eb-5191-49fc-886e-ebcc7af8fc9c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f2e464-97d3-4ce5-a0e2-9b8ccad12633", "sighting_of_ref": "indicator--6d2bba35-6e86-484a-a1e0-1668c6d6d210", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d7f828-fe0a-4790-87d5-635f72e022a0", "sighting_of_ref": "indicator--01663580-20bd-4f83-ac88-c0479cf80b51", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5655730e-cdf6-4096-9d41-4750e949feab", "sighting_of_ref": "indicator--17431b29-0a6d-453e-95a9-8a200dc1a917", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c210e57-b8ef-46f1-81f2-3411b5d16031", "sighting_of_ref": "indicator--0228c9b9-2aca-4589-b55a-dd8a88ac3a9e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd280f4-a3b2-4105-a23a-028a62c4227f", "sighting_of_ref": "indicator--2c1d12b2-3931-4298-b61c-99afbdd6eac8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8159169-7859-496b-b65e-3a30201f5b5e", "sighting_of_ref": "indicator--dcf33511-bae4-4b89-94fb-55f65944185f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6fbfbf-aedd-45cb-b673-c2c6049204cf", "sighting_of_ref": "indicator--6dd6125f-18bb-4c6f-8a43-1c9aeb040511", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e4759b-4ef2-4f60-b308-b4ed6c98ed77", "sighting_of_ref": "indicator--29297255-dddb-4894-ab00-651b27cf1afc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7054bcc8-ab49-4bcb-9ebf-19795c9b8312", "sighting_of_ref": "indicator--71f34acd-fc41-4417-bf5e-256704e1c609", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c94950-38a8-4f0c-b55e-c36f0cc35502", "sighting_of_ref": "indicator--71f34acd-fc41-4417-bf5e-256704e1c609", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765e028a-e56b-4c70-a39c-ac1727af8dda", "sighting_of_ref": "indicator--b1b6eb18-1e2b-4f86-b734-f9aa9b15e648", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7144a401-85fb-4689-9c1e-e949c225a094", "sighting_of_ref": "indicator--0868fa23-e0ac-4ad8-b948-85e403bc5019", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d046d8f-bb66-4995-b23d-bf5ad1a4286a", "sighting_of_ref": "indicator--0868fa23-e0ac-4ad8-b948-85e403bc5019", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10703e8f-cf22-4ae1-aad9-963b8f6d7d0d", "sighting_of_ref": "indicator--53a2a5ed-ff06-4e24-b97b-2e9c0fefef32", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a2c019-3206-43a7-ad44-d459c9d704b7", "sighting_of_ref": "indicator--8a2c95d9-b70f-4ea2-802d-334b632ec45a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba16e39-0388-4758-bda2-19fb15b60166", "sighting_of_ref": "indicator--cb5f2d46-690f-4ea1-a48c-f2fbd7a1cc97", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23940979-157d-4290-b32d-14d7ceb82857", "sighting_of_ref": "indicator--cb5f2d46-690f-4ea1-a48c-f2fbd7a1cc97", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615889d4-1d4d-44b1-8157-02c9f549f933", "sighting_of_ref": "indicator--57e38e34-1514-481e-9afe-0d88d8d3e65b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46500acc-8b44-4d2a-881b-8b99ea7f890d", "sighting_of_ref": "indicator--902729b4-4609-4c31-a3fc-2c635184e1d2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3690a79-38d5-4c3a-8c3e-25e10cfa09b2", "sighting_of_ref": "indicator--56bccafa-846f-4c6e-87f1-276f6c6c6e45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa17de2-4a16-4af9-89d0-b47ec038a118", "sighting_of_ref": "indicator--8925952a-3b08-4690-b3fb-6bb2f95a7ee7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25c452c-ea1b-4387-8712-b193f4e58906", "sighting_of_ref": "indicator--5e9c06cb-78b0-4179-9c24-ec6ae76840e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d88d2a-edd9-49bb-9393-cd8b630ac96d", "sighting_of_ref": "indicator--a387aea1-6313-40e0-aded-c92433d25700", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2362df1-5e5b-4811-98e9-563d4d56d2f9", "sighting_of_ref": "indicator--fe0f8281-3af8-4808-b1a7-ca019864cba4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b7f170-f5f4-4f9a-b9e6-12e0e6419fc2", "sighting_of_ref": "indicator--58bab415-554c-46c9-80b8-2c45b1794528", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aaeffe7-8efc-4f68-86c2-01e03f1c83ff", "sighting_of_ref": "indicator--ac88db50-effc-4ba4-b354-c6a200b6f7f0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506b6e2f-9aa8-4f95-83a2-651bdc3a6502", "sighting_of_ref": "indicator--a938a5fe-77da-4e36-a7d1-0f8f65373d9d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17ce351-12f3-4b34-b8a8-86c68101da7b", "sighting_of_ref": "indicator--87d71602-2594-4919-980c-314ccd1d2fdc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259d34b7-24cf-4e61-b6a5-25614d1042f8", "sighting_of_ref": "indicator--87d71602-2594-4919-980c-314ccd1d2fdc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0439303-768b-4561-9364-998ea512cbc4", "sighting_of_ref": "indicator--a5dcb93d-c6f7-45c8-baed-9e525786dc4b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b10d46-8a1b-4c30-a7f2-11e530aa5549", "sighting_of_ref": "indicator--a5dcb93d-c6f7-45c8-baed-9e525786dc4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bd3b54-aa3e-4d2e-ba9c-81e7b770325a", "sighting_of_ref": "indicator--1bd399cf-c048-4cf2-b250-7630b49fe7d4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468298ab-0d67-44c3-a14f-c1b4e19a9043", "sighting_of_ref": "indicator--ab6f3919-1430-4d6b-abc9-bb2716ea5f9f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7969ea87-6249-47a5-b5e8-65b6afae45bb", "sighting_of_ref": "indicator--8b5b0ca0-a9f2-4c59-ae32-7076f3c42256", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b623dff9-438a-49e2-88e5-95a16415728a", "sighting_of_ref": "indicator--8081411d-ab4e-4257-970d-3d3b55ee3f48", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f34ce37-48da-4a44-a099-d46f0176971d", "sighting_of_ref": "indicator--5a51d69c-ded4-4df9-837b-021ea719e58e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ceebb6-2a15-4570-88bd-4bb987e60d28", "sighting_of_ref": "indicator--62fae663-f340-4f53-a7ca-c7d6152d60de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d460f6-5d9e-45f6-b9d0-4f96d76dbbd8", "sighting_of_ref": "indicator--62fae663-f340-4f53-a7ca-c7d6152d60de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e44847f-ce50-4e34-9e6e-8832f664176a", "sighting_of_ref": "indicator--b644069e-4283-41c1-bdca-ed9092af5a75", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a947a7c-e472-4331-8cd1-3d2b642a0058", "sighting_of_ref": "indicator--b644069e-4283-41c1-bdca-ed9092af5a75", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7095286-ce3e-421e-8101-0a84f69329c2", "sighting_of_ref": "indicator--eb5fbd68-3439-4f64-bcb1-62404b9bf92a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf7173e-f6ac-4bea-bc2f-7a86d220ee0d", "sighting_of_ref": "indicator--988e251a-651a-41d7-94b8-076ed9ceb87d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214ce7c1-6942-4a42-bac3-ebed76dbe73d", "sighting_of_ref": "indicator--5ca94ffc-850a-43cc-990c-72e46b5fd176", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9d74f4-d047-4bae-9906-c2af89d5c801", "sighting_of_ref": "indicator--321733bc-8b0e-41b6-9c53-3c814162ca92", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c53eb8-ab2c-40bd-98a2-4197367bba1e", "sighting_of_ref": "indicator--3b1625d5-c447-4c8f-af4c-bbc9f843f27f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4104d81e-1789-463a-8e33-168b0354faa3", "sighting_of_ref": "indicator--02461366-af86-485e-bd6c-c7912cc8e5bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ceed3f9-10f1-4c8b-9603-ee71718d132b", "sighting_of_ref": "indicator--47a3258c-f124-40ad-8a6a-5b43159a02f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2ed271-987d-46a0-850f-46eed3110af4", "sighting_of_ref": "indicator--f9e0214c-c83e-4683-adb6-c64f79cac94f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08aeea25-84ac-4b7d-84e6-0dcf423d3faf", "sighting_of_ref": "indicator--f484a692-9adf-4887-a5b8-5caafb76e3ab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9066050b-c9ec-48fc-9c12-8adb69aea5fe", "sighting_of_ref": "indicator--4afe13c3-12f5-47e6-b91b-ace2011b7de0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab445c0-ab2f-4e28-b4d7-20cbeeed3343", "sighting_of_ref": "indicator--3921b2d2-cd76-4fa2-8183-409d7649cf36", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f759dc-679f-4b32-8bba-931b214dbc98", "sighting_of_ref": "indicator--982111d6-0353-408c-a834-056f11a6cbc0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52dd2c6e-8fe8-4ec0-8be6-ff4faf01fc9f", "sighting_of_ref": "indicator--1e76c8bd-45ab-4fc2-ba96-f80746844b95", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15181b8-3967-4c35-92ea-4092728c131c", "sighting_of_ref": "indicator--c577f1ab-8f1b-47c5-a055-8408f522e03a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9638b347-ef8e-4e71-8177-09cb95aeff4e", "sighting_of_ref": "indicator--c08a1d32-b664-4a7e-b8fb-7e330b9f925f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f354c43-c260-486a-b5de-d397741cbd3d", "sighting_of_ref": "indicator--a51973bc-7032-4efd-bfe5-aa7fbe6360d7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec33aa1b-3c00-4733-9406-60ddaea0f102", "sighting_of_ref": "indicator--7c058b8e-e356-4cfc-8db3-97334216d326", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ce6ed0-5a1d-453b-b4e4-5760d0a0ae08", "sighting_of_ref": "indicator--9e5d488d-6675-4365-adbe-fdf45a7360b8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15362eb-4b96-4515-b1bc-b535f70660c1", "sighting_of_ref": "indicator--e86dddd0-5b52-4d26-bf9d-f8f934db3f48", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f08d509-0125-41d2-8c71-3c6f60728956", "sighting_of_ref": "indicator--f9255669-036f-4726-b099-d91b6c4a3d90", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152df277-5c00-4a62-957d-beebb16a6486", "sighting_of_ref": "indicator--732d2b6d-1f40-4523-ad7f-3c372fa76445", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d60d5e-75ba-4be3-8605-0791798f8155", "sighting_of_ref": "indicator--14ea3c88-c975-4185-8014-d4eac6e89305", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c350bdf-0a1b-46f9-8a97-55cea4d235c0", "sighting_of_ref": "indicator--d848b838-9bc0-40ed-9746-c36ae20cdebe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fee8a3-b5b5-43f2-b800-685f4fb3b7d9", "sighting_of_ref": "indicator--8cc98f69-3d2e-499a-9e78-05cfb87d98de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c87f44-1dac-4d89-9363-e30d16ce8813", "sighting_of_ref": "indicator--0ca3be7f-f2a0-4fc1-90c2-b7bcb0523237", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afa7309-16b8-4466-816e-8e62f9dd67a1", "sighting_of_ref": "indicator--380bd870-8d53-4b4b-a452-580a7abb8a02", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a246ab-deed-492c-98ba-415cb4aad9da", "sighting_of_ref": "indicator--72755b74-af52-45ee-af0c-7d5e68ae1f0d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70c8229-c5b0-4d89-9fcd-b7044d5381ba", "sighting_of_ref": "indicator--72755b74-af52-45ee-af0c-7d5e68ae1f0d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcacfae9-9dbd-4012-a9a7-bce1131d9f81", "sighting_of_ref": "indicator--0b7ec5a9-6a72-4a87-8114-730d0c6f7664", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6826c1-d697-4220-8b2d-673e8e9485f7", "sighting_of_ref": "indicator--3181c357-1fbd-4d9a-b8ee-fd3d2f8a1d07", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2ddcb0-631f-4152-aef3-c77e57dd53bf", "sighting_of_ref": "indicator--6a458220-71a0-49bc-b569-692e802bc125", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a1f638-f305-43b2-957e-6e6a1db84f2d", "sighting_of_ref": "indicator--0cb8c4ec-3406-411f-a513-1425d7f2ce18", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b395f15-dcfe-49f0-a4ef-6f05fc5d8cdd", "sighting_of_ref": "indicator--02ad9d81-8f98-4600-b7d2-86b84d0998bd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6bd406-5461-441e-ae35-7608345ae735", "sighting_of_ref": "indicator--ada7c51e-afcb-4d9d-ad79-4b3adaf7eb28", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5561274f-609e-488a-baa9-e9ad2fe4e9c6", "sighting_of_ref": "indicator--9bb7762a-5aa3-4d31-a6b1-e2c191a5eb45", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d33b70-b008-43b7-9de6-74f25c43c36d", "sighting_of_ref": "indicator--613399d4-0949-48a5-845f-a1394869af82", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--986b6875-2e9a-45bd-ba32-3fa1d256423f", "sighting_of_ref": "indicator--4fce968f-752d-4f2f-94b1-05fd098e00fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2992c63e-1e61-437a-8dda-b2002461b709", "sighting_of_ref": "indicator--8c488d24-69f2-4ca6-bc01-ad89b09459d8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65acc9c8-4637-44ff-974c-11741631cb23", "sighting_of_ref": "indicator--b822ce15-4fb1-4eb3-a969-1a3bc0d8b7ac", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409e6808-ef47-4198-b6ff-3f990d93167e", "sighting_of_ref": "indicator--b822ce15-4fb1-4eb3-a969-1a3bc0d8b7ac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e004778e-23e0-429b-9a50-cf6e6fda709b", "sighting_of_ref": "indicator--0d252b21-3fb7-4964-96fb-73e08f189d64", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131d5edd-430b-4029-95bd-cd571ab42e4f", "sighting_of_ref": "indicator--da8689f3-82b8-4a3d-afaa-ea355505151e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597e5d9c-7fb7-4745-aacd-61f43eb19e33", "sighting_of_ref": "indicator--bcac426a-04f7-471f-af3f-a617c04a8404", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e6fc48-7b15-437a-bbcc-d7598285b189", "sighting_of_ref": "indicator--213da627-540c-4e65-b61c-52918f3ec4c8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e105f119-e913-41bb-a001-f7844186d4d6", "sighting_of_ref": "indicator--a0a79257-a4be-4778-8a51-0473faaaa045", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fae57c-c8a5-401b-927e-9289dd500cc6", "sighting_of_ref": "indicator--75154c19-3c91-4654-8144-df8e89d0dda0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711f9e64-6f4d-409a-830b-4473af408c7e", "sighting_of_ref": "indicator--75154c19-3c91-4654-8144-df8e89d0dda0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef3695d-114e-471d-8b44-4df9d4449766", "sighting_of_ref": "indicator--34442a48-23ad-4200-acc7-faaacb249517", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222d2360-b5db-4eb5-bd62-2221d2ba6cd5", "sighting_of_ref": "indicator--34442a48-23ad-4200-acc7-faaacb249517", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856a1d11-3a4e-4c83-904a-9687f4e86c15", "sighting_of_ref": "indicator--7de7223b-0560-4cdd-b48e-2db0c4849b3b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee82e94-863e-40a7-8f0d-730bfd2a4b8f", "sighting_of_ref": "indicator--0be4428b-01a3-41a6-9b49-839ebac94007", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae00a929-6710-4765-9281-ef944966ee90", "sighting_of_ref": "indicator--0be4428b-01a3-41a6-9b49-839ebac94007", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d37acfe-2971-47a8-8c5c-e287da2de7e5", "sighting_of_ref": "indicator--7538173e-c3ce-4b33-929e-9581df93a4cd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4da499-983a-493a-8330-807fe9e6b235", "sighting_of_ref": "indicator--7538173e-c3ce-4b33-929e-9581df93a4cd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d802d8e7-57a6-4b12-b49a-b39d002de8aa", "sighting_of_ref": "indicator--37b1efed-eb42-4b27-84f0-7b67b882756e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f6ef49-d1e1-493f-b464-40ca15263eef", "sighting_of_ref": "indicator--df64a59f-b2f3-4dc2-852f-4314acbcd8d2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918fb95e-e09e-4b9e-8cfd-22a373577de7", "sighting_of_ref": "indicator--24c0bbd3-40e2-4a8a-82a6-3808d8b06f09", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7a502e-b2fa-4204-89d3-36b96dbaf171", "sighting_of_ref": "indicator--a6f637c2-0a43-4096-965b-69be4300fd3d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d1fadd-cd46-440e-a357-6792b45c957a", "sighting_of_ref": "indicator--07083c49-9078-4a49-879e-6fbeff8966d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2091a28-a2ed-4851-9b0b-5c2d6368aca2", "sighting_of_ref": "indicator--4819a69b-ea5c-4bed-a954-c4d518d67284", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8cbffd-646d-4650-9c1c-87dc1b2c476e", "sighting_of_ref": "indicator--97249c42-5710-4235-ad5d-69bc6433c575", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0ee61d-7057-4340-b2e7-85a4c84b074e", "sighting_of_ref": "indicator--15fc9074-2c5c-49db-b13a-996b766d8500", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48483f00-cc6b-4a5a-aa63-6555a6b6a30f", "sighting_of_ref": "indicator--379e8d95-4228-43cf-979a-22bca7c45083", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e42499-b759-495d-8edd-868f274759ea", "sighting_of_ref": "indicator--1d726d8a-5d4d-47d1-bbe3-f5c9c157d4ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fac7a5-b9b5-44c4-b95f-5dd082d81d1c", "sighting_of_ref": "indicator--cc862b60-949e-4a58-9d1c-c370643b2ae2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a402a0-e81b-4e6e-ba1d-88c167016625", "sighting_of_ref": "indicator--a9773736-2f12-4877-9db9-0375e8136186", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e4de21-52ec-4bdf-b30f-58b4cde1e909", "sighting_of_ref": "indicator--e5f07cba-9578-4a3f-a7e7-88e3dae87bba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd3ab9c-ff1a-47b7-b863-b52907c9e234", "sighting_of_ref": "indicator--8c8f5217-f9e7-45d9-a4bd-fde79eea09d4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd124b7-1067-45c7-8e6b-9a493189cc18", "sighting_of_ref": "indicator--5311d16f-2465-4658-8fe7-733d09d3bab2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f87aae4-d4ca-453c-a6bf-f7b21328e297", "sighting_of_ref": "indicator--1320d6a1-9d2d-467e-b662-1398ded6fc8b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3aeb8cf-41c5-4ece-b6ae-398af04e0fe3", "sighting_of_ref": "indicator--0ef38dc0-05e1-42ab-afb7-5e5e1593327d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8495b4-1561-451b-a016-e1e1c348b0af", "sighting_of_ref": "indicator--a65b3383-00e1-44ed-b622-8a975a1cfa9a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a074f668-f1ff-4c6c-bfa9-9dfeab8a80ff", "sighting_of_ref": "indicator--b8c309c9-6673-4194-874d-2f17165edee9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5306903b-6054-4964-975f-a564b8f6d00b", "sighting_of_ref": "indicator--4e4df957-3030-4835-a45f-10198bd55655", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b3a09f-840d-497d-bcbe-45407dc20989", "sighting_of_ref": "indicator--3819b731-0c7b-4032-97fa-71c218b73dae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153bafbc-74c5-492e-9aa1-6bd45d772d1c", "sighting_of_ref": "indicator--a9ca7a60-a7e6-4d21-beb8-c9e03fe8e1c4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b70446a3-5297-4c33-8f79-c6164a524f1b", "sighting_of_ref": "indicator--49f5bd93-9e36-4619-aab8-cc756ff7e140", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7990db1-7a23-4a1d-ac24-f211cf51b2ce", "sighting_of_ref": "indicator--b0b30ddd-cf42-43a2-b3a2-28f01e1192b7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df3a862-9e4b-4c9e-b252-4136d07bb4b8", "sighting_of_ref": "indicator--6350e2f8-8d77-4b07-9375-527e3055e2c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c570ba5d-04f7-437b-a34e-038108346d2d", "sighting_of_ref": "indicator--35d2d525-f785-4be2-a3ff-dd82746fa9ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e1d56f-b8c4-40ea-aaf9-f94886f435a3", "sighting_of_ref": "indicator--35d2d525-f785-4be2-a3ff-dd82746fa9ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f626d5e-e34e-4bdb-a34a-b0f4031bc830", "sighting_of_ref": "indicator--cda2433d-1b2c-4986-a7ce-a3384f78fa23", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e45f5a-2d94-478d-a2f0-46fe180ee434", "sighting_of_ref": "indicator--cbae73e5-6d2d-49f1-92f7-d8400b9f893b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70e8d5f-a9c2-4c02-8e94-ca7a1f3e6b86", "sighting_of_ref": "indicator--170474da-7806-4bfa-8afb-b274f07eee16", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206780f0-1444-48df-9ed5-577c2390a227", "sighting_of_ref": "indicator--88e26a55-dda9-4238-b4b2-df6af742d306", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23285ce-23a1-466b-96f9-ab1b3be5cc69", "sighting_of_ref": "indicator--33aee222-5883-4ed9-bcea-b9df58eb8d76", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11fa09e-29ad-4891-ab69-8cf201e0cf04", "sighting_of_ref": "indicator--9f698abb-39ec-4438-b6c5-2723a5bf47cf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9994c445-2eff-430b-a730-9a679b630be9", "sighting_of_ref": "indicator--2599c5af-b3d7-41aa-b1f1-3e293dd8f183", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606e4b9f-2c2d-4c95-95a0-a24e43e421db", "sighting_of_ref": "indicator--90aec8b4-e452-49c8-a5ff-74d4521337cf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c28241-9e07-48df-99b5-6f380db4a41f", "sighting_of_ref": "indicator--90aec8b4-e452-49c8-a5ff-74d4521337cf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e86d39-58f3-4b85-b28b-610210b72a67", "sighting_of_ref": "indicator--41ee1890-e185-480b-8b6d-d8531e3c711e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40a9487-6edf-42f2-aad9-51c39f15cfc7", "sighting_of_ref": "indicator--41ee1890-e185-480b-8b6d-d8531e3c711e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9a9e16-8e7d-4ec5-a772-01d9191ee4d9", "sighting_of_ref": "indicator--93b4eba3-59c6-4dac-85e4-047b675838f2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2233dba-94cc-419a-adbf-ac4bdce8f536", "sighting_of_ref": "indicator--8523dfd2-846e-46c5-8b02-4f49c6527034", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951a34f1-49ee-45eb-bff3-2b4b97202322", "sighting_of_ref": "indicator--8523dfd2-846e-46c5-8b02-4f49c6527034", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e9f7c0-ddca-4321-adb7-5868380de01d", "sighting_of_ref": "indicator--c071ea4e-74ad-4762-aa3c-06592c261c85", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e384ad7a-b392-48fc-a930-33d7565ca4c0", "sighting_of_ref": "indicator--5401b91d-ce18-4acc-a509-d42de5ecd7db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433ebfd2-abdf-4e47-bdda-11af031a1170", "sighting_of_ref": "indicator--a49966cc-33bb-4c02-b77a-7d6af7b43220", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc32135a-21b0-4838-9cf1-225b687970d8", "sighting_of_ref": "indicator--a49966cc-33bb-4c02-b77a-7d6af7b43220", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ef85ad-2bb8-4e2e-8de3-0124918f8a71", "sighting_of_ref": "indicator--6e6a233c-bc9f-4807-9ae1-2d117a110b2a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209b2128-91f6-42a7-95fb-94861da9312c", "sighting_of_ref": "indicator--495dcf5c-1efd-4035-b6b6-5ba2f6c0fc79", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad172a5-5f77-495c-ad6c-5460fc3a1a96", "sighting_of_ref": "indicator--495dcf5c-1efd-4035-b6b6-5ba2f6c0fc79", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d7650e-ac29-4f79-88f3-16b901a44670", "sighting_of_ref": "indicator--b8ae6c3d-e770-4ecf-afa5-dfe29f3c9836", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611df051-1ee5-40d8-b639-0063010a3531", "sighting_of_ref": "indicator--b8ae6c3d-e770-4ecf-afa5-dfe29f3c9836", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca84060-0774-4332-877e-823df21cf539", "sighting_of_ref": "indicator--3c851161-b07f-4fdf-b259-997761cc5502", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1683fb-e23c-432a-b558-d9111ada4b73", "sighting_of_ref": "indicator--96f9bbd2-40b6-4557-81d6-95fa3f29e478", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75bc87d-1c58-4a31-87e1-661c4a761995", "sighting_of_ref": "indicator--96f9bbd2-40b6-4557-81d6-95fa3f29e478", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05dabc94-d5b6-471c-a11a-9dd366d11154", "sighting_of_ref": "indicator--255dd24d-a011-4e57-b232-ec801d5ed724", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13f92e2-308a-4d03-a095-b1cb312af231", "sighting_of_ref": "indicator--e22e40c1-a348-4e53-b2cb-5d9a0bd7a2db", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d40d42-9e59-474a-a871-7d7999144d1a", "sighting_of_ref": "indicator--30cfc6d0-4e78-4d08-9ff4-0a2d70fcda48", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a806055-458f-4419-bda0-c4944bb05c99", "sighting_of_ref": "indicator--30cfc6d0-4e78-4d08-9ff4-0a2d70fcda48", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50ac81c-efcb-4cee-b32f-d7fde43e0690", "sighting_of_ref": "indicator--799255dd-eee6-4ef0-878f-c2caa7122bab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68b4ede-df4c-4140-9c96-afbc452084c0", "sighting_of_ref": "indicator--cf4f7097-a375-4be2-8540-d710778e09a0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc76bad-4842-427d-ae89-5ddd9c07ea1f", "sighting_of_ref": "indicator--0c2ce51b-003d-45e0-85ae-c12519a1ea78", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff73a9e2-4930-4420-94ef-1f401fab83be", "sighting_of_ref": "indicator--0c2ce51b-003d-45e0-85ae-c12519a1ea78", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb367af4-5f05-4f43-8d60-08392b9875bf", "sighting_of_ref": "indicator--69711826-fc22-4ad0-b649-c6376c0bafda", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5472535-0c2b-4b52-9f9e-346a9190ae0a", "sighting_of_ref": "indicator--781638dc-1f24-4528-8b92-14326b8f7c5e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c7985f-feb9-4b15-8fde-27d32af9cafa", "sighting_of_ref": "indicator--6639d58f-61ef-4d3b-9cce-5e2ef85264d1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63072a78-87b4-4123-8a27-110651fd6490", "sighting_of_ref": "indicator--4534ef58-aebb-4cbd-b58b-b0eeac4462f4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94174278-fb72-45db-9ffb-5aa4c98533a2", "sighting_of_ref": "indicator--891408f8-d880-4d50-b1f0-c8e35e84ef25", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c87b4d-cb1c-4d78-ae7e-6e192e3e4dfc", "sighting_of_ref": "indicator--66da4137-c2d2-48d9-bedb-dc8cf9b31665", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7390a842-8757-4379-993d-1f33c2028ad2", "sighting_of_ref": "indicator--b4d34b51-c650-4a46-a647-e6ae8b045903", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4feaea-3064-4669-8c5c-d98e6e81a252", "sighting_of_ref": "indicator--b4d34b51-c650-4a46-a647-e6ae8b045903", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673b44e0-4937-448e-b90a-85939027678c", "sighting_of_ref": "indicator--eac592c9-3e17-48d7-a4b4-27d8bcffd8e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e920009-cc06-4123-9de0-9880db0bf35c", "sighting_of_ref": "indicator--9c0daf0e-72eb-4e37-ae32-fd17a5c09dc8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b55f5c-8eeb-4226-b317-ad662839037b", "sighting_of_ref": "indicator--7b4d7c1e-17f0-4a24-b929-94f34e300f08", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e00c213-aa5c-4fdb-8171-9b7ba576ad93", "sighting_of_ref": "indicator--2692f80e-6722-42b8-b2b2-4203734ecc58", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70038c3-61cd-4c4e-9345-9e496aba3fe0", "sighting_of_ref": "indicator--2692f80e-6722-42b8-b2b2-4203734ecc58", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeefa239-51d6-4b20-afd6-a0f1f1cdedce", "sighting_of_ref": "indicator--5f68eda2-8ebf-4089-91ab-0aea820e9b92", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1447e8a3-b406-4ddf-a545-4337b97c0f89", "sighting_of_ref": "indicator--8318ac8a-5da4-403e-b1bf-c12d3eaed04f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7dd0b4-59fc-4f23-9391-6c99b3689229", "sighting_of_ref": "indicator--8318ac8a-5da4-403e-b1bf-c12d3eaed04f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ba6a2c-c11d-4e2c-9475-5eb6191db7ed", "sighting_of_ref": "indicator--37905bae-fc72-40fa-bb26-d3eb82f1c963", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72bf42c-5f0c-4d8c-aa5c-838d183e3013", "sighting_of_ref": "indicator--cbcb2aaa-a2d0-4188-8b00-41998e696ea8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fa9e4f-3781-4a93-ba93-fe7a57eed34f", "sighting_of_ref": "indicator--cbcb2aaa-a2d0-4188-8b00-41998e696ea8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c36f7d3-7e78-4fc5-96af-0d4e9341f077", "sighting_of_ref": "indicator--dca93610-c20e-4c5b-a20d-a3f62e2bca3e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175bfb80-5e33-42be-b2cf-c013974511e6", "sighting_of_ref": "indicator--cc918832-f0ea-4b8e-9e4a-b624c852a77e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a999d3e-e1ef-4c2c-876d-01bcdc277ab6", "sighting_of_ref": "indicator--4eb65ec7-3923-4544-9575-b89e07010253", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88d5bfb-640f-47d4-8186-0192c6c7c0bb", "sighting_of_ref": "indicator--b934a848-f0f7-431c-8fd7-d0aa4833a435", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938e938a-0ded-4331-a9fa-4855dbec2078", "sighting_of_ref": "indicator--6ce66e6b-5d36-47a5-83b6-718f67b1356b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881739be-7548-4175-98fb-213d7458cfa4", "sighting_of_ref": "indicator--b1e7b4fc-b531-4545-8d21-7159fb9cb62f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25438651-c90b-4514-8a6d-56b6ab757fc5", "sighting_of_ref": "indicator--a9c9c569-ab21-4606-9dd8-bd91663b96c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b2215f-d07e-4208-bd45-186c09aabab9", "sighting_of_ref": "indicator--ee50723f-759e-4ad5-a4ba-ce2df34bad6e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6764bdb0-2188-4de3-bdc4-c260bdcecc06", "sighting_of_ref": "indicator--417ddaac-71cf-419a-b3db-48264620d27e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f4dbc85-abbc-4aea-808d-01e2f7f68c9b", "sighting_of_ref": "indicator--830ab7b5-b3e7-45f5-a2ea-425bc232697c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82aaca7-7122-4f30-9c29-19ea61a6a474", "sighting_of_ref": "indicator--7989b8c8-d071-4b24-b123-6b3079268479", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4f4e3b-d885-4c6e-abdb-1c8a3babdaca", "sighting_of_ref": "indicator--65252558-7f2e-468e-9a94-32111510a17a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2845162-733e-466b-8029-a5e58db22d18", "sighting_of_ref": "indicator--65252558-7f2e-468e-9a94-32111510a17a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc5985c-e407-4f2d-8631-e0b7d8afe9cf", "sighting_of_ref": "indicator--f399abb8-2b7e-4271-9fbd-806bda2a0597", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea49c7df-fbdb-487c-9109-987da2a7d490", "sighting_of_ref": "indicator--11fe94cf-8bd1-4a02-8582-512f13a09745", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e4aa8c-ced5-4931-8457-810dea6a3ab6", "sighting_of_ref": "indicator--1b9a8c1f-8a04-4fc6-9e9e-ab035bfcdab0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99f8fb8-1d8c-4020-b282-7f2f3abcdfd7", "sighting_of_ref": "indicator--b1f6f4e7-b270-4efa-b458-4c22d4a76b0e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305b46ac-6abb-422a-8dc8-c5b12750ce4d", "sighting_of_ref": "indicator--4a50e44b-28d5-4af0-a045-621bcf52300f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877e8373-254f-48dc-b1e6-80e3fe0021db", "sighting_of_ref": "indicator--4a50e44b-28d5-4af0-a045-621bcf52300f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4d99f2-9f20-4d14-8c43-432ac7646eac", "sighting_of_ref": "indicator--dda32fc7-5b8e-41b9-9352-66ee47403369", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de30f4da-07f1-466d-b9c9-4635d7fbb673", "sighting_of_ref": "indicator--39a7092a-6675-428c-a077-42c3216f13b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb95564f-237a-4e93-81f5-85005da211ee", "sighting_of_ref": "indicator--39a7092a-6675-428c-a077-42c3216f13b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b18f3f-abc7-43b7-890f-469ba9ab0b45", "sighting_of_ref": "indicator--39a7092a-6675-428c-a077-42c3216f13b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c47b25-c84c-4568-a62c-f7c2177d13c7", "sighting_of_ref": "indicator--840f3568-e91d-42ec-821f-e8413d33a89d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80dad85-7dbd-400e-a80c-36e87a570dbb", "sighting_of_ref": "indicator--83ee47d3-5ea2-4daa-b0a1-b778e2ad3cad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4941b56-cbda-481a-bff2-5c2481e2347b", "sighting_of_ref": "indicator--ff5c1c30-5bc9-4887-9267-1dcf3c92f7ef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9792451d-9323-4ecb-92d9-657485df687c", "sighting_of_ref": "indicator--1c472af6-bb90-40f7-8e69-53ed3625ca2c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6cd4d9-b3fb-417d-a91e-7e480b5d19ae", "sighting_of_ref": "indicator--fe517ac1-1515-449b-9270-55e98baa2e68", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158d2e0d-acb4-44b9-8888-ca2a4d2f6531", "sighting_of_ref": "indicator--f93c61f2-2c16-461f-b163-1e39cd0b561e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013960e3-e338-4836-ae3a-a3cffb877c5d", "sighting_of_ref": "indicator--07b818ef-36e0-48ac-a3b5-45921546d413", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49554e6c-f00a-40d1-874f-1406b191f09c", "sighting_of_ref": "indicator--5c3c4108-5921-43e2-b5a9-6cf911e667db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd74b429-5793-4a2e-8350-a0b218ceebc6", "sighting_of_ref": "indicator--5c3c4108-5921-43e2-b5a9-6cf911e667db", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a93cbf-bb75-45be-b4df-0781c99165f6", "sighting_of_ref": "indicator--09bc52c8-c1ba-47c4-a8e8-4c37bbf733fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33722507-f3cf-468f-b211-600072ffbba4", "sighting_of_ref": "indicator--d538df83-b9af-469f-a506-c2a29701a4aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb1c9cf-a942-4990-8a2f-9b83317929a5", "sighting_of_ref": "indicator--c34e538f-b0da-47d5-9de1-c36d8c7b9636", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd73dbe-daf1-448b-b528-caa3962cc751", "sighting_of_ref": "indicator--cfaea58f-807a-4a38-a4c9-d1b73c845376", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e7dda1-d3e1-4339-9f3d-c5e604c07b70", "sighting_of_ref": "indicator--88bcd1e6-fe60-4e4d-9856-729e47450bca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b8d393-b58d-47be-b35f-ee6bb1f03341", "sighting_of_ref": "indicator--d2961423-68c2-4413-9449-c9a4b81634ea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489f22ad-82da-4dab-9b11-6fa6649f672a", "sighting_of_ref": "indicator--aac4c24b-07dc-41ec-90f4-feed94edc051", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dd6af4-bd8e-4fc5-8424-6b5282ec3880", "sighting_of_ref": "indicator--3c685263-dbd3-4f6a-a158-625c72d1ce43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b345a09e-82f5-44f2-822b-0905d0424a09", "sighting_of_ref": "indicator--dbc47c4b-b625-471d-8752-7abfb3d5c508", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71e6ae5-273a-46d7-8f64-e3cf78219d4d", "sighting_of_ref": "indicator--dbc47c4b-b625-471d-8752-7abfb3d5c508", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d1584f-d7c5-4c6a-8d01-440d40732620", "sighting_of_ref": "indicator--0f3717bb-73db-4dfc-a78b-39af0f76f1fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a02fc2-17c0-4b47-8f10-10abb5a8bce9", "sighting_of_ref": "indicator--300133b4-126e-4460-913d-f243fd61df71", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc10d04-d8f9-4f2f-84cb-52045030a77e", "sighting_of_ref": "indicator--54e9fbf9-024e-4275-ad44-46711e0f36d0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be9605a-8c88-4e98-b1b1-762beb1f58dc", "sighting_of_ref": "indicator--f78a42b8-25d3-401b-a9e7-33532091b5cb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c680fe2f-451e-49dc-8079-f7655c195216", "sighting_of_ref": "indicator--993da817-854f-4996-9d71-263a2ba05f79", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1fe95e-7fd5-45c3-ab3b-36255d130fdd", "sighting_of_ref": "indicator--aef54eb1-4aab-43ed-bafb-bcab83730b18", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023facfd-a133-4446-9615-8f214c05e3a6", "sighting_of_ref": "indicator--581462a8-efa7-4280-be88-ec2318d8b5cc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fc11c1-d98a-4380-9940-b19492e3242c", "sighting_of_ref": "indicator--581462a8-efa7-4280-be88-ec2318d8b5cc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3553ce03-7e8f-482d-9c98-f0ad510d9307", "sighting_of_ref": "indicator--7690e716-2eeb-4134-8d15-d23da7a8b17e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17f4d3e-ce35-4bb6-b3e5-46c1acca30ce", "sighting_of_ref": "indicator--6566af6b-923e-444a-bb86-15d2b6418b33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a887c286-6854-49a8-9206-5ba64101383e", "sighting_of_ref": "indicator--4b8d24e0-eb4f-430f-81aa-6fe319760024", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713af753-b18e-4ed5-a3bf-896d82639e78", "sighting_of_ref": "indicator--4b8d24e0-eb4f-430f-81aa-6fe319760024", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156c9b9b-8084-4e95-be99-cbc03b177892", "sighting_of_ref": "indicator--8bddeefb-e79f-44f3-be89-e5cafdb5dbb6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4447890-58a9-4665-927c-35ed8a9d8952", "sighting_of_ref": "indicator--a7a6bda6-e869-4d93-84dc-80cae834a162", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbb5e01-d7aa-43a6-8e90-027945ff06d8", "sighting_of_ref": "indicator--a7a6bda6-e869-4d93-84dc-80cae834a162", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b4b367-aa5e-474d-9910-ada29f06c8fd", "sighting_of_ref": "indicator--2bda3fe2-8a12-466d-b9c2-556bde36ca8c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6363d7c-2168-4b9f-9d78-4a8322b3a98d", "sighting_of_ref": "indicator--40e0a082-48d7-4ca7-9e11-b4c32903059c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0625e05b-5eaf-43e4-acbc-96e1b4ed99b7", "sighting_of_ref": "indicator--40e0a082-48d7-4ca7-9e11-b4c32903059c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05f016f-4979-4b69-ba99-d99ca9aff2db", "sighting_of_ref": "indicator--931ca838-311e-4bbd-b2bc-778961931dc3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--181bca85-670a-43f4-9716-fef060f1ecb6", "sighting_of_ref": "indicator--0f477515-cfff-4200-bce0-217ae9d80fc9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302bfab8-5223-400f-b54e-69c22a1cf4ad", "sighting_of_ref": "indicator--0f477515-cfff-4200-bce0-217ae9d80fc9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35802ad9-0412-4547-a944-2146d95e4b68", "sighting_of_ref": "indicator--a0a90ccc-780a-4f68-a7f8-03e43b281252", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abce703e-6348-4861-844c-7c8414f47f04", "sighting_of_ref": "indicator--b2cd012d-af73-4c4c-95a5-5b004c184428", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0887986-5896-4f2f-a577-64b20cb6b5d0", "sighting_of_ref": "indicator--57006c9b-1302-4bd9-9782-c08109da748a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957ad3c4-d372-4c31-a866-1e60736b4e4c", "sighting_of_ref": "indicator--57006c9b-1302-4bd9-9782-c08109da748a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a818c876-a829-4b81-8118-52e312dc368f", "sighting_of_ref": "indicator--9b1e1897-901c-4025-bdd7-cff5bb3c459c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bbaf72-bc88-4394-8523-b7aac947a1e2", "sighting_of_ref": "indicator--e7d5381e-b176-4922-bfe3-280cb1ee91f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d264b69-05aa-4fd5-a7e5-db2f983bd8cc", "sighting_of_ref": "indicator--19367fa1-dce5-4381-8055-e474a1d448f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fb3e1f-9e42-497a-b4bd-723c8b80b0f6", "sighting_of_ref": "indicator--19367fa1-dce5-4381-8055-e474a1d448f2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27162fb-3d9e-4e4a-bfb0-78a51d1a143a", "sighting_of_ref": "indicator--d9f61bae-743d-48d7-9b9e-742ec8736611", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9033f380-574b-4186-8bea-787070d757a3", "sighting_of_ref": "indicator--16ba7d36-95cd-4d94-a67f-5418dd782a75", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a33241-03b0-4dde-af20-ee77ac5a1fcf", "sighting_of_ref": "indicator--c1d1e9eb-3ec0-4219-aad8-3ed7b0597e99", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3738a7b2-ae88-41fe-a8f5-a522c7b117c5", "sighting_of_ref": "indicator--de908e28-eb77-485e-b851-1a3208d6a5f0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91f8f6e-a941-4a5e-9ce4-ab40098d68ea", "sighting_of_ref": "indicator--f74ea23e-6fe0-42e4-bb49-1fe07db395fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d43f38-e91d-4abe-8562-2c6dc123f1bf", "sighting_of_ref": "indicator--d8cc25ed-b5d4-449a-b76c-2d9a950cd735", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6aead31-50c3-42e3-bbc2-f6799054f67d", "sighting_of_ref": "indicator--37510b56-b3b8-449f-8d60-bd04e2e717ed", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e5f2e1-b764-4195-b7a4-1a99fb04fdf3", "sighting_of_ref": "indicator--db298a9f-c775-4d28-a4ee-0c74735964b2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6c31f0-c1ad-4dcf-9bf8-5bf617f1c1e4", "sighting_of_ref": "indicator--51041f18-ab50-4466-bd2e-4869bcdffb70", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceff6b51-c84d-4c6d-afe7-26633dc32170", "sighting_of_ref": "indicator--b8f60551-29c8-4174-80cf-6aa8ce9ad252", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39ceaaa-0d01-4d8c-96bc-d9ee0d1117a5", "sighting_of_ref": "indicator--959a6d71-24ff-40d6-ac97-0b1dfaeb8f34", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae88d48b-2077-4206-a213-afcc38d742e2", "sighting_of_ref": "indicator--959a6d71-24ff-40d6-ac97-0b1dfaeb8f34", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc994e3d-6b70-4a38-b3e8-842c0df55bfd", "sighting_of_ref": "indicator--54488d2d-98ac-4b82-8107-72809d574c7c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23202989-b468-469a-8f5b-ef61a44b3934", "sighting_of_ref": "indicator--ae780e66-8478-4f88-ad81-8b902921d134", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d098cb0-8002-43ae-834a-6f99b22efe9a", "sighting_of_ref": "indicator--d1b21e92-5242-4328-ac1b-95d03ef8d421", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446f1d09-5b52-4b33-8fd4-39bd026e7ab9", "sighting_of_ref": "indicator--d1b21e92-5242-4328-ac1b-95d03ef8d421", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac6fbbf-6697-4870-9dfc-b429fed074c1", "sighting_of_ref": "indicator--35370196-dd63-4095-82b7-8fc4f6ac55dc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c33c983-a9e4-4934-aaa8-2e1ebbc43a2a", "sighting_of_ref": "indicator--f6ff1845-1528-46b0-a7dc-6f782967f563", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaae6eb-cd94-4f3f-97b6-944e1cb756c4", "sighting_of_ref": "indicator--f2b6ea11-9349-4e9f-90f1-cc123c676124", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce362d2a-522d-4d71-936e-e9886cfa9a7d", "sighting_of_ref": "indicator--d0f6c115-cd63-413b-8605-45741d015998", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2c3f09-4e27-4757-97df-1d3cd4a44b33", "sighting_of_ref": "indicator--9948d3b0-3a9d-4eeb-97d3-8daa38a442df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d75dcf-3d44-4888-9033-1439d11eddf1", "sighting_of_ref": "indicator--669e9b4e-8357-45fb-b5fd-dc91fe703b5e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c8d987-bcbc-4c2b-89fc-2fa3db8cb1c0", "sighting_of_ref": "indicator--40bbe8de-974c-4b67-a766-f96d862d1ba2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1b6ce0-638c-4430-91a7-5e7051fd4d5d", "sighting_of_ref": "indicator--373d53dc-4bb9-4df1-aa0a-71703e05483a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fca579f-2036-4d44-9a02-7c35ec811c80", "sighting_of_ref": "indicator--70b450c5-87a8-4b9f-aa25-f138e9408539", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895805ba-a983-4408-be7c-854f7ecad342", "sighting_of_ref": "indicator--c7c0cd05-0936-4f1b-b594-515bf91b43c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ed6b43-8c50-4d21-8a7b-5756d45fc9c9", "sighting_of_ref": "indicator--87ac2843-8fc1-4a4c-ab79-cf89224041fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330aac20-1e83-4950-9d4d-f100bc712fd8", "sighting_of_ref": "indicator--d4b4f3bd-b5da-41a7-95b9-3e5f0eedb0e8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ac30d8-061f-4cc1-beaa-a5dcca59d7d5", "sighting_of_ref": "indicator--582555bf-4897-48b1-89d1-c42aff021613", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98d4aa3-876b-4db2-88c8-e25085140d8a", "sighting_of_ref": "indicator--c28c03d0-b34b-42c2-8f8e-83c60236504e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7c1373-48d1-4ae2-b12c-4b352f49a974", "sighting_of_ref": "indicator--d9e0924d-2c91-4639-bc5f-b12c7eaba6b8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1096fa95-cfe7-4755-b10d-e750a438ec24", "sighting_of_ref": "indicator--5e3d3cbe-0837-40e9-bafa-86715cac529c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d222f4-0aea-4328-be85-b02b4b527549", "sighting_of_ref": "indicator--cf43c755-ef2e-40f2-a36e-aa63d69f9948", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9be5927-d04e-4a9d-a190-7b66ab61ed47", "sighting_of_ref": "indicator--949ec033-02d5-4142-ab7d-83861fae94af", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75b8df4-4b37-4f74-8a73-35311ca8aaba", "sighting_of_ref": "indicator--706c181b-6aef-4d23-9c3b-cabfd3f10a18", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdeef3fe-d5ff-41c6-a7e5-5260688775f1", "sighting_of_ref": "indicator--706c181b-6aef-4d23-9c3b-cabfd3f10a18", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa6fd3c-9d53-42cc-8793-26be83ed5995", "sighting_of_ref": "indicator--706c181b-6aef-4d23-9c3b-cabfd3f10a18", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f7c0a8-8ddb-4eb8-8a8d-3e9a5c374018", "sighting_of_ref": "indicator--d737e089-7fbb-44b6-a05b-43386dcceefe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504ea293-75e4-44bd-8f4d-fc88b2ddd419", "sighting_of_ref": "indicator--0ec06eba-4a49-4653-aeaf-de0ee46009d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b8f012-6fc6-4be2-8e70-f26b81a60835", "sighting_of_ref": "indicator--afd93ee7-c66d-466b-8b5c-be8a82b32e57", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d83169-0906-44ac-a9b2-6f58e3cf3271", "sighting_of_ref": "indicator--a4758bd9-7c73-4947-ba0c-fa377ae18f48", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd01a35c-238b-4940-b32f-3bd518b216c5", "sighting_of_ref": "indicator--a4758bd9-7c73-4947-ba0c-fa377ae18f48", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7bb1e5-a5e5-4aaf-b39a-b34856751564", "sighting_of_ref": "indicator--10f856ca-0822-4181-a859-9732cf488790", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ec8e98-56af-4cc7-8a60-00e35914d796", "sighting_of_ref": "indicator--544d10dd-db71-4522-a306-03f23abd5a28", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d3dc51-7b72-447a-9573-23c9c3562cdd", "sighting_of_ref": "indicator--69098948-442f-4741-9c65-0d7a73383830", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336b9d14-25d7-40f9-a6d8-2407092d25a0", "sighting_of_ref": "indicator--2abae270-8063-4933-9007-6c6ec5f67e0e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bee0c7b-8afc-4776-9226-e95cb25508cb", "sighting_of_ref": "indicator--939d672b-6dde-4fcb-8260-47d910870ad0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0662d580-ef50-4a19-bfc0-2ea52e604fa8", "sighting_of_ref": "indicator--ad9b119d-6e80-48d4-8019-b43f7b6f26e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbc5ddb-33e6-4c62-8baa-e271ab443ccd", "sighting_of_ref": "indicator--6f777d24-f911-4884-b821-a2d17e44280d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17fa9e4-5b60-438a-8e44-f1ec3e21f752", "sighting_of_ref": "indicator--87337483-8182-4fa8-96d8-e4b30d628e83", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d5cf0d-2ec8-4ad9-a1b4-f8fc98a15521", "sighting_of_ref": "indicator--e132be01-a94a-428a-b758-77dfe06c09df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1705c1f4-11d4-45c1-a006-2c88d3d8b9c2", "sighting_of_ref": "indicator--e132be01-a94a-428a-b758-77dfe06c09df", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac55ade8-39ad-4596-a1bb-7094c06822c2", "sighting_of_ref": "indicator--0370f641-1124-4f8e-a0d5-ebb43a28194a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2c5566-c5b1-4c84-8080-0981d1310144", "sighting_of_ref": "indicator--09a6e47b-e764-402d-be98-35004d8a22ad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc0e7fa-901d-40a7-9ee7-b7783fddb5da", "sighting_of_ref": "indicator--b9e09bbe-de17-4dc3-8cf5-b734e1b1c26f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d148feb-2b93-4d23-a3ef-670a9bd9ebca", "sighting_of_ref": "indicator--1b9b57fd-39b5-4506-8285-3f761493f44f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be5fb0e-fdf3-4709-943f-f3daa202cab9", "sighting_of_ref": "indicator--ec8597cc-38b3-42cf-bf03-19a57230d752", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a06ebb-6785-49a6-9bb6-9a2498f26153", "sighting_of_ref": "indicator--ec8597cc-38b3-42cf-bf03-19a57230d752", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7792e31-69b2-48a3-a949-0ead40592c33", "sighting_of_ref": "indicator--889d5ebd-0406-4c27-9493-580276ee9917", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb0a7b7-67c4-486a-ba4b-8caf907f0afb", "sighting_of_ref": "indicator--c529e074-aeb1-458d-8b2b-01ffd34b37b3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b874e5a-154a-4b17-9456-de1fb6ea28f8", "sighting_of_ref": "indicator--f4970755-7df4-4d7b-b8df-3f02e036572b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d57abb3-beea-4116-8a09-7ab87187cb62", "sighting_of_ref": "indicator--93b8663a-fc50-4958-a9bc-5c62f1a3b103", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ae542a-24ba-4c4b-90c7-bd064037271f", "sighting_of_ref": "indicator--e84fceea-265b-4e2b-8b33-f3b4a1349ee7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e55d56-81af-4bdf-9700-f21e60f25b9d", "sighting_of_ref": "indicator--1d1886a2-be1d-4fa1-aa87-dd4fe579a8cb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ecfe87-18f3-4eff-a2c3-d3c1cfa8830b", "sighting_of_ref": "indicator--4f55a36b-f475-4ad9-b042-6bdcb05e9ec3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ad6ad3-1ccc-499c-9d5f-6aaa2f8f7fe8", "sighting_of_ref": "indicator--b68118df-95e2-4ae9-80b1-8cbb86bd56f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9344eb90-6b20-4c6e-9deb-b5649e6671d6", "sighting_of_ref": "indicator--d0a54dbd-5a9c-4191-9416-10a4eaf5748e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1939d575-68c5-478a-97ff-3779f69e5c1f", "sighting_of_ref": "indicator--53a98623-9321-45fa-8a9c-27e226f8c00d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02f6113-d96b-4cee-8890-f947b0d9bd01", "sighting_of_ref": "indicator--7244d053-b5ec-4041-b20e-272bc2ceb0eb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9df46a1-11ca-4f21-9393-2b88820a753b", "sighting_of_ref": "indicator--0e8bb870-67b3-4ec3-8855-f5b1cb2cd094", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef11ced-6831-4e8a-a1ae-882aaaee9595", "sighting_of_ref": "indicator--b9bc3343-5b78-46a6-8e0c-45aea2eb3eb9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc6143c-649c-439d-99ae-c4644763557f", "sighting_of_ref": "indicator--361e5344-ad83-4ca5-97b6-7d291dd0e22f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6df64b-68b4-4c73-a7b5-bd777be97d4d", "sighting_of_ref": "indicator--d544ae84-7781-411c-b9e1-4512d51d59ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d913e5f-c70a-49fc-83ed-88e6aa978386", "sighting_of_ref": "indicator--12a01595-6dce-430c-b088-b0ccbe53889f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07227b42-7ea7-489a-9b8f-36e57bfd9072", "sighting_of_ref": "indicator--c81b2ba1-6869-4fb2-b512-131014de60de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb41ca5-bf1f-462c-8589-35e9051636c5", "sighting_of_ref": "indicator--27e18a62-3730-4da8-989e-a99b7357a292", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4030f849-3bc0-4944-a372-8e52173e81da", "sighting_of_ref": "indicator--d6b4df0f-eb4f-4800-acac-3b0e1b831024", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c981c6-6224-44c4-9c3a-49bd2b2c8ba6", "sighting_of_ref": "indicator--7aab58e0-0dac-410b-8469-9793495b9689", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140a3b33-743e-4ec2-8d23-f825d566bb24", "sighting_of_ref": "indicator--fd994d34-ea43-4d46-a5f6-0b75ced10549", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6fd96a9-b37b-4450-84c9-06a3368e396e", "sighting_of_ref": "indicator--263006a2-850a-4507-a1e5-0e25b2e9db7e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5830589b-12fa-4f77-bcba-5c67d6cc8e15", "sighting_of_ref": "indicator--0e23f551-f4e4-49bf-85dc-d6765705c272", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999b8c8c-35df-49ba-955a-05ef25c14038", "sighting_of_ref": "indicator--0e23f551-f4e4-49bf-85dc-d6765705c272", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb2fbc3-85e4-4d0a-ab80-d108389ea25c", "sighting_of_ref": "indicator--d36860ec-fde1-4ed2-bea3-35560d062ba7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d7c4dc-a48d-4f52-a14a-943a91fe8bce", "sighting_of_ref": "indicator--7403ec09-4b98-41bd-8775-e1f051f87caf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a49e5c0-611d-4aaf-9e15-866c63d6121b", "sighting_of_ref": "indicator--a73248d0-72d4-43d1-bd11-ecce432457a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c2a108-c316-4e35-b085-15d80718dd28", "sighting_of_ref": "indicator--bf430403-c078-44dc-8bde-31eba185b946", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f8cdc3-18f3-4025-805d-d29104bf91a5", "sighting_of_ref": "indicator--fe52725e-d875-43dd-84cc-813c628d205f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd26d76f-2332-48c0-8a27-8ece32b3a8fb", "sighting_of_ref": "indicator--40bcfd48-c5b3-4988-a1e0-31cc7fdf71d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e499399e-68b7-4d44-9607-a5480a934cec", "sighting_of_ref": "indicator--d149427f-a7c4-47c0-ae2e-8aa419f67acc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105499df-1fd1-43c9-bd35-49ab2bb9a84f", "sighting_of_ref": "indicator--d1af568a-c68d-4e23-8549-45ad0b93db28", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1039689b-3b83-4408-838a-343c1141a7b2", "sighting_of_ref": "indicator--08ffa461-5488-4332-9297-9253c0f8baae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1babfe84-afd2-4683-8a46-dc1451f93dc5", "sighting_of_ref": "indicator--58fd52ae-9a88-4ea2-ae01-c1ae227a7b2d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058e6305-b2de-47eb-9cee-48e650b1dd36", "sighting_of_ref": "indicator--c37b970b-2bd7-474c-b18a-1797d04bc321", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6627f76b-fb3a-4d0c-8f38-a8b6abb0f0a3", "sighting_of_ref": "indicator--2421b2e5-1f29-4e7f-8776-6b569b26f117", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd95418-f337-4b6d-b681-57f8b3816bc6", "sighting_of_ref": "indicator--2421b2e5-1f29-4e7f-8776-6b569b26f117", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32564a49-430c-4b35-8c9c-40bd265c7879", "sighting_of_ref": "indicator--b372cdc0-cd8e-41c8-8d5e-da33d4c147e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e8b0c0-2747-4f64-9d31-476541e74eb8", "sighting_of_ref": "indicator--cb1925bb-3f0d-410d-8ce8-f412fc67005c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8145de-0d97-4f95-9378-e9d4c8d60d33", "sighting_of_ref": "indicator--0e9479e0-0603-46d3-ad75-06e78c5be061", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8753c6-7786-45f4-8acf-229152c6c862", "sighting_of_ref": "indicator--93089bf0-9b9b-44dd-aae3-8b35aecf0913", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bdb18a-b974-448a-8b32-47a16c5affdc", "sighting_of_ref": "indicator--d9180778-cb47-49d0-990f-20bb19417ea7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d130fbf9-ab64-4635-b29e-ef2b3f079446", "sighting_of_ref": "indicator--d9180778-cb47-49d0-990f-20bb19417ea7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0a9625-b199-4c09-b67d-40d1f849de04", "sighting_of_ref": "indicator--7630d1ac-8d6b-482f-9427-df9bd66d28bb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175fb302-cebe-4a23-a647-b4bcab3b0892", "sighting_of_ref": "indicator--0a48ad8a-f4ef-428b-8cbc-943d7e5badb5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa6050a-1007-4c61-9507-587cd4fe21ca", "sighting_of_ref": "indicator--5175db5e-8ed3-4105-b2a1-e261053251e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad8e1ba-5993-411e-908b-2e8109be5834", "sighting_of_ref": "indicator--a47f8b83-bbcf-4f67-861f-9069efe73f93", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e138bf9d-21b8-4522-8169-a562a9c420ea", "sighting_of_ref": "indicator--a47f8b83-bbcf-4f67-861f-9069efe73f93", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacbac2c-ca9f-4e68-9aa8-32c573f5315f", "sighting_of_ref": "indicator--95ab32fc-a085-4c59-9453-e077960c799d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d77db9d-adb0-4754-841a-d483b775094f", "sighting_of_ref": "indicator--41af8f66-5774-445a-b08b-d7182b72435f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148f088a-f49e-404c-9080-76bcd12bf384", "sighting_of_ref": "indicator--2519328d-9075-49f6-8087-24b47082f46e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9b22f3-4532-45fa-8698-409c171bcd47", "sighting_of_ref": "indicator--e0d93a96-c3d0-4b4f-a93e-6b4a0de390c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08aaa2c-d864-47e5-a616-45953182ff75", "sighting_of_ref": "indicator--5bc86f17-a471-4b2e-b911-83b410b19ff8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52be26aa-11a5-4456-863f-a712adfaad1f", "sighting_of_ref": "indicator--7d0d1ccd-9107-425c-8d47-3c3852756b35", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854f44a3-56cc-4298-ac76-9d12fd8b1d7b", "sighting_of_ref": "indicator--7d0d1ccd-9107-425c-8d47-3c3852756b35", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b98dcf-d82a-4f40-9b84-62069e097271", "sighting_of_ref": "indicator--bdbd9765-edd1-4ea7-a216-a44bd70dac72", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4738b397-b1b4-44b7-98d2-551167e2a5c3", "sighting_of_ref": "indicator--93fa9c54-71b0-40b7-a55c-0d2c75319f66", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2fa7a0-5a7e-4edb-adc2-9df8b5731e91", "sighting_of_ref": "indicator--039828b8-ba78-4cfe-97b2-879a63499191", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976649d6-4808-4b12-b585-abec1e6eca0a", "sighting_of_ref": "indicator--e9d56114-e0e3-47a7-97f7-5ac44f5dce80", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb905af-86e9-4d8c-a7c0-50ee4fa92fa1", "sighting_of_ref": "indicator--9c6fec8e-a916-45b5-9f65-69d0f4e4df8e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3546c245-6d7a-4ab5-a149-6d9e157e6475", "sighting_of_ref": "indicator--139a783a-0522-44f9-8df7-146660133ffe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2289dbe1-55d2-421c-9a1a-1912a9abfb9f", "sighting_of_ref": "indicator--8d657f6b-d1e3-403e-a7da-4daa3d0cd66a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8a96dde-acb9-4263-9ab0-a9a7b74ff8a6", "sighting_of_ref": "indicator--948dd267-9fe7-4877-bf92-c5426edc2400", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b168b2a4-1564-40eb-9ddc-9ae47f28fc12", "sighting_of_ref": "indicator--0c858e94-4529-42bf-87be-00d4dbd0e2db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6558cc-2d34-48d7-a988-aa772c1cd8f4", "sighting_of_ref": "indicator--ca6c7bf0-257e-4c7b-a71d-f4bca26ca4e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce45e58-a4b9-4757-938e-16e514600692", "sighting_of_ref": "indicator--5ab8b9b5-003a-483f-9c07-cd4d2ea7e17d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560bde9b-8d83-45cd-bacf-133439071f5d", "sighting_of_ref": "indicator--c0484327-fef1-413c-96cd-083702c7233e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee79bf31-9563-4c65-b0c5-4200ba654c20", "sighting_of_ref": "indicator--d3fb1025-3f74-45d4-9383-d99fcdb6a4ed", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ea3958-3142-4721-98c6-cd2666fa2a54", "sighting_of_ref": "indicator--096a381e-fc6d-4a6e-8f84-f770ced74ea6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2464dce-6c7b-4fe5-a0e2-045a45125659", "sighting_of_ref": "indicator--096a381e-fc6d-4a6e-8f84-f770ced74ea6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15a7aec-835b-453b-b4f0-5f330644323e", "sighting_of_ref": "indicator--8e80b386-431f-4e07-8840-92b76bab5ad1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9083fcec-6865-4546-ab96-e271c9f1cfd1", "sighting_of_ref": "indicator--6264c6bf-4a5d-4fe9-acf8-e241fc454469", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f6d8f6-4ff7-4bf7-9e98-48cdd70837a7", "sighting_of_ref": "indicator--c04ec391-c37a-4f74-8984-ab13f282de47", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c66ea5e-b423-422a-8a33-c567c685ab1c", "sighting_of_ref": "indicator--9e15148b-dc9b-40cf-bdf3-1a380cdaaf34", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77f13f0-8ada-4a42-91f9-612265db1c9c", "sighting_of_ref": "indicator--7f79c157-085e-4ab4-b97b-99af0583a000", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedde346-be5e-4536-87c7-b1e9f113557f", "sighting_of_ref": "indicator--7f79c157-085e-4ab4-b97b-99af0583a000", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488c2464-dfb7-4aba-93b7-d723d1cbf3e6", "sighting_of_ref": "indicator--4304cadf-bb1b-4834-a60d-bc51c88390b8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a76cf6a-146c-4850-add3-866077942eb5", "sighting_of_ref": "indicator--4304cadf-bb1b-4834-a60d-bc51c88390b8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3958716-abb9-4bf9-9279-5830536530b4", "sighting_of_ref": "indicator--6b589dc2-e678-43fc-a40b-6bb1c4b85566", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27315c59-f24a-4cbd-81b8-ae5effcda731", "sighting_of_ref": "indicator--ee8228e7-02e9-4467-b095-439653c229e6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c82313-2026-4cb1-9b2f-0efc5e315078", "sighting_of_ref": "indicator--00310917-97e3-4063-a471-bfc3d6181320", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4e02f2-0356-4b96-ac9f-666dc238f7cf", "sighting_of_ref": "indicator--00310917-97e3-4063-a471-bfc3d6181320", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36c9104-9f8e-45e1-bf27-b04eb113b062", "sighting_of_ref": "indicator--4403bbe2-3ec4-48b5-aca8-bcc34dfbc55f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d10ec72-89d3-4f55-88f0-979a3cd1df02", "sighting_of_ref": "indicator--7730eaf2-109e-4e0c-b804-5f2f8c72a66b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de2182f-eb0c-42ec-b1b7-a3b57be70866", "sighting_of_ref": "indicator--3aaf1c04-ac14-48aa-a9d2-20fac5e0d0c3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e3c45f-31cb-43c0-a258-81e12d7a3079", "sighting_of_ref": "indicator--0512b846-83a2-44d8-958b-2f1c09850654", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ca6575-54d1-4374-8968-37064f3f301b", "sighting_of_ref": "indicator--f9f65157-d6a2-4d65-bc69-ab13eee3b13d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c38a26-5874-40a4-a847-da579e2815eb", "sighting_of_ref": "indicator--ecf4887c-1d27-4396-bb67-c7da01d84daf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a65633-219a-4537-90f3-76833d8a1e6b", "sighting_of_ref": "indicator--0b3365b2-29b3-41ff-9266-a2af1fef623b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43611985-2d92-4a7b-b5f4-fe681edfa54d", "sighting_of_ref": "indicator--bbfcf97f-5d44-4fcf-b2a0-343bd984e2db", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739b9aa8-5838-4a48-b555-3ad86794d7d9", "sighting_of_ref": "indicator--0197a51d-b001-4430-a81a-aed27987ca3a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4c413c-ee55-4e25-be95-befbed9fb6a4", "sighting_of_ref": "indicator--7a76b4b7-e951-48c4-ac6d-e6852bf432f5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41588744-6c43-428c-88d1-aae60f56080b", "sighting_of_ref": "indicator--be8bf2e3-f318-4fc0-9d18-ba4b2aa9e660", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc91662f-e66e-4eb8-8919-45201198c378", "sighting_of_ref": "indicator--cbd16e6b-7429-4034-aa8d-c2fe0c9faafe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ec4af5-461b-4b59-885b-4009c52b8d69", "sighting_of_ref": "indicator--cbd16e6b-7429-4034-aa8d-c2fe0c9faafe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27e226e-c813-4e1c-b004-6b661ddab5a3", "sighting_of_ref": "indicator--ce8fc4e4-4141-4cb5-9718-532d48416a4a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7f40b4-9277-49ae-b183-f215c2bbaed9", "sighting_of_ref": "indicator--bf6e59d9-8e44-494d-aad8-24dc2ebabfb2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3b38f9-61c2-4279-ba20-400425b1bd57", "sighting_of_ref": "indicator--d7b859cd-e74c-42d8-9efc-12ee0d8b2293", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9441e3-a8d1-437d-95e8-3c102e0b8719", "sighting_of_ref": "indicator--d7b859cd-e74c-42d8-9efc-12ee0d8b2293", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904c3ccb-8129-43c3-aa98-06834f761e05", "sighting_of_ref": "indicator--8291f469-5d9f-4b00-a567-d3657422fd43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8800f066-8a00-4088-965d-1f606a6f9b1f", "sighting_of_ref": "indicator--33015ed5-b4e8-480f-9ec3-9275b2135eea", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4977ed-d2ae-44c1-ac62-2347267bf537", "sighting_of_ref": "indicator--5bbc63ab-740c-4964-84d0-532f855d28e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968897e3-2c0f-41b5-b0df-bf1763b87ab6", "sighting_of_ref": "indicator--de317a01-4e79-4268-a6c9-21350930d3c1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2def783c-2e49-42e7-9939-a6d8f8eb13e0", "sighting_of_ref": "indicator--e9b1379c-85ef-4693-a56d-49f1a128bf70", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4927596a-13f2-49a7-b4c3-b3265c078d1c", "sighting_of_ref": "indicator--b0353993-9e46-4f86-8319-06e8c91baa7a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7fc1c3-147b-4d09-a742-560311089a73", "sighting_of_ref": "indicator--b63d139c-461e-435d-be33-1d771fdcbdd3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ae38d2-a23c-49f2-a564-9b9eb809b263", "sighting_of_ref": "indicator--3fd54a71-ef74-4098-9e2d-56f2b8e006d5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6255893c-3d8d-476f-a845-56cc732eb4a7", "sighting_of_ref": "indicator--1bc07f81-3dd0-4d72-a469-8e97c81cbedc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c60c79-6368-462c-a1db-f0c923ed6c15", "sighting_of_ref": "indicator--1bc07f81-3dd0-4d72-a469-8e97c81cbedc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124ecdb7-3b91-4040-a929-a672499cf153", "sighting_of_ref": "indicator--ad27e793-7e75-403a-b321-239733273bcc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e9890f-8aae-40d8-bcdf-2b0a480100ed", "sighting_of_ref": "indicator--5a113eda-2d53-48d7-84b1-51f4b7b4a39e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41c4802-fe8b-4df4-8981-f5c2f8c31353", "sighting_of_ref": "indicator--2fddb289-faf1-4798-abae-8ba242dfe7c3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cbf251-bc9e-4394-b96c-defe664dc4b7", "sighting_of_ref": "indicator--5fcb5cb0-7ae4-49e0-b7de-816f1504e487", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4e21f8-f034-4137-8e48-459ff7caad50", "sighting_of_ref": "indicator--de59546f-77cb-4834-8f2d-e04fdbafe97d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d8f722-ec9e-43e0-b820-30cc2ca1ef0d", "sighting_of_ref": "indicator--2e1b4f25-1f92-462e-98e7-201687e8be65", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3246eb-791f-4f0e-a9a6-e9573bba0ddc", "sighting_of_ref": "indicator--54edbb7a-19e2-4833-a1ce-3048a7e87578", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d43797d-964f-4ef9-8182-356141e51b70", "sighting_of_ref": "indicator--54edbb7a-19e2-4833-a1ce-3048a7e87578", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8311c15b-0f82-4ff6-a702-727816b8c9a1", "sighting_of_ref": "indicator--9ecb830c-aa27-46a5-9086-2c97273d4ced", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89fd239-29fa-489e-82de-9100b2bcc25f", "sighting_of_ref": "indicator--9ecb830c-aa27-46a5-9086-2c97273d4ced", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23554ca-4c30-4082-a811-4e45038ce3f0", "sighting_of_ref": "indicator--4d8515c6-87c4-4c4a-9426-b89d5a4a3bf3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d7ba49-aacd-4888-afc2-e185a942c0ef", "sighting_of_ref": "indicator--cf8d99e7-c597-41cf-9148-88a26f297f66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3b8a3d-d79a-48e1-9975-42c94b25cedb", "sighting_of_ref": "indicator--0904454f-9b67-4039-8dc9-ca874a5d3a9a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b0879d-c949-44a2-b5dc-3ac0f1b73501", "sighting_of_ref": "indicator--1e1e9bab-449c-455d-8fb7-cbd981ebad43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4feabb6b-0369-44c1-aae1-a3a9dd9114e2", "sighting_of_ref": "indicator--5b15cece-15ad-4077-a77a-16abffa8b575", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dbf817-4094-4df4-b802-19f2be72f5b1", "sighting_of_ref": "indicator--cabdf815-d366-4418-a56e-8f6daaad03e1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ad876b-9e07-42ca-86c8-a2abd4bef437", "sighting_of_ref": "indicator--48413a95-3270-4be8-ac9f-a32bdd1701a0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7999676-3604-492e-9607-8edc8d19a03c", "sighting_of_ref": "indicator--e4a73c0a-9c86-46f7-95d9-ad7c259fe6da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec0e903-1d80-49a0-a249-8cc85172a8e5", "sighting_of_ref": "indicator--9e0654c2-f4bb-45db-9fa0-60bba86ad4c1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ce0451-b340-48b2-9089-4826d4c4521b", "sighting_of_ref": "indicator--bc39563c-7472-46b9-ac34-7e844e83001c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3763611a-1a66-48fa-9ce1-02d631427a73", "sighting_of_ref": "indicator--38af326a-e064-4798-869d-e75c9eb0a135", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd66197-29e8-415c-838a-27f6dbedf816", "sighting_of_ref": "indicator--c3cc1ea5-9a1f-4778-9c56-8613195ec4a4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4917852e-88e0-4867-a8a7-c41217eddd9b", "sighting_of_ref": "indicator--50650e08-2bd1-4d32-a1a1-7368e55aadcc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a055c16c-0abc-428c-af23-dbc7de3f3d72", "sighting_of_ref": "indicator--50650e08-2bd1-4d32-a1a1-7368e55aadcc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ae1660-7ef9-4e88-9bae-73b7afbad719", "sighting_of_ref": "indicator--a6a18122-c9a1-4478-a57c-616554c82cca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02baa186-b30d-41e4-9291-21a55324702f", "sighting_of_ref": "indicator--64593ae6-ccbc-4713-8188-9dd4a0cd9d37", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d89e7aa-2051-4a1b-b0df-63835c1388b5", "sighting_of_ref": "indicator--f9db2dd0-07c3-4526-8e55-cbb5c329a11c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4baf38ce-fb1b-4269-8cc8-0e89b2158805", "sighting_of_ref": "indicator--cd1ef137-53c1-4e24-ad87-16e4dc235482", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701ab0b2-5eb9-4b28-a7a5-8c3e37760257", "sighting_of_ref": "indicator--cd1ef137-53c1-4e24-ad87-16e4dc235482", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77ff747-1bbe-445d-9edc-fb2c4a5386fe", "sighting_of_ref": "indicator--ea2c1292-0c23-4d3b-bcc0-0274540f9074", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea7a659-39fe-48ea-849b-9b0f1314ebe0", "sighting_of_ref": "indicator--9ee20e89-029a-4597-a799-7838b7c73e4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b90361f-bba4-401d-919e-be23db4e545b", "sighting_of_ref": "indicator--3f8ceb64-3414-477a-a5bb-b40aaa6d368b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30ffb86-2985-4c4d-94e1-5ffd87b92831", "sighting_of_ref": "indicator--3fcc7dde-329a-459c-8cbe-de669c4b8057", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e81473d-ac87-4163-a5a4-004ddd932fe8", "sighting_of_ref": "indicator--9ecd7cc9-dd45-4ddc-8ba4-944d7254eea1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022461bc-6598-4ba5-954f-34dc22e6129a", "sighting_of_ref": "indicator--1f8893e9-d20f-4848-8d9e-56619b3137f8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9f6f93-e5b3-4305-a2d1-4cd45b1a4ca8", "sighting_of_ref": "indicator--62f2ecbb-2111-4581-844d-38d5ef751160", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9985e0-e4e6-44db-a150-83a6f3c99398", "sighting_of_ref": "indicator--62f2ecbb-2111-4581-844d-38d5ef751160", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d2f205-4686-49c0-b38a-5645d265bf3d", "sighting_of_ref": "indicator--11c3bd96-7ed0-4817-a6fa-0ffcfaa67272", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6bfca4-aca0-4b8e-bc36-435c1debbb28", "sighting_of_ref": "indicator--bba157c7-9a1d-42d2-a7a9-2a32e58cd750", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e85d84-7612-4923-ae74-0b4ddc9facc9", "sighting_of_ref": "indicator--9ae17028-0bf8-4972-a359-853d65495249", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cc5a33-d313-4bd8-b445-c8dea346554a", "sighting_of_ref": "indicator--16d3f5d8-ca92-40f9-8c41-9de5d570c5e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea04175d-0eac-48d3-a597-90cfbb10eccc", "sighting_of_ref": "indicator--16d3f5d8-ca92-40f9-8c41-9de5d570c5e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a812921-b671-40e0-afdf-cd2939039ec7", "sighting_of_ref": "indicator--6ad3e483-c9e8-4573-9c5a-633d2945fd9a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fa9dad-7b3a-46ce-a182-9e4b278f8346", "sighting_of_ref": "indicator--6c45e9ff-2aad-4bfe-8be5-6bd0472a51a6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2560d71-7f92-4029-87d9-7cfde815aa6a", "sighting_of_ref": "indicator--701b513a-03a4-46c1-be1e-bfbb7353b56a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03960e9-d116-4ca1-a139-2e6a8db70ca8", "sighting_of_ref": "indicator--e9204090-06df-4eef-9e65-373067f452d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39ef5c3-4f33-4754-aa08-95cef6ab13f7", "sighting_of_ref": "indicator--ee05233d-1f89-40b8-8c97-b263805e8c16", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc120788-c257-48ae-ab44-450a63bda3db", "sighting_of_ref": "indicator--bd8ccdbb-ca4b-4092-a871-0f357d241098", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163d5715-1b60-4b42-844a-274c05d5aeeb", "sighting_of_ref": "indicator--1d986f58-0a4a-4041-93fa-58c7c2a46a40", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7002de3d-2047-4c88-b0d1-560a5087e44b", "sighting_of_ref": "indicator--5b05cbda-6151-4e10-93b1-c32cee2f500d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40482cd-21b1-4b91-b390-21622c245897", "sighting_of_ref": "indicator--dfa900a4-0014-4bee-a8d4-9b9694aa980f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbb3339-bab1-4a22-abb3-9ffa23c0939e", "sighting_of_ref": "indicator--f9eaec65-de62-4f5d-8bed-9d8648c5aa61", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e57d437-a93a-43b3-9abb-89831a33fd5a", "sighting_of_ref": "indicator--9c5ab003-f002-471f-8999-3a0eaa5aa873", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a94208-c2da-4366-9f41-944fb5e0d3e5", "sighting_of_ref": "indicator--5384b34d-d331-46d7-9b36-dcbc904eb4f6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a09c677-e0af-4c3b-9a77-98b580b12d35", "sighting_of_ref": "indicator--68153409-a6a4-4feb-868e-afa13328a360", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c3fbd5-33e1-456f-b178-89fbc1e7ef54", "sighting_of_ref": "indicator--a3f74e0d-18cb-4a32-b637-e9a07d2ebbfa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b901fbb5-ccdd-48fc-9b26-8a587af8a5a2", "sighting_of_ref": "indicator--5517a8fb-c202-476e-ba2e-a12543ba1c48", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a6feda-2a44-4b9f-90cc-6233e5711dfd", "sighting_of_ref": "indicator--00c796f1-9573-4af9-98ed-f7412a864898", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20c853d-db63-409a-b57b-e7173412bb1c", "sighting_of_ref": "indicator--1b38645d-4f7c-464b-86ba-d9d2266e17a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1210d3-a3ed-4456-86fa-84aeb62b6b68", "sighting_of_ref": "indicator--e90fd0a9-129d-4d57-b472-5a879356ea9f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee6981a-2142-40ad-b845-608d05d1bcec", "sighting_of_ref": "indicator--70873a00-7e28-4878-a0a8-a28667ebc408", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fab53ba-bc67-4029-9349-a7030b9456fb", "sighting_of_ref": "indicator--36a9ce0b-2fdc-4c8f-af5a-3d3e0ca8d4b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54dd91c4-b2de-4886-a1de-a000967b6139", "sighting_of_ref": "indicator--29943c39-b996-49c8-a932-67ba831d3576", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55a590c-c953-4cb1-af79-4b248714a9fd", "sighting_of_ref": "indicator--41c5bd27-753e-4ed4-84bb-a9f3f970ddc6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4de7219-f054-4ca8-9476-70b85932e223", "sighting_of_ref": "indicator--76957aab-574b-4ce9-87af-b3e7690e1da6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd2019a-0ea2-465e-9ada-d65d4ca41363", "sighting_of_ref": "indicator--76957aab-574b-4ce9-87af-b3e7690e1da6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae249b3-c899-4d15-8d71-8c137336e9ca", "sighting_of_ref": "indicator--fb5b3453-3cc3-44b6-8775-ce5f70afcd4e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5ef08d-37c2-4145-be4b-b48013f10cee", "sighting_of_ref": "indicator--fb5b3453-3cc3-44b6-8775-ce5f70afcd4e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d762741-89fe-418b-ab88-ce27c812f834", "sighting_of_ref": "indicator--d4903a96-558a-4ab8-b593-94536f193878", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a489ee0e-174b-46fa-a4e9-048cddc77f99", "sighting_of_ref": "indicator--d068ce37-92ee-4e79-abd3-3031c1148256", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166a3b23-0ddc-4fc6-9931-f983aac5faff", "sighting_of_ref": "indicator--4cc1aa6a-9e01-4264-ab0e-24b816566db7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbf9885-f4da-43db-9440-820c67d9070e", "sighting_of_ref": "indicator--d904abee-6d4c-4d57-b2fe-cc72cc6be605", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d4769d-222b-42f3-a826-361cb326426d", "sighting_of_ref": "indicator--598cab08-0140-4e60-bb9b-8f82b0af7bfe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924e94da-34e7-480f-ba64-5be1c42578eb", "sighting_of_ref": "indicator--9129f7d9-2d05-4301-be50-09b4019c895e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b884e7-f575-4bef-ab40-196c42e95afd", "sighting_of_ref": "indicator--9129f7d9-2d05-4301-be50-09b4019c895e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a3f033-de48-43fe-a886-a0fe2aba41b8", "sighting_of_ref": "indicator--7806e909-292b-4df9-8c1c-43e0b1ad666d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d1f184-74fa-4703-af02-e3cf8e7c4b97", "sighting_of_ref": "indicator--0ac46403-099a-4190-9c1f-2d72e06f9a62", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f1dc18-62f5-480c-8c6e-81f3394e0ee7", "sighting_of_ref": "indicator--2e23bd19-a793-4602-8b64-bdb8826d1690", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b766dc5-a3b8-4fc1-8b0b-9b27007f5459", "sighting_of_ref": "indicator--edb42335-2c50-4ca9-a745-b2dec6c74194", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a037dea-33f5-431c-a361-34e244b80a9b", "sighting_of_ref": "indicator--70988426-73df-4c38-84d8-6f5111a6310d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076e62da-07f5-4478-af7d-b61b6ea91e38", "sighting_of_ref": "indicator--3f4dbf1c-eea5-49d6-ba2d-f287edf4a736", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0239f278-a504-4fc3-b008-3e3cc3ca7b6a", "sighting_of_ref": "indicator--9557f1f4-cd8c-4c64-8797-0e4a1b9a081a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cc41c3-7b36-4d80-80f6-50de4d1031b4", "sighting_of_ref": "indicator--cdd3e4c4-fc6c-43a4-a9e6-65b0672f51f0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600fc86d-6030-4d21-800e-c308f2e98fa2", "sighting_of_ref": "indicator--a93b5ae3-c4b2-4f1b-8060-f0d35f8d0947", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98236ac5-3c85-4607-869d-d140995e04cf", "sighting_of_ref": "indicator--bd927eda-32a0-48e8-8e45-26b05bb37d09", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1caefed9-a916-45db-a376-074f394bc885", "sighting_of_ref": "indicator--8c4f8f93-2647-42c2-93a3-c13da8346e0b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec544ca-af2b-4929-a8cc-3d94e12c203d", "sighting_of_ref": "indicator--0f8edc7a-3efe-4cc6-b1cf-c25e1bda40b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca6cc93-1149-48cb-994f-1390827f9405", "sighting_of_ref": "indicator--0f8edc7a-3efe-4cc6-b1cf-c25e1bda40b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af70e030-5ce5-415a-bbdf-79fbd4a94366", "sighting_of_ref": "indicator--9680f239-220b-44f5-a271-0493265d4407", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3528c6f2-f9e1-4af0-98c6-9dad04c40dc6", "sighting_of_ref": "indicator--9680f239-220b-44f5-a271-0493265d4407", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a440bf1-c1c2-444e-90a9-146e329628d9", "sighting_of_ref": "indicator--716923da-30f3-4be6-9b25-79cfaccfa8e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a2b3c0-0d32-4e0c-83cf-b8d4be2ca00d", "sighting_of_ref": "indicator--716923da-30f3-4be6-9b25-79cfaccfa8e7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044ca754-7887-4c7e-be59-d61f32089d59", "sighting_of_ref": "indicator--c780b06b-42f8-45ca-8167-d00cc3bbf6bf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1d1e81-b81c-43ce-bc8f-6788fb7790a3", "sighting_of_ref": "indicator--cbf4900a-92be-4a84-a3b2-a1e571383d24", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8048e825-13fc-4464-8e21-be607176aabd", "sighting_of_ref": "indicator--4544007e-9128-4885-ba93-ff1d13fe2af9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751485f6-7492-4ce2-8fc0-5011c241b853", "sighting_of_ref": "indicator--2030ca0b-f8e0-42ea-a861-9d53ac4d240f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f38608-4e78-4b30-ad8c-407f95de3b1a", "sighting_of_ref": "indicator--9e53210b-3c1d-4904-a99b-9019eb601216", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbb2abf-6f2b-4664-a241-fa0061e34a22", "sighting_of_ref": "indicator--e19140d3-decc-4061-9155-5df15d721723", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a308ff-1425-49b9-bd56-110305ce723c", "sighting_of_ref": "indicator--12eb0c67-e49e-47cb-8286-14be024ed3f3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214a7bce-5544-4480-ab5d-5d393e1701bb", "sighting_of_ref": "indicator--e40ed959-d6de-40c5-9d6e-fd506ed30ea1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d267f9-7fa5-4943-abf4-02b9d7912dc4", "sighting_of_ref": "indicator--41bbbe75-510d-4162-8d51-99ba9042eea2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3ff0b8-207d-45f3-b4c8-9ccebc2e6ed4", "sighting_of_ref": "indicator--41bbbe75-510d-4162-8d51-99ba9042eea2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050a5dbb-c7a8-4f78-8451-b6149a0d94ac", "sighting_of_ref": "indicator--9887a4d6-ab8c-4ab9-9b23-c268b5e92414", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82112217-30a5-4d57-963c-480ead16addb", "sighting_of_ref": "indicator--0f454124-6b21-4a06-b688-4c1aae59369d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5624b7-1bd8-413f-b707-2ec41349d4a4", "sighting_of_ref": "indicator--48402995-c464-4952-b711-8876fe35bc20", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173faa97-aa95-4093-a08d-71a48fcf9c01", "sighting_of_ref": "indicator--c6f8bf44-e9dd-40aa-a6b8-3a58c5d150dd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab7e847-4eaf-418d-ba91-bd556a767017", "sighting_of_ref": "indicator--c3b8c0f5-82b3-4fc5-bb31-0e66ad263cd5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da23098-58d8-4182-bdfd-b953171beb62", "sighting_of_ref": "indicator--65145536-a0c1-4e38-b216-90156e3d58e5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b566dbe-0b19-45aa-87f5-c4f125d1aa55", "sighting_of_ref": "indicator--f332e0c1-ef40-4a82-9ab5-790fc4dfe816", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8065bd35-8836-4860-901c-dfb51a510af1", "sighting_of_ref": "indicator--f7369fcd-6b4a-4643-b150-276d1145b8c0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fd2db1-b1bd-4b70-9c9d-4a86159e80ca", "sighting_of_ref": "indicator--9dc45f5a-80c6-4aba-aaac-9c8179fca978", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3acfbe-34e9-42f7-8fac-e1db3f356b0d", "sighting_of_ref": "indicator--3baa125d-ea8c-41fd-89bb-a6911e49ef28", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54178997-e149-4eda-8bd1-4e6786be1621", "sighting_of_ref": "indicator--a1587c9a-fe6c-4d4a-8b50-c9ea23a4e631", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5e58b5-4741-4add-a473-9b2dba8f208f", "sighting_of_ref": "indicator--33374c55-4391-45e9-85c7-33d2477394b4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecf6fec-7930-4868-a414-c3d35d00e92d", "sighting_of_ref": "indicator--8dc28ce2-d27a-41a8-a76e-69d7a9bd439f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e8f0fd-c15c-4165-aaff-555c1d90bb24", "sighting_of_ref": "indicator--8dc28ce2-d27a-41a8-a76e-69d7a9bd439f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37191f7-8f55-46a5-a8f0-8202549af995", "sighting_of_ref": "indicator--b3a12450-ffcc-4062-89cb-b721430f119e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ac2f71-ef07-499b-a7d8-1c839739737d", "sighting_of_ref": "indicator--edd49e26-95fe-4283-9884-05e6b33a874d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a376f87-664c-4e17-9a95-3bc50ccf358c", "sighting_of_ref": "indicator--6f5152a9-7d32-40f5-8cea-555c3e693756", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48ca326-8715-4058-ba8a-df4e14ea05dd", "sighting_of_ref": "indicator--e07f1aef-2c39-4f68-96cf-3673684b218c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30484aec-c083-478b-afaf-399fdfc409bc", "sighting_of_ref": "indicator--396be34f-8af3-4f3b-9e12-c1b4a6ec2018", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f689b44-24e8-4840-8e69-1abf9322abf6", "sighting_of_ref": "indicator--05d3d365-7f71-408b-a149-9d1d82812b01", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9400b0bc-8032-4c2a-8dde-392f9c880c68", "sighting_of_ref": "indicator--dc37d2b3-7e46-4339-9df1-459a11bc7e33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4aef241-a87e-4a9b-8d7f-2ca98cd95dfe", "sighting_of_ref": "indicator--dc37d2b3-7e46-4339-9df1-459a11bc7e33", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f33dce-a8fb-4b5a-b496-9b536a852bce", "sighting_of_ref": "indicator--7978ca96-99f7-4d28-bdd1-9f34550b8910", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daae4a20-0f3a-4cec-b44b-7f7a2f71ac0f", "sighting_of_ref": "indicator--232158a0-6c7f-4d2b-97f5-87a3357f7b8e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41395c4-4e9a-484d-921f-2aef1a30d041", "sighting_of_ref": "indicator--0a574bbf-69d1-4e9c-b963-cdbe6eceee10", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c763e7-8445-4702-bf2e-6e8db2f95aae", "sighting_of_ref": "indicator--4bf784ba-dfba-4216-95a1-76ee8e1c28d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83004186-2ad8-4d6e-8dbe-05d9cee050d6", "sighting_of_ref": "indicator--4bf784ba-dfba-4216-95a1-76ee8e1c28d4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6f60df-438b-4ffe-838d-ce838ebb581c", "sighting_of_ref": "indicator--7e3c8517-9959-468d-affc-2f9b95820c14", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c88d8c2-5255-4741-9208-ff69d1098240", "sighting_of_ref": "indicator--7e3c8517-9959-468d-affc-2f9b95820c14", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24e1497-8905-4328-961c-b5e638577a02", "sighting_of_ref": "indicator--97eb35ec-f233-490c-8d43-f5f992f70550", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f9859f-770b-4b61-bf88-af1283da8cee", "sighting_of_ref": "indicator--e0d7b110-0d8b-48d6-85dc-99ca730fc182", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b0b9cf-9f7e-47a1-a458-2def989b9080", "sighting_of_ref": "indicator--fc8e0723-9937-46d6-b469-5b944c257e21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c96758-08fe-4c84-b072-85cf11907ba5", "sighting_of_ref": "indicator--956415d1-6c84-4150-b055-314152116207", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44d8fce-dc9c-47d2-9503-5e3cdfd0fc5d", "sighting_of_ref": "indicator--fd699378-86c0-4e99-adb6-48d03f693b05", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042ceab4-6e4e-44fd-8949-60b119251fcf", "sighting_of_ref": "indicator--47d514b8-91e3-47c4-bd76-40d89a120563", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764df857-cc19-4907-ac83-2bd47b267ea4", "sighting_of_ref": "indicator--b9cfeb83-b413-425f-a34d-bb60e81ae6e1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303a9690-d537-4be9-83ca-806ee7aa484d", "sighting_of_ref": "indicator--b9cfeb83-b413-425f-a34d-bb60e81ae6e1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c061492-8f43-41b7-a97d-cc1e9bd6b70e", "sighting_of_ref": "indicator--beed8687-3597-4122-9748-b694d725c777", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ca420e-5cd0-46c5-904d-6f6d37c56276", "sighting_of_ref": "indicator--195e843c-f21f-48c9-a897-d22ac3889cb6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e6e645-ded9-40b0-a50f-33f6b73db917", "sighting_of_ref": "indicator--5a5c65db-9637-4f67-a263-7d59e73fb73e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320aeb34-f56e-4e38-ba4d-c7ba3981ec41", "sighting_of_ref": "indicator--5a5c65db-9637-4f67-a263-7d59e73fb73e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c242f8d8-872e-4266-bff3-3928204c5053", "sighting_of_ref": "indicator--5a5c65db-9637-4f67-a263-7d59e73fb73e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d83495-801b-4c1a-84ea-352062c640fe", "sighting_of_ref": "indicator--2cc0d225-07c2-4b70-8e34-e2a4731201ac", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcab5a72-a6c0-4499-b08e-02b7a516fe37", "sighting_of_ref": "indicator--4e1cd528-a535-4e0a-997f-265e5b6a0d53", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd0f22c-e060-4a79-b22a-509e214fa1b2", "sighting_of_ref": "indicator--4e1cd528-a535-4e0a-997f-265e5b6a0d53", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2009361c-cbbf-42da-ad9b-6d94451471b3", "sighting_of_ref": "indicator--597dfff2-6bfd-4f9a-a3cf-a46f5b618619", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e8c337-d236-468d-9eb2-7c34118873de", "sighting_of_ref": "indicator--236d3858-d7cb-434a-9f0b-44ac92b6fdf6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04213e77-f945-47ca-92a4-743cc620f78a", "sighting_of_ref": "indicator--c62bd270-afa3-4ccb-862c-e60b75e4b90e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216fb8d6-17f0-41f0-acc3-5e276c588118", "sighting_of_ref": "indicator--7c523ce2-da85-408e-8187-2ed0a139fa61", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1f06ed-b5b2-493f-ad9f-9ee520185254", "sighting_of_ref": "indicator--0d5becd7-b1a4-420d-a677-bf40daf0cf43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb023f1e-20b9-48ca-bd1b-cb179ecb7c06", "sighting_of_ref": "indicator--0d5becd7-b1a4-420d-a677-bf40daf0cf43", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f9e11a-3f98-4600-8059-14bc68d5602d", "sighting_of_ref": "indicator--0d5becd7-b1a4-420d-a677-bf40daf0cf43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e84625-99e5-4115-8a29-a01c42c4699d", "sighting_of_ref": "indicator--72d38167-bc40-4e68-8492-b7ea0d69de26", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee573278-0803-43f7-ab47-2d6d3143ac37", "sighting_of_ref": "indicator--72d38167-bc40-4e68-8492-b7ea0d69de26", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4344f9f-083a-4c64-b917-e0e3df9881e2", "sighting_of_ref": "indicator--72d38167-bc40-4e68-8492-b7ea0d69de26", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19495df4-c1f9-4af6-847d-0a34dea5df2a", "sighting_of_ref": "indicator--27bed0fd-6377-4f85-9a33-870168517768", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720a54b4-5e97-4f59-8969-8538e3b5bce9", "sighting_of_ref": "indicator--33c0a5a7-e4a9-47c9-be1e-a786fa529401", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae598d3-eea9-4e0f-8902-0d4e107da72a", "sighting_of_ref": "indicator--2ab3a02e-b567-4b02-839e-1b7cdd361478", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729a314e-4b5b-4b46-b2c4-59c76afbb89c", "sighting_of_ref": "indicator--9e6f5218-9d31-4c30-a770-42fb1edf6ed8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a762491-f9f5-431c-b13d-2322046959f4", "sighting_of_ref": "indicator--40252571-c32d-44c4-aa0c-be60d4551a1a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d28fa5-41f8-4783-be17-fd5cc6815c84", "sighting_of_ref": "indicator--f92d646f-9bba-40e8-8527-8a1b2afeb80e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cb8e70-641c-4dfb-b9f4-41638e09a9b4", "sighting_of_ref": "indicator--57aac07a-ee01-41b7-98c0-220867f93fca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bfe09e-f97d-44ae-b464-56d656d467cc", "sighting_of_ref": "indicator--978bd4d8-8224-445a-93f3-3609afe876b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e72a8dc-15b1-4b86-afa8-3c1a750a4e9d", "sighting_of_ref": "indicator--ca45de56-248d-4b16-b03d-cfbecae1c24d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd892cfe-5d18-4f42-ac65-5a2db91ce62a", "sighting_of_ref": "indicator--711f079e-fd0c-4767-8aa9-8832b009f032", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d20dc4-854d-4807-8033-41820a0d467e", "sighting_of_ref": "indicator--8de66ecf-43f2-43cc-a813-05faba21a98a", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b428fdb2-1038-42c4-a89c-6e80812b7922", "sighting_of_ref": "indicator--d9b9871b-85b7-438b-a456-7b0beb20465f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f61ab9-ca9d-4d67-99b6-217288d80169", "sighting_of_ref": "indicator--d8801b1e-9ef2-4208-ba3a-09d1e90eeeb0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257f5e3b-ea8d-45c4-9a6c-c46d69a64b5c", "sighting_of_ref": "indicator--42e33aeb-285c-413a-a617-5cbef67e67d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce5bf11-b426-4d83-96df-5210f546c15a", "sighting_of_ref": "indicator--33d84e7d-e02b-4fe1-9d7d-5393720782a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80b31a1-a2d0-42a7-af2e-0c400179515c", "sighting_of_ref": "indicator--7a8338b2-5d9a-4fda-870f-1bf880279a1f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc379e4-3b4f-4ab8-a721-cf6315fd3021", "sighting_of_ref": "indicator--84e12fcf-4157-413e-96b3-b336233d4e88", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4530b4e-119e-43b2-a969-d8d08da9f91d", "sighting_of_ref": "indicator--64535738-7ba4-4f12-80d6-2ea751964176", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43f41a0-53ac-40f8-a039-2cf2f54ae920", "sighting_of_ref": "indicator--64535738-7ba4-4f12-80d6-2ea751964176", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67456dd0-4b20-45b5-ba11-aac0bdd7514a", "sighting_of_ref": "indicator--64535738-7ba4-4f12-80d6-2ea751964176", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd06d6bb-08fa-46f3-8b41-9e11e82bb43a", "sighting_of_ref": "indicator--7523ad83-863d-4964-925f-4c3070291f28", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886d2cc0-f280-4680-a95a-f9c1dff108eb", "sighting_of_ref": "indicator--7523ad83-863d-4964-925f-4c3070291f28", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f09845-d4aa-44e8-84dc-514183d03ac4", "sighting_of_ref": "indicator--7523ad83-863d-4964-925f-4c3070291f28", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386778ee-9f0a-4f1a-b0cc-295275222e83", "sighting_of_ref": "indicator--d6f3ef85-8e52-47e4-b2b0-7c0d72a2b7b4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17b19b8-406f-4fb8-a2ca-e229532fd839", "sighting_of_ref": "indicator--d6f3ef85-8e52-47e4-b2b0-7c0d72a2b7b4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df929611-1f0d-4189-ad8f-f947d5b6f647", "sighting_of_ref": "indicator--d6f3ef85-8e52-47e4-b2b0-7c0d72a2b7b4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44eaa538-9f6b-426b-b51c-acb265550ab8", "sighting_of_ref": "indicator--00b35f80-2ac4-44f9-96e8-948d1fa87c17", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632503b7-5e39-4696-a371-a8658159a96f", "sighting_of_ref": "indicator--bbe046c7-2bba-47e6-943e-a1c26d76edf3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b7d3b5-7d24-4720-87e6-526ce6484111", "sighting_of_ref": "indicator--a683759e-e398-4fcc-a0b1-39694df16aaf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1754275d-63fe-4495-a253-d9c8e5b4f392", "sighting_of_ref": "indicator--933b36e7-112f-4b0e-9935-2937d1446c84", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc02684-3332-44b7-befa-afe713e291bb", "sighting_of_ref": "indicator--7644486e-4f75-4e56-8e78-77f71c51233c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b51a93-73e8-4f4f-8e9b-edf388cfc149", "sighting_of_ref": "indicator--0aed2ad5-1b70-4252-8b36-59d593e0e641", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c819d28-4897-4b35-b33b-a06223fcc8a2", "sighting_of_ref": "indicator--3b5e5f3a-5437-4b7d-a700-dc78084c7bee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--844ce1c0-b859-4a5e-a0f5-8ae69e422dc8", "sighting_of_ref": "indicator--2a6af2e7-65ab-4463-9a63-ff330268d6f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efd29ac-2077-4533-a262-4f705617afd7", "sighting_of_ref": "indicator--1dea0ceb-48ad-40a1-bc36-bbf86ca223ba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e1fc92-b5b8-4923-8541-47d1ff26deb1", "sighting_of_ref": "indicator--9e2b96e1-2af1-470f-b94f-33d615f46d3b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f568e7-1d31-4601-a95d-32504d02dcee", "sighting_of_ref": "indicator--d642ab81-e5f1-454c-bffd-203970ce605a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455c058d-cbc1-4a0b-a53e-32f50d17110a", "sighting_of_ref": "indicator--bf3737ee-69e5-43fe-b4b7-4b384ee7e00d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c83cfc-5357-4f0d-acdf-4a1bc90564d5", "sighting_of_ref": "indicator--53faf3fd-16a5-49f3-91e2-d9cde30a3ad1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35dfcbe0-4b19-466d-97a8-fd5f44ae8bc3", "sighting_of_ref": "indicator--53faf3fd-16a5-49f3-91e2-d9cde30a3ad1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71d3f0a-51c0-4e1f-9b86-42bebeeab5ab", "sighting_of_ref": "indicator--53faf3fd-16a5-49f3-91e2-d9cde30a3ad1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0ec911-6ffe-4f60-865c-659ffa1c39fa", "sighting_of_ref": "indicator--f2b8604a-a7ea-404a-a2c4-c38e5556be5c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f9c04c-019f-4664-8689-d60ff9cc0a8b", "sighting_of_ref": "indicator--a6ae508c-a994-4942-b4d0-779414d685d9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32adbb33-0570-4ec5-ad79-b0d632e4e8f5", "sighting_of_ref": "indicator--a6ae508c-a994-4942-b4d0-779414d685d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1879618c-a156-4a8e-894a-2afd1a0540d0", "sighting_of_ref": "indicator--458b6fa3-9c1e-4c81-9125-f4be2f2d06a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc761f81-1f0a-49ba-a4d0-4bc06198e3ae", "sighting_of_ref": "indicator--458b6fa3-9c1e-4c81-9125-f4be2f2d06a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28af2b7-d95c-4cb0-a0b6-bf0dc3eb007c", "sighting_of_ref": "indicator--9a389515-68cf-48f0-a862-89ce1b58cf27", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5585ace1-2fea-40d9-a44e-18efe891ac96", "sighting_of_ref": "indicator--2f42b456-b414-4f23-a5b2-e1ad5ec05656", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f421ef87-8228-43e4-a5ef-f1d093aaa8e4", "sighting_of_ref": "indicator--2f42b456-b414-4f23-a5b2-e1ad5ec05656", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2770bd41-4248-4b44-8c2d-69b319b6c760", "sighting_of_ref": "indicator--bb2783be-fd21-4d75-9658-c881ead9ce74", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e625de-62ae-43ec-b71e-04a93176eb20", "sighting_of_ref": "indicator--bb2783be-fd21-4d75-9658-c881ead9ce74", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd73cac6-bb9a-432a-8d81-62a45564f6b1", "sighting_of_ref": "indicator--4b6e8f1c-0f50-439c-a8be-b12af97097ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7016d74-49e2-447b-8deb-f800d7fe0702", "sighting_of_ref": "indicator--4b6e8f1c-0f50-439c-a8be-b12af97097ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf68fe6-5425-4602-afbb-d4d64b2db54a", "sighting_of_ref": "indicator--4b6e8f1c-0f50-439c-a8be-b12af97097ba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27401a90-fbc9-4682-a128-8ba1a2b3816d", "sighting_of_ref": "indicator--c60a7efb-458d-482f-ae42-fb55eda7c649", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5334f34a-d3c8-499b-9f13-c511cbe50ddc", "sighting_of_ref": "indicator--c60a7efb-458d-482f-ae42-fb55eda7c649", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba86b696-91e4-4353-9fff-bf451d8cdd19", "sighting_of_ref": "indicator--f5afb6a3-bfdc-4fef-8e65-ffd0fcaf257c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c005347-59c3-461a-b186-5a306d745ba4", "sighting_of_ref": "indicator--f5afb6a3-bfdc-4fef-8e65-ffd0fcaf257c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a50cfec-74e8-415b-8794-d1cf5ea7cd23", "sighting_of_ref": "indicator--f5afb6a3-bfdc-4fef-8e65-ffd0fcaf257c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f89055d-a486-4bff-b659-369b0b88765b", "sighting_of_ref": "indicator--256d7ac7-8bde-4605-9a2c-c07a56ab393f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5e8eb4-abcc-4706-8bce-efd2dc011e11", "sighting_of_ref": "indicator--256d7ac7-8bde-4605-9a2c-c07a56ab393f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac68f4d2-8186-48c2-851a-0c588918ccf2", "sighting_of_ref": "indicator--10601806-8da4-4159-be6a-fa4e3cf88922", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e331127-6956-42f2-8b67-eaad3acf5099", "sighting_of_ref": "indicator--10601806-8da4-4159-be6a-fa4e3cf88922", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77087c2a-4293-4553-8627-c50bbc80f379", "sighting_of_ref": "indicator--10601806-8da4-4159-be6a-fa4e3cf88922", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9caf033-e816-4acd-b58d-299bff483103", "sighting_of_ref": "indicator--aae835a5-b979-4c49-91c7-6e9b1bb1b8a9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6daa59-bae2-448b-a8e9-ee8d3bbacf17", "sighting_of_ref": "indicator--aae835a5-b979-4c49-91c7-6e9b1bb1b8a9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70493baa-f6ca-4c9a-bf95-6fde449a395e", "sighting_of_ref": "indicator--aae835a5-b979-4c49-91c7-6e9b1bb1b8a9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8515f144-bf04-4b7e-b81f-3fd4ad974c89", "sighting_of_ref": "indicator--b7368c34-9415-4ff6-ab51-e1c09b9369f0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4115df-2aee-4c3d-92fc-be028ea4186e", "sighting_of_ref": "indicator--b7368c34-9415-4ff6-ab51-e1c09b9369f0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b14d7c-51ff-406a-ba9f-e9cfd6d77e7e", "sighting_of_ref": "indicator--8b088189-5a2d-406e-ba3a-8cb5285b7059", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3185b3-9c2d-41f7-a7ec-8aba01be7559", "sighting_of_ref": "indicator--8b088189-5a2d-406e-ba3a-8cb5285b7059", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c483d6f-2834-4bd3-b8f6-bc2f91ca1bcc", "sighting_of_ref": "indicator--2d70844d-a5d9-4499-a67e-5b85a142bd95", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d679e3-257c-4f69-a386-fc29c27cdedf", "sighting_of_ref": "indicator--f5632767-e0a5-4e12-9d98-2b123c4c8833", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e275c74-6a62-4736-a512-fcbca74a17c2", "sighting_of_ref": "indicator--8c1a26dc-619d-4b03-8254-1fb3638840ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3c0659-be91-4895-999b-f949ab21e7df", "sighting_of_ref": "indicator--97845c59-4748-4d6f-915d-c40e8cf1cf7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3305d1d-88c4-4be3-98ca-b815ddacb428", "sighting_of_ref": "indicator--97845c59-4748-4d6f-915d-c40e8cf1cf7f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d524b139-6a62-4299-a177-317d0aa6bb33", "sighting_of_ref": "indicator--75078f9d-494f-4361-9e15-79431e73608c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c9f638-25c1-4f83-8ae0-a585720edc54", "sighting_of_ref": "indicator--75078f9d-494f-4361-9e15-79431e73608c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45d1964-5051-4496-8f86-c88a0893e9c4", "sighting_of_ref": "indicator--336d575e-44e9-4aca-a101-fa8bf0efe8a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aba4752-fc5e-4bcb-ba41-6eea1030bba3", "sighting_of_ref": "indicator--336d575e-44e9-4aca-a101-fa8bf0efe8a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9383d18-ed03-4025-a345-4e1b9b82a86b", "sighting_of_ref": "indicator--6de1625f-ee42-4034-b673-b274cdc81f79", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d050e573-6b53-4073-989f-92ce0e49a788", "sighting_of_ref": "indicator--a09cedf2-da40-4b89-b8e7-62820f3d9c7b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a6acac-9b14-4034-afb9-c078fd6281e5", "sighting_of_ref": "indicator--c96d8ad9-f832-4616-91d8-35025001cc6d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638ba616-b9b4-400a-876b-c030bbd1671f", "sighting_of_ref": "indicator--c22fa35d-6dd3-4d1e-9395-cc54a4543adf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0cffa7f-4365-430c-b1fb-f29a7aaae71f", "sighting_of_ref": "indicator--c22fa35d-6dd3-4d1e-9395-cc54a4543adf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32520b6a-798f-4a72-8798-14f109339197", "sighting_of_ref": "indicator--fc876911-f216-41f0-b299-cc02cf9d1765", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b22998-1384-4c7d-a78e-f8866796c3de", "sighting_of_ref": "indicator--fdc55da4-b03f-4235-8859-407b1a483d1e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65333ffe-bb70-49ab-9899-901489ea86a3", "sighting_of_ref": "indicator--9abcb393-845f-4fb8-b923-8c59480c5170", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e05d0f-876d-438c-baa2-a802a85cad3f", "sighting_of_ref": "indicator--9abcb393-845f-4fb8-b923-8c59480c5170", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1af7e8c-4356-416d-a510-9c044bec618e", "sighting_of_ref": "indicator--9abcb393-845f-4fb8-b923-8c59480c5170", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535f8512-0ddd-448b-be00-070410d56696", "sighting_of_ref": "indicator--06b132ab-68ff-42d8-9b5a-141cdc3817e6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b9eebc-9fca-4f30-b631-3de9712e3850", "sighting_of_ref": "indicator--06b132ab-68ff-42d8-9b5a-141cdc3817e6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0d0859-15db-43be-a320-edd3a3f6bc56", "sighting_of_ref": "indicator--06b132ab-68ff-42d8-9b5a-141cdc3817e6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f73690-7576-491c-9482-e85ddda7abc9", "sighting_of_ref": "indicator--9f5d8f94-b033-4d26-bce0-64fc65d59e3c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae347bb5-369d-4429-8b6b-fc3718400736", "sighting_of_ref": "indicator--9f5d8f94-b033-4d26-bce0-64fc65d59e3c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40551ecb-001a-415c-9ae2-c3bf5f708d13", "sighting_of_ref": "indicator--9f5d8f94-b033-4d26-bce0-64fc65d59e3c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3381c89-6e84-4aa9-ad63-e1169ed32b22", "sighting_of_ref": "indicator--bc58a059-b1b9-49f9-9b18-50b83882229b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2676cb37-21df-404e-b7da-a5898997f71f", "sighting_of_ref": "indicator--547594b4-469c-4a97-bea2-c69d214f2873", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2887932f-4adc-4912-b757-fc913e24cfc2", "sighting_of_ref": "indicator--547594b4-469c-4a97-bea2-c69d214f2873", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab2d428-f810-472e-bfec-4f14bbf04ee7", "sighting_of_ref": "indicator--67442015-0fe6-40c3-98fb-c84a2e1d7700", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3358c608-f099-4d6a-833b-9abce661c053", "sighting_of_ref": "indicator--67442015-0fe6-40c3-98fb-c84a2e1d7700", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ac611d-c78a-4cd9-b308-dabb39d9e7ad", "sighting_of_ref": "indicator--26e9fad8-ca47-4937-9743-fc20de07f737", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509986f2-0e5d-4294-8f4a-1e5a2e17fe3f", "sighting_of_ref": "indicator--885d2604-b6d3-48b7-b97f-69c8c649d9fc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865b2542-dcda-42b3-835b-bb374158525e", "sighting_of_ref": "indicator--885d2604-b6d3-48b7-b97f-69c8c649d9fc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721cd930-ab5c-417f-bce7-58951b1c6d6a", "sighting_of_ref": "indicator--885d2604-b6d3-48b7-b97f-69c8c649d9fc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94e9eeb-180c-431d-b3de-35c28be33d46", "sighting_of_ref": "indicator--f7f9e8c5-9a7e-4b6a-9ef8-6e343d6aee38", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2146371-085e-4342-9699-37371916ba8a", "sighting_of_ref": "indicator--a1054bc0-6ca4-4593-83c4-84db397a6524", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349263aa-3486-485e-ab4f-881fb28d4516", "sighting_of_ref": "indicator--ee70c785-fae6-43dd-9474-94db9bc5fa7d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0a2250-5ecc-4ac1-a60b-8fd742fc7e94", "sighting_of_ref": "indicator--c1ffed92-cbe0-470e-b6d5-ad9f9f1b0e69", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9245df-a93a-4749-b576-829955066752", "sighting_of_ref": "indicator--f8cf1e6e-4c11-41d7-97dd-97b0ff7a3104", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b702c5-ef1f-403d-a87c-db7d1457a77a", "sighting_of_ref": "indicator--f8cf1e6e-4c11-41d7-97dd-97b0ff7a3104", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a18c27-4d73-4236-b353-c3baea30defd", "sighting_of_ref": "indicator--f8cf1e6e-4c11-41d7-97dd-97b0ff7a3104", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdffc6af-54c6-4beb-ae61-2d9bdf20198f", "sighting_of_ref": "indicator--8e97617c-0f40-42ba-9e9e-aff748643592", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe4410d-57a2-471a-9646-38ca849950ad", "sighting_of_ref": "indicator--8e97617c-0f40-42ba-9e9e-aff748643592", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e86643-2750-4a02-91d1-9902fe8866e2", "sighting_of_ref": "indicator--8e97617c-0f40-42ba-9e9e-aff748643592", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd82dfdd-52c1-40c7-ae67-3bcb71ea4a25", "sighting_of_ref": "indicator--0ac581fc-4d4c-4cc8-a0f6-2a5a70c02f81", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef98acca-8582-4b28-a020-620fc910f0e5", "sighting_of_ref": "indicator--1b3f0214-926d-4113-8f02-92e5c3797f09", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64131bc5-2a72-4010-b6eb-897018370d4d", "sighting_of_ref": "indicator--17aec5fb-c07a-40d8-9bee-c0dd3f9e90e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074494bb-4b95-4cf4-99a2-499971dfd6d5", "sighting_of_ref": "indicator--d5ec938e-b32e-4452-98a1-83a105f70e77", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d740982-08df-4d61-bde0-122b0cbe6403", "sighting_of_ref": "indicator--d5ec938e-b32e-4452-98a1-83a105f70e77", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d603b08-55b6-4e23-a885-69c519745656", "sighting_of_ref": "indicator--b710b5d9-cf46-48b5-b5fa-ef9b64195f33", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5a916d-8c02-43e9-9caf-bda6144ce015", "sighting_of_ref": "indicator--f2e2d6da-d082-4840-82ec-f47a52c05122", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0b8eeb-1faa-4086-8d8c-604776017015", "sighting_of_ref": "indicator--f2e2d6da-d082-4840-82ec-f47a52c05122", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfb94c1-1a43-4b2a-af85-5e6eb7c4b81c", "sighting_of_ref": "indicator--21b090ce-bbcf-44e7-8a58-21ccd434a4ce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fee9e6-951a-42b8-b286-8bccdd79bf2d", "sighting_of_ref": "indicator--21b090ce-bbcf-44e7-8a58-21ccd434a4ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba21a9d-ce5d-42bc-a58a-321d3b37744b", "sighting_of_ref": "indicator--b96cb0bb-058b-4283-94e5-0313d43f3365", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee5fdbf-0c00-4452-9614-80295dbcf24c", "sighting_of_ref": "indicator--f9cea918-25de-4810-9551-911478192826", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c57dce-2f8d-43ed-b8f6-a2124bddfdb9", "sighting_of_ref": "indicator--b5316115-f095-4fe0-ae94-18f853ce6e75", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45f1bc4-739e-412a-a432-3e341612a635", "sighting_of_ref": "indicator--38dddb19-8c73-4785-83d9-33ef7a8b43a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f733a5ba-c0d4-42bb-8ce0-8c9739d4ccee", "sighting_of_ref": "indicator--38dddb19-8c73-4785-83d9-33ef7a8b43a8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf37aec-9d84-4d72-89c1-f01ee4468ce8", "sighting_of_ref": "indicator--b9127c99-90ad-4666-8b00-14131698780c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f85cf4-265f-466d-b9b4-72a028f4a1ae", "sighting_of_ref": "indicator--8e9d9d09-87a4-4c01-b244-24e535845cd0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e18c48-de6e-46f5-b3db-2c170a2aff70", "sighting_of_ref": "indicator--8e9d9d09-87a4-4c01-b244-24e535845cd0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98eeafc4-c36e-4488-97c0-493981b17b86", "sighting_of_ref": "indicator--c196116f-501c-4690-a708-c3afacdd7f36", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538d2b51-b585-4694-8233-7c678522efeb", "sighting_of_ref": "indicator--dbc47fa8-2bc8-4a66-b524-577ac6a52832", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0d8e28-e8a0-44bb-b893-2df30a772465", "sighting_of_ref": "indicator--dbc47fa8-2bc8-4a66-b524-577ac6a52832", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d5bf50-b8ce-45e5-8067-c4e357327c9b", "sighting_of_ref": "indicator--05fee406-23c1-425e-bfa6-4dcb263a561c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03ec80f-92ce-4b77-a784-99711ece55c1", "sighting_of_ref": "indicator--05fee406-23c1-425e-bfa6-4dcb263a561c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d5f761-5511-438e-a291-5d08523f5197", "sighting_of_ref": "indicator--05fee406-23c1-425e-bfa6-4dcb263a561c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f45307e-1d32-4f0e-b5ac-9721164b4552", "sighting_of_ref": "indicator--f3ed9897-bdc2-4769-ade9-3418fcc777be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6c03dd-d93d-4f51-8f95-1b360d38cea5", "sighting_of_ref": "indicator--f3ed9897-bdc2-4769-ade9-3418fcc777be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643fffb1-55d5-4592-9e3c-a532afb4984f", "sighting_of_ref": "indicator--8618bc19-ce42-4c44-a1a4-87a284ccaba5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e130a3-48aa-4b60-8ce0-9cf5935b05a9", "sighting_of_ref": "indicator--8618bc19-ce42-4c44-a1a4-87a284ccaba5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2ddb44-5355-4452-9381-6f996150ac25", "sighting_of_ref": "indicator--61ecce48-3aff-47b8-8f81-35f9bc5dc0c2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d0eb3b-b62c-4101-b0e3-e28fa1df77aa", "sighting_of_ref": "indicator--843a14cd-a3d4-4486-99fe-98b2c5d6d1fb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9b297e-3911-4fcf-834b-87eef775ad1c", "sighting_of_ref": "indicator--843a14cd-a3d4-4486-99fe-98b2c5d6d1fb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f94bb7-a94a-4cd6-88b4-5fdd8813a1d9", "sighting_of_ref": "indicator--843a14cd-a3d4-4486-99fe-98b2c5d6d1fb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab372a9-a46f-4abc-a12d-0d801a1d29d9", "sighting_of_ref": "indicator--80319e02-506c-48fb-add3-06f428bb8947", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8960f5d6-6877-458d-ada4-eead69f16c92", "sighting_of_ref": "indicator--80319e02-506c-48fb-add3-06f428bb8947", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14021a1c-80a4-4a4e-94ca-3563878d3285", "sighting_of_ref": "indicator--b50b7cc0-8f66-495e-a4cd-ee915fda3e10", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ef3c3c-ef30-4f95-a423-79a197333866", "sighting_of_ref": "indicator--b50b7cc0-8f66-495e-a4cd-ee915fda3e10", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b7bef4-06a9-4f25-bb42-efb42c6049b5", "sighting_of_ref": "indicator--b50b7cc0-8f66-495e-a4cd-ee915fda3e10", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f23022-6ffa-4935-9589-1daae73a39c6", "sighting_of_ref": "indicator--cb0cdeb8-d05d-45e3-93cd-dae9487e6ad7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06672b2f-c730-424a-97ed-a36a11e0da49", "sighting_of_ref": "indicator--cb0cdeb8-d05d-45e3-93cd-dae9487e6ad7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69506fdb-b334-4b67-a83f-5ba8538971b6", "sighting_of_ref": "indicator--4d026760-9c50-4962-a04d-b44f904ef56e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5d9e85-74c7-4f3c-a0a8-c52138afff97", "sighting_of_ref": "indicator--4d026760-9c50-4962-a04d-b44f904ef56e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ffe8b4-dda7-493f-b9d0-cab5084c6f37", "sighting_of_ref": "indicator--88fd8def-77a5-49bd-8eab-deb103b1a13a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4717d067-0846-4ea9-8377-5713125e4911", "sighting_of_ref": "indicator--8c2bf038-9629-44c7-a577-6ab6fe2964c2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69c272a-3230-4ead-b37c-e59a51937966", "sighting_of_ref": "indicator--9218773a-0af2-4f9e-bab8-4d609ff064b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440170d4-f18f-47b6-ba2c-6f3fd6db7b57", "sighting_of_ref": "indicator--c8dc9d35-7f9a-4b64-a6a7-d7891903abe0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe24b3df-ae62-4aa2-b350-5753ef125adf", "sighting_of_ref": "indicator--8789ec9e-ff1a-4a86-ba18-8c3bd6f08e61", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1729590-2b6d-4c63-867f-51a924f2b20c", "sighting_of_ref": "indicator--8789ec9e-ff1a-4a86-ba18-8c3bd6f08e61", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34eca466-9e8f-423c-93fd-a81b19870ef1", "sighting_of_ref": "indicator--ac5f0069-1f7a-4b05-af5d-34a5bc55bdc2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99dd51e-0817-43e3-8221-7f16133ddf19", "sighting_of_ref": "indicator--17d375d5-46ae-4c15-9b90-fc9075168210", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbb06bb-012b-49a2-a2c0-3797eca2ac5f", "sighting_of_ref": "indicator--17d375d5-46ae-4c15-9b90-fc9075168210", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde1be31-42c5-41bb-9bb2-58d3b99c4b93", "sighting_of_ref": "indicator--17d375d5-46ae-4c15-9b90-fc9075168210", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7ea394-2692-463f-8975-15657b41c8d5", "sighting_of_ref": "indicator--9524c6b7-81b5-4397-814f-7376b362bcb4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cdf24d7-9159-4c62-86b9-c1ce917d5742", "sighting_of_ref": "indicator--83068b10-4468-40d1-9623-75c887d937d8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd24549-3e96-4213-bd54-97433dca2a13", "sighting_of_ref": "indicator--9036a613-7095-4b52-b1b4-e8749515dc4b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec767b6a-8948-4888-bfb4-dceab6e1b1b9", "sighting_of_ref": "indicator--9036a613-7095-4b52-b1b4-e8749515dc4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5867d9-2754-4003-a573-e964725c43c4", "sighting_of_ref": "indicator--9036a613-7095-4b52-b1b4-e8749515dc4b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38afba92-75d2-47bf-a5c2-03b8575ec100", "sighting_of_ref": "indicator--f14ccc64-ff6d-41b1-8bd7-cfebd59d13d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9545835d-3168-478a-aa07-21a25e94fc3b", "sighting_of_ref": "indicator--47970702-22d9-47f8-8f3f-0a53096d30aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02987225-4d55-4ccb-8148-003a09a123ca", "sighting_of_ref": "indicator--47970702-22d9-47f8-8f3f-0a53096d30aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6addd4f-fabe-437f-80fd-f6f48e549a90", "sighting_of_ref": "indicator--abcc144d-755c-4565-afd3-f0fc4d1074a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d9a72f-13e5-4695-bb38-92484f93c07d", "sighting_of_ref": "indicator--c5f26080-b6e3-4e5b-ad1a-7e617875559d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667ffc9c-b330-459c-993b-2abd430430fc", "sighting_of_ref": "indicator--c5f26080-b6e3-4e5b-ad1a-7e617875559d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2873f3-b1e2-44bc-a100-f2818c47f625", "sighting_of_ref": "indicator--c5f26080-b6e3-4e5b-ad1a-7e617875559d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4f0009-9302-4b07-a344-b256f231b117", "sighting_of_ref": "indicator--18794678-6461-4121-bbd5-f719b4881ce0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004a4aa8-a843-474d-adca-fb28bfa90bc5", "sighting_of_ref": "indicator--4ef3504c-6b0e-4857-be27-7cb74fac9571", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2202bca2-d99a-4bc7-bd47-3166b38fa630", "sighting_of_ref": "indicator--f2b5c1c4-3bb3-478f-bdc9-5956169b198f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266753c0-3bd3-4439-91a8-87398b73c807", "sighting_of_ref": "indicator--f2b5c1c4-3bb3-478f-bdc9-5956169b198f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a13b16f-df05-4c37-ab20-26477add57f1", "sighting_of_ref": "indicator--f2b5c1c4-3bb3-478f-bdc9-5956169b198f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0508f338-30de-40f0-8160-5087a5aef69b", "sighting_of_ref": "indicator--8a39e3b1-b3a4-4e8d-b16d-ffd35c956de6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34df4c9-043c-44f8-9c5b-9cba15a90ae8", "sighting_of_ref": "indicator--8a39e3b1-b3a4-4e8d-b16d-ffd35c956de6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a77b4c8-c5f7-4244-b83d-fba6f0cda8f3", "sighting_of_ref": "indicator--74219ab6-52b1-412f-96c4-d426fad66fa6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b77e6fd-2465-49a6-b328-2e943f7a4232", "sighting_of_ref": "indicator--2a2aa242-7149-4baa-b29d-fbea97ebc5fd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbab719-72ff-4603-ad74-4417f5174a2d", "sighting_of_ref": "indicator--2a2aa242-7149-4baa-b29d-fbea97ebc5fd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370baf7a-b1f9-4bca-a504-0c5e3f605efa", "sighting_of_ref": "indicator--2a2aa242-7149-4baa-b29d-fbea97ebc5fd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba5b13e-c075-4ae9-9ff7-4a529d80cbe3", "sighting_of_ref": "indicator--afcb969d-8bdc-4262-a082-e69a245899e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369bf873-b067-4266-9fd0-e7fdad737efe", "sighting_of_ref": "indicator--afcb969d-8bdc-4262-a082-e69a245899e5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8b1a97-f2fe-4130-825d-1b2cbaa539ef", "sighting_of_ref": "indicator--d0da8869-ef70-4095-bebb-8e2670cacb18", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da278bd-af21-4206-96f6-4ffe42fc4173", "sighting_of_ref": "indicator--d0da8869-ef70-4095-bebb-8e2670cacb18", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9567f82-39ea-4942-afc3-36c3fa430e31", "sighting_of_ref": "indicator--d0da8869-ef70-4095-bebb-8e2670cacb18", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549ff64d-e7ba-46f9-97c2-dae0ee09ee6b", "sighting_of_ref": "indicator--0613c588-5a11-4c5a-ab17-a5494b70f79a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7447697a-d112-4e0a-9876-6c7d45bf144c", "sighting_of_ref": "indicator--71872aec-d69a-40f1-b85c-06456c2eda5f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8328d219-873d-40e1-95d9-26df363fc0b9", "sighting_of_ref": "indicator--71872aec-d69a-40f1-b85c-06456c2eda5f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dc42d8-cf52-4bfb-85a3-7b9415c308b3", "sighting_of_ref": "indicator--71872aec-d69a-40f1-b85c-06456c2eda5f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57f5ab7-a946-4f00-8719-8bee9b082fb4", "sighting_of_ref": "indicator--cf7b469d-f783-40ca-b76d-4972a497f2ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69f6783-03c6-4266-a877-393618063a6a", "sighting_of_ref": "indicator--cf7b469d-f783-40ca-b76d-4972a497f2ef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299df604-43f3-4847-aec9-d8c1dc2c89e9", "sighting_of_ref": "indicator--3859f83c-7175-4582-8fb9-d16a90d051ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301eee8b-2f80-498c-9bec-5ad1d9325b30", "sighting_of_ref": "indicator--958d2319-a8f6-4fd8-80ea-0d1ee6850774", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7d5d66-b183-4f89-b257-115bf5a5441d", "sighting_of_ref": "indicator--b9883251-e780-4624-802d-b97716809245", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be58867-81a3-47fa-9ffa-cbefc7ea4fd2", "sighting_of_ref": "indicator--b9883251-e780-4624-802d-b97716809245", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d02c8fd-f306-440e-b9b3-5624edbc5092", "sighting_of_ref": "indicator--6a71a91e-9558-4c27-b5f3-b61f6471f871", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd43ff78-e12a-4fb2-a3e7-8efdca249bec", "sighting_of_ref": "indicator--6a71a91e-9558-4c27-b5f3-b61f6471f871", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b994cb0-6302-4cde-96e7-f262e01e518c", "sighting_of_ref": "indicator--6a71a91e-9558-4c27-b5f3-b61f6471f871", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3752df4-b57f-4e67-adcf-c193c0e5b702", "sighting_of_ref": "indicator--c4844906-171d-4f1c-94a9-34748369369b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e5ea54-3eed-4914-80e1-77de68d48cee", "sighting_of_ref": "indicator--c4844906-171d-4f1c-94a9-34748369369b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a154e0d9-1b26-4749-9ead-4007b2d84f5e", "sighting_of_ref": "indicator--ccac920d-37cc-4fbd-bfbc-84debb5d17dd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6204788c-e194-4daa-b7d7-4a28634450e3", "sighting_of_ref": "indicator--ccac920d-37cc-4fbd-bfbc-84debb5d17dd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c7fb9f-4073-48e4-a810-39443901e186", "sighting_of_ref": "indicator--fa8e57b6-feff-41d6-b2f9-76cf20e719e2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e5ba14-cf57-46c0-a5bf-00014554ed76", "sighting_of_ref": "indicator--74468478-0378-4097-86d0-3b55ac5b4c10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb356c4-1744-4e83-830c-799817a088ca", "sighting_of_ref": "indicator--2be29b25-b602-4607-83ff-91026631ee16", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2609aa00-ecfb-4d68-8d31-31b36fc5cecc", "sighting_of_ref": "indicator--94428743-b654-4b9e-b4b2-fffa6f3b62f1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d52cf4e-b2c4-4226-a41d-695ea2aa527c", "sighting_of_ref": "indicator--ca8ea65b-020d-476f-8e6f-59f99e08a8b2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2aa025-03aa-41e5-8edd-7e4e9847e7f6", "sighting_of_ref": "indicator--ca8ea65b-020d-476f-8e6f-59f99e08a8b2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcb065c-6b5f-40d2-a13b-c86d2acd52e8", "sighting_of_ref": "indicator--ca8ea65b-020d-476f-8e6f-59f99e08a8b2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37ec8c4-7c17-4751-ae17-3f0ae62410f7", "sighting_of_ref": "indicator--ce6d3fcc-de39-43bd-9ae0-0f19d2efca94", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29036f42-daf3-457b-a2ce-b0d4299666f5", "sighting_of_ref": "indicator--f7609165-42c7-4e1b-968f-dcac81dd3ec2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e95060a-5464-4dd5-8c6a-30b5ba77e83c", "sighting_of_ref": "indicator--2da51f89-b0b9-4171-b3d8-4ce96d647b9d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8dccfb-1374-4aad-b646-14b47cf6f892", "sighting_of_ref": "indicator--2da51f89-b0b9-4171-b3d8-4ce96d647b9d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eabe3f3-1948-4844-b227-5fe042a12833", "sighting_of_ref": "indicator--26d2fc58-9905-47f8-a761-577b341873f2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422c3405-cf42-4a8a-a55a-0cd45381e687", "sighting_of_ref": "indicator--2a2fd933-c1a1-45dc-9e02-51f62815b580", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1e4843-b6fe-45ea-8ab3-43e636995a6f", "sighting_of_ref": "indicator--2a2fd933-c1a1-45dc-9e02-51f62815b580", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cede736-836d-4731-a650-cba0a5d9743c", "sighting_of_ref": "indicator--2a2fd933-c1a1-45dc-9e02-51f62815b580", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978b7b58-1acd-4e39-8108-1ca452f67bc3", "sighting_of_ref": "indicator--a9e64044-362c-4c88-941c-722f78f4918c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23abbcc6-daab-437a-bd1d-763e2d2e989b", "sighting_of_ref": "indicator--d5f507cb-fe67-42df-8218-8a77afffe195", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae2ed63-bd2a-489a-96d7-1b0e7556cefa", "sighting_of_ref": "indicator--e48aec0b-68f3-4075-8e16-7acd308fce65", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186a509a-acdf-4f3f-a43e-f1fe9bc4c2a6", "sighting_of_ref": "indicator--e48aec0b-68f3-4075-8e16-7acd308fce65", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4794d5-92aa-4352-8576-b7af86fabd1d", "sighting_of_ref": "indicator--e48aec0b-68f3-4075-8e16-7acd308fce65", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951e94ec-29c5-4762-8f85-a6aefea13dcb", "sighting_of_ref": "indicator--d9dc179d-5d9f-4c7e-b01b-5d448602f23e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1eb8d7a-eeae-4f24-ba84-97809967ca21", "sighting_of_ref": "indicator--d9dc179d-5d9f-4c7e-b01b-5d448602f23e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e9616b-7c32-40ac-b694-b20d62732ae1", "sighting_of_ref": "indicator--babfda81-4a1c-4dab-ba39-9364d019ba66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9e2d7f-1402-4d3c-968d-49940affd8d9", "sighting_of_ref": "indicator--babfda81-4a1c-4dab-ba39-9364d019ba66", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6283a0eb-a6c5-425b-b5ef-aa3fdf20f317", "sighting_of_ref": "indicator--242d6a68-d2da-4162-8af3-293a0900e34a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8507cd2f-e928-4123-a964-d79448643e13", "sighting_of_ref": "indicator--242d6a68-d2da-4162-8af3-293a0900e34a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da331a58-f30c-419f-932b-e899f74337dc", "sighting_of_ref": "indicator--242d6a68-d2da-4162-8af3-293a0900e34a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9532f1e2-904b-4c9a-92a0-e47dd54aa565", "sighting_of_ref": "indicator--e2e01445-4440-410c-b5dd-112eaa28aa94", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9196839-8824-46aa-a41f-1f03d1e0a934", "sighting_of_ref": "indicator--0b99dd6a-8ef1-4673-bf73-b94177f4c554", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6d1193-8a3e-4f21-a919-fc32afc287f4", "sighting_of_ref": "indicator--0b99dd6a-8ef1-4673-bf73-b94177f4c554", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b6aa6d-5878-4db4-8e6a-77da72fcfb2c", "sighting_of_ref": "indicator--0b99dd6a-8ef1-4673-bf73-b94177f4c554", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659db2b8-76f9-40dd-8404-e049e5409931", "sighting_of_ref": "indicator--3dea72c8-4ba6-4640-a748-50e446c5961d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93fc605-8333-4602-b055-d7867ff4b057", "sighting_of_ref": "indicator--1586dad4-0428-485e-8597-0e3c5a1d1610", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6da8074-676a-479b-afd2-2545416436a5", "sighting_of_ref": "indicator--1586dad4-0428-485e-8597-0e3c5a1d1610", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cfd806-c61e-4d3f-930e-dd89a08b23f6", "sighting_of_ref": "indicator--7657983e-a1d0-4e3a-90fa-3d7b914a8554", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4741948d-a7a5-493e-b77e-d958f438fd50", "sighting_of_ref": "indicator--7657983e-a1d0-4e3a-90fa-3d7b914a8554", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e1d9fa-8b39-4b6f-8829-247fbf1789eb", "sighting_of_ref": "indicator--7657983e-a1d0-4e3a-90fa-3d7b914a8554", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f333bcd4-7709-453d-bced-20a8ce221478", "sighting_of_ref": "indicator--0f05361b-69f5-4c17-ab0d-136de7c533a7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9828c944-dc1a-4303-a426-e1ad5e293015", "sighting_of_ref": "indicator--d29888b6-377d-475e-8c6b-a19b76dabf97", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f8361c-b091-4e09-94fa-d16d089ddaaf", "sighting_of_ref": "indicator--d29888b6-377d-475e-8c6b-a19b76dabf97", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557464ce-cc15-47b5-895e-b7ebfa84f05e", "sighting_of_ref": "indicator--d29888b6-377d-475e-8c6b-a19b76dabf97", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d22151b-f664-4e04-b5cd-56868aae90f1", "sighting_of_ref": "indicator--43ec8ffa-0bea-4bc8-9149-dc1bc5e55d52", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8925a22-2fb0-4586-ac01-5733f1376a20", "sighting_of_ref": "indicator--43ec8ffa-0bea-4bc8-9149-dc1bc5e55d52", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f61373-ac21-4a67-93c5-7907fe166e3f", "sighting_of_ref": "indicator--2aecca34-c479-447d-8f5b-4896c9a9767a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9205727-c231-4d8d-8da3-0693d8d88899", "sighting_of_ref": "indicator--2aecca34-c479-447d-8f5b-4896c9a9767a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e32565-c255-4fd3-960f-8257907aaefd", "sighting_of_ref": "indicator--2aecca34-c479-447d-8f5b-4896c9a9767a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601bea13-37e8-4864-a06e-74765fb4c8fb", "sighting_of_ref": "indicator--7dbdb07c-12e2-4f31-b57f-151f02aa8d98", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35dc134-a3a7-42ee-88b3-8296ec40bce6", "sighting_of_ref": "indicator--bc3d55d1-e614-4f44-b9cf-8326524b64d8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a98924d-2907-43ab-94f7-88a7314b0bf7", "sighting_of_ref": "indicator--54917d2e-a5d9-479d-a11e-803dec5fc7ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7826198-9eca-433b-91f9-c169e7579170", "sighting_of_ref": "indicator--54917d2e-a5d9-479d-a11e-803dec5fc7ef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a79db3-67e6-4d48-966e-ba81fe8500ce", "sighting_of_ref": "indicator--54917d2e-a5d9-479d-a11e-803dec5fc7ef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46b6bf5-1c16-4fe7-b721-03422d9e4433", "sighting_of_ref": "indicator--9e050189-fb5b-44ef-b537-5108485bb833", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe48f1d9-54be-4536-a99a-922e35171752", "sighting_of_ref": "indicator--9e050189-fb5b-44ef-b537-5108485bb833", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3185ab30-5c4d-4d07-ad68-7b1590825df3", "sighting_of_ref": "indicator--9e050189-fb5b-44ef-b537-5108485bb833", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128fd800-5837-4cb9-9cba-26920481ca3a", "sighting_of_ref": "indicator--8edcfb87-95e0-47fd-ba25-09e5d0a45aaf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c7536a-f3bb-4208-8755-89967f256269", "sighting_of_ref": "indicator--8edcfb87-95e0-47fd-ba25-09e5d0a45aaf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e13697-4f53-4229-81b4-bb5a04889a92", "sighting_of_ref": "indicator--c0174727-c164-45a7-af8b-e2ebd3cd6aaa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2da3083-589b-4c58-989f-3ac99f4cf702", "sighting_of_ref": "indicator--3e181e36-1a4b-44eb-8e99-208e41bdeed2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacd90a9-363d-4d06-86ad-27c7038c27d1", "sighting_of_ref": "indicator--3e181e36-1a4b-44eb-8e99-208e41bdeed2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afe72db-aaf6-46c2-a153-8e6436dceda2", "sighting_of_ref": "indicator--cc764ba1-3f64-4b65-a1f5-12e2c4290e6c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea60a81-0291-4119-aab3-d7d4e9122b8b", "sighting_of_ref": "indicator--cc764ba1-3f64-4b65-a1f5-12e2c4290e6c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8e7ddd-6101-4d40-a8b1-31b249ad6a33", "sighting_of_ref": "indicator--b1dcf34e-3ea6-426e-8f4e-197d3fb70f2a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bdd725-76b6-4036-9cb9-cca22b274ce9", "sighting_of_ref": "indicator--966199f4-c60f-46eb-ae9f-4b89b3d5808d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc7c610-b938-4c1e-b25f-60be9ba8885d", "sighting_of_ref": "indicator--3339c3a1-ed86-4111-977d-0aa0e11fb6ff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcead86-bc67-44fd-9366-024d6e25fcda", "sighting_of_ref": "indicator--3339c3a1-ed86-4111-977d-0aa0e11fb6ff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004429e7-d1d9-4028-8d6d-ac15c854b6d7", "sighting_of_ref": "indicator--a80c4d95-1858-45cb-a24f-92ee5af73b0e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4aef855-2cdd-4d2f-a19b-bf19634a0f1a", "sighting_of_ref": "indicator--a80c4d95-1858-45cb-a24f-92ee5af73b0e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199f3037-9e4c-414f-a882-882417f180de", "sighting_of_ref": "indicator--289176a6-8efa-4ddd-b2d8-db93b6a6d7aa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a29e5f-af57-434e-b18d-a9817ea185a5", "sighting_of_ref": "indicator--6220ea6e-7fdd-4601-8ada-8026e89e0ebf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b68c276-c5e2-48d5-9150-8aacc9754a82", "sighting_of_ref": "indicator--6bc54bca-af13-4350-b192-1e591e73c6ab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d9d321-0efd-4a2d-849a-089db77a26a6", "sighting_of_ref": "indicator--3f946cce-d112-4a54-ab6b-00763852f8e1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660ff605-a0ab-4aff-b308-c787e99d0ce3", "sighting_of_ref": "indicator--db2e595e-429e-46c3-b4da-cd2fab05bb97", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c83a26-a18a-4795-9442-1536307dcf99", "sighting_of_ref": "indicator--db2e595e-429e-46c3-b4da-cd2fab05bb97", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293e2433-1b13-4010-b776-8e7a6eb05c0b", "sighting_of_ref": "indicator--db2e595e-429e-46c3-b4da-cd2fab05bb97", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ccf9339-a6a5-4e7c-8641-fd37d3667eaa", "sighting_of_ref": "indicator--dd51ac65-09eb-4d7b-afb1-37460d32a479", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21d9c7f-7257-4bf6-8c2b-f04996598375", "sighting_of_ref": "indicator--dd51ac65-09eb-4d7b-afb1-37460d32a479", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91f53ba-dc76-46ac-915c-219137799301", "sighting_of_ref": "indicator--ec656477-7a4d-4dc7-8a39-6ecf436eefc7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b8b88d-daa6-4ad3-8134-6f6331ce2a5d", "sighting_of_ref": "indicator--329505a9-fcfb-4576-985c-15bd594b3f97", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621f8ba8-2d34-4571-a347-631324346ac6", "sighting_of_ref": "indicator--329505a9-fcfb-4576-985c-15bd594b3f97", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf64b682-e41e-4779-b270-e252f5d21a4b", "sighting_of_ref": "indicator--08e75ed8-7369-49e1-8660-7a312301b8ca", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a1df1f-eb34-4625-8e4c-6af0ff4a14bb", "sighting_of_ref": "indicator--4a28c524-e684-404f-9182-64dd07577e59", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d460cfeb-8d20-420d-b5c3-93762a4e2813", "sighting_of_ref": "indicator--4a28c524-e684-404f-9182-64dd07577e59", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9747000-b610-4136-8403-29aad5e18b65", "sighting_of_ref": "indicator--75a937b1-80a3-4d2d-870d-bd4d2ed9b53b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e73792-6d64-4cb6-a9d9-96646872a60a", "sighting_of_ref": "indicator--75a937b1-80a3-4d2d-870d-bd4d2ed9b53b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df11552-c9b2-46a4-807a-adc314e4ed15", "sighting_of_ref": "indicator--71c8b956-27f4-4d77-a76b-c123e941a1cb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080aad3b-0c83-4779-aaf2-b85f7f7be370", "sighting_of_ref": "indicator--e0207232-1ee3-42fd-a2ea-dd4a2f8293a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fced4e8c-8dbd-4a68-81c7-089694d6eb09", "sighting_of_ref": "indicator--e0207232-1ee3-42fd-a2ea-dd4a2f8293a8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76334b30-73a9-4541-94c6-5fce2a8de88a", "sighting_of_ref": "indicator--e0207232-1ee3-42fd-a2ea-dd4a2f8293a8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2587a5e0-d90b-4cc8-8238-681e83668ba6", "sighting_of_ref": "indicator--8884d4e1-ba9e-475d-81c5-740357ef7b52", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3f678e-4814-49dd-b503-feb93c5ae9af", "sighting_of_ref": "indicator--8884d4e1-ba9e-475d-81c5-740357ef7b52", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746d24e3-259d-4925-9e3b-a27a3f5309a2", "sighting_of_ref": "indicator--8884d4e1-ba9e-475d-81c5-740357ef7b52", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25253097-7758-40f1-8f80-6c36c999d321", "sighting_of_ref": "indicator--7aab6d69-43d7-4efa-a632-b4a3e39f5cb7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0452c9-4610-4c4a-9554-e92a5ec58977", "sighting_of_ref": "indicator--f7588109-7759-4cb3-8a35-6bf1d53b689e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088cf553-f591-4fda-adbb-07a92d2670be", "sighting_of_ref": "indicator--79589484-6729-4e2e-b02b-8c5e0f0c9796", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32720e4-c238-4061-b31c-ea7ac944f9a7", "sighting_of_ref": "indicator--c77f6349-d5d4-4b97-b689-39f3bf44482b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e04ba5c-5c5a-4d23-bebf-0c48af44b848", "sighting_of_ref": "indicator--c8c4d356-cb50-4305-b1aa-1536ef72aab7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef15346f-8cc0-4228-821e-e812bd23ea07", "sighting_of_ref": "indicator--a48fb924-dddd-4c3e-8ea6-c477d3cdea35", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b411f6c3-1dc8-4c1c-9a9f-2727c5728a7c", "sighting_of_ref": "indicator--0c417626-5b60-4882-bd1b-f116d296b100", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160e8d16-1d9b-48a0-a4eb-eab3a952b779", "sighting_of_ref": "indicator--8a3d3adc-cd99-4289-87d0-e391266a2328", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a86ca4-af0d-4028-992b-e47a8c5b8a3d", "sighting_of_ref": "indicator--f6bfca96-b28f-4064-b009-d35a4bcbad62", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ed68e6-695d-4fc2-a4ac-80aa3e380d93", "sighting_of_ref": "indicator--f6bfca96-b28f-4064-b009-d35a4bcbad62", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f27cde-caf9-4cd6-8488-acc9d173fbb6", "sighting_of_ref": "indicator--f6bfca96-b28f-4064-b009-d35a4bcbad62", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcd7325-182f-461b-b769-5a1c669370af", "sighting_of_ref": "indicator--d3997656-5c6e-4822-85e0-54123607a5d2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee971a9-c71e-4b12-9f60-2a64e3d3b6a1", "sighting_of_ref": "indicator--d3997656-5c6e-4822-85e0-54123607a5d2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67eb1adf-ce56-4e74-a5b7-6929c83c8132", "sighting_of_ref": "indicator--d3997656-5c6e-4822-85e0-54123607a5d2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371079cc-6021-4f74-be99-6e7b5dc58a93", "sighting_of_ref": "indicator--16e40653-d295-4d91-82b4-1acd281d340a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba26a3c1-194c-4cd3-ab08-bc3b9a4ff80d", "sighting_of_ref": "indicator--aa5c0c08-76b1-4cbb-ae11-43a641e6bcee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84453a1f-e1fb-4491-a118-4467a74157cf", "sighting_of_ref": "indicator--fe369787-011a-4c17-813b-694f1993e8ff", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5695940f-6055-40f3-ae6d-a87999edb0a1", "sighting_of_ref": "indicator--fe369787-011a-4c17-813b-694f1993e8ff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d6f67a-39cb-46ab-ab5e-4d18ad11e3d3", "sighting_of_ref": "indicator--fe369787-011a-4c17-813b-694f1993e8ff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092527fd-48b0-48e2-9139-b5f1892f5706", "sighting_of_ref": "indicator--fda0cb27-2732-4a19-a3f6-b1db1166d253", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dced518e-435d-4900-83d2-c9620602bff3", "sighting_of_ref": "indicator--7b93e84f-6c39-4c53-92af-52e76f5647a1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534c649a-520a-4178-99eb-463ca6cc73f5", "sighting_of_ref": "indicator--b539b1d1-ca02-43ba-a4ab-9fbe45d019d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c92594-4265-450d-b107-43976ffbbd52", "sighting_of_ref": "indicator--b539b1d1-ca02-43ba-a4ab-9fbe45d019d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addefa28-a035-4df7-ac28-ff2b859778d6", "sighting_of_ref": "indicator--aa349588-3416-4391-8768-eb2782552b0f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda181f8-a8ef-412f-9b36-79451e62dcbd", "sighting_of_ref": "indicator--aa349588-3416-4391-8768-eb2782552b0f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc6f65f-173d-48c1-a0f9-b090872f0514", "sighting_of_ref": "indicator--aa349588-3416-4391-8768-eb2782552b0f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8472351-67c0-4f20-85db-1ef81436bf03", "sighting_of_ref": "indicator--3015ca9b-f811-42b2-98cc-9b880e7fdb12", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c34fcb-3467-427f-ba57-47c54aa2fa09", "sighting_of_ref": "indicator--3015ca9b-f811-42b2-98cc-9b880e7fdb12", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213269ec-e4b6-4a62-bf17-c727824b043d", "sighting_of_ref": "indicator--3015ca9b-f811-42b2-98cc-9b880e7fdb12", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eadeb80-220c-49c0-9883-374a3c918ee8", "sighting_of_ref": "indicator--ddb067ff-a1ec-40db-a06b-ec784dc6676b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd06394-f798-437b-94d9-a76c2cada60f", "sighting_of_ref": "indicator--ddb067ff-a1ec-40db-a06b-ec784dc6676b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffbcaeb-fb63-40e8-9f5f-fb2194484e93", "sighting_of_ref": "indicator--ddb067ff-a1ec-40db-a06b-ec784dc6676b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ee4775-ca98-46fe-90ee-37524f9fb4a8", "sighting_of_ref": "indicator--347c7e21-95cf-4291-a678-f1d8feb66c85", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d95d50-fad9-4125-901d-5884ec397859", "sighting_of_ref": "indicator--347c7e21-95cf-4291-a678-f1d8feb66c85", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38bf5f6-437a-4646-b408-e6644662481a", "sighting_of_ref": "indicator--347c7e21-95cf-4291-a678-f1d8feb66c85", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2780c2d5-72cf-4bb5-a287-b9be450245ce", "sighting_of_ref": "indicator--6aa49978-b45d-4fcc-844f-f4e393311ea4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42062dcb-c558-4f16-a4e7-a9d7d504d7f4", "sighting_of_ref": "indicator--6aa49978-b45d-4fcc-844f-f4e393311ea4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b747576a-8628-4f35-8489-6b28df757286", "sighting_of_ref": "indicator--0138721d-fc96-46af-90e0-bfbd9251faa3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb292cf-48fd-41b6-ac58-4c46ca84c6e8", "sighting_of_ref": "indicator--0138721d-fc96-46af-90e0-bfbd9251faa3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfeadde4-2462-4660-b566-678b9cc40aa6", "sighting_of_ref": "indicator--831bd159-f17d-4cff-8204-ff03f60b04af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2429efc-9e0b-4d79-987a-56043ecfd805", "sighting_of_ref": "indicator--c40e96f5-1aea-4511-b356-939a8d4d92fd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4be8508-e355-4415-859e-ea2e4f7a93ac", "sighting_of_ref": "indicator--c40e96f5-1aea-4511-b356-939a8d4d92fd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf1deb1-6e2d-42eb-ba50-992db3112a09", "sighting_of_ref": "indicator--c40e96f5-1aea-4511-b356-939a8d4d92fd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864a88bb-726d-4d19-98a0-e20f70693d0e", "sighting_of_ref": "indicator--74fc6a6f-3eaf-4daf-ba12-5b8a08156d0d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0508806b-28ae-4c00-87db-0fd6b196b935", "sighting_of_ref": "indicator--e970cf25-ba29-4b3a-bfd9-58c564c9fe18", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5644be-8b0c-4656-b9b7-a78cd8018c88", "sighting_of_ref": "indicator--e970cf25-ba29-4b3a-bfd9-58c564c9fe18", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35deb204-8c60-4de8-9d2f-e6b2f7c5dc39", "sighting_of_ref": "indicator--8b77c1b9-5c0d-4d64-b3ae-aae6d29ce8a4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2ff91e-77b8-4061-aa8e-f77afc903a9b", "sighting_of_ref": "indicator--8b77c1b9-5c0d-4d64-b3ae-aae6d29ce8a4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16c622e-937b-40cd-8c5f-6ca5a56133d1", "sighting_of_ref": "indicator--05ae831a-1346-4877-8bcb-6067f532926d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c037f06f-7a15-48d2-821f-585c3fbc5dab", "sighting_of_ref": "indicator--05ae831a-1346-4877-8bcb-6067f532926d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ce6ff0-49c2-464f-bb27-ce4155e19457", "sighting_of_ref": "indicator--05ae831a-1346-4877-8bcb-6067f532926d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab1d89c-5c89-4e19-9d91-f69c9f04d6b1", "sighting_of_ref": "indicator--096e75f3-c45c-4d20-ad33-9c85aff7fafb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9972f18-07b0-48ec-9132-aa3ae9398806", "sighting_of_ref": "indicator--096e75f3-c45c-4d20-ad33-9c85aff7fafb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31c4d62-91db-41f8-bbc4-39fbdfd16d12", "sighting_of_ref": "indicator--62fd8ef5-df31-4028-8383-7428e05f257e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75616c9d-11c1-4458-a29a-5fdbb0932235", "sighting_of_ref": "indicator--d1fe6be4-46c4-44c0-bc73-c416d10a15d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85c4287-0a41-4e8a-9c23-45da7655d0a9", "sighting_of_ref": "indicator--d1fe6be4-46c4-44c0-bc73-c416d10a15d4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc8c5fa-41d1-478d-bd2e-a7ba238b37e6", "sighting_of_ref": "indicator--8b4271dd-2002-4ee7-ba51-67e4d74cba84", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51166dbc-079c-496a-86f3-fb516509ec33", "sighting_of_ref": "indicator--a9bdffd2-8d77-47b3-82db-0430bd4d266d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c4640b-a2cc-49a1-8e5e-66a68aece32d", "sighting_of_ref": "indicator--22d98ba1-ff30-45fd-a02c-680e41024df8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d56bea3-fc77-4998-8a6a-ea797b7011cc", "sighting_of_ref": "indicator--439d52bc-684a-4038-999d-037c8de8aebe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c64cf5-4bda-4879-a866-7c5c4a8ac3d2", "sighting_of_ref": "indicator--e8f528cc-8789-4363-9c81-43123bd2ba03", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984902cd-b0b4-418e-8efa-a8b8cc393bee", "sighting_of_ref": "indicator--8e200930-45e5-47d7-a7bd-54e7cf7e6234", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca7d1fe-e5fd-46b2-9466-fe5b99408f47", "sighting_of_ref": "indicator--8e200930-45e5-47d7-a7bd-54e7cf7e6234", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16356a8e-c803-40cc-86bb-0b4f9babc7df", "sighting_of_ref": "indicator--18c21359-a774-441f-b0ef-b3122aa023f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc6fcda-eefb-4ad1-b778-7d287482a5c6", "sighting_of_ref": "indicator--18c21359-a774-441f-b0ef-b3122aa023f3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0465557b-226a-4f4c-ab37-095fc3b60d86", "sighting_of_ref": "indicator--c7cf320e-4fa5-4db7-b6dc-9aadd93a8271", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349e0f6d-d2aa-42fe-b687-2cf18df1c425", "sighting_of_ref": "indicator--c7cf320e-4fa5-4db7-b6dc-9aadd93a8271", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0706c45c-00df-461f-9614-0969ac6fe199", "sighting_of_ref": "indicator--73b3c910-0f9b-4415-b2b1-5a2d3ecb64e1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d488c1-d4cb-4a36-97d4-8e87cda63d51", "sighting_of_ref": "indicator--f1cc5fb9-21ab-4d64-995c-da176f6c8012", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761e6d7a-8b93-48bf-8dec-be2bd8f6d7c8", "sighting_of_ref": "indicator--9d74ff65-fabd-429f-96e6-8b3821a0f869", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b70c699-8449-43c4-8a7a-c888cf5b1ca4", "sighting_of_ref": "indicator--64af81ca-c5c4-407a-8dd7-c42a61b6db50", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9d685a-b2ec-43be-8ca5-8d0bba0213c4", "sighting_of_ref": "indicator--c9d62d3e-cd79-4234-8c1d-0743cbc945bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bb5563-908e-4728-99d8-2532d0fc471b", "sighting_of_ref": "indicator--b0f6a68a-5ca9-4893-8261-3ffbd7e8a77b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37935b68-bf47-4cc8-8456-7bac84a94ddc", "sighting_of_ref": "indicator--26f581de-a5bb-4f9c-9193-f74fa8798491", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5682b17c-62b9-489a-922b-7e7cc21207bc", "sighting_of_ref": "indicator--bb136ed7-794e-43c7-bd0c-ba08365f7c0f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6299e7-31e9-43f3-bb87-c58cde397b5d", "sighting_of_ref": "indicator--4c5ed5f7-9686-4bc1-8f80-d48f4ca1d106", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c796534e-0c4e-401f-a6eb-752e9e652b35", "sighting_of_ref": "indicator--d5c027cf-63f8-4b02-a841-02e282fd2e82", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b42e3a-b1df-4824-b4fe-ed978886425c", "sighting_of_ref": "indicator--d5c027cf-63f8-4b02-a841-02e282fd2e82", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212b8e65-1e6f-4c2b-bb7e-337af5c5e7e5", "sighting_of_ref": "indicator--1d8e1242-bb0c-426e-8088-67e83c7fa721", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee2ccb0-8978-4917-8f5f-cc5f84aba712", "sighting_of_ref": "indicator--4427c843-4527-4b65-b0dd-702b6c0b2476", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446b8229-a7e8-4f95-b0f4-99bc0d3bb417", "sighting_of_ref": "indicator--2d0ef468-0568-4bd7-b9aa-936ba92a8591", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24c26c7-4f63-4c5f-b9a5-c4f3df6a10de", "sighting_of_ref": "indicator--2d0ef468-0568-4bd7-b9aa-936ba92a8591", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05359ae2-22f3-4a30-b42f-d27ce65903d2", "sighting_of_ref": "indicator--2d0ef468-0568-4bd7-b9aa-936ba92a8591", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745ee5e0-6bb6-4f63-9a13-47182a897bf3", "sighting_of_ref": "indicator--bc7e1dbe-9355-4810-a8f5-227c3d728a90", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65612db8-0d9c-4d87-a2ea-54444aac2227", "sighting_of_ref": "indicator--bc7e1dbe-9355-4810-a8f5-227c3d728a90", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cfac42-52a3-48d4-9b2a-b05162bfbebd", "sighting_of_ref": "indicator--4154934e-809e-4cbf-83cf-da997ccd2770", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981fcf22-9845-419f-a346-b8cd7b741b74", "sighting_of_ref": "indicator--af97d52a-ef7d-40a5-8d85-134536339225", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db132a9-3387-4362-83db-ab407d5a696a", "sighting_of_ref": "indicator--af97d52a-ef7d-40a5-8d85-134536339225", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f979d7ac-002d-4b69-a42e-de26c3578bc4", "sighting_of_ref": "indicator--af97d52a-ef7d-40a5-8d85-134536339225", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5aca65-174e-4b8e-82f1-a206bc7d4230", "sighting_of_ref": "indicator--e5a0e1e0-9de4-47fe-bbc1-21dc98059c41", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386978c0-ddc9-47d9-9f4b-307c1a9c0c4c", "sighting_of_ref": "indicator--1a139d65-a0c6-47ea-8539-86d21047d9d4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a844f79-6fa3-4a02-b8cf-c4f945cfadd6", "sighting_of_ref": "indicator--baca811f-5b42-4ada-b862-8ce17d5c1e70", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc41aae-5bd9-429e-9272-a402bb903f4e", "sighting_of_ref": "indicator--baca811f-5b42-4ada-b862-8ce17d5c1e70", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06d29d8-3a24-483a-b8ec-0ef53df57521", "sighting_of_ref": "indicator--66ccf9b5-46bd-4e58-85f3-5b6368f1de87", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd33d6d-6895-4b66-81bc-f10bfd8291d7", "sighting_of_ref": "indicator--9f8ddd20-c0e4-47f9-8474-b9f3f9825550", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96079ee2-12b9-4f20-a83c-721f0560aa74", "sighting_of_ref": "indicator--9f8ddd20-c0e4-47f9-8474-b9f3f9825550", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b589b181-33b5-4d71-b3a2-d8beed6f8e0c", "sighting_of_ref": "indicator--cc68fffb-52a7-4be7-a05d-651b55cdc1d8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7073c0de-508c-46fe-bd14-f50e7f1bdedd", "sighting_of_ref": "indicator--cc68fffb-52a7-4be7-a05d-651b55cdc1d8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4b3a0f-b40f-4273-a33c-4605fc1f0f96", "sighting_of_ref": "indicator--52816d00-efa6-411e-aeaa-9ba8ade68f58", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b056eea3-092b-4200-9457-3a93fe44655f", "sighting_of_ref": "indicator--52816d00-efa6-411e-aeaa-9ba8ade68f58", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713a9bdd-c272-473f-8645-798b23dd7894", "sighting_of_ref": "indicator--52816d00-efa6-411e-aeaa-9ba8ade68f58", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26329c35-59cd-40a8-86db-38e82304d564", "sighting_of_ref": "indicator--5409a5f5-2b31-474f-8d25-ee0e526a0863", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418b59b1-cb34-4c13-afd0-8a5aa268046a", "sighting_of_ref": "indicator--233f9c33-0b15-429b-b4db-22ae22ecb865", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dcdcca-a205-49ce-a77a-8ddff9032276", "sighting_of_ref": "indicator--233f9c33-0b15-429b-b4db-22ae22ecb865", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295eb522-03cc-4a31-a7f2-c75945b67712", "sighting_of_ref": "indicator--1cb0845e-028e-4ddc-8361-bc34e0c16451", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dc5ab3-7808-431c-9dcf-30b2f67d5120", "sighting_of_ref": "indicator--1cb0845e-028e-4ddc-8361-bc34e0c16451", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff476c8-fef1-4445-b6cc-05d8e012cced", "sighting_of_ref": "indicator--cc1de0b9-0cce-4f6e-b592-2d04e3484b71", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17043adc-1e92-4328-9b2e-67de1eb96a4b", "sighting_of_ref": "indicator--cc1de0b9-0cce-4f6e-b592-2d04e3484b71", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52458ff-2bfb-4616-be17-ebc559bbd63e", "sighting_of_ref": "indicator--cc1de0b9-0cce-4f6e-b592-2d04e3484b71", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eec7684-1098-497f-aec6-7a1d38fd21e0", "sighting_of_ref": "indicator--9690ca04-8812-49ca-aebc-c4cd4b2266f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcd8374-f5e5-4d8a-b36a-1505f3ead30c", "sighting_of_ref": "indicator--9690ca04-8812-49ca-aebc-c4cd4b2266f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989462c4-0cc2-4383-b5d6-6000de136f23", "sighting_of_ref": "indicator--7ea4cf1c-d407-4c2b-8fc8-74d50c40b931", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa861a11-8d9a-4bab-a46b-87d4d3d7bc86", "sighting_of_ref": "indicator--44cdddf1-f0b7-4af8-8962-cfe8d5b9cc7c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4082d9-953e-4183-8cf1-bd82acd543bd", "sighting_of_ref": "indicator--44cdddf1-f0b7-4af8-8962-cfe8d5b9cc7c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02e3985-555e-4ef4-bb41-70a91c5ff86d", "sighting_of_ref": "indicator--3482499f-b39e-41ca-bf31-507495dc58e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc9de6e-6652-471c-b4ba-a7e922eef1f6", "sighting_of_ref": "indicator--da7bb1f2-00ee-4a31-9448-2df51747ce62", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a20f2e6-af99-44d1-be64-15d02ce5518e", "sighting_of_ref": "indicator--574f0f5e-e8aa-4538-9616-17646f447fab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d22091-f493-4ad5-b98e-67af47d6e9df", "sighting_of_ref": "indicator--45884b7b-da9d-4e6b-b8aa-f35b6d394a76", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde91aa8-7d97-4fc5-9dbc-62eff907b540", "sighting_of_ref": "indicator--37db0ab7-237d-404e-a718-89f396fbc7db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90eac04c-abaa-44f9-aae2-1b44a0cb9336", "sighting_of_ref": "indicator--8e1f09a7-d693-40ea-bf25-9849c7a1c5ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b40c611-23fb-4c38-9c52-64416c8e67a4", "sighting_of_ref": "indicator--8e1f09a7-d693-40ea-bf25-9849c7a1c5ae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ccb808-fe57-4853-8262-2e9070c1e37c", "sighting_of_ref": "indicator--75d2e633-6e2c-448e-b7a7-93f6d3e9036a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98c6808-917d-47f1-804f-6a14b3021c3e", "sighting_of_ref": "indicator--64b65b3d-74fe-494b-9142-36476240bce2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c6cce6-15bf-4183-97fa-31076c460055", "sighting_of_ref": "indicator--6eb73138-2681-4d78-b23d-1ac1ef7ae994", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ea25df-e3fc-4e8d-8ac2-8af036e876e0", "sighting_of_ref": "indicator--b5121610-83ad-40b2-ae4c-c9f43e06b7c3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1fe210-970b-49de-8905-5a659aae9572", "sighting_of_ref": "indicator--7782317d-4d70-4437-a8fe-2278b83f255a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930e77a0-cecd-4823-9488-8155b35e2d87", "sighting_of_ref": "indicator--7782317d-4d70-4437-a8fe-2278b83f255a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e552bcc-ca1e-4a30-853c-482e0680d0f3", "sighting_of_ref": "indicator--7782317d-4d70-4437-a8fe-2278b83f255a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a630fac3-6a63-405d-a042-d9f116efbdab", "sighting_of_ref": "indicator--6a40ac19-ce1d-4372-8cb4-1c3c666b9b95", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04dceee-aec5-468a-a7e4-e2714d6462c5", "sighting_of_ref": "indicator--6a40ac19-ce1d-4372-8cb4-1c3c666b9b95", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066b5ab8-53bc-4e70-9f1c-0b00156f0449", "sighting_of_ref": "indicator--b54a71c4-0b74-4899-bbb3-9f09da44695a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a094eaf2-8ebc-45a5-b5a4-014b52d5efb1", "sighting_of_ref": "indicator--562a11a2-f6af-4811-a92d-bf0ba1ecb8bb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d86671-d711-4da4-a643-456ade692e78", "sighting_of_ref": "indicator--562a11a2-f6af-4811-a92d-bf0ba1ecb8bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a525a5f0-a32f-4580-b85b-56c55a30a891", "sighting_of_ref": "indicator--562a11a2-f6af-4811-a92d-bf0ba1ecb8bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bda046f-f667-4746-b4b9-bd842759ea1c", "sighting_of_ref": "indicator--994a4732-eabe-4a88-96c3-7d9c256f3af0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a806b13-8ad7-4cac-b998-0e88791084c6", "sighting_of_ref": "indicator--9c89a4d0-5729-438c-b002-b291febae04d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcdc740-942c-496b-9ed1-a956f3770b28", "sighting_of_ref": "indicator--ea462e46-dc46-4a90-a575-084fbb1409a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49eba27b-f158-4249-80b1-570c8e5d1548", "sighting_of_ref": "indicator--36d5a218-3d58-44ac-835c-00986b3cf94a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4330098e-d74f-4135-a047-2fdcc71c5eba", "sighting_of_ref": "indicator--36d5a218-3d58-44ac-835c-00986b3cf94a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1697acef-47cf-4657-86b0-0f2f4f4b5456", "sighting_of_ref": "indicator--05d78d9c-8765-445c-9056-9d436be0635b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde78c65-d0fa-4319-9343-1080ed000d8d", "sighting_of_ref": "indicator--f6b06cd3-a02e-4166-a665-854af4544dcd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e285b1a9-d9a9-43f4-be52-acfd38854485", "sighting_of_ref": "indicator--f55a3eca-1ceb-4393-93e1-5421fc4fe34a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06032913-1806-466e-b913-55ac176234fb", "sighting_of_ref": "indicator--f55a3eca-1ceb-4393-93e1-5421fc4fe34a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acc8643-50d6-42a7-9b8d-8880650db29d", "sighting_of_ref": "indicator--698ed9a2-abad-4b5a-bff3-b263925660c5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496b0f9e-de99-494f-95bf-b31c87cda943", "sighting_of_ref": "indicator--4b04f097-7535-42f5-8c07-f3954ca0f07f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7126376-8a93-48fb-b07b-db69cb59c9dc", "sighting_of_ref": "indicator--aa3762fd-02dd-405f-b942-091bf91cf45a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f90f283-19f7-48a7-9228-4b68e941e161", "sighting_of_ref": "indicator--51bad35e-1d1a-4fc8-8fb5-266bb0a75893", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ae7dac-3b3d-476a-a53a-a6d5d608c83c", "sighting_of_ref": "indicator--51bad35e-1d1a-4fc8-8fb5-266bb0a75893", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad7418c-90a6-4fe9-9df5-27f7bceb4419", "sighting_of_ref": "indicator--22763b62-671a-46e9-8797-66a702089d58", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee38e40c-8570-4d9a-a2be-e70253b28d4f", "sighting_of_ref": "indicator--b27c2cb6-7ae9-4a0c-a38a-65264f7be669", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e098d77-10bf-4abd-8aba-e7426386cc36", "sighting_of_ref": "indicator--c9903755-6de6-434d-a9cc-c7b5e5ceb5a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941fcc89-ef0e-4f06-8d98-ac1a25e5d888", "sighting_of_ref": "indicator--529338a6-7d94-4c8a-9634-f43c7f99a84b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49723383-b59b-4e4e-b859-0604ae576c1c", "sighting_of_ref": "indicator--c5775059-2104-41a2-97f0-282c3e921705", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c74b98-d016-4844-8b38-56d3e5d121fa", "sighting_of_ref": "indicator--9094c854-e542-480f-be9c-e4d2d0b25f45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed59f1c-5b17-429a-9c6e-961b821ca7d2", "sighting_of_ref": "indicator--d07b1a1d-fe5e-4ab0-87c8-a60bbff7b9db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7db0e85-0cce-49ce-886b-71e9a92f6b3e", "sighting_of_ref": "indicator--8e6051bc-7582-4666-a613-07dd6d51dcd7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7969a1b-ddc1-4f1f-afa2-a473f2f4d069", "sighting_of_ref": "indicator--fd9ad8e6-cf5e-4c05-b8e4-cd6c06feb2df", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f7f3b4-537f-421c-bfe7-b52e755da391", "sighting_of_ref": "indicator--b227539f-a953-4ec9-a28e-c113ab3337cf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e127ba-dc12-43da-a7de-eff9dd82cd5b", "sighting_of_ref": "indicator--1a25b6c8-6beb-44cf-ae11-561fe9423956", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e92d4dc-4ebf-48c9-b8ec-7a53c89db5c3", "sighting_of_ref": "indicator--1a25b6c8-6beb-44cf-ae11-561fe9423956", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1aba04b-913f-4007-aca9-5a89a6a5b3a6", "sighting_of_ref": "indicator--620b1878-5cef-4e55-94e8-6892bc8cb87f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0c9db7-b625-4907-98c9-0a920a177cd7", "sighting_of_ref": "indicator--620b1878-5cef-4e55-94e8-6892bc8cb87f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e4b9dc-5f14-4ee6-a013-52d7af13fede", "sighting_of_ref": "indicator--7ce2dc6b-00b3-42aa-b737-d9d51fa99ff5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d261ca7e-25a2-4cd2-9e30-89859e98066d", "sighting_of_ref": "indicator--7ce2dc6b-00b3-42aa-b737-d9d51fa99ff5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ace2cd2-3c36-4531-949f-ba21fe54737c", "sighting_of_ref": "indicator--b0363a40-7aeb-44ff-8912-78bee2a07827", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd12bbe-d072-411e-ae50-2b6528b82a6f", "sighting_of_ref": "indicator--e92eabf2-7f65-4362-bc84-1272f86b7271", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6794c5-2032-4952-996f-bf58b26b7909", "sighting_of_ref": "indicator--e92eabf2-7f65-4362-bc84-1272f86b7271", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b847572-5f4f-4961-8a8c-d40c9bdd1601", "sighting_of_ref": "indicator--aa4bd56f-b6d4-4a20-98de-bb953117d5d8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba9df22-7de3-44fb-b5ce-3bbd11af1b17", "sighting_of_ref": "indicator--aa4bd56f-b6d4-4a20-98de-bb953117d5d8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46560b5-3c5d-493f-a7a7-44cc15053027", "sighting_of_ref": "indicator--9e541e05-11fd-40c2-963b-45fcf535b4b4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e050480-0245-43da-8993-b0d25b68d994", "sighting_of_ref": "indicator--9e541e05-11fd-40c2-963b-45fcf535b4b4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147e8240-6586-4969-aa42-43d2b26c0fb5", "sighting_of_ref": "indicator--631eb18e-1727-42e3-9be6-5ac53542aa81", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f736e8c-9bbd-4579-b830-bebdecbca491", "sighting_of_ref": "indicator--5bd62a04-63ed-4f56-8cb0-30506a76c292", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d21a27-57cf-4059-b67b-9998490a60ac", "sighting_of_ref": "indicator--640a3488-076f-4fef-b16e-cb371f638dcf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae5eab3-6e0f-4041-bfe7-4728f3d93e6f", "sighting_of_ref": "indicator--04af6d57-e966-4115-a031-c68aeea8561c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef56cd1-8828-43c7-a2ed-a15fd8eb8e81", "sighting_of_ref": "indicator--6e9ae3d7-a502-4ab3-8267-7c5ec4de5f8b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7956f704-afb6-43fa-8c57-355e0c4ba33f", "sighting_of_ref": "indicator--0aa0b516-adbd-4580-a06b-0318cc26c6cf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d236490c-048a-4187-b337-f852bc6350f6", "sighting_of_ref": "indicator--d6e463c5-120c-4567-9578-cb4a7e3caf85", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca8255e-471f-434e-86b5-e815c247d042", "sighting_of_ref": "indicator--05703e61-8a64-4214-818e-a8ef2e74c169", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e337b60-a942-4132-8ce6-0760d1752480", "sighting_of_ref": "indicator--0c1d4af5-b56b-451a-a637-dbe1f9f07976", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826627f4-cc6b-416a-8b18-731f2a405e2b", "sighting_of_ref": "indicator--0c1d4af5-b56b-451a-a637-dbe1f9f07976", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aba7f83-4c9d-400f-ab6f-8f299b656ecb", "sighting_of_ref": "indicator--24cfb5d3-7b76-4e7c-8bda-4e8b74180b35", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc1c553-556b-4eff-a597-f5721d888727", "sighting_of_ref": "indicator--24cfb5d3-7b76-4e7c-8bda-4e8b74180b35", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f405a038-410f-4ba8-948d-6a34fa56a7fd", "sighting_of_ref": "indicator--24cfb5d3-7b76-4e7c-8bda-4e8b74180b35", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c89a33-aa55-4459-b55d-ab195461f644", "sighting_of_ref": "indicator--6111077e-2519-4bec-bfda-b91a5ffd1e49", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33f0f66-48eb-4f98-8e97-22d94db470bf", "sighting_of_ref": "indicator--cf4993de-f792-4659-b00e-2772bbded0bc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9af75c8-c246-44e7-b2c4-bdb645973a6e", "sighting_of_ref": "indicator--2f21b288-b969-4a37-8a8d-b9967155c7e8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb834db-2cfe-4443-a729-804aebf2baf6", "sighting_of_ref": "indicator--fe08349b-3e21-455e-abdd-be4eecc669ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1643678c-c785-4577-8dc6-412216ed908f", "sighting_of_ref": "indicator--dc341cbe-7da4-4c85-bc60-ff78ff1f63ec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a3a5d6-9b6a-4093-a636-3e90dd7aad1d", "sighting_of_ref": "indicator--dc341cbe-7da4-4c85-bc60-ff78ff1f63ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c99bdbb-dc29-4f5b-8497-c40eb0bb0ccc", "sighting_of_ref": "indicator--49704f33-27a7-405f-ba9e-1e0456764d9a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a2a408-e066-4f94-a2a8-510506664651", "sighting_of_ref": "indicator--49704f33-27a7-405f-ba9e-1e0456764d9a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb793048-9f18-4419-84d6-2aaac3ea8573", "sighting_of_ref": "indicator--6e5522b9-a3ac-457c-8124-24262eeb664e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c51222-60f1-4d9d-a81e-f5fc5605c912", "sighting_of_ref": "indicator--e53340cf-de0f-403c-bc0a-8cb41f4d536f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0f37e8-e9ab-412d-8fe4-a2043cf93751", "sighting_of_ref": "indicator--48487a93-5b91-4da9-91ec-e1632f943975", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5c9926-7c15-40be-a4b2-40bb56eca569", "sighting_of_ref": "indicator--df2446f6-5dcd-4ffa-9f49-3753c21f93a8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6895e7d0-2283-4fc4-8490-099cc02c54fc", "sighting_of_ref": "indicator--4afa062e-e2c9-47fd-88c9-13927cb546c4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c860a11-85eb-4d3e-abd4-81c52daf7a25", "sighting_of_ref": "indicator--4afa062e-e2c9-47fd-88c9-13927cb546c4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384fe093-71d9-4d0e-a141-f4aa47287b26", "sighting_of_ref": "indicator--4afa062e-e2c9-47fd-88c9-13927cb546c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceba3069-0897-4f33-9464-3d65ae64b946", "sighting_of_ref": "indicator--7941630b-1e3b-4df6-8441-f757f65656de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c801bf3-decd-4e49-8091-4bac6c487dc8", "sighting_of_ref": "indicator--7941630b-1e3b-4df6-8441-f757f65656de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a9d745-4fa7-4984-b909-f7a1dad672d1", "sighting_of_ref": "indicator--b2d7b4d3-9f26-455b-8cd4-4ab731c6ea44", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfb9c90-80fa-4b52-9871-32f465c99219", "sighting_of_ref": "indicator--b2d7b4d3-9f26-455b-8cd4-4ab731c6ea44", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a2a90f-f264-4eaa-8bd4-20ebc11d4f69", "sighting_of_ref": "indicator--c4a051c1-ddc3-4e1e-bf2f-c6b089c4a7e6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1468173-dad8-4415-8063-5f896a805a16", "sighting_of_ref": "indicator--0a587baf-f1a5-47de-a426-3f181f6c15d1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef388b75-86e7-4772-aff1-c32a7d5ea1cc", "sighting_of_ref": "indicator--0a587baf-f1a5-47de-a426-3f181f6c15d1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386db5e4-3687-4060-99b9-e32a18702c0e", "sighting_of_ref": "indicator--43596a90-3ced-4a18-8004-e58ffb174147", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a115f7-13a9-4d6c-b6ca-136df5a185cf", "sighting_of_ref": "indicator--fd0d03dd-7227-47c6-bc58-7985f4703e21", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c612d3-9852-4be5-b6dd-10bc6848435e", "sighting_of_ref": "indicator--fd0d03dd-7227-47c6-bc58-7985f4703e21", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5032f8-a4c1-4c23-bc27-796b20ae68c9", "sighting_of_ref": "indicator--77a85fa9-a043-469e-b9b2-a42654c342fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbedaa4-6ec2-4e5f-a1c1-5337ea3e8145", "sighting_of_ref": "indicator--36cc7607-0624-40e8-8e56-685f503da77d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0534746-2028-491c-80f6-b422647dfe70", "sighting_of_ref": "indicator--ae36c9e1-c64b-48f2-b7f7-99056fad4750", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddee801-00ea-4f7e-9a69-ecf6f8bf06af", "sighting_of_ref": "indicator--58ed860b-4dd0-42ce-855f-26aa2dca82e0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489da399-c7ce-4cd3-b02f-0d61888a57ba", "sighting_of_ref": "indicator--58ed860b-4dd0-42ce-855f-26aa2dca82e0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d72b06-e6d6-4dba-8c04-91b1ad87e873", "sighting_of_ref": "indicator--6c26c35b-b9b7-434e-9e82-9545381e09db", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082f3746-2eed-4e77-9df9-f0d904e259a4", "sighting_of_ref": "indicator--6c26c35b-b9b7-434e-9e82-9545381e09db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a634dadb-3460-4d95-8c8c-e17a46654cf1", "sighting_of_ref": "indicator--4f135c17-1e38-4b00-b59e-1b4fbe65dd4d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b71e1d7-4569-418d-986a-8d1627e2ec1e", "sighting_of_ref": "indicator--38ad4aad-7adc-4477-9240-b8eb7ed431ca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554b5857-3743-479e-8a3d-3c6aa80b5f57", "sighting_of_ref": "indicator--38ad4aad-7adc-4477-9240-b8eb7ed431ca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d4ae52-7c82-4f7d-9593-7b78d3c66f05", "sighting_of_ref": "indicator--38ad4aad-7adc-4477-9240-b8eb7ed431ca", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc03242-3fbf-4a31-8c40-bd056c7199e4", "sighting_of_ref": "indicator--2cc68a81-e59e-41e9-9100-fe7a96a50139", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcda6ad0-bc5e-48fc-91b2-90f45f5070d0", "sighting_of_ref": "indicator--2cc68a81-e59e-41e9-9100-fe7a96a50139", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519558e4-48ad-4107-9044-424ee81c3b47", "sighting_of_ref": "indicator--ef11a67f-18e1-4fff-93cd-778cc565e9fd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cee9104-5033-4a74-aabc-9148a07fe464", "sighting_of_ref": "indicator--ef11a67f-18e1-4fff-93cd-778cc565e9fd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097a5917-782b-4605-b0fd-b43419a77f08", "sighting_of_ref": "indicator--200eb8b0-61f5-4d30-8068-2d2b7c040493", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d269c84-430a-49f8-a9be-ee8bd1f89a99", "sighting_of_ref": "indicator--200eb8b0-61f5-4d30-8068-2d2b7c040493", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffe490c-54c8-4796-a00c-03c498ca9d40", "sighting_of_ref": "indicator--200eb8b0-61f5-4d30-8068-2d2b7c040493", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d049f30-d095-40bb-8aee-b6065e22e16d", "sighting_of_ref": "indicator--99e7697d-8165-4a2a-8254-a3648b835ac7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b797ac06-3763-4e10-87f9-8a3b475f7da3", "sighting_of_ref": "indicator--c5e05a34-5d13-4bde-ba80-2dc8ab2868cb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6b5d37-ca00-4a72-a746-b2a6b71c292c", "sighting_of_ref": "indicator--3a458527-a363-4b68-9feb-2c5b5f4a40b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c73337-5231-4eb5-ab0d-2c705c1b80d1", "sighting_of_ref": "indicator--3a458527-a363-4b68-9feb-2c5b5f4a40b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebcf13c-0bae-460a-ab7a-4bfcc04ee9a1", "sighting_of_ref": "indicator--3a458527-a363-4b68-9feb-2c5b5f4a40b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d98ba14-ff28-4b87-92f5-4e3706c3e59c", "sighting_of_ref": "indicator--51bf5a08-aa39-4f7c-80c1-5bc6aff331da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f992dd-bc16-43c2-ac05-c6a047ee8f42", "sighting_of_ref": "indicator--951c9867-1042-4b92-b08c-919b78b3e18f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40332e0-2fca-41d1-a2f8-8c429260a0d2", "sighting_of_ref": "indicator--2968bff5-6ce3-4acd-9894-389c9bb21822", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf42cc3-31e3-47ae-90d4-17402ff35688", "sighting_of_ref": "indicator--2968bff5-6ce3-4acd-9894-389c9bb21822", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20fff28-8703-439f-808d-d108a3215585", "sighting_of_ref": "indicator--2968bff5-6ce3-4acd-9894-389c9bb21822", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfef8a7a-60ad-4635-b590-3ccb97e15084", "sighting_of_ref": "indicator--dbdc14de-1f90-491b-9c9e-31606215d1e6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7846eb-8ea8-459e-9c74-fedb188cae76", "sighting_of_ref": "indicator--be37b5c9-cd27-48f1-b643-17d2b73ec6d2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8526bb9-e52c-4f0e-91c9-30f66971ab61", "sighting_of_ref": "indicator--be37b5c9-cd27-48f1-b643-17d2b73ec6d2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c05865-f6fb-4459-8cb6-495528347ecd", "sighting_of_ref": "indicator--be37b5c9-cd27-48f1-b643-17d2b73ec6d2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb2b306-ad50-4c5e-8f1d-69b3c5227e63", "sighting_of_ref": "indicator--69e17bd6-9421-421b-8932-91663bcfdee6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ec37ae-54af-4da0-a3de-628c2513dd42", "sighting_of_ref": "indicator--69e17bd6-9421-421b-8932-91663bcfdee6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f26811-e8db-44b7-a11c-97a9ab27f7d8", "sighting_of_ref": "indicator--89443634-af8c-407c-9c01-23eaa4e9b71e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c01f77-9c55-4caf-b959-cfffdc76fbd1", "sighting_of_ref": "indicator--85ba3181-b246-4c67-a486-6e3e28496445", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ece200-08ad-484d-a6e2-20097d2f7713", "sighting_of_ref": "indicator--de649af6-e749-4a39-927c-70701b01d3b7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee256b8-92cf-4382-8038-739fa70b52db", "sighting_of_ref": "indicator--0b24ae39-f32c-4240-838d-4d9cf2216d17", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1156c3cd-3b97-4f9c-be74-61d59b8dfa4f", "sighting_of_ref": "indicator--23c6a4e9-dafe-4641-a140-7e73c22b95dc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830c34b2-a0c9-48f1-9c03-9a6e6c92016a", "sighting_of_ref": "indicator--eaefddf7-c310-493f-be29-0d75c2269dd8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311b7faa-8d0d-4021-a64b-4f596cb0790b", "sighting_of_ref": "indicator--d6fb7537-59b3-4700-933e-7f734b825679", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7e1f73-3a6e-42d2-9044-152c18cbd37f", "sighting_of_ref": "indicator--d6fb7537-59b3-4700-933e-7f734b825679", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69462cce-0b98-4c5e-aaa6-e1b8d1161cb4", "sighting_of_ref": "indicator--c10e7a1a-a19b-4180-bdd6-24a9b4fbffca", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a679a3-1d73-4650-854d-5de551b7eed6", "sighting_of_ref": "indicator--5b4d0cf8-0acd-44a7-a2a1-70fbf9a645ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b01ba1-a29d-4e93-8b74-376d0625bfda", "sighting_of_ref": "indicator--d60c93cc-f3f9-40fd-9b33-bb4f3737106e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a95462a-6076-4237-9f00-6b3d898ca63b", "sighting_of_ref": "indicator--3bd6cb95-8d11-406e-b87f-03e614f9d5e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dadb23a-0043-433b-a702-ff65c0e6bd0e", "sighting_of_ref": "indicator--e6092337-05d6-45df-b873-513c76424b70", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5463c411-9890-4c27-afd6-12ffb6db6330", "sighting_of_ref": "indicator--c6eb2e7c-8a4e-4f11-ac19-24430ce3072b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25f9933-d0d2-4f3b-bb51-343f78d02ab0", "sighting_of_ref": "indicator--c1731bc8-1906-4a4f-ae33-dde74e2acd2b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee39ed58-35a7-456f-84dd-05af90b48124", "sighting_of_ref": "indicator--c1731bc8-1906-4a4f-ae33-dde74e2acd2b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7ceb07-3200-4fad-9f83-8311fe6cf79c", "sighting_of_ref": "indicator--c1731bc8-1906-4a4f-ae33-dde74e2acd2b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2356e341-b83c-4286-b1c8-d80328c0fb07", "sighting_of_ref": "indicator--d826a5e9-7f70-4d81-b69b-7a0d19e32196", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce9e467-6680-4ce1-b19e-369358b1f26b", "sighting_of_ref": "indicator--f028e850-86cf-4ffc-91a8-ab1477d59b10", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bef096b-0e9b-48e2-875f-dfc32bae9879", "sighting_of_ref": "indicator--25ad191f-87f9-4460-92e4-75a43014d2a3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d017f049-86d9-4373-b9e4-d07202b7e570", "sighting_of_ref": "indicator--25ad191f-87f9-4460-92e4-75a43014d2a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6027fd6-5810-4d1a-931c-fd07d052db68", "sighting_of_ref": "indicator--25ad191f-87f9-4460-92e4-75a43014d2a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b67e21-97b1-4d98-9987-e8df1ffc34c8", "sighting_of_ref": "indicator--84464288-37a7-42bd-8a11-c7a191b3b7d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990a2d39-da95-4009-aabc-f6eb2ad167aa", "sighting_of_ref": "indicator--84464288-37a7-42bd-8a11-c7a191b3b7d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f8479fd-0766-4ec6-b98b-6b893a0f5e02", "sighting_of_ref": "indicator--84464288-37a7-42bd-8a11-c7a191b3b7d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50606867-2f0c-4869-a95c-aa6c2294ad56", "sighting_of_ref": "indicator--db4e1a11-4d16-458a-8ffe-01778966dec3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4ee2db-17b3-40dc-a3f5-37de71c081c4", "sighting_of_ref": "indicator--f95ce9e2-6b30-4c1f-a7f9-50e4e5726848", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff11ff7a-4e82-45d8-830e-c9ad4a7f0838", "sighting_of_ref": "indicator--f95ce9e2-6b30-4c1f-a7f9-50e4e5726848", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7f70a7-7f55-43ab-8690-00c7dbf04c2d", "sighting_of_ref": "indicator--adfdbf2f-4d9c-4ffc-a852-923e96f5b1fe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d9a30a-2de7-4fbd-809f-0f3c35b8f684", "sighting_of_ref": "indicator--adfdbf2f-4d9c-4ffc-a852-923e96f5b1fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de612917-7e5e-44cd-9b5d-08c37fd0a1f8", "sighting_of_ref": "indicator--24ea2cfb-409e-46e6-842e-e3731e9bf536", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c9b340-de09-41a5-aae0-f8a72c59a58f", "sighting_of_ref": "indicator--c8fd084a-288b-442c-b3b8-f707d083fb2a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75a107f-1427-4f92-95b3-9f267888ce65", "sighting_of_ref": "indicator--c8fd084a-288b-442c-b3b8-f707d083fb2a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52081bd3-1f44-4746-97db-a2960b88455b", "sighting_of_ref": "indicator--04d1c880-ca0a-43c1-8180-ab31240c4ae7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670be41c-485c-4e2d-800c-571d165ea752", "sighting_of_ref": "indicator--d7cf30e4-1188-4592-b8a1-06909cd7e384", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b877d8-ebee-42e9-a2a7-d62f7ac081e5", "sighting_of_ref": "indicator--ba84efd4-b4b2-499e-9cf7-ad05c3574af3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c3b895-5dd1-41c0-b5f4-58810ae9288f", "sighting_of_ref": "indicator--1ce4d548-0509-42da-83ed-8debc9dcaf33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da21109-4f41-4596-b174-8b9ea3b0bec8", "sighting_of_ref": "indicator--0c7accaa-374b-4492-a7a9-87834e14a6ca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1ab240-fcc3-4edb-8333-5fe8eb9bea66", "sighting_of_ref": "indicator--229e2794-4547-49fc-a96e-63df5d80d6af", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f06e7e5-5485-4888-9f94-a0bd6d5cfc62", "sighting_of_ref": "indicator--af1ab3dc-d734-4527-9fca-150ae138b37b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b206c9-f849-44b9-b683-a8f25d4ac4fa", "sighting_of_ref": "indicator--af1ab3dc-d734-4527-9fca-150ae138b37b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eff332f-b2cf-4766-b587-a267c54191e6", "sighting_of_ref": "indicator--422f4ffb-a911-4a77-aa33-600abc97e3f0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5976aba7-64f6-49c1-8b7e-1cdf082e703f", "sighting_of_ref": "indicator--74bb5982-237d-4606-9ef3-0a1daa622703", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdde84b0-2b7c-4d17-881f-d8af26c1802c", "sighting_of_ref": "indicator--74bb5982-237d-4606-9ef3-0a1daa622703", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003f9fe3-fef9-4c39-b324-662998c3e3c7", "sighting_of_ref": "indicator--74bb5982-237d-4606-9ef3-0a1daa622703", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa6d57e-1e83-43df-9aec-d2e520e8bb2c", "sighting_of_ref": "indicator--dffb0d6f-0fd5-419d-8b12-0d48100bb261", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b9ad16-ddae-4bc5-af3c-2d2d8d40f72f", "sighting_of_ref": "indicator--d880be2b-9492-4ec9-8485-4fb61aa2bd34", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9058da96-a0c6-4cb0-8842-d6a13a80f9b9", "sighting_of_ref": "indicator--b04d6025-2475-4789-8597-01584483f21a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8990df93-ab72-4422-af42-7f1ed9e60481", "sighting_of_ref": "indicator--0165df94-087e-4826-b394-6de62eb429a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1510d1-c245-417b-bc26-f0173507b24f", "sighting_of_ref": "indicator--81e0d39e-4bd7-4457-8104-e7bc2f8f46d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef55d3b-e704-4113-baa2-898f3dd89443", "sighting_of_ref": "indicator--a1e06478-ea7b-4a7e-8317-65bfe1122677", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132df364-a535-427a-a4b0-2befaf2af088", "sighting_of_ref": "indicator--eaf5829a-fc8b-49cd-9945-37c8dd2492a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915d38e1-79e5-4249-87ba-2670aed2e9ab", "sighting_of_ref": "indicator--66476962-a7be-4baa-a3fa-d3b10a1d4b8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c95aa0-25ee-4d2a-8037-fe7e38a15c07", "sighting_of_ref": "indicator--5863ecee-2748-4f1e-bf1c-329f971f6ec0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7d5c04-dd3a-497c-bee2-5ce40cd22825", "sighting_of_ref": "indicator--7f5cd42c-21fb-4e8b-ac9c-fc50768d3bfd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace18d8c-afcc-4b8a-a18a-8df81c08c01b", "sighting_of_ref": "indicator--71b5ede9-7f25-48b5-b807-076781ff32e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a321729-18af-4b9f-b105-0e78e792c24c", "sighting_of_ref": "indicator--70a51581-fc7b-48b3-a9d0-1aadb1097f45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da67088d-f9b9-44c7-a3cd-b5692d4f625e", "sighting_of_ref": "indicator--41644278-f5cb-4615-b201-0ce8dbf7edbc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27299481-5ed6-4428-a9d4-f2e048cc9bf7", "sighting_of_ref": "indicator--ef6c3e86-e096-43c6-b1d9-d61727ec715e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d56d5b-4fd8-4597-b9bb-b1fecdd64341", "sighting_of_ref": "indicator--fa0b1761-9054-4d93-bcc6-0a173487c178", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbbfc19-2367-4776-a8de-f444fa007587", "sighting_of_ref": "indicator--fa0b1761-9054-4d93-bcc6-0a173487c178", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d264ae5-0ea8-4f7d-a90c-9894be8385bb", "sighting_of_ref": "indicator--6bb57977-d8c4-4abc-bc88-ee4b1f738922", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ec9bf3-f3f6-443b-ad37-ee2fc7095dca", "sighting_of_ref": "indicator--e577632e-a0ca-46a7-b37f-c29e9bc490c2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e29849-4cef-457c-bb9c-fb48235693d1", "sighting_of_ref": "indicator--d62f5aec-5664-4da2-9397-25faa61c2d97", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de82e652-49bc-4d5c-846b-c8e6d316f6b2", "sighting_of_ref": "indicator--96074fe0-b6c8-4f77-93b1-94e86a52c707", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b65b66-509f-4863-80e8-0b14b4db11f3", "sighting_of_ref": "indicator--381678e0-e1bc-48b9-b463-ec695f35fbc8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728ddbd8-a14e-44b0-8020-500d6df50a39", "sighting_of_ref": "indicator--54741ab2-829d-41dc-b6fd-9b4ae8802fa3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de18bfe4-f563-4d83-b5b0-5f07475b1b98", "sighting_of_ref": "indicator--c1a32544-8cad-4914-b656-373e7d1cafb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931232ad-a0e1-474c-8e23-9ab6c28f7a24", "sighting_of_ref": "indicator--c6e24df2-9fe0-4569-b4c5-dacd1edb8b98", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe569f3-1533-4e0b-a962-c68d64cfdd44", "sighting_of_ref": "indicator--c6e24df2-9fe0-4569-b4c5-dacd1edb8b98", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1ebe25-77ff-4e38-a2f2-16fcc0c6cf42", "sighting_of_ref": "indicator--c6e24df2-9fe0-4569-b4c5-dacd1edb8b98", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9678657-5eff-4b59-b30f-f4a742619050", "sighting_of_ref": "indicator--84c17487-0779-4e00-ad19-d4246f97ed1b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99280c75-5a5e-43dd-8f8b-c5c715179cdd", "sighting_of_ref": "indicator--84c17487-0779-4e00-ad19-d4246f97ed1b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66233c7-0644-47e6-81a3-e90fc170a344", "sighting_of_ref": "indicator--84c17487-0779-4e00-ad19-d4246f97ed1b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f69901-420a-4426-9f75-281c92262068", "sighting_of_ref": "indicator--7e243b97-21a5-402c-82ce-2f72162ce7bd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010f1bf8-17f8-40b9-9921-6eed0283057f", "sighting_of_ref": "indicator--d20bf572-355f-4daf-bb22-f8816740c594", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3f7d68-81e7-4301-9c9b-7207186de7f2", "sighting_of_ref": "indicator--fc232606-247f-4673-bccd-113659a8aa4b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d49766-cac5-4ed6-9ce3-7683fcaeba06", "sighting_of_ref": "indicator--0c22ebac-d4ae-47d2-8962-548d1922ea35", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a884ee-d708-42ce-93b2-4bd3f46d51d1", "sighting_of_ref": "indicator--ffc03372-788e-4f43-8e9f-684740d6a2c8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d424dd-1a7e-47a5-9a3e-7610ff7308a3", "sighting_of_ref": "indicator--c42023ea-5e8c-44e9-a3ca-728f5ff58723", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2b87df-b6b0-4557-9bad-6c238f38680b", "sighting_of_ref": "indicator--472ddd6b-8182-4622-aeb7-2e54aac8cd73", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc2cb14-3e7e-44f5-b142-a4d353a2e3da", "sighting_of_ref": "indicator--472ddd6b-8182-4622-aeb7-2e54aac8cd73", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c7a5bf-1362-4bd0-adf1-3fb596df253a", "sighting_of_ref": "indicator--472ddd6b-8182-4622-aeb7-2e54aac8cd73", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed807d9-2266-4d70-918d-636b703c9161", "sighting_of_ref": "indicator--12537615-7969-4964-9d2a-36682aa7ea64", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4797b0-ce67-4720-86ef-271703eb9df6", "sighting_of_ref": "indicator--5566cbe8-f1bc-4d34-8fdb-027f952e8d82", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf0b277d-5f5f-4cce-9429-5f0c43ded34d", "sighting_of_ref": "indicator--905b4ae2-db80-43ae-9028-47e46053b3b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74420aad-2e49-48ea-bfb8-a3fd77e837f9", "sighting_of_ref": "indicator--3f198d69-cee2-4d03-88f6-cbdc7c466947", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9572e5-0c7e-4f26-ab6e-855fa454b56f", "sighting_of_ref": "indicator--67822ccc-8964-4e3d-a725-f95bb95c5d36", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b06fd88-5a8d-4875-b9bc-87c83f7243b6", "sighting_of_ref": "indicator--6e5e153b-ccef-468d-a532-d01b3108c339", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5802c9-6330-45f1-a282-e7fb3e2f6c85", "sighting_of_ref": "indicator--32451dfa-22d0-4e84-b0b0-eef6bc45bc8f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af34d3bb-2082-4fbc-8e33-05fd74350188", "sighting_of_ref": "indicator--d1b7d213-fc35-4df0-b4ad-c9220eefd787", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49568fb1-c6f3-4fe2-b977-6cd9a9d7b068", "sighting_of_ref": "indicator--860c2a0e-5982-43d2-8ab0-c1280ac403cb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dba5962-bd3a-4536-945b-85c7dd52a119", "sighting_of_ref": "indicator--9f0289e3-bf20-44aa-8adc-35c3a5fe3602", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475e78ed-69aa-4346-8226-a57646fcfa0c", "sighting_of_ref": "indicator--14e053a6-e427-494c-a556-5944473a8358", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff1846e-6251-4eb7-8bf6-7adae79bbc68", "sighting_of_ref": "indicator--6347e2c3-fb42-4690-b6ba-5e8c2747b45f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f15e8d-5bb8-4422-8d8d-15bf5704ca58", "sighting_of_ref": "indicator--3205e84d-2a6a-414a-a4a8-a51c99b3feae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ec610f-d4ba-4f7e-af66-78ad32f62f7e", "sighting_of_ref": "indicator--1c63b552-4a99-409b-8d6e-c0c8b3985e33", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5649f995-30f0-4964-bc95-f2abe7188095", "sighting_of_ref": "indicator--83b64a97-f1f6-4973-b10a-135aaa40bf86", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b40818-4098-4484-a610-a0a009fbb16a", "sighting_of_ref": "indicator--9ce097f9-5d3f-41c5-b131-45c6d04aabe7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40c4d3c-e89b-4815-ac40-25ed0775bbeb", "sighting_of_ref": "indicator--0dcce111-35f2-4b14-8e1a-511a0ce688f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fc96c0-151d-4b56-abba-09a627b3c4a0", "sighting_of_ref": "indicator--7712bff1-77c4-448d-8877-0166e009ec86", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15e7648-a20d-4b74-88ac-a8dd5775e015", "sighting_of_ref": "indicator--6442e94b-7a82-4d3b-a360-f305cc48d18f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88101e0c-2f71-4428-b2ff-eee7c1a71437", "sighting_of_ref": "indicator--9baf9ffe-b80f-4061-b524-ee422fc33772", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03522381-02eb-48c3-ad1b-e97b347ca0c0", "sighting_of_ref": "indicator--531cbf81-5168-4010-8f48-62977f189a0b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba92236-db47-4016-a484-fd87e36b475a", "sighting_of_ref": "indicator--c843af73-88d8-4269-b1e8-b4520e4e90b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b8c3a0-b885-4602-8964-52c18ce23874", "sighting_of_ref": "indicator--58156f4b-1fe9-435d-b332-94d741a8533e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf39c02-b13d-4ff5-8acf-96094e7b68c9", "sighting_of_ref": "indicator--6d29cb01-edae-48e9-9068-06e7da798ff8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76722921-9e6e-4654-9818-0024b4d6d00b", "sighting_of_ref": "indicator--b53916eb-fa1b-46ff-869b-7968724aa27e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a3be31-f40a-49d2-981c-b57c3f976328", "sighting_of_ref": "indicator--b359ff0e-2f01-4277-af40-6d8827608652", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f1361c-a07b-453c-9681-b0b4bb35363c", "sighting_of_ref": "indicator--74fc167e-a303-4578-b9c4-a9e157017ba7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1891461d-2f7e-4ea4-8a99-d232fb2f10e7", "sighting_of_ref": "indicator--1364002a-7251-41be-a217-8d6aac6831ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d42ddd1-a705-4693-a153-44b90a776af1", "sighting_of_ref": "indicator--54611e6f-bd14-4503-a664-3e2960ce7f32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f21de1b-baaa-4373-8d67-8bca705bf076", "sighting_of_ref": "indicator--f8e79b8f-ecfa-4fcd-ab84-331d11038fce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e190a5d-83c6-4ce6-9f29-c11c6fe29231", "sighting_of_ref": "indicator--5c87503b-7778-457a-8b9e-47da127c571a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1552cd1-a942-46f8-9226-56408b957509", "sighting_of_ref": "indicator--8b59800f-b612-49f6-8ad4-e14e17c4ec52", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ab8e73-8262-43ed-826c-2bdbe53508fd", "sighting_of_ref": "indicator--0d23f202-10c0-47c9-b67b-bc78369cba47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4cb074-03a8-4922-920a-a772f81319b2", "sighting_of_ref": "indicator--aceed2e9-8635-4aa2-9e16-22818d97203e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b101f6-b9b9-46f3-874b-bfd6c64835fa", "sighting_of_ref": "indicator--d1303883-bc9b-4a9c-ad0b-ddd5025e0274", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a5542a-d7f3-4329-917f-1202e2dac82c", "sighting_of_ref": "indicator--d2a6c9d9-09eb-4660-9965-f0dc521476ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee79fbde-9cb1-47d2-a645-7f88b53ded83", "sighting_of_ref": "indicator--37b6b4cb-77e5-49fe-b4bf-cd78937d20ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044ac84d-9bb7-486e-bd9a-d273e16dcce4", "sighting_of_ref": "indicator--33d1a944-5c40-41b9-b6a1-1cb5b36d2639", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf0eae8-c3b1-48a6-b323-9d81965f4c3a", "sighting_of_ref": "indicator--432f2960-109b-453b-9595-6de7d3112ade", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27c0694-83aa-4d12-917e-a6808c3fbc4f", "sighting_of_ref": "indicator--367c9d96-4f0b-4db4-a2f3-d9430ae6164d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cd8699-78c8-46a4-9bfe-64e0254ddef7", "sighting_of_ref": "indicator--fb1be201-037e-40d0-90d2-b66e13ffd88c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abce0d6b-c67d-4b63-b374-4f80550454e8", "sighting_of_ref": "indicator--d944ee9a-58d9-4007-8983-20e4608cd4de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca380d5-f3f9-41a9-8194-24281bf6e09f", "sighting_of_ref": "indicator--b41cf743-acee-480c-9590-10cce591ec9b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a39752-4852-4211-bda1-afc3dc16aab9", "sighting_of_ref": "indicator--b9e28542-d5bb-42f9-8b07-d1c7f6b2435d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc156c35-ba4c-44b5-a4e2-05d6977568e9", "sighting_of_ref": "indicator--f8b507b9-608c-4814-a1b6-ba871f8b3324", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605389c8-a606-49d0-8595-a7f25aec7c8b", "sighting_of_ref": "indicator--4972d1ee-d24d-425f-9444-efb23f541088", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80568553-19b9-4f73-ac60-5230696e3216", "sighting_of_ref": "indicator--1f986909-00eb-4159-81bf-7b99af51e992", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73971fac-deb8-45aa-a5c7-647cf0ac8b36", "sighting_of_ref": "indicator--8d8a2768-d9a3-4050-9ac9-ebc4cc3335c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87478819-beb5-4321-8f8b-5f655edf5c7b", "sighting_of_ref": "indicator--8d8a2768-d9a3-4050-9ac9-ebc4cc3335c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5718a9ad-bf97-4994-813c-a135056a2208", "sighting_of_ref": "indicator--1ada995c-a515-41e6-8bd7-ff8cc7631576", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fa2635-e93c-4fb1-ae55-8d5191782f85", "sighting_of_ref": "indicator--54f3d267-ceb0-498c-bef4-f2c46a3db849", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ece756-b31e-46db-9c1f-da3a9a740036", "sighting_of_ref": "indicator--54f3d267-ceb0-498c-bef4-f2c46a3db849", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f2237c-e8bb-4b63-b70f-862177212d03", "sighting_of_ref": "indicator--6f2364f7-12e5-4c5c-ad48-2a3ae520c852", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f2be87-9850-4237-a04a-f73ec9c10b19", "sighting_of_ref": "indicator--915b1874-de6f-4a6b-b8bc-7d073fe6eeef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00056d7-77a6-4b45-8f45-461d94ca3f86", "sighting_of_ref": "indicator--915b1874-de6f-4a6b-b8bc-7d073fe6eeef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49e70c4-b38e-4715-9d25-6e7dbae5e54d", "sighting_of_ref": "indicator--9a939c91-cf8c-4947-bb51-dec04c288761", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c970c191-5fdc-4167-b1c7-9b94426ee645", "sighting_of_ref": "indicator--cab9a6fa-dd7a-4425-958a-cca61df09d61", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9b2278-4a01-45c0-8a11-cad78dcdf494", "sighting_of_ref": "indicator--73e5b938-6914-4c0a-bbe0-c1058f920eb1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ccf9c7-91bf-498e-8c67-9cb62b4058df", "sighting_of_ref": "indicator--8fc22ab5-8efd-4df8-89a9-09773c892560", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e56539f-1dea-48ca-856b-ca29de0bad7f", "sighting_of_ref": "indicator--716d58d7-7419-47a1-939f-21959f36d401", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e1276a-ddad-40c8-a960-ec727bb96713", "sighting_of_ref": "indicator--5a13ddfb-34fd-449e-ad51-b54cae721481", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49bce1a-567e-4070-88f4-91bf378e43a3", "sighting_of_ref": "indicator--ad220490-a2dd-4308-8692-220e444c500d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa8f15f-d332-46e2-ba12-c91b8ef3d191", "sighting_of_ref": "indicator--de2e5487-bb45-41d1-9cc4-eb897b8db7a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cac8688-3211-40f1-a402-64c56f01488a", "sighting_of_ref": "indicator--12f9c97c-e880-4609-bbdb-b59255b43b92", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771a8968-28ff-4d76-8054-bff041a66cc6", "sighting_of_ref": "indicator--12f9c97c-e880-4609-bbdb-b59255b43b92", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e72e484-aeb6-44fd-a2c3-1c1c6716623b", "sighting_of_ref": "indicator--12f9c97c-e880-4609-bbdb-b59255b43b92", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cac4ad-b5a9-4ea4-8441-8931587725b3", "sighting_of_ref": "indicator--5d6f6516-fbc5-4444-9409-f0a513177921", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50268b08-bd64-4c33-bc1e-0ebd479c6d4c", "sighting_of_ref": "indicator--0928fa69-3518-4305-9a74-ef202c313ac0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69575ff6-c3ae-4251-adcd-30d22fa844e3", "sighting_of_ref": "indicator--cc7de6b2-69fa-4c16-847a-84d510d48541", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c635731c-c38d-49fb-a8d9-5320790b4ecf", "sighting_of_ref": "indicator--fc2b74a2-7d87-40f9-ba19-9d4aeebe32fe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95490274-5763-4ca9-a500-dce29db3282e", "sighting_of_ref": "indicator--eeffe137-c2c9-4273-8ee7-10272ecaae4c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02d5b28-c07d-4de3-9082-ad3c02e8fad1", "sighting_of_ref": "indicator--5ff622e3-8bd6-481a-ace2-bb8f49594361", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88a607b-746d-47d1-9611-198d01b8e8a7", "sighting_of_ref": "indicator--2a37f5c0-b386-41c5-84da-6dbda70ce996", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b97739e-0708-4638-8e21-79149739fc91", "sighting_of_ref": "indicator--6346f765-4a12-490f-ba83-8ace99fa8408", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cfdbd9-3118-4342-8093-fd655f731e20", "sighting_of_ref": "indicator--67dcf56f-5844-48d7-aa24-a75265a7cd4c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc980036-3036-4bfe-893d-0e830a69d58b", "sighting_of_ref": "indicator--f299dabb-3ab4-4f4e-916a-f55ce8b829ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac40fe1-eea9-4121-a854-12bd1ebbb744", "sighting_of_ref": "indicator--2937a066-7911-485e-9fa3-11a9f20b22ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4de827e-f3b2-4978-9bb5-f6748535678a", "sighting_of_ref": "indicator--f5e091d0-b008-475e-a1f5-61ec25c45438", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8381bf9-49ab-4302-8ff9-287662b2d2c0", "sighting_of_ref": "indicator--f1f96421-b3f4-45e8-b950-a329161fec90", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fa6902-0b47-4869-95aa-c9c94b355f30", "sighting_of_ref": "indicator--f1f96421-b3f4-45e8-b950-a329161fec90", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2dd3c0-fae0-4dda-93cc-978fa219cfcf", "sighting_of_ref": "indicator--4c59a2c7-6d4e-4a1a-b817-9fed815088cb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f0ec37-e829-428f-8c61-c7b6aac7fbe8", "sighting_of_ref": "indicator--319a70be-21dd-4164-8d52-6ef8c169d773", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eded089-ac89-4caa-8570-02fb03ece5f7", "sighting_of_ref": "indicator--fa56a7fe-a27c-4792-9005-a51ba619d2d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a6e519-a85a-4fe6-b482-2260b6da25c7", "sighting_of_ref": "indicator--5c3f0a70-4a7c-4417-a72d-841ad8e91f07", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a1aff9-af86-42ff-9922-9a97a0d0381e", "sighting_of_ref": "indicator--53aee0d2-3314-4c00-af74-854d4fa193ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96755e6e-b85e-4004-a366-257958ce4caa", "sighting_of_ref": "indicator--ed81984b-42ea-4b0b-b0f7-0b7114952f3b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1f7f7d-d9cf-4351-a86d-be8230aef363", "sighting_of_ref": "indicator--fbd13f43-0a99-4973-a8f9-9a4797224cb9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bb2ac4-3507-4657-95c9-8b259f221456", "sighting_of_ref": "indicator--c7329e0d-e937-43f6-8fe6-a20b8d12081b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbddccd-bdbc-4f9b-8332-c3e0dc732859", "sighting_of_ref": "indicator--654153d7-ef85-4fdd-968d-d57a27f16d5c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57122e2-0de2-40b5-8bfe-a10cbdd915df", "sighting_of_ref": "indicator--c8f8184e-d63a-4996-9a64-04cd6c03e712", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9f2987-14cc-4616-bab3-1b202fe8b126", "sighting_of_ref": "indicator--c8f8184e-d63a-4996-9a64-04cd6c03e712", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69bd325-d965-40b7-9be9-37a30176b1cc", "sighting_of_ref": "indicator--c8f8184e-d63a-4996-9a64-04cd6c03e712", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d349bed-6fd4-4bcc-b8ef-bd230ceea292", "sighting_of_ref": "indicator--a6f27bfa-bcc7-4404-9dc7-4f27b3b13851", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b01cb1-94f3-4a47-b69a-7ea6d55bd938", "sighting_of_ref": "indicator--a6f27bfa-bcc7-4404-9dc7-4f27b3b13851", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e8a1cf-3065-44c0-a585-3ab44ce6a8e9", "sighting_of_ref": "indicator--a6f27bfa-bcc7-4404-9dc7-4f27b3b13851", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbcc6213-9392-4224-8a1b-5b1590f84f51", "sighting_of_ref": "indicator--7097b9f7-e678-4708-abd6-f55bc4573d0c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a38dc5-d0e1-4d2e-aa81-d0a65f866e24", "sighting_of_ref": "indicator--7097b9f7-e678-4708-abd6-f55bc4573d0c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c881be-f14f-480f-b6f8-7368f50a9361", "sighting_of_ref": "indicator--7097b9f7-e678-4708-abd6-f55bc4573d0c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84fb3cd-dd05-4833-89d0-bab2ca75c2a1", "sighting_of_ref": "indicator--6f6f1b99-3181-4611-8d89-148c6464d028", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d825a2-f626-4b6b-a484-666292f5e33d", "sighting_of_ref": "indicator--0cd41cdc-6752-4175-a792-9c1688d44c08", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e90b821-326b-4436-90e6-e1004d2ac299", "sighting_of_ref": "indicator--0cd41cdc-6752-4175-a792-9c1688d44c08", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86625496-d0fd-44d2-a385-b8a31e3db500", "sighting_of_ref": "indicator--0cd41cdc-6752-4175-a792-9c1688d44c08", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594057fc-cf48-4548-ac59-c7c756c672d9", "sighting_of_ref": "indicator--fe162d43-3d53-41aa-9572-61fa7b23606b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92466bb5-e551-4d59-b3ac-382f0c73ba69", "sighting_of_ref": "indicator--cc7d0804-2c48-43df-b2b6-3c80ac49781f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a77a1a-99d4-449c-9afc-f494b806145b", "sighting_of_ref": "indicator--6b58de5d-15bf-4146-bd6c-c16ae9c9922b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82caf9a1-114b-4487-a9e6-5b0ee9b52f12", "sighting_of_ref": "indicator--9c95e904-400d-43f8-a890-bf0933d323a9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ad0024-215a-4eb6-b57e-0c398a6a7005", "sighting_of_ref": "indicator--923eb370-87cc-44f5-9a6f-4e87f1247272", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021ba5d6-c258-42e6-a192-951a073d8368", "sighting_of_ref": "indicator--f5816787-b47a-4436-b820-bda662ab49c7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6d10aa-1e18-41ae-a3fa-3fd983867969", "sighting_of_ref": "indicator--fc133451-3ebb-4eaa-8c27-aff5137ecaed", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548947f8-abb1-47ab-90e4-9bfec97deeb1", "sighting_of_ref": "indicator--8270cda2-58e8-42cb-8df8-959056e0a6a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f4f487-c625-48bb-af5e-a81366e618ce", "sighting_of_ref": "indicator--c3fd246a-269a-4fa9-bb70-1bc9e286106b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4d5fae-f092-4e88-9ae9-7e7c65133ee4", "sighting_of_ref": "indicator--c3fd246a-269a-4fa9-bb70-1bc9e286106b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde66d70-834b-4ac4-8463-05f50d8dc6e1", "sighting_of_ref": "indicator--c3fd246a-269a-4fa9-bb70-1bc9e286106b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc464e5-6a5e-4ff8-b32c-7dc088a259fb", "sighting_of_ref": "indicator--75ebd4d6-130d-4621-aee7-bf9cdd41e14e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ec37d7-dc2f-4032-80a3-5e7ba8bff179", "sighting_of_ref": "indicator--80b5d3e8-18d3-4f53-be96-781a367e5667", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4308a67d-384f-4521-babb-b91b761a813c", "sighting_of_ref": "indicator--80b5d3e8-18d3-4f53-be96-781a367e5667", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0c2174-3f89-4c37-a8a5-618f2206d4b6", "sighting_of_ref": "indicator--e69622d5-39a7-4570-900c-9dc9958d2f3f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30ef1f7-26cf-424c-8ab4-fcc0936f96bf", "sighting_of_ref": "indicator--e69622d5-39a7-4570-900c-9dc9958d2f3f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632d0d59-bfc2-434b-8935-ad180ff20d25", "sighting_of_ref": "indicator--ffe1e808-5ba1-4b2a-bf08-a5f176144284", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba5fb82-b9c1-4379-b723-a6d7b89ca88c", "sighting_of_ref": "indicator--bd955c7b-7269-43f1-b69f-8251620c3802", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c74e09-cad8-4fdd-a01d-e1f95e0fe3ec", "sighting_of_ref": "indicator--92597058-853e-48aa-b94b-21b2567aae2a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d1268b-70d0-4ae4-8a12-442afbb96fca", "sighting_of_ref": "indicator--aaf9df32-d5e2-4874-bcc4-97474d8ad46a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d6140c-b588-4d14-ba68-0f281c25f3ec", "sighting_of_ref": "indicator--197b47d6-6689-4c33-b234-93f4a8469ffc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daaa5d6b-c98c-4b27-b16a-cabe0f113167", "sighting_of_ref": "indicator--e62ea37c-9d1e-49b2-a949-85577a9a9a64", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272e9d3d-2ae1-4210-ac97-477e0922aae3", "sighting_of_ref": "indicator--80d90c43-417b-4d45-b0eb-28fc81fca1cc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86880fc2-5895-4f4e-8082-76230b581547", "sighting_of_ref": "indicator--2c0182e5-4dfb-4ca0-92da-314e4bad4060", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d6b2c84-f9d9-419e-a7db-17d62db565f1", "sighting_of_ref": "indicator--2d6d082c-7d08-4b06-bf4e-58fb8e270732", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646b009e-c846-437a-9ff3-a250182b33f8", "sighting_of_ref": "indicator--f8979a1b-4270-43b4-b18a-67677b8b1432", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1964be67-53af-4281-82da-dcd2b10e6212", "sighting_of_ref": "indicator--48316761-c603-4681-ada9-d0d13df7e77a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8f4310-67d7-4459-a3f2-6f21fd2bd72c", "sighting_of_ref": "indicator--48316761-c603-4681-ada9-d0d13df7e77a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11203aa7-d45c-400a-bc14-03cf7b14976e", "sighting_of_ref": "indicator--f71f1a5d-ce79-4506-896a-172e8b274b06", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e686be04-9a55-48d7-bf42-0d4c7e815e18", "sighting_of_ref": "indicator--cf54e990-4408-41eb-a161-0fe938598652", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30927e1-c0ba-4798-9887-4f95984f02b0", "sighting_of_ref": "indicator--31191a28-769e-4413-8a39-91c22fdf1b12", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ad16f1-1c21-4ce7-9ed3-b87232403c49", "sighting_of_ref": "indicator--178cecd3-48e6-4b2d-8b6f-2f43e76262bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cc2df3-5dac-4207-b56b-ce27a6ceb686", "sighting_of_ref": "indicator--4ec6e624-a489-4841-842b-a3c1b14dff61", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5f0133-aca4-4103-9334-63d46c7defe1", "sighting_of_ref": "indicator--df39a0f9-c8f0-4cb7-9fa7-2bfca7234dc7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d50aa0-db6a-4745-b9ef-6ffeabe47733", "sighting_of_ref": "indicator--39559547-9fbf-4106-8931-0e6c28784dad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484cf4d1-74c9-4618-b5ba-4c810a41e827", "sighting_of_ref": "indicator--98b87b32-561c-4d14-8c4e-7b97447ac002", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4661f0b9-f30e-4375-a5e9-2972a321793a", "sighting_of_ref": "indicator--98b87b32-561c-4d14-8c4e-7b97447ac002", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5eb4f55-6fdc-44d3-8025-36dd826db3bf", "sighting_of_ref": "indicator--98b87b32-561c-4d14-8c4e-7b97447ac002", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c9b701-d8e5-4c33-94fd-cb8d4cb04bed", "sighting_of_ref": "indicator--a8f39f36-cc9a-42e2-ace6-a8605796888d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c12e0d8-08ef-4dbb-a74b-d6e5dd85cf73", "sighting_of_ref": "indicator--a8f39f36-cc9a-42e2-ace6-a8605796888d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e932556-18c4-47d0-b066-2a99ca148934", "sighting_of_ref": "indicator--a8f39f36-cc9a-42e2-ace6-a8605796888d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23675c81-c44b-434e-ad99-1e4679892a2e", "sighting_of_ref": "indicator--14dcf0a5-7cf4-48e4-b36d-0b61334b7fba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed92b97-c34f-4ac0-b3bc-29a544a4b093", "sighting_of_ref": "indicator--d19ae2d0-1039-468d-a676-a51ac08cff78", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399c760a-2165-490e-9275-9d82986cea3b", "sighting_of_ref": "indicator--ed52667a-8dfd-4db8-91a2-54248ddf4c32", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52ff193-7de8-40d7-9752-d877f0375a83", "sighting_of_ref": "indicator--ed52667a-8dfd-4db8-91a2-54248ddf4c32", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77105f2-95e3-49bc-91be-bf2d6711b99b", "sighting_of_ref": "indicator--259109d9-ae44-4f78-a3dc-d05eca06f487", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d31c218-c872-449a-a4b0-34292631d3a0", "sighting_of_ref": "indicator--259109d9-ae44-4f78-a3dc-d05eca06f487", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f129822e-98ec-4bea-9603-b891acfa1f26", "sighting_of_ref": "indicator--259109d9-ae44-4f78-a3dc-d05eca06f487", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e05d494-48e6-4616-af1b-1c52dee227b0", "sighting_of_ref": "indicator--5807ccec-b3e1-4cf0-a5d4-31403b49525e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9208a121-f8cc-4c4c-b199-e18f437517ee", "sighting_of_ref": "indicator--5807ccec-b3e1-4cf0-a5d4-31403b49525e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c79964-af5e-4e5e-b8bf-05b6d8cffff6", "sighting_of_ref": "indicator--fbca1406-8a35-4da7-9384-d4711c9575e9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3fb67c-9065-4548-b39c-56d9276666b8", "sighting_of_ref": "indicator--fbca1406-8a35-4da7-9384-d4711c9575e9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c530cd5d-8d70-40f0-9fc7-2ae528b0c86e", "sighting_of_ref": "indicator--9f984875-0feb-403c-bc0f-64c35d2e29c2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170ba267-7984-4031-9aaa-770899794451", "sighting_of_ref": "indicator--9f984875-0feb-403c-bc0f-64c35d2e29c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9287ce39-d064-4862-89ba-5a8efc7d6d69", "sighting_of_ref": "indicator--9f984875-0feb-403c-bc0f-64c35d2e29c2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f3d6e5-ad57-4727-9de1-fd7845ff030b", "sighting_of_ref": "indicator--5223f008-a8ab-4720-839d-ab998bf54678", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3458b1-1c0c-4e9a-913a-ff9395afa2b9", "sighting_of_ref": "indicator--3ea9fa92-4e71-4a8e-9d3e-20172d46951a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7126022b-fc95-41c6-9581-68a124a6546f", "sighting_of_ref": "indicator--3ea9fa92-4e71-4a8e-9d3e-20172d46951a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990ee15b-c2b4-4988-8210-b7e3c1e9f534", "sighting_of_ref": "indicator--785242df-f989-4f01-8bab-a125a6cf1c1f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046b2a24-98bc-4c33-84e0-e7fe330c743e", "sighting_of_ref": "indicator--aef52dd5-6af1-4e43-9000-df66876cbf63", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d48a04cc-9dac-4e77-9bdc-35667879b8dc", "sighting_of_ref": "indicator--51c941fa-8ee0-4eb1-a214-443364b22448", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb4996b-ee98-4ccf-8458-42b244f9155e", "sighting_of_ref": "indicator--51c941fa-8ee0-4eb1-a214-443364b22448", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0c0614-e8af-49e2-88a9-ca13fd53395a", "sighting_of_ref": "indicator--1ee0e0a1-a1b5-4127-8820-37a0773221b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07712f71-d97b-4db3-b94f-58fe95216b75", "sighting_of_ref": "indicator--1ee0e0a1-a1b5-4127-8820-37a0773221b5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361dadd3-aa74-439a-8b55-dec3ccd8f6dd", "sighting_of_ref": "indicator--1ee0e0a1-a1b5-4127-8820-37a0773221b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1aadb4-9297-4d66-a427-69127f0e7d19", "sighting_of_ref": "indicator--dfdda16e-ae3f-4d5f-8835-8c8ee84e1b70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b55159-6f9e-4756-94cc-c03be85bea05", "sighting_of_ref": "indicator--90710c83-ed74-41f6-9fb2-af287e7e07b4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75b9e04-fe1b-41cc-9a77-605c3569664b", "sighting_of_ref": "indicator--d2b6185d-f3d8-4796-b3f1-9983a8ffbaaf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21618025-f78f-4384-9d55-4e256cdc7d56", "sighting_of_ref": "indicator--226713e4-2a80-4721-bc96-4e019915b132", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b692aaf9-c177-4637-8d35-cf425e88b0a4", "sighting_of_ref": "indicator--b1c80200-09a9-4885-a138-2e5e79cd7a16", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a9901a-cd97-4466-b8d4-bcdb13dbb5ea", "sighting_of_ref": "indicator--cc36242a-5dbb-4e36-89f3-5f9768b58cfe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a6034f-8cd6-4e96-98bb-7fcff63dc340", "sighting_of_ref": "indicator--36a49666-14fa-4529-9094-dca46ff81d31", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a642eac-47af-417b-8186-aad94ff8c410", "sighting_of_ref": "indicator--4cdb3a23-21a3-473b-a3e5-914bdd8b266b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e23cf9-fb30-48ed-8da0-3b57f04ef6d0", "sighting_of_ref": "indicator--dc6ca416-21f2-4f4b-ba82-d349d9739b4a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f7bdd1-5712-405c-9164-d6244dad416e", "sighting_of_ref": "indicator--1feb94e9-e9ae-47dd-84ee-240e7439b344", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0acef1d0-4ffc-46bf-a51f-013218be06a4", "sighting_of_ref": "indicator--421b124f-bfc5-4477-a34c-81fde513b4bc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6a1d0b-da80-4c61-8cb4-01bff303d29c", "sighting_of_ref": "indicator--653cc1ec-58d0-4609-ad0f-04b11dc2667c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52dea4e6-4d36-4772-ad0e-93f0e90233a1", "sighting_of_ref": "indicator--375649a4-3a86-44f4-bc22-22b403fbe0bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763af98d-7a62-4932-875c-1541fffcdb2e", "sighting_of_ref": "indicator--1af21b14-a528-44bc-a5bf-6a5ea2a43c66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1c4eb6-96cf-4242-85c5-bb14d8b51088", "sighting_of_ref": "indicator--7dbefe67-935a-44c4-b0fc-527094a2bd0f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ceafc24-1342-4437-a9a4-9d0abc047204", "sighting_of_ref": "indicator--98135e94-b9de-4c5a-b345-82fd4cf31fdb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faed374e-0e13-4813-945e-cde68563287b", "sighting_of_ref": "indicator--a35ab67c-4fc3-4b7c-b717-535f6806d951", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cad376c-4b2f-47e3-8f54-7e62e264046b", "sighting_of_ref": "indicator--a35ab67c-4fc3-4b7c-b717-535f6806d951", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740c58a5-f5cd-4db0-ac77-7a12c7323615", "sighting_of_ref": "indicator--ee208b1b-a1cf-4f2c-809b-1802a274f7cf", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5b4456-61af-41f1-b3a2-c55b016edfd4", "sighting_of_ref": "indicator--2ee10d6e-f58b-4ad7-a15b-a7b25ba2313e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d20b365-4820-48fb-939d-52e7129a6393", "sighting_of_ref": "indicator--9b9b4ad6-76f0-4dfc-8f5f-6cc40e11362c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aef094e-cdbb-420f-aa69-a147acd17e9e", "sighting_of_ref": "indicator--df625732-0435-4519-875d-5c70eff0b0f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e336bb4-2a65-4156-8651-9f0d01f70520", "sighting_of_ref": "indicator--df625732-0435-4519-875d-5c70eff0b0f6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18719d07-2b5a-42b8-b228-abad4a6faddc", "sighting_of_ref": "indicator--df625732-0435-4519-875d-5c70eff0b0f6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0b4539-32a6-4db0-b306-6360f659cf9f", "sighting_of_ref": "indicator--0a97ddf1-6191-478f-8bd7-80ff326c96df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0c90b6-0b1c-4dc8-8552-d7605c15239e", "sighting_of_ref": "indicator--0a97ddf1-6191-478f-8bd7-80ff326c96df", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c814dcb2-c9ff-4abe-a118-558e8c1ed704", "sighting_of_ref": "indicator--0a97ddf1-6191-478f-8bd7-80ff326c96df", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d62e44-fa52-496f-b891-19d799b1ad3f", "sighting_of_ref": "indicator--a7d19fba-8d90-46be-ac09-6e037c541b7f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7df083a-cdc8-41d7-bc33-84f8fb9655b1", "sighting_of_ref": "indicator--a7d19fba-8d90-46be-ac09-6e037c541b7f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f72088-cdd6-4fd4-9d1b-dd3f3359c32f", "sighting_of_ref": "indicator--a7d19fba-8d90-46be-ac09-6e037c541b7f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ba4b74-7af1-43e1-a93f-3c86ea9e6a28", "sighting_of_ref": "indicator--dc13005b-d856-49a1-9312-d4ab92e8e6bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c371a02-e86b-4349-a3e8-fd0e617bd972", "sighting_of_ref": "indicator--dc13005b-d856-49a1-9312-d4ab92e8e6bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a704510-5372-48bd-bd45-df771b297cf8", "sighting_of_ref": "indicator--97354aa1-1c57-4b18-8ed3-45c3c0d26c56", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020f2510-5898-4d54-ab5d-15710d474d3b", "sighting_of_ref": "indicator--53026f85-a49a-4764-ba3b-5d4674bf4192", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34b27e5-7e76-4f87-a14b-6cbccfdc78ed", "sighting_of_ref": "indicator--53026f85-a49a-4764-ba3b-5d4674bf4192", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caa7d1e-875b-4fa0-bc3e-0063ad2cec66", "sighting_of_ref": "indicator--53026f85-a49a-4764-ba3b-5d4674bf4192", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78113d79-25e1-468d-8d22-eed0d84d2541", "sighting_of_ref": "indicator--2551b3d6-83b9-4f91-b265-fc4767758a97", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69acc34e-d6f7-4c29-b5b0-05390d1bbb75", "sighting_of_ref": "indicator--e845bbc0-fab3-4ce2-89af-160a57208434", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959933a2-953a-48f7-92f6-cc62e2f33474", "sighting_of_ref": "indicator--77b658a4-f969-4a3d-9d25-726663e5ec55", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19a3567-1896-41ba-b6ce-7697e8692358", "sighting_of_ref": "indicator--3bd07ae6-0755-4e9d-b854-3216feaa3951", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead6beef-10ac-4387-a85c-cd4ff48b8c12", "sighting_of_ref": "indicator--3bd07ae6-0755-4e9d-b854-3216feaa3951", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e4ec02-d564-4570-8f81-efdb28816166", "sighting_of_ref": "indicator--f04d98e1-cfda-4c25-9331-8b12345def00", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20830f76-c2e9-4f10-96eb-a36df83c33cb", "sighting_of_ref": "indicator--36e040a5-8333-4a79-9631-a43a81614a90", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca37d4f-a255-45c4-834a-b962fe6ecdf3", "sighting_of_ref": "indicator--221cc97b-9267-4410-bbba-4a7e25697510", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34aa9d9e-de81-424f-b718-67541f52ea58", "sighting_of_ref": "indicator--221cc97b-9267-4410-bbba-4a7e25697510", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9e1d35-1595-4f31-8d4d-86f7d04c95f2", "sighting_of_ref": "indicator--b583192b-da32-44eb-a591-8000a86cda44", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219c39be-937d-4173-a5ec-0a66b59e1af7", "sighting_of_ref": "indicator--b583192b-da32-44eb-a591-8000a86cda44", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b190d9-334b-4dfd-bca9-e47207b5d842", "sighting_of_ref": "indicator--b583192b-da32-44eb-a591-8000a86cda44", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7309de-f463-44b7-82da-186ea6ae41aa", "sighting_of_ref": "indicator--d2fe1b62-4532-494e-8e86-08185c60935b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3a8986-5270-42e6-82ca-bfc1a8813319", "sighting_of_ref": "indicator--c1b439fb-818d-4f1a-b215-da7d1dbcb943", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8341fa12-8e54-4fb1-a4bb-446dd7028f4b", "sighting_of_ref": "indicator--c1b439fb-818d-4f1a-b215-da7d1dbcb943", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4e9d58-d80c-4002-ba6a-7bfad6f483f2", "sighting_of_ref": "indicator--c1b439fb-818d-4f1a-b215-da7d1dbcb943", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f6962c-e9b1-4819-bebe-fca0adf86ae8", "sighting_of_ref": "indicator--7fea1e71-ed6d-497c-92f4-deb187f5f794", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdae781d-9102-47c1-98a9-df3e93685b48", "sighting_of_ref": "indicator--00578f7f-e0f7-4375-81e0-a71988c02c66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29f333e-c437-4473-b594-2ba104196528", "sighting_of_ref": "indicator--63e65b71-ed49-424a-986a-4338fa8c9cec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992378df-cd6e-401f-8a22-7036f407637c", "sighting_of_ref": "indicator--fb9517d7-93bd-4811-a35c-59317eff5a40", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df45ef7-7c3c-4e23-89b6-03d48c14ffd8", "sighting_of_ref": "indicator--7ef1bc7b-50ac-4f9d-8756-777edc05b9aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b8cc94-50e4-428a-9ec6-b505b8b040dd", "sighting_of_ref": "indicator--74a493dc-c6bb-483a-a079-5ecc8a518dd3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5d9dfd-62a6-4ae7-a528-b2904dede4fc", "sighting_of_ref": "indicator--feafaca2-c455-4cdc-b5d2-fd888d1fb92e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060f1592-4328-412c-ac73-8f65e67c4625", "sighting_of_ref": "indicator--c0d62134-291c-4933-bcde-9d53ee3a6046", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3b11e4-29c2-48c4-bb21-efbb0210a408", "sighting_of_ref": "indicator--480a6c85-1f28-4fc2-a54f-6265ba94271e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090a50f6-2542-409b-9a8c-5142cadae903", "sighting_of_ref": "indicator--a434aa42-9276-434c-8eed-426459386cd9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd01574-4ad7-4a08-8052-729cd4c955bb", "sighting_of_ref": "indicator--864663bc-faff-4ee6-9122-071ea753d1d7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe39ea3-d30b-449e-9a69-72ab36363710", "sighting_of_ref": "indicator--63f48b57-9a63-4a77-8695-c7d8a337c27d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd8b506-2050-4f43-bcc0-8f7e49304c08", "sighting_of_ref": "indicator--3d8afae3-dbe3-4bea-baee-5c6e7fb6b4e1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb6b55b-1656-42a4-b77f-997c6027e224", "sighting_of_ref": "indicator--7d992651-edab-4956-9024-2c61a62ed181", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b292ed-4aff-4136-9886-5926b02c27c1", "sighting_of_ref": "indicator--70a50283-909b-433b-8653-b2604e2e4711", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b68d57-117a-412e-bffa-406d6b51ded4", "sighting_of_ref": "indicator--797ae620-38d0-4d62-a472-2666ab7f72b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24717c00-5bf5-4878-a774-a47b167e409c", "sighting_of_ref": "indicator--8dcac3cc-7763-4264-becc-cf500a3d943e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a6df01-b8c7-44ff-8849-55088035a261", "sighting_of_ref": "indicator--8dcac3cc-7763-4264-becc-cf500a3d943e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce98729b-9194-4b94-921d-ca4440ca6de2", "sighting_of_ref": "indicator--aac3c024-1c74-4bb5-9faa-1676a3427772", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73c5513-3c87-4ff9-9de3-d4c38c2b93e3", "sighting_of_ref": "indicator--2b6d4a94-0237-43e1-909e-2a304519c9d0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a8939b-8531-4505-8328-d7de38d78bc4", "sighting_of_ref": "indicator--2b6d4a94-0237-43e1-909e-2a304519c9d0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2929d7d8-47ae-4a6a-ab7f-ed7e99880f42", "sighting_of_ref": "indicator--a4342acc-c9ec-453b-88d4-d2e84b2a65b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0aad12-0e84-4a7c-b05b-b47c2e515163", "sighting_of_ref": "indicator--a4342acc-c9ec-453b-88d4-d2e84b2a65b1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e20b148-cd58-4687-8935-c4bfa09b2f54", "sighting_of_ref": "indicator--5869db00-5c54-435c-8470-db02c6e35fd6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b21e5f-4555-4988-8bad-3c2b882ffff7", "sighting_of_ref": "indicator--0b0676d9-c1d8-47a6-9f67-93a509db18a3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c40f534-a261-4b58-ab2f-6d815a7ee4ea", "sighting_of_ref": "indicator--0b0676d9-c1d8-47a6-9f67-93a509db18a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f10b04-ae2e-47f3-9996-1e0192eb9aa5", "sighting_of_ref": "indicator--0b0676d9-c1d8-47a6-9f67-93a509db18a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703b3636-8326-4fad-9bba-21fdafa1574f", "sighting_of_ref": "indicator--0c74123d-ac07-4b0f-b49c-f07c030a7c3b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0dc530-7146-4b21-b7ba-9ef11c4dc124", "sighting_of_ref": "indicator--0c74123d-ac07-4b0f-b49c-f07c030a7c3b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb624d7-0c89-4ff7-b919-227400a43aa4", "sighting_of_ref": "indicator--929c8118-eb2d-4f31-a4c4-4a0b04cf730d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525da8b8-55e2-4e3d-ada3-5fd65a3c1fc6", "sighting_of_ref": "indicator--929c8118-eb2d-4f31-a4c4-4a0b04cf730d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359543bb-0be1-44c3-abab-cb1de400f6e1", "sighting_of_ref": "indicator--ebd2eb69-d0a8-4e51-932a-8915edca4dde", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8e421f-6b83-48c4-847c-0e18941311b2", "sighting_of_ref": "indicator--ebd2eb69-d0a8-4e51-932a-8915edca4dde", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa78209f-3f05-4435-8b74-e6afe2ef404c", "sighting_of_ref": "indicator--6bc3ba18-d641-4e7d-9bae-71b48ebdf3b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf896ffd-8635-4ed3-811b-2dc0cdd6367d", "sighting_of_ref": "indicator--6bc3ba18-d641-4e7d-9bae-71b48ebdf3b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74b3afc-bde1-4adc-860d-8a0afd468c54", "sighting_of_ref": "indicator--26737de8-1614-4dbe-8a35-3036b5f30ae4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d362b585-87ac-492f-92d1-9c9af43683ae", "sighting_of_ref": "indicator--49486ca6-44f0-432e-b03b-5d6b1495c9bc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572743be-a51c-4e1d-9a83-1334f3872c92", "sighting_of_ref": "indicator--16ddeaa0-ea45-4ae2-8fa7-f8bed79510d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232d4890-9d64-4c6d-aa39-2e6a809da80c", "sighting_of_ref": "indicator--ea334893-21b6-4e93-a7a0-716fe1c7b907", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf5bd88-41e6-4b32-afde-b9772c78606f", "sighting_of_ref": "indicator--1a4a6176-65e9-4123-96bc-0c64b9bd56a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c3d31e-ea53-44f3-bab6-66c324aa089e", "sighting_of_ref": "indicator--691abac2-a8be-4da7-a041-0667a7bce10f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a32c1d-9f9a-4a15-a44d-9db500dafe43", "sighting_of_ref": "indicator--691abac2-a8be-4da7-a041-0667a7bce10f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0dbe6d-c5e9-4bf5-8425-8d0676940038", "sighting_of_ref": "indicator--691abac2-a8be-4da7-a041-0667a7bce10f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad610a00-8437-4aa1-8433-e6def53d0844", "sighting_of_ref": "indicator--adeb64eb-2838-4955-a1e3-d5e7537e2f30", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608eb2fc-b891-4e49-872a-9a4b62d15005", "sighting_of_ref": "indicator--26c884e4-6fcb-40b4-ba2a-30d82a4ebe1b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a7a2d9-195c-43b2-aa70-68438fec53b1", "sighting_of_ref": "indicator--26c884e4-6fcb-40b4-ba2a-30d82a4ebe1b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd152f4f-27bd-4a46-aadf-937e6620ea3b", "sighting_of_ref": "indicator--26c884e4-6fcb-40b4-ba2a-30d82a4ebe1b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207eef6e-e9d0-4504-88e5-014fc4917e72", "sighting_of_ref": "indicator--92e49f56-9d1d-4d50-9d76-730d71798b65", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c2fdc4-415a-43da-98e6-c21714110656", "sighting_of_ref": "indicator--92e49f56-9d1d-4d50-9d76-730d71798b65", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1747fc4b-a294-4b8d-b03d-a177ac651537", "sighting_of_ref": "indicator--92e49f56-9d1d-4d50-9d76-730d71798b65", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f80677-67b5-43bf-839d-0dec0b671d6b", "sighting_of_ref": "indicator--6f71bdc7-237f-43e0-8e50-87aac6e2ece2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a01355-2657-49d6-b1ca-1099f22e9c33", "sighting_of_ref": "indicator--6f71bdc7-237f-43e0-8e50-87aac6e2ece2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654f6f49-51a4-4b42-826b-44a990e99d88", "sighting_of_ref": "indicator--5552ddf8-120c-41bf-b34d-086e7d875257", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb1c134-4321-493e-8c32-c1b87bf8c24e", "sighting_of_ref": "indicator--5552ddf8-120c-41bf-b34d-086e7d875257", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8c6bbc-6868-4a04-8db0-92e190fe0ae3", "sighting_of_ref": "indicator--b5c94061-22ab-4327-81ed-6e83675c4619", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8deb1f53-e571-4bfa-bb05-36ead59f81da", "sighting_of_ref": "indicator--b5c94061-22ab-4327-81ed-6e83675c4619", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ffbae0-6176-4769-a7fd-f639ea140de9", "sighting_of_ref": "indicator--b5c94061-22ab-4327-81ed-6e83675c4619", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e34ebca-de8f-4daa-9a98-57964f7c76a2", "sighting_of_ref": "indicator--e3834818-18a0-488a-aaf9-94e1e16dcb33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e0c2fb-64fd-4de2-acd0-38e75504d598", "sighting_of_ref": "indicator--e3834818-18a0-488a-aaf9-94e1e16dcb33", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd884931-0dfa-47b1-b527-96b35f9cb275", "sighting_of_ref": "indicator--badcc8da-7bb5-4c83-b4e4-69f7ab5df725", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b29275-b183-4e26-a95e-cd1885e618c2", "sighting_of_ref": "indicator--7d639cec-3ff0-46d4-9985-cdaf7eb72757", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91cb84b3-ef2a-4b99-94e3-6f637ef4582e", "sighting_of_ref": "indicator--7d639cec-3ff0-46d4-9985-cdaf7eb72757", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31af0094-8577-4396-9270-908671cc282b", "sighting_of_ref": "indicator--7d639cec-3ff0-46d4-9985-cdaf7eb72757", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a26b49-83db-44ef-9af1-784d9aaa9be8", "sighting_of_ref": "indicator--ae600758-0b65-474c-a0a0-4066d1f1cd7e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b31f7b-5b89-4b3e-a60c-2f85367937e0", "sighting_of_ref": "indicator--babf3675-2566-4299-b7f1-1c8787091132", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ed46eb-433d-47f3-a0a5-245dd3bc7ec4", "sighting_of_ref": "indicator--babf3675-2566-4299-b7f1-1c8787091132", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1b458c-4587-47c2-8121-9f90cfb96a93", "sighting_of_ref": "indicator--babf3675-2566-4299-b7f1-1c8787091132", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7027be36-4846-4602-b252-139af680005d", "sighting_of_ref": "indicator--f5116f29-cd5a-47a2-ae41-dc8b1f7c8325", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831ccf1a-69ab-4fc6-9ad2-55e8df46e440", "sighting_of_ref": "indicator--565890b2-1858-423d-96da-e44b1091a6e2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4750d87-8bd6-454a-96a3-13436c5c5eca", "sighting_of_ref": "indicator--4b4d86e5-7c7b-4bbf-841f-18bb8d298b4a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a99998e-94a4-4e89-9be0-f19deb050d83", "sighting_of_ref": "indicator--e44f9ca8-4c0e-4a0f-a960-f13d466e2543", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7fd9d5-d7f1-4682-8d89-fda8d6009267", "sighting_of_ref": "indicator--781da9bf-0e37-49f9-a075-455fc8a5fe3c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7492d89-8cbe-440e-947c-05e715b2145b", "sighting_of_ref": "indicator--ee06e85b-22b0-4d8b-a904-dfb121180f41", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb97501-8fd8-45e2-bd70-445668e6c626", "sighting_of_ref": "indicator--ee06e85b-22b0-4d8b-a904-dfb121180f41", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b083faa2-7b42-4317-a55a-884eb402ee73", "sighting_of_ref": "indicator--ee06e85b-22b0-4d8b-a904-dfb121180f41", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d8a7fe-6f22-4851-a46f-330a20a1c3bb", "sighting_of_ref": "indicator--12d736cd-ae54-4033-8cfe-10cb7c87d75a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f2697d-3955-441e-a941-f2351e9fe7b3", "sighting_of_ref": "indicator--0c4f7c26-4feb-43d2-b7ef-9f39a408f41e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0c087c-e5c7-47e5-9e6e-8f90516cf54c", "sighting_of_ref": "indicator--0c4f7c26-4feb-43d2-b7ef-9f39a408f41e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788db8bd-1391-42d6-8fa0-c9ec744a82ea", "sighting_of_ref": "indicator--80ebaa7e-a473-4c98-9cd8-795bc2d333af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b678749e-33be-4e0f-8140-ef457a5e8573", "sighting_of_ref": "indicator--2fe0cdd8-d4ba-420b-93b6-0b4016d293a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdef80c-6c84-482a-a403-e932bb56170b", "sighting_of_ref": "indicator--4ecf9125-d02f-435a-abd3-f215bc415d37", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c109bb12-f538-4c99-9d54-6263f5ddbe77", "sighting_of_ref": "indicator--4ecf9125-d02f-435a-abd3-f215bc415d37", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d50854f-cf5c-4a39-91eb-38604491d8da", "sighting_of_ref": "indicator--4ecf9125-d02f-435a-abd3-f215bc415d37", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47aa1645-231e-429e-9543-018736ba0eac", "sighting_of_ref": "indicator--b4a93738-f49f-4672-939a-5e829a814e7e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98da4c5-2f7b-4f87-ad3a-dfe823c856c0", "sighting_of_ref": "indicator--b6e23a19-0a5e-4af1-84a3-4ed12fed8f0d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1d557f-56a7-44fd-b990-f37832807d8a", "sighting_of_ref": "indicator--b6e23a19-0a5e-4af1-84a3-4ed12fed8f0d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b12a7e-1300-49d2-a7b5-bcf912736f57", "sighting_of_ref": "indicator--b6e23a19-0a5e-4af1-84a3-4ed12fed8f0d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c01a36-27ba-4567-afc4-7e3c3c034e80", "sighting_of_ref": "indicator--d0d3b1f6-074d-4bd5-ad73-c28766d378bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb0444e-3961-4d8f-ba99-b7f149d1da4d", "sighting_of_ref": "indicator--063d4729-8ebd-4568-a241-0404fbce9cfa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374020d5-6358-4826-b00c-c977575f9da6", "sighting_of_ref": "indicator--544b23f6-7e04-4e19-a675-c4536a2fa54c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de73a655-c3cc-46fb-b36d-6dc965bbc9ea", "sighting_of_ref": "indicator--21ab77fb-7d6b-4aad-837a-685e09e104a9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe23569-c532-4ac4-a3f0-6c226e2c6109", "sighting_of_ref": "indicator--21ab77fb-7d6b-4aad-837a-685e09e104a9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7798281f-e41b-4362-8022-35b6203d4486", "sighting_of_ref": "indicator--ed97f1a1-c616-4ef9-ad4e-efe5b9935509", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8c8074-1ad9-4f2f-b8b3-496617d25248", "sighting_of_ref": "indicator--18625768-c776-4694-9ad0-7245385b9049", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638ba435-e7b1-4c21-8757-7e5b21d7fb19", "sighting_of_ref": "indicator--18625768-c776-4694-9ad0-7245385b9049", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd97439-10c5-479b-8732-287f3627ea36", "sighting_of_ref": "indicator--18625768-c776-4694-9ad0-7245385b9049", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad42af16-7e02-43c5-abad-d43e705044fe", "sighting_of_ref": "indicator--ceb48974-c72d-46ed-b76d-dd185ea90f8e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e707e7ae-77c4-43a1-9fb5-68bf7334f3ec", "sighting_of_ref": "indicator--ceb48974-c72d-46ed-b76d-dd185ea90f8e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108e5719-a04c-4b26-b4b0-a984535974d1", "sighting_of_ref": "indicator--ceb48974-c72d-46ed-b76d-dd185ea90f8e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3869bacf-3810-44cb-a698-c99373a006de", "sighting_of_ref": "indicator--b7ac08d6-17cb-4bbb-a409-d92f1977fbde", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef007af1-8e7a-408c-8698-78b0906efda9", "sighting_of_ref": "indicator--57a84a65-fbf3-483b-ae63-9983f77bc043", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb32dc4f-626a-41ad-94c9-e1e229bb3c43", "sighting_of_ref": "indicator--0ca39cf7-bab3-44f9-8f8f-68d928a5408e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c358bf-0940-484f-9aac-0cb800ec4135", "sighting_of_ref": "indicator--90a1465f-91e6-47fb-8cbc-d909a1367833", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d8ecd8-7c0e-43cf-b75b-f7ca8f140c78", "sighting_of_ref": "indicator--98707a8b-9ca5-4acd-8e1a-f79272edd3f5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b638e32-33f6-4588-b784-c9eb79e23304", "sighting_of_ref": "indicator--e161247c-fa2c-486d-bb39-389d2c330942", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74313619-8b26-49aa-991c-4bae20ff514c", "sighting_of_ref": "indicator--52e31be3-94f7-4b48-9656-76153e056c19", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d9757d-ae93-44e3-9b40-6605a88b8dbe", "sighting_of_ref": "indicator--6fecf643-66c8-458f-8553-6962b1091f4e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a95c5e-49b0-4911-94ca-937f84bc85fa", "sighting_of_ref": "indicator--af101437-52a2-4f6e-b8ed-9c02083f24ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928fb490-a5ec-4b1a-be7a-70a0df78be1d", "sighting_of_ref": "indicator--b3ba5e99-ac4d-4d9b-8f8e-dee035f7ba98", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ea11f8-8352-4108-8988-1054aa17d023", "sighting_of_ref": "indicator--da102919-7130-4b38-a711-4c827d5f79f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f88caf6-7a55-4155-88ca-d1974fbec9d9", "sighting_of_ref": "indicator--176bf817-b34f-4cab-a21e-25dfb762dccd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4a6466-779b-4e5e-a1d7-94fae4fcb6c1", "sighting_of_ref": "indicator--dd9a731a-8693-494b-a747-bacf8b25895b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597f290f-cf57-459f-abf0-23abf5e474ae", "sighting_of_ref": "indicator--16a9c32b-775d-4aa2-9955-07f6d890aef2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d14b1a-953c-4cf9-8f6a-d0ec11f95a6f", "sighting_of_ref": "indicator--809cb0cb-f0e0-4d54-8b55-b51cb6198389", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83de570e-a81a-418b-b617-b5fd1de336d6", "sighting_of_ref": "indicator--61bf1d28-f49f-40dc-92c8-baa0be101876", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4085d589-de59-4b8c-b46a-dc9518e846da", "sighting_of_ref": "indicator--68868786-e598-4611-bbfc-be1b69233dd9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a342fb5-7ec1-412d-afc6-faff3ef9045d", "sighting_of_ref": "indicator--f3bf9d87-376d-4d2f-90d7-bac141601b82", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d62033-2e24-4e14-92fd-78737da6ba83", "sighting_of_ref": "indicator--386d57be-0b70-494c-8973-1ff0b7dd06e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3eeee52-fba5-4c67-a332-0d358e07f3ea", "sighting_of_ref": "indicator--82c917b0-8cf7-4957-bd15-d1da93c90287", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5a5ca0-14d1-462d-80a8-a5baf0fbf021", "sighting_of_ref": "indicator--08f519f2-4a3a-4bbf-8161-886283f2737d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca4cffc9-1fb7-4773-8f2c-e8099cb7a42c", "sighting_of_ref": "indicator--15f1a295-5d26-4cd6-8e59-92af8c003ce2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa283375-0528-43c1-8ff5-4472d38c32d5", "sighting_of_ref": "indicator--92add7bb-39fe-4920-897e-465fc3dfaf2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06707db8-522f-413f-b6c9-8ef0be220b76", "sighting_of_ref": "indicator--c1588387-1ce8-44ef-abc4-f4508d061f90", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f037e46a-9f94-46f3-ae28-acb07a069fc4", "sighting_of_ref": "indicator--88ef1968-959c-4db0-9215-5cdf7fba9a3c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6715fdc2-9b00-4e60-8c4c-885fb3813bd3", "sighting_of_ref": "indicator--7a331c4a-6ffb-4d71-ae20-67a84404dba7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fff2691-c2a7-484b-93c9-1bf088103323", "sighting_of_ref": "indicator--b6f8e1d9-9fb7-4f0d-8f53-c65425d80452", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68304f8-c9fd-48ae-96b3-b3244d0755de", "sighting_of_ref": "indicator--40c45afd-0c7b-429b-a024-9df26c844736", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdb1a40-98ab-4dca-bbc7-06bf9da4ea43", "sighting_of_ref": "indicator--b15ed679-f269-4f65-a60c-647b4b9f4463", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee1d8ec-42a0-453d-9c5b-90702678148d", "sighting_of_ref": "indicator--3c78f584-ca6a-48fa-80ea-4ec633a98220", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fb06df-8db7-47e2-8aa6-b6b85f1a413a", "sighting_of_ref": "indicator--351c4877-5fcd-451c-9812-ab133e43c17b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d57a1d-bb1f-4486-a019-625f94e80a72", "sighting_of_ref": "indicator--d4341e97-7240-4980-999b-ac96244d2f42", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50bdeba-6a39-4e15-a718-1eadfa717a1d", "sighting_of_ref": "indicator--d4341e97-7240-4980-999b-ac96244d2f42", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c318c266-6d60-4bcd-b97a-b22fb4c3cfc7", "sighting_of_ref": "indicator--d4341e97-7240-4980-999b-ac96244d2f42", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2f14bb-4c95-403e-b6ba-1c533ab9ec13", "sighting_of_ref": "indicator--99b678f1-9679-4728-a8a6-dd9c3fae8b33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c83c2d9-aa35-4d7e-9c23-fd31e6f1db0b", "sighting_of_ref": "indicator--99b678f1-9679-4728-a8a6-dd9c3fae8b33", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961fc8c3-b378-427f-98cf-4b6242b21aba", "sighting_of_ref": "indicator--99b678f1-9679-4728-a8a6-dd9c3fae8b33", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0a75fd-8d41-43dc-a1a1-e8cc12d6473b", "sighting_of_ref": "indicator--a8c503b6-dd66-4acd-a85f-af4a69b461e1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecba3c3-7398-43ad-8764-a537ec8ea8f2", "sighting_of_ref": "indicator--a8c503b6-dd66-4acd-a85f-af4a69b461e1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aefc926-3358-4df5-aeaa-3055d87aa915", "sighting_of_ref": "indicator--544c5d0d-5382-4e91-b96d-4ac0703a753b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d467408a-35c4-4ad0-a480-9cb09eb24219", "sighting_of_ref": "indicator--e65a15bc-a76b-4b7d-8a75-0c606250516f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d43fbe8-2a4c-4c26-9e9b-ab68615acb45", "sighting_of_ref": "indicator--e65a15bc-a76b-4b7d-8a75-0c606250516f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85a6b58-330a-4111-b23a-5c7b7067a65f", "sighting_of_ref": "indicator--e65a15bc-a76b-4b7d-8a75-0c606250516f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d722f2-9681-4027-8031-544d5575593b", "sighting_of_ref": "indicator--92a8d88a-8607-4cec-894f-f562c9ec019d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fa4866-0c6c-4b2c-a93f-f30e850475e2", "sighting_of_ref": "indicator--92a8d88a-8607-4cec-894f-f562c9ec019d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9c910e-2d1b-4861-9184-55d81cc48c32", "sighting_of_ref": "indicator--319955bb-c547-443b-80d3-b04debd4969a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ca20ef-fc59-40fc-85c9-9f67e1979c77", "sighting_of_ref": "indicator--319955bb-c547-443b-80d3-b04debd4969a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb74ae7b-529b-4d49-b195-896d3e7b15be", "sighting_of_ref": "indicator--319955bb-c547-443b-80d3-b04debd4969a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877c3752-1ec5-46d3-ae72-57c360f56486", "sighting_of_ref": "indicator--2e19b58b-e90b-4e16-bfd0-f096741433d2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e30eabf-382e-447e-88c8-fc310e2d1ed3", "sighting_of_ref": "indicator--2ee06cb0-aefe-4eb7-8474-103027646f5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59548cb4-1aa5-4c8d-b3e3-7aa588f81ca4", "sighting_of_ref": "indicator--6d9efd56-e391-4c55-a935-e2647dc78076", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa72728a-15fa-4a59-8046-42a3448e6784", "sighting_of_ref": "indicator--3682d14f-7836-40c5-9e40-5388cb049f7b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da1c8ef-7abe-468e-832a-a7d96d8b82d5", "sighting_of_ref": "indicator--9653ccae-2ee4-4408-9acd-24e6bcd52295", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4feb8e81-529a-481f-8d6b-43818b122472", "sighting_of_ref": "indicator--b760cf7d-0494-4ddd-9c88-eb2ec918b9a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156bb45c-323a-4cff-8539-4e908298f791", "sighting_of_ref": "indicator--b760cf7d-0494-4ddd-9c88-eb2ec918b9a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c87f4b-a8bb-4da5-8cd8-525270b074e4", "sighting_of_ref": "indicator--d4e7d9a3-62c2-4507-90f2-721d1a027355", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cce18a-baf2-4d74-bd4f-96812c6bd529", "sighting_of_ref": "indicator--4f7cee85-fdb7-4d0e-aa96-0f24abb2efec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486c8eb0-ddc4-426d-9ca4-9e14bc198142", "sighting_of_ref": "indicator--d366a1bc-0043-4319-afa0-614bc936251d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe4066d-3145-4184-91a5-82aadd6f130e", "sighting_of_ref": "indicator--5b24ea79-e6f3-4ddd-b59c-0e83e9fca92d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6338eebd-1e91-4eb8-99b2-da201c81d08c", "sighting_of_ref": "indicator--074b84a9-b20d-4143-bae2-923b5ff623b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d5d1ca-b432-4aa6-aebe-3ffcba0301dd", "sighting_of_ref": "indicator--074b84a9-b20d-4143-bae2-923b5ff623b5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec274e2-1ad4-4345-acdc-65167bd8f6d1", "sighting_of_ref": "indicator--6b41cf19-35e5-45c8-9161-19f360685e29", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf40c2bd-78bf-4716-a591-e51cb9ecad87", "sighting_of_ref": "indicator--8af5e44d-8eba-4400-98ae-ab7506e41139", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a482e08-4966-4778-8309-94858362ec8b", "sighting_of_ref": "indicator--8af5e44d-8eba-4400-98ae-ab7506e41139", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b51ce4c-3ffb-4f93-8005-367ee789dcb0", "sighting_of_ref": "indicator--d1ca9357-e9ef-461e-92b6-09b985ff8184", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baac4a1a-a76d-4c4c-b6de-cdcc582e08d6", "sighting_of_ref": "indicator--357820d2-e9ee-49eb-b095-04f72b59f878", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4998fb70-b035-4a71-a32e-31c365ed362d", "sighting_of_ref": "indicator--357820d2-e9ee-49eb-b095-04f72b59f878", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac514b2f-f8b3-4c9d-99a1-d60c8bb7f727", "sighting_of_ref": "indicator--2aa10d53-36af-4ad4-a142-d2d0ba4c7ad2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3733369d-fe9e-4c38-a667-70812d22c759", "sighting_of_ref": "indicator--2aa10d53-36af-4ad4-a142-d2d0ba4c7ad2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7e509b-07a3-4243-9491-1f7d863c4e1a", "sighting_of_ref": "indicator--2aa10d53-36af-4ad4-a142-d2d0ba4c7ad2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eac9c96-6a49-4cea-a0f2-ee1c899d64ca", "sighting_of_ref": "indicator--6005a780-8d39-45c7-a394-4a618e3c74fc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33e218c-ec06-43bc-ba69-fca6450f198e", "sighting_of_ref": "indicator--859d2f6b-d9ce-4910-a264-4adf0d2cf888", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179651ef-b56c-4457-ab76-7499dfe4e2de", "sighting_of_ref": "indicator--d977f0ce-0011-47f7-93f9-adb787764fba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b425bdaa-eaf1-4f86-997a-1b10dea49d25", "sighting_of_ref": "indicator--d84465ea-df08-4914-b3c1-10dd2e9fbf68", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3e9bd8-e921-4620-944f-b621cd82cf53", "sighting_of_ref": "indicator--d84465ea-df08-4914-b3c1-10dd2e9fbf68", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a14d697-6153-4a32-9005-a529ce9b2668", "sighting_of_ref": "indicator--d84465ea-df08-4914-b3c1-10dd2e9fbf68", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58304aac-96a1-41b3-b1e7-450488c33548", "sighting_of_ref": "indicator--9600620f-9b7d-4b2e-a7df-faafe8f4689b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553b3385-b4ae-498e-bf7b-c7534a282c72", "sighting_of_ref": "indicator--9600620f-9b7d-4b2e-a7df-faafe8f4689b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ceaa56-9e09-4989-9181-5ec05c958ee2", "sighting_of_ref": "indicator--9600620f-9b7d-4b2e-a7df-faafe8f4689b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075ec693-9dec-4933-878d-1ce2f863e392", "sighting_of_ref": "indicator--2916e83b-f6cc-4142-bfc0-b67879a33ac6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e87ffd-ceee-4d17-a9f3-1ad040f4337d", "sighting_of_ref": "indicator--2916e83b-f6cc-4142-bfc0-b67879a33ac6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640535f0-a436-4ab9-87e5-13a1152bc5f5", "sighting_of_ref": "indicator--2916e83b-f6cc-4142-bfc0-b67879a33ac6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f848f4ed-c64f-4335-a6bf-a02fab7f77a2", "sighting_of_ref": "indicator--66d6e488-a812-4790-9371-88d4569b10fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d856e1-f402-4385-acbb-f5a99d99d74b", "sighting_of_ref": "indicator--66d6e488-a812-4790-9371-88d4569b10fe", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60282dad-37e0-4487-928e-c46b73ff3a5a", "sighting_of_ref": "indicator--3aba7965-ad9c-43ad-b157-18ec49285015", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2178cb-cf91-4b7c-82e3-6153635bd14e", "sighting_of_ref": "indicator--56aed349-a61b-4e6d-9ea2-4c8958f26805", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348c8f49-a3ef-4289-a0ad-411de4bb073b", "sighting_of_ref": "indicator--56aed349-a61b-4e6d-9ea2-4c8958f26805", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3ae562-7297-47d2-95e5-c40b934e0067", "sighting_of_ref": "indicator--89275616-f129-4815-8f05-2db1c0cb08f9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98c1022-a549-4e67-857b-1f3690a14626", "sighting_of_ref": "indicator--0fab9f13-8982-4136-9a3c-d0d00f94eaef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e742b1-f25d-493e-818d-1c466609865d", "sighting_of_ref": "indicator--0fab9f13-8982-4136-9a3c-d0d00f94eaef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8138cba-c40e-4977-bf20-0394e2c25777", "sighting_of_ref": "indicator--62f48877-0b79-48d7-a63a-ba17666dc4c8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6c082e-03f8-4a09-b594-51ce98b093dd", "sighting_of_ref": "indicator--62f48877-0b79-48d7-a63a-ba17666dc4c8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f525c2-5e44-4bbf-9a14-7da170a81cbc", "sighting_of_ref": "indicator--4245e7a2-46ec-496b-b775-bfa3063bcd05", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fef195-7711-429f-beb8-194c1284c1cb", "sighting_of_ref": "indicator--4245e7a2-46ec-496b-b775-bfa3063bcd05", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525d4a38-3873-4807-b023-c51def47bd5b", "sighting_of_ref": "indicator--4245e7a2-46ec-496b-b775-bfa3063bcd05", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6012c1ed-788d-4513-b621-56457b2bcf53", "sighting_of_ref": "indicator--d1b307ca-2cfe-4972-8727-8c5f11c4cf41", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d0ad22-ff71-4d37-8434-531c73dff411", "sighting_of_ref": "indicator--d1b307ca-2cfe-4972-8727-8c5f11c4cf41", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105e37a6-a900-48b3-9b5e-1345a4e2aead", "sighting_of_ref": "indicator--d1b307ca-2cfe-4972-8727-8c5f11c4cf41", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71013e6-5b0b-49f4-b683-8812d233fef9", "sighting_of_ref": "indicator--5d289c20-87b6-422d-8151-9524fc352778", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff0504a-c048-430c-bc34-1b53fb654232", "sighting_of_ref": "indicator--5d289c20-87b6-422d-8151-9524fc352778", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb62ffb-6f95-4d2f-810c-52d0441afb3a", "sighting_of_ref": "indicator--5d289c20-87b6-422d-8151-9524fc352778", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42820766-5d4b-4d6e-93de-5c35ff92e38f", "sighting_of_ref": "indicator--0eb77f0b-f846-46b3-a09f-e0416fd054de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9383a7c0-80ae-4c23-b18b-9ad6a559ea55", "sighting_of_ref": "indicator--d774952d-d409-4e21-a354-900fad536ce5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866663a0-a3a8-4dc8-9302-80ea686f3b3b", "sighting_of_ref": "indicator--fe9e5347-056c-4b61-a191-43c40a79857a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed69588-f7ae-492f-bd67-510fb2b63b6e", "sighting_of_ref": "indicator--a85acef9-7672-452b-9fc0-6742432aaec4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91fe037-4dc6-436d-b1d5-f9b16207107d", "sighting_of_ref": "indicator--a85acef9-7672-452b-9fc0-6742432aaec4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fe9086-7953-4855-ba0a-0b604c0c45e3", "sighting_of_ref": "indicator--a85acef9-7672-452b-9fc0-6742432aaec4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f0adbc-24fd-43d0-8a8e-df92d6b5d239", "sighting_of_ref": "indicator--43909e1f-56c8-43b5-bf8e-d51f24550543", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d46e4b-5a06-48ec-a41e-512c8dff969e", "sighting_of_ref": "indicator--682b44df-37ca-4c90-a740-14686e2c18c7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996876de-c39c-4e29-9af4-7e713bc330bd", "sighting_of_ref": "indicator--77a79d3a-f4b7-4d01-bb5d-9be035b888cf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cc2234-002b-42f2-81b9-6c91e9424b97", "sighting_of_ref": "indicator--fed57d08-ad90-476b-a2cc-4bf69d3c7742", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbf9a74-f231-49a7-8862-e208e3fc4a0a", "sighting_of_ref": "indicator--fed57d08-ad90-476b-a2cc-4bf69d3c7742", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d6ec48-5d93-462e-bf11-a5e937ab3600", "sighting_of_ref": "indicator--143d0ace-0354-48b7-9340-75fcf6b69186", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7d6d45-cc25-4f77-8122-0170d2aff4ec", "sighting_of_ref": "indicator--143d0ace-0354-48b7-9340-75fcf6b69186", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1761a0-3f86-4776-9223-957479933b87", "sighting_of_ref": "indicator--143d0ace-0354-48b7-9340-75fcf6b69186", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28569d4-66be-49af-b4d8-cba7ff8a82f6", "sighting_of_ref": "indicator--ae21641d-8feb-4110-97e5-129a9e684362", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab606d7f-2005-4a9a-a2a8-6c878274b25b", "sighting_of_ref": "indicator--ae21641d-8feb-4110-97e5-129a9e684362", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ee1f1f-25f7-4061-b5eb-8ee9fb15c0ad", "sighting_of_ref": "indicator--ae21641d-8feb-4110-97e5-129a9e684362", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7722aa94-2dca-4c6a-80e3-5b68763d4200", "sighting_of_ref": "indicator--57e722f9-4e7a-4bd1-ba30-4dcbb9d14b7b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab75b53-31f4-4bbf-907e-1ce843ca7a86", "sighting_of_ref": "indicator--57e722f9-4e7a-4bd1-ba30-4dcbb9d14b7b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fb9c3d-03e7-466c-8bce-db09b242bb68", "sighting_of_ref": "indicator--fd9dc0b5-4ab6-4f4d-b6da-98dd1db89141", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5c2ce9-77d8-4133-b88c-8fc2cbf8fdf5", "sighting_of_ref": "indicator--fd9dc0b5-4ab6-4f4d-b6da-98dd1db89141", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc95a1c-5acf-48e8-ac2e-470944b245c3", "sighting_of_ref": "indicator--3deebb2a-c207-4bfd-913d-52ba4d099fdf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b67a947-fa17-4aec-b6c1-3e4205a45c24", "sighting_of_ref": "indicator--3deebb2a-c207-4bfd-913d-52ba4d099fdf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6865b030-6c91-4bf5-839e-0f1c933380e4", "sighting_of_ref": "indicator--8902358e-a7da-4606-8343-9cca6fa7becf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56422dbb-386c-4975-95a1-ef494e310654", "sighting_of_ref": "indicator--8902358e-a7da-4606-8343-9cca6fa7becf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d426dd-4abe-4167-9695-9954f6a7724d", "sighting_of_ref": "indicator--8902358e-a7da-4606-8343-9cca6fa7becf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b44502-15b2-400b-ae91-4b7f5609863c", "sighting_of_ref": "indicator--aa94b808-f7de-4818-960d-2d721843d8a6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e730da-4985-44a3-b01a-03abf665d2ab", "sighting_of_ref": "indicator--aa94b808-f7de-4818-960d-2d721843d8a6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9cee9d-a140-4ebe-9c2a-5053be2fc6c5", "sighting_of_ref": "indicator--aa94b808-f7de-4818-960d-2d721843d8a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97257d7-2b8e-43b0-9210-53e5353930ac", "sighting_of_ref": "indicator--d400adff-0559-4d79-87ae-35804c1c836d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef04249e-83ee-41d8-9d01-5e7a4ffe464f", "sighting_of_ref": "indicator--5784cc9c-89c2-4d1c-8a6c-9126e872ce7e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b857d140-aaaa-4029-b6d9-3bcdd5f5c3a3", "sighting_of_ref": "indicator--5784cc9c-89c2-4d1c-8a6c-9126e872ce7e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f260d124-ce73-4265-917c-b4db5478df6f", "sighting_of_ref": "indicator--5784cc9c-89c2-4d1c-8a6c-9126e872ce7e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc93cd3-7766-4a06-827e-42b6a44e1d9b", "sighting_of_ref": "indicator--c8b15c60-f2eb-49f7-8f1e-c8acd30545e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b626a3-a396-4ffc-ae32-eadc19d59a65", "sighting_of_ref": "indicator--2b4fc76e-6c06-45be-a830-6755e29c1c54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842f4337-4984-4cfa-a839-b0626a6b583f", "sighting_of_ref": "indicator--2b4fc76e-6c06-45be-a830-6755e29c1c54", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e5c034-dc6b-49b9-9b46-045159c230d3", "sighting_of_ref": "indicator--2b4fc76e-6c06-45be-a830-6755e29c1c54", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35f5d42-d741-4a9e-bd37-3cfbd8eb3a15", "sighting_of_ref": "indicator--31f4f9b8-1efc-4912-adf0-b8a730416679", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f37cc1-1b16-433b-963e-88fed92a59f4", "sighting_of_ref": "indicator--b0b740d8-4dac-43bd-b1c8-0c5244f30b55", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced956d4-58e0-4918-a8f2-1121b09ea34b", "sighting_of_ref": "indicator--b0b740d8-4dac-43bd-b1c8-0c5244f30b55", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00f9a64-befb-413a-95c9-d63ba2374df7", "sighting_of_ref": "indicator--b0b740d8-4dac-43bd-b1c8-0c5244f30b55", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ac17cf-e40a-44ae-8bc2-4b0f6b6e09d6", "sighting_of_ref": "indicator--eccca7c7-05fd-4f18-998b-a91c9e6bc528", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bd91bc-a4c7-4dca-84e9-2bb4faa19150", "sighting_of_ref": "indicator--eccca7c7-05fd-4f18-998b-a91c9e6bc528", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8baa55e4-f955-4072-aaa0-c7482d14cc09", "sighting_of_ref": "indicator--eccca7c7-05fd-4f18-998b-a91c9e6bc528", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb07c23-096f-494e-8a9d-cc3033f674b6", "sighting_of_ref": "indicator--ab40f057-1269-46d9-bbed-4969c1fd4196", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9dadc4-ad09-49f6-9352-eda2106ff04c", "sighting_of_ref": "indicator--ab40f057-1269-46d9-bbed-4969c1fd4196", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1a22e3-b52a-4f19-88e0-74c0240ec5f0", "sighting_of_ref": "indicator--ab40f057-1269-46d9-bbed-4969c1fd4196", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f5afea-fb9f-4148-a6cf-d956b24b66fa", "sighting_of_ref": "indicator--ce649840-b5d3-463d-9599-2f489a5dd392", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43ea621-7a16-45e5-bc1c-7e6e170231e4", "sighting_of_ref": "indicator--ce649840-b5d3-463d-9599-2f489a5dd392", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e428666-d614-4ae0-8956-4d7325bcb297", "sighting_of_ref": "indicator--ce649840-b5d3-463d-9599-2f489a5dd392", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec88a0a-4372-4d57-a805-204b40561b07", "sighting_of_ref": "indicator--74d8590e-bb99-4651-9846-9d413fec8f03", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121eff84-e143-40a0-81f7-e88abb59d081", "sighting_of_ref": "indicator--8591c4c7-f046-4f93-8461-e6fdaf5d831e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec808fa-f009-4323-aee8-59f0a6d73c3d", "sighting_of_ref": "indicator--9c968271-0464-4c36-b6bf-644ef9067cdd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbd118e-3795-4195-af6e-6c715502ba35", "sighting_of_ref": "indicator--6e0b4419-54b2-441c-97c3-97c7d179fe55", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789990c9-5e80-4887-9b4d-c30ca4991c6a", "sighting_of_ref": "indicator--6e0b4419-54b2-441c-97c3-97c7d179fe55", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21bbbe18-dfc7-4ade-85b0-c458145742a3", "sighting_of_ref": "indicator--6e0b4419-54b2-441c-97c3-97c7d179fe55", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41ba451-b11e-40d8-9b2f-27a01562e086", "sighting_of_ref": "indicator--56a6eba0-24ec-453d-bb8a-965408570d40", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fa811f-2b12-4b61-bf29-82dfd86dc5b6", "sighting_of_ref": "indicator--37deecef-d3f3-4a5b-9bee-6b55a663f183", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0390ab-a0ce-462b-830e-f135a7bbd743", "sighting_of_ref": "indicator--37deecef-d3f3-4a5b-9bee-6b55a663f183", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eceeaf0a-e5de-451e-8e37-33977c4687f2", "sighting_of_ref": "indicator--37deecef-d3f3-4a5b-9bee-6b55a663f183", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a506cf0b-694b-48c5-90b8-a576061e7348", "sighting_of_ref": "indicator--4ef66434-1f0b-486c-a509-07e732b23696", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f422f8b7-f10f-4406-b2a8-f88566dabffe", "sighting_of_ref": "indicator--4ef66434-1f0b-486c-a509-07e732b23696", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e47bee-ae81-41df-92be-0f2c2d1ff826", "sighting_of_ref": "indicator--4ef66434-1f0b-486c-a509-07e732b23696", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435a46fe-56e9-4555-91a3-73b792b57916", "sighting_of_ref": "indicator--e69b4bab-3340-4c67-98f1-725c5074d65b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143aca4d-e495-4da9-9dff-b24995ed870f", "sighting_of_ref": "indicator--90725c8c-fbd6-4bc3-8540-5bd0c83a658a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1038afd3-f0e7-4103-8727-06fb01f4df84", "sighting_of_ref": "indicator--90725c8c-fbd6-4bc3-8540-5bd0c83a658a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce640bd-73b3-4cac-b7c1-400ec506bbe9", "sighting_of_ref": "indicator--90725c8c-fbd6-4bc3-8540-5bd0c83a658a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1205b34-18e1-4d54-9810-f9ea71420b99", "sighting_of_ref": "indicator--f543e91b-9039-4d97-b5b4-2dba8d25f6b6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63714c0-855e-4372-9225-7ebc04997eb6", "sighting_of_ref": "indicator--f543e91b-9039-4d97-b5b4-2dba8d25f6b6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c944f879-63bf-4902-9258-96d99247dcd0", "sighting_of_ref": "indicator--5eacf8be-846c-469a-9a69-5f1e52ecd20c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8867087-2dde-4f7b-9942-fa8dddd236e8", "sighting_of_ref": "indicator--5eacf8be-846c-469a-9a69-5f1e52ecd20c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386fdcc4-a3c1-4297-b294-181fe9d5a792", "sighting_of_ref": "indicator--e76a6f4f-dcc2-40a3-bad3-95420a810b91", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cec316-e849-468c-bd5c-efecd705bdbb", "sighting_of_ref": "indicator--38160adc-ac04-43ea-b42f-9afb1098222f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a39d6e-5f76-4eb1-8901-5c3f71a7a278", "sighting_of_ref": "indicator--38160adc-ac04-43ea-b42f-9afb1098222f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d345f2f-1b95-492d-b31e-434042969ce3", "sighting_of_ref": "indicator--88738b74-c8f5-4fd7-9369-0a7b4173cdc2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd7e495-c400-4a9d-88ed-9491b8e7bff9", "sighting_of_ref": "indicator--88738b74-c8f5-4fd7-9369-0a7b4173cdc2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c863c6f3-9d78-470a-a2e9-234fc56e67d8", "sighting_of_ref": "indicator--88738b74-c8f5-4fd7-9369-0a7b4173cdc2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12494d51-3bbd-4529-9d63-cb4e32e889e4", "sighting_of_ref": "indicator--73c7576f-24c7-4414-9403-7181fe52ed4d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd676604-59bb-4f4e-81b8-d8fb906ebac6", "sighting_of_ref": "indicator--73c7576f-24c7-4414-9403-7181fe52ed4d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3328c21d-8bda-49ca-bb8e-d0186000f79d", "sighting_of_ref": "indicator--73c7576f-24c7-4414-9403-7181fe52ed4d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c12e7b-4693-4399-bfb5-8f870b1168f7", "sighting_of_ref": "indicator--3126348b-21df-4937-9b3b-49853bb05ae6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4fd23e-d64b-4264-98ce-0d0b7ba1707f", "sighting_of_ref": "indicator--b373b76a-2940-432e-a79c-1e68bbbffc7b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e6fd55-441a-45a2-951b-079991499810", "sighting_of_ref": "indicator--2e7831ab-a3fe-4c20-8375-6952395e362f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7bb95c-60e6-496c-a548-01c0f89064b4", "sighting_of_ref": "indicator--d6275513-4a93-4a0a-868e-a6faf38e664a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48750152-994c-493a-8412-0b26f85b0852", "sighting_of_ref": "indicator--400faeec-7644-4990-9afc-bf70e5bacf41", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93ef76a-d81a-4d20-a9f1-7e55e281809d", "sighting_of_ref": "indicator--0b1a6512-b7fc-492d-b997-b750bde40d0f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a0ed09-bb7b-47dd-8401-fb020153bcba", "sighting_of_ref": "indicator--0b1a6512-b7fc-492d-b997-b750bde40d0f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7a3fe5-76f8-43cc-8c30-302b71b08608", "sighting_of_ref": "indicator--fef0c1e5-cbcb-4492-bd0d-9dc66624c37f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bc96b0-37d4-4113-a11d-635e482d593e", "sighting_of_ref": "indicator--1f3bbfc8-f2e3-45d5-b606-6f44fab2570c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8b1957-a68c-4198-bd06-643de1ed12c0", "sighting_of_ref": "indicator--1f3bbfc8-f2e3-45d5-b606-6f44fab2570c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30ec194-d399-47fb-b20a-20ddf8128684", "sighting_of_ref": "indicator--1104b4d9-1bd2-42da-a1d5-dbe6c5080e81", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb155447-0aa5-4d04-a099-e214e48fc9d0", "sighting_of_ref": "indicator--bff69dd5-82da-4310-aed0-27d569190a66", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fd2f56-4568-4ca7-a93a-f0425c76bc2c", "sighting_of_ref": "indicator--0a73d917-5c93-404c-a5f2-1d482c599d01", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3683f430-f639-4b1b-99f6-11b3d19bf3ff", "sighting_of_ref": "indicator--f1a61ce1-3a44-44c0-8209-91594ae88bff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de19f6d-ea9d-42cb-941b-fa71c6d8dcd0", "sighting_of_ref": "indicator--14a88bd5-a323-495f-9a0a-de64e582766d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793d5beb-ddfb-46db-8e9e-d34809f8a474", "sighting_of_ref": "indicator--f2570875-360f-4b80-a8f6-f7422022b5d6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7f2f7f-bb4d-41f6-8fb4-d4da6a3e9b11", "sighting_of_ref": "indicator--051e3552-d8b3-417b-ab33-f536733cc557", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802ad414-fe0b-4a62-acd7-b5bd8e27bf28", "sighting_of_ref": "indicator--d2a9dccf-4618-4953-af93-2bad9f5d41ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4a4284-708a-4e47-a078-1a96e1bcccd1", "sighting_of_ref": "indicator--d2a9dccf-4618-4953-af93-2bad9f5d41ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b84e553-80d5-44fe-8634-f568e5bae1ac", "sighting_of_ref": "indicator--03b4cd20-5eb9-43e7-8b0b-4baeda085c84", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dc5903-c493-4cf0-bf77-e27c01f7a8db", "sighting_of_ref": "indicator--bec52714-8cab-414c-a837-d1a08e753045", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f3fb94-2377-4c60-ad42-8f7c2c936179", "sighting_of_ref": "indicator--ae53387c-29ac-4bdb-b5e4-e451354c4634", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3b7457-c1c9-4aff-9d9e-766996be9db7", "sighting_of_ref": "indicator--0a442593-d100-4c87-9a6c-f549c4d2d11e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746f3637-c8d9-465c-9036-d1aa83e282dd", "sighting_of_ref": "indicator--164cc23d-cf9f-44ec-b7ea-08d1b28e6846", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2104e91c-d3b6-4e8a-859c-2295013e25e1", "sighting_of_ref": "indicator--76b49de8-93d5-4223-a9d4-562947724b32", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f8928e-6fa6-4c04-a27f-96e139a80128", "sighting_of_ref": "indicator--63dec4b1-7776-46cd-9970-2b0f1aec91a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475dd07d-d573-40f8-b257-9120f1074ad3", "sighting_of_ref": "indicator--159d1453-e1cc-428e-96bc-045da18ac9c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea820d7-9577-4673-8151-fa8f06ec8961", "sighting_of_ref": "indicator--a35437b7-8a12-4f7b-8fcc-54d223d18fdd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dea1716-17db-4488-9be9-42191d09b936", "sighting_of_ref": "indicator--4811973c-e0f4-49fd-a1ba-dc570a773897", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5ce44c-1fff-42c5-a981-0d116de5754b", "sighting_of_ref": "indicator--6cbb2aea-5d3a-4cbf-a7a7-6459225936d5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c3c506-3487-4266-b1f5-8970f9ea7673", "sighting_of_ref": "indicator--e62780a1-dc78-41f4-8e0f-eb6ac1d1abfa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b9d6af-6592-463d-ac7c-2177160ef8f2", "sighting_of_ref": "indicator--a8672da5-9e83-41a9-9f15-82e84c19af36", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2613c1-3be4-4bc9-8472-62c64ffe6b87", "sighting_of_ref": "indicator--ed8c5c4c-c3c0-420c-a233-d8c6bb2cfa5b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa40cc0-128a-4eb2-8197-663b651d0843", "sighting_of_ref": "indicator--ed8c5c4c-c3c0-420c-a233-d8c6bb2cfa5b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b584c0-0f35-4604-92a7-9397ab92d037", "sighting_of_ref": "indicator--6f7f5212-bbc0-4841-830a-cffb9903f5d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24af1473-8feb-4cbb-9b03-098980c0ad47", "sighting_of_ref": "indicator--4abd2b03-8867-4bae-b55a-1eac2b4a9bb5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044c5f1e-e46f-4ec2-a904-aa68c08624b5", "sighting_of_ref": "indicator--096710cc-2b6e-45c7-a824-f4e43d9c8a39", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88086075-e25f-4971-a78e-c64c05413f43", "sighting_of_ref": "indicator--096710cc-2b6e-45c7-a824-f4e43d9c8a39", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f511cd-958f-4d1d-9d17-5bae16073b68", "sighting_of_ref": "indicator--096710cc-2b6e-45c7-a824-f4e43d9c8a39", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025438df-95e5-47de-a44a-dacc95e6742d", "sighting_of_ref": "indicator--8ecc1159-2f0d-48ec-8c60-12419d42cb84", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09dc74f-45ae-420f-a298-002805041900", "sighting_of_ref": "indicator--8422dd3e-70c0-4572-8c1e-3a29241999b4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c525e2-36b1-4d74-b88c-66fb4e39a39d", "sighting_of_ref": "indicator--8422dd3e-70c0-4572-8c1e-3a29241999b4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110e822e-00b3-465d-b035-4ae199dd9861", "sighting_of_ref": "indicator--18714160-258e-4870-b9a9-c6e7c0454385", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4f3a01-c211-45e3-b5ac-ee57c8672b2b", "sighting_of_ref": "indicator--f65480be-c85a-42dc-863c-41a406afd42e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94daed55-6b3d-438b-9ebd-13e431457916", "sighting_of_ref": "indicator--f65480be-c85a-42dc-863c-41a406afd42e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e84ec0-b0df-472a-99bf-f6c86ca44a26", "sighting_of_ref": "indicator--d8d6afd2-9c1e-440e-abe2-422a571e9000", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fabb0c1-4ea4-4f7a-93df-76ed6eb57094", "sighting_of_ref": "indicator--d8d6afd2-9c1e-440e-abe2-422a571e9000", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204f5c13-c576-4cf5-aa42-a3c1d31445cb", "sighting_of_ref": "indicator--98d92fa5-4d0c-427e-8974-091f3bbfc948", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa96ea50-422e-4949-8b26-c111e481314e", "sighting_of_ref": "indicator--e6feb1f4-540e-490b-be04-f9cfd67f1796", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac0e4b2-ca95-4d31-9585-806195c8d5ff", "sighting_of_ref": "indicator--cebed303-abaf-49d9-8af2-08c4ec78a96c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3f9325-f3c3-492c-8760-1a2c0848af56", "sighting_of_ref": "indicator--cebed303-abaf-49d9-8af2-08c4ec78a96c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184ebd62-89a7-4272-bd11-d56e07ef1175", "sighting_of_ref": "indicator--2fde473a-2f17-47fb-8d99-72ee3bfcd279", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50b678c-9301-433b-baa5-1128c3ea056c", "sighting_of_ref": "indicator--2fde473a-2f17-47fb-8d99-72ee3bfcd279", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a5fcf0-1091-4dfe-a5c1-73048194122d", "sighting_of_ref": "indicator--60bd84cb-be90-4a4c-bbe7-0f8a8513f0c7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c26d739-29d9-4536-9cf6-05d053f1af57", "sighting_of_ref": "indicator--8a2e396e-d7bd-442b-9e70-a0d763b424ce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7ac1a6-0720-401c-bf01-042f25797e8e", "sighting_of_ref": "indicator--8a2e396e-d7bd-442b-9e70-a0d763b424ce", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1def54d0-1576-4207-a765-216d9da0892d", "sighting_of_ref": "indicator--a1af0602-b9e9-4b2a-b5dd-926986e64f8c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240fef1d-b8f8-4f32-a0ea-43b424b12a28", "sighting_of_ref": "indicator--a1af0602-b9e9-4b2a-b5dd-926986e64f8c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3c8152-7466-4385-b6c3-706c39cc08ba", "sighting_of_ref": "indicator--74ab0f34-aaaa-4649-b0af-069182ed75ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b2908b-51e4-48c2-824d-3f50728e05f4", "sighting_of_ref": "indicator--d369efdf-9811-4af7-8705-222c301fcbe9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c860bc29-335e-4d3e-abe1-2ece2e3caa7e", "sighting_of_ref": "indicator--d369efdf-9811-4af7-8705-222c301fcbe9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99d0b3a-ebf5-4ba0-a738-d57ac49bf89c", "sighting_of_ref": "indicator--2dfe367d-7ae8-4345-b755-5b4f8795ceff", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92c9d14-656f-4b7c-ba1a-c105def4dd21", "sighting_of_ref": "indicator--2dfe367d-7ae8-4345-b755-5b4f8795ceff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7cad9a-8b79-4fb9-80a6-9cd51f57be3e", "sighting_of_ref": "indicator--7209c10d-b128-46a8-919b-072cda5b22bb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228b9836-8e53-49f0-9215-2c0b5145fad8", "sighting_of_ref": "indicator--7209c10d-b128-46a8-919b-072cda5b22bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63696581-a9d1-4dda-b6cd-408b7096c2d8", "sighting_of_ref": "indicator--402d9d76-da6c-47b7-8460-4ed81352d76b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aeb47d3-990b-4c43-89fb-ec3e01d7bc66", "sighting_of_ref": "indicator--373287f5-1f84-4c8b-85e6-45d200670741", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4290ce2-5aa0-4b1f-949f-0b67d1300640", "sighting_of_ref": "indicator--3b1b7881-a612-4d34-80e1-c33c35d5d972", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64a52a6-a484-4cca-8f0c-f8357926106b", "sighting_of_ref": "indicator--bbfa6a32-f594-4cf3-86b0-418b21a4211c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881ca849-fe64-482d-819f-75c3ac1e36b6", "sighting_of_ref": "indicator--e426d657-86f3-4f98-8c5f-9e17aa46eef3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f609cd-59a9-4233-a283-3e2e6f74e1e2", "sighting_of_ref": "indicator--e426d657-86f3-4f98-8c5f-9e17aa46eef3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd7fcad-7696-4d74-b6a3-e5b4242e3d7b", "sighting_of_ref": "indicator--afdf2643-db44-43e2-b6f5-e651a814ac96", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801c296a-6007-4447-98b9-4e34a96c75cf", "sighting_of_ref": "indicator--63234d63-bc39-44c0-b38e-cc7a0c65eb6c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f677fd58-112d-4eed-958d-48b7e0eee5c5", "sighting_of_ref": "indicator--04f63ad3-052a-44e1-ada7-8f1fdd6a1c54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fb9cbe-1aeb-4eee-8c2b-bd45d0d51e69", "sighting_of_ref": "indicator--13490b17-3e25-4b32-8010-55c9fc4454c3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513042c3-fb7a-4175-9ab7-c61b0a7670bc", "sighting_of_ref": "indicator--13490b17-3e25-4b32-8010-55c9fc4454c3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d04112-caef-4249-b8ff-3c881d1876d4", "sighting_of_ref": "indicator--38aee62b-151b-48d8-b26e-75d7ad3ab6f1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc02fa4d-8e63-4fa3-9e6f-af4c088ec701", "sighting_of_ref": "indicator--9b87bc41-02a5-452e-9ac4-430cfac7bfba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf6a07f-20c6-46f4-95f3-555acf86ae51", "sighting_of_ref": "indicator--9b87bc41-02a5-452e-9ac4-430cfac7bfba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01567325-4148-4f02-ae60-ebe8e97676fa", "sighting_of_ref": "indicator--b1135b52-c811-488f-b662-0e671020e83e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae278ba8-5a54-4ee7-9cc3-8fcb0f88015d", "sighting_of_ref": "indicator--509503da-4590-4f26-8666-d902082a99f7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88763e11-697d-4ec8-805e-01978d5564ec", "sighting_of_ref": "indicator--d32207f9-1847-49d7-a105-8fba3afcc1bc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3277519-cd2a-43f5-9e65-f658f8bf1fea", "sighting_of_ref": "indicator--4369457e-d335-4a43-b1c5-80ba8ddaed71", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddf2a15-a274-466a-82ee-f317624a48ed", "sighting_of_ref": "indicator--f1a38e51-6a87-4e1c-ac04-d3755731d996", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681ee8e0-0ebc-46fd-adff-98ce2c5f2952", "sighting_of_ref": "indicator--f1a38e51-6a87-4e1c-ac04-d3755731d996", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c77c655-f984-42e7-9fa2-4d8341c51089", "sighting_of_ref": "indicator--55874dad-e666-41d5-b418-57acac791079", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804ec677-cc61-40d8-9772-c6e9567536b3", "sighting_of_ref": "indicator--cba55328-b3d0-47d7-9129-1ca056eec903", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d746602-2d67-4572-8cd9-d4e17f901e79", "sighting_of_ref": "indicator--1b4020a5-f03d-4603-a111-106cf9b9fc34", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907f560c-1a76-44d3-9f98-7a5e5fe26b57", "sighting_of_ref": "indicator--9db6d812-9440-4bfb-b801-dc3686418f80", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff150f3-b045-46b6-83a5-3a0158314677", "sighting_of_ref": "indicator--8f3f0626-2ce2-4e4e-a025-97930b1f5cac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d555aeb7-e067-4140-b575-e00a03ddf38b", "sighting_of_ref": "indicator--448ac299-3afb-435c-b887-188004646365", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e994f645-9900-4ae9-a822-a21659eb78f6", "sighting_of_ref": "indicator--a147602d-27c7-4f25-a0a5-fa005aa5c80f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57d6cbc-7727-42e7-9465-531f91a5a2ff", "sighting_of_ref": "indicator--8e2c45c5-2443-4428-8d76-b67aa9aa257a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b980e1a7-bcf1-463b-a5f7-fe87eec2d0a2", "sighting_of_ref": "indicator--bdf9b300-f524-41f9-b78c-7a1e9a7dcbe8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5936718f-fc79-4b08-856b-7d73cce910a7", "sighting_of_ref": "indicator--300802d5-0ee9-4b48-bbf3-681de9cfde9e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d282f9-bd62-4ee9-8846-4ee5b530dd43", "sighting_of_ref": "indicator--300802d5-0ee9-4b48-bbf3-681de9cfde9e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662a4ff9-9f11-4924-9fc9-8dcb948c1654", "sighting_of_ref": "indicator--ef528597-f4a4-4e3f-9973-a38d14b86c07", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56bd4883-43df-4dab-afa5-05ad164539ba", "sighting_of_ref": "indicator--39b470ab-07ff-4028-a6e4-e20457ce30d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b1b3ba-1869-42a7-9f46-a02c6ffa660c", "sighting_of_ref": "indicator--193fc9fa-8703-484f-b008-371e3a8b02b2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3749c8f1-3df5-4189-9960-521aacfab069", "sighting_of_ref": "indicator--ec2ec842-d376-46ca-a16a-22ef108fe3e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3fb4f6-0834-4a78-aaf8-5c102cdca327", "sighting_of_ref": "indicator--ec2ec842-d376-46ca-a16a-22ef108fe3e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2124ff3-e615-4bf5-aa40-fa502dda7c08", "sighting_of_ref": "indicator--ec2ec842-d376-46ca-a16a-22ef108fe3e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459c0428-a263-4a18-b65b-41a9e94e43cf", "sighting_of_ref": "indicator--de20c532-4080-481e-830d-1b1470605542", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9678d8fb-3d4e-469b-a0ed-da1ff268ae48", "sighting_of_ref": "indicator--231e1e9a-3612-41de-94af-295fe6f46e95", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e484141d-9830-43fd-b3ff-2e877ef38431", "sighting_of_ref": "indicator--74af9068-a450-4712-a5c5-dfd5b534b0a0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999cddba-dd29-4f8a-adfa-7f7bad8186bb", "sighting_of_ref": "indicator--74af9068-a450-4712-a5c5-dfd5b534b0a0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b42e122-53f1-474c-bd69-c859fb7014cf", "sighting_of_ref": "indicator--f9920f6e-a7bc-4b03-b661-a9414c4ece35", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a573df65-44e9-4133-974c-b59675471280", "sighting_of_ref": "indicator--f9920f6e-a7bc-4b03-b661-a9414c4ece35", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf5ae57-447d-4807-98ad-d747558c37dd", "sighting_of_ref": "indicator--bd4bdc6b-e6f5-4131-ac57-29b98e85fd92", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81370490-b5f4-4baf-b7ee-23c6be69af23", "sighting_of_ref": "indicator--bd4bdc6b-e6f5-4131-ac57-29b98e85fd92", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae06f4c2-25fe-4c12-8be5-a5f5c200e562", "sighting_of_ref": "indicator--dc76afce-2146-437e-8fa6-57e9cf146efc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89605a97-1a9a-4d0d-8066-dd5f38919f3b", "sighting_of_ref": "indicator--5e2fc9ff-965f-4f48-81a0-85ad82b76b07", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3c7521-9926-4667-ad2a-0deca39cf4d0", "sighting_of_ref": "indicator--c7382118-d580-40f1-b19b-8a73cda64b0b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6ab78e-7ef1-4611-b891-af6d6b8577de", "sighting_of_ref": "indicator--53c8fae7-d336-475b-b23c-5549426f9f7e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbb2b99-ea78-49ed-8345-9cef5892e01a", "sighting_of_ref": "indicator--fa6c47f3-6ff1-421c-900d-f4785a8453a4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4bf078f-60fd-445f-ae41-51a2037afc59", "sighting_of_ref": "indicator--b3e88297-3e6d-415a-8957-778f06522787", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0e12e6-7c67-4f62-8599-b4602985095f", "sighting_of_ref": "indicator--8c11e116-b539-4285-934e-a0a0bc3a0ca7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060fdf2f-2f33-4097-a8c0-a92cea760799", "sighting_of_ref": "indicator--8c11e116-b539-4285-934e-a0a0bc3a0ca7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f644c9f1-5290-4105-adad-55c2ab29674f", "sighting_of_ref": "indicator--2e8f8fda-6c32-4e55-bd1b-5cf34a345c6c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81565150-8077-49c6-b6da-bb370c8ec69e", "sighting_of_ref": "indicator--0d7929b5-3a15-4cd9-a58d-dafde5b1238a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e2e1a6-311d-417e-ad1a-8f73592ab05e", "sighting_of_ref": "indicator--36fb6ce6-442b-41cd-8c69-d0208e07856a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1756470d-7eea-4561-914f-676943c5b030", "sighting_of_ref": "indicator--ff92fd3b-c942-4514-8471-d0cc1992db2b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885d49f4-a309-458f-b5c6-67fa1c5be2a2", "sighting_of_ref": "indicator--ff92fd3b-c942-4514-8471-d0cc1992db2b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddae1f3-7176-4241-8dfa-0553c9e85339", "sighting_of_ref": "indicator--a151261d-dea7-4bf4-868f-34556af69fdc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f78c58-251c-4743-b97f-9623b0ce54df", "sighting_of_ref": "indicator--a151261d-dea7-4bf4-868f-34556af69fdc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbe5841-22f3-4937-b597-d2547149f658", "sighting_of_ref": "indicator--ecbfb0ee-d095-4374-8cb9-75ba83f4de6e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d60c4ea-d78e-4675-a635-371e86d77ffe", "sighting_of_ref": "indicator--59b7b11a-d1b1-4a4f-b7cf-78cd77ae7498", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428b400f-17f7-4858-957a-a1bf4bbbc1ee", "sighting_of_ref": "indicator--7736764e-3b17-4de8-95a3-ef9c2fdd1ebf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d722477d-2c0b-416e-804d-574512248679", "sighting_of_ref": "indicator--b8c0e64c-dfb8-44ca-a2ce-d3e75bdb60d4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fc5afa-1c64-40a0-b5d7-0948ba797851", "sighting_of_ref": "indicator--2a620d5c-3c18-4624-b3ff-3d2664915033", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f59d39c-f297-410a-bc83-d3bac0a3c75d", "sighting_of_ref": "indicator--9dcf2458-6907-453d-a553-6b45ebe2f944", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a08262-b69a-4afe-8c26-afa61405c7cf", "sighting_of_ref": "indicator--32f561f6-639e-4b15-b195-92f2038c8135", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb07cfa-7840-44d7-b5a0-68c74f7a2978", "sighting_of_ref": "indicator--6bdecb04-4c5e-40fd-8207-be23831fbc6d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299749ab-8029-4b1e-a0e6-d4e217b3719a", "sighting_of_ref": "indicator--1c25de0d-d2e4-4ac1-a875-bcab857f8700", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a21cf16-b8a6-4ab2-bf80-b1a1394d058a", "sighting_of_ref": "indicator--8f36dc1a-f2fc-4708-b37d-e7d3636f05a5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683fb132-98d1-4c50-b707-76c231357151", "sighting_of_ref": "indicator--d8fa0254-733e-4145-a1a9-1e5345cfc7b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bde176d-7029-4995-8cea-830d6b743486", "sighting_of_ref": "indicator--2979b585-3c3a-4d85-b5c6-0b0997ad8e64", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb55f61-e3d2-4816-8b78-b4c5207c2911", "sighting_of_ref": "indicator--e03a4b53-0a99-46bd-85a8-1f98bad3dbfa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca04f197-9456-4632-8bd7-b438d6cb5c17", "sighting_of_ref": "indicator--5d554d67-569c-4f95-8416-09e97272044b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a02ae3f-973c-4b15-8363-b196c560710d", "sighting_of_ref": "indicator--4e9a37ad-2cc1-4bc1-b9be-02c78d175f2a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efda2e8-f2b1-4964-a092-8cacc9cd21ca", "sighting_of_ref": "indicator--4e9a37ad-2cc1-4bc1-b9be-02c78d175f2a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197aa273-343e-4dea-9c5f-961c13d0daf3", "sighting_of_ref": "indicator--0f33eee2-b043-4d59-a725-0fe857168349", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d391f59-99ca-44cd-bd8e-dc2905e96e6b", "sighting_of_ref": "indicator--1802234d-8ced-4cec-8d7f-af4716ddbb8e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3e5f71-c0cf-4c36-bd53-f3c63a994d7c", "sighting_of_ref": "indicator--07a3c35b-e46e-4e87-b6b7-0010e25785d2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a735c0c6-2bff-466a-afdf-782a41388772", "sighting_of_ref": "indicator--07a3c35b-e46e-4e87-b6b7-0010e25785d2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0d565d-e240-4e80-a2b0-69f1c593c679", "sighting_of_ref": "indicator--4dbbe632-a128-4a89-a793-f06510a08945", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb54b4f-e2e6-4630-a946-899b7ea4e270", "sighting_of_ref": "indicator--e4c7cdef-bdc4-4db3-8b39-770c3460c77b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433b455f-d6a3-47b2-9619-08b27864801c", "sighting_of_ref": "indicator--ca43c869-2438-4e96-8c7e-2d0bf63122de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a33e20-cece-44b6-a043-eee267276ce6", "sighting_of_ref": "indicator--ca43c869-2438-4e96-8c7e-2d0bf63122de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cfe2da-ec7e-4acc-bdc7-fa0efbcc041d", "sighting_of_ref": "indicator--5adc8c49-04dc-4db5-887d-a1564822bc97", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14b2b90-3f1a-45ca-9d12-83b6bf177d65", "sighting_of_ref": "indicator--5adc8c49-04dc-4db5-887d-a1564822bc97", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6640cbf0-ee8e-4195-acee-085281a4b71e", "sighting_of_ref": "indicator--3ec67fd9-92bd-4e46-bcfd-6efc896146a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d59687-0217-476b-adf3-5e68cecf347a", "sighting_of_ref": "indicator--a57fb07d-0c7f-46b7-bf52-9e19e85e6358", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b95f67-beaa-4930-9a87-3e067cdcc0fe", "sighting_of_ref": "indicator--d59a9a9e-a13e-4a26-9315-dfbb9b1a9457", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6803d3-1a48-4cb9-bafb-b31069b2ffd0", "sighting_of_ref": "indicator--5cc4ed50-0bed-4601-bffa-190e07cc3fbf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e76a73-3f0f-4677-aeff-bcd28fae6b36", "sighting_of_ref": "indicator--88c061ae-0b7c-4854-9a6e-3d03f2b6932c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cd6bb5-f441-4035-a929-d0d31824ec05", "sighting_of_ref": "indicator--0ca0dc2d-fd4f-4a03-bf99-3abf1a1946c7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bd3049-1b74-4224-9045-2f5427af3ec9", "sighting_of_ref": "indicator--7df67912-a1ae-49cd-8e1c-e0b595084a83", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0c9198-e9eb-4b52-b73a-b318ccce2e35", "sighting_of_ref": "indicator--9ee5c6c1-623d-43d8-8cc2-0c19864859d0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5efa7ed2-1e38-423b-bc5f-e16791728117", "sighting_of_ref": "indicator--12228c41-f869-4157-8070-b4c8448cfd55", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90fc5d3-52b5-47a2-8364-aa77ca35bb32", "sighting_of_ref": "indicator--0205b2b8-c0ca-4864-bcdd-223b70504d68", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe95a45c-f8d0-4415-84d4-381af8e20e91", "sighting_of_ref": "indicator--ea6cddd6-dd4e-4c0a-8a4c-dea23dfb58a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629e76d8-2cb6-4d95-bdfa-3e3ff0a96418", "sighting_of_ref": "indicator--ea6cddd6-dd4e-4c0a-8a4c-dea23dfb58a7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa8e24d-0374-4644-bd82-cc17ad67f631", "sighting_of_ref": "indicator--a5351e0c-6b94-4402-9620-6cbb468cad19", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570ceba8-f445-457a-9fa0-532a93f7ac8f", "sighting_of_ref": "indicator--f85cd872-28eb-44d5-bb21-de2730899839", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5e799c-542d-496e-9b8e-de6959c0cd8d", "sighting_of_ref": "indicator--b2da646d-7e3f-4ff9-9df7-2e991bb9c1ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac6f9bd-fb40-47b1-81de-90699aeab479", "sighting_of_ref": "indicator--0f259d2c-9558-4f26-8e71-f7ed805fb990", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a85ec6-559c-4b4e-89cb-1c0b0e32990d", "sighting_of_ref": "indicator--9250bd5a-a7dd-4f60-bf20-06cd8094fb3b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c699c7-fad7-4521-b29f-c76df6edd552", "sighting_of_ref": "indicator--662cd35b-fddb-41cd-958e-94f113111f07", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935c7896-9761-4e85-bd66-2c511c341827", "sighting_of_ref": "indicator--d9cf2dd6-bff2-4698-882a-2aea33331f9b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50532d5d-fdc7-4e32-817b-768f34edf02e", "sighting_of_ref": "indicator--9608d33c-05e8-4bb4-b00a-679bc354ef5e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac895f57-b65a-49bb-8365-708d1d6f347d", "sighting_of_ref": "indicator--a2f779cf-b19a-4910-80da-0ad55322f856", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4747e8a6-ead2-4f50-b49d-956df6cdfb1c", "sighting_of_ref": "indicator--84a32351-b335-43df-ad09-77597a5bd6a2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0118e8-6373-4a89-9820-a61bd26a0b59", "sighting_of_ref": "indicator--23fb2cd5-d868-4eb9-b655-d8538e01527d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5b040f-e58c-4e1b-b7ce-b88d9b2587b0", "sighting_of_ref": "indicator--febbc43c-86a5-4e94-8945-8bb4629077ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f78e29-1d5e-4e77-b9ed-3f18fd71e595", "sighting_of_ref": "indicator--11bebd4c-5579-49ea-90db-79d911994baf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9d384d-6bb9-4694-8369-5b8ea3c372f9", "sighting_of_ref": "indicator--9d335f7c-4fc4-4c08-8faa-59ad7c9b8f64", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3869230-78ff-422d-8ca4-66d4f196f9c2", "sighting_of_ref": "indicator--952a5cc4-8471-44a7-be37-6b9d687f168a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77ecd34-02a2-4cdb-b168-ec84352cf372", "sighting_of_ref": "indicator--a0e611b7-66fe-4015-b219-769fc49e5f60", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73b7ede-4ebc-4d17-b9cd-4824391f0e84", "sighting_of_ref": "indicator--83109ad8-e058-4df9-88e0-61e0684098ce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7e480f-275a-4ba3-bfbc-62f7fae37d27", "sighting_of_ref": "indicator--f68ef847-1572-4afd-b581-7977a0841b2a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ef4901-4841-4efb-9757-3f75103c879c", "sighting_of_ref": "indicator--f68ef847-1572-4afd-b581-7977a0841b2a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbcc0a75-f06d-4f3d-8dd1-34be12c0a708", "sighting_of_ref": "indicator--579d76cb-8cc0-4b0f-b68a-29b508b442f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e3e92e-f479-46ed-81eb-370213c613e3", "sighting_of_ref": "indicator--c42016dd-6171-49bf-839c-539708631747", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5272d41f-c04f-4c30-8e90-e0f15b41fc9d", "sighting_of_ref": "indicator--c42016dd-6171-49bf-839c-539708631747", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1facddc5-fbba-468a-9d6f-a55b64890156", "sighting_of_ref": "indicator--9d012390-86f6-41b2-a2c7-706bf3476ae0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af26d78a-af37-4455-a83c-7573f8da4094", "sighting_of_ref": "indicator--7633848e-4746-44a9-8929-e5c43b3c2af4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b824af43-39f4-4c0d-b88e-22fdb3323f80", "sighting_of_ref": "indicator--d5659622-f678-4965-9966-d1e5f123e04d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5982c2-40b6-49ef-ab48-e0250619970d", "sighting_of_ref": "indicator--d355e3a3-784c-42e5-b8a9-f49542f2a92b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461b5a84-2719-4c77-b53a-e37df8e5e7dc", "sighting_of_ref": "indicator--853eb714-cf5a-45c1-951e-711e5bfb61e8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0aad31d-7ae1-46d1-add3-b23d8ad20155", "sighting_of_ref": "indicator--9ba5ab60-4099-4aea-b1bc-d8a5bdd1b300", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3228337e-1d6e-4ae1-a0eb-a6444605d53b", "sighting_of_ref": "indicator--b9299052-046a-4e97-9cab-b745402f8960", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4984a1d6-72cf-4e64-82d7-ebd6015a3573", "sighting_of_ref": "indicator--b9299052-046a-4e97-9cab-b745402f8960", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0557dbc-a595-4f57-9d5a-39d2dba32dcd", "sighting_of_ref": "indicator--f1924738-5b50-4aa1-82ba-5ee7d9e61a7d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9286187a-8b13-4bfe-b33e-a977f881166b", "sighting_of_ref": "indicator--bb729f7d-8376-4c01-a082-172ab81ecdb6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a8aa2d-ea12-4e0c-ba0d-a9b0d57c5ca4", "sighting_of_ref": "indicator--37e063c8-d027-41df-b6b6-9b42eab4d2d5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff64d829-c487-4ead-8e69-75491a2b6d6d", "sighting_of_ref": "indicator--df8fd927-9dd7-4f98-a802-c2d02f4623e0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb12211-8d35-42b0-98f1-ae108fddd5c6", "sighting_of_ref": "indicator--df8fd927-9dd7-4f98-a802-c2d02f4623e0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91109a4c-a953-42f9-8f3f-210e46c72e31", "sighting_of_ref": "indicator--2895443c-8a47-43e6-b212-3f37473bc308", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af9e6bd-64b6-4481-9ce9-297fa1493eb4", "sighting_of_ref": "indicator--35bed620-b1a0-4151-aab5-f3920a556747", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cecb5b-920d-4f64-b96b-e1f1f16f3e49", "sighting_of_ref": "indicator--47393822-b72c-4bd4-80e7-3b9e4fc1a895", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21c98be-2694-4648-93fc-7df872bd2e39", "sighting_of_ref": "indicator--4a57ba00-be8b-4e57-b797-ca3f7ac23ce4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894135ed-2c59-4f37-a496-ef387bcdf99e", "sighting_of_ref": "indicator--60c37a98-2d2e-4436-8b98-3308995a01a4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee2ae14-6204-4369-9b23-1f73cc1e4b9b", "sighting_of_ref": "indicator--6db9ed72-067f-4dd9-8cb9-efe383ba56d4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe9b105-6518-4837-ba1a-925b05d0122a", "sighting_of_ref": "indicator--9b47e1d6-9d37-4d09-8153-b853cbbc9543", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b99d1e-905b-4bc8-98ad-7f5d58085b4d", "sighting_of_ref": "indicator--650565cb-c32d-4903-a62b-08ccad5239c6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af5c76d-bfc5-4462-b805-3ab860115f26", "sighting_of_ref": "indicator--3dd8ed4d-5d7f-4c5b-ac49-af9fb9747db5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1313207-5ca9-4732-9577-f02a614be08f", "sighting_of_ref": "indicator--d55afa86-0d1a-427b-ae0d-4c9808dde618", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b3f5a6-07d2-432c-a833-b8b373e38800", "sighting_of_ref": "indicator--dccc914d-4605-4b40-a635-62a8a1d259a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5feca7a9-58d9-4df3-ac0a-f43f04f5eb4a", "sighting_of_ref": "indicator--dccc914d-4605-4b40-a635-62a8a1d259a2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9948d6-ecd2-421b-a11c-23832325b03d", "sighting_of_ref": "indicator--4e7e9ac3-5985-4422-9076-25dc0da70ceb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3d4fd4-1bc4-4834-a1a4-23f6b6485ed6", "sighting_of_ref": "indicator--693e4c8c-2dc4-4bf1-87a6-26fc875f3c3a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19624347-9fe5-4a3d-adc4-0396e1f1d9c7", "sighting_of_ref": "indicator--7f595619-4281-44e7-a8c2-8b5f0b3d6b11", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2297c5-4336-4c81-9467-4f29b752a5ec", "sighting_of_ref": "indicator--a3467bf6-a25f-41ff-8b2f-20237ea17822", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31aaef36-ef28-46af-a3b1-fe09722803fd", "sighting_of_ref": "indicator--8fef26b2-2424-4597-af4e-620348624141", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a582f2f-41c8-4957-a00d-a1f3f544c765", "sighting_of_ref": "indicator--cfc4bc68-5d64-4f69-899c-cd08cdf9856e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a621f71-bbe9-4184-8602-882c5560fc66", "sighting_of_ref": "indicator--a45e3525-739e-4dc3-9388-88f3d0fa1427", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b74380-709d-47b8-9f44-3129bf52e778", "sighting_of_ref": "indicator--29bb3df5-3ff4-4e26-a510-8c41a8f2cd79", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffd977d-42f4-4d32-99f7-bdf6157410b1", "sighting_of_ref": "indicator--3bedb58b-01d0-4639-8c05-5415ec7b1fda", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d8086d-3d6d-4f96-8b18-b5d18a8ded30", "sighting_of_ref": "indicator--7520716b-769f-42ae-962e-30711a218cf5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88009e19-4d7d-4c6b-8c5d-adc3fa65e56a", "sighting_of_ref": "indicator--07df3b50-52da-450c-9507-a2c7f950ffae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cd76de-fb1e-44ef-b07c-b82f84bc8133", "sighting_of_ref": "indicator--8a3f8ba6-8dc9-4d65-ac88-260cdc18036e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bc52ed-c059-40e7-a564-49a5c6b81f0f", "sighting_of_ref": "indicator--35e4f3c8-3a11-47e9-b782-873875048b34", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c6a4dc-f5be-4f33-b1e0-ce3eafae1bf2", "sighting_of_ref": "indicator--a518fa25-e45a-47f5-979a-057f6d8d98ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387eec18-cad0-4f2d-9f6e-7ff16f70548d", "sighting_of_ref": "indicator--fdc31931-1821-4ded-a678-a3f6cdc9e3b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fce3e07-2387-4f18-9a69-9d47852f80c4", "sighting_of_ref": "indicator--4bd71aa0-a192-49b6-85c4-65938d42e7af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76aceb88-bbcb-4575-bf3f-4fedfb28ab8d", "sighting_of_ref": "indicator--3f0d42e6-7556-42d0-b980-8a4448403e11", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf5c700-30e6-4258-9899-53db67b8d540", "sighting_of_ref": "indicator--3f0d42e6-7556-42d0-b980-8a4448403e11", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29d5b8c-1d5c-495f-8724-4b5009abf105", "sighting_of_ref": "indicator--29961752-7fe3-4479-8aa4-fa5042488d0a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2bd6ee-328d-4149-a57d-596e8504b167", "sighting_of_ref": "indicator--45e21a34-54b3-4be8-97c9-2250d7557cbc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfcc69f-fb4e-429d-ab83-aaed1e567d52", "sighting_of_ref": "indicator--c6f83a7c-fb49-4d35-b1d7-36b3b6023ef8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449894bc-0550-4a3e-8379-ac221f4055b4", "sighting_of_ref": "indicator--c6f83a7c-fb49-4d35-b1d7-36b3b6023ef8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa04d7a-42b4-4cad-9699-3e011d5ff52f", "sighting_of_ref": "indicator--bb56a043-f610-4ead-9f56-7c8b2f264a0e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0b5347-9b35-4425-9229-796c4bf00968", "sighting_of_ref": "indicator--bb56a043-f610-4ead-9f56-7c8b2f264a0e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69aaa10e-0dce-49fa-84e4-afc9f7a6b451", "sighting_of_ref": "indicator--4800eb7d-51a1-4c72-ab3c-b38e28beb3ef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968f2087-6fbf-4797-8936-d3539f741b54", "sighting_of_ref": "indicator--e131a44a-2346-4cc5-8d63-26e0403eb142", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b3d536-a303-46fc-9e27-8a5950e9255d", "sighting_of_ref": "indicator--c86cc140-0762-4d6b-9353-c05b0fdf6f43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f408d945-f9c6-421c-93d4-756a9b0265f9", "sighting_of_ref": "indicator--6e8c91af-3f8e-4db7-b550-8de271edbad4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71fad30-9922-45c7-af69-2abbad631d9b", "sighting_of_ref": "indicator--93cf18a0-ba6e-4f06-b5d1-926796b56a05", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9492a6d4-4b0e-4953-89f4-22450d88c02a", "sighting_of_ref": "indicator--ee0d0a82-89ea-4b07-b34b-4537cfaed086", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481e9cb0-d051-4a3a-8325-bb3b026b8f72", "sighting_of_ref": "indicator--627e84c4-02a1-469a-8b57-fa2622be7d19", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fe0d0c-169b-4f8f-813a-f4d21f48a23e", "sighting_of_ref": "indicator--627e84c4-02a1-469a-8b57-fa2622be7d19", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d1df15-8496-440c-baa9-a75991d9fac1", "sighting_of_ref": "indicator--a1bad320-c4dd-4eef-b7ae-170311b8a9d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f63f42-cdf6-4740-bfc8-fb074dfdb3b7", "sighting_of_ref": "indicator--ff418068-76cf-4a82-a81f-ba2fac26d223", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780a307f-9596-4045-aafd-7a9fee159839", "sighting_of_ref": "indicator--72e3c225-1acd-4891-8b29-7fdf076e53be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4349cb-50db-458f-93da-751fca7b6e28", "sighting_of_ref": "indicator--b8e089dd-9db8-4f3f-831d-d2179c6a6de8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e43f6d-9108-4760-8977-f0f3b7d163c4", "sighting_of_ref": "indicator--b8e089dd-9db8-4f3f-831d-d2179c6a6de8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707bd54b-15b6-4594-96f0-51498df612b4", "sighting_of_ref": "indicator--c8a0c8ee-ce91-4173-a101-cdc6313143d6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c018b2-03eb-4d54-8ccd-4c2638cf98ba", "sighting_of_ref": "indicator--46cc33cc-ee24-479c-88ca-3d8510df40de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7b011c-9931-4ff5-a893-2beabd5f949e", "sighting_of_ref": "indicator--a8aebaf6-d184-4407-a92e-29066592248b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432bf5fd-b6ef-4b74-a1a5-70f3298cf977", "sighting_of_ref": "indicator--a8aebaf6-d184-4407-a92e-29066592248b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c245c9c9-b2db-4a30-90b1-fea7df251335", "sighting_of_ref": "indicator--3a38ee9c-3604-4f6b-81c8-f217ba8ce3cf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e052b7e6-e199-48da-9e14-f91f85b8c44b", "sighting_of_ref": "indicator--8bd6a328-19fc-4ea1-b8d2-c7907309b9df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5cef97-9f63-41cd-baa3-1eff2b6b98fa", "sighting_of_ref": "indicator--8bd6a328-19fc-4ea1-b8d2-c7907309b9df", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3843f954-cfe1-49af-8133-18e7919e758f", "sighting_of_ref": "indicator--8bd6a328-19fc-4ea1-b8d2-c7907309b9df", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a8fbca-149d-4919-83bf-6bb5775079af", "sighting_of_ref": "indicator--678863cb-d8fc-4993-aa30-f304a1a81f83", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c85a0e3-a1bf-4460-9ef3-ba03fdb23fb6", "sighting_of_ref": "indicator--65fc7e8b-db08-4346-9ede-73126c6b7ce1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cefff6-3394-4510-81e1-6eb9ee8a01d7", "sighting_of_ref": "indicator--65fc7e8b-db08-4346-9ede-73126c6b7ce1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11790c10-be2a-4690-a262-e58f3a8f1ece", "sighting_of_ref": "indicator--f6dc3c2f-b4ad-4a17-91de-de0a5dca2dbe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b50f2d6-75d1-4da5-8b72-dfa5c0e6e369", "sighting_of_ref": "indicator--f6dc3c2f-b4ad-4a17-91de-de0a5dca2dbe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e349dd-aaa6-4b71-ab5f-4cd2d6246028", "sighting_of_ref": "indicator--f6dc3c2f-b4ad-4a17-91de-de0a5dca2dbe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7b96e6-a61d-433f-854a-745ffa240d74", "sighting_of_ref": "indicator--8630db0e-4e1d-4058-ae44-079bbdd9f6d8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce4b14b-ceeb-4fbd-b1aa-b0e85dcaf033", "sighting_of_ref": "indicator--47431278-c8f2-49ce-9e75-2371c21f3175", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c503f4-86c7-4b2c-87af-614c2bdf6a3f", "sighting_of_ref": "indicator--e375bbb8-ba65-4cb7-813a-814a58098440", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5742e5df-fc42-4e31-9338-c5348d9ad5b7", "sighting_of_ref": "indicator--e375bbb8-ba65-4cb7-813a-814a58098440", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f862eb49-482d-4dae-9e78-b823227495f5", "sighting_of_ref": "indicator--0e4e8838-cf9d-4987-8e96-1dbd7ab3b8dd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c14197d-694f-4cc0-96c8-6d8d7f58e5fb", "sighting_of_ref": "indicator--52a1c9b5-a99d-463b-802d-060eeafc9ddc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d61f84-ebd2-431b-a9b6-18b6b411bd41", "sighting_of_ref": "indicator--8021a868-da6c-4c1b-a19c-82e7c236aeed", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a18589e-1ad5-4717-a3e1-b4f9159c885a", "sighting_of_ref": "indicator--3b559907-47bd-425f-a86c-f367a5546a60", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57547f91-24cd-4fa4-88a1-da66ed0e5843", "sighting_of_ref": "indicator--7c34d733-4b7e-481f-9f34-00f53c3dab97", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab7e116-66dc-4496-ab42-2c1b27513523", "sighting_of_ref": "indicator--0bc74b90-29ae-4b7a-b0ab-70296c3d3176", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b04be0-8479-4cdb-adf8-19300537a2f4", "sighting_of_ref": "indicator--97c7bde4-ecc0-4060-b244-35b4aa2979a3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115994c4-d9bc-47df-b2a9-c0fd58b099d3", "sighting_of_ref": "indicator--97c7bde4-ecc0-4060-b244-35b4aa2979a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac7b04e-b0c0-4584-add9-ea635cfdb1d1", "sighting_of_ref": "indicator--3eaaff5b-2235-4be1-900b-669021a91a35", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d456c454-a515-4e5a-8030-5c55d1a1fa77", "sighting_of_ref": "indicator--9f859eb6-d164-4f30-b8a1-dc6521654690", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803ec391-c880-4783-84b5-b7aab713bf69", "sighting_of_ref": "indicator--b0ab3417-70dd-49ed-a9a4-8983dbd87a8b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e79e27c-9276-4285-8d41-cb09e138183c", "sighting_of_ref": "indicator--5f3fa684-2688-43ed-8946-71016b6711bf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6949973e-9c5f-46bd-b67b-b4b4758d7848", "sighting_of_ref": "indicator--3acee2a5-b2df-422e-9e2c-a520a496ee23", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244da4f2-a09d-4f45-a344-e1c347c692f7", "sighting_of_ref": "indicator--de99ef3f-17a9-4e9d-8424-776603b07dfa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bb2ff6-d06d-4bfd-88ac-24b5a94a4e88", "sighting_of_ref": "indicator--de99ef3f-17a9-4e9d-8424-776603b07dfa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e391590-6956-4fa1-b97d-4e5a05937da1", "sighting_of_ref": "indicator--de99ef3f-17a9-4e9d-8424-776603b07dfa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496022ea-369e-4336-8986-8b9ba8df7da1", "sighting_of_ref": "indicator--9db82e18-6f36-4061-b04b-48bff5050bb2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34ff457-e118-4818-ad5f-c1ba8d23b0e4", "sighting_of_ref": "indicator--9db82e18-6f36-4061-b04b-48bff5050bb2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a15fc06-4a0e-438e-a75e-0f7d88ab9077", "sighting_of_ref": "indicator--9db82e18-6f36-4061-b04b-48bff5050bb2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc78799-f8fb-4766-8bd4-21ced535bdad", "sighting_of_ref": "indicator--6933e64d-d6c2-4767-9459-44020199b497", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a56d069-754e-4789-bdf5-f6e83cd55a68", "sighting_of_ref": "indicator--6933e64d-d6c2-4767-9459-44020199b497", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85a4eac-ac69-4973-93e9-e9273ef1e477", "sighting_of_ref": "indicator--6933e64d-d6c2-4767-9459-44020199b497", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf753ade-4994-4618-a0bc-125477b81984", "sighting_of_ref": "indicator--e311222c-8c07-498c-94a8-13284cc53045", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af781ac-a242-4936-99ca-485ef57336f4", "sighting_of_ref": "indicator--7f832316-83d2-4836-a1e6-77a10c13cae5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e71e3d-b4ec-4f72-af15-0be6f5c4b478", "sighting_of_ref": "indicator--7f832316-83d2-4836-a1e6-77a10c13cae5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd0da8d-04b3-4781-a177-05d5f7f0f3ac", "sighting_of_ref": "indicator--0a4aa48e-d073-48ca-9342-1d9291377afa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ccefb8-054c-451a-8a7b-fd4f2c526e67", "sighting_of_ref": "indicator--0a4aa48e-d073-48ca-9342-1d9291377afa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61aa7daf-c249-484c-923b-9cd1ed30d5cb", "sighting_of_ref": "indicator--c0eaba1c-7459-4710-9dd7-70f6a99cc331", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c8556f-9576-4a12-b78f-24f285246b42", "sighting_of_ref": "indicator--c0eaba1c-7459-4710-9dd7-70f6a99cc331", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2ba1cc-51ab-4fce-8e5c-481eadae2a2b", "sighting_of_ref": "indicator--6ccda35c-516e-4eb4-b900-f5723c20a123", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253651a3-46a7-4c46-b748-96484c8bb5f5", "sighting_of_ref": "indicator--6ccda35c-516e-4eb4-b900-f5723c20a123", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139238bd-2bf5-4ab1-a554-f6985a6510d9", "sighting_of_ref": "indicator--8a794ab5-4fa3-4fca-8721-7bf4635da790", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a43f80-e578-414f-b27b-1895c93e3e7e", "sighting_of_ref": "indicator--00f87caf-7412-4a5a-a8b6-28fc359ae015", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6de2302-405f-468e-8966-5346916330ea", "sighting_of_ref": "indicator--1e44e851-2503-45c2-b20f-ef8e7a7ab34b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd02b2f-51a5-4688-9ba2-62413743594d", "sighting_of_ref": "indicator--1e44e851-2503-45c2-b20f-ef8e7a7ab34b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546990b7-5496-4545-80de-87075dd0949c", "sighting_of_ref": "indicator--1e44e851-2503-45c2-b20f-ef8e7a7ab34b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffa51dc-64fb-43cb-9233-a93d053b7f1e", "sighting_of_ref": "indicator--082ab41b-c393-4f5c-a33f-e89bd01be9e0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8fe622-0508-458d-875b-4970202f7851", "sighting_of_ref": "indicator--082ab41b-c393-4f5c-a33f-e89bd01be9e0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cebdc7-46db-4efc-9c12-481bfbcbc803", "sighting_of_ref": "indicator--8b62fa44-570c-4031-9613-d2027f26ccb0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee7c493-c058-42e1-a00f-5579e0dbf9b5", "sighting_of_ref": "indicator--7de2b8dd-e3b9-4054-bd8a-98f8dc6e207e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834e727b-7ab3-43f8-af98-6c8e90460e94", "sighting_of_ref": "indicator--b77022ca-766f-4cf4-99a5-b477f94e7084", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedccdae-9c76-48fd-8a4f-e60b8aea8cc5", "sighting_of_ref": "indicator--c967775b-4195-4e3f-87b5-c0901c2e6ae2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4bbce8-e3cb-48ed-9813-e05a693d60f3", "sighting_of_ref": "indicator--90e6b6e5-6e7c-47fd-8244-c52c9f863721", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f6ea25-2058-4a7d-8a94-21172658a5f3", "sighting_of_ref": "indicator--24eee34c-2f99-40fb-9c3d-ad5d4212af86", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3825dde-fc07-4fac-aaf4-7ed3e690f1db", "sighting_of_ref": "indicator--22c6555c-4ec7-457d-b408-d8b63e4a101f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19eca7d-38d4-4f98-adff-0abd89f5ab25", "sighting_of_ref": "indicator--22c6555c-4ec7-457d-b408-d8b63e4a101f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276e936a-fd6c-4d63-9e36-5ec6c366a335", "sighting_of_ref": "indicator--82adbaeb-f337-4d96-9ae5-af43eb78a80b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d58161-1470-4ee8-9cfc-28723ea4d06a", "sighting_of_ref": "indicator--e73012de-ca2c-4568-aa7d-d3c5d1d26778", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127c4719-6d4d-40e2-8385-56a07536c3f4", "sighting_of_ref": "indicator--e73012de-ca2c-4568-aa7d-d3c5d1d26778", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a137f01a-67bb-4c29-9e7e-9319d95c6062", "sighting_of_ref": "indicator--dca2f0ba-92fe-4cd0-af10-8448d2c9c867", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef044ff-208b-4cf1-90c8-f890b4f5313b", "sighting_of_ref": "indicator--dca2f0ba-92fe-4cd0-af10-8448d2c9c867", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ef896e-cf26-48c6-baae-2b08a65b6557", "sighting_of_ref": "indicator--dca2f0ba-92fe-4cd0-af10-8448d2c9c867", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35d7a7b-0c85-4b7f-a240-ff749d32d34a", "sighting_of_ref": "indicator--88d0ba26-1ac1-4c1f-870c-f43a66d9c8ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00304abc-7a31-4f7b-8466-da052d959f41", "sighting_of_ref": "indicator--88d0ba26-1ac1-4c1f-870c-f43a66d9c8ae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecaf37d2-65ec-4b20-b747-95e343d67bb6", "sighting_of_ref": "indicator--f527cc13-768d-46bf-97c2-1675bfcaa498", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becd75be-2cde-4035-a95a-34c343e86607", "sighting_of_ref": "indicator--21c56723-0f1a-49cb-9456-08fa61ecba27", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9125be-bdc6-4b54-bb28-6f05e5833e98", "sighting_of_ref": "indicator--21c56723-0f1a-49cb-9456-08fa61ecba27", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bbc2b3f-8f24-4fac-b83a-53adbb93421a", "sighting_of_ref": "indicator--21c56723-0f1a-49cb-9456-08fa61ecba27", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8679a1ec-e5aa-434b-b459-2aabeb9f6a17", "sighting_of_ref": "indicator--4cf485da-4343-4cb8-ada4-c1db54761d5b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48929b4-c449-4faf-862a-3c80ea3f039f", "sighting_of_ref": "indicator--79c05f69-411d-4409-8421-3044bcc71569", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f544f67c-d08c-4cef-b7b1-7b8a4f7dedb0", "sighting_of_ref": "indicator--a0a92c1a-8db6-4e26-b0b7-38d14fca1c17", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de23728-df1b-4ffa-b71a-99e37a3e4f49", "sighting_of_ref": "indicator--3993d619-7000-4969-a73a-f50b016faed7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339eb286-2949-4fa2-9ef9-60edc660391f", "sighting_of_ref": "indicator--8d2b8234-3b22-4f63-bdb5-7a43d6a71fd8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2058eb9-db2b-4441-800e-75bee22c8c84", "sighting_of_ref": "indicator--d2cfe7c5-d84c-4236-a042-1c27b13d87b7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29a59cb-e88e-490f-9107-add0b472b6ba", "sighting_of_ref": "indicator--bcc89ae1-36ca-4529-aad7-7a3267612546", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6725a876-a506-4698-973d-665424521c2b", "sighting_of_ref": "indicator--42e08bf3-3d3e-4e3a-af0d-62839e719b5b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c126d635-a0ba-43e2-8295-e4ba4e7f1005", "sighting_of_ref": "indicator--1aed0556-5580-4f0a-9a85-0c0442060e6a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20284fbe-7120-40aa-9ee5-c54159a8c083", "sighting_of_ref": "indicator--163bbb59-3e47-467c-a175-1755f717cac1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed89a016-5e44-4ffc-a7e7-12c15f2bfb10", "sighting_of_ref": "indicator--9105628b-eb8b-494c-bef8-0e81be435442", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b44d8a-0e4f-41fd-a9ad-398a1d7dc554", "sighting_of_ref": "indicator--f3e9552b-2d15-4367-b78b-106b97d1403c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6419084a-9571-4e36-95db-9d02f59259bf", "sighting_of_ref": "indicator--62c5e91c-cf68-44b3-a9ec-3d09138e4e8e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0c6691-faf7-46af-93c3-5a6efff958ca", "sighting_of_ref": "indicator--8650ac32-5f6a-4738-8105-270d630bf164", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe46dc5c-cc4f-4751-a256-22c8cedead47", "sighting_of_ref": "indicator--37a9a026-5fc4-431e-9fcc-7d00d25cf800", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cafac7-7c1e-43ac-995f-18e8253939bb", "sighting_of_ref": "indicator--37a9a026-5fc4-431e-9fcc-7d00d25cf800", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5b1bb2-e0b0-4302-a472-8c6a807a60c7", "sighting_of_ref": "indicator--f4c95b77-4a6d-4d2b-8de8-c8c659e4175a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2580a56-fac1-4552-a29a-dca0adea665b", "sighting_of_ref": "indicator--5d62f8b5-f1c1-4e74-9d48-0146a220d0a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a567e7-5d23-421c-8ce4-bb51c52d207d", "sighting_of_ref": "indicator--f5d4b133-197c-4420-82aa-239747a767eb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44db21df-54ac-4b95-a543-df3b3cf7f129", "sighting_of_ref": "indicator--1f469ceb-1cd9-44a7-8323-72bafffe6ab9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08e1253-8e98-40dc-9c22-07fedc2527d8", "sighting_of_ref": "indicator--6a1404cb-7257-4f2a-92eb-35b2f18f12ef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f36972-4da0-4d42-9974-1f23188b226c", "sighting_of_ref": "indicator--edd5a52e-e70f-4b07-a475-5dec9568fb3a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b001ce-d31e-4cf8-8353-a57b882e608e", "sighting_of_ref": "indicator--2fc4f133-2235-44c5-8449-fb1af79c62b8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d5c86b-9d5f-4e7e-a075-68220a6beeec", "sighting_of_ref": "indicator--be70854a-5a50-470b-97c9-1952152bbb95", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d6e59c-4af3-437e-90ad-f61b04e3d11e", "sighting_of_ref": "indicator--a15275f8-3331-4f18-8667-4eaf175065c4", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbe3a0a-f8ff-4a3d-86a7-42d37574c68f", "sighting_of_ref": "indicator--0040e48f-1fb3-415d-b353-449b4735938e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e801b76-f7e8-4fd8-9df2-04276cd908fe", "sighting_of_ref": "indicator--6bb63c38-74bf-4b2f-b1d5-cebe42e8f082", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2567abc4-2ecf-40c9-91ba-8a7736803a9c", "sighting_of_ref": "indicator--3422ad2d-d9fa-40f8-af70-18f1cdb2dad4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851e4ea9-3f73-4f86-9ff0-40f490aa90b1", "sighting_of_ref": "indicator--3422ad2d-d9fa-40f8-af70-18f1cdb2dad4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7a9eda-ed46-4723-8ccd-437512084afd", "sighting_of_ref": "indicator--2d537ba9-4ac4-460e-99c3-7d0b6f85c6df", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328b2a9b-18e1-4521-a15b-7efaa462fe40", "sighting_of_ref": "indicator--cba13bf8-fa80-4e01-af18-d1e618d21666", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e59cf36-5012-4b50-af59-9f02bc930218", "sighting_of_ref": "indicator--91f9d577-9498-4fa1-a89e-37f8d2a2fb47", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1b3669-afbe-48ad-9a94-ac56aa800407", "sighting_of_ref": "indicator--3f925e8b-12a2-4078-8808-d8f874b86908", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5ff857-1795-49f7-a81a-14dc44675155", "sighting_of_ref": "indicator--1278d604-29b0-4de8-9feb-a9a94a563759", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253e0209-b14f-40b7-b7d2-148599a1692e", "sighting_of_ref": "indicator--bd732342-1684-49c7-b767-fa06ded522d9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c3c816-49cd-4dcd-a832-e27b291e652d", "sighting_of_ref": "indicator--9677a762-b66e-48d1-be00-8572fd90bdfc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71dd50e4-e323-4166-a43d-c225cabcd133", "sighting_of_ref": "indicator--9677a762-b66e-48d1-be00-8572fd90bdfc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0c6ad8-4704-44a7-842d-a75de7ef3ae3", "sighting_of_ref": "indicator--9677a762-b66e-48d1-be00-8572fd90bdfc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416d3f6a-50dc-467e-8924-fbf07feecc6e", "sighting_of_ref": "indicator--15c0645c-7643-41e5-b9ea-9ba5a76adabc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee99762-9ba3-429c-92ab-24a15dd35f84", "sighting_of_ref": "indicator--62bb1804-bd92-4083-bafd-32d7259dba65", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1672374b-197c-4b84-ae10-58ceb2de8e4c", "sighting_of_ref": "indicator--8a19e50a-a40a-4b63-b5db-fa4370c8af2a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4c71a1-287a-4ecc-a9a4-1ffe0add0a2d", "sighting_of_ref": "indicator--669df48c-af41-48e0-a204-8679d34dd782", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b45827-d509-4a05-9167-b046df726805", "sighting_of_ref": "indicator--1e22df14-a07f-4dd3-b8e4-d532d52f530c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a4348c-8da8-4e10-91dd-453793339101", "sighting_of_ref": "indicator--1e22df14-a07f-4dd3-b8e4-d532d52f530c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ba69ec-e577-49b5-b795-9b81a34857c5", "sighting_of_ref": "indicator--cf202556-aac3-405d-b3e2-32b23d081a1e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d407a6b7-33ef-4b38-b7c6-cf9e6a3cd9a5", "sighting_of_ref": "indicator--1988181b-4f94-490a-8712-aa94e532a3f0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fb1224-0f92-460d-a563-724f1d304a0e", "sighting_of_ref": "indicator--1988181b-4f94-490a-8712-aa94e532a3f0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5013c5ca-9037-4b46-9923-5f41354daaf3", "sighting_of_ref": "indicator--1988181b-4f94-490a-8712-aa94e532a3f0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51998d37-7b54-416c-9866-64562261fa44", "sighting_of_ref": "indicator--a51d1ef9-bd48-4aa1-8a46-8f9d543f2d36", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77463ce6-0ec3-4776-acdf-e5e878c087f7", "sighting_of_ref": "indicator--45199a66-50f2-4d21-990a-c192e4a5e786", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f536b6-0dae-4454-834e-7edd0534a8a1", "sighting_of_ref": "indicator--45199a66-50f2-4d21-990a-c192e4a5e786", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811edf95-ac49-4e93-b53f-2dcbfb2f7c81", "sighting_of_ref": "indicator--45199a66-50f2-4d21-990a-c192e4a5e786", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ff4a3f-061d-4943-907a-6e40767c999f", "sighting_of_ref": "indicator--d8fa521f-940d-404b-8827-c88218877997", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b4ac06-817f-4b78-a81d-bf13d81fd8fd", "sighting_of_ref": "indicator--f40affc4-91a9-4a24-a130-1eb59da73146", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00548fe-81b7-4e23-8a95-504bc5637713", "sighting_of_ref": "indicator--1f2875c5-2d7d-4ac1-b019-32e42cb89b73", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eeb1667-5901-4d5e-b557-025246ba5d08", "sighting_of_ref": "indicator--1f2875c5-2d7d-4ac1-b019-32e42cb89b73", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65201c2c-8e8b-44bb-8dc0-e2003bd5280c", "sighting_of_ref": "indicator--1f2875c5-2d7d-4ac1-b019-32e42cb89b73", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154ff690-e79a-4695-bbf6-f98bcd513524", "sighting_of_ref": "indicator--992b3c7e-7849-4aed-8ebf-36da37f3a0d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce036863-dd9d-4edd-93bd-ed326acca15c", "sighting_of_ref": "indicator--992b3c7e-7849-4aed-8ebf-36da37f3a0d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff638ace-9517-4a8f-a8e6-2a8b7540bdb2", "sighting_of_ref": "indicator--992b3c7e-7849-4aed-8ebf-36da37f3a0d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deaa086f-45d3-465d-8904-70c69ccd7ef3", "sighting_of_ref": "indicator--ebeaf625-2bb4-4671-92f4-a48f733c2b4f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f966f06-6b59-43d5-bef6-ca4b88b49dee", "sighting_of_ref": "indicator--b757ee68-b358-4539-9bfb-55de97b37871", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b0134f-3fbd-4462-8250-bc5705eccac9", "sighting_of_ref": "indicator--ca233219-a1f4-428c-af99-7a4bcc0e52e6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ab8543-14ae-4c49-86e3-82bb17f8dca4", "sighting_of_ref": "indicator--e2f43bfd-7a1b-47db-8f55-19e8d2eee3d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66123b5-d853-4382-a091-485b348c1e73", "sighting_of_ref": "indicator--f28bdda8-312d-45ef-a896-cb6ac36d9b9a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af319da2-3c7d-4c33-9e32-a8b3f65a513a", "sighting_of_ref": "indicator--2bba5338-ed1b-4c8c-bb6b-f750234e4442", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c33ab2-8f17-47e1-b013-d5f6c317bcf6", "sighting_of_ref": "indicator--246c84e4-1367-46b3-aecc-5e81fdd70af5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b42c768-4162-4be2-a269-9c6130af9b62", "sighting_of_ref": "indicator--24326efa-9dac-4eb9-8e6f-03cbdeb0e349", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799b31bc-c91c-4fd2-b487-315ebb0d7f09", "sighting_of_ref": "indicator--7349b62d-b018-4c1c-92e6-d6da140303ff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef7fa6a-9930-42ba-af14-ef5d07721dfd", "sighting_of_ref": "indicator--7349b62d-b018-4c1c-92e6-d6da140303ff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ed266f-6704-45fb-bc5e-fadd0e63e2c0", "sighting_of_ref": "indicator--1830889d-4834-42c0-ab9f-6978ea1a3c72", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e944d5a-6655-4775-b1ff-3b633103dc1b", "sighting_of_ref": "indicator--8d21d960-f2e4-41c9-a085-d10a45f4c1cd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b098f2dc-d25e-4cfc-a81d-3e7fe3151741", "sighting_of_ref": "indicator--f71e70e5-c5e6-4508-ae6d-bf436842bbad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9b92f9-ffab-4883-9a24-8f3650492ce2", "sighting_of_ref": "indicator--b3b1159c-5408-470c-8ad4-dfcb138c0f3f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee4deda-a1ee-40af-8095-49779fa7856d", "sighting_of_ref": "indicator--2e89f5c6-020b-4cc9-a0a6-cb725bb7e61a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bf495e-531f-4dca-a15b-3e8c7f74d331", "sighting_of_ref": "indicator--ba2496cf-8509-44f6-a323-09531f1eade7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0310560e-0b1a-4012-863c-bb22a2df6263", "sighting_of_ref": "indicator--ac7f8530-0e52-488a-bc51-3815deb7645a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd46bf9-6ec8-4a70-9a01-829a57dbdfda", "sighting_of_ref": "indicator--ac7f8530-0e52-488a-bc51-3815deb7645a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbe4f28-5705-454f-94c0-0e313c00d099", "sighting_of_ref": "indicator--ac7f8530-0e52-488a-bc51-3815deb7645a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88497129-b465-4a3d-a514-325ea6040c35", "sighting_of_ref": "indicator--af7768d6-0951-4a13-a2f9-a0457ae72a5b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92399ec-f3eb-4051-a0f3-aafee05d05f2", "sighting_of_ref": "indicator--af7768d6-0951-4a13-a2f9-a0457ae72a5b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302eb4e5-6715-44c8-8b1b-b1bf56bf78eb", "sighting_of_ref": "indicator--72d0652e-368e-4aae-b01b-ae38cd6b778f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c81317-df1d-4e0a-84b7-f52be8b72a25", "sighting_of_ref": "indicator--b1197b67-6838-4014-9ba1-53ee1a3c62f4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4714b338-20e9-4000-b059-3c714b0f8f51", "sighting_of_ref": "indicator--b1197b67-6838-4014-9ba1-53ee1a3c62f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5293b441-f5a1-47c9-b851-7962838f1d66", "sighting_of_ref": "indicator--b1197b67-6838-4014-9ba1-53ee1a3c62f4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c58a726-6abe-458e-89f6-0a8175088932", "sighting_of_ref": "indicator--ad625dbd-3006-4ad9-b817-baa24ef90be3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a26f881-c4c8-47a1-bd85-acba674af504", "sighting_of_ref": "indicator--ad625dbd-3006-4ad9-b817-baa24ef90be3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb739e9-fcc0-4c76-8e30-a87f6fd09d46", "sighting_of_ref": "indicator--a33cdd2c-97a8-403f-848a-31ed54e5bfd1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1253fe-172f-4e76-99b8-575f83b60a06", "sighting_of_ref": "indicator--a33cdd2c-97a8-403f-848a-31ed54e5bfd1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2797a1d8-30f6-40ae-95f9-9e910d190494", "sighting_of_ref": "indicator--ae49bf1d-9054-410e-9df4-07a47a3358a9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e233ece-3b61-4818-af7f-efec79f4d1e1", "sighting_of_ref": "indicator--ae49bf1d-9054-410e-9df4-07a47a3358a9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85611a27-5c36-4402-a1ec-2914b0517bbc", "sighting_of_ref": "indicator--fc39fbe3-6f47-4f4d-8217-592c49e8a10a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1be5b3-e201-4ddf-8c8a-fbe38fc43b7d", "sighting_of_ref": "indicator--fc39fbe3-6f47-4f4d-8217-592c49e8a10a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fa4024-6267-42bd-b81b-555ed9d3cbf8", "sighting_of_ref": "indicator--b829454c-d17a-4a61-b78e-386ae8ce7067", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2cec01-503a-49fe-b79b-7ac771d71f7a", "sighting_of_ref": "indicator--b829454c-d17a-4a61-b78e-386ae8ce7067", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08471ac-9806-49f3-8026-af213db0a97a", "sighting_of_ref": "indicator--b829454c-d17a-4a61-b78e-386ae8ce7067", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793b855b-036e-4a72-9cda-2713e7c1684f", "sighting_of_ref": "indicator--5d554967-012d-476b-bf1e-a90c4749e0e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffb4e22-ed73-4372-82d3-01d3844aa218", "sighting_of_ref": "indicator--5d554967-012d-476b-bf1e-a90c4749e0e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc79029-6544-46f9-b899-157bf3f59593", "sighting_of_ref": "indicator--a274d0c9-3411-4d9f-8121-942bd6dccb94", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b078d8-a4a6-46cb-8681-3844296a6617", "sighting_of_ref": "indicator--a274d0c9-3411-4d9f-8121-942bd6dccb94", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13d9e42-596e-4452-8c7d-d3eb64e80ba9", "sighting_of_ref": "indicator--efe9d936-4d6d-455f-8870-aa9bfcc07f71", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdb9c86-48f0-40bc-81c7-fcddbe621457", "sighting_of_ref": "indicator--efe9d936-4d6d-455f-8870-aa9bfcc07f71", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56117b4c-9f6b-40f1-be9b-2d15c2eae3c8", "sighting_of_ref": "indicator--cfe1e779-ad78-4f97-ad32-fc2bffb36b57", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ec5ebb-12a8-477a-b72c-17d7817436d8", "sighting_of_ref": "indicator--cfe1e779-ad78-4f97-ad32-fc2bffb36b57", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a4c65c-a230-4d02-a13f-b8381601a71f", "sighting_of_ref": "indicator--e9412dda-562a-4523-b04d-90c0a2c0b406", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858bdf52-25d8-47ff-89f3-6aeea5bf3d7f", "sighting_of_ref": "indicator--e9412dda-562a-4523-b04d-90c0a2c0b406", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c41265-ce83-4f30-8745-8739ed88c1a4", "sighting_of_ref": "indicator--71d9da27-a2f9-4e94-ba3f-5f8208d63d58", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7893e0b9-3f72-4a93-a70d-c0d3ed26bb17", "sighting_of_ref": "indicator--71d9da27-a2f9-4e94-ba3f-5f8208d63d58", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686d99c5-141a-439f-9d99-ea3dc46547d9", "sighting_of_ref": "indicator--dc7ee14f-f5c6-49fb-a926-46eb9d60932a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc913f0-1468-41a6-ab13-5da7d377b7a2", "sighting_of_ref": "indicator--bfa12c0e-d784-44fe-b55b-c7b336957ce2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdeb36e-867b-4bf6-885f-3a83b59e0bd7", "sighting_of_ref": "indicator--21cd4dd8-73e8-47f5-88f0-600d94f1c726", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff696d7-8a3d-467c-be67-77b334d7c06c", "sighting_of_ref": "indicator--21cd4dd8-73e8-47f5-88f0-600d94f1c726", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad3d647-feee-4e96-9491-b306d68d85cd", "sighting_of_ref": "indicator--21cd4dd8-73e8-47f5-88f0-600d94f1c726", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47d5729-12ff-4e0a-b408-1d230fd9611a", "sighting_of_ref": "indicator--eab225fb-6df9-4faf-ae5c-ddd9eded968b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00c72db-a7af-4065-bc7c-e477dba4dfc6", "sighting_of_ref": "indicator--073f8caf-654b-44ac-bb45-e09f1bd52f84", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d807be-e59b-4093-8191-3bd6dc6544df", "sighting_of_ref": "indicator--cf96ad10-b8c1-4342-9ad0-3a34004da087", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e377658e-7ef6-48b6-ae2c-9d8e9b89c6ef", "sighting_of_ref": "indicator--8b59b8cc-b3f5-404f-a32a-c4f0d4486c52", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123bc8da-a156-4222-bad5-0ceab5e9f261", "sighting_of_ref": "indicator--c01a3298-a80a-41a0-811e-821d23e723bf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8408995-ab36-4dd9-afae-763a5fbe33bc", "sighting_of_ref": "indicator--fdf246bc-3fdd-4759-aeb0-29e4e97c037d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d85c1f3-680e-424b-aac6-f418be174644", "sighting_of_ref": "indicator--cb2ec340-8bf5-4329-9974-757d60792f51", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f512ab59-bfb7-45e1-ad0e-4c884ca23879", "sighting_of_ref": "indicator--6e421ba6-c2ba-43c2-973d-23211f2f4596", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e9b5fa-f61b-4811-a910-3c85bb352758", "sighting_of_ref": "indicator--6e421ba6-c2ba-43c2-973d-23211f2f4596", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c3f842-fa78-4a86-beb9-cf98d275be6a", "sighting_of_ref": "indicator--46debd9a-5f30-4122-9adc-251664ae4d51", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273eec03-9127-4cda-925b-663efe8ce6d4", "sighting_of_ref": "indicator--46debd9a-5f30-4122-9adc-251664ae4d51", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd585e2d-90ee-4b81-a675-f9b59e26b4da", "sighting_of_ref": "indicator--0ab7a490-a580-4902-8ca0-e057dc43de3e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0769bb94-9251-4666-95e8-135aefecad25", "sighting_of_ref": "indicator--d94013cb-dc4d-44f9-916d-ab2d3f49c573", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741bfc33-7cea-428c-af56-eefa6e22d70b", "sighting_of_ref": "indicator--6e4beda1-4c3f-4306-99d4-76d65b8bd5a0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc0f7c4-a478-4250-8d03-a37b225558b6", "sighting_of_ref": "indicator--304c77ac-50ef-4f44-91af-dccce11925e8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962d4cfe-c948-4455-9bf8-ce0f67f1c123", "sighting_of_ref": "indicator--0e840d07-25b9-492d-89fc-1affa936d28c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eae2549-85ab-456a-a9ad-e99ce1e5fa2f", "sighting_of_ref": "indicator--c3e27ef7-af20-4b07-9c4b-a9c522112161", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e6afdc-023f-47d3-ada6-1bf86040c5bd", "sighting_of_ref": "indicator--0a9fb1f4-3791-4d17-a904-8627efb333c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752df314-3137-4eaa-b839-879e70f5b787", "sighting_of_ref": "indicator--0a9fb1f4-3791-4d17-a904-8627efb333c9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8233c8-51ed-4134-b38f-8b9a8601ef4d", "sighting_of_ref": "indicator--e78c779e-61a4-4990-8e69-dfe736bbaad6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb86584-05a4-4f4f-bd59-bc928f1920a5", "sighting_of_ref": "indicator--78cdec96-fdf6-400f-bd10-d022ab5dd10f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907a56d6-7eb1-4446-a950-0d0d770e8e92", "sighting_of_ref": "indicator--c36f287d-1009-4a3e-86a2-6a2a26d49e7c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a422006-6375-4f95-a898-f54ab42d907a", "sighting_of_ref": "indicator--c23c231c-8370-4ae9-b5b7-3895dbaaa123", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f70778e-2ca5-4bea-93ec-83f987fdb6ee", "sighting_of_ref": "indicator--95317ff4-f6f5-414c-8ce9-8a2d2d05cab1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50eebee8-6bdb-4633-abaf-502c07fd4dc8", "sighting_of_ref": "indicator--5b4f3328-7922-41ee-be5f-9a76df9dcfa7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcc79a1-d27b-46ed-b981-6582d5485bba", "sighting_of_ref": "indicator--5b4f3328-7922-41ee-be5f-9a76df9dcfa7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bdbdf2d-76ce-4e49-b483-a78bf47ca944", "sighting_of_ref": "indicator--19a0b6da-9573-44dd-a3dc-aa46299a2bdd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0073af-e538-4e80-b981-059d457d0cd4", "sighting_of_ref": "indicator--274ae59a-9e54-4ec4-a478-22804a8c54ed", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d3ed96-c6bb-44c9-a748-3a5475665a62", "sighting_of_ref": "indicator--1b8a5ec5-8fbc-4c5f-a353-786c575f04b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43031ad7-f440-43e9-82c8-01b7c05f6000", "sighting_of_ref": "indicator--1b8a5ec5-8fbc-4c5f-a353-786c575f04b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613181e1-6bb9-458d-8c09-9d0060d5564a", "sighting_of_ref": "indicator--2d230ac7-3e6b-474a-b39d-ab6013287361", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf78cd9-da66-450a-8b3e-19282794e1bb", "sighting_of_ref": "indicator--31d521df-c26e-4c83-8959-eba39423d824", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ff1955-6baa-4444-9f83-17973e56a9a1", "sighting_of_ref": "indicator--5d60b38c-3012-401b-ac25-819f914e462f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4519a45-3a87-48a6-b6a2-4053cf3ec092", "sighting_of_ref": "indicator--592e8250-58df-43b9-ac2f-ae3f9c00ded6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364e4b09-69e1-4d01-9c0b-7fa4de6406d5", "sighting_of_ref": "indicator--310f5b21-c305-4ab7-8c64-83a66c67bf72", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a078e1-4fb9-4f3e-9f5c-5b5c22e45ba6", "sighting_of_ref": "indicator--4fe56207-e863-4d0e-9cb4-10d10e5e85d5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4fc32c-81c5-4a3b-a166-5588335e13ea", "sighting_of_ref": "indicator--0f230920-2e5f-4408-ae0c-94988044ba20", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e161e01-626d-4bd7-83b0-d27fa70a587f", "sighting_of_ref": "indicator--fbe5858e-4509-4a85-9f57-51a8de87e98e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e33a2ee-84fb-4b55-8e98-839940d0ae9a", "sighting_of_ref": "indicator--b37ed827-b081-4f50-85ea-2104dad64743", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e56d6a3-c988-4334-8b44-269d8cccc7ca", "sighting_of_ref": "indicator--7156f26a-dfc5-4716-8c7d-6522ba90b770", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54f1740-27b6-4807-ad09-80e2f3911814", "sighting_of_ref": "indicator--8de42e64-45f6-4b10-a26d-e8c3e1a779d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192cad15-6142-4a31-b61d-250bef74965a", "sighting_of_ref": "indicator--f318d5d4-513f-464f-8045-7cfae609b429", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e5e270-658e-4196-87b3-5e6190075464", "sighting_of_ref": "indicator--ad3f494c-8f49-4b69-8867-987b54abd05b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea76421-72f5-4e37-b1af-fca2959c69c3", "sighting_of_ref": "indicator--8a9c5e98-d3ee-47f9-b13f-c8e0a14e42bf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8020c8af-4b6f-470c-ad8f-a6aafe746c85", "sighting_of_ref": "indicator--1b71b82e-947b-4bab-b347-78386a74053a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bddbb3-2680-4b06-b70e-beb771fd35c6", "sighting_of_ref": "indicator--f658e3a2-ebf5-4697-9f2e-99780a5e6501", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a16298c-1304-4e55-a57a-fc1878a065c1", "sighting_of_ref": "indicator--f658e3a2-ebf5-4697-9f2e-99780a5e6501", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aba1d4-e6ca-4f23-a33f-28b100be4334", "sighting_of_ref": "indicator--11974864-dfeb-4f0a-ac19-ca36b1d70fe6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5269b2-e0e8-490a-9a46-3ac974d1f5d3", "sighting_of_ref": "indicator--9f2639ef-5f6d-413a-a41c-67d65cd3b127", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82e518e-978a-45eb-bea4-0000701a32a8", "sighting_of_ref": "indicator--9f2639ef-5f6d-413a-a41c-67d65cd3b127", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0683adbb-49d2-4ca9-99f5-b2750ef9b73e", "sighting_of_ref": "indicator--455a25fb-e47c-420a-8413-7b048fcd5516", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178cd2fc-9fa8-40c7-833a-5bbee7e71c16", "sighting_of_ref": "indicator--34a198a1-50c5-4fa9-a693-c2d38b6023f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a7a05a-15ae-4be2-89c0-98aabd235f2e", "sighting_of_ref": "indicator--6c93e48b-408b-4446-bd10-e8f46a8c9bb7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abcccec-8475-42f6-9485-b8a43c2076f9", "sighting_of_ref": "indicator--fc686a2c-1221-467e-b025-efe9d05589c7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba51c96-379f-44ff-8040-c4ba7abe5225", "sighting_of_ref": "indicator--97560031-bcb1-418a-933b-c1e6f6bc52bd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61171951-edc8-47f7-bc07-a14746fade4f", "sighting_of_ref": "indicator--658ad960-51e7-4b9b-b6f5-298c8741c931", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ce4172-de7f-4cc6-94c4-77e1c1218f78", "sighting_of_ref": "indicator--658ad960-51e7-4b9b-b6f5-298c8741c931", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b529a59-4d10-405b-8177-eb3965938a44", "sighting_of_ref": "indicator--fc6c45b8-45a2-4d29-b111-5875980b84f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f7845c-dbbe-4bf1-9a57-30512e16f3df", "sighting_of_ref": "indicator--e277f854-34e8-4064-a07f-38d82894c3d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055e8ef8-71a3-43b4-8ec0-deaa588b7926", "sighting_of_ref": "indicator--4bba219f-1781-4bd5-9feb-f0d9778d26d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24313a30-7408-43af-b919-fab5a896da84", "sighting_of_ref": "indicator--4bba219f-1781-4bd5-9feb-f0d9778d26d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddef50f-fce9-4767-ac90-8edc16e23df6", "sighting_of_ref": "indicator--7da6d0c5-9b6b-40f8-b13e-36e5aa8eea65", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840b87b0-6e6c-4bb9-8796-f0127c9d0388", "sighting_of_ref": "indicator--b317ad98-0aa0-46f9-a8c7-10e060e5836a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e396a10-62a4-447a-ad99-190616113224", "sighting_of_ref": "indicator--65cbed10-42b0-4c8e-ac05-b0c330baa198", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c387948-3842-4d36-8fd3-a299ed81b9c0", "sighting_of_ref": "indicator--8b7861c5-2026-4a88-94d5-a7330939916f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428e3347-6700-4ee1-8bef-3c415a66b512", "sighting_of_ref": "indicator--40aa8fb4-8b61-4e05-b204-c8521112556c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461ad372-1bf9-4a53-b29f-4767eea29b38", "sighting_of_ref": "indicator--ed17c0c3-a128-4cf1-89c9-33e6c0778f44", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7686c21-07d2-4fbd-aa9e-60fa7a03a197", "sighting_of_ref": "indicator--85c6625e-2178-4a10-ac28-1c606a9310b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a22212-4d50-4e16-9eee-9a70afc66858", "sighting_of_ref": "indicator--3c78659e-ab91-4a7a-90e2-c08e498e28f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b0f49c-00ce-4b89-85a6-5e2aa7936e58", "sighting_of_ref": "indicator--9bbb3ab7-261e-4cb7-9489-1038aea38967", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21337d12-a3fd-43b1-b356-77da6870ddcf", "sighting_of_ref": "indicator--9bbb3ab7-261e-4cb7-9489-1038aea38967", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ca02d5-855d-4169-8abe-175bab72b0b1", "sighting_of_ref": "indicator--613ff42d-cd46-4c2a-81bb-3eef6ba87818", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bb21c2-b128-43e1-97b4-474c452a5562", "sighting_of_ref": "indicator--15527bda-2f3d-4e69-a5f1-adb1a050f3f4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ef3bb4-a86d-4c2c-abab-b3c1b15cb593", "sighting_of_ref": "indicator--a6aa8b69-11e1-44b3-b142-e07ab34268ae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcd990a-8f3a-4f65-952e-479b1210cc4a", "sighting_of_ref": "indicator--306ea342-3edb-436c-9f9d-01b9403931b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d5ea65-3d78-4e7f-8e2e-774e497c0a44", "sighting_of_ref": "indicator--357011eb-79d6-470c-a3c4-3a313ac100e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6db8c0-c994-4873-b384-26dd5b7544cd", "sighting_of_ref": "indicator--aa04a3ab-6b54-4ee1-98b6-ddf196663bd5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e68c3f4-b8f3-4776-aad8-38e6acf6f775", "sighting_of_ref": "indicator--7ba39ecb-5b8e-4c64-85f5-1e77796c240a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0202eb7-c5ca-4731-8635-a5d7973c14df", "sighting_of_ref": "indicator--30c4444e-f999-44a9-9af3-e0a8098d4ffb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b507e2e8-84fa-4335-986e-559219009ff8", "sighting_of_ref": "indicator--30c4444e-f999-44a9-9af3-e0a8098d4ffb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c3c2e1-9de4-402a-945f-3589d0d60ff6", "sighting_of_ref": "indicator--fabd0274-e5fe-4677-a945-b414fcb2fd10", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3562d62d-29c7-40c3-a86b-f5dba2d202d3", "sighting_of_ref": "indicator--84d5c22a-e3e3-4269-b696-2d78635ce646", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af167ad-0ce5-48b7-ace7-950c3cd78d16", "sighting_of_ref": "indicator--e291c43e-39d3-40d4-a668-acbccbd576d7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396b6f1b-6925-4f19-b646-3c06470ef3e2", "sighting_of_ref": "indicator--8ab2eabd-4f00-4add-9544-4ad4a4a7d924", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ac600e-1ef4-4b56-8eb4-cc843ef33c45", "sighting_of_ref": "indicator--8a308591-a6f0-4960-93e9-76ad60fe3dc7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5bf25c-47b1-444c-80bd-11a5ef9f43e6", "sighting_of_ref": "indicator--d460369f-7d11-49a7-ac5e-7ec68ff7283a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0497fd80-726e-4505-a5a6-813c9623c472", "sighting_of_ref": "indicator--13bff298-b9d7-4ad8-8fd5-5227bb4d9288", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8fd79a-a714-4537-b117-4d46458c3639", "sighting_of_ref": "indicator--a8be75f1-b9b7-4368-b06c-fe1c64865a50", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3619db35-39b3-454f-8937-669af2a7c763", "sighting_of_ref": "indicator--8a62fdcf-22e8-47a8-91d7-2d10b6ed1be4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213bd24d-877a-491e-9be3-66d287c6538c", "sighting_of_ref": "indicator--211fbee1-adbb-4643-b75c-6275405f27f0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8836435b-75f2-4867-8d5d-f23364c0a93f", "sighting_of_ref": "indicator--211fbee1-adbb-4643-b75c-6275405f27f0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8076f1-dcc3-4cba-8e17-2c3969afd520", "sighting_of_ref": "indicator--d4f24bbb-80b0-4382-9a7f-1672399c5e4a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a761ba-d76e-46b4-82cd-9e8aee8f9dd3", "sighting_of_ref": "indicator--d112b29f-b94d-4df9-9ba0-d38292a67358", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b38b1ad-2acf-47ba-b0c0-efd5fa279c95", "sighting_of_ref": "indicator--233a14e9-2646-4ea3-8ecb-3d34502c862d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1182e9-f8db-4958-8a67-c9763592f9e3", "sighting_of_ref": "indicator--b58c7116-fafe-418c-9b16-209705a5ef07", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540b3d17-7e6a-45e3-9687-2d05f4b1709b", "sighting_of_ref": "indicator--a038c6f4-255f-47a3-b8e0-e1683d5333e3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08f6adb-28b5-466c-a820-e25db14ad05a", "sighting_of_ref": "indicator--4a3d369b-abad-4633-8802-bd1b59a93da5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3492415d-2e08-41f0-bdb2-37a6c71ebdb7", "sighting_of_ref": "indicator--a529bd17-8945-4e0e-a653-c80c7ddbf0a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58922cf-dda1-4750-a167-806ce78b06ba", "sighting_of_ref": "indicator--0ab8ae7d-3cf0-4434-8261-96784a1fc552", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbe8f42-2bfc-4076-b05f-d6cced4d7afd", "sighting_of_ref": "indicator--a180987a-b1ba-4877-9ac8-bbf4551a81c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f04df1-ff4a-4f64-9b09-208c418409b9", "sighting_of_ref": "indicator--2ad6edd3-58ad-44cc-a7fb-c7f3fed667d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b7e7e1-f49f-4575-81be-2a8cc618bbea", "sighting_of_ref": "indicator--8aacedae-8bee-4ce1-b58d-529e62574dfc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf86fb6-331c-444f-93f5-e4fbab52448e", "sighting_of_ref": "indicator--9bcb2b0a-dc55-40c0-b6ab-f97df558215a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a9284a-3291-48c5-9f92-a006fbd958f4", "sighting_of_ref": "indicator--41d19aed-a9e8-44cf-b987-282b2d66f2d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffc98e1-529a-4cfd-ab02-3f7df31fa0e5", "sighting_of_ref": "indicator--8e202c81-949d-4b9e-9f2f-31fe2ef8ce54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacc0e44-d992-4452-b555-1157aabe86a0", "sighting_of_ref": "indicator--bebe61c3-b40c-4cd9-9f59-6aa0f133f63f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e27104-0f9e-40df-ba7d-5af819eb3a48", "sighting_of_ref": "indicator--7e8e4870-f620-4292-abf4-28489b916754", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64c6340-07e4-469b-93d1-0e08d95283a4", "sighting_of_ref": "indicator--4a0a7763-4fc8-4084-9ec1-de7476342131", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff9c2d2-ab2b-4b0c-972d-b216becb884e", "sighting_of_ref": "indicator--b76772f8-f15e-4a30-8bcd-d862eea94c37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a476782-998d-49f4-b95f-fabe32a1e156", "sighting_of_ref": "indicator--f9cc8a9f-ac8e-46f2-ae1c-1b8bbc6d61ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709f6376-7191-427d-aa25-7d8a1382f453", "sighting_of_ref": "indicator--f9c73e38-e64a-459a-8207-f53111ab6e94", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3513c44f-8123-4d85-af6b-1495df155fce", "sighting_of_ref": "indicator--045ecdb9-189f-4b8e-9e45-85367bf61113", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a811c9e0-af73-417a-af21-8b0001f37ffc", "sighting_of_ref": "indicator--189126ad-399f-4f03-beb9-eefbf878d4be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67771b45-c7e8-40d9-835e-f11b81ff3752", "sighting_of_ref": "indicator--e8e0e1b8-0e27-4f9e-9d88-53b41ad251e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2776318c-4d86-4e16-885b-bd4903118b90", "sighting_of_ref": "indicator--bf35fdaa-1390-4046-b247-fe92e060d812", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0399308a-c619-4be6-8712-71284f8ac624", "sighting_of_ref": "indicator--3cd98863-aaf1-486a-baa3-796e6554805b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e036c4ba-8a04-421d-bce2-5a8818eaafa2", "sighting_of_ref": "indicator--4962baa7-749c-4091-ab35-fa385ee8d102", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0397d427-7b32-428e-931f-e5d3d4fdc569", "sighting_of_ref": "indicator--80f654a9-717b-4da2-8367-e40e2f153ad2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5108ba62-830f-48c9-a845-f68b4c026d16", "sighting_of_ref": "indicator--704df5fa-b88b-47da-b4eb-5fb01cd0fe43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c519714-12c8-4c36-9337-8ad40ab8a2d8", "sighting_of_ref": "indicator--16899180-9e5e-4cee-ab93-c7389eb37849", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba3fa84-51a2-469d-ae89-3bc3f2bc756b", "sighting_of_ref": "indicator--244576ac-9976-427e-8175-bb766554316c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4186d403-f35c-40ce-af89-bcf302caa40c", "sighting_of_ref": "indicator--244576ac-9976-427e-8175-bb766554316c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc1b075-9455-42ac-9ea3-58b2f99e0267", "sighting_of_ref": "indicator--dc9287c1-a3f1-42af-9781-49bfe964b15d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28c1e90-0bc5-4a11-b70b-0d939345048e", "sighting_of_ref": "indicator--04ea6ae6-21b6-4b45-b17f-f1863364c79c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce9babc-e4ac-4dc5-9d98-04684a2813f9", "sighting_of_ref": "indicator--04ea6ae6-21b6-4b45-b17f-f1863364c79c", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6396e2cd-2d3c-476e-9dd0-e712be7f6093", "sighting_of_ref": "indicator--b80c953b-2e72-442e-be56-e5ff8dee9333", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2a1c7c-fa35-42ef-a2df-11550181affc", "sighting_of_ref": "indicator--065ec5bf-2d96-4c39-b701-fcb2e33ace8b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3e76ef-d918-4509-b706-dec08d370b54", "sighting_of_ref": "indicator--5841591b-e676-4509-a808-ab16e662059c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7e930a-e23e-49af-b86b-511e39362be3", "sighting_of_ref": "indicator--5841591b-e676-4509-a808-ab16e662059c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678093e7-27a0-4039-bf4c-87c5ad6831f9", "sighting_of_ref": "indicator--5841591b-e676-4509-a808-ab16e662059c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7378863-fe35-4247-b365-250e0321496a", "sighting_of_ref": "indicator--614b1969-76a1-4a9a-af6d-c14c6d228b14", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab568731-5020-4e26-b5bb-91b847be107d", "sighting_of_ref": "indicator--1b266502-bebc-49da-a1f0-bb42b13c040b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcbde19-b365-49da-a703-60d30f1a2d4d", "sighting_of_ref": "indicator--8817dd6b-c801-4df1-a8d5-13a5d3056dd5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fef9522-1b3b-4d0e-a1af-294876fbe8e0", "sighting_of_ref": "indicator--d319169c-891c-47e4-bc95-48d54d45ca3e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c617fd1-ed48-44b1-babb-10dc110aa040", "sighting_of_ref": "indicator--4cd76153-dd48-4ecf-8fda-63e17322699f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b733792-640a-4bd7-b2f7-e004e395153e", "sighting_of_ref": "indicator--202b5215-e319-4400-af61-c58b80960795", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9aebf85-427e-421a-8670-15091a6b943a", "sighting_of_ref": "indicator--0890347d-7ecd-492e-9aab-4bad67916c7a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e52712-935c-4f23-aa1e-b0f2bb59a565", "sighting_of_ref": "indicator--2edf895d-8e5e-4f49-9fe8-993f12f63595", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a895bf-2dc6-436f-b384-112f343472e8", "sighting_of_ref": "indicator--0f2ac46e-c51e-4f8a-bcaf-eda99931f547", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00edc3f-9f17-49ca-bf4e-94201db0ef12", "sighting_of_ref": "indicator--374d05b4-bcbd-44ca-89de-ed3ddcb3329d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277449fa-a8c3-468d-a608-acd96151784b", "sighting_of_ref": "indicator--8511f2cb-3a1e-45eb-a6c8-463a3e75d808", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b296294-e1cc-4e94-9dcb-740e7da3d4b3", "sighting_of_ref": "indicator--3364d6a8-e642-4092-9307-5a45a7e9de5d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111df005-dc17-48a4-aac1-5f6ef90ad77e", "sighting_of_ref": "indicator--b8ef8628-eaf0-4df6-b22d-11ed0d16c35f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227576f2-45b3-4a07-bb8a-35c469ef690a", "sighting_of_ref": "indicator--5f1e5983-a249-4f6a-89a9-8ccb159b51f0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86c1378-605f-4428-8672-3ec513188d65", "sighting_of_ref": "indicator--505d89f9-6369-4447-b9da-968c1095fa34", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a324cf3d-b840-4098-a3bc-92fec6e10319", "sighting_of_ref": "indicator--0ef5b9c5-e6dc-49c7-8ea4-5fbd0b3f4e64", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed37efc9-11c1-466e-ae81-3cc7e7dfeb5f", "sighting_of_ref": "indicator--3829cee2-94d7-4480-8330-a2f79767cf48", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a272cd7-d787-4406-9190-86b5ca232b6f", "sighting_of_ref": "indicator--7e4e5398-8324-47e8-92da-e2098844736f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37018fb8-8059-48bb-b576-5c9e87dada9f", "sighting_of_ref": "indicator--7e4e5398-8324-47e8-92da-e2098844736f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a976f6e6-f2df-4740-8175-866cd69db366", "sighting_of_ref": "indicator--0b0caceb-1984-4f9a-8dee-56e9d4ec009b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b39f6d-652b-4b9e-8e85-a926730afed1", "sighting_of_ref": "indicator--0b2c3630-80de-4ff8-b3c0-e474c9f7b56b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a069a8bf-7723-4e9b-b617-4f0f2b49a7d6", "sighting_of_ref": "indicator--0b2c3630-80de-4ff8-b3c0-e474c9f7b56b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3c4d89-8cc5-4be9-bf33-9e56c94fd4cc", "sighting_of_ref": "indicator--c36ce3b4-bbbe-43d8-b1e2-2410d1dadb73", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d316a0-165f-4763-954e-686860919b69", "sighting_of_ref": "indicator--4f0fcde1-e686-432a-972d-d3364e661b10", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c8da82-3675-4870-8d41-2a98d106eccf", "sighting_of_ref": "indicator--08ae5be9-ba86-4fa3-aefb-e5f801fe5a21", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14730bf7-15a7-47ec-8265-38d2661a7826", "sighting_of_ref": "indicator--4cc1ea54-b194-4ebd-89d0-e838e8569dd4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77bb042-128e-4b7e-9fc8-1a5ac2fdb84e", "sighting_of_ref": "indicator--58bc52e9-6f5a-4dc6-9918-cd53305e10e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91306181-8a24-4650-8c19-b82c65c0f01f", "sighting_of_ref": "indicator--58bc52e9-6f5a-4dc6-9918-cd53305e10e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c853ab4-46b8-45d1-8d42-52a96b0b3466", "sighting_of_ref": "indicator--83e6d517-3508-4432-a9f0-a4f392efa0f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e91e79-3197-4def-a9bc-3379974a0fe1", "sighting_of_ref": "indicator--cff7a358-4e27-49c8-b06e-a7db9f12e2d0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfdb681-8b5d-480e-8a09-ffb3e469eacb", "sighting_of_ref": "indicator--8e0f30ab-73fe-4b95-8fcc-b6fdbeefb3fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10eaf85-7bff-42fc-84b9-bb66721e3777", "sighting_of_ref": "indicator--a339a8fe-8a11-43db-8197-24af0814871e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5655edf4-27d6-460f-b581-7351c971caa5", "sighting_of_ref": "indicator--f7b50090-dd1d-48c2-8071-7bdef228ecc6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f6cd1d-6d24-4cf7-b2ec-3b6ffc6aa07c", "sighting_of_ref": "indicator--d96c31aa-2b8f-4de0-ac5e-07fc2ee2806e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723ed238-bef3-4628-80df-f7620aa50c82", "sighting_of_ref": "indicator--1ff4d81a-5c32-4479-9f69-85d2ce8f9926", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c0e8e3-bf27-4b5f-b68f-8711a9d8ec33", "sighting_of_ref": "indicator--079c6872-acfc-40af-a2ba-2f0be0356959", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5e682e-303e-4431-9ba5-51aa27ddc9d1", "sighting_of_ref": "indicator--92dd1b30-88d8-4d73-9253-90c0a2807d3b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639250b7-ea8b-4a7e-ab5e-8a63af8fe602", "sighting_of_ref": "indicator--92dd1b30-88d8-4d73-9253-90c0a2807d3b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156691b6-b685-401b-a184-a2f8ba6aacdd", "sighting_of_ref": "indicator--4fcbc88d-23c1-4642-8702-2f32a656876d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12d7eeb-1986-4a87-b303-a2aa5ebbd3d2", "sighting_of_ref": "indicator--2d646ac9-6398-4dc1-8c05-1505ba3b3d54", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf2c5b4-f31c-4fe2-be0d-fe080b435f9c", "sighting_of_ref": "indicator--01e2bea3-1911-47c6-b41f-5d6d54854fe4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f8dec1-8ddb-4e9e-a449-2b20acc45098", "sighting_of_ref": "indicator--fe29fbea-2f51-469e-a397-bc93ebce0814", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cab185-ca8f-4931-8787-cc87c214caf8", "sighting_of_ref": "indicator--d2cc511b-357c-4351-ae7f-d1eb5cfda2df", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88905ca-fa9f-4b35-aa68-56284e6ce0f6", "sighting_of_ref": "indicator--8bb25f70-8e20-426f-978d-f13c2530fa3a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95edece2-64c9-4716-bb4a-c452fe8fe080", "sighting_of_ref": "indicator--6a4a691a-d251-44ee-8f57-aca1df699d1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b012c309-5f7e-4fd8-a6dd-d15710167178", "sighting_of_ref": "indicator--be58e0c6-bba1-43e3-9773-11fbfd79e7fd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39da8519-e49b-47f3-bf02-d7ad393434c4", "sighting_of_ref": "indicator--0d0ffcf7-a3b1-4a4a-881d-513e178ee2ce", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6274b190-a337-4153-a2b9-f0392a58921a", "sighting_of_ref": "indicator--c2e42e12-9f05-4a9d-a8fc-55c238746fb0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b1f7f3-8d1f-402e-a801-48efe673529a", "sighting_of_ref": "indicator--a92e866b-694d-49ab-9fde-65b7db923251", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70887466-de8e-474c-ba99-84234b31c9bf", "sighting_of_ref": "indicator--ac5800ed-2ed6-4edc-acdd-87374a07ff66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41aa3e7c-2dec-43e4-a627-6b0185ee3052", "sighting_of_ref": "indicator--2cbc0fc1-9d10-4167-b653-74cb5e53ec93", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b591e5de-66a0-45fb-ae1c-245bdb5372bc", "sighting_of_ref": "indicator--39a0a7ab-1dcc-46c0-a389-c62627ca44ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f5c26b-cc87-4c2d-b9c4-63cc73651418", "sighting_of_ref": "indicator--774b086c-0b0e-4439-bc1f-13ad9b20dfb4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543a5957-3a4e-4640-aad9-6425df822dfa", "sighting_of_ref": "indicator--7da6b985-ff8e-4cee-8534-d0b7f258c40c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b879258a-390f-412b-9bb3-bf5c2b504340", "sighting_of_ref": "indicator--4243e20d-9ff9-413b-bf91-b9549f772f17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b18f98-7e5c-4d73-9d19-a2b618368644", "sighting_of_ref": "indicator--c7211482-7bdf-4226-adde-5c19e1952edf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8d6ae0-ac2b-4e08-80e5-df5d572f231e", "sighting_of_ref": "indicator--cd2241fc-fe52-45ca-bdce-bec082210e03", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66c1ea7-e2f3-411a-86d0-24faf67762ac", "sighting_of_ref": "indicator--e6ada425-d400-4bf0-bf2a-ab119210dc08", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f790f80-3b3e-465a-bb53-0037a0b020a1", "sighting_of_ref": "indicator--6c34f89f-e48f-439f-bde4-b233b4cefc5f", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4df1dfa-b70e-46cc-a755-8bf2176e2a21", "sighting_of_ref": "indicator--c5b3c412-bdb3-4686-a838-a89e65444ea5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cd18b0-f6cd-4ee3-bb5c-5ab26669ad87", "sighting_of_ref": "indicator--70f65dd6-e468-455b-bb5e-5b897cc6e534", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23c9452-b7fd-4be7-a016-eb478003f8e2", "sighting_of_ref": "indicator--2a27f075-43d2-4bc5-be0b-8690a1effa47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c986a6-abd0-4781-8421-881501a87b1f", "sighting_of_ref": "indicator--184a0f8d-438c-4ad6-8774-4575d0e36239", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a1410f-8c70-4fa0-bd4f-c25634f671bd", "sighting_of_ref": "indicator--1c6ad8b2-0d48-42ba-9d73-832525d1d5aa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618eaa21-6147-4ecf-9b0d-95a71a2ac7cc", "sighting_of_ref": "indicator--62f64ac0-9a1c-4e5c-a05b-de1e502e95e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d96dfc-a2ef-4a8e-86e0-38a9f471f131", "sighting_of_ref": "indicator--62f64ac0-9a1c-4e5c-a05b-de1e502e95e5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720f28f8-1362-4f2b-92a6-fccad9cebee6", "sighting_of_ref": "indicator--68bb475e-251a-41b4-b503-d4abe161ec4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad8c4f6-835f-497c-8069-c8e9a7546ce0", "sighting_of_ref": "indicator--049987a6-2112-4e3a-b17a-d5755aac8933", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4483693f-222c-4ca2-ab10-c2d90270b244", "sighting_of_ref": "indicator--756366c9-72ee-4886-9385-65809724ac6a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa62098-124e-46dd-9639-25d3b512d9b8", "sighting_of_ref": "indicator--f0b5ce8c-f62c-4961-b12c-3f275ebde18b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a356c1d5-953f-4325-a628-c2ba29afa6c2", "sighting_of_ref": "indicator--f0b5ce8c-f62c-4961-b12c-3f275ebde18b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341cedaa-6a9d-4a4e-851d-73055a0d776c", "sighting_of_ref": "indicator--af5f512c-a0de-435b-a6e0-038fe0511162", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fc1ba8-bb3c-4c01-ba6e-ccd9b86fa355", "sighting_of_ref": "indicator--4e0d7847-c76e-4bf0-acac-15939e9cc1fc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd45619d-0913-4e52-903c-18f48ae9b49c", "sighting_of_ref": "indicator--ac3c11e7-1812-4b73-af4d-54bdac7b32c6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7c4ce6-44b4-4110-a212-db82f793892c", "sighting_of_ref": "indicator--88bd3495-e739-4df1-a35e-d0cd49eefe4a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee82a208-8f7b-43f2-add6-aa1bfdf6e3a4", "sighting_of_ref": "indicator--7e3c618e-8bb9-4a67-a9a0-851b28b384fd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5a2485-1388-4ef9-a7a4-61426b23ee53", "sighting_of_ref": "indicator--508cd30d-c045-4443-bffd-a752238eae4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e21a7de-a85c-47e3-abec-35e12391e9db", "sighting_of_ref": "indicator--241df064-95e1-44e8-aafd-5a859978155c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02cdb0c9-15df-4f57-9845-700e806fc257", "sighting_of_ref": "indicator--241df064-95e1-44e8-aafd-5a859978155c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff09d88c-a7e3-401d-8b71-a6f76ff94081", "sighting_of_ref": "indicator--fcf07b32-5570-4b3f-a594-0316f1ab38b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243187d8-89f7-4208-98d3-b62112cfbe1e", "sighting_of_ref": "indicator--fcf07b32-5570-4b3f-a594-0316f1ab38b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5a9049-153b-4383-8716-626dca1891d9", "sighting_of_ref": "indicator--32858619-cf85-4ee6-9a7d-0d57cd426df1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4cfbea-afe8-4496-9dd5-e336b812ccc8", "sighting_of_ref": "indicator--1e0506d1-95ec-4109-be49-da884b0c61fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c98980-8404-46ad-8b02-a85b40114a59", "sighting_of_ref": "indicator--b5afa7c7-93b3-40e0-870d-05f7052c0f83", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2b4803-b80d-4ea4-b8dc-447bd6fe0f92", "sighting_of_ref": "indicator--f91f07f0-311e-44db-b36c-d93513370c8e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcffcc7e-71c9-4838-a90d-9d14d22b8862", "sighting_of_ref": "indicator--03cfce4f-a008-44c4-98e3-a6e7d26dae91", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ae343e-0213-4fca-a826-f79ca4692b6a", "sighting_of_ref": "indicator--4f125f0b-7880-4dd5-8640-e0e83ae1f452", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43935e07-780c-403b-8591-d4dca954b17c", "sighting_of_ref": "indicator--4f125f0b-7880-4dd5-8640-e0e83ae1f452", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afed5927-33ee-4864-afe4-1ad328466572", "sighting_of_ref": "indicator--f249d9fe-6ccc-4993-b166-387f1ab14a2d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f51218-8db8-429a-967f-db653aa63d57", "sighting_of_ref": "indicator--726b000e-d517-430e-96b6-c2ff7632d714", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bab31c6-add9-445f-b669-be21060def40", "sighting_of_ref": "indicator--9cfd4ae4-977b-4af8-8728-dec3a6f9a1f2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a483d235-f7eb-4d3e-86b0-a75ecd365ab6", "sighting_of_ref": "indicator--a5997465-ea01-4a87-ae2b-885eecf16649", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe8ef39-faaa-4057-946a-aae521e930fd", "sighting_of_ref": "indicator--aa0185af-a20d-40f7-b8b9-9dcb9cd42d54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9b1b49-9fcf-466c-8b0d-385f379d3f93", "sighting_of_ref": "indicator--e54ccd6b-a6dd-4650-8ce8-8722a8e5ecd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422a4b26-598b-4b4b-8fad-9cfe759adb06", "sighting_of_ref": "indicator--52a08a52-884e-4e9d-810e-136deeff2598", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff370e9-e9bc-46db-939f-8eb695bb93c7", "sighting_of_ref": "indicator--cf5a1bb9-569c-43ff-ba6b-108a6e813229", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d05d200-53e5-4773-9bbd-cedf9dc51d52", "sighting_of_ref": "indicator--cf5a1bb9-569c-43ff-ba6b-108a6e813229", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a3dd32-74ec-4992-bdb6-f97e673e0df8", "sighting_of_ref": "indicator--6c2e5448-59ce-4089-a32c-c061aaf2c414", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fc3ce8-b2ca-4422-8e18-9f3ca4848a73", "sighting_of_ref": "indicator--cc236925-55f7-44ff-8fe8-adb8d29b416a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd47776c-c094-4674-8617-365657f0ef79", "sighting_of_ref": "indicator--1939af4d-635c-4b22-a663-d98955857244", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f2ab3b-9840-44a2-9a9a-02c0a8761c45", "sighting_of_ref": "indicator--5c01a893-f873-4913-8292-12d41b554888", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e551f1a4-18ea-4ce9-aa0d-0d4d2906987b", "sighting_of_ref": "indicator--032c94d9-94fc-481b-8493-c448294676d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00760207-cc70-4ab6-8953-fddb22859ca0", "sighting_of_ref": "indicator--6f243eba-3dbf-45ef-80ce-8836fd94ec62", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010a14dd-e8f6-420f-a996-78e6e59cebd4", "sighting_of_ref": "indicator--45d5d2a9-57fe-4271-a0f8-047912b057c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab2d5b7-d614-4f66-aef3-93cdaf8e3c3e", "sighting_of_ref": "indicator--45d5d2a9-57fe-4271-a0f8-047912b057c6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bb19c4-7e72-49f3-b27c-00db8c61436e", "sighting_of_ref": "indicator--45d5d2a9-57fe-4271-a0f8-047912b057c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db92dc63-e43a-47e3-b583-d68bcf32832d", "sighting_of_ref": "indicator--9df02819-da51-4b42-814a-1511cb24fa2c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c66274-6e9e-4fc9-870f-931e49d21f06", "sighting_of_ref": "indicator--9df02819-da51-4b42-814a-1511cb24fa2c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d63c072-4f75-45a8-af84-f154ccca0eb3", "sighting_of_ref": "indicator--9df02819-da51-4b42-814a-1511cb24fa2c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cde4588-33d4-40c5-8c35-4aeb5c2d1444", "sighting_of_ref": "indicator--e51db585-4a26-4673-b237-ab56596daa3a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb7730c5-d623-4fb3-a980-1ee252f9ce75", "sighting_of_ref": "indicator--e51db585-4a26-4673-b237-ab56596daa3a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b64bc6-c15e-4d32-945c-33c12bc03bec", "sighting_of_ref": "indicator--e51db585-4a26-4673-b237-ab56596daa3a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8ad88f-116b-414a-8903-86494166954c", "sighting_of_ref": "indicator--fdc9b28f-3fff-40b1-9548-c3adc2da8029", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800c7368-ad4c-40a8-ac77-a2a4eb392338", "sighting_of_ref": "indicator--fdc9b28f-3fff-40b1-9548-c3adc2da8029", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d1ce9d-703b-417e-98be-ee3b3abc3f4e", "sighting_of_ref": "indicator--fdc9b28f-3fff-40b1-9548-c3adc2da8029", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bf792a-a53d-4026-896d-c80ddfdc59f3", "sighting_of_ref": "indicator--2a96200f-04b6-4257-bdf3-dadb7433862d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a68acc3-239e-44b3-bd59-afd9a1aba220", "sighting_of_ref": "indicator--b4a7340e-b5aa-4c2e-81d1-cce0b8538076", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95844e1c-50de-4989-8e1c-bbfcc0e1a963", "sighting_of_ref": "indicator--e60e7a53-1f1e-47c8-aa3c-b3805a2cbae4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21cebad-09fb-4b4c-ba2c-f7520e05cf18", "sighting_of_ref": "indicator--f933279a-505b-458d-9611-c7f8ae50d198", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94fd00e6-41c8-4292-b3a8-4fad2843bf6b", "sighting_of_ref": "indicator--00b7a14d-8a50-4001-ac16-af0223266dc0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6537760-c168-43ac-a512-9602502775c4", "sighting_of_ref": "indicator--4c2dacf1-94b0-4acf-bc46-e7c7a32c3dc7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c2b180-9547-468a-ba5f-873a6343c406", "sighting_of_ref": "indicator--6a03bdc5-2a8d-4839-b633-368fdca9a378", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248a900e-a3f9-442d-920b-720cb576887d", "sighting_of_ref": "indicator--3c04164c-312c-4fc6-a1d8-5dd65338800c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0fd256b-94aa-4696-a96c-4fd3931f7614", "sighting_of_ref": "indicator--050a57e3-2e5c-48ff-a0fc-519084d4f13f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3faabbf8-0e4a-4cea-be3e-fbc89008c366", "sighting_of_ref": "indicator--339d9c99-1e01-42d7-8f9c-3cec840e8c9a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b74a6f-b538-4c0c-ab45-326e7f4396f5", "sighting_of_ref": "indicator--99617fbc-f406-4c63-bc32-53c4a1b7d2f4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e1d543-3698-409c-8856-cb7fc163488f", "sighting_of_ref": "indicator--91f638d0-a8ab-400f-ba1c-e23ffad3e204", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c0139e-8288-432d-88a9-814e6c7efcca", "sighting_of_ref": "indicator--91f638d0-a8ab-400f-ba1c-e23ffad3e204", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc63d8e7-501b-442f-91b5-82c78ac40282", "sighting_of_ref": "indicator--91f638d0-a8ab-400f-ba1c-e23ffad3e204", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39530862-7d82-4f1f-8431-9ebed5b95bff", "sighting_of_ref": "indicator--f2ac94d4-061c-4bdf-8f44-3060d677550e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da3208e-4e95-4fe3-8263-6910958c399f", "sighting_of_ref": "indicator--556d506b-7843-44c8-b44f-b3c85dd06f40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ef7e5a-54c8-4ebd-9653-a2d58539e99e", "sighting_of_ref": "indicator--e9c504cc-a79f-4e76-a162-5ac7d0d07268", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f51ad3c-ba65-4c14-befa-c9a7bcb252a4", "sighting_of_ref": "indicator--9afa93e5-842e-457b-a39a-d2e33bfc9eec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccf5fb3-4f81-46d6-9296-17335df2d937", "sighting_of_ref": "indicator--521cdeaf-0c3f-41cc-9382-bad3a8fb38b6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8a130e-105c-46ea-a92c-b54b9f09c2f8", "sighting_of_ref": "indicator--e0e94fb3-b6fc-4b61-80fd-7de41fa413e2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdb581a-af8f-4efa-b1e1-445a3c36ea61", "sighting_of_ref": "indicator--659f12d8-7b9d-4d7f-ab2b-a48e52557006", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf9a8de-c5c3-4c96-81d9-a66c6a938396", "sighting_of_ref": "indicator--659f12d8-7b9d-4d7f-ab2b-a48e52557006", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ebf97e-0d0e-4584-b0c8-225f354f28f4", "sighting_of_ref": "indicator--659f12d8-7b9d-4d7f-ab2b-a48e52557006", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617e9415-aa97-4fb8-b477-6c4b8563669b", "sighting_of_ref": "indicator--63d11014-82ef-421d-b790-1fd36323e11f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e88eb61-5e2a-4fde-be6b-3e718aebd70c", "sighting_of_ref": "indicator--2f3ee403-bc44-416c-8d97-b533d9694c47", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3eeecc-88d6-4997-9e68-13bc516ef3f6", "sighting_of_ref": "indicator--a4bee672-f3d7-4878-b4c1-f925cf99cae4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a6cbcd-280c-4114-92a7-42ef1addc39d", "sighting_of_ref": "indicator--11372505-1a23-459a-9ed6-5d4b3f85c39c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2930cf17-aca1-4183-8ab2-2d50b0ac805d", "sighting_of_ref": "indicator--5214e4e6-4e31-442b-83f3-6e45d2be34dd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1af74a7-0956-4b5a-a5e0-9976f3444e9b", "sighting_of_ref": "indicator--bfabb8a1-39d5-4320-9fd4-37b7b5dac6eb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77e8925-5973-4ea9-b071-4129315f7f29", "sighting_of_ref": "indicator--ac22f0e9-c76f-4b2b-868a-5dcd2ee0d805", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3af997-6302-48f9-a25e-84045ca16282", "sighting_of_ref": "indicator--c059fcc7-5819-4365-9629-9ac22bc784e6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9c777d-db85-45f9-bf54-035a9cbcb256", "sighting_of_ref": "indicator--7395578d-0bbf-4eec-94a8-8ec804317d2b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ac44d9-f5e2-44b3-9f43-6fa93259756f", "sighting_of_ref": "indicator--82eba9c1-c2d4-4396-b217-cf8fdfd1c8b5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d796198-738b-4244-acd4-895d99eea4dc", "sighting_of_ref": "indicator--d0cd6df9-1a6e-4dda-a3bf-94760dd38d39", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a59a462-fabe-421a-a9f9-ecfbd339eece", "sighting_of_ref": "indicator--419daa43-dab4-4efd-97b8-efe77093370d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ea8867-44db-4c63-9cd0-a30cf93478e1", "sighting_of_ref": "indicator--8e286026-fda4-47d3-b445-1b0ddf01bb8b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3ca01b-ce99-41ff-85dd-3b672a7bc95f", "sighting_of_ref": "indicator--f51f0fa8-e2fb-47c6-9631-cb962d17860a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1296ef2a-998f-4e58-a512-db4a0c9723bc", "sighting_of_ref": "indicator--9b12a527-e0b9-4299-9489-d09357e73939", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c581a73-0981-4d54-a2a9-39c17dddebeb", "sighting_of_ref": "indicator--40f80b18-e2c4-4565-a1ed-12741f2b3a74", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f2f730-d00d-4a96-8ffe-f133b8706b01", "sighting_of_ref": "indicator--1a5e5a53-4f60-4882-80ec-88807a151449", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236f8b8b-c81d-4870-a2c9-02afca5a5621", "sighting_of_ref": "indicator--06a5600b-45fa-4885-8ac4-f8310b23c245", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf6898a-23b4-425d-a4f3-bb28df65502a", "sighting_of_ref": "indicator--ab666223-c35f-4276-9593-8548b69e5c4e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a8c635-056f-476f-9d5a-3090d3128266", "sighting_of_ref": "indicator--406df173-d353-4b04-90e4-9977e2d6daf1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090eeaa0-b521-4d83-b59b-08c61012cdc0", "sighting_of_ref": "indicator--406df173-d353-4b04-90e4-9977e2d6daf1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c58ee21-1091-4f07-8111-d6a1bd116888", "sighting_of_ref": "indicator--52ac3e51-7a86-4073-a5cc-06aba8ac7858", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac153fe8-2555-4f26-a407-aba069e237c1", "sighting_of_ref": "indicator--52ac3e51-7a86-4073-a5cc-06aba8ac7858", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f448ee69-17aa-4867-aab2-98c6ffb9383d", "sighting_of_ref": "indicator--52ac3e51-7a86-4073-a5cc-06aba8ac7858", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26734bce-ce0c-4e75-912c-2c45308d932b", "sighting_of_ref": "indicator--7840da7c-66bb-4c3b-b226-2fe1ea08505d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc65bbd-428b-4cc6-9ec4-07de9443303d", "sighting_of_ref": "indicator--7840da7c-66bb-4c3b-b226-2fe1ea08505d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4358a998-e839-4989-a0fc-f68bca0075b8", "sighting_of_ref": "indicator--7840da7c-66bb-4c3b-b226-2fe1ea08505d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221a5a17-612e-4e42-8bd6-73e3c2831d14", "sighting_of_ref": "indicator--adbd52cf-82d4-46b9-842b-d272125ed023", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583e8d0c-45a5-4d06-8069-5e33d8ff9a31", "sighting_of_ref": "indicator--adbd52cf-82d4-46b9-842b-d272125ed023", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0524671a-ac72-4848-a8f6-fa91c43d5c66", "sighting_of_ref": "indicator--adbd52cf-82d4-46b9-842b-d272125ed023", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451329db-17e7-4958-b2a6-ff7f02e9d026", "sighting_of_ref": "indicator--21eddd09-7959-4d08-8769-754165bb7e8b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5ad966-f830-4b70-a2b2-f74646672e39", "sighting_of_ref": "indicator--21eddd09-7959-4d08-8769-754165bb7e8b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced8cb67-195e-4072-af3d-987875cf8035", "sighting_of_ref": "indicator--21eddd09-7959-4d08-8769-754165bb7e8b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11fb736-149e-46cf-a42a-c7e9441de608", "sighting_of_ref": "indicator--3ba22ac3-c732-448d-b216-577edd6d7142", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d051e3-2976-4b72-b754-e04a9c40bf7d", "sighting_of_ref": "indicator--3ba22ac3-c732-448d-b216-577edd6d7142", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d5efae-7952-487e-8f41-e4d12226af3f", "sighting_of_ref": "indicator--f18ea134-c9cc-4e3f-84fb-86a3a4553714", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e7e870-d3e5-42ea-8941-bc94afd56e24", "sighting_of_ref": "indicator--f18ea134-c9cc-4e3f-84fb-86a3a4553714", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42d16b6-1b59-4ef5-ad76-ea9176eac590", "sighting_of_ref": "indicator--3c1747a7-c108-4942-bab5-634de10605ad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048ba24a-356c-476f-96f7-17e63b8acf4b", "sighting_of_ref": "indicator--3c1747a7-c108-4942-bab5-634de10605ad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3662a0b6-6d3a-42c5-8d73-2a35dc15d149", "sighting_of_ref": "indicator--3c1747a7-c108-4942-bab5-634de10605ad", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca75fa9-da8d-40a4-b94a-fd6e083be11f", "sighting_of_ref": "indicator--61a3a0aa-9db3-4967-8625-a86af682bc84", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba580ce-afd8-4085-b328-643bd625aa52", "sighting_of_ref": "indicator--61a3a0aa-9db3-4967-8625-a86af682bc84", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b38993-49f3-443d-98f7-2884bab0f885", "sighting_of_ref": "indicator--3af143d9-f656-47df-b2e3-126cec17f1b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf9cac4-68b9-4e11-8e1f-96108cd662de", "sighting_of_ref": "indicator--84363fc8-cbe9-4b7c-a821-402fc7de49b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f38e46-3e5f-4c86-97ed-547798cbb0a7", "sighting_of_ref": "indicator--941b3a40-c32b-4b52-8cdb-c45b1f457566", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e72e32e-30d8-4b3f-97b2-670ad8e84144", "sighting_of_ref": "indicator--bc7d76ec-6aff-4c9c-a4b7-b7b64eb435a7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cf3bb3-da20-48ca-b6ef-c64381850dfe", "sighting_of_ref": "indicator--73daa501-8bdc-4f0e-952c-5907680b4578", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63db459-ae82-408b-a428-09321b874a7e", "sighting_of_ref": "indicator--73daa501-8bdc-4f0e-952c-5907680b4578", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bd4e41-ebf6-4af6-9910-9a988e10fac6", "sighting_of_ref": "indicator--73daa501-8bdc-4f0e-952c-5907680b4578", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf2ad77-424e-4def-8d69-81143d48e1ad", "sighting_of_ref": "indicator--29f09787-3782-4e00-8a31-e6efbaee0064", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d12411-79c7-4496-81ee-cda0777168a1", "sighting_of_ref": "indicator--9329bc4e-8330-4fc5-852c-59d8e6ceccc1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c76156-b1d1-4f6f-ab92-56117e4fe457", "sighting_of_ref": "indicator--9329bc4e-8330-4fc5-852c-59d8e6ceccc1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ad9b39-118f-45a3-bfe8-e85f3c842655", "sighting_of_ref": "indicator--9329bc4e-8330-4fc5-852c-59d8e6ceccc1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d180d52d-02b5-42eb-a877-d2db1e2008ff", "sighting_of_ref": "indicator--1db22765-55df-453e-ac28-c56ca5c43b5f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdb9fd3-fbad-4e11-9c41-5cbe82e99e0c", "sighting_of_ref": "indicator--dcde7f99-d77f-41cf-a1d9-72664474d059", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2001bf23-f9d5-40fa-a410-576cdd726904", "sighting_of_ref": "indicator--dcde7f99-d77f-41cf-a1d9-72664474d059", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779c1d82-4c24-4257-8565-421ea3ef9aa1", "sighting_of_ref": "indicator--dcde7f99-d77f-41cf-a1d9-72664474d059", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981f67be-325d-4996-8f4a-1b22219a1a65", "sighting_of_ref": "indicator--6e584a29-439d-4cbe-80cc-1cbe6cdc6c5e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e85a957-f5b4-4d9f-a1f0-aaa71d0b2146", "sighting_of_ref": "indicator--6e584a29-439d-4cbe-80cc-1cbe6cdc6c5e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1154f59e-a0ba-4e9b-8c6e-2ad8e8d18f35", "sighting_of_ref": "indicator--6e584a29-439d-4cbe-80cc-1cbe6cdc6c5e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a101185-1f6e-4d5d-81ca-d30b6b3dd95a", "sighting_of_ref": "indicator--245f7565-a957-4361-92a8-90aff6ef29fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9934ce-b23c-463d-bae6-2d0d5f83d2c7", "sighting_of_ref": "indicator--245f7565-a957-4361-92a8-90aff6ef29fe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2784c0-b137-43b8-9e37-a9278425f734", "sighting_of_ref": "indicator--245f7565-a957-4361-92a8-90aff6ef29fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16c6c70-c8df-4ffa-a18f-9dd4bb4fce28", "sighting_of_ref": "indicator--d43c2eca-2d8f-4977-a21b-4a13d65faf9c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6269855f-8076-42d1-95a0-a76c89ee68b1", "sighting_of_ref": "indicator--40318002-630f-4258-a1df-3387663f2328", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5308ab8c-255b-4430-b65b-647930bd0f2f", "sighting_of_ref": "indicator--40318002-630f-4258-a1df-3387663f2328", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f7dabb-0130-4a8b-879a-15898d084927", "sighting_of_ref": "indicator--40318002-630f-4258-a1df-3387663f2328", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64735833-2dae-47af-a845-ff9092a9f907", "sighting_of_ref": "indicator--1d71ce4b-965f-44e4-8982-b81b0203b523", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5786be46-0100-48c2-a71b-c222bc717591", "sighting_of_ref": "indicator--1d71ce4b-965f-44e4-8982-b81b0203b523", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb174aca-c53e-47ce-9766-99b3fbc66db3", "sighting_of_ref": "indicator--1d71ce4b-965f-44e4-8982-b81b0203b523", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab094bbf-08d6-4cf3-bfa8-73629117c889", "sighting_of_ref": "indicator--9f880f31-0f73-421b-be8d-2220a517f684", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b44e4d-9c74-49eb-8545-b7624c317e92", "sighting_of_ref": "indicator--9f880f31-0f73-421b-be8d-2220a517f684", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028e8039-9a2c-428d-aa96-71262948639b", "sighting_of_ref": "indicator--9f880f31-0f73-421b-be8d-2220a517f684", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641ccc41-dda3-4dd0-abca-c4d6fc890a1b", "sighting_of_ref": "indicator--d2803e09-8e1c-4e3f-9588-44275df14e61", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a20189-7dc3-4947-aacf-c72ff8452d7d", "sighting_of_ref": "indicator--04db9670-fe50-4f31-96d1-09cf0ff12bc1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c346525-6bc0-4adc-8ef5-5f058e54ddcd", "sighting_of_ref": "indicator--04db9670-fe50-4f31-96d1-09cf0ff12bc1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f280727e-66bf-4e0d-8cd0-e7e0cccaaadf", "sighting_of_ref": "indicator--04db9670-fe50-4f31-96d1-09cf0ff12bc1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b6c4fc-154f-4ece-87ef-b5e3781100e3", "sighting_of_ref": "indicator--357d2455-3c19-4347-a398-c5d69db72b7e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423e8947-818e-4376-b525-d5a09478b214", "sighting_of_ref": "indicator--357d2455-3c19-4347-a398-c5d69db72b7e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f533e08-77d0-485e-9beb-6e0c197ca1f3", "sighting_of_ref": "indicator--357d2455-3c19-4347-a398-c5d69db72b7e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defd5ab0-259f-4468-a8d9-c17d17d9c5d6", "sighting_of_ref": "indicator--e9b27552-522b-4ae2-8138-d4c747e86b56", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e651864-adc0-4d1b-954c-51876643e5f1", "sighting_of_ref": "indicator--e9b27552-522b-4ae2-8138-d4c747e86b56", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bac6ac9-8c56-4708-99d7-7877717cd1bb", "sighting_of_ref": "indicator--e9b27552-522b-4ae2-8138-d4c747e86b56", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea936a0-932a-40b8-a1f8-123d2fa30b02", "sighting_of_ref": "indicator--9777acb0-71ce-470e-a664-27df04b0c0a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b02adb-cede-40ed-93bc-2279d51f964b", "sighting_of_ref": "indicator--55e408a3-064f-4fc5-89ae-e3f5759b1046", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e68f8ba-9f54-454d-9723-9594679ec429", "sighting_of_ref": "indicator--2f0b1874-e67e-47f1-b7e0-96619a9bd80d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120cfa18-5825-4dc5-b75e-fc0cc4450b93", "sighting_of_ref": "indicator--d66dc4e0-794c-4e0f-86b0-cc494bf4b92c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9277f7-3447-49b8-a9e5-a16a4555a17a", "sighting_of_ref": "indicator--7567a4e3-2a8b-44d6-8509-df4a73410b68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b530abf-40c1-4dec-b8e6-776977a14b22", "sighting_of_ref": "indicator--1ee77d90-ad2a-410f-a732-8f8b09692720", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f88d42d-771c-4c3c-94a9-4d8fd7cb2fda", "sighting_of_ref": "indicator--299b4822-3470-4f15-9d1c-cf6e468defa4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf9f367-a385-4710-ae37-8e573fa95efd", "sighting_of_ref": "indicator--299b4822-3470-4f15-9d1c-cf6e468defa4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91ac4d2-d990-4a28-977f-1ceb7b6ea376", "sighting_of_ref": "indicator--299b4822-3470-4f15-9d1c-cf6e468defa4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a2619d-85d0-4a8f-a7fd-045906a8dabc", "sighting_of_ref": "indicator--299b4822-3470-4f15-9d1c-cf6e468defa4", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f405234b-d4df-4e9b-b50c-8fbd4f77e1f9", "sighting_of_ref": "indicator--2b92c448-7d23-41dc-af65-7d0448598d7b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b318e0e-4055-4565-8dfe-14dd2a6ca0ae", "sighting_of_ref": "indicator--2b92c448-7d23-41dc-af65-7d0448598d7b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0edd3b-2d4d-42ac-8f7c-9e3ae938f055", "sighting_of_ref": "indicator--2b92c448-7d23-41dc-af65-7d0448598d7b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db3b6f3-ed42-4bbe-9cab-654b0e75b5b6", "sighting_of_ref": "indicator--2b92c448-7d23-41dc-af65-7d0448598d7b", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a73745-e7b1-4966-88ae-5b260256ecb2", "sighting_of_ref": "indicator--813729bc-a00a-45b3-a1c6-0179f6142cbc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a375c6f-8aa1-4e38-9583-4d87b5493bc9", "sighting_of_ref": "indicator--813729bc-a00a-45b3-a1c6-0179f6142cbc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a127caa2-a872-4ee4-b108-63f6fcce6449", "sighting_of_ref": "indicator--813729bc-a00a-45b3-a1c6-0179f6142cbc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f2381f-ca93-4777-a46a-7f57625b5820", "sighting_of_ref": "indicator--813729bc-a00a-45b3-a1c6-0179f6142cbc", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab2fb64-721c-4962-9cf4-d77b2112397a", "sighting_of_ref": "indicator--bd380f43-325c-44b7-be12-ae88e8d08e42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d540f3fd-9e18-4048-bc2c-eeec91678fb9", "sighting_of_ref": "indicator--fada1b57-be07-47da-b82f-3f41abf839ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a900902e-d571-4003-8a30-c16329c81c5a", "sighting_of_ref": "indicator--fada1b57-be07-47da-b82f-3f41abf839ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfc9819-3587-4434-8034-c9a673524ad3", "sighting_of_ref": "indicator--fada1b57-be07-47da-b82f-3f41abf839ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f8e3f8-2498-434a-89c5-4ec0bd2d03a9", "sighting_of_ref": "indicator--fada1b57-be07-47da-b82f-3f41abf839ee", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169de63f-9664-40da-8d32-c388dc4f6273", "sighting_of_ref": "indicator--e38c20cd-3887-4943-9d85-b4f85314c222", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81345011-74db-498d-a97e-bf520f2a1fd7", "sighting_of_ref": "indicator--e38c20cd-3887-4943-9d85-b4f85314c222", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5648e3-812d-4169-9387-d37ae07e8434", "sighting_of_ref": "indicator--e38c20cd-3887-4943-9d85-b4f85314c222", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4d8456-3617-4a52-be99-efda2f4315e3", "sighting_of_ref": "indicator--e38c20cd-3887-4943-9d85-b4f85314c222", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5d839e-fb14-4c5c-9a2e-41c8615d7a6b", "sighting_of_ref": "indicator--e937ee69-2885-41ed-a9d0-6c7ee04e73e1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125c7bc1-bc7f-4244-bce0-ed722e9c23ad", "sighting_of_ref": "indicator--e937ee69-2885-41ed-a9d0-6c7ee04e73e1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cf39dc-d528-4f1e-b000-ed0fc6683810", "sighting_of_ref": "indicator--e937ee69-2885-41ed-a9d0-6c7ee04e73e1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7251f6-31ce-43b2-8799-a35937c9e6e8", "sighting_of_ref": "indicator--e937ee69-2885-41ed-a9d0-6c7ee04e73e1", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c65dd11-63d7-42ce-8960-5cb9d67baae2", "sighting_of_ref": "indicator--19d2fa8f-2bc0-44ad-b5cb-81816e861cb8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e051c3e5-c1a2-4df9-9da1-0ffb92ff94a9", "sighting_of_ref": "indicator--0966d5c6-58f1-45a2-8ed8-ebdd47a7505a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884544eb-1b10-479a-9a8e-2957903a71e1", "sighting_of_ref": "indicator--ccaa62c9-72c7-4004-8472-a6dedfb68fd3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0873323-97a5-4a66-86b8-5d2d433b6b93", "sighting_of_ref": "indicator--df467f84-50a6-493c-b466-8150dfd9778e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc62169-a51a-437b-90a7-66a9c88f13a8", "sighting_of_ref": "indicator--df467f84-50a6-493c-b466-8150dfd9778e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50057099-3c86-48b4-8d73-5376661205dd", "sighting_of_ref": "indicator--df467f84-50a6-493c-b466-8150dfd9778e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3beddf-9cb8-48c8-8501-44114d9d1615", "sighting_of_ref": "indicator--b262b266-c030-460b-bb0d-a1acb06810d1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357a7eba-7f24-4384-9f78-d2054cb810c4", "sighting_of_ref": "indicator--b262b266-c030-460b-bb0d-a1acb06810d1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd736d7-b0ef-47e2-8972-1cd20299f19a", "sighting_of_ref": "indicator--b262b266-c030-460b-bb0d-a1acb06810d1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2e801d-0986-4697-9ef6-aa1323a32785", "sighting_of_ref": "indicator--75dd6e52-38c9-474b-bd26-715f973aa902", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed4981d-4a2b-4665-a4bd-8f69124c998c", "sighting_of_ref": "indicator--50b8ad44-4115-4f95-a656-f8603d4f2dae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e919f3e-cc04-4b97-a9b3-321e82081091", "sighting_of_ref": "indicator--50b8ad44-4115-4f95-a656-f8603d4f2dae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b513f1e-14ab-4bf0-aa6e-e4a637595e71", "sighting_of_ref": "indicator--50b8ad44-4115-4f95-a656-f8603d4f2dae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a35bf1a-9a8b-454f-b650-46e8547845fb", "sighting_of_ref": "indicator--c9d1d2a2-5ec3-41c7-9caf-8f441828e7c8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd45be6-522a-46f9-af81-a011c6556302", "sighting_of_ref": "indicator--c9d1d2a2-5ec3-41c7-9caf-8f441828e7c8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c40a4c-f49f-456e-a899-64a5252b4920", "sighting_of_ref": "indicator--81e4f317-c5d9-42d8-a98a-d0740960476e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b30744a-1542-4f3c-8b1a-0bd35eba9c3b", "sighting_of_ref": "indicator--87042da8-afe1-4b33-99a2-7ae111a9d86c", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61718f07-ec47-4691-b5d9-f7d427d6565e", "sighting_of_ref": "indicator--74c7349a-1332-4cc4-a4fa-bf11d688919f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb20dd3-594a-4855-9969-11743524c3d5", "sighting_of_ref": "indicator--8e74ee26-d319-435c-9b30-25bf3af59378", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f296e770-25aa-4e6f-a24b-889caec6e15e", "sighting_of_ref": "indicator--8e74ee26-d319-435c-9b30-25bf3af59378", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2074906e-9ff3-4355-8a68-31d0af2a2cdc", "sighting_of_ref": "indicator--8b760dfc-4c92-4e5e-a31b-14bad13ad8d3", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397d7837-65aa-4140-a15a-26628e84deee", "sighting_of_ref": "indicator--17f5252e-23c0-4613-8cdd-ca10db4bd4ab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c13e27-3585-476f-9b0b-1ec59e26d909", "sighting_of_ref": "indicator--17f5252e-23c0-4613-8cdd-ca10db4bd4ab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a05409-bd9c-4dfa-b246-31ce1ca0a752", "sighting_of_ref": "indicator--17f5252e-23c0-4613-8cdd-ca10db4bd4ab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec0555e-605c-4f27-8db9-9a0fdef0562e", "sighting_of_ref": "indicator--d4383462-f803-44aa-98b6-2cec84ae62fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6b58b6-59a1-45fe-a204-fa5212566a3c", "sighting_of_ref": "indicator--d3e5faaf-d079-4147-bb2f-318aec19a283", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5caddb0-79f3-4882-9714-0ba1559eaee7", "sighting_of_ref": "indicator--32aacaeb-9ba1-4f40-b181-c3b6203dc544", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e65db43-8723-4916-b695-8ca848cb8899", "sighting_of_ref": "indicator--5f6a29d8-a71e-4f67-a37a-5c82cfd5da31", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e57bc9-c150-40c9-be8d-0143c73276cc", "sighting_of_ref": "indicator--65281fc1-8957-4f84-8f3f-c955fe98de86", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c5d37b-9ea2-41ae-967a-59a3e15b33d3", "sighting_of_ref": "indicator--6393e2f4-980e-45f1-b238-74f5f31f8299", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b9b373-d753-4982-91b8-2c1e25314fe3", "sighting_of_ref": "indicator--6393e2f4-980e-45f1-b238-74f5f31f8299", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e82768-ac08-4f8d-83e7-f04671afac63", "sighting_of_ref": "indicator--3945b67a-20af-40da-b7a2-11c337e41c6b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17ee5db-f42c-4b7d-9395-fab204cf6c7a", "sighting_of_ref": "indicator--0b37a2c7-d0cd-45bf-a3cd-eaeb85634aac", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1519b6b3-1f0b-4655-b6ba-f8f0f603a7b3", "sighting_of_ref": "indicator--0b37a2c7-d0cd-45bf-a3cd-eaeb85634aac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da69c604-6706-441f-b8b2-fa280f6335fc", "sighting_of_ref": "indicator--702db246-2fde-4671-a4e2-7f300e9f605e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ced12b-29e8-40f7-b247-b526fd36e6d0", "sighting_of_ref": "indicator--3754e413-dd80-4c5b-9347-e8ee11ca8e33", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eefa78b-9205-47c1-9085-6e24c8b31d26", "sighting_of_ref": "indicator--6f47b29d-e487-480b-8540-d8c3cc459114", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c20248-7a6c-4311-8c8b-76c5e6752a33", "sighting_of_ref": "indicator--a2217993-1dcd-43d3-839f-b46dfa9265d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705b9a73-2ed5-4ad3-8ffd-1456cdb6005f", "sighting_of_ref": "indicator--a2217993-1dcd-43d3-839f-b46dfa9265d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b762d704-8522-4d76-82eb-a76589579e1d", "sighting_of_ref": "indicator--f31da699-0d6e-46a0-980d-6aef7fcad60c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efadfb97-33ff-4097-b016-de3b535dd43e", "sighting_of_ref": "indicator--54ccf55c-8a5c-4163-b29a-421d01762964", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4264c87-91a1-4cf9-bd8c-74a846281067", "sighting_of_ref": "indicator--04812bf9-bb03-4a43-b60c-6bcf1141a355", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c800416-0cc5-40c4-b8a7-98f18e698ea8", "sighting_of_ref": "indicator--04812bf9-bb03-4a43-b60c-6bcf1141a355", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250ec1ca-af5c-4ffd-91bd-6d98111e8f89", "sighting_of_ref": "indicator--04812bf9-bb03-4a43-b60c-6bcf1141a355", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40c85f1-50eb-4330-870e-551fd5a31470", "sighting_of_ref": "indicator--822c8c86-e194-47d6-aed3-701976db4053", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed3c4fe-c174-4acc-b096-5113fde2eb73", "sighting_of_ref": "indicator--822c8c86-e194-47d6-aed3-701976db4053", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0d98ce-8613-473d-9144-52baf79347fe", "sighting_of_ref": "indicator--822c8c86-e194-47d6-aed3-701976db4053", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d85d0ac-0c4b-48b1-9e44-b42786351e4e", "sighting_of_ref": "indicator--da5828fc-08f4-4957-a015-34d9c8a07398", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af1c58d-223d-46d4-8a58-f3e30b261c4c", "sighting_of_ref": "indicator--da5828fc-08f4-4957-a015-34d9c8a07398", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804157bf-f2f4-4af9-8ebf-f85ddb34ddbf", "sighting_of_ref": "indicator--80383755-0981-46f7-a88b-e17083ec2284", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5dd9d56-5963-49ca-9cfd-5bce9bac1d7c", "sighting_of_ref": "indicator--80383755-0981-46f7-a88b-e17083ec2284", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2713da-9e6c-42f9-aa9b-11c642bf39b8", "sighting_of_ref": "indicator--d52e6571-9324-4e86-97fc-d41a214ea3a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f53015-8f17-489f-ba8c-407bd33cf151", "sighting_of_ref": "indicator--b105af1b-0c7b-4b3a-b299-02909e98fd85", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb1fef7-3d37-4af4-96bf-6d1cf483dd3f", "sighting_of_ref": "indicator--d0fee9d3-407a-4584-b72a-4a3de5b07564", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77b5922-1dda-4029-a992-b70db7133080", "sighting_of_ref": "indicator--c13abe30-a5f6-44c1-952f-73e7f34fdd4a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7e589c-c71c-4d4a-9ea2-e98f0ed8dbbf", "sighting_of_ref": "indicator--919dbaca-7733-4625-ad4b-043465b14f54", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435e56ea-caca-4656-a352-d9875f267ba4", "sighting_of_ref": "indicator--644c98bc-afd9-4070-a7e1-d2e78a1670f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7daf44-ac4c-4902-9971-0e194ea3a6c9", "sighting_of_ref": "indicator--644c98bc-afd9-4070-a7e1-d2e78a1670f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c76a503-0ed2-4386-b3a0-75aad8906f11", "sighting_of_ref": "indicator--cccd81fc-15ff-48fd-9ba0-981e7ae36c4b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b881a44-6c84-4816-81d4-16a4ff5961d5", "sighting_of_ref": "indicator--4b66233a-0fba-4699-bd43-190f496bd64d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8909ff2-f9c9-43d1-9581-fdd792b7b35c", "sighting_of_ref": "indicator--71404c79-d695-4bbc-bed9-2f330c885fe7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4a7d70-5a1a-4151-a5f3-a6b7b68335e5", "sighting_of_ref": "indicator--c53eed08-5f7c-4a57-a038-3a658b7d84a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb64105-c982-4498-94eb-551780a24c5a", "sighting_of_ref": "indicator--00da8e3c-07e7-4ead-889d-31f792c3f569", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7585c0d0-4f94-4295-83bf-1fd1cd96f165", "sighting_of_ref": "indicator--e7e4b09a-f1a4-48df-bfc9-45a4af579e81", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564b50d2-3f08-45dd-b4b7-e2d442e0f09f", "sighting_of_ref": "indicator--3acaf8a5-e0ac-4c8f-9143-a03fb3d6b0d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb0ef15-e25c-4aa1-9257-ddb6fda683b8", "sighting_of_ref": "indicator--62b4d6d1-576e-4e5a-b86a-d708c5432d47", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a323f8b9-5ae9-487b-a0d8-792ea623b1df", "sighting_of_ref": "indicator--7e66dd43-4aeb-4021-aabb-8783d194a803", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ca2bc8-1f7f-4a27-a90e-d4cb9c45f70a", "sighting_of_ref": "indicator--7e66dd43-4aeb-4021-aabb-8783d194a803", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15168e83-f10e-4cdb-849a-10890ad6b808", "sighting_of_ref": "indicator--04550948-8965-4ed2-b031-8f074b102413", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53ff000-60d1-4ae0-bda2-adff6fc9fdf6", "sighting_of_ref": "indicator--34a375d0-1d8e-4b8b-a851-8d2891b93d1a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae5facf-4571-475c-9464-3b6b804e4426", "sighting_of_ref": "indicator--fa142b40-31f0-4b47-9b81-a36058d4aaa6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea533601-b7e2-4e78-8846-b4860a27bb23", "sighting_of_ref": "indicator--5d303d90-0156-4e65-8d6a-6a1f89e03532", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaecaa7b-4612-4ab3-ae78-a481a29b83c7", "sighting_of_ref": "indicator--dbfb1d77-61b4-4159-8722-f21980013ece", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c919d9-8cd3-49ac-9255-1350aeca87be", "sighting_of_ref": "indicator--585547df-b4a5-4606-8b94-80a0d1ee0e44", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9253fef-c1c3-4262-a9f7-caf82308eb2e", "sighting_of_ref": "indicator--585547df-b4a5-4606-8b94-80a0d1ee0e44", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ba3477-1f8f-4671-93c8-f6ccfd74ee95", "sighting_of_ref": "indicator--62ad4f48-210f-4114-a69c-c81f24882675", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73d8385-d1ff-4767-b9c6-eb0dfdb32e20", "sighting_of_ref": "indicator--9d9a6dab-73b9-409e-bc04-322ecf86ed5f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbb0d64-ecd0-4574-8e4c-37781e954f78", "sighting_of_ref": "indicator--8cac56d3-f573-4b02-a085-03a9ec7f6e7e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feea0820-8482-4071-9e0b-375b3a42f65c", "sighting_of_ref": "indicator--3340760f-e87f-4d52-9541-85d6b16aaa1b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9914c03-8a2d-4d43-b3f6-903fd868cb1f", "sighting_of_ref": "indicator--202b32c0-5bdc-443b-aaf8-b5bb5b61d544", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9954b50-7792-4afd-9eee-6d45dae99a9b", "sighting_of_ref": "indicator--a37adacd-31c9-4036-ad01-35a36f03fca5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e0cd0f-4a6c-47c5-87d7-2c40a69768b2", "sighting_of_ref": "indicator--ad6c856e-7a3b-4cde-a6df-fba622267831", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dcf758-c3b0-4640-96f2-3959d93daffb", "sighting_of_ref": "indicator--0366ca19-0396-46e4-89a8-9dd38a509b48", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6474921-a9c4-4cce-afd7-3cb98c208e3b", "sighting_of_ref": "indicator--494ecaf4-175a-458c-8d94-53517bc86861", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f104f73-b688-478f-897a-7c8239e47fc4", "sighting_of_ref": "indicator--494ecaf4-175a-458c-8d94-53517bc86861", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf53f63-ce27-45c8-9cb0-acfc17634e0f", "sighting_of_ref": "indicator--a6b36981-4f7c-43dc-944f-ac58eec51f89", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4616631-384c-4708-8aba-1abb5c2e9eec", "sighting_of_ref": "indicator--513f30d4-a7d0-4caf-8515-c649d23e7322", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb04b397-2188-4e37-bfdc-d265f63b1cdf", "sighting_of_ref": "indicator--513f30d4-a7d0-4caf-8515-c649d23e7322", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e1d13c-245a-4ab3-8f93-9e4627862575", "sighting_of_ref": "indicator--513f30d4-a7d0-4caf-8515-c649d23e7322", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed942ca2-f186-4579-918a-6c9cb23f243f", "sighting_of_ref": "indicator--14b70830-0687-4a09-a577-55004f380171", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf44023e-e0a0-4ec2-8da5-43d1c4b7c04c", "sighting_of_ref": "indicator--1067cfec-dd11-41a2-bbb9-ebe5b4084ecb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa88874c-36be-4cc6-bba8-835e9a569c10", "sighting_of_ref": "indicator--49d330d8-0669-444c-a117-d29412598bbd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec60de6-78d0-412f-a93e-eeccd297cc73", "sighting_of_ref": "indicator--49d330d8-0669-444c-a117-d29412598bbd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce454ab6-9ded-4ecd-83a6-fdb06b30c094", "sighting_of_ref": "indicator--49d330d8-0669-444c-a117-d29412598bbd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6127e4bc-1802-4d44-a267-4c1d779e14e1", "sighting_of_ref": "indicator--24ecd80f-9c8d-44d1-8fa0-2e37f8110500", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4152365-d00c-40fe-b5ea-a778abc536c6", "sighting_of_ref": "indicator--afbd32a1-ce98-49cd-9655-99f2310a6747", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f68943f-8d40-47d5-aee9-03b7896cf2ed", "sighting_of_ref": "indicator--09e2e097-ed3e-4ba1-b462-a8271b98177b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43594432-1dec-44b2-b707-2f8a973cf826", "sighting_of_ref": "indicator--ef4984f9-001e-432c-9593-a8c9eb261af1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e1a9ae-77f0-4c5c-832a-c6d52d665757", "sighting_of_ref": "indicator--470f014d-e215-4772-a956-8cfcbcd513f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a538add9-2453-42ff-ab1c-35863c83256d", "sighting_of_ref": "indicator--c8281676-4e0d-4da7-8b60-e823a09509a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35b3973-2c59-424b-9c75-23ee42131316", "sighting_of_ref": "indicator--c8281676-4e0d-4da7-8b60-e823a09509a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a4f8b3-152c-4a88-bc38-04050793d3fe", "sighting_of_ref": "indicator--d6f807a0-1e87-428d-9ca0-ede61fee97e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ba5957-f1fd-4201-a1b1-4745195448c0", "sighting_of_ref": "indicator--6fcdc639-14ac-4341-93b9-caba8742eb45", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6facad2a-3c7f-49ee-b0fd-2ef83739b1c2", "sighting_of_ref": "indicator--43d1aa9b-fcb5-4f9e-8153-c9c3bcdb1af8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90fa7a1-23b7-49f9-a383-5fbba42caab0", "sighting_of_ref": "indicator--ca84fccd-f7bf-4c41-bb24-80119d0ef6db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1e3b49-0a8f-4f76-acb1-50f7944e6fb5", "sighting_of_ref": "indicator--4f9deb9a-4ad2-4047-8f9c-2144a9d95da3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4ac05e-ab01-4f50-b43b-a4a6912d371e", "sighting_of_ref": "indicator--2fb63db3-6105-4f94-aca6-f27dbd9a3380", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea820a6-4f3a-4609-a1e7-c0dc00fa6c3e", "sighting_of_ref": "indicator--50914cb3-7faa-4c82-938f-c6e35de11bf1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560d073e-87f8-4ec2-9f6a-09418ee50068", "sighting_of_ref": "indicator--f38f8fa1-30a3-428d-a1e5-739e3af31fbd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fecc091-056f-4843-b368-997bb79c88c5", "sighting_of_ref": "indicator--f38f8fa1-30a3-428d-a1e5-739e3af31fbd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3a88f3-d4be-4282-8a69-263435576396", "sighting_of_ref": "indicator--f38f8fa1-30a3-428d-a1e5-739e3af31fbd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b228f350-13a1-4b76-90d2-4bc5a6681156", "sighting_of_ref": "indicator--f0840a1b-afc4-4c60-b231-bc9c96f863d9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8770236d-9826-4f57-b913-9ce3d3b79e58", "sighting_of_ref": "indicator--f0840a1b-afc4-4c60-b231-bc9c96f863d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86a9050-cb51-4511-89b6-36c0fd48bc47", "sighting_of_ref": "indicator--f0840a1b-afc4-4c60-b231-bc9c96f863d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5634c73-2696-4c23-8a64-4da85eb6b1ee", "sighting_of_ref": "indicator--5413c849-3a9f-48f5-9eac-4bed592e19be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab87a22-9531-42f1-a0ac-b1b2c9134ae9", "sighting_of_ref": "indicator--5413c849-3a9f-48f5-9eac-4bed592e19be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a778c8d8-e29f-47d4-9c02-e61b416d32da", "sighting_of_ref": "indicator--5413c849-3a9f-48f5-9eac-4bed592e19be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28013d36-cf66-497f-922c-b30e7c813ff8", "sighting_of_ref": "indicator--a2ef6ae1-9b49-49bd-b661-80bd648226b6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9861c896-7ebe-4bf8-9a62-99619557b9e9", "sighting_of_ref": "indicator--1d80342e-d823-4c75-9d67-28990fcb3057", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e9229f-0983-4a0a-9de4-86c9c518d7a6", "sighting_of_ref": "indicator--a8ba7a37-23ed-43f3-b9aa-a687d6ff5767", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8266b6-299f-427c-9794-a39ea54c8855", "sighting_of_ref": "indicator--a8ba7a37-23ed-43f3-b9aa-a687d6ff5767", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4b72fc-0537-4597-b774-8d2f5e715d0e", "sighting_of_ref": "indicator--5cda0bba-306a-4b67-80d0-03b09793c4e4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8c5496-0f6e-4447-a45e-068748362d29", "sighting_of_ref": "indicator--5cda0bba-306a-4b67-80d0-03b09793c4e4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c26028-6e90-40d7-8c1e-ef5ac0e0734e", "sighting_of_ref": "indicator--725fd8cd-a2bc-4a4a-8d92-b6a9dcd96509", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16ddbfd-dc84-4ee5-927d-0cd23d8d0eb5", "sighting_of_ref": "indicator--725fd8cd-a2bc-4a4a-8d92-b6a9dcd96509", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a72dc85-1aeb-468f-a6f0-351466bfe636", "sighting_of_ref": "indicator--112b9e04-9f30-441d-8bc1-5c3fae09af19", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febf0c91-30ff-42df-89b1-569e1bef908b", "sighting_of_ref": "indicator--112b9e04-9f30-441d-8bc1-5c3fae09af19", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8622fc3d-287d-44ec-8def-bb7dcf429898", "sighting_of_ref": "indicator--112b9e04-9f30-441d-8bc1-5c3fae09af19", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683283d7-7b00-4a53-9eb3-8643bb40d0c6", "sighting_of_ref": "indicator--6c10f25c-71d5-4392-a05a-13ea4cf61e7f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd964e0-7caf-48ad-92d4-92c39135cd3e", "sighting_of_ref": "indicator--6c10f25c-71d5-4392-a05a-13ea4cf61e7f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de37237-a040-4196-b44c-067bfec52a59", "sighting_of_ref": "indicator--6559f13a-617e-4af2-91f3-42d20f5304d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0763d0-4336-416e-809b-1b2cba42c469", "sighting_of_ref": "indicator--20515c37-bb74-413f-8d3e-08756e3cfe4a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e92e2b-47dd-49be-80d3-f0d1b3c4522e", "sighting_of_ref": "indicator--20515c37-bb74-413f-8d3e-08756e3cfe4a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312fd818-0f22-49fa-850e-97c6954d6710", "sighting_of_ref": "indicator--20515c37-bb74-413f-8d3e-08756e3cfe4a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2b423e-a879-4a0a-8504-e9924d1c518d", "sighting_of_ref": "indicator--5c5b7950-66e2-4246-b0cb-1092c05ed69c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6e4b5f-c28d-466c-a2ad-7fb70e70b1ab", "sighting_of_ref": "indicator--5c5b7950-66e2-4246-b0cb-1092c05ed69c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9286f7-9744-4990-bafb-1baae9f98242", "sighting_of_ref": "indicator--5c5b7950-66e2-4246-b0cb-1092c05ed69c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceebb9b5-e5ff-44f4-8d85-6f2b63dc021b", "sighting_of_ref": "indicator--a001d885-5030-4cf2-b38e-54e619ca7581", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a618e3d-0deb-4ae5-8138-9777264a1aa2", "sighting_of_ref": "indicator--a001d885-5030-4cf2-b38e-54e619ca7581", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6938f970-4d03-4a20-a17c-25c0f259923e", "sighting_of_ref": "indicator--7046a577-f3c5-499d-8d8e-9fb26b2eb38c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b63513e-c063-4bb3-915f-fd356641887a", "sighting_of_ref": "indicator--7046a577-f3c5-499d-8d8e-9fb26b2eb38c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060e9ebe-154e-4c13-9872-9a80bfcf5c0d", "sighting_of_ref": "indicator--7046a577-f3c5-499d-8d8e-9fb26b2eb38c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4e4bd8-e551-460c-82a9-fef2ac017ccb", "sighting_of_ref": "indicator--8e2317b5-f38a-41c9-9396-2922bf3be758", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd089c5-e130-4b8a-95db-3f66a19d25d5", "sighting_of_ref": "indicator--8e2317b5-f38a-41c9-9396-2922bf3be758", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7c0f69-04bb-4634-9d06-9c950a3d3f9e", "sighting_of_ref": "indicator--8e2317b5-f38a-41c9-9396-2922bf3be758", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca17c4b-76e0-495e-92c1-2715aa20728d", "sighting_of_ref": "indicator--26d8fa8f-b79e-4223-8db9-2782e901ccad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72e2361-b258-4c86-a6e3-e7b066fb01f5", "sighting_of_ref": "indicator--26d8fa8f-b79e-4223-8db9-2782e901ccad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef511cf-718c-4849-b0c0-28abb47305ed", "sighting_of_ref": "indicator--26d8fa8f-b79e-4223-8db9-2782e901ccad", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092f9be4-1011-40fd-be5c-ea5491ac878c", "sighting_of_ref": "indicator--4a099263-c330-47d1-bb56-2511bef83ecc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f453e20e-987d-442f-a782-27aa90db122f", "sighting_of_ref": "indicator--4a099263-c330-47d1-bb56-2511bef83ecc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733ec23e-c899-480a-aee3-38b5ed28f8dc", "sighting_of_ref": "indicator--4a099263-c330-47d1-bb56-2511bef83ecc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c70d02a-2410-42e3-bb24-8b757f4b5d23", "sighting_of_ref": "indicator--a73c38e6-6d2b-4986-897e-03011328d717", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c298798-e11e-42f0-b522-d89a390941f6", "sighting_of_ref": "indicator--0e46aaba-05bb-49e3-87b9-7d0bba8c55aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944e6a8f-ef0d-487b-ad11-87468c8a2187", "sighting_of_ref": "indicator--0e46aaba-05bb-49e3-87b9-7d0bba8c55aa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdbe367-c034-43bd-99bf-d0a79d10eb1b", "sighting_of_ref": "indicator--0e46aaba-05bb-49e3-87b9-7d0bba8c55aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17ea376-18ec-4ed7-890a-9a3f92a4047a", "sighting_of_ref": "indicator--2735ac00-944d-40a9-a1fd-264160b2a3a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e741e877-90da-4152-ae7d-b8593f01fa0f", "sighting_of_ref": "indicator--60214860-7691-4e91-b603-47982350064f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cf7dd4-6f7a-4dbc-bedd-0361aba9c93e", "sighting_of_ref": "indicator--bfd7b8f7-47ab-41d5-94ca-44d62dbc4fe2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c4b257-95c1-473d-972c-9192130f4864", "sighting_of_ref": "indicator--08e5f866-9d4a-458f-8b9d-c4da139f489a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c277200d-0775-4183-8ab7-25e38574d270", "sighting_of_ref": "indicator--a16afbd2-9a61-483f-8f94-b1e663a766ab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b9f908-094b-48db-bd35-0c67669bf9de", "sighting_of_ref": "indicator--6361a56c-dd81-45b3-becb-338b7589c71a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9ce2e2-fc67-49d5-bd42-a642b4de4334", "sighting_of_ref": "indicator--20c8dab6-3641-40f2-9366-140a7669f594", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b85f22-5651-41f9-9b49-51cdae577d69", "sighting_of_ref": "indicator--c43d96ec-988a-4434-8a3d-193df1ceef2b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70331055-753f-4d38-9637-a8359e1b6497", "sighting_of_ref": "indicator--a13c65b2-2eb9-4aca-847a-1c66a5b05ef0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fcc7e0-574f-4204-a8bd-d0bec5406f9b", "sighting_of_ref": "indicator--75eee39e-2330-49dc-81ad-de74c229d551", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afcb4af-666e-4fff-9b82-32570aaf3e98", "sighting_of_ref": "indicator--ae02cbbc-de07-43e4-b954-cdc7fa766121", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa6f87e-cfd4-4585-8dd5-344485b41ce1", "sighting_of_ref": "indicator--486f4110-5c2e-4267-aa72-2f60d9098511", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cafd55d-306d-4f79-a949-c39e440f92c7", "sighting_of_ref": "indicator--4301c6e4-b231-448d-8c84-e6530f36784d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145360ed-f7c0-44df-b230-d22cb4d0ff3f", "sighting_of_ref": "indicator--467e5b09-f580-4eb2-9b10-6b98ca391b33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb43dbf-d3ee-45e1-bd34-8fff25f842db", "sighting_of_ref": "indicator--f99b847b-8a38-424c-9979-cb8c23fc9e39", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c487fa-4af3-4586-b1b5-02076ba5e002", "sighting_of_ref": "indicator--03d2eb31-4c78-45bc-87de-615029cfbfe7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2738c4-266c-4af1-843a-9414ae344bce", "sighting_of_ref": "indicator--fdc89fff-eb4c-4822-a2a7-8caea5fd5eba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b36e17d-c739-47fb-97f7-dd73bea9ad67", "sighting_of_ref": "indicator--cd10dd92-f258-4272-92e3-e476cfee2296", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddaf4e2-6202-498a-890f-d74e826a60f0", "sighting_of_ref": "indicator--ec9b97ab-4887-4ecf-909d-a8014ccb82ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953e784f-4e28-4e6a-a679-b5818dee8325", "sighting_of_ref": "indicator--e00b7c55-406a-4b49-985c-b632cc03b91a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e445de-43b6-442f-b3ff-1aac81434eb0", "sighting_of_ref": "indicator--6ff796bb-afc0-4486-9b9d-c8f87d5b5cdb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b89c6e-8dec-4800-b0df-2aa4c3acb2b9", "sighting_of_ref": "indicator--857d5931-59af-4a44-9df4-2c0e7159ec5d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f9f410-7c36-47b6-a890-c36c5ccbf07f", "sighting_of_ref": "indicator--0c288027-5049-4731-a2ee-1d935bb4c812", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dada912-5318-4183-bb01-e223b4b6b44b", "sighting_of_ref": "indicator--19bc857d-4790-4146-adb0-16108e91593e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e867757b-6836-4203-87e1-e13b3535af67", "sighting_of_ref": "indicator--468e77c4-1e33-4b71-95c0-95da0a8c0af3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4251a482-fce2-453c-9083-e8cd82e26546", "sighting_of_ref": "indicator--468e77c4-1e33-4b71-95c0-95da0a8c0af3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0eb077-cccd-42f1-bd42-e557df9a9e7e", "sighting_of_ref": "indicator--1af1238c-3d70-4ade-a894-35c08b576c23", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db367674-193a-4600-ae53-5ed95c655120", "sighting_of_ref": "indicator--1af1238c-3d70-4ade-a894-35c08b576c23", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02ec09e-8a00-426a-ab8f-ab95650f4861", "sighting_of_ref": "indicator--1af1238c-3d70-4ade-a894-35c08b576c23", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055d2299-1ce1-4d72-966f-4afd64740679", "sighting_of_ref": "indicator--7afc76d3-8ea9-429f-b694-a9cb6c3dfe7a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0863aba-2a39-49db-95d3-40d9a4f505f0", "sighting_of_ref": "indicator--146acd15-89aa-45a1-b0c5-f19e73c862fc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d7cc84-6e94-477e-88b4-30aab72dec2f", "sighting_of_ref": "indicator--f48149ae-2de4-4f04-9cf4-50fe0daa7966", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b474b592-ad01-45ff-9cf5-0bce86320ef8", "sighting_of_ref": "indicator--4e41da31-b97b-449d-9d6e-4141437f424c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3983f29a-93ff-4c76-b4d7-c3f2d131f5a5", "sighting_of_ref": "indicator--03a99001-43b3-4fe6-94d8-ee8e5bf10ac7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da904797-97fb-4e03-ad6a-60b8f81052e9", "sighting_of_ref": "indicator--03a99001-43b3-4fe6-94d8-ee8e5bf10ac7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d3050e-0f51-4596-a5a1-100d46551eed", "sighting_of_ref": "indicator--03a99001-43b3-4fe6-94d8-ee8e5bf10ac7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8e7f0d-b4ae-4e66-bd59-8bcb6c77363b", "sighting_of_ref": "indicator--03a99001-43b3-4fe6-94d8-ee8e5bf10ac7", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19991d2-3ee6-4c8e-9c8a-9ee1d102912d", "sighting_of_ref": "indicator--b2c2e742-8340-425c-9a04-69e794936c38", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3527c13f-ea7a-4db7-905b-e2b7a07a5456", "sighting_of_ref": "indicator--257bf0ba-8bd1-4d69-b3ef-fc4217ac7ffc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84157c4e-13fc-4bdd-9a63-428acbd0c310", "sighting_of_ref": "indicator--bd5e6965-2eae-4b16-8864-4852766e7eef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f5c31d-17cd-49a9-827a-c8400449702d", "sighting_of_ref": "indicator--bd5e6965-2eae-4b16-8864-4852766e7eef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22bd7fd-73cd-49f5-b508-c89ef07fb5e9", "sighting_of_ref": "indicator--bd5e6965-2eae-4b16-8864-4852766e7eef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a538c35d-43d0-4498-8658-9e2a3dd8d586", "sighting_of_ref": "indicator--4056dc9f-4e24-4912-986a-26701be52bf1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339b65ed-2a5d-4da7-a5c2-2598980bcd5b", "sighting_of_ref": "indicator--9783c903-36ee-4c44-8ac1-d74f72334501", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586e24c5-4b12-4c42-b93b-baa9b4f32260", "sighting_of_ref": "indicator--9783c903-36ee-4c44-8ac1-d74f72334501", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e01e48-976a-416a-a4b5-a05292beeed5", "sighting_of_ref": "indicator--9783c903-36ee-4c44-8ac1-d74f72334501", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82488eab-7319-4f6d-86e1-cafc264efd62", "sighting_of_ref": "indicator--4424e173-f6fd-49fa-888f-20cb205cd2fb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c23a9a83-3584-4c03-861e-da32601c85b2", "sighting_of_ref": "indicator--02262ece-5d39-472c-b00b-f96b46be1228", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c62d75-13bc-4e14-ad28-6b5ac54f19ac", "sighting_of_ref": "indicator--7d7e236c-4691-427a-b710-b3ea5da5ba82", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b00691b-c249-438f-a2c3-3223d988db0b", "sighting_of_ref": "indicator--8f2f31a8-179f-4678-88bb-f2b7319521fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f41da9-9368-4070-b7d3-ca5341172c98", "sighting_of_ref": "indicator--8f2f31a8-179f-4678-88bb-f2b7319521fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730e9dcf-aaaf-46c7-9f7f-1f3450f8728a", "sighting_of_ref": "indicator--8f2f31a8-179f-4678-88bb-f2b7319521fa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efe2fb8-b659-43ab-bfe2-239ab347d5b0", "sighting_of_ref": "indicator--b04e8fee-8d85-417d-a895-b897b5b1629c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea51bb8-97c8-4087-88ea-9961d67d73e6", "sighting_of_ref": "indicator--b04e8fee-8d85-417d-a895-b897b5b1629c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ff9cc3-1a47-4a9a-a9e7-f86a24897f68", "sighting_of_ref": "indicator--b04e8fee-8d85-417d-a895-b897b5b1629c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad2cb7d-9d16-4a16-84f6-a43f6debb36e", "sighting_of_ref": "indicator--3510cc09-0f80-482f-881f-1bb5f7bc8afb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54457dea-f113-478d-81dd-a1530dcc998e", "sighting_of_ref": "indicator--2b921446-c4fd-4a35-922c-67ccd4cab1c7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3086b00-4308-48fa-a3b9-3ae78ee1f8ad", "sighting_of_ref": "indicator--2b921446-c4fd-4a35-922c-67ccd4cab1c7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464d0bad-65d5-47b8-bf50-7a582c2128b4", "sighting_of_ref": "indicator--76c8b704-7889-4305-bfc5-9b7f285a3c82", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31c35c5-3c35-4e50-95a0-ed4a372ead6f", "sighting_of_ref": "indicator--b35a16c9-0f6f-433c-a468-aa34c1fbdb60", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3651bd5-0ee4-419f-8231-af257ae47c16", "sighting_of_ref": "indicator--b35a16c9-0f6f-433c-a468-aa34c1fbdb60", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0b5c72-bc46-4e57-b374-3ed7dfeeabb7", "sighting_of_ref": "indicator--b35a16c9-0f6f-433c-a468-aa34c1fbdb60", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca786e0-a22e-4b79-84dd-fdc7abfaff74", "sighting_of_ref": "indicator--a2ad04d3-cc3e-46e1-b27d-70ae7de64509", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2a66a9-18b2-4c79-86a0-cb5ec5a3e2de", "sighting_of_ref": "indicator--a2ad04d3-cc3e-46e1-b27d-70ae7de64509", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0397f30-b9e9-4b59-a749-dbf05e5a6488", "sighting_of_ref": "indicator--8294c289-c1d8-49ab-827b-22c570dc1375", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcd0843-1c4c-4d2f-8204-cae9eadee87a", "sighting_of_ref": "indicator--e6b790ab-415d-43ce-933f-764ebff477f5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ccf91e-4de0-4e0c-adb4-0a256509feec", "sighting_of_ref": "indicator--e6b790ab-415d-43ce-933f-764ebff477f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc2d0a6-264f-474f-ac01-5063662f7e7f", "sighting_of_ref": "indicator--e6b790ab-415d-43ce-933f-764ebff477f5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5c834c-8632-497a-8f17-6e3645fe01a1", "sighting_of_ref": "indicator--4d3ee006-35e6-494a-ad81-8bc44c158a61", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0241eaa-a9f2-4ac7-9f89-3d293e9efe79", "sighting_of_ref": "indicator--4d3ee006-35e6-494a-ad81-8bc44c158a61", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c93897-45ea-43c0-93f7-73917e2bf4be", "sighting_of_ref": "indicator--4d3ee006-35e6-494a-ad81-8bc44c158a61", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059cd3b3-0f24-4ac6-a2aa-cff2b3eaace4", "sighting_of_ref": "indicator--609ec9c7-92e8-41c4-83bb-ebb3cd3d2ce1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75093ddd-3b50-422f-bfdd-4b99cb368b6e", "sighting_of_ref": "indicator--609ec9c7-92e8-41c4-83bb-ebb3cd3d2ce1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15da176-9913-41e4-b817-59cc1731d811", "sighting_of_ref": "indicator--609ec9c7-92e8-41c4-83bb-ebb3cd3d2ce1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2a6794-f274-4207-9b0a-840fbc2a9483", "sighting_of_ref": "indicator--fe9d0794-d27a-4779-ac90-eab3e5c52ad9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a3bd3e-6ae7-4c56-b8c8-2e89f04c962b", "sighting_of_ref": "indicator--07364e6d-3cbe-4ea6-af91-6a51accc1d42", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72820dec-4b7f-4989-8b3c-e4f04e30efc8", "sighting_of_ref": "indicator--07364e6d-3cbe-4ea6-af91-6a51accc1d42", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c40bf9-d945-400c-8371-a6f7a4e33d3d", "sighting_of_ref": "indicator--07364e6d-3cbe-4ea6-af91-6a51accc1d42", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a52790-ce41-4a67-8fef-ea0391c0be15", "sighting_of_ref": "indicator--845c4836-4dda-48a8-a36f-21e9ba26ebb6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a936db7-974a-428a-8d25-744452884bd0", "sighting_of_ref": "indicator--b07b92da-372e-43c2-b646-858e78e4cb03", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100d091b-0da1-4e30-9718-f1194d26481b", "sighting_of_ref": "indicator--c17b4536-7a44-4eb3-9e00-4d5614197fdc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbc3cc8-37db-45cf-a546-489ced9972b1", "sighting_of_ref": "indicator--8c95f8e9-b09b-4e6d-83c3-0c28e6be4170", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d95f320-53af-48d8-b945-9b55b70d003e", "sighting_of_ref": "indicator--a3722d0b-0590-4dbc-b8be-9f8143220017", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b12bd2-bf37-4679-b9e8-b57df21c74a1", "sighting_of_ref": "indicator--03c9bb02-8339-4951-bc3d-988833ff0fee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86511c21-31b2-4bfe-bc70-acef4450920e", "sighting_of_ref": "indicator--03c9bb02-8339-4951-bc3d-988833ff0fee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95830147-8e9b-4ca0-8ab0-7f876e27fe3b", "sighting_of_ref": "indicator--28884e16-e097-4b49-9ef9-972295fae1ac", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcfe0be-8c0b-49bf-99a4-2fd9e547afce", "sighting_of_ref": "indicator--28884e16-e097-4b49-9ef9-972295fae1ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b47121-2b62-4669-887b-6f6f5ba7fd57", "sighting_of_ref": "indicator--d7be5ace-704e-4017-bc04-6be3f8f48db9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bb16e3-a75f-4491-8f7d-f3252bbc94d9", "sighting_of_ref": "indicator--8e099dd5-e5dc-43ac-a2af-03bd6c4d9681", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3370f2-2842-4066-b201-31cee1f37013", "sighting_of_ref": "indicator--232d4114-4706-4f5f-9398-ba9e172edb75", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4c2fa9-182a-4b5b-b363-a0b9bd59f00f", "sighting_of_ref": "indicator--232d4114-4706-4f5f-9398-ba9e172edb75", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a99b358-79cc-4914-9b34-4ffa04da42a1", "sighting_of_ref": "indicator--232d4114-4706-4f5f-9398-ba9e172edb75", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f494256a-e838-458d-8b82-0b11864a3476", "sighting_of_ref": "indicator--e288ba6a-e697-4b73-baf8-0cc3beced35e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2de10d6-cbc5-42f2-a7f3-20253c7bb071", "sighting_of_ref": "indicator--c9089103-6ee6-4612-a906-aeb42dd06d04", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577c1869-d1f7-4132-8493-861c8f07f0a5", "sighting_of_ref": "indicator--c9089103-6ee6-4612-a906-aeb42dd06d04", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fadc97-ba22-4d38-a0f7-2ea4f1307f57", "sighting_of_ref": "indicator--0da77186-ea50-44b7-84b7-f1e1b4ff7fd9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9317ff-2c26-4e29-867b-93dbf1651b4f", "sighting_of_ref": "indicator--08f8506e-6226-4302-8989-5b49934a8aa3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda9ed45-135a-44e5-b5c0-e20155aa81dd", "sighting_of_ref": "indicator--b05d7213-63b4-42c4-8d8f-538f6d8e14d6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3dbfa0-92d2-48ed-a52e-52992a441969", "sighting_of_ref": "indicator--be3e5d56-35a5-46d6-83ff-8b11efb3b533", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ced358-6349-43ad-bff0-fdef44cddbfd", "sighting_of_ref": "indicator--be3e5d56-35a5-46d6-83ff-8b11efb3b533", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb237de7-91c3-4ded-9cba-f7014f8bc702", "sighting_of_ref": "indicator--566ecc4b-3dce-4e98-a255-c6abea16ae14", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67e3b38-4f70-4445-8619-0b47613a854e", "sighting_of_ref": "indicator--566ecc4b-3dce-4e98-a255-c6abea16ae14", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de13aee-99bc-4a99-ac31-d5c23be5be3f", "sighting_of_ref": "indicator--566ecc4b-3dce-4e98-a255-c6abea16ae14", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514a8156-2691-4a5b-bd4b-17dc0ba9b6b8", "sighting_of_ref": "indicator--97b3e8fd-e364-4aa2-821f-10ce809a6a47", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcaf61c-fa32-4db9-b2fc-267c6bdab948", "sighting_of_ref": "indicator--97b3e8fd-e364-4aa2-821f-10ce809a6a47", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b9af08-4a3c-4b41-b632-60764cdd18b6", "sighting_of_ref": "indicator--97b3e8fd-e364-4aa2-821f-10ce809a6a47", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3370c717-caeb-43ef-90d5-8d2f832c12dc", "sighting_of_ref": "indicator--3ec24efe-29f2-4f93-9cac-22daa6b27deb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14a035e-e825-40ec-a24d-caf7fcd111f9", "sighting_of_ref": "indicator--3ec24efe-29f2-4f93-9cac-22daa6b27deb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa2ab2e-dd49-4144-bf7c-5b01248be74c", "sighting_of_ref": "indicator--3ec24efe-29f2-4f93-9cac-22daa6b27deb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1731de-dbdc-4dfc-8bb3-9a575820cff9", "sighting_of_ref": "indicator--09606946-4def-4c63-98b5-c065fa80df43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a86850d-d1ad-462f-b199-2f1ddf1e346d", "sighting_of_ref": "indicator--2689a3ef-902e-471c-92bc-b5954887930c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49c49b6-cb45-4105-963c-3d4e66e9fd71", "sighting_of_ref": "indicator--2689a3ef-902e-471c-92bc-b5954887930c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7138d3-415d-4a99-8bb4-59b203522ef9", "sighting_of_ref": "indicator--2689a3ef-902e-471c-92bc-b5954887930c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2269a800-9bae-49d2-a588-f1ade1387308", "sighting_of_ref": "indicator--b79ca117-53b7-42ae-8f9c-41ad0b5034a6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ebe332-729d-4824-8ac7-580a6b69e34e", "sighting_of_ref": "indicator--b79ca117-53b7-42ae-8f9c-41ad0b5034a6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a576310b-1281-48d9-a768-cca8402d5e70", "sighting_of_ref": "indicator--b79ca117-53b7-42ae-8f9c-41ad0b5034a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1566fd-ebf0-4b87-a76e-a922b0362f43", "sighting_of_ref": "indicator--33e8c0a4-2d14-433c-926d-acbfb4749566", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc0a278-e807-4b98-999f-f0d627719006", "sighting_of_ref": "indicator--27e25b76-df3a-4ace-8de3-6b0285b40d62", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9260582-8b1d-4adf-b6b2-fa6619f37844", "sighting_of_ref": "indicator--862a4e68-96e5-474d-9757-2f3754b35d03", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0011ed-ab99-4566-95fa-764e34583ff7", "sighting_of_ref": "indicator--2620b675-75df-4c98-a301-d2666c8a2d31", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8bf6f2-8caa-4fa4-87e5-1875d13a0be9", "sighting_of_ref": "indicator--2620b675-75df-4c98-a301-d2666c8a2d31", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a81ca1-71b4-4f47-b97f-cb5c4bc17a57", "sighting_of_ref": "indicator--2620b675-75df-4c98-a301-d2666c8a2d31", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cf4eb6-33a1-47e6-849a-4c18acb6e2d3", "sighting_of_ref": "indicator--cad146e0-c842-422e-8929-b7d2c125d611", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8c7883-f3c8-45cc-a767-e529f73ea63f", "sighting_of_ref": "indicator--cad146e0-c842-422e-8929-b7d2c125d611", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5a28b6-c709-4e1e-b62e-2380cef4a2d7", "sighting_of_ref": "indicator--cad146e0-c842-422e-8929-b7d2c125d611", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26993c65-b885-4643-aa33-37d73054762c", "sighting_of_ref": "indicator--3285fbb2-3a87-4c93-8670-e2d3bbacc79d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5727652-5663-4042-ad48-2c48aac53020", "sighting_of_ref": "indicator--3285fbb2-3a87-4c93-8670-e2d3bbacc79d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f4fcbff-df5b-494e-a50b-c53abad4fa90", "sighting_of_ref": "indicator--3285fbb2-3a87-4c93-8670-e2d3bbacc79d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9257bcd-ec41-4b77-8682-b68657ebcdf9", "sighting_of_ref": "indicator--4238c410-92b4-4ff0-afb4-7042eb8d239d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a212f855-26bd-42ea-9cd3-ea86703dbd85", "sighting_of_ref": "indicator--cc9dc58b-220d-4bba-84ea-14671594f07a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d913506f-ea17-402c-ba25-4c529166cebe", "sighting_of_ref": "indicator--aee1c29f-89f2-4a2a-852b-c8c2377c3478", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fc77ef-967e-4e52-b783-efa0498e35f2", "sighting_of_ref": "indicator--5ce66e31-94d5-49fe-943c-dcd4d84c8d04", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0ef6d2-9412-446b-819c-27cfef20de01", "sighting_of_ref": "indicator--63f0f5a4-a8ad-448f-8297-42ce0b6ebd7f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30581a1-8ae0-4a27-aa9c-5c027d71b999", "sighting_of_ref": "indicator--8bf5e762-71dd-42e0-9907-740f4aff5979", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78aa6cc2-ec65-473b-93e2-a62a2ae0ed45", "sighting_of_ref": "indicator--8bf5e762-71dd-42e0-9907-740f4aff5979", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4faff00b-737b-404b-8a07-95438ac54305", "sighting_of_ref": "indicator--49765ee6-ec44-4758-9fe4-52244aeb4274", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e761cee7-3e6d-4098-9b39-16f3eea873f5", "sighting_of_ref": "indicator--ae97eeb4-447a-46c4-8cb3-7762b88e83cf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfba281-e9bf-4455-bf52-37099cd95b69", "sighting_of_ref": "indicator--85c8e4dd-8879-4e33-839d-2cc415e14536", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d796175-c613-46aa-8bdb-a49a8e98d072", "sighting_of_ref": "indicator--85c8e4dd-8879-4e33-839d-2cc415e14536", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b46fcb3-8230-44cf-a39b-e19decde4874", "sighting_of_ref": "indicator--8bf63da1-7e47-4f3a-92ee-a6afea97354a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed1f196-71ac-4588-8635-f86bc4275251", "sighting_of_ref": "indicator--c046b759-23ba-446e-8a8e-c89701fd719d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8c5f8c-24fc-4142-810e-77e131967f25", "sighting_of_ref": "indicator--fac541d0-c59d-4b52-8ffc-3243ed84bf3b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c2b71e-cc11-48ca-b376-40a7dd0f9cbb", "sighting_of_ref": "indicator--8db9d700-b1a3-4593-b095-272ba5d6f5e9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f70140b-55bd-488d-8ba4-04bb9bcce7ce", "sighting_of_ref": "indicator--8db9d700-b1a3-4593-b095-272ba5d6f5e9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed9df59-7afb-4f43-8d5c-93debb456dba", "sighting_of_ref": "indicator--8db9d700-b1a3-4593-b095-272ba5d6f5e9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d16796d-e576-4ed3-8905-51686b0c29e3", "sighting_of_ref": "indicator--0fdbcf02-2a56-4063-95ff-4d8cd14ab44c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97841596-4f12-4aae-9623-d2adb3a630b7", "sighting_of_ref": "indicator--77410d55-143f-49c7-b42e-40c843a65bab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a401c209-ec6c-49df-a8c7-535c98d32fb0", "sighting_of_ref": "indicator--77410d55-143f-49c7-b42e-40c843a65bab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4da78cf-343e-457a-a196-5b5505a768c6", "sighting_of_ref": "indicator--77410d55-143f-49c7-b42e-40c843a65bab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e84e719-9fb7-49b5-8507-39c5a72731c9", "sighting_of_ref": "indicator--641923ac-e7ac-4935-8cca-99c5e84325b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70eb2150-498d-479f-9c1d-36b4b4f9c46d", "sighting_of_ref": "indicator--d56d394c-23c6-483d-a423-c4864cdee6bf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7563e4a0-2dfa-42c2-a7d2-75273d77ca8e", "sighting_of_ref": "indicator--d56d394c-23c6-483d-a423-c4864cdee6bf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcef2e7-9fd1-471f-b6fd-a8cdefe6cd21", "sighting_of_ref": "indicator--c5808a34-6310-4346-94d2-33e5a0dca6b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898b546b-e7e9-4d6a-9974-b852421cdaa0", "sighting_of_ref": "indicator--e3600977-52f0-4cba-ad2e-726d084fa452", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61ba98c-da9b-4ad9-8c1d-9bd80f45a6e0", "sighting_of_ref": "indicator--915df3ea-98fb-48c6-a150-a18fced57b4c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba165438-41a1-4902-b3bc-111bf6a5a3c8", "sighting_of_ref": "indicator--257aa6dc-c7d4-4494-8040-35436b0c2a15", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d0333c-d514-4359-b1b9-3f42bf01fe23", "sighting_of_ref": "indicator--257aa6dc-c7d4-4494-8040-35436b0c2a15", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c12bb3-a6b3-4909-bc11-4ffc4e5995a0", "sighting_of_ref": "indicator--257aa6dc-c7d4-4494-8040-35436b0c2a15", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb90901-5dcd-4eb3-83e0-a176517d4454", "sighting_of_ref": "indicator--9e959da8-8946-46eb-be75-5e0119eab6be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180b6181-2280-4d94-ad6f-dda37076a4b4", "sighting_of_ref": "indicator--766cb58f-7d98-4c95-8379-c313ef4337d7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93a19ec-5d60-4c1f-8a70-71283354b732", "sighting_of_ref": "indicator--766cb58f-7d98-4c95-8379-c313ef4337d7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0547124-d902-479e-9477-2b2dede744a5", "sighting_of_ref": "indicator--6d4f2d00-bddf-444e-85cb-2af2a1ece610", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea19606-788b-45d2-8796-cb3c202f0ccf", "sighting_of_ref": "indicator--6d4f2d00-bddf-444e-85cb-2af2a1ece610", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0f04be-b6ac-47de-b4bd-feee67a835ee", "sighting_of_ref": "indicator--6d4f2d00-bddf-444e-85cb-2af2a1ece610", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb076893-8b57-4092-a4f7-831f61647152", "sighting_of_ref": "indicator--b8020ecb-b244-4c93-9318-7c5fc632b387", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cf4b03-8c2d-458b-9ae1-fe52c327f4be", "sighting_of_ref": "indicator--b8020ecb-b244-4c93-9318-7c5fc632b387", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75db940c-9579-49ab-afbc-cd67b1e50401", "sighting_of_ref": "indicator--42b253cc-2823-400b-a6b4-f4f45b39da4c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed29f1a-045b-4ca8-b8b8-933a8059f526", "sighting_of_ref": "indicator--42b253cc-2823-400b-a6b4-f4f45b39da4c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd67727c-1f98-4344-ac41-818d8f9c4f34", "sighting_of_ref": "indicator--42b253cc-2823-400b-a6b4-f4f45b39da4c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8c297b-6563-42c2-83f0-5dc578752e4e", "sighting_of_ref": "indicator--5c38c71f-28f6-4dd3-889c-34ddac38bdb2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9673088-2010-4f1a-ba63-8f9743db1d7e", "sighting_of_ref": "indicator--5c38c71f-28f6-4dd3-889c-34ddac38bdb2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8abc14-7f7d-46fe-ace8-9bbc839a85e4", "sighting_of_ref": "indicator--5c38c71f-28f6-4dd3-889c-34ddac38bdb2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6e4c43-4fa8-440a-9ad4-1e835c9b117d", "sighting_of_ref": "indicator--2df8f54c-341e-44e9-b8cf-1c48f5a6ede7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697740e9-9476-4601-8de6-c4b47e8be371", "sighting_of_ref": "indicator--2df8f54c-341e-44e9-b8cf-1c48f5a6ede7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d918654-30d0-4c65-9715-47d61593d17f", "sighting_of_ref": "indicator--2df8f54c-341e-44e9-b8cf-1c48f5a6ede7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c19329-52eb-4a02-a1b4-ced3043d2db2", "sighting_of_ref": "indicator--e734f3e8-d3cf-43d8-b67e-b183f9e14171", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58b6f58-54bb-48bd-b54d-b6d3dd788dd2", "sighting_of_ref": "indicator--1e4d8dbf-33a2-4a47-a91b-b2291b45bbfd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a2b123-8a95-4a8b-a0dc-d8d4895f1ed6", "sighting_of_ref": "indicator--82beb0eb-6f39-4ad7-98d5-2ed402961721", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f030145-d622-456b-83b4-c3f518ae3616", "sighting_of_ref": "indicator--82beb0eb-6f39-4ad7-98d5-2ed402961721", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0454fc59-fb37-42b4-bfcc-ab08600c13b0", "sighting_of_ref": "indicator--7760bb90-fbbf-4f22-8a8d-52592a8e4617", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e48898-3050-4ad2-a259-4aed78961467", "sighting_of_ref": "indicator--dbd20c55-158a-4eda-a80b-8e54ac5beeb5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd35659-bdfb-4d49-8c34-5812c8caf401", "sighting_of_ref": "indicator--dbd20c55-158a-4eda-a80b-8e54ac5beeb5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be30ed84-3025-42ef-bf27-1b76febc9c31", "sighting_of_ref": "indicator--dbd20c55-158a-4eda-a80b-8e54ac5beeb5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae785a58-eb18-430e-8b58-f2c923cb376f", "sighting_of_ref": "indicator--2ea3a6c9-3ff1-495b-9cde-506f2600c68d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142183d7-38b6-4ffa-b986-652ecf6d9e69", "sighting_of_ref": "indicator--2ea3a6c9-3ff1-495b-9cde-506f2600c68d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6702fdbc-d3cb-4c08-9ad8-05fd85bebdf5", "sighting_of_ref": "indicator--2ea3a6c9-3ff1-495b-9cde-506f2600c68d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a27b26f-8b02-4b9d-9ff1-f75b034d1609", "sighting_of_ref": "indicator--301b5bde-a322-489d-aad1-08595469affd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a6e485-925d-4b93-8c69-daaa5997da8f", "sighting_of_ref": "indicator--301b5bde-a322-489d-aad1-08595469affd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65e159f-a37d-40a6-be3b-61185f7cdc48", "sighting_of_ref": "indicator--301b5bde-a322-489d-aad1-08595469affd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59548f05-c567-42d5-acd1-dd83b3da751f", "sighting_of_ref": "indicator--fa7b59c7-4d1e-406c-98a8-04ef2193e236", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a6e815-4dbf-4c2d-81c4-4ce0a44abf63", "sighting_of_ref": "indicator--1819af10-11bd-4310-8fc6-6867afd8db68", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ee684d-cfd5-42d7-a3c7-a91dfc3a013f", "sighting_of_ref": "indicator--dfbe4f84-cef2-450d-8da1-8a418b73d1f4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa87e018-ccc1-4938-909a-73d8b6f5e4a4", "sighting_of_ref": "indicator--dfbe4f84-cef2-450d-8da1-8a418b73d1f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01eae0fc-58fa-475a-9c70-7362284c458d", "sighting_of_ref": "indicator--dfbe4f84-cef2-450d-8da1-8a418b73d1f4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782777a6-8942-43d9-b261-08e49b16142e", "sighting_of_ref": "indicator--afbbafb4-39d6-461a-a937-d21b973167e1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bbc8f5-19f0-4e9f-955d-6708b415b8df", "sighting_of_ref": "indicator--afbbafb4-39d6-461a-a937-d21b973167e1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7114ae0-595c-48ac-98c4-960bafc68d67", "sighting_of_ref": "indicator--afbbafb4-39d6-461a-a937-d21b973167e1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715dd4e4-2267-4876-9aa8-ec9a9e18a999", "sighting_of_ref": "indicator--e3d7d396-e248-45c6-9db7-0a8b5f5e2b4b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afd2d1c-385e-488b-9df8-e2fb04455132", "sighting_of_ref": "indicator--e3d7d396-e248-45c6-9db7-0a8b5f5e2b4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24f5101-a51a-473f-a7c8-b73c9700c211", "sighting_of_ref": "indicator--e3d7d396-e248-45c6-9db7-0a8b5f5e2b4b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91a71d9-8f4e-459e-bd20-d9b02419c688", "sighting_of_ref": "indicator--5fd26c21-98b4-4f30-9ae3-2bf9790f67b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444f9e2d-46f6-46b0-99b3-faeb27e28043", "sighting_of_ref": "indicator--5fd26c21-98b4-4f30-9ae3-2bf9790f67b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89d51f7-4fc7-43fd-a1d7-cc2eab6d7f13", "sighting_of_ref": "indicator--5fd26c21-98b4-4f30-9ae3-2bf9790f67b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee65025a-7b51-4741-be0b-728d4a21772b", "sighting_of_ref": "indicator--8d2b4b4e-e6c9-4161-a53f-f28b953d851e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3a7ce4-0173-46ce-91e8-c34e8d2cec86", "sighting_of_ref": "indicator--8d2b4b4e-e6c9-4161-a53f-f28b953d851e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a399439-d77b-416e-a1b2-e4feceef39ca", "sighting_of_ref": "indicator--8d2b4b4e-e6c9-4161-a53f-f28b953d851e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e809df-2ffa-4b71-a87f-65b62711906f", "sighting_of_ref": "indicator--2c3ada1e-8130-4fbf-929b-e61a57ba6814", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c092844-c5ea-4323-9c5c-1b00dadc4877", "sighting_of_ref": "indicator--2c3ada1e-8130-4fbf-929b-e61a57ba6814", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0e52de-9c0c-4a7a-93b7-59a56cbef43f", "sighting_of_ref": "indicator--2c3ada1e-8130-4fbf-929b-e61a57ba6814", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02a5e2a-8a8f-4336-84b6-4e50035d8e55", "sighting_of_ref": "indicator--2361ecee-fd0b-48a3-a88d-24ded485d934", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad8f973-597a-4cbf-9f26-659d3cc4c410", "sighting_of_ref": "indicator--2361ecee-fd0b-48a3-a88d-24ded485d934", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df613d8-824e-4559-8d1d-2f058100efc2", "sighting_of_ref": "indicator--2361ecee-fd0b-48a3-a88d-24ded485d934", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e1290d-04a0-46e0-95f0-4feb51abf49d", "sighting_of_ref": "indicator--8ac30786-f716-4654-aac1-293552a8b616", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f0c979-4df4-4dab-ac23-1b5220e51a44", "sighting_of_ref": "indicator--8ac30786-f716-4654-aac1-293552a8b616", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9593e2ce-53e8-40fb-8521-505ea274a6bf", "sighting_of_ref": "indicator--732c88cb-7208-4ef4-a658-056a59ea1790", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5a8e53-89ee-4231-a9bc-0391468df451", "sighting_of_ref": "indicator--732c88cb-7208-4ef4-a658-056a59ea1790", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f03953b-50be-479c-82ad-e3b1098f8c95", "sighting_of_ref": "indicator--732c88cb-7208-4ef4-a658-056a59ea1790", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca5bc47-7f88-4614-93aa-011261a9dd3c", "sighting_of_ref": "indicator--1cf4eefb-ac89-4b85-b8a9-7ab14d48c70f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cf41b5-7aad-4390-bb47-d4714abbee07", "sighting_of_ref": "indicator--7ccd91dc-6c1b-43c0-9a60-4840e3566295", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574f6ee1-409e-46ee-8cd8-07b8c3d44776", "sighting_of_ref": "indicator--7ccd91dc-6c1b-43c0-9a60-4840e3566295", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c6f53d-b3b8-4070-befb-c6cb1b8b911f", "sighting_of_ref": "indicator--7ccd91dc-6c1b-43c0-9a60-4840e3566295", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ccba9a-0a9e-445d-88b4-842f3fef0714", "sighting_of_ref": "indicator--62532721-20b5-4743-a27a-a63d978f79a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30eefde1-00d0-4702-a1be-aa58a5597047", "sighting_of_ref": "indicator--c69950f7-14cc-4ea0-ad90-a482fe843a5f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f9c907-7691-4dbd-bdf6-614309805384", "sighting_of_ref": "indicator--03427839-0349-4e5b-92b8-266c3e7f313f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0979e03f-49dc-45e2-8675-a47a46e412b4", "sighting_of_ref": "indicator--b46afa9c-bde7-4ef7-b769-d14634854b0a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545b070b-336f-44ab-a553-468255200e99", "sighting_of_ref": "indicator--b46afa9c-bde7-4ef7-b769-d14634854b0a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413c3552-4f5f-4453-9c51-61b8f31bd487", "sighting_of_ref": "indicator--5b009d28-0704-444d-b3b0-9174dd028267", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d38dbbb-2a73-4419-b805-b2dccde66a10", "sighting_of_ref": "indicator--be50602b-03df-4803-9e0a-c183d3a8dc23", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6d54b9-e05e-4f76-86d3-1820c00691c4", "sighting_of_ref": "indicator--06a4858f-daa9-4cd0-b104-3154b80633ab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a210fd07-6593-4db9-8885-948ba56faafc", "sighting_of_ref": "indicator--1cd3d597-a7c8-4c2f-929a-633cee1f2e12", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ba78c2-a02d-466d-98b4-3e732e153538", "sighting_of_ref": "indicator--1cd3d597-a7c8-4c2f-929a-633cee1f2e12", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dbf851-e34f-4f76-b44f-47857541c080", "sighting_of_ref": "indicator--0b08c93f-0ac3-40e0-bb5b-3280d51281e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2264762b-098d-42a2-9b81-b9c5268fc7ea", "sighting_of_ref": "indicator--0b08c93f-0ac3-40e0-bb5b-3280d51281e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a97d4ce-d342-40aa-83c5-edf15d5944ec", "sighting_of_ref": "indicator--ec873861-e2d7-407d-abca-966a283761f5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f786da-008d-44af-b227-9dd298990ecb", "sighting_of_ref": "indicator--ec873861-e2d7-407d-abca-966a283761f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fc204b-1b64-4135-84fe-f4fce03d281f", "sighting_of_ref": "indicator--ec873861-e2d7-407d-abca-966a283761f5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948cb2e7-0023-4017-9118-2b3202f09a29", "sighting_of_ref": "indicator--0d490363-f816-4e8f-89f0-2b0f6a6a09fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a69fe92-48a4-4478-a62f-630fc51125b4", "sighting_of_ref": "indicator--0d490363-f816-4e8f-89f0-2b0f6a6a09fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a199eab-6434-4f01-9750-bee7944c15c8", "sighting_of_ref": "indicator--0d490363-f816-4e8f-89f0-2b0f6a6a09fa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee5f160-05fa-428d-95ff-7b93ea96a01f", "sighting_of_ref": "indicator--a76371f8-2e4d-42fb-96d5-e0589431b6d6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd823504-7940-456d-a389-77d867c62298", "sighting_of_ref": "indicator--1c1e379b-be6c-43f1-9d57-a663234c6e82", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ed192d-f045-4dd3-9481-7dc97df364f5", "sighting_of_ref": "indicator--331f3c28-b9af-449b-b18a-1922a3ba54ea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58724d03-b584-45fd-900c-b21fa824a880", "sighting_of_ref": "indicator--331f3c28-b9af-449b-b18a-1922a3ba54ea", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e303c9fa-390a-4c79-89d1-8f86123f30e0", "sighting_of_ref": "indicator--331f3c28-b9af-449b-b18a-1922a3ba54ea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1b5b8f-67de-4073-a461-38882ce497c9", "sighting_of_ref": "indicator--86550229-4258-475c-bf02-9d79cc06f5aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c060cd0-fd0c-4ed7-bc51-f9b0b4968c70", "sighting_of_ref": "indicator--86550229-4258-475c-bf02-9d79cc06f5aa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ad9073-f89c-499e-9d78-30e05d31e0dd", "sighting_of_ref": "indicator--b6eae5f6-1934-47e9-93e7-5eeef7c56d68", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04955911-70f1-42d7-a464-2e83e75a005d", "sighting_of_ref": "indicator--d874eba4-6ee0-478e-9802-659a8cacdc82", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e854ff35-d393-4f99-bb66-1d2ee0aeb228", "sighting_of_ref": "indicator--e4af017e-898e-4cc6-a6fa-c79d20d7773d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262b2539-bbc4-4c19-9e74-7aaa44704466", "sighting_of_ref": "indicator--348a0549-6d29-4e75-b70d-0b6cb8dd90c3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f087e9-12c7-47f6-9ffe-53d8ec21daf0", "sighting_of_ref": "indicator--348a0549-6d29-4e75-b70d-0b6cb8dd90c3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d271ef3d-439e-4842-8145-83c7c9a8d3ca", "sighting_of_ref": "indicator--348a0549-6d29-4e75-b70d-0b6cb8dd90c3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828a18c5-df31-4af0-a90c-b9c8cc7b4d7d", "sighting_of_ref": "indicator--48761b90-3602-441c-b176-12f41c9bbace", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1084cd-29ea-4b6d-811b-1c7cab9f31f6", "sighting_of_ref": "indicator--e4ab8b75-b07f-4761-a685-a3d7357794ed", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e9ba12-50b4-439d-b79f-e1df1bc7568f", "sighting_of_ref": "indicator--e4ab8b75-b07f-4761-a685-a3d7357794ed", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d85e5b6-a346-42cb-a654-9cc1c37e5440", "sighting_of_ref": "indicator--e4ab8b75-b07f-4761-a685-a3d7357794ed", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc13e906-025b-46dc-b956-6eb8f25fbfab", "sighting_of_ref": "indicator--45d7bd2a-d58a-48c7-bd32-3eea5d8ff306", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da506619-35f3-47ab-94a9-019b991b22ba", "sighting_of_ref": "indicator--45d7bd2a-d58a-48c7-bd32-3eea5d8ff306", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7433eb-1bee-486d-9bcd-14342fa36fde", "sighting_of_ref": "indicator--45d7bd2a-d58a-48c7-bd32-3eea5d8ff306", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee25c60-b4bc-41e6-86ab-24e41552a22f", "sighting_of_ref": "indicator--b254d7e2-c46a-4a46-bd46-ee83151b0188", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07fb8ea-1290-41f7-aa2c-bb3c79b4aa2d", "sighting_of_ref": "indicator--2cca90ac-f625-4eab-b8cd-29a128ae5a9b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160c51bd-576e-45e8-8daf-11b8db6536ac", "sighting_of_ref": "indicator--2cca90ac-f625-4eab-b8cd-29a128ae5a9b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef73d72c-cac2-4783-9d0a-fa3ab7fbc0df", "sighting_of_ref": "indicator--5c6eee07-a146-4840-852e-e23620798aec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458fa35d-b8b8-41e8-945f-b5d6ea09a1a8", "sighting_of_ref": "indicator--5c6eee07-a146-4840-852e-e23620798aec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfbe058-1670-438b-89e3-7c9f7d202154", "sighting_of_ref": "indicator--4eaedb35-b348-451e-8239-01cb51762686", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e463d2b-cbe5-4829-81ee-6ce88cb97529", "sighting_of_ref": "indicator--923ce99a-d147-4d3e-b27c-23a50f311545", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6595def5-6713-402e-b9eb-bb9564dabe0b", "sighting_of_ref": "indicator--923ce99a-d147-4d3e-b27c-23a50f311545", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d9afcc-edac-4852-a462-584ddf7d0a2d", "sighting_of_ref": "indicator--96f0f184-04e5-415c-bf75-282f950ab000", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cfc872-39b0-4b3a-935a-d336d9c96b6d", "sighting_of_ref": "indicator--96f0f184-04e5-415c-bf75-282f950ab000", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf68f7a0-4564-4d20-a97b-b42a2ed331c8", "sighting_of_ref": "indicator--96f0f184-04e5-415c-bf75-282f950ab000", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e5ceec-158c-4b1b-94a6-1043b5360ebe", "sighting_of_ref": "indicator--8f009222-f2da-40a0-929e-eaa0b0467447", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38bb5ab-6b59-41a7-9ae9-083d37aab3af", "sighting_of_ref": "indicator--dc377382-231d-4c7d-8a8e-4d07412732c7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd63c28-7705-4d5a-b561-0bb79fc491bc", "sighting_of_ref": "indicator--dc377382-231d-4c7d-8a8e-4d07412732c7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae111a43-abf0-47a9-9529-3c4d7d9cec5d", "sighting_of_ref": "indicator--dc377382-231d-4c7d-8a8e-4d07412732c7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b728fd4-ce15-41b7-b5c8-c4e09512277c", "sighting_of_ref": "indicator--9df4ef31-a9b6-48cd-aab6-6e85b087ea6a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979cb2be-55f2-4aad-b74c-586337b4b356", "sighting_of_ref": "indicator--17cd26cf-a9bd-4c88-99e9-784c37a64d84", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107c05e8-2d1a-4015-9852-b5833bcd1c04", "sighting_of_ref": "indicator--59cafa14-d3cf-4e11-abd9-fa1505c0adf6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1078e215-da86-456c-bbef-94883bd5ff37", "sighting_of_ref": "indicator--59cafa14-d3cf-4e11-abd9-fa1505c0adf6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30993ad0-59a9-4259-a9b3-6f06d8df112d", "sighting_of_ref": "indicator--59cafa14-d3cf-4e11-abd9-fa1505c0adf6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43830cb9-ec41-4fcf-9485-b3e0a766f67e", "sighting_of_ref": "indicator--f4c76f38-a398-437a-9749-32a033ef5f13", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bc5304-688f-4e10-b591-e0ffd7a1a1e5", "sighting_of_ref": "indicator--f4c76f38-a398-437a-9749-32a033ef5f13", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51b44a4-de32-429c-86fa-877fdf564735", "sighting_of_ref": "indicator--f4c76f38-a398-437a-9749-32a033ef5f13", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa0377e-6183-484c-8cfa-ea20c1b4a8ef", "sighting_of_ref": "indicator--a5d0b50d-93e9-433d-a4d2-86adc4cbdc45", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2c806d-b83e-4908-a08b-9e6ee8af4cd0", "sighting_of_ref": "indicator--a5d0b50d-93e9-433d-a4d2-86adc4cbdc45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261dfb51-ac7d-4aae-87e8-96ba61599bda", "sighting_of_ref": "indicator--a5d0b50d-93e9-433d-a4d2-86adc4cbdc45", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1596140a-742e-4cb3-a117-f9e631084b2e", "sighting_of_ref": "indicator--0436ad9a-281f-480a-8d96-37fef2bf1257", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bb5dca-1a99-4014-80d0-ab331d4bbcdf", "sighting_of_ref": "indicator--d44ebf97-7e45-4460-a638-2d9a95d21494", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b994c57-544e-4ee9-9245-5220a047e752", "sighting_of_ref": "indicator--be26f654-3931-40b9-9b53-b71179ec8421", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080f3289-d59f-408e-9c32-5f22e099bb56", "sighting_of_ref": "indicator--5d6df28f-6c7a-4327-8491-87fe1b2a2ca2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662d3442-db65-4071-9dc3-3fc4ea18169f", "sighting_of_ref": "indicator--5d6df28f-6c7a-4327-8491-87fe1b2a2ca2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbba6dd4-ca6c-4b25-92be-cec6a6c1b0da", "sighting_of_ref": "indicator--204faaad-6a51-415b-970f-2ce086ee5b4d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2af849-a52a-4f7d-a3a6-67f2a34ef140", "sighting_of_ref": "indicator--204faaad-6a51-415b-970f-2ce086ee5b4d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51cb862-b334-4b60-b968-fe698da78a85", "sighting_of_ref": "indicator--d65b6d57-0add-4575-b7e2-a070800a3d4e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230f578d-7fdb-42f7-b573-2f98a2fd7b2e", "sighting_of_ref": "indicator--d65b6d57-0add-4575-b7e2-a070800a3d4e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5f7970-4fa2-4c12-b2b5-f7b3e7069ea4", "sighting_of_ref": "indicator--d65b6d57-0add-4575-b7e2-a070800a3d4e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd8d34c-dbf9-44d9-9e28-546b09d9118b", "sighting_of_ref": "indicator--ef1a7637-9655-40e0-a519-24e9d1f8183c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee9cc09-ffb7-4a81-9d00-4065ad4cdb99", "sighting_of_ref": "indicator--1789636b-595f-4923-97f8-cb057ab6bd67", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaba9986-ae37-41e1-939f-e8a89858ae8a", "sighting_of_ref": "indicator--1789636b-595f-4923-97f8-cb057ab6bd67", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b990247-df5a-4105-8296-8bee69f4efa5", "sighting_of_ref": "indicator--ed8c48fe-0b5a-4664-886d-ac3eee5ac622", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c793aa-fbbe-466d-8fb1-370d17da58b1", "sighting_of_ref": "indicator--ed8c48fe-0b5a-4664-886d-ac3eee5ac622", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d473bd8-1248-45a8-a707-edd40f7c6d58", "sighting_of_ref": "indicator--e66d9b7c-1147-4123-acd1-adbafc87faaa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9ba772-f1c7-4b62-854e-15b9bbdb2bab", "sighting_of_ref": "indicator--e66d9b7c-1147-4123-acd1-adbafc87faaa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4b6b2a-5a03-4d55-9b8b-af50fc84f143", "sighting_of_ref": "indicator--01184a4e-b555-4d84-aedd-2dced2e8c7ac", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5610c039-565e-4732-8207-f3eb2ed33e49", "sighting_of_ref": "indicator--01184a4e-b555-4d84-aedd-2dced2e8c7ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c367742-99bc-4808-90eb-2168ba98479d", "sighting_of_ref": "indicator--01184a4e-b555-4d84-aedd-2dced2e8c7ac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7efeecc-ba45-4254-baec-f97072e3b769", "sighting_of_ref": "indicator--d4196839-3321-46fd-8ef3-4a1230666040", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125321aa-9c25-458e-9cd6-72d5cf424d92", "sighting_of_ref": "indicator--d4196839-3321-46fd-8ef3-4a1230666040", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd840397-5700-4f5e-827b-19aa90840853", "sighting_of_ref": "indicator--d4196839-3321-46fd-8ef3-4a1230666040", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ee248a-2cef-4e84-97d9-f654342c9552", "sighting_of_ref": "indicator--4637d7c2-d516-4d75-b094-5ccf5c992ed0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8715b01a-3970-4533-bad5-460ea52e23b8", "sighting_of_ref": "indicator--4637d7c2-d516-4d75-b094-5ccf5c992ed0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a6ccec-f897-43e6-b242-47b3dd24c96a", "sighting_of_ref": "indicator--8171ac4b-1b72-4121-aa04-bd4dae29c39b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075e01da-8265-4d3f-bd99-464090fe5e91", "sighting_of_ref": "indicator--28282223-d5ae-42c4-b2f4-8b063719ed26", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93848cce-8f3f-47ac-ab3a-3fbebcd1b9ac", "sighting_of_ref": "indicator--28282223-d5ae-42c4-b2f4-8b063719ed26", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e45b96d-5776-49a7-8330-81fa9c418665", "sighting_of_ref": "indicator--adaf91e9-6527-47f6-a531-1dda241e84f5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f6fec4-6e42-4220-b432-0ffd09a0a086", "sighting_of_ref": "indicator--adaf91e9-6527-47f6-a531-1dda241e84f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587b8e18-4c6b-45b5-a1ba-9037f6d2f82a", "sighting_of_ref": "indicator--d64b7195-2ea6-43bf-9d15-93adac621273", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac8fc07-eafa-4166-a817-9bcb7ee94884", "sighting_of_ref": "indicator--d64b7195-2ea6-43bf-9d15-93adac621273", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a9c3d4-e20c-444b-8e30-9cd7d2b996c0", "sighting_of_ref": "indicator--d64b7195-2ea6-43bf-9d15-93adac621273", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebed150-8ac3-4ebf-9c0f-749f672655e3", "sighting_of_ref": "indicator--37384d44-5e03-4064-8f0c-6708024cb7b8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59b7de2-d816-4bdf-988e-0760b46f29fd", "sighting_of_ref": "indicator--8fc5abbd-616a-4c98-958f-925a5ea9d87a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e8aaad-74bd-4278-a1e2-f2bc6404566c", "sighting_of_ref": "indicator--6879d332-b890-4847-9f4b-87ad6bdf0ff5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66dc4731-1cf0-4726-b51d-ec0984fd7fc4", "sighting_of_ref": "indicator--7dc780ca-2863-4074-b977-0909f7f386bd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ba7919-625b-4e01-9d80-6f3baa1e6508", "sighting_of_ref": "indicator--7dc780ca-2863-4074-b977-0909f7f386bd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6883de-9fdd-47bb-93f6-050f22a6860d", "sighting_of_ref": "indicator--8a3fd475-dff9-4d91-ac9a-0f42c5579c42", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76eeeea5-5cb6-4ac4-b24d-4ab8eea4c395", "sighting_of_ref": "indicator--8a3fd475-dff9-4d91-ac9a-0f42c5579c42", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd8acfa-2570-4dfc-812c-aad0e72a39d5", "sighting_of_ref": "indicator--118f998a-02da-43ae-92dd-73565f084bfd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9718583a-edaf-4268-9a99-23dcd2277750", "sighting_of_ref": "indicator--118f998a-02da-43ae-92dd-73565f084bfd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaac566f-5543-45b1-80dc-57adf6b618ef", "sighting_of_ref": "indicator--6ae07856-0b84-4ab5-bd63-852a2e44a87f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c854f4-d1e2-4a7c-ac28-179a45e39dbe", "sighting_of_ref": "indicator--967d156a-69ac-43e3-85d5-79d94fb5827c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9015a464-67ec-4e86-a00d-c2c6767fdc87", "sighting_of_ref": "indicator--8519e095-7ef9-44fa-b8ec-899e4f20e8eb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb1a27c-5680-4342-9b5a-c268bc15eeab", "sighting_of_ref": "indicator--8519e095-7ef9-44fa-b8ec-899e4f20e8eb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff22fb81-8115-4883-95cb-7900b412a4a9", "sighting_of_ref": "indicator--b56d4887-27c8-46c2-9e58-fe150ea5ea40", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345f6045-f99a-4336-870b-cb403438c245", "sighting_of_ref": "indicator--ad7713c6-8bc3-4e8a-b6e5-e2d99679f96e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35f8a09-a876-4011-9740-95dd5361f4bd", "sighting_of_ref": "indicator--ad7713c6-8bc3-4e8a-b6e5-e2d99679f96e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f83b556-b3b6-461a-a8fd-bd06b301fe4a", "sighting_of_ref": "indicator--c5502528-d5e5-434e-9b01-ed3e7c01728c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9d47e2-9add-4ec0-9e2e-461dba089291", "sighting_of_ref": "indicator--f2ca5732-37e3-4d97-8d6f-ac9f5e2633de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc2b854-8e86-4a65-ae92-78f37c3f0576", "sighting_of_ref": "indicator--f2ca5732-37e3-4d97-8d6f-ac9f5e2633de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b8b440-24a8-41f5-9368-a09ce8b41a81", "sighting_of_ref": "indicator--6ea9ba2f-24ed-4447-bba0-ce6fe28e702b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1ede4b-5ef4-4a91-a17c-06d2cf3e4595", "sighting_of_ref": "indicator--5c985368-21ab-4f0f-9b56-56a93d12a25e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0092f1-a47e-4ecd-a0a1-d858453e5d39", "sighting_of_ref": "indicator--5c985368-21ab-4f0f-9b56-56a93d12a25e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce30ff2c-552f-4c05-a1cc-6b8f2717d8d4", "sighting_of_ref": "indicator--5c985368-21ab-4f0f-9b56-56a93d12a25e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadfd51e-fe87-426c-8a4c-7bbb35027d84", "sighting_of_ref": "indicator--bb835b61-543f-4b7a-8c0a-ffc943dfb8f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8dbc83-87ef-49e7-8a50-e7d8defcece5", "sighting_of_ref": "indicator--4143b787-d685-472f-a6e5-990b7dfd6c4f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5caacf20-cf4e-4ff1-a11d-ed383bef08ad", "sighting_of_ref": "indicator--4143b787-d685-472f-a6e5-990b7dfd6c4f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8634667-5648-493b-b2bb-fc48caede649", "sighting_of_ref": "indicator--d448bbb5-6aba-44f5-9dbc-24dd8b022410", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ea76b9-f689-4da8-b4d7-2fda2a5bdfa2", "sighting_of_ref": "indicator--d448bbb5-6aba-44f5-9dbc-24dd8b022410", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a4282f-6aaf-4a21-b8aa-e1ff8fb697f8", "sighting_of_ref": "indicator--dde2c164-c2be-41b3-9448-30706af9bbc2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace32dba-598f-4ad5-9337-165f05dfd94b", "sighting_of_ref": "indicator--dde2c164-c2be-41b3-9448-30706af9bbc2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afc47a1-f399-4c22-8fc0-1f3533ceb81a", "sighting_of_ref": "indicator--e730a8c1-9d10-46d7-bb35-d8796030bd0d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c40058-73f4-4478-bfb2-19066467961a", "sighting_of_ref": "indicator--e730a8c1-9d10-46d7-bb35-d8796030bd0d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673fea93-c8b9-4e01-8cb8-3f6165daf970", "sighting_of_ref": "indicator--0f4b0ebd-0b76-4a03-b193-c62c24e2202a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8048498-6eaa-4513-913f-50bbb0fa0e2a", "sighting_of_ref": "indicator--0f4b0ebd-0b76-4a03-b193-c62c24e2202a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb3183c-2c39-4254-a7a3-7c2ee79ac1e8", "sighting_of_ref": "indicator--0f4b0ebd-0b76-4a03-b193-c62c24e2202a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d9644e-c84a-4a4a-95d4-654adfc14a22", "sighting_of_ref": "indicator--92823c84-1a7b-4c13-ae1f-7751e7368453", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d99911f-9d02-4af3-aec4-455a6fc1c08f", "sighting_of_ref": "indicator--a1acb17d-2e15-490d-b26d-c925e9617538", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bc9d05-89f5-4538-ba64-4afe569b4d58", "sighting_of_ref": "indicator--a1acb17d-2e15-490d-b26d-c925e9617538", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bc5da3-40a7-44f7-960f-cae303fa093c", "sighting_of_ref": "indicator--a1acb17d-2e15-490d-b26d-c925e9617538", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30bc8e2-c824-4244-ba7b-cba993290358", "sighting_of_ref": "indicator--9e9644bf-6daf-4be8-819e-422ba46f45d6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfa96b8-c729-4c29-a7b1-055a50913198", "sighting_of_ref": "indicator--7d0dd3f3-8dd4-4dd6-984f-83c286ff2a9c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6834178-1671-4193-aa3f-327f8c3e5ced", "sighting_of_ref": "indicator--7d0dd3f3-8dd4-4dd6-984f-83c286ff2a9c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38738357-4b6b-4bea-925f-d26b685aca79", "sighting_of_ref": "indicator--7d0dd3f3-8dd4-4dd6-984f-83c286ff2a9c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c384a813-dea7-47b7-b152-af294f98e2b0", "sighting_of_ref": "indicator--2c2b2681-8462-48c3-97ed-2bc3f7f276d2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56025461-08c9-4ca7-9aff-a011c846bea5", "sighting_of_ref": "indicator--6abc5a3f-9367-427c-9621-7e0235e25cf8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca115ac5-5352-444b-8d9d-10e6ec89ff52", "sighting_of_ref": "indicator--016c2839-6e71-4cef-9bdb-9d0bdcfffc6b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28a3003-6cdb-42bc-bf89-ed3262697919", "sighting_of_ref": "indicator--3572b860-be37-4ebf-a686-167de2287b81", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f69338-5bcd-489b-8510-e5143e5e0a93", "sighting_of_ref": "indicator--3572b860-be37-4ebf-a686-167de2287b81", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f365d3ff-6c3c-49b2-a213-c9de0067533f", "sighting_of_ref": "indicator--d94b4f45-ab25-435e-a999-c595eb676356", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65496aa-63c6-4c11-be3a-7f3af8c401fa", "sighting_of_ref": "indicator--48f2fa30-80a3-47e1-bb93-4a1f68463d5f", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67040075-4992-4544-8663-936ef684c8d3", "sighting_of_ref": "indicator--dcb688e5-c22f-4dd4-99a4-17f3ac2a414f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9318b853-ccf7-4e97-b613-751e440c8084", "sighting_of_ref": "indicator--602f6491-c757-4766-b104-9c10b84cc6fc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e920ff4d-8e5b-4272-8b5a-3723c5fafb33", "sighting_of_ref": "indicator--8d66a80f-94be-4cfc-88e2-b048ba694a53", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a3d452-8b85-469a-be10-aa8887f54943", "sighting_of_ref": "indicator--349b00d1-81ee-4c60-be34-f6d55ad32de8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930260b8-751b-4a4b-baa8-8c88dac663f7", "sighting_of_ref": "indicator--e7ff8b2e-492f-4e98-8e3d-e144191d8dec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66a9b5a-d93e-4adf-800f-90bdbab21cde", "sighting_of_ref": "indicator--2f6847ea-101d-4ca6-b871-963c4f44f41e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500f7bcb-538e-4522-850c-a02569e8bd03", "sighting_of_ref": "indicator--b0bd31f6-b42a-4d58-9976-67ae90ac4c47", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c6d2d1-978e-4cf2-92cd-a116cf7dbd2b", "sighting_of_ref": "indicator--0f3e2e8c-acc3-4dce-9fe4-05cfae47bdad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d920d3dd-e329-43f1-94db-7746cd1c6113", "sighting_of_ref": "indicator--a91efe8f-e859-4fcd-90cf-f8b74a4d86f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db631268-6b66-4d01-9660-474b2f97dc0d", "sighting_of_ref": "indicator--dae5d481-fbdb-41d4-8294-b13afd3e18ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790869a1-45bd-4631-b44b-597a259edc2d", "sighting_of_ref": "indicator--dae5d481-fbdb-41d4-8294-b13afd3e18ec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a27fac2-947c-42ed-90df-a0c4e846637c", "sighting_of_ref": "indicator--dae5d481-fbdb-41d4-8294-b13afd3e18ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f460bc-06f6-4482-9b9e-5afba4e133f7", "sighting_of_ref": "indicator--db02a0c1-6922-40c1-b6f5-2606745e5f60", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717260f1-c70f-4730-bed2-d6f4ab8606ac", "sighting_of_ref": "indicator--db02a0c1-6922-40c1-b6f5-2606745e5f60", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387d996a-53fc-4e66-ae7b-d7b3d1e927e7", "sighting_of_ref": "indicator--db02a0c1-6922-40c1-b6f5-2606745e5f60", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e97261-cea2-47b8-a9bc-3c156bfb0611", "sighting_of_ref": "indicator--69808de6-8895-4bd3-b8e8-2712968c9b97", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6b583a-e8c2-495e-bf32-4cfd88183e9f", "sighting_of_ref": "indicator--0ef67667-a535-45d7-b306-6d908f6fa1fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2869fedf-d6a9-4f42-9042-b063e5a0bddd", "sighting_of_ref": "indicator--0ef67667-a535-45d7-b306-6d908f6fa1fe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66eccacf-d41e-4088-bd3c-644fd30cadd3", "sighting_of_ref": "indicator--741225b7-e528-4d15-b4c3-5fb352b60dd7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47944db9-0650-450f-8d1f-fa5428aab09a", "sighting_of_ref": "indicator--947783d4-7926-484a-9624-58c5d109dc9e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3f04a5-d968-4fe3-9226-870eea6e37e8", "sighting_of_ref": "indicator--0f5da7a8-06ee-4964-a742-3bcdccccd6c7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfde2b6-b919-4467-a42c-c94a990e6a67", "sighting_of_ref": "indicator--81b3fbec-8552-4f18-82da-400ee44fd15e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ebfed6-bccd-417f-af72-f5c677cf5b82", "sighting_of_ref": "indicator--1f5e761f-f636-477e-b75b-24342c4df6a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fe254c-38ba-4bbd-9eec-a31d08721246", "sighting_of_ref": "indicator--7f901ecc-454c-4869-a20c-7644deab1b23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0776ae82-d736-4d7d-a4c5-70d855c7ce7f", "sighting_of_ref": "indicator--53b32499-6474-418a-ab15-e229c29f60fd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede88519-7c4f-486a-877f-aa3d287daab7", "sighting_of_ref": "indicator--53b32499-6474-418a-ab15-e229c29f60fd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0811564-7ead-4005-9ff8-4d59a29eca00", "sighting_of_ref": "indicator--acfb406c-d832-4dbc-955b-4b9f54c74ef1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbf5c26-1208-4f07-bd97-70ae3c7637c8", "sighting_of_ref": "indicator--ea7c6541-58f2-4816-a415-c8382927ae2a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a50d45-1cf1-4c87-acad-5eb19351103d", "sighting_of_ref": "indicator--1b6d1b93-182d-47be-b278-9181e8a5a418", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3e8702-25d4-4e7a-ad5c-ad471b0faec8", "sighting_of_ref": "indicator--a6ba97ce-0e09-411d-9005-1b4e6e5c6d92", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22edc232-f451-4548-b04b-56bb0e4ab8ed", "sighting_of_ref": "indicator--ed22aa7d-31da-4859-a023-f7fa38346439", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf98052-67fb-4454-88b2-c075cbf86664", "sighting_of_ref": "indicator--4aaed409-4024-4147-a922-427ec3bea8f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b6ce7b-3e91-406f-89de-cb8f9737c925", "sighting_of_ref": "indicator--4aaed409-4024-4147-a922-427ec3bea8f2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe2fedb-6c37-4b62-8d3d-db9a89cce4c9", "sighting_of_ref": "indicator--4aaed409-4024-4147-a922-427ec3bea8f2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d55e79e-c4fa-4ae7-8533-cd6ea569f032", "sighting_of_ref": "indicator--a95579ac-0620-449f-8114-d445f8934584", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24fc822e-2222-44ab-bb3d-3a4088f0e995", "sighting_of_ref": "indicator--7e75bb63-3586-43af-828d-21a0e087b06b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30551ae-97d3-4049-8419-d1d0fea0161b", "sighting_of_ref": "indicator--b3e33681-60b1-4b6e-966f-30900e30981b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1af79a7-a1b3-4c58-9d6f-89b870b98063", "sighting_of_ref": "indicator--35413995-64d4-4b7e-aaa9-69e47c54a7c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793da0c1-9f14-4e19-9f73-3a4c7d8ca5ca", "sighting_of_ref": "indicator--8a625cc2-1d7e-4089-901d-afd0163e9e04", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42b70b7-e11e-4b60-9fa2-760960ee9daa", "sighting_of_ref": "indicator--4637c282-4fab-491d-b95d-6c804c2a2c0d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92b8543-5c42-42bd-b75c-78fc74cdf920", "sighting_of_ref": "indicator--4637c282-4fab-491d-b95d-6c804c2a2c0d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4bf1a6-3104-4edd-971c-3c202af8d0e9", "sighting_of_ref": "indicator--57d997cb-86bd-4b1b-b634-f11d67e0f95f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf11958-6532-4b41-b76e-2442b55465cc", "sighting_of_ref": "indicator--dec3fa88-f103-461a-ad49-f08114002b18", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c30469-83ad-43f1-9bd8-760c4339f0a4", "sighting_of_ref": "indicator--73e1965a-4562-4051-b18e-bdc2623ae7cb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86a5996-2d26-421b-992c-4398e6c2ad62", "sighting_of_ref": "indicator--2d5c0a14-36ae-42c1-9b01-c7ce6cd69be1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0180ffc3-c853-48eb-a0e9-a26aa6c4f0b0", "sighting_of_ref": "indicator--56434590-c3ab-4157-8709-6e2d85da6904", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8633f27-2686-47f1-a401-e90e720fec66", "sighting_of_ref": "indicator--b09ae166-8d43-44ed-875f-535d3309fa8b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d8039f-0c6b-47c5-924a-6f1623f6ef06", "sighting_of_ref": "indicator--bb2390f6-c521-4d74-9ca1-728d71a47de4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033bcee8-bb43-4db8-8a5a-49730b4a7509", "sighting_of_ref": "indicator--3d3312c4-dc6b-4215-a46f-c460cf960199", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cead4b-3150-4d66-8219-707430af030b", "sighting_of_ref": "indicator--922fb066-adf5-4267-8ddd-26507f63ebe9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91667ae-5369-4873-958c-140bd3c8f1d5", "sighting_of_ref": "indicator--c1300649-ca73-4d0f-aa94-e750ce4b5926", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a327e853-2e8b-4ef4-bcaf-caa4bd0246cb", "sighting_of_ref": "indicator--0422bd09-e166-4261-be73-aaa009ba089e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d2ea0c-5fa3-42c6-a0d8-878806d5052c", "sighting_of_ref": "indicator--1da62bbb-0285-4c1b-a3cc-026c575dd0e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545b93c7-6d0a-4e16-a981-0251f2def757", "sighting_of_ref": "indicator--1da62bbb-0285-4c1b-a3cc-026c575dd0e7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd1e140-d5ae-44ed-9a87-4c32a119273f", "sighting_of_ref": "indicator--81800dfc-9eea-422c-b432-8109579a1ea0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b8f941-784a-4f9d-8d83-9cbf1150f004", "sighting_of_ref": "indicator--ee4e9a23-d708-4b19-b454-899832b38b23", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c4bbf4-7e37-4e49-8cb5-2398a143720d", "sighting_of_ref": "indicator--0ecac70a-e105-467c-b758-01c73fb78b10", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b6be63-1993-4f7f-9bf8-534094553c13", "sighting_of_ref": "indicator--be32565c-9de2-4315-a560-9d4fb640cc5a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f06418a-7747-47b9-ab39-528fc5a5f8a7", "sighting_of_ref": "indicator--aeac94d3-ba0f-419a-ac9d-6ebb1a26f56b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ad60e0-56c1-4988-b27d-11b671e49aa8", "sighting_of_ref": "indicator--f79b0f00-23ce-4e68-9aac-a2db5ac5aec0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a624c9-071a-4b5a-b156-2118f1b5e6da", "sighting_of_ref": "indicator--3ad5a0e0-c355-45dc-8858-b00793e79ee5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56311d16-5b43-42ec-927c-fb5a4588353f", "sighting_of_ref": "indicator--cdf2043f-62c2-4f6e-92d8-1aa700e0e6bc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ace22f-a1c7-4457-b6a3-92ab756b6963", "sighting_of_ref": "indicator--3a8b73d6-8035-4143-8e01-d014a6c65697", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17a8790-c128-4fa6-b6f3-79d3a898565b", "sighting_of_ref": "indicator--d1f63527-4753-431d-8b35-5121d4213bc9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44732d9-cf5b-4cbb-8434-53224bb48ca9", "sighting_of_ref": "indicator--75958dc2-5349-42f4-b6ed-e5288839a363", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0df020-000f-49c0-94b3-ff85400d5ff0", "sighting_of_ref": "indicator--24ac7533-2797-42ff-a39a-a3e6fb14d7a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786b1b2a-a00c-4a67-a151-13ebba56565a", "sighting_of_ref": "indicator--f493a1e5-f7ee-4e55-90e1-c333dfbc403c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448acff4-79cf-43ee-b0ec-0e6be61d3689", "sighting_of_ref": "indicator--b3286684-798d-49ab-a04a-d894a67e82ff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11959c4-51e8-4521-a786-3b1ba979eeda", "sighting_of_ref": "indicator--ca7d07ff-af2f-42d6-90db-b91a2416aa39", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027ecce7-57ec-43d3-91f5-72f8b7648d18", "sighting_of_ref": "indicator--580de9ef-a3cf-4456-ad6d-02ccbe07b904", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f7e22d-899f-4ec9-bea0-99fa4ca6e828", "sighting_of_ref": "indicator--ec52bd4d-29e5-4832-ab8e-b8d1970bdde0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa921d9b-ce60-4621-a8c9-f3201f298cf8", "sighting_of_ref": "indicator--0e6c4ec7-2a68-4a5d-983e-b83e33b86681", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e874bd49-7fc7-4563-9bca-78549ddbf687", "sighting_of_ref": "indicator--a3ea312a-f2ba-4f68-8f22-087bf3dd6b34", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650cb1bd-bb41-45cf-aba6-577083e5d29a", "sighting_of_ref": "indicator--cd37e99b-df18-44ba-bb60-049a9a485120", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0209e6b7-7a5a-477b-8c2f-28a0f5990c0e", "sighting_of_ref": "indicator--aa50b5f2-30c0-49ee-a6da-aa3fe203107b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b162e4-a021-4060-9556-6992b31d366c", "sighting_of_ref": "indicator--15c41d71-49df-4d1a-af8f-b861f12b8f9a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12605594-f98f-47d1-8bf1-eaa11a0490ae", "sighting_of_ref": "indicator--55430398-d4bb-491f-88b5-3c63f4fdba26", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b949c7c8-5bfd-4d7c-b924-9f29b81db76b", "sighting_of_ref": "indicator--b9f24f47-5c48-44ca-8ba8-ed938bfdb538", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3447cf4f-1f91-4a18-9cd2-35ae8e20e93f", "sighting_of_ref": "indicator--806c2f8f-afbb-4cba-a48e-8b103a05121f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34080049-d0f9-4c60-a524-775b94ef7062", "sighting_of_ref": "indicator--e13a3049-3b96-462e-8272-2c6a197fed07", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e31793-35db-4ea0-8dc7-7c45670b18e4", "sighting_of_ref": "indicator--9d1fc710-f5eb-45a6-acce-24ec51a5b3ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f162f9f-7bb7-4343-8424-822c2c7a964b", "sighting_of_ref": "indicator--1069a9e1-4c04-456e-b295-d0cf6bdf8892", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff400aa3-de2e-4b3c-b9b6-a74a2b8b258d", "sighting_of_ref": "indicator--9f09872a-a2df-4c92-9cc0-e8389a2af667", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb14bbac-b6c5-4e3f-aaf7-11c73ac1f181", "sighting_of_ref": "indicator--923583e0-8553-4043-86e7-712ec536868b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1a786e-7db0-4a69-985f-290990dde40b", "sighting_of_ref": "indicator--a5ea860a-f00f-47bd-9a46-e689ef52fedf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e03825c-b216-49dc-8407-db2021ab7f39", "sighting_of_ref": "indicator--242ecfed-9249-42a5-8ef1-a901ba9fb808", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd374ab7-addc-45ce-a85e-13a4e5bbe5cc", "sighting_of_ref": "indicator--86620ba8-6f52-4731-aecc-01feb8e007ea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ad8cff-681e-4e1b-9493-f52ff10aad97", "sighting_of_ref": "indicator--81daf84b-eea4-4a71-b325-e263930360b6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d8bba0-3706-456b-b017-0c420907c131", "sighting_of_ref": "indicator--81daf84b-eea4-4a71-b325-e263930360b6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d06fcd6-8080-4292-9a45-ea912a599b24", "sighting_of_ref": "indicator--3d7f0314-f3c8-474f-a92d-2bc8575c5165", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb518505-83b4-4fee-975b-69c4849858bf", "sighting_of_ref": "indicator--0ec022dd-1cf3-43f9-8200-e625e9ec9114", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71226b76-c582-49cb-b2e6-cb18ce11c761", "sighting_of_ref": "indicator--b4c1c3c9-c48d-4030-a0c3-a016d706935e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018cac56-376a-4523-a4fa-0d3b0b0f1d05", "sighting_of_ref": "indicator--7348de80-9026-443f-b7f5-91676c67f53f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e79e4d-84da-416f-b591-52bcda202284", "sighting_of_ref": "indicator--fe1b2f0c-11f5-4580-a69e-345850f9fa22", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa3a0af-e049-4405-af22-634346f895ee", "sighting_of_ref": "indicator--095a5db5-fd0f-4cf2-8940-f270cf25bea7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126500f8-6c18-4b6e-8317-073bae16acd3", "sighting_of_ref": "indicator--bb6a29fd-1646-45a7-973c-ee39c361a397", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917c5c49-878d-48ec-b339-17c99204ceb9", "sighting_of_ref": "indicator--f42b3c48-e427-4cc5-9018-729fa9989ffa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7ef800-52a9-4bc7-8444-4b7f78b83ee0", "sighting_of_ref": "indicator--0604ca1e-6748-4690-9834-40bd818eae80", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7881db0f-8c9d-4052-bacc-b44e0c09a46b", "sighting_of_ref": "indicator--0e182b0a-6b55-4ba4-972b-47d11e359e10", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d844985-bb8b-4bfe-b932-83553a243316", "sighting_of_ref": "indicator--18b26d24-d7c1-4d73-a514-c09a23554519", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412aa426-4c1b-495a-a4a5-53e69abd9d3e", "sighting_of_ref": "indicator--18b26d24-d7c1-4d73-a514-c09a23554519", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43496842-6987-46f9-b45e-37df7b4aeb4f", "sighting_of_ref": "indicator--50cc8364-d9b3-49a9-8974-8ccea612bea3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4ec126-bd69-4c02-a555-22c7cbf934e4", "sighting_of_ref": "indicator--1959fc5c-79e1-475b-988d-471ffbdb485b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5990a73-2e1c-4c16-925c-36e2233b5c16", "sighting_of_ref": "indicator--aaef45f6-5870-4c95-a716-07018c89058b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8decae26-8a74-4862-ab17-98a2fa783fb4", "sighting_of_ref": "indicator--aaef45f6-5870-4c95-a716-07018c89058b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2180a4-5900-468c-92e1-069a8f3d0e45", "sighting_of_ref": "indicator--6b888dda-0065-4000-8dc7-703ddbfda014", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f3d325-2c36-48bb-ba06-56527f226e83", "sighting_of_ref": "indicator--bcbb1971-bfb0-44a3-af4c-16b81443330c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd21de53-3f57-462d-b488-b7b17e0a1573", "sighting_of_ref": "indicator--c6f9673a-70bb-41d2-ba6f-e084a63b4ce7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda140df-6f8f-4e78-aaaf-4f911e63b0e1", "sighting_of_ref": "indicator--548dc879-0c42-4d8c-84b2-c0d8c2e30fa9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca533854-54a3-453d-89a3-df9e16659e64", "sighting_of_ref": "indicator--dadf9f04-1520-4a7d-9a6d-34de05bc681e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ba9e22-98d9-470f-b9d0-82589f1fb35a", "sighting_of_ref": "indicator--04cdbb81-64df-44d8-a9ea-598afa5098ac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74016309-0f42-426d-8e0d-88454d507466", "sighting_of_ref": "indicator--29f8d2ec-50fa-4d2a-8588-44ca1b20cfd7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241faa49-183e-420c-87df-4b82fc4d173a", "sighting_of_ref": "indicator--29f8d2ec-50fa-4d2a-8588-44ca1b20cfd7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e2cbdb-be48-42d9-a1bf-17eeecdae395", "sighting_of_ref": "indicator--230d0959-f445-4501-8795-a6b382c01d72", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734adfe4-eae3-43a9-94a7-ab7d57530b8e", "sighting_of_ref": "indicator--230d0959-f445-4501-8795-a6b382c01d72", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b322d911-d39c-42f7-aa74-993368d7850a", "sighting_of_ref": "indicator--cc66231e-fdb2-477b-9613-bc6e88f5f649", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2f1a56-825a-44a7-99ab-7159c5797e22", "sighting_of_ref": "indicator--a1020421-a158-4ecc-9000-be5da0fce0b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022b4229-3d3d-485a-a813-c09cc1a88130", "sighting_of_ref": "indicator--81b35ed2-4659-4222-a0ef-d52599f3fff2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e97725-dfc0-4ce4-b685-7aa49584da8f", "sighting_of_ref": "indicator--81b35ed2-4659-4222-a0ef-d52599f3fff2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf901eb7-13b8-4878-a6aa-2e9b4874993c", "sighting_of_ref": "indicator--81b35ed2-4659-4222-a0ef-d52599f3fff2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431a5cdb-eb35-4fd3-b767-50179d1d9141", "sighting_of_ref": "indicator--f2e9064e-6bb8-4e7f-b599-73255938fce5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4397668e-4d60-4482-90d6-e6d13a95765c", "sighting_of_ref": "indicator--40bf74d7-8212-4037-9a05-bc429a520056", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a243a6d2-b18e-4c8a-9b4f-dace4a01b4a7", "sighting_of_ref": "indicator--39228704-4f13-4991-822b-3fc3b7616afc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c585c17e-8557-4885-a733-754594eae028", "sighting_of_ref": "indicator--a9e09795-6141-4f33-b091-50228fe70833", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d6d865-2c63-451d-9048-6e4a409fd80f", "sighting_of_ref": "indicator--a9e09795-6141-4f33-b091-50228fe70833", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0389f253-11eb-4c37-9a3a-a497d2cc3b90", "sighting_of_ref": "indicator--5117bd0e-f606-490a-a18c-624f0b0e2c79", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1760d2-049f-46b1-ba3d-867c9b0b79f8", "sighting_of_ref": "indicator--ca786c9a-33d1-41cb-b0cd-ae1db6ead485", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9577d7-ffe8-4dcb-9aa2-5b923bbbebe8", "sighting_of_ref": "indicator--04b70594-c0c0-4ed2-9471-391ba0e649c8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7994841-6cde-4732-a0ef-e0bff205c389", "sighting_of_ref": "indicator--45c03506-cbf4-4c88-ba3c-182a7feb9255", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3b636d-6946-45ad-9680-9bf1cf8810ec", "sighting_of_ref": "indicator--291b2eee-4b8f-4fb8-b819-31a8b1ab6eff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1605744-f777-495c-9701-3c6ab1cbf097", "sighting_of_ref": "indicator--87ede58c-b6a6-4442-bd1d-8b6aa6ee5026", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365fc6bb-c3af-4cd8-88de-1e4ff6d8e9ef", "sighting_of_ref": "indicator--ed938423-4aa7-4bac-880a-362753387878", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e95b22f-3169-4fbf-a22f-e5ad1da1ec62", "sighting_of_ref": "indicator--acec3aa7-79e0-4d07-90cc-a53d93b9830d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92966d0-e03c-4ecc-8bbe-6b1733ed5afd", "sighting_of_ref": "indicator--7a261572-9eaa-4685-8964-f15ac8bd6a56", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101ad075-ff8b-4fef-913c-e44bedc16e3b", "sighting_of_ref": "indicator--fe6132dc-9321-4c94-ac1d-9a1f0192b8a5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d1dc04-8b1e-41bd-8577-8d17a25cb861", "sighting_of_ref": "indicator--82e4bbb5-25e4-4d0a-a290-6166e100d31c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6b9434-f381-4ce1-9201-78863a3daac4", "sighting_of_ref": "indicator--dfd85b6f-e02f-4663-9caa-ade4fe39bb0f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f24f7a-611c-485b-aba4-d9d98d817dc7", "sighting_of_ref": "indicator--b7f08e6d-efc2-4c47-b2fa-d89e467087e6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2c83d3-4242-45af-86af-633f336e67b6", "sighting_of_ref": "indicator--8c737785-ca58-418a-9e0a-35ba266c413b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec51be5b-7b61-4c33-aa5b-8492cb7d20f7", "sighting_of_ref": "indicator--3bf8c05f-8c65-4eeb-b0c9-82f0315fbb6f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a000c5-31f0-44e1-b8d1-a4041cecd077", "sighting_of_ref": "indicator--cfc50c74-7a2e-4529-b8b9-3f03c94d2e33", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b9011c-1206-4adc-a6f9-201c37fc0cf9", "sighting_of_ref": "indicator--f1621a8e-a6fe-42b6-bc1c-c46dcc316527", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aeff677-cd71-4030-bdd7-26c292d5af29", "sighting_of_ref": "indicator--105e838c-5cb2-43d2-8926-b6673f60efd7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a48e7d-4df0-42c2-94db-39803d9a3821", "sighting_of_ref": "indicator--1832813c-6a58-4282-aef0-e9397ffde843", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ffbc31-8b60-4101-8a4c-d82e89610109", "sighting_of_ref": "indicator--cfbca6ea-4141-4b51-9ac8-3816d69bb98d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842a9f67-a8a7-4473-896c-5583aef6308e", "sighting_of_ref": "indicator--f3896851-9351-41dd-bbcf-3ff49430e1c4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd10e064-9384-4227-a4bc-ba8b521fd811", "sighting_of_ref": "indicator--ffd1a8b7-6d85-4440-8ad0-2371f87a6b7c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9045d466-a5a5-4064-92fc-195488838e27", "sighting_of_ref": "indicator--f55ed3d2-e4e0-429d-9188-5b96e91b2c27", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c458bc8c-9ef6-4306-862a-16e8d405ab34", "sighting_of_ref": "indicator--52201ea4-2e12-4630-b39d-a24171c9827c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbc71f1-7f63-4abd-a6c3-11caa6916fdd", "sighting_of_ref": "indicator--6001a58c-6bcc-4e3a-b419-a0fde8043a02", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d153b2-17ff-432b-9dc7-1530c8419aa1", "sighting_of_ref": "indicator--92823463-4972-47a7-930c-80e051cce60e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f5f60d-820e-49a2-b6f2-712d0edfbf4d", "sighting_of_ref": "indicator--4d711969-3aa4-4347-8f96-b3f5fa9fe934", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e55017-e65c-4b72-bafb-0b153ad7a519", "sighting_of_ref": "indicator--1d474c34-ccfd-4540-8054-fe6c9db481da", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabf8ced-0083-425e-8803-0f2ba3754700", "sighting_of_ref": "indicator--1d474c34-ccfd-4540-8054-fe6c9db481da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce3d7ae-b1e5-4fe1-8801-5d3ef514d2dd", "sighting_of_ref": "indicator--bc4d8ba9-9aa5-426e-8f89-3529f47b9f77", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a68565-5e48-468d-9b2d-c9a1050ca9f3", "sighting_of_ref": "indicator--bc4d8ba9-9aa5-426e-8f89-3529f47b9f77", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71263df1-4b7d-4f1e-a88c-1052544f9d36", "sighting_of_ref": "indicator--dfea2438-1743-48a9-b3b6-e3598d7c552f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d94ef4-3369-4db8-bb5b-8525401e48a5", "sighting_of_ref": "indicator--1c4d18c4-b21f-4b27-8126-032cf14a2aed", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0598c1a-66bc-498c-834a-14f46c6cd0a2", "sighting_of_ref": "indicator--a9bd3fb5-a9a3-4633-bae2-f8b2b188541a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce958ba0-9bca-43ba-b782-0990cb675976", "sighting_of_ref": "indicator--3f256c80-11a0-46d1-b4a5-e5d3205f57e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eca5260-8350-4c6b-9f66-ce694de06ac4", "sighting_of_ref": "indicator--0175bcf0-e84e-4451-b3f5-fe2256e1d8fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff756ccf-f3fa-455b-a3cc-a3c64a5ed9ad", "sighting_of_ref": "indicator--35072686-b6b4-47cb-9b7b-f38ae1cb4825", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4904ef5f-a414-476b-acc0-f0da8f0f934c", "sighting_of_ref": "indicator--6b8760b2-83e5-43a8-a4b1-88aba6b826c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05221e9a-7e08-4929-bf98-db0f5fb90a4f", "sighting_of_ref": "indicator--614f5be0-a2be-4526-992c-ae867fda9f07", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd1c593-5fa0-4aa7-80a0-18860861ffee", "sighting_of_ref": "indicator--5a7aa5d0-a9bf-48fd-86f0-c0649aba0123", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5240e53-f0c8-44c7-911b-9226e4ac8ca0", "sighting_of_ref": "indicator--0b646779-f779-4b75-8bc7-17096fc9cdc2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66df53da-57ac-4436-b9b7-61de74f6b87d", "sighting_of_ref": "indicator--0228adce-986b-46fb-a894-40519f6e827e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb0ff35-0609-4104-9e57-0876953d843a", "sighting_of_ref": "indicator--06868e95-378d-4ec0-b546-af945b703191", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e909604e-f905-4807-a953-1f19d8cd7a4f", "sighting_of_ref": "indicator--0d470acc-6e4b-408b-8dfb-bb636d7347fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cff9a5d-dfd5-418f-971c-0586e3362bcb", "sighting_of_ref": "indicator--0a7b13f0-9797-4e82-b09b-d9b58b5cef43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f00912-82f9-4974-adf9-3dd74d2d48ae", "sighting_of_ref": "indicator--1974a9f3-8883-48fb-a198-8b9daf1eb179", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f72bcec-ba7d-40cb-9dce-b4a2eb788c48", "sighting_of_ref": "indicator--a515c68c-f501-4844-9114-2579aec0109d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ccd0f7-f802-4aa2-a6da-858ec1dd6a17", "sighting_of_ref": "indicator--e59004ad-2080-4ad2-9a78-aaadf658dff4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e8a557-aae6-4459-99ce-73d08ea6d26d", "sighting_of_ref": "indicator--c8d8d7a9-2d58-4439-9c03-d4cb9fa6fc90", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbbad7c8-a085-463d-9ed3-14b5d8cf8f53", "sighting_of_ref": "indicator--453d7116-37cb-47e9-ae31-8ff168556c5e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3374fcec-625e-4dea-bcc7-74f7e52c447e", "sighting_of_ref": "indicator--e4bd4dc1-b1b1-4de5-807d-ac598566388f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d7eb22-da2e-4bed-97d8-01bb78332c17", "sighting_of_ref": "indicator--eba4fced-fddb-4505-8627-4e6475af842f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c01b95-b768-479d-a3f1-e55f06c4cc4f", "sighting_of_ref": "indicator--f7d1d961-d256-4a2b-9fc8-5cba0efe165f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a1d9dd-60f0-4d31-9d8b-91156abade3b", "sighting_of_ref": "indicator--9d5544e9-903c-489a-bba1-fde152c1778f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0c1c1f-da12-4642-be06-299934da2302", "sighting_of_ref": "indicator--9d5544e9-903c-489a-bba1-fde152c1778f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193f6c95-be0a-488d-b0a0-0456c8696190", "sighting_of_ref": "indicator--0e255624-e3bd-4e65-ba6d-53dc19469e86", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062354d3-f652-4034-aec2-4460861648ca", "sighting_of_ref": "indicator--79bf1579-1a38-441d-b00c-eeacee739140", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd16da2-fc0e-457d-a583-938899fbe024", "sighting_of_ref": "indicator--b961d25f-0e64-4824-b6e7-bc9eec382a3e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b30eef-408e-44e8-8793-403e670d1721", "sighting_of_ref": "indicator--bda56bed-6515-4227-9ba6-692193215275", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2a63d4-11bb-432c-b0ad-57de2c9c0320", "sighting_of_ref": "indicator--b3e6d724-f03c-48bb-90a9-722e51d338c5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5921d3a0-fa17-451b-b93d-19a2cebb8254", "sighting_of_ref": "indicator--82b0cb70-870e-4588-994f-87008f11305f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46848633-4ced-4792-b061-018d032bfcdc", "sighting_of_ref": "indicator--e280e20b-cd1f-4ba8-9244-79303de60435", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da4d7fa-253f-4970-8731-f4defea46d48", "sighting_of_ref": "indicator--acbabeb9-f347-4951-aafc-3be801bea778", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6e7689-5938-4ff7-b5e4-2c3a83d6eacb", "sighting_of_ref": "indicator--6f847846-34b9-4609-af09-5aaacc61dcf5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb1028c-3f2c-4030-b34f-39897390300b", "sighting_of_ref": "indicator--6dd3da01-71c4-454d-9110-49ebca4649e2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130567cf-daf2-4151-9db0-6d3fbf75630a", "sighting_of_ref": "indicator--07448ab1-ec15-4424-925a-ea916d1eb92e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ffd5ae-0bc5-4f15-b4ba-eb608b3e7e7d", "sighting_of_ref": "indicator--07448ab1-ec15-4424-925a-ea916d1eb92e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df5b273-20dd-46e3-9414-d5aba476229c", "sighting_of_ref": "indicator--8d110d8c-0f7a-4a70-8d78-66f188154b9b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e027b8-1ce2-48ba-912f-229a67ff2fb3", "sighting_of_ref": "indicator--8d110d8c-0f7a-4a70-8d78-66f188154b9b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef8c85e-8849-44b2-a92d-6dc2de142315", "sighting_of_ref": "indicator--aa56c8e8-8169-426a-8aa6-957eecc23411", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2de5b96-72f2-49c0-9e54-4865b3879051", "sighting_of_ref": "indicator--0a13c6ba-e89f-44ce-9020-3438f58a5f08", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fa67b7-f730-4a8f-b41d-f16d079215b7", "sighting_of_ref": "indicator--3c4007b2-2ad5-41bd-a0cd-0ad56fa271f1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c2c724-9cb5-40ad-8de1-580147cedbac", "sighting_of_ref": "indicator--aec99c45-0438-4a06-9e60-f5cdc0caa508", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3c4785-a765-4a74-936f-2c5047a000bf", "sighting_of_ref": "indicator--18ae42cd-a637-48dc-a210-19fa105a52b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6f8b19-a5ba-460a-8617-7aa0c8a5d233", "sighting_of_ref": "indicator--8edcab34-1f05-4113-b162-d4f967ffd220", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cb1a40-a10b-4780-b96a-188d0e5177ca", "sighting_of_ref": "indicator--9387df10-0917-4025-82be-83b1df7f4493", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85caeda4-2b55-405c-8309-5d7143b165ae", "sighting_of_ref": "indicator--9387df10-0917-4025-82be-83b1df7f4493", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91588e3a-42a1-462b-8985-088a73a2e2fd", "sighting_of_ref": "indicator--9387df10-0917-4025-82be-83b1df7f4493", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888c974b-201a-46a9-90cc-7aa1a0506605", "sighting_of_ref": "indicator--30cbffbe-8dd7-42b8-9be5-6cd98ec53853", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee23901-dd37-49e0-9707-53d95a26f11f", "sighting_of_ref": "indicator--7f8058c1-50bc-4d0d-8846-644556947930", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096e521a-8405-4b21-aa8d-39bae820aef3", "sighting_of_ref": "indicator--f120aab6-2923-427e-ad7e-6afb2feda62a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefaf9b1-6716-4b1d-a2ad-67f2c3a9efab", "sighting_of_ref": "indicator--65d0a24e-4a9b-4a38-be47-bb3a2e61bb43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8abae5-67e7-4f38-b504-51cc9582eb96", "sighting_of_ref": "indicator--cd2938e1-1f33-40a4-b612-d7c3b8c4a70a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2aac913-911c-443c-98e3-f2f4065e845b", "sighting_of_ref": "indicator--533b8ec3-dc75-4d69-98a3-46413a0654d7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a10570f-9717-4451-9734-699b9637a532", "sighting_of_ref": "indicator--67a321d2-122d-4b55-956e-e5bd13311a6d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c067a7-741f-4ebd-a4c3-9ad0eb29bfb3", "sighting_of_ref": "indicator--fc1c561b-502a-42d0-9dbf-67028d12ded2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d290f11-da3a-4ce1-8f49-45b9cc8f3b3c", "sighting_of_ref": "indicator--fc1c561b-502a-42d0-9dbf-67028d12ded2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4345147-e84d-480b-8bcb-a8551a2d8486", "sighting_of_ref": "indicator--96247b4c-6b43-4aec-a4c2-349c9a083ae9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5cc5c4-22aa-456a-979f-4563d8e5a0be", "sighting_of_ref": "indicator--ef70ecbb-cc01-4f3c-9b5f-29dffd3eef5b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2234b12-417a-4e75-b4b5-1acdd610cb5f", "sighting_of_ref": "indicator--59238123-a58f-46af-8a5b-ee6c8271c52c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f2b53c-4421-4434-a3b3-b6d6568718b9", "sighting_of_ref": "indicator--d6a8185f-fd5e-4d01-8f4c-a29e2e357b61", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8742d0b-c1f0-46e1-8a73-ecc43c3ff425", "sighting_of_ref": "indicator--ec146c17-28d5-49ab-bd51-237dc4fc372a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a17b60-bb38-446c-985e-918011251ecf", "sighting_of_ref": "indicator--ccbfc80b-0d4c-4247-8206-0e7476ee6b17", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68cf2a8-7080-4766-b589-ca19a0567b46", "sighting_of_ref": "indicator--0a22c2b8-5da6-4c61-bdca-60192206d739", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6977c4c-6d32-4d19-b7c6-585965d73169", "sighting_of_ref": "indicator--4beccb5c-9b71-4a2f-8669-4e569d4343f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca30ad90-6206-4430-9827-72b2ea4257e3", "sighting_of_ref": "indicator--f2d2387e-1d61-4490-92ae-919402a05255", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782c276f-5063-4fc7-af06-58aae13352e7", "sighting_of_ref": "indicator--0efde455-a611-410d-9484-56f3ddfabad8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e5f0dd-6fd6-422d-8bf2-ddee1c448d86", "sighting_of_ref": "indicator--639be143-5d6c-4f46-8a92-f0b2e2adb2c3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c6b77b-ec37-46ba-b952-a4452445166b", "sighting_of_ref": "indicator--54ef9eb7-9523-4c53-8ca9-c490c29df3dd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270ea1c8-e7f1-41d7-aad6-7d9fa9439183", "sighting_of_ref": "indicator--24f02362-9c54-47c4-b509-939cf0fabeca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee346a3-15c0-49c7-a799-1b8b9bdd7255", "sighting_of_ref": "indicator--58ebe476-a41a-449c-9025-b537758613ff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0a019a-f4d1-475c-a681-7281efd596de", "sighting_of_ref": "indicator--2acdc84c-9793-4fc5-a811-62bb5a611af7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1fae23-2a5e-453e-ac7d-36d0f628d866", "sighting_of_ref": "indicator--2acdc84c-9793-4fc5-a811-62bb5a611af7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d10254-13be-4bc7-b766-f572f38bb0f3", "sighting_of_ref": "indicator--7d6c3129-d560-41b3-a24a-0a67688592f7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4847dad-c007-4519-a44f-a8b9f36010aa", "sighting_of_ref": "indicator--f995f219-e58a-43e2-bff1-9c17ee23b224", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffaaf28-b21e-4269-930f-fa669b1b773e", "sighting_of_ref": "indicator--8ac4e5ca-f46e-47da-9ee6-65ac90049809", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041c47e9-fdb2-48e9-94ad-f7e8685ab2af", "sighting_of_ref": "indicator--6c62fd13-b847-43ef-b3d3-79faccce7cc6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41ac7e9-5121-4523-84cc-312fe6689eb6", "sighting_of_ref": "indicator--c1b38271-b641-4b8e-b73a-0e4bb33b1406", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2111347f-2d6a-49c4-852b-43716bb8f51d", "sighting_of_ref": "indicator--977ff6cf-dd58-4a61-a426-15787631ab22", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c60a53c-555f-481f-b742-f86caf8e5573", "sighting_of_ref": "indicator--4926b451-1982-47f6-89fb-2591d3e19d4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35223e94-ad62-4b0a-b25a-776fc00946e9", "sighting_of_ref": "indicator--bdc0c84f-ec00-40cb-918a-704d82dfcd38", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cbee01-c6b1-416e-8091-5a6a7c67518e", "sighting_of_ref": "indicator--805a2409-5a08-433e-9c95-087304309b8b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae45386e-36a7-4626-9283-a446bd6ae55f", "sighting_of_ref": "indicator--3b12993e-c4d0-499b-b753-11115c2e7bb3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033ea5dc-c4e4-4a0d-943d-2d897f8445b0", "sighting_of_ref": "indicator--2d6f2465-0b28-47d2-8e2e-29c5d708da8a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7daf17-cc26-436e-be8e-4f52031c90a5", "sighting_of_ref": "indicator--3a71d90b-ace8-4f7d-b26a-5a95a8989783", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0864c60a-28c1-4949-b802-906bf2ea3405", "sighting_of_ref": "indicator--fdf3a7d5-71ad-4988-af0a-2741ae3c077e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fa8399-28f5-4977-b365-0f080a636556", "sighting_of_ref": "indicator--c8f3dfa1-38ae-47b0-9db3-6614c008ba50", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44042fca-00a9-437a-b34a-b0356a18d7d2", "sighting_of_ref": "indicator--8561c984-ca64-4c6f-a872-d7b1b369d571", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965abce5-a4eb-4436-aad8-107069976efa", "sighting_of_ref": "indicator--2dc4d802-5c32-44c8-a6ca-53f252165ef1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82bb999-6f2b-4f93-a880-fc4f8c024b40", "sighting_of_ref": "indicator--777233af-09c0-4263-9311-1fbfd6cb1449", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1cec75-2c65-4784-89df-00bbafe01bb2", "sighting_of_ref": "indicator--22e836f6-291e-4e2c-bc95-e84339b3d33b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b87fb0-df29-4a28-8ed5-c10eb66b93c9", "sighting_of_ref": "indicator--f1f894c9-7171-4800-bb6e-5646206509e1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dacc331-da80-4a89-8950-0cd695527a6e", "sighting_of_ref": "indicator--b72498d7-3c92-4d4a-bacf-372a6baeae92", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c9771c-a8d7-4300-8271-2c8810373bae", "sighting_of_ref": "indicator--d2b6936d-0afa-4fda-9d57-23f939836f7f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d668ed-c53a-48c5-a958-e17dc6962d6b", "sighting_of_ref": "indicator--fc76f3a9-b08c-415e-8405-5c5a898ae01c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e11a9d-0941-4928-b877-3772dca20f93", "sighting_of_ref": "indicator--9008023f-afb6-4dd4-b7a3-dc62a578b0ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c75845-cba6-449e-a7a8-c762dc588cff", "sighting_of_ref": "indicator--9008023f-afb6-4dd4-b7a3-dc62a578b0ce", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7a71dc-f2d6-4337-bf95-a8e8da3385b1", "sighting_of_ref": "indicator--5eb8bb97-de70-4446-880d-93212481d3a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b8c7a0-5c04-452d-a1c9-6998885340ad", "sighting_of_ref": "indicator--b3ce51a0-0b1d-40f7-80b5-09eb515ac50b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d988af1b-e725-4870-b162-a80c6d273f62", "sighting_of_ref": "indicator--7727a173-a724-4505-afcf-e7e80384c3c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ce06aa-68b5-484a-aea4-1f00def8e72b", "sighting_of_ref": "indicator--806869e2-17fd-44d9-913b-dc866d2960dd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61c2f88-34e0-4979-9d64-44f832f51098", "sighting_of_ref": "indicator--aff65072-f045-4e40-8494-98b0560d4d46", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7e9c73-4d3a-486d-8e31-72933f110b18", "sighting_of_ref": "indicator--60e94b9c-cbe8-42b3-b4b4-e162b9714982", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fe84ce-df73-43ca-8111-4e624385b8e8", "sighting_of_ref": "indicator--f8682f5c-4f22-4710-874f-eabc63f1fc19", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f281fa3-58ba-41cc-94bc-c272a3463dd9", "sighting_of_ref": "indicator--866bbab5-e5e4-474a-99cf-fb0b36d8a7c9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b65ba54-4a72-48ce-97f9-7507d164f29d", "sighting_of_ref": "indicator--bf2d753d-3c36-41ff-a010-cf0c7d3f4232", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0375914c-0b2c-43da-9f8e-723cfd1c57e8", "sighting_of_ref": "indicator--ad3fefbf-0fe0-4efd-b673-f4bcd3cffdfa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1973f002-77a5-4702-9df0-d1e93072c1bc", "sighting_of_ref": "indicator--412169ab-6020-41d2-afcd-e3e5c3b377b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3393bf93-3512-4724-8c04-d0e74daf0fb7", "sighting_of_ref": "indicator--412169ab-6020-41d2-afcd-e3e5c3b377b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4114bc-92b6-44a5-91ca-908163ce7e01", "sighting_of_ref": "indicator--f9ae29d3-ea64-4184-95fe-57e1f14fb382", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87d7007-e2ac-4808-94a6-dbff34d7312e", "sighting_of_ref": "indicator--02024ffd-63ee-4170-9e57-1863038504e6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa34cab-1e19-4490-a80b-461319f36eb3", "sighting_of_ref": "indicator--4e325683-ecc1-4787-9ef1-2063fc73f343", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c460c2-f2eb-4d15-846d-80d598cd3d6b", "sighting_of_ref": "indicator--af2dca5a-7b9a-42de-8b26-be9d5097d41a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4777d0-073e-49c4-89d3-8bf57b61b4b8", "sighting_of_ref": "indicator--3359c327-eaeb-4239-9ffb-4a7887ef56eb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5c032f-eb57-466b-a610-9417a8b7b030", "sighting_of_ref": "indicator--7d5e671b-a163-4177-b632-7e3589015257", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef11446-63d8-46b2-af70-30d505c5d90d", "sighting_of_ref": "indicator--3bc1d1d7-fc0c-4f29-b474-c252a51858c3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9094f5-d752-4d5a-91ab-3bdfa3af3c7f", "sighting_of_ref": "indicator--4b9b10e9-deb4-4aa0-b84e-ab45e889d963", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c753c5e-683f-4d67-b41a-dd197a8c6eb0", "sighting_of_ref": "indicator--4b9b10e9-deb4-4aa0-b84e-ab45e889d963", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c57fa8-9a0e-4a20-9d29-3c1a08e17d7d", "sighting_of_ref": "indicator--baf1ebe1-203a-467d-bbe2-5d73fcbe6ef4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c34f47-e208-42fb-91d9-831518d71316", "sighting_of_ref": "indicator--e9f8af9e-e851-45a2-a36d-3539139f8154", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1efb36-da54-4711-8443-fcfb0bdb70a1", "sighting_of_ref": "indicator--58b61d42-885f-42d6-a0f8-2918af1d2dfd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439a2b99-f6be-4481-b7e2-0679e827b422", "sighting_of_ref": "indicator--c134a55d-928a-4056-bfbc-4410d92ee0be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83fae53-f01c-47c3-82fa-a72d92d08cc1", "sighting_of_ref": "indicator--88097a03-af61-441e-804a-2d1c8257b8f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7793049f-9be4-4e73-b2fa-933fa0f29942", "sighting_of_ref": "indicator--683861be-124a-4ed6-a0ad-c1e8e5019cdd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc12649e-2214-49d8-a828-2b07348e95c8", "sighting_of_ref": "indicator--e3b27ed7-87fe-4c4c-b99b-d3dfc61c1a01", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8e32d2-1e61-4a1c-b2a8-4c09ce365ec9", "sighting_of_ref": "indicator--a41cc000-02de-446b-816a-9a27743ccaa7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84f28b2-a3d7-4e8e-b3b5-607f7d3e981b", "sighting_of_ref": "indicator--55c794cb-113e-4871-94ac-fbca0ac672ea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605bc83f-2304-44f0-affc-dd060a9f7df1", "sighting_of_ref": "indicator--f4bd58eb-b3a0-46cb-9161-78532db0df8e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577806df-47c7-4f4c-bc61-11b1eca92c15", "sighting_of_ref": "indicator--c3253782-4cb7-44ad-9148-ee4ca0c59347", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2595d2-6f69-421b-8c24-1b5b94c5d14b", "sighting_of_ref": "indicator--00bfa6bc-47f9-4f43-a7fa-f373755b7046", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1bf944-6417-4e94-9f7f-38891b1981bb", "sighting_of_ref": "indicator--ca1b1930-b9f8-44a3-8287-c4c84c3fe978", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc0f9f8-4a03-47ce-b37e-2fcdb1dbaea1", "sighting_of_ref": "indicator--18906fe7-cffe-444f-bdf6-4fa21473a762", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ae9a96-5db5-4d2d-8fa2-8698ba1bf3d2", "sighting_of_ref": "indicator--8154ba11-1cf0-445b-9df0-e6d0f4af9442", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a794c78f-2bcf-4a05-9a92-9b5fd18520ad", "sighting_of_ref": "indicator--8154ba11-1cf0-445b-9df0-e6d0f4af9442", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33302796-eff6-4991-8bfb-9843394a204d", "sighting_of_ref": "indicator--f84121c8-7469-458e-8611-f7a6f8b0f90f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e915047b-2ded-4078-97e3-f4d4bd725c14", "sighting_of_ref": "indicator--609d8cb1-c71d-4c08-aba2-10d4435631c3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385c8324-1d77-4f8e-9f58-21e2b13740db", "sighting_of_ref": "indicator--7c7bf47a-bd0f-4a78-88aa-7658cb78fefe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90224f60-0826-42d3-bf63-57c975c8618a", "sighting_of_ref": "indicator--f53410cf-d339-4c75-bb79-f1a6255630a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a16946-253e-40c2-894e-3938564f79ed", "sighting_of_ref": "indicator--65818e55-1c56-464b-9544-a7aae9e8faec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e960bf-c619-47d1-b025-db05894a26bf", "sighting_of_ref": "indicator--fcd68535-bd7a-4dd0-a3a5-e48c41f14db7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf0f745-f2a8-4ae7-9184-a5383f56beb0", "sighting_of_ref": "indicator--91beb75b-f09e-4811-b6df-7866bf9648db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac02b9e7-54cc-4460-b0fc-aeb52627560e", "sighting_of_ref": "indicator--976c1734-5b7b-4c5d-bf50-7fecb7d6f5f2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888ecffa-5206-4a5c-8e12-31f23e989bc1", "sighting_of_ref": "indicator--5e429429-999e-43a4-9b9e-6569e121e874", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40276eb-52ee-42da-9da4-fa22d8ad4eac", "sighting_of_ref": "indicator--88bfb353-4796-4845-a168-88cfd5353d4a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bed1e5-c3c0-4a27-8d73-d704fec7f9bf", "sighting_of_ref": "indicator--1aacb90d-4ef0-48cd-bea3-842fe4e4a9cc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4193c376-1fcf-4b03-83b7-f3cbb0d0e124", "sighting_of_ref": "indicator--c464faf7-ead6-4aa4-8373-45fa322bd4e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa0fad2-447a-4c7f-b19f-52f5111b8e02", "sighting_of_ref": "indicator--2a593384-c94a-4632-ab5b-d86ee4644837", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa986c83-bea8-44a3-a10b-c5d81621eb18", "sighting_of_ref": "indicator--1becdcf5-efc1-4b59-854e-fb678c027cc0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e685c1e-cb72-43d0-a3d9-81682c0adb8d", "sighting_of_ref": "indicator--b4683bc3-7c48-4fb4-b605-1b2cff2d7b7e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cab10e-f266-47bd-b95f-c967375e33cc", "sighting_of_ref": "indicator--7f8a6cb7-3244-4bb5-bdfe-418b00ce1b4c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65b104e-bea0-4049-af5c-add41ade2d40", "sighting_of_ref": "indicator--89b37a84-d6da-45c4-b3fc-0172aefd3642", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77bfc72-f79d-465a-b84f-937142c7b3c6", "sighting_of_ref": "indicator--e6cbcaab-48b6-4a53-a1c7-a6259cb90ba1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ccc8bd-d443-469f-8873-c97ef486d015", "sighting_of_ref": "indicator--0aea1f9f-9c3a-47f3-bc74-74da59149205", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de3c90f-4eb2-4015-9761-77b0453249e7", "sighting_of_ref": "indicator--ccde69d7-338a-4137-b1b4-e26eba258af9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e30a68-9d9f-4527-b1a6-f3aa74e9f6f6", "sighting_of_ref": "indicator--d5999c26-043f-4419-810e-dd5e5c86fe5b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5faa9e3-210c-4053-903b-ee5a487515eb", "sighting_of_ref": "indicator--2478d309-eb5d-4234-87d9-4dbd3acbd113", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd2ddc7-f3d7-4f1e-b562-2349c9b37a77", "sighting_of_ref": "indicator--4ea286db-77ce-4d87-bb5e-118a4985b945", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed6eb04-6422-4ab4-bdf5-7b70bf076a3c", "sighting_of_ref": "indicator--4ea286db-77ce-4d87-bb5e-118a4985b945", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10071e37-bf5e-40a6-89ec-4fd95f7e5845", "sighting_of_ref": "indicator--6087ef25-d733-4516-8a80-e8a80b5e32b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfde86f-8c76-48ca-898a-7f888e262165", "sighting_of_ref": "indicator--1e285514-4aba-41fb-ba6a-2cc9d6ae57c8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d421ad6c-0bd7-43a8-a17e-29f88b3245a7", "sighting_of_ref": "indicator--d1f0fd70-43f7-45b9-857c-68bc3e92cbd2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74238fb4-9054-4014-8ba5-0512b4be454d", "sighting_of_ref": "indicator--d06c15e6-aa9e-4f9c-bfa7-4c1df71610bc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1970fb8-1d8d-4dd0-9edc-a358176da77a", "sighting_of_ref": "indicator--267739f8-5180-4000-8699-868c63ce98a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b94bc7c-9dda-4fb9-a8fe-0d2783179041", "sighting_of_ref": "indicator--27d20fb7-8de1-47cf-84cc-d90049ab8784", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9657d41a-8d13-494f-b021-d4ac81636365", "sighting_of_ref": "indicator--c9063eea-a0d9-47f5-b831-67f6e8ddd8a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d0c9ac-0698-4cb8-afad-497b89d74387", "sighting_of_ref": "indicator--e15c92e7-fc6a-4071-b77e-cdae2435b6ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3204e7c-4382-49a8-b6cf-73feb4be9ffd", "sighting_of_ref": "indicator--4e0bd14c-ca63-4410-a31f-f064c47f7654", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83da2355-620a-4406-9d6f-251b043e294e", "sighting_of_ref": "indicator--08aa0275-01ec-4511-9aea-522c6666c324", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbf8357-9fc0-451c-b4c1-5b776c56046c", "sighting_of_ref": "indicator--6433ae58-1f7e-4101-a2c9-0bcfc4b62881", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bb0c93-fe11-4843-b2ca-286820492647", "sighting_of_ref": "indicator--d952c943-5e9b-4bdb-8754-33b6d496411b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c627024-5a43-4135-a7f1-ea65072ab2fc", "sighting_of_ref": "indicator--3f77e2ec-9ae7-4cdc-8512-55ee5dfccf83", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333f7189-4fb4-49b7-93eb-5a0657b7b939", "sighting_of_ref": "indicator--f69f3c8f-4614-463a-bbe7-d27899e59dae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4811387-f488-48e6-b987-88f514ea5074", "sighting_of_ref": "indicator--0ca34c84-df3f-4297-af82-339a96eaebb8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31b8aa3-f46a-4c55-9197-7eeb91fc2baf", "sighting_of_ref": "indicator--588d8345-0c16-4ed7-91fa-89de3c01db01", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247738e4-d12b-4f1e-809b-5607275ae8ae", "sighting_of_ref": "indicator--a3d1091d-931c-4bf7-b3fe-80327c84e7e6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb81cc98-1249-4951-807a-a2d7078dbb52", "sighting_of_ref": "indicator--5d4c4594-70e9-41fa-a900-4210de876696", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86aff2e4-4cd2-498f-8d2d-0cd05c802d84", "sighting_of_ref": "indicator--7f587f5d-f800-4322-973e-973d87ea0ebd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2dfe28-dcba-403c-9cbb-7a46c26ef02f", "sighting_of_ref": "indicator--067192c2-4969-41d3-9dff-3260dda49afe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e822a2-6f9a-41af-b468-5e5e7866d9c4", "sighting_of_ref": "indicator--a65912c9-aa2b-4b00-aa01-c9e4de9689bc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f9bb59-e837-4034-b231-16aeaa44649f", "sighting_of_ref": "indicator--7ebc52ce-9be2-4a9e-b64c-9b1c4670e47d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636d234d-2a49-4fc8-86d0-891617451715", "sighting_of_ref": "indicator--cceaffab-00ef-4760-878a-2253ea88e05e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dff0870-3036-4b40-81a3-0ea59f837240", "sighting_of_ref": "indicator--e62ad298-721e-40dd-a96f-c0a886d71c64", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ecb805-94d7-47ae-8eaa-c16edbe9193e", "sighting_of_ref": "indicator--c85f1ac0-4863-445c-8873-ca4f055a1686", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e36a25-3e74-491c-aa83-f662dee5c752", "sighting_of_ref": "indicator--80229fa5-a76f-44b2-9152-9c1c4bcbc4ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aef416e-e3a6-4110-948a-d2f3a8298c9d", "sighting_of_ref": "indicator--fc9372f7-0a82-443e-b88d-513362dff3ed", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41d8ec7-02f5-42b6-b088-4cb78aebd626", "sighting_of_ref": "indicator--fb8cac90-a0fe-4539-98ef-7d452cd24f69", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797fe464-2571-43ef-ac4a-2fda084916da", "sighting_of_ref": "indicator--39f2253c-4cb2-4867-8b2e-fe7eee180aee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfbd72f-59cc-4376-b2bd-74835e857b78", "sighting_of_ref": "indicator--e4e3639b-57dd-4411-b2f7-a003ecdc229f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b738f1b-6b91-45ee-b851-ce03c5e2e294", "sighting_of_ref": "indicator--42f9ad67-7e3d-400c-b66d-022eb4ecfa69", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd24cb7f-7fcf-4284-a840-07ec0a217334", "sighting_of_ref": "indicator--8725eda7-7433-41ed-aa9a-60b88e7cbeb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84659a1b-87fa-4f9c-bbf5-7fdfe621e93d", "sighting_of_ref": "indicator--8725eda7-7433-41ed-aa9a-60b88e7cbeb4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8f40e7-e8a8-439e-a0b0-f60b3043a48a", "sighting_of_ref": "indicator--4150afa6-3c7c-4ace-a36e-d716815f0d02", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7129537e-acbe-45a9-ac3e-54edd17f6fc6", "sighting_of_ref": "indicator--0e0a747e-347e-4b3d-8afc-aa68022185d7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee8f851a-5372-47de-be90-36f7d243b1c2", "sighting_of_ref": "indicator--2f6a063e-05fc-4530-8f8e-94a31fc87d27", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95aae837-60ab-4d39-b83d-96d58be1795d", "sighting_of_ref": "indicator--9e13c181-eee1-4525-a552-c2cfbdc1f398", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e981bca8-5aaf-49c2-81c5-8cef2ff17113", "sighting_of_ref": "indicator--2783fa99-c8cb-4d4d-ae43-b83957534b5a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a624bb61-1b72-454a-bada-36e72173cd45", "sighting_of_ref": "indicator--fa67f1ec-7c8f-4aab-99aa-f25e3889cc11", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04346f56-f184-4724-95ce-695f62609f18", "sighting_of_ref": "indicator--15178175-1d6b-422e-a42c-bc6c63f341bb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a0afa3-df04-4aa3-8f44-3b655931b8b7", "sighting_of_ref": "indicator--2cfae1e3-1773-4aa6-9cfc-603958561849", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3435e177-76f2-4203-839f-4f81948c4e26", "sighting_of_ref": "indicator--2cfae1e3-1773-4aa6-9cfc-603958561849", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e74874-f6f4-43f8-8375-dabb6311c516", "sighting_of_ref": "indicator--abfa6547-d9fd-419c-97cd-ef73d0b2f878", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516b57b4-1275-4dfe-91f5-059aa747491c", "sighting_of_ref": "indicator--2d07ea09-e20f-440a-93f3-6a61bd698ffe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ce2b6c-3962-4940-94f3-bca3611f65bb", "sighting_of_ref": "indicator--cc8f3489-c00b-4236-84a6-57aff6fa65b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83f4166-c565-47e3-b48f-2d2b39c41666", "sighting_of_ref": "indicator--87df72d8-a0c0-4256-9265-b3922d89ec1b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6151c31f-5750-48b6-9bbc-2a7477873d76", "sighting_of_ref": "indicator--e26ebfa9-9a5a-4dbe-81cd-d66cb759f033", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327d4c2b-3371-4ad5-8f0a-2baf9ce6706d", "sighting_of_ref": "indicator--e26ebfa9-9a5a-4dbe-81cd-d66cb759f033", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914a3cd9-41cb-44dc-9c8d-b4a0eb83aa49", "sighting_of_ref": "indicator--618a59b3-90e3-4140-bff7-ade8cbf11d7c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0446c53d-c325-4be5-9c74-dc227ddfbf8b", "sighting_of_ref": "indicator--98c697ee-7d24-4284-9696-c8e92c91e5fc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ccea8f-677f-4816-b69a-7f5d2b288705", "sighting_of_ref": "indicator--6527df7d-347c-406a-937a-a3b1e9d146bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27418902-9567-448c-bae6-ca87ec008bb8", "sighting_of_ref": "indicator--84a1c035-b6d4-4ce7-b00f-1d4f64c29623", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7714c0-17f7-4554-a38e-8d80f14c2dd8", "sighting_of_ref": "indicator--f5565866-63d2-4fc8-9012-728d112f2e7a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8623062-231a-41c9-a394-bdeb2dd3ca0c", "sighting_of_ref": "indicator--8cc5329a-b2db-49f7-b13a-7e9dff7b84ec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd9d173-9949-4a13-9d36-ddc9a6e8a4a9", "sighting_of_ref": "indicator--e30b71db-3570-446b-ab82-57c8200068fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb5a2f9-5eac-4049-b611-e6675d50893a", "sighting_of_ref": "indicator--1591e7fc-a762-4fdc-a81a-716cffe42030", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ab03c7-bc9a-497a-add3-ddb85cadcb9e", "sighting_of_ref": "indicator--5874b65c-f123-4232-abad-66e647b37713", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0d2fbf-4a45-4d18-8701-fde5056d579d", "sighting_of_ref": "indicator--749c6c99-3eca-4704-b531-2ed34d006ae2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df06134-eb6d-4a88-ab3a-fc52e0477323", "sighting_of_ref": "indicator--dcecc83e-3157-4e3e-9c44-d9d9ebb78833", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0baff9ce-ce74-4f72-8e08-f7fb91678567", "sighting_of_ref": "indicator--fafd7416-261d-4515-b252-10a4ce850835", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdad5fd-6017-464e-95a8-5392225d8386", "sighting_of_ref": "indicator--2869256c-66b8-4446-a5db-9c6b21538b9a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b898ce0-5cfd-46b0-b44a-63c3866bbc2f", "sighting_of_ref": "indicator--99f62adb-f567-45a7-beeb-56c360f99f5f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec26c0d5-0d52-4a45-a466-eb6c81dbc8a3", "sighting_of_ref": "indicator--26fa2729-1187-4d5d-9291-baf5e3a882a2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c9428c-3e45-42b4-855d-b7732bfb73ac", "sighting_of_ref": "indicator--d0cb40f0-5cd7-4c89-ab81-2cbd8d0aedb5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64aad2f0-ae7d-4857-84a8-4772b4132cc2", "sighting_of_ref": "indicator--69295b00-0421-4ad8-bce7-23fc4cd0c442", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ba9325-3ba6-49eb-8077-566303edd34a", "sighting_of_ref": "indicator--7eb2922f-47f0-4aa0-8af6-5e4d98e77be2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cc0b63-990f-49ee-bd3f-93d78b492ab6", "sighting_of_ref": "indicator--af875c69-4ce1-4415-a6e7-05f2c9c0de8e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d079fe4e-49ea-460c-aef8-c00aac1c1cc0", "sighting_of_ref": "indicator--2fc73b35-09e4-48aa-ae43-076b77517c6d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b27bcc0-e633-46fc-b157-23d88b7c4f70", "sighting_of_ref": "indicator--58f7aff9-0f75-4538-abdd-af09807d46c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf36d3b-9fe8-4555-bd37-7fecc53b7997", "sighting_of_ref": "indicator--426442f5-8162-438a-8a81-de266ffe0832", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fa36a5-2d47-4c1b-b699-ffbac4689472", "sighting_of_ref": "indicator--426442f5-8162-438a-8a81-de266ffe0832", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821b0415-765f-4d02-8dea-26a0131c3650", "sighting_of_ref": "indicator--f52d97fd-f841-4fa6-a286-fe0b4c39840b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1ecac4-ddb9-4567-97da-3e3d2a6105db", "sighting_of_ref": "indicator--7fec7352-2816-4c13-83df-334599379e1e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f487e628-5308-4545-ae70-155264be2c4c", "sighting_of_ref": "indicator--2e374320-eecc-4d58-9372-95ef728a2fe7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969d5120-c24b-4a9d-9710-203890e2f038", "sighting_of_ref": "indicator--a3521810-a68c-4170-a409-7d68aacea879", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a286242-afd3-4b33-92af-81eed54ab61a", "sighting_of_ref": "indicator--956d289a-9f44-4277-9680-1cf504cbc2f0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee771453-2318-4150-a2df-9ca0ba10216d", "sighting_of_ref": "indicator--e2443299-c391-4526-9e0b-099e345f4aa4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbefcc2-69af-4d80-9d21-57ed25a1c76e", "sighting_of_ref": "indicator--81227801-5c45-4bb3-8ee2-d27fb6034fbe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e292ec-a643-4577-9d49-c86c8a63ec34", "sighting_of_ref": "indicator--32d7fdec-e29b-4f01-9874-acec2b2849a9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e80c7ca-fec1-4d62-b31f-e3bb82c6ef2a", "sighting_of_ref": "indicator--a72b6da2-3161-4684-aa3e-ad644c1a0702", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d346a825-a49b-4ada-ad32-82aa47040ae1", "sighting_of_ref": "indicator--2d286ee6-861b-4b72-8121-43ccce6a1e43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba66811f-2fb4-4eb9-ae7e-d26e7b0cbc8a", "sighting_of_ref": "indicator--d5db6ac3-1a56-44eb-b6eb-fd13b4c82626", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17fc3a7-8428-47a0-9588-9357074a7357", "sighting_of_ref": "indicator--4560ceea-1f35-44a6-9dcb-707ed02fbe90", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b36f47-a879-4924-9f72-c210745ec1c7", "sighting_of_ref": "indicator--81d1bf0d-8be7-4408-9716-81c002dfb69a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6666a14-97da-4f7c-a742-95ceace0b516", "sighting_of_ref": "indicator--ba98cee2-9d72-41d1-b05c-24216646cf33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208d182a-89d2-4cc3-b643-51336adc8c62", "sighting_of_ref": "indicator--ce636256-798c-43b7-bf34-16a7e7742f77", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70453011-c720-48d9-b2bf-94a90446d579", "sighting_of_ref": "indicator--4dd11908-f1e0-47a5-a2c0-375693e7cddf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77460faf-c7d6-4e44-957e-a49339292358", "sighting_of_ref": "indicator--18cea52d-3066-488a-a0d2-cc719d7aa2ce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68977e11-2999-4ea8-b51e-874712169607", "sighting_of_ref": "indicator--2f0a48e6-0ed0-474b-b70e-2778995d1445", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f328a613-1c9c-44a4-9437-455b5ef28bf1", "sighting_of_ref": "indicator--e6033664-8b46-4fc6-b4f1-a6a9877f9574", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a231468c-6d9c-4b22-bc44-8e106b714d60", "sighting_of_ref": "indicator--8650e726-e8ed-465d-a9f0-d9814083abc2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3dc11fa-0eb9-4b98-9129-75f9373e3bcb", "sighting_of_ref": "indicator--8650e726-e8ed-465d-a9f0-d9814083abc2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169ef3a3-5e8d-4a42-a61e-6b120c6b31e3", "sighting_of_ref": "indicator--376672ca-130e-4c42-9b5a-8d0f458d3dbd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980d31fa-1c96-4d0c-8247-3c1b6c7884b3", "sighting_of_ref": "indicator--3634c979-366b-41d8-a205-6fbbb35fab9c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68a8e8b-e0bb-452e-b576-526ae80fc856", "sighting_of_ref": "indicator--3634c979-366b-41d8-a205-6fbbb35fab9c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ed799e-6131-4c8e-ae7b-a42d013e64b1", "sighting_of_ref": "indicator--12837213-9cd4-48f6-a05c-9725345cd6ec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ceda809-a440-4176-9fe6-773abc24d9cd", "sighting_of_ref": "indicator--00407c1c-2d61-4be6-8041-7aae4ad44577", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e92581-bf60-40e6-a3ee-b586e2a48b5a", "sighting_of_ref": "indicator--1a945435-20de-4943-a49e-5a2903ac3a41", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700b969f-2d79-415e-9b7f-0b9dd7f69973", "sighting_of_ref": "indicator--4c56c54a-0c7f-4916-b49b-ec919d8250d6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f7784f-90cb-40e6-97b4-4c9226be1360", "sighting_of_ref": "indicator--c9f5d64c-1356-49a0-a507-382563a27223", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30732a4-bf49-492d-ab0a-6a5a10277820", "sighting_of_ref": "indicator--4c2fc158-62c8-43ed-8e6d-9a706b7f527f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1d1e23-abc4-4370-ae81-15bd4ce20a3b", "sighting_of_ref": "indicator--9a9e7e82-ac7d-48d4-926c-68a07c6943c3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7666e0-8f79-4c5a-b1cd-bb1c85d294f3", "sighting_of_ref": "indicator--41998133-bcb9-464d-9761-39d0dc7a9885", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add82b9a-7ba4-4ccd-84f7-13d4c0e9506e", "sighting_of_ref": "indicator--41998133-bcb9-464d-9761-39d0dc7a9885", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efa79e6-3cd6-48b9-8d04-2eeecea6587f", "sighting_of_ref": "indicator--41998133-bcb9-464d-9761-39d0dc7a9885", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d88dea-a2ae-4b57-8686-338d5ae074fe", "sighting_of_ref": "indicator--ed086b54-19b4-433a-84bc-dd57000a5456", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8b9baf-8115-434d-a3d7-0f131d595565", "sighting_of_ref": "indicator--a4cd777f-1dd4-4537-8d15-4243d2fa37e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08406f8c-cf7c-422b-9820-7eb3e9e1e4af", "sighting_of_ref": "indicator--ec9ff81d-a1e2-4d56-9cd4-005459a0be7a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccef0286-9fc3-4132-9ad4-f85547621aea", "sighting_of_ref": "indicator--59af59f8-4505-45d8-897c-6526529f3cb0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0596255c-c374-483f-ab1b-2fe2c3dc0c89", "sighting_of_ref": "indicator--8ca73b8f-d114-47e5-b90d-335d5e961828", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061c7894-c735-4db7-ac3e-9fcf9356202d", "sighting_of_ref": "indicator--b6690f9d-198d-4717-ac79-4fb0ac07186a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd5ca9b-65f6-445e-aaf5-e1eae172af16", "sighting_of_ref": "indicator--c63891e7-8dac-495b-9bec-6b6f52c7212b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95083177-2a01-410a-b7c2-6521bac32a0d", "sighting_of_ref": "indicator--29f7e213-d2eb-4ad9-8fd8-df7c55c122b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600b1adf-719a-4dd3-8623-dd1e3568f4e7", "sighting_of_ref": "indicator--540aaa2f-d8ca-4880-bc73-5157d3b544cb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67adfd56-1738-486d-89c7-4496dfb7786d", "sighting_of_ref": "indicator--7041b105-0d8d-46f4-8c2c-528c45e82400", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f733b1e-85ac-4322-86d6-ca18f4f7c051", "sighting_of_ref": "indicator--b03f74f4-447f-494b-bfe4-f75d36e135d1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ebe23e-7f21-4477-a0e9-a128829c1a5a", "sighting_of_ref": "indicator--df6c2d50-0570-41b4-a29c-68f1d46582b4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bd7b2f-ca63-481c-b55f-ac93b84d496c", "sighting_of_ref": "indicator--f7928894-47b3-4387-8c62-6f11b0ee11e0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161627a1-4d6d-40cf-b765-756e3b3994a3", "sighting_of_ref": "indicator--f7928894-47b3-4387-8c62-6f11b0ee11e0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a4903e-31e2-4b41-a225-cd105407927a", "sighting_of_ref": "indicator--1597400c-d4af-4afb-adf3-3950bf39b9f2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd39eeb8-5228-4e03-93ef-d9ec5cdaa71b", "sighting_of_ref": "indicator--6318f931-77c3-4ec8-bf9c-3fdd30487152", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9febfec-a986-4fb2-b14a-039a046ec403", "sighting_of_ref": "indicator--808fe83d-3209-4057-805f-98596333c6b2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5598fb-cc4d-4557-b683-e8ed9c3f8713", "sighting_of_ref": "indicator--783d1ad0-e4d7-4962-b471-e8adabe79160", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd3fbc9-c68a-40fc-b980-654fc276345d", "sighting_of_ref": "indicator--6dc2afc9-1ace-4eef-804c-5717adeda13e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204dc3e7-a284-4479-8cdd-6095267cb277", "sighting_of_ref": "indicator--c21d1eaf-d2fa-4d59-ade5-de36aaebbf18", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7ad84a-5b3d-4a9b-be4e-b4f95edde20c", "sighting_of_ref": "indicator--8be3c4d0-f1a6-4934-86c7-8c9e34995bf1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c70ef7d-6bdc-4dd9-86cd-76312d25940a", "sighting_of_ref": "indicator--3f67b110-0523-488f-9db1-f289b341afdf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a297f612-d7a8-48de-a2b3-51e274d84c69", "sighting_of_ref": "indicator--20687ea4-e4b8-4c68-b95d-5e7afc694bb3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afcd2bb-60a0-4244-b098-81bc3191d8c1", "sighting_of_ref": "indicator--67a2deab-1fd7-4231-a6fe-59f43e1f9999", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b56f2b6-b52b-4740-94b1-b346fe95ab54", "sighting_of_ref": "indicator--d39dab53-1539-424c-997d-e99e58c9c606", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04795154-d4be-4325-aa8a-12c95ae98d81", "sighting_of_ref": "indicator--a2d44cd1-0da9-4fa2-84d9-77372f423d2b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746eea2a-8946-4ece-afe5-974b9f9239e9", "sighting_of_ref": "indicator--efc509ce-353b-4b01-a453-75141b75454e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f2bda9-1a72-4a10-8eb0-7467a5ce8dcb", "sighting_of_ref": "indicator--22cdb2bd-113e-4aa7-ae77-7d2f230f2746", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b185c6a-2905-4b51-b795-3c4a2f1c5644", "sighting_of_ref": "indicator--b570974d-de49-4045-b431-bdc566b20b4a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3844d1-ae34-4298-b752-175f4e5f49ca", "sighting_of_ref": "indicator--03f257ea-55a2-4d7c-93f5-16af59ff4ba5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179df270-26b9-4604-a1bb-30a632258754", "sighting_of_ref": "indicator--763e56ed-f113-40cd-800f-7fdbcc9bb85a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89f03ef-5b2a-4875-8ece-5052d6dcaf1c", "sighting_of_ref": "indicator--f1f8bc6e-a82e-4b9b-bb7b-1b7dc67f85a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc7edde-408f-494d-b99c-3f8250bb3591", "sighting_of_ref": "indicator--0cdf15b9-07b6-46e3-8053-458cedc626b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04badd95-11b2-467e-9c66-eb647ed608fb", "sighting_of_ref": "indicator--8c6096f7-7247-46fb-a16b-a79e93f873c2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed074704-403b-42aa-8de3-d1cfceaedd73", "sighting_of_ref": "indicator--8c6096f7-7247-46fb-a16b-a79e93f873c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031095bd-df97-4d77-a1f3-fecf9707ada6", "sighting_of_ref": "indicator--1fdad914-a77f-48fe-a2d5-1d0ee92d587e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c94f9b-066c-4bc0-b72c-8507fdca73cf", "sighting_of_ref": "indicator--1fdad914-a77f-48fe-a2d5-1d0ee92d587e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ded9575-f7f5-4a94-b0ec-9722fa8af1a9", "sighting_of_ref": "indicator--fe1379af-04a4-4f69-9d86-3144e996f69b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ccad8a-af20-4a57-936a-20d05e9f44ef", "sighting_of_ref": "indicator--acdf2e2b-7305-41f1-b576-da44af7719c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c69e52-1064-4f56-ad38-89645a353261", "sighting_of_ref": "indicator--8c919559-5511-4d71-8899-4bcd553e9469", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3291226e-927b-4092-9852-dd21968ae9d9", "sighting_of_ref": "indicator--e922198e-d810-4434-a186-0d2b27ca8292", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fb2d9e-fe06-49d6-bdf7-e1efb7a7d559", "sighting_of_ref": "indicator--1679b49b-1199-4e76-9562-8adca3fee397", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2616bb-a558-4786-bb55-da16d34cfcd4", "sighting_of_ref": "indicator--590fbc08-6318-458f-8795-db4a1947586f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd37c532-9169-47b3-a1b7-9135fb44d7e7", "sighting_of_ref": "indicator--132d4bcd-2b88-4cf6-a4a8-0acdb07498d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb887435-d70b-4ef9-bceb-ba770d5d8975", "sighting_of_ref": "indicator--4ac26851-704b-4d1c-8deb-9f78a24565aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54bbf68-d5ed-4f5e-a934-7250c02a7137", "sighting_of_ref": "indicator--b9f0d474-a16b-4554-bd43-45e40f8a3f73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3af3b34-3f9c-4b9b-a6bb-a9e93a9da1f6", "sighting_of_ref": "indicator--d7ed7ad3-d555-4e94-a024-208f62375efe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d662f324-dd65-4aad-a11c-fa2d2934e732", "sighting_of_ref": "indicator--f855a461-cd35-4996-92c8-702cb6018817", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cde874-dcb9-4ab8-9ee2-0fdc2bf5fea5", "sighting_of_ref": "indicator--ecea46f7-49c4-412e-b4d2-7a74f82ef687", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d8f883-b38e-4c8c-918a-84ee3d873f6e", "sighting_of_ref": "indicator--1bbe4c0f-3ff9-4417-acf9-3aa8f944899d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc3a551-9630-4906-8cb0-46af51ccb9a8", "sighting_of_ref": "indicator--18d6ee3c-5113-4043-a26f-af84f45c738a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ec368c-70c4-41ab-bf88-04df8457da3c", "sighting_of_ref": "indicator--a925f9fe-290e-42f7-ae9f-f143ccb4a62d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5604dd2-46d7-4bb8-a988-7344b1d9aee9", "sighting_of_ref": "indicator--47a43838-bfd4-4c60-94a0-76c7627a84da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c3495f-dbf0-4e01-b07b-ba7cbccca04f", "sighting_of_ref": "indicator--41186829-5fb9-49f7-bbf1-c0f5ced34bdf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac8489f-b9e9-4b97-a7a5-4d4c54418cff", "sighting_of_ref": "indicator--28ecdb2a-8d88-4ef7-af66-699de41db64e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c52544d-76ec-4878-b86f-7fa0dfe554da", "sighting_of_ref": "indicator--78dc3177-e9ab-451a-bc45-cae35f9d5f2c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb3a46b-a4f9-4811-a671-f35a6fc9d4ff", "sighting_of_ref": "indicator--78dc3177-e9ab-451a-bc45-cae35f9d5f2c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6db84df-a9b8-447d-8ad0-fb6bce24364d", "sighting_of_ref": "indicator--f79a1b2c-c87f-4194-9c3b-fb943537e76d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433eebde-f635-48c9-901d-8f8d16f20fc4", "sighting_of_ref": "indicator--b658d7de-94ad-4930-a152-5839a266834a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219b35e7-82c1-4504-b795-240e46c4325d", "sighting_of_ref": "indicator--3ab9c8aa-54c0-4c5c-8246-8f5bf14d06c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266c8724-8950-4367-898a-e4fd6c89699e", "sighting_of_ref": "indicator--580d1cf0-27f7-4e2f-b167-29863c935f03", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80890185-9ab0-4140-998c-56c9bbfbc338", "sighting_of_ref": "indicator--200edc96-c8d6-41a5-ad18-449816927a97", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0309c8-ccf9-43fa-9dbf-0c1a9cb89cbd", "sighting_of_ref": "indicator--aab22a90-961f-49d7-a84b-8716331ecfea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ceba293-0e44-4c61-ad4a-218fcaf27aab", "sighting_of_ref": "indicator--e8fed85e-e706-40c5-b807-fae1e61c0beb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1dedf72-80de-4128-9f47-7ae00ee8474b", "sighting_of_ref": "indicator--e8fed85e-e706-40c5-b807-fae1e61c0beb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3b57c6-0575-4fc8-ab60-c37265c80e20", "sighting_of_ref": "indicator--e4611a6b-ab48-4633-a86f-96587b4624a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d5bf79-78b3-43ce-949b-ca318d3b2003", "sighting_of_ref": "indicator--c6e5da53-fbbc-4c92-a8c7-87143c03e14b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de2c01a-93e3-4501-86c3-274fa039e7f4", "sighting_of_ref": "indicator--3e7be8f1-a33e-41d5-9727-1f5e22b6126b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df1ce32-2484-4929-82b0-69120d8d9602", "sighting_of_ref": "indicator--3e7be8f1-a33e-41d5-9727-1f5e22b6126b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912b4f0d-a272-40fb-9d36-0b88203dc610", "sighting_of_ref": "indicator--3e7be8f1-a33e-41d5-9727-1f5e22b6126b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5551d5-0370-492c-9cd9-3e17a13b1a9d", "sighting_of_ref": "indicator--951f2b15-21f7-45e4-9bee-f75b92cb00c7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d99d5b-458e-447b-8c1c-608d4b417896", "sighting_of_ref": "indicator--75be8c0e-3684-49bb-902b-a66ef00e33b8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578f925f-9a73-4776-9905-3d527fa5e6b8", "sighting_of_ref": "indicator--41b594fd-b24c-42c9-b6fd-693dd75ec3a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a636cae-642b-4037-b7fa-9110501e4ca1", "sighting_of_ref": "indicator--4f45236e-6733-45f2-b9d2-fd8fa26a92a2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0807457-185e-498e-a24f-c7d2749592a8", "sighting_of_ref": "indicator--1d4ba6a5-f4d4-4f22-9a51-a5b72b87d7b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71b1c8d-4946-4cb0-bb07-c7d8127b4873", "sighting_of_ref": "indicator--954d827d-91e2-4ee1-b358-f7f788a07408", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fe66e5-2823-48ea-9054-6aadd09ae9bd", "sighting_of_ref": "indicator--954d827d-91e2-4ee1-b358-f7f788a07408", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e874bbba-34dd-4351-bf4d-94be0f484ed9", "sighting_of_ref": "indicator--954d827d-91e2-4ee1-b358-f7f788a07408", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5390d5-ddd9-4a2c-b6ae-129d7176279d", "sighting_of_ref": "indicator--4f06f601-205e-424c-a8b1-2be10473df74", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c36154-3a56-440b-97a1-969e1e04498e", "sighting_of_ref": "indicator--4f06f601-205e-424c-a8b1-2be10473df74", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594e7e34-c8f6-4a32-b54a-9da4c906c07c", "sighting_of_ref": "indicator--4f06f601-205e-424c-a8b1-2be10473df74", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a65dadd-fdf0-4515-98d4-8cec126514e2", "sighting_of_ref": "indicator--da19c803-7a36-45f5-972d-eb4a699524e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bb3dc5-529a-4dc8-9169-e6562e3183a8", "sighting_of_ref": "indicator--da19c803-7a36-45f5-972d-eb4a699524e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b73a6cb-924a-4b82-8ae0-f28e87396fb1", "sighting_of_ref": "indicator--da19c803-7a36-45f5-972d-eb4a699524e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d01c986-fedf-4f40-8f0f-b23bb5fa4150", "sighting_of_ref": "indicator--4a1b4209-d03f-47a2-90a5-5129dc1486d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8834db-e63f-40f1-b661-6b192b2e6bdf", "sighting_of_ref": "indicator--4a1b4209-d03f-47a2-90a5-5129dc1486d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bf7931-a642-41ba-a327-f5f17a8270dc", "sighting_of_ref": "indicator--d53533a1-5ee8-4cb6-815a-cd2470280c5e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94047cc8-b539-45b8-b0e9-ac7c4ae57b36", "sighting_of_ref": "indicator--6de45824-b408-4961-b596-fc934193d85f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17957e0-66c0-4c61-9b1e-f735130486d0", "sighting_of_ref": "indicator--9144fc46-e8b2-41ae-8f13-e052667f5b74", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48033465-bc3f-47ff-8fd7-4f6ac7b7a822", "sighting_of_ref": "indicator--861a8098-3fbe-42a8-b3b6-e7aca9791002", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad06d43-d0cd-4fba-b67f-850dbe928f19", "sighting_of_ref": "indicator--e3e7ae97-6a03-4082-b202-cb527ee86fc1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8834567b-ed5d-4181-a8ae-83af9cd3e1ca", "sighting_of_ref": "indicator--3b042583-eee7-4eeb-a59d-6af0ec60b1b8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8aaf5a1-a60a-4c57-a5b8-38e9f3459cd8", "sighting_of_ref": "indicator--fe337789-ffa5-47f3-bd66-77269ba165a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe72359-08ea-41bf-83eb-109e90e51bd1", "sighting_of_ref": "indicator--d855f945-c190-40e0-8d53-c1194142a9ff", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838065bd-ccb5-4632-b4e5-e78e50858819", "sighting_of_ref": "indicator--07cdbfc4-e452-4614-b262-061d0cdfef24", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bbfc90-04b3-458a-8aeb-a9a019e5f3fe", "sighting_of_ref": "indicator--4d542c44-009b-469a-83a8-c173a68a10ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0e9471-b24f-4317-83a5-f46934bde532", "sighting_of_ref": "indicator--fe8dba79-368d-4507-87db-df273399aecd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe7b7fd-36a1-4bcb-8a48-1e85eeae85cc", "sighting_of_ref": "indicator--31daa919-a692-4cae-8a9b-473acad0cb1f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef17a08-4c97-427b-a3f4-ea30afa6ad0d", "sighting_of_ref": "indicator--db77400b-6501-4c0f-a6c9-464e862c5564", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566dcad4-bb7a-46d3-bbbc-57d5ae204e7e", "sighting_of_ref": "indicator--ad57a591-2858-41a1-899a-0649b3614057", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9c5533-2704-44ea-ae09-0900f12aa3c8", "sighting_of_ref": "indicator--9e9a0d90-65a0-4dc4-bfbc-198458770f5c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf090a6-288e-4098-9fdf-09067a34a6f4", "sighting_of_ref": "indicator--6f7b86f4-dab8-4fa2-a492-56a07fa11bd9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea30475d-6bfd-4c50-b148-60e0b1eeeac2", "sighting_of_ref": "indicator--7f848ebc-cb7c-4e52-aeec-cf4105def5a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddea986-d003-4f0e-80d0-32482c46af3a", "sighting_of_ref": "indicator--7f848ebc-cb7c-4e52-aeec-cf4105def5a8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3834be82-7e6e-4bc9-bcef-7d50e8d89c73", "sighting_of_ref": "indicator--7f848ebc-cb7c-4e52-aeec-cf4105def5a8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2182f220-5c66-40f3-9dbb-9195582a7105", "sighting_of_ref": "indicator--85b1b365-7267-49ab-b8a8-0076b0c106c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b694bafd-5132-45e5-89e6-e4d20ba25638", "sighting_of_ref": "indicator--3cc5b111-86f8-4d73-a6b8-288a8954726f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f873cf83-6948-42c9-b29c-0413d2c171ce", "sighting_of_ref": "indicator--3cc5b111-86f8-4d73-a6b8-288a8954726f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56909f9-6e63-4790-94ac-d03a1a2d1f42", "sighting_of_ref": "indicator--3cc5b111-86f8-4d73-a6b8-288a8954726f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d50ffc6-a546-42f8-a044-adab283156e4", "sighting_of_ref": "indicator--d19ed502-3fc4-4246-ae24-9c54fb950eca", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9f8bb8-1f5f-44be-ac31-d15889399e72", "sighting_of_ref": "indicator--87bb87e7-04e4-4fe4-a273-5d1c60588d72", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c895f108-7d36-4dfa-a333-f95c3dbaaaaa", "sighting_of_ref": "indicator--87bb87e7-04e4-4fe4-a273-5d1c60588d72", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53e35d2-ed55-4cd2-965a-8208f786445f", "sighting_of_ref": "indicator--87bb87e7-04e4-4fe4-a273-5d1c60588d72", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf9dc28-cf42-4652-aeb4-ade608975555", "sighting_of_ref": "indicator--90ce620d-aa02-40d2-add0-fe381cdd18d9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc875f13-2298-4e75-b499-deb5e99421d1", "sighting_of_ref": "indicator--90ce620d-aa02-40d2-add0-fe381cdd18d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309cdb10-6f73-4e14-a508-1fec9c5ddc0b", "sighting_of_ref": "indicator--90ce620d-aa02-40d2-add0-fe381cdd18d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3465f4-c40c-484a-80c5-e9382c5988ef", "sighting_of_ref": "indicator--d5238987-8f0c-4ffe-ab5c-df6add440278", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05671588-66a6-472f-80d1-288b83d87e9c", "sighting_of_ref": "indicator--d5238987-8f0c-4ffe-ab5c-df6add440278", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ea1d0e-e34e-4288-86ac-f020727e0bc9", "sighting_of_ref": "indicator--d5238987-8f0c-4ffe-ab5c-df6add440278", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792ac45d-7e72-4c90-869c-004f11285fd2", "sighting_of_ref": "indicator--86e856ce-a5d9-4e05-ac3a-05ea16e9b98d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f30189-6ff2-47d8-8149-80d42f86643a", "sighting_of_ref": "indicator--fdd72b1e-0b17-49e8-adfc-7069eeeadabe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9536b96-7d85-4ab8-b9ef-47161d55d99b", "sighting_of_ref": "indicator--35552bda-5832-494f-b5a1-56a56dded8d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086089d9-de31-4d9a-afc1-4dda96abd2f7", "sighting_of_ref": "indicator--35552bda-5832-494f-b5a1-56a56dded8d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a97b618-d904-4bd8-bd00-31d770bb4bc5", "sighting_of_ref": "indicator--fbfee9fd-5167-4574-a3b5-9bd11b0d0fca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4055c2-df66-4c27-b0cb-9d021b5a3143", "sighting_of_ref": "indicator--68f41cc6-2fe9-42cd-b8e2-59f9c2582525", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1a51d8-a5f2-4681-b3d1-a8e8447d6452", "sighting_of_ref": "indicator--83788a89-0a02-4ea1-91f5-b7a9b3b128a0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ae7710-7ebc-4c5f-9b4b-a270d05a8033", "sighting_of_ref": "indicator--83788a89-0a02-4ea1-91f5-b7a9b3b128a0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32027dc8-8ff6-4be4-b841-be5e9678f3c0", "sighting_of_ref": "indicator--83788a89-0a02-4ea1-91f5-b7a9b3b128a0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bee7bb-74ec-49ef-bdc6-f7357af56659", "sighting_of_ref": "indicator--be6dc82c-67b1-4e42-9b62-9aa3d84a5f47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29ad084-4d3c-4f96-aa30-69fee5ba6e17", "sighting_of_ref": "indicator--4089bbf5-8b81-462e-ab90-ea0929e1caa6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33327ce9-f375-4676-aac4-5cd82f221f44", "sighting_of_ref": "indicator--e781d0b7-52ec-4447-ad15-7a46a685e518", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7b611f-ebcb-41a9-9445-338ab075f233", "sighting_of_ref": "indicator--0189a6ce-45a0-4402-badd-112bb644371a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8786a35-8738-42de-8d8e-75f79f07061f", "sighting_of_ref": "indicator--10402ce2-e8ce-482d-b6c7-0971b479b255", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6649e400-ddab-488f-9e33-0254982709ce", "sighting_of_ref": "indicator--10402ce2-e8ce-482d-b6c7-0971b479b255", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f22bca-ab12-41df-a944-c7746fb88079", "sighting_of_ref": "indicator--567efb68-90cf-42fc-8629-7c96585c31af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6135cf2a-1871-40f2-89e6-f35ae4f46598", "sighting_of_ref": "indicator--567efb68-90cf-42fc-8629-7c96585c31af", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca86009-7ff3-4349-8ef2-224366d85499", "sighting_of_ref": "indicator--8082be4b-b6ac-4e8a-ab59-5bc2f580d54a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e93ab6d-45b6-476f-86af-efb393866486", "sighting_of_ref": "indicator--8ae216ed-d07a-46d9-a4a6-628d5e7f5fe7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c04e3d1-56d8-4092-a077-a51d0cb908dc", "sighting_of_ref": "indicator--1cbfb447-40fd-4699-b83f-cf4b30749d56", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c99fab-e358-4391-9175-48c7e870df29", "sighting_of_ref": "indicator--1cbfb447-40fd-4699-b83f-cf4b30749d56", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8759bd-38a9-40dd-af68-88ec86892347", "sighting_of_ref": "indicator--6f8c6491-f69f-4709-8518-2c57441e51bd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8e5763-7c7c-4553-978f-e14557bfc424", "sighting_of_ref": "indicator--7e566e8b-ec7f-4aa0-b0f3-dae67bdc0c2f", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8aad630-29b4-41ff-ba04-6c40da85b70e", "sighting_of_ref": "indicator--2c831580-af20-473c-a2d3-4a2fc353a475", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b80380-1fd3-4274-91ac-21456625937a", "sighting_of_ref": "indicator--855b4760-d170-4c6f-ba13-8523205d885c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e5e0a6-c507-4c02-a1a9-066bc6021548", "sighting_of_ref": "indicator--df0b093d-ea16-487e-9131-a58ee487850a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c0db0c-3c88-4d0e-87c7-982ba18d1964", "sighting_of_ref": "indicator--953f4580-f4ca-4aba-968c-93bb5c527d88", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c4c08e-59d5-4796-8d8e-2f9297b4552d", "sighting_of_ref": "indicator--377a4088-e311-42de-a3a5-740578cb668f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45b1c1d-7c63-4cab-8067-5a02cab69d49", "sighting_of_ref": "indicator--5ec24c72-0502-4797-843f-4450af707a08", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fc2c83-1cbe-4677-a36f-0741e255e5b9", "sighting_of_ref": "indicator--1aaf4d8a-6f87-4b87-894a-33ffd5b36034", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2361ee41-1709-42f1-ba46-6c11510d510d", "sighting_of_ref": "indicator--334861a6-6f3b-4045-b667-ee31f6734315", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29398660-892b-4b45-bab5-5b2b1b1f184e", "sighting_of_ref": "indicator--58153103-1176-48cf-9c95-1bbd31da76b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11da6de-6ae5-45ad-b862-38b28d29971b", "sighting_of_ref": "indicator--3443ba9b-39ab-4af9-afe9-95e251943d3b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7d00f3-3aa5-444d-a6c2-29c53c0f312f", "sighting_of_ref": "indicator--592dbb6d-7cb6-4867-aacb-859f6cb77c99", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5ca833-c407-4976-bb57-fa764853ef4b", "sighting_of_ref": "indicator--592dbb6d-7cb6-4867-aacb-859f6cb77c99", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcaaa3aa-f308-47df-8c13-b82e2bfac876", "sighting_of_ref": "indicator--592dbb6d-7cb6-4867-aacb-859f6cb77c99", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3190a671-1ecc-4af4-9c11-9086e309981b", "sighting_of_ref": "indicator--c2280399-ee21-43d7-aa6f-06bdf1e372a1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63dcefd0-6180-4ef5-94b7-dbb3c358cc2e", "sighting_of_ref": "indicator--c2280399-ee21-43d7-aa6f-06bdf1e372a1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6146ba26-f5fc-440c-adda-031995c748e5", "sighting_of_ref": "indicator--c2280399-ee21-43d7-aa6f-06bdf1e372a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b85267b-b800-4762-9669-45b7bd9c0461", "sighting_of_ref": "indicator--4a794882-9eee-4824-bee1-9f28ad2fc2bf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe68181d-a47b-42cf-9181-6642137feb31", "sighting_of_ref": "indicator--4a794882-9eee-4824-bee1-9f28ad2fc2bf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0760809d-ef6c-4272-97af-88a9183fc104", "sighting_of_ref": "indicator--4c6cd30d-28f7-446d-91d9-df25b17432d5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3aa71a-71e8-420f-8cf5-ffc407e4a01f", "sighting_of_ref": "indicator--4c6cd30d-28f7-446d-91d9-df25b17432d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e14ff96-edb4-4015-bbfe-25c3af26a671", "sighting_of_ref": "indicator--4c6cd30d-28f7-446d-91d9-df25b17432d5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92540950-8f4b-46a0-afc2-20f0de109a9d", "sighting_of_ref": "indicator--b91d0ffd-0a14-42c2-aa1a-9fba77e41f98", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221d26d7-928a-407e-bfd5-2e7b78501621", "sighting_of_ref": "indicator--1a5ef293-cf2d-4649-ab36-9254575216fd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb57ff1-3629-4d3c-bcd6-28715ea2d8c7", "sighting_of_ref": "indicator--435a06f4-4745-4bd9-988a-dea35ce55499", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f6cf92-fd76-4bf3-8357-e961b31c03f7", "sighting_of_ref": "indicator--09de8543-52c8-4d0d-b4a4-90c9d26bc1b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5791e72-aeeb-4f7d-b5b2-49cf1b24c39c", "sighting_of_ref": "indicator--09de8543-52c8-4d0d-b4a4-90c9d26bc1b7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e0543a-dad7-4832-a093-395a31dde6a3", "sighting_of_ref": "indicator--e2439229-85d4-4c91-b090-5f5607beae15", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586dd5a0-f37e-4bf8-a3ec-73f2d4c7ba18", "sighting_of_ref": "indicator--f0c78f4c-a62c-4d2f-b465-cc69271e8439", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0300da7d-e07e-49e2-b871-21b87a087520", "sighting_of_ref": "indicator--d3dcde10-398e-4a28-a6d3-d1a4a3caa297", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1588f90-85dc-4488-99e4-4c09d44b1da2", "sighting_of_ref": "indicator--d3dcde10-398e-4a28-a6d3-d1a4a3caa297", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0451220e-70d2-4477-bb7d-62f550789c07", "sighting_of_ref": "indicator--d3dcde10-398e-4a28-a6d3-d1a4a3caa297", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e504b17-04ac-4a0b-bedb-45c5fcb2aef6", "sighting_of_ref": "indicator--ccecccb5-6f8d-4b18-80e2-04dd8870c5a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae813862-381e-49c8-9149-c6dc92095246", "sighting_of_ref": "indicator--ccecccb5-6f8d-4b18-80e2-04dd8870c5a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf024789-6a7d-425a-9cd8-6456d83aa411", "sighting_of_ref": "indicator--09da5f29-54b3-4333-ba31-f6e88320238a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f74a1b-3208-45b5-b5be-1a66c685b817", "sighting_of_ref": "indicator--32f6152e-b158-4295-96a3-0762580b7158", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc209cf0-899d-473f-9e2c-d7f576016e72", "sighting_of_ref": "indicator--4e210cc2-1963-4b73-9827-5a6979fc3b23", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0279f721-ebf8-41e0-a931-028c9b32a321", "sighting_of_ref": "indicator--c3913f32-eef7-4948-9845-984a99ba714c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9ba2ec-556b-4fbe-83ab-f38cf0754be9", "sighting_of_ref": "indicator--05613873-8ec2-43a7-b45c-8efdcada3e9e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75db290a-0657-4497-a52e-d376a5f92cc7", "sighting_of_ref": "indicator--b09b2e14-9a79-42d4-815f-a52e286b673b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134256df-5c63-4513-afb6-a07f34b7c041", "sighting_of_ref": "indicator--e8346064-c856-40f3-8e4f-6da61637c05c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5f0bd9-2eb3-4536-9be5-0aab80b49bc8", "sighting_of_ref": "indicator--c9de496d-0ab0-4aa6-82aa-7b5fad40e6bc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38de5b27-0140-4908-8f1d-9aa02973c6c3", "sighting_of_ref": "indicator--5b452314-e4f9-4f7f-b18e-9fdbd5038b89", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a90974-eee0-4eba-b924-3b88cc0d7133", "sighting_of_ref": "indicator--6f6503d8-2c82-49f8-9b20-f8e3e9c44771", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c005ffca-0c50-4c46-b362-112fd95a49ab", "sighting_of_ref": "indicator--79491d6e-9c8e-4344-a916-092e6e3ce793", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1551a020-edf8-4a67-9150-352b42a34bbe", "sighting_of_ref": "indicator--8e9ecd03-c0eb-43b8-85a2-d6aa08ad58f5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1f8225-9e8a-4390-8ee1-1c5a4871a556", "sighting_of_ref": "indicator--5856f56f-ee80-415b-bb8b-46373a16e9eb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3f0f6b-08b3-4661-bc58-8f1f5ed2497f", "sighting_of_ref": "indicator--fe5b4346-eda2-4287-b0c5-66a9f8b944a6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b1b62b-5928-450e-b148-0ec9c85b3d15", "sighting_of_ref": "indicator--5a0381df-187b-478d-93ac-8181de8c27c7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f226647-ca2b-4523-9588-df181328738a", "sighting_of_ref": "indicator--70a763fe-02ff-4cba-a093-991a26fa9b74", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c546d72b-bc3d-4290-ade2-5394982b71fc", "sighting_of_ref": "indicator--7789da55-59ad-48f2-9ab4-7ca64e69edb7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4557bc56-edd6-4a67-bb88-b7ca0da6c61b", "sighting_of_ref": "indicator--e499fe3b-647b-41eb-8f64-29608067baf6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a3723e-06eb-461d-9dbe-e069d0daa34f", "sighting_of_ref": "indicator--d9d3efaf-188a-4586-805b-eeb095921cc5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7174e80d-9038-4e59-b323-dbd655b3e87f", "sighting_of_ref": "indicator--40d0065e-4c80-48ef-a3dc-bf40ea2ba118", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae8df25-7f1b-4ff5-8532-c632c38b5878", "sighting_of_ref": "indicator--6b97ced1-121e-4431-89b9-446a7fa13826", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d905aa31-d5af-46b5-8199-55c596c2f661", "sighting_of_ref": "indicator--ec7558c0-44a3-436f-9efb-6a6db6b1d3e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd03230-f7d4-4182-97b5-639c0267f4f5", "sighting_of_ref": "indicator--b0426b9c-e005-4848-924d-bd0f26ab240f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082016c8-43d9-41c0-b131-d54e5c13b9a2", "sighting_of_ref": "indicator--9839ca83-a0e3-4c54-8028-fbbfd4a4b04a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fc23c9-2f36-4d11-a287-64e8a94767a9", "sighting_of_ref": "indicator--8af605e0-f461-4ac5-ac66-05645a1ca89d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a0a638-fbc6-45d0-aa8f-1d99b1139297", "sighting_of_ref": "indicator--379751ee-7198-44e3-b614-d6b00f5f0465", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bb90e6-f24d-4783-8fa7-df2bfaa0c40f", "sighting_of_ref": "indicator--48d20f5e-7ddb-45ae-a462-4ae7c00b1103", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49b5c5c-4808-4734-afd9-eefdb37d41f9", "sighting_of_ref": "indicator--21b29b32-dee5-4417-8a3b-948ff9a3db14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8be7b95-1715-4ed4-a35f-20d039830e09", "sighting_of_ref": "indicator--ed4cda72-3353-4b0b-952d-cccd4773753d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442165dc-dba7-48f0-8f74-f2e4c6eee6ec", "sighting_of_ref": "indicator--44bfea6e-d4ad-48f9-a3c6-10e2c3efe618", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda93ae1-1ace-4139-9dd8-27bbb33c0f11", "sighting_of_ref": "indicator--220ea8d9-f0af-4304-aac7-94669d6eca61", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c14764b-fa2c-4b9c-bfce-05bde796a79a", "sighting_of_ref": "indicator--a92b0dad-f1f9-4a1c-be2f-fd432d7c15fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6af2a6-ef5a-48af-981a-63f96ef8ac4c", "sighting_of_ref": "indicator--07204e61-597d-4f0c-a26b-b813f2417579", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91fa45f-8528-4682-8901-56cb1388cc87", "sighting_of_ref": "indicator--70548ecd-8458-40c0-90f0-aeaa123df816", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf4b1a7-a304-4df8-ab6c-064f6544097d", "sighting_of_ref": "indicator--a3ea794e-7cd2-4917-84ea-48dbfb2cb6b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65450fc4-3a16-44c7-8b40-d1f6c2d2ddd2", "sighting_of_ref": "indicator--3648a027-9ea6-4cdc-a1bc-654c98153621", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d46d2e-e97e-4e30-83d9-670533c4fb84", "sighting_of_ref": "indicator--7c82cf78-6caa-4ec9-917f-6ce31c4c9ed6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592cf641-2f26-4f40-9f4e-04bc0f3b3bb3", "sighting_of_ref": "indicator--3749aa6d-8362-497d-81cc-c62ecadc3894", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7d0c0f-6f8f-4ac4-9b7c-abdbff789d06", "sighting_of_ref": "indicator--3bf75b55-4af7-49ad-921a-c1d90a8be21f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41435a5d-cf64-423e-bc98-f0a604ccb5d8", "sighting_of_ref": "indicator--b0ca8ecb-f1cc-405b-a861-ca725b64be8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4502a795-5912-4baf-a615-2cf0db44ec50", "sighting_of_ref": "indicator--117e3338-c80a-40aa-b6a7-b44163d57938", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c432e9f9-7e47-4dfc-934c-d1ebbbe60828", "sighting_of_ref": "indicator--fff541e7-f976-4783-8678-37f66c9d45c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbfbf5e-6582-4896-9551-502ae7485beb", "sighting_of_ref": "indicator--394ddbb6-daec-4937-afd7-565ecd8f9de6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8f6ed9-b36e-4277-a9f0-44daa1511b7a", "sighting_of_ref": "indicator--d3224863-d61f-48bc-8f9d-a2a44a3c6826", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df016ee-288b-4f2f-a9a2-c7e026b7a15c", "sighting_of_ref": "indicator--84008c16-01d0-4019-b3fb-c886f0f84987", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1066fc1b-5317-4b71-bd91-19118af398d4", "sighting_of_ref": "indicator--55b09f5c-97bd-4b0f-8841-17b7cc880d3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cadaf1-8096-4535-ba14-4dbb90a5e07f", "sighting_of_ref": "indicator--a70420ce-94fd-46c2-b9c5-b2af6ea9d9ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2825a6-73dc-4859-a544-b5ccd7a6b0c9", "sighting_of_ref": "indicator--8d0c233a-9223-45bf-8926-511aaf04c82c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9dfc44-764d-4c9a-a676-499f9f33257a", "sighting_of_ref": "indicator--f56f48c2-1b6d-4805-af87-44919d97a2a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84d0c50-1247-4670-b62f-f63280a1f6a2", "sighting_of_ref": "indicator--ccd53b5b-f329-4326-9d70-7fed3e1d0ddb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da612f8a-58c4-4b38-bb58-b60d762bccc5", "sighting_of_ref": "indicator--6eea4267-c32a-4662-90c9-d54699468eaa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c61d67-4fa3-4f52-a3a3-b0d2c2a2542f", "sighting_of_ref": "indicator--c7584eea-13ab-4328-b8ce-3b92bae3faf7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064addc7-ca1e-4bd5-a101-1065088aead6", "sighting_of_ref": "indicator--99777308-e17e-476e-bca1-35cff4238fc3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec6e397-41ff-4211-b320-776b834964ec", "sighting_of_ref": "indicator--de2a3d37-0c8e-4ae8-bb5e-07eccbd652a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e336bd0a-451b-432e-8c92-5e0695b943dc", "sighting_of_ref": "indicator--206d93f1-2614-49cb-971e-7217e3fee66e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0efc56c-d6be-4272-b1c1-76729f092f15", "sighting_of_ref": "indicator--e322caba-4cc1-422d-91d0-b377bbab157d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faba62b2-6c66-4dfc-90a7-a5fd0e3bd729", "sighting_of_ref": "indicator--e322caba-4cc1-422d-91d0-b377bbab157d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a7399f-6172-4853-a810-dbd33b1b6f14", "sighting_of_ref": "indicator--fc3da4e1-be69-4c41-b040-e2758904d3ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12144f0-c37c-48b8-8c27-b667cce6c46a", "sighting_of_ref": "indicator--cd7c22b1-a06b-4641-873e-58752ee839a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39d0a74-dbf6-4dd0-8397-c859e2d91d1c", "sighting_of_ref": "indicator--0c7e82aa-d072-4e54-9790-4bdc901776a8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf608606-327c-4d9b-bc74-1a0f06acbdda", "sighting_of_ref": "indicator--b85c54a5-8c7a-4eda-89c5-c353f8c75550", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1ceea1-8bd8-47d6-8457-9b8998c153ae", "sighting_of_ref": "indicator--d408d0f6-0b02-4bc3-bc08-3bf9f99ebc21", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4fdb5e-ebb6-48b7-a2c7-ea16a7a59b43", "sighting_of_ref": "indicator--664f49cd-e37c-43f7-a9f5-71422ea38bee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e12b749-0a40-43cf-99c2-e51996ae48c6", "sighting_of_ref": "indicator--664f49cd-e37c-43f7-a9f5-71422ea38bee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06568449-0020-4ea7-9bb1-cf886e0abcf1", "sighting_of_ref": "indicator--5c122bed-835c-4cb0-a98a-6241e10f21bc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610997ee-70cd-4576-b6c1-dcdeed63b4f6", "sighting_of_ref": "indicator--23ef2c6f-6867-44ea-a989-2197671e15b7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02f07e3-d565-45f0-ad58-a3bd50f85f0d", "sighting_of_ref": "indicator--dc5ec15b-8ee6-48f7-8b60-f8895fe4b402", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd15b2d8-d764-45ca-b18d-d638826c9bbb", "sighting_of_ref": "indicator--7ae99dd8-5356-4b78-ab20-c3694210d9a1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b59778d-b50d-4eb2-b8be-6ea6107b6415", "sighting_of_ref": "indicator--7ae99dd8-5356-4b78-ab20-c3694210d9a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6445aa-1aee-4e1d-a4aa-3357513f7464", "sighting_of_ref": "indicator--75217cc9-200f-4871-a531-dd2e40b51838", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424d8df2-a1a0-4885-ae89-15f636af8832", "sighting_of_ref": "indicator--05365a04-4be5-4d2f-b2b9-c7401d409a84", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d91e517-048d-4c32-bfcc-5d89d53b6354", "sighting_of_ref": "indicator--05365a04-4be5-4d2f-b2b9-c7401d409a84", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06618f0b-5ab8-4d7f-9189-590a58a7e258", "sighting_of_ref": "indicator--82ea9a07-73b9-418b-83c4-4fdffe610d26", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a8b12a-dbbf-4e5b-9fe2-c9e3119a8fc6", "sighting_of_ref": "indicator--c18f0ce8-90f1-4db7-b7f2-7d68662d7507", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b110dc43-e6a6-452b-b3f8-fe51ce2d9fa9", "sighting_of_ref": "indicator--c18f0ce8-90f1-4db7-b7f2-7d68662d7507", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e923b8d3-0c52-4a95-9561-3aecc6c7dd80", "sighting_of_ref": "indicator--c18f0ce8-90f1-4db7-b7f2-7d68662d7507", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e7372b-d3e4-47a2-8da1-f0984314f7e9", "sighting_of_ref": "indicator--f853123b-9797-4d31-877f-7f18fc1ae992", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3b5831-463e-46a4-ae30-1e5ade13f50b", "sighting_of_ref": "indicator--f842f376-1451-485a-9fab-706be6dce98b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f31f8d0-2f78-405c-a0e1-539df24a4e68", "sighting_of_ref": "indicator--fffa2b1c-d8d4-4525-9fe0-cc6f6cbba217", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d77d58c-6f01-4912-938e-18a5a46fd4d4", "sighting_of_ref": "indicator--fffa2b1c-d8d4-4525-9fe0-cc6f6cbba217", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd439d3-dc24-46cb-9135-3ab309008295", "sighting_of_ref": "indicator--fffa2b1c-d8d4-4525-9fe0-cc6f6cbba217", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b643e5a-37c4-4bc5-98e8-f12e09fee55a", "sighting_of_ref": "indicator--ad3bac28-99b1-4dc9-9d1e-f1e7939d0d79", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0621e1-a6b6-4155-8e92-559e507d49cf", "sighting_of_ref": "indicator--bd4ab394-8bb1-42b6-9067-df92f67d1fb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e540f5d-f296-4d22-9f44-3d5cb8e4a40c", "sighting_of_ref": "indicator--bd4ab394-8bb1-42b6-9067-df92f67d1fb4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef018b40-d14e-496e-ba41-05e1492d7340", "sighting_of_ref": "indicator--b2161177-70e8-4594-b2c2-7a76d5e8ab31", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e67780e-e1b1-41e2-9d39-dfe39e2ece01", "sighting_of_ref": "indicator--b2161177-70e8-4594-b2c2-7a76d5e8ab31", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233f5ec0-5f2a-4481-b0f8-eb1207cf3163", "sighting_of_ref": "indicator--b2161177-70e8-4594-b2c2-7a76d5e8ab31", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff868d6-6fd9-4374-b1c2-ed60eabdae6a", "sighting_of_ref": "indicator--da3bca3a-c7ea-4bf0-98d0-b385cddd5f20", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23131fc9-6686-4a54-a3d1-95c3ba8e8fac", "sighting_of_ref": "indicator--bdf40be5-3992-4b35-885e-61058bf934b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87305932-b27e-45ce-adfb-9d190e38fcad", "sighting_of_ref": "indicator--fc29086f-7bea-4d1b-abbd-2ee925a79a11", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2ce99c-99b2-4460-a29b-277f5bf184cc", "sighting_of_ref": "indicator--89bb415b-937a-4e62-b11f-9649b51ea4ce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636973bd-e07e-4b31-8e86-5f4169d2eee7", "sighting_of_ref": "indicator--94ae44a8-f3b8-4efb-84f3-3af635ac83b8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4789c358-8b58-4926-a0bc-a287a161f93d", "sighting_of_ref": "indicator--bb26031f-84c1-4c4f-adad-265b945da3f0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531afddf-6aeb-478c-bfd8-6be7449c7d38", "sighting_of_ref": "indicator--bb26031f-84c1-4c4f-adad-265b945da3f0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7c58e5-a4b5-47be-aeef-9881254983da", "sighting_of_ref": "indicator--65d3fcf4-c6ee-40c9-aa0e-d91e22b89025", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607bb8f7-62ce-4e9a-b85c-13e69b7d4330", "sighting_of_ref": "indicator--7b42630a-6a92-417f-b1d7-d902f321e983", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36888fd2-f9ca-4ac3-b850-d7bb4189c09e", "sighting_of_ref": "indicator--e7aec91a-da0d-458e-bf4b-9da6c030ca21", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1984f009-7389-493e-9551-11af3a592929", "sighting_of_ref": "indicator--a4f6dee5-c8d5-430d-92e5-5d72a89de47a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921e9b78-1caf-41f4-8763-f5e5b1b2c15f", "sighting_of_ref": "indicator--a4f6dee5-c8d5-430d-92e5-5d72a89de47a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e87f118-1834-49e0-8a63-3988a39f1d5d", "sighting_of_ref": "indicator--17cdcd5f-ce88-4a86-803f-9d7d77d0c545", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90faa8a4-3b03-48e5-a4d2-843b57315298", "sighting_of_ref": "indicator--367c64a4-26d6-42a8-88c9-1c6456dc19fd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9bb82d-fb35-4ede-b89a-c152d9b3d8e9", "sighting_of_ref": "indicator--9ff0721e-22ef-483e-a879-881dc0aa4fe9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864ddfb3-d8e8-4e1c-a064-e285a7a37ad0", "sighting_of_ref": "indicator--8bc5e98b-aa05-4fb8-87e9-9f435dae9884", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4958d622-08b6-4de0-a217-9b204f882442", "sighting_of_ref": "indicator--13b0fa9b-620a-49b1-97ef-65970b6c2eef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5815fcb-5ca8-4fd2-b8a7-28e5200f42b7", "sighting_of_ref": "indicator--f67e8940-c2f0-4c6c-8eff-5666a69a18cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8eb9c7e-77b2-4beb-849a-8711c702eb20", "sighting_of_ref": "indicator--a0e5a47f-b500-4141-bf00-2e08651354e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2ff143-ef4b-4e62-843b-bd3308af2aac", "sighting_of_ref": "indicator--c155b1c4-cdbc-4da1-ad14-5b49ce5adaa5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e031810-d126-498e-977a-53d6c1d98186", "sighting_of_ref": "indicator--c97a64fd-eb28-400c-bb3c-a83b3517eae6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4d3d6d-a2d4-4fe0-ab87-710216a2d381", "sighting_of_ref": "indicator--b3e0b180-483f-4576-a8d4-7d14443ee4bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f598f564-82f9-476c-bd07-26d2ce6582bb", "sighting_of_ref": "indicator--d8b2e6cf-04b4-4af6-8bf4-d341f8bf09aa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ce06c6-c486-462d-bc09-7dcd940522a4", "sighting_of_ref": "indicator--747287e5-c018-4676-8e94-de5543c3ccf4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2bfd8b-00ee-4a8d-ae18-24630337152f", "sighting_of_ref": "indicator--aa1e391b-2fa3-4622-bbcf-d1e5c6d164fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf518f8f-cbe1-4d70-be2f-bd2c34c7d4f7", "sighting_of_ref": "indicator--33fd6c0c-19c6-49ea-8f2f-407655392761", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1edf98-f372-4b26-b1ac-8b0c8f5d224e", "sighting_of_ref": "indicator--9cec9cf1-ad08-46a5-8ff1-dc0b2770d47c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b05e2b5-8bc2-4ea8-9f7f-7987eeaa8762", "sighting_of_ref": "indicator--18295d88-58fb-42b9-ab19-63e8036b6554", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cecc23-52f0-4db1-a90a-1a367550cdd7", "sighting_of_ref": "indicator--de717013-99f4-4d77-beb2-fc7a62ce0be3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300032db-fac7-42e7-b5ea-68dfba728129", "sighting_of_ref": "indicator--ef786ef2-e121-4e21-8569-d40498b91cd7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dffda88-f392-4631-aff4-6466cbe14896", "sighting_of_ref": "indicator--8466f75a-629f-4883-abbd-d17970ae2f06", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32823934-4080-48c5-8f0c-1b0f046b32bb", "sighting_of_ref": "indicator--6d940195-b049-4ca6-b36b-a7223adb8f36", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394ae459-44a8-45bc-8c5b-08f5011a8c8c", "sighting_of_ref": "indicator--2b074c2f-862e-4954-9721-e22a3b5d2ac6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0896fe-0871-4a5b-8ff8-29b4ce93b56a", "sighting_of_ref": "indicator--1697d35c-9a34-4c07-8e2f-d40fdcc1e03e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015a8aab-f30f-4e13-bf67-47787fdf0fc7", "sighting_of_ref": "indicator--d1df5b7f-2794-4241-a26c-ae7afd3c02eb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace6c9e8-f3f0-4621-9296-0c6331340f8c", "sighting_of_ref": "indicator--67949279-c9f1-4326-9d48-d07390a01e57", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b97ce5-bc9a-42b8-b17e-43dbd1f5246d", "sighting_of_ref": "indicator--1e943177-c767-4a66-9a3b-cf82d22c4861", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c1a1a8-7817-4a3a-9f67-5f27e692dfc9", "sighting_of_ref": "indicator--f9d2c825-49f2-40e1-8949-28fbdaf08275", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb1dae4-c98b-41c3-bee5-e1bd868487c3", "sighting_of_ref": "indicator--3a157b34-f3b7-40d4-9ab5-b3e257e4dec0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072f87e2-f6b8-4474-a10f-a1fd9a817eae", "sighting_of_ref": "indicator--66fbbeb8-6ddc-4ecd-80d5-36ea3bc7b8be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011c810e-3730-4d8d-95b8-694efbc77911", "sighting_of_ref": "indicator--a15601ad-027f-43a9-879a-a99b97aace92", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d822db94-d12e-4294-900e-b2b1ab44073a", "sighting_of_ref": "indicator--c2101901-6f09-4719-890a-deb004ec88a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c73910c-26d5-4010-83aa-15f4aaea0bd5", "sighting_of_ref": "indicator--1be1e937-2979-4f12-9734-44158a3409c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e091e6e-bd7e-49ca-b88e-478a78ee5e47", "sighting_of_ref": "indicator--0fdaa2fe-4491-460d-bd38-256fb182525e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3d0259-a674-47b5-8c62-f93c4efa3889", "sighting_of_ref": "indicator--c26e3517-5e9a-4f6a-a5a0-a611593c3db0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce20ecbb-33f5-4998-b406-1930339b24d2", "sighting_of_ref": "indicator--19ed9ee5-b2bc-4363-84fe-af60e4dd9b84", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca3560d-03e4-460e-98f1-067d1024ee34", "sighting_of_ref": "indicator--471170d7-7072-4d98-9a5b-160f7fb35f17", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c00a16-84b3-42a0-b7ac-4de6698cf6a0", "sighting_of_ref": "indicator--aaf1b502-9b22-423a-a434-f40beaab0357", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a975ef6-ee48-4aa1-af0e-483884055e32", "sighting_of_ref": "indicator--4d22ca44-5892-4388-bdd3-565363bc1805", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f522a4f8-697e-4592-ac46-cb47b7b869cc", "sighting_of_ref": "indicator--00c9d49c-7f23-421a-8250-111e205e4646", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d320eaf5-b975-4814-82c9-e077fa9e11a5", "sighting_of_ref": "indicator--6e35d3ac-0b1f-4127-99a8-c949bbb41511", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7faa57a5-21a2-4bfe-a6bc-aa4f5586e9ca", "sighting_of_ref": "indicator--aa92a675-530a-46c2-a965-1765f6111b92", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de589f47-65db-47a1-bf58-60ceda719e1a", "sighting_of_ref": "indicator--9894e6ff-6107-45ef-a0d3-69df79a75f04", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07acc7a-5218-4e81-b9eb-0ca51fa2786b", "sighting_of_ref": "indicator--a3ab5e39-a33d-4076-923b-352fb188b486", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee98f2a-56bd-4ba9-8cee-2b3c293e80d6", "sighting_of_ref": "indicator--47cb3073-7dc9-4548-9946-2d0987ba9213", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7008495b-0a41-4075-8b56-6b57fbc3f6dd", "sighting_of_ref": "indicator--0787b0c8-2d01-436c-a9e3-60a7b55c5482", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71859a4-2cb9-4162-8e04-441c795c7920", "sighting_of_ref": "indicator--32c41cb5-9af4-4bfc-b7b0-a4defd392870", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879594cc-f26d-40ca-b51d-ad18fd6fa826", "sighting_of_ref": "indicator--4630a25c-7e5c-4025-b17a-d3f6dc0f8d21", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56188937-265e-4b02-90fa-ccbbdad7468b", "sighting_of_ref": "indicator--da254da5-dc53-4013-aac6-1edca7cb601e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd7634a-274e-4606-aab2-f35c4122b21e", "sighting_of_ref": "indicator--cb598e24-d476-4eb9-ab58-4c2bb6a296e0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fe48ba-1ad2-4ac5-b055-4638b8cea301", "sighting_of_ref": "indicator--9c6a5936-e463-4089-8afa-c260aa37823a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7118b697-179f-41af-95e7-6e3ec2604e47", "sighting_of_ref": "indicator--9c6a5936-e463-4089-8afa-c260aa37823a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43b9bcd-c1f2-4ea6-8f1b-74449f939628", "sighting_of_ref": "indicator--cfab3920-c927-40ac-99bf-70a3a6c8051c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87606c17-13ab-40c7-89de-823bc20e79e6", "sighting_of_ref": "indicator--fc15459a-d868-470e-9be5-98ee612d1750", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a20ca3-aad3-4cc3-bb7a-c1d626176dea", "sighting_of_ref": "indicator--1909b77b-9b82-47ee-9099-afa30eb413c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e25665c-e387-4efb-8e5f-c98bc18d00cc", "sighting_of_ref": "indicator--b2381ea4-36b1-415c-990c-3ca02be550d6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41384333-78dc-44d5-b34a-c538446a2c0f", "sighting_of_ref": "indicator--6294c917-823f-437e-a28b-b8a88c7fccb7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff88a55f-a057-4335-bea3-74e3913d5df7", "sighting_of_ref": "indicator--6294c917-823f-437e-a28b-b8a88c7fccb7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41df9fea-3474-442d-aea3-b5abf4fd3fbe", "sighting_of_ref": "indicator--6294c917-823f-437e-a28b-b8a88c7fccb7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04edb069-bdb8-4b66-b89b-5e3aa37f4c80", "sighting_of_ref": "indicator--a1e558d6-4343-4cfd-be5c-f8d18c612f63", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc79288-dbcd-42ab-bcef-9e6f5f753590", "sighting_of_ref": "indicator--e560bccf-f08b-4d66-b292-7bb0742418ff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798dbdb2-7194-4119-9127-8bec951a052d", "sighting_of_ref": "indicator--73dfb859-c342-433d-acda-72ac0233a961", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08e6cd2-05e8-4c51-a93a-143a476deacf", "sighting_of_ref": "indicator--7d430e8c-5a8f-4f9a-aba9-09e1fef778c7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6338321c-afd7-4e32-90d5-9e3748860988", "sighting_of_ref": "indicator--8ceb92fb-47c1-4935-8b55-d03dc73313c2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458f635b-481f-4db2-8bf3-4df76d51f85b", "sighting_of_ref": "indicator--11956bc6-3fa2-4d0a-89eb-d6ebc85d81f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ce8344-5430-4be8-9ebb-79460110a26b", "sighting_of_ref": "indicator--b5e55d8d-812c-4d46-bc1d-ec876754f751", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba1224f-3659-48a4-a341-2332760e5878", "sighting_of_ref": "indicator--e42069f4-8e85-44da-a3b7-90533040eefa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88258e76-2fda-4b57-8a9e-4138fba1d684", "sighting_of_ref": "indicator--89ce5df3-bc8b-4011-be5a-c585c33d1061", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa6436c-0977-4683-826a-1c7ece9453cb", "sighting_of_ref": "indicator--19ed5754-82ba-453a-80cf-42744c1a6424", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a5a47e-ca23-4385-9c35-e47cb5c5de26", "sighting_of_ref": "indicator--19ed5754-82ba-453a-80cf-42744c1a6424", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13334b3-aff4-4e6b-87c2-59833a303b9d", "sighting_of_ref": "indicator--100bb8ef-f54e-4629-9a28-b7a61de1512c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a2fb46-a50e-4f95-8d4f-b1a1ae01b232", "sighting_of_ref": "indicator--bec1668d-ffcd-41c6-aef1-aeb03a155fa4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ceeefca-db28-4fe2-8519-524df35cf061", "sighting_of_ref": "indicator--323d39a5-3737-4757-92b8-ddb54a25f7fb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46dc1f10-39da-4523-a326-d66f5d5e859c", "sighting_of_ref": "indicator--6bd8a66a-65d9-490e-93e0-1511e1b1531a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905f89df-9cbe-4985-bf3e-b0785f48cdd8", "sighting_of_ref": "indicator--7840ef4a-36cb-4f01-bdb8-bd314cfa7de6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66214a55-1ed7-4711-abdc-2359b6299dee", "sighting_of_ref": "indicator--7840ef4a-36cb-4f01-bdb8-bd314cfa7de6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3754fa8f-b751-40f7-91b2-65613b309242", "sighting_of_ref": "indicator--94cf91ea-3934-44c6-a49c-e4c65802352f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bc35ef-e752-4dfb-8fc4-3de0cc4496bc", "sighting_of_ref": "indicator--94cf91ea-3934-44c6-a49c-e4c65802352f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64d9f37-bc3f-4ac7-9576-fcaa934aadb5", "sighting_of_ref": "indicator--94cf91ea-3934-44c6-a49c-e4c65802352f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2c5446-9d16-4855-b624-931d214edb1d", "sighting_of_ref": "indicator--2cd7dca5-6ccf-488e-8ec5-774f8056a44a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd2aa5b-8af0-4fcf-b77e-441d364bbe61", "sighting_of_ref": "indicator--fc1cdf08-cec6-40eb-9fa3-ca62bc8bc7ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e470e1-315c-4a2b-92da-44ed39c5c328", "sighting_of_ref": "indicator--f0e587f2-8104-4632-acb6-8c9f82d559b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263a3cbf-25c2-42a4-ad30-f0e061523640", "sighting_of_ref": "indicator--f0e587f2-8104-4632-acb6-8c9f82d559b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4336711f-3716-46cc-961a-dd13061c70db", "sighting_of_ref": "indicator--9f95da91-44f6-4d74-af0f-af5e4fb6e981", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefeafdd-9928-42d5-824d-e4bbef506e70", "sighting_of_ref": "indicator--9f95da91-44f6-4d74-af0f-af5e4fb6e981", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e897dc6d-4fe4-4bd0-9a90-fe80cf98c75b", "sighting_of_ref": "indicator--f14adf61-c605-45e6-a57c-c6ca959b4121", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07737a28-2002-4217-b9e0-23c48800d8d1", "sighting_of_ref": "indicator--c2b5c86a-d93c-41aa-b220-db035e778ba4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a98bc15-6ba0-4df3-9ce5-0f81765428ac", "sighting_of_ref": "indicator--584e878b-2e93-4220-a4e7-b2d33b5c8c04", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474a217c-beb4-4be4-a433-1f6dd7a66415", "sighting_of_ref": "indicator--aea3daec-5f83-40d7-ac7f-3dc2b527d3a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fab98c-e3d7-43ae-b51d-427012807b89", "sighting_of_ref": "indicator--69e51710-b142-4c6d-b97d-3f2aa3cce586", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c153a4f0-36a8-4fb0-9cd2-e641c40d8733", "sighting_of_ref": "indicator--1332ab9f-85bc-4b29-948f-53c76deb34ea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240ad34e-38cd-4d94-8fe4-c5decf86e13c", "sighting_of_ref": "indicator--abdd3d1c-8c6a-4251-825f-de8a0a0f26d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248009f8-3264-4823-b1fe-5f67ffddfa33", "sighting_of_ref": "indicator--d4481083-f821-4dda-8e3d-7165083943f0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d90aa1-469e-40b4-91e1-66d6e887e7e9", "sighting_of_ref": "indicator--d4481083-f821-4dda-8e3d-7165083943f0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63274dd1-40a2-4603-9804-31e0f721503c", "sighting_of_ref": "indicator--ac67f338-299f-41c0-bfbc-abcdc38bc3ab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1b2f5f-448c-4ec5-9aaf-a9f0aa0ad42b", "sighting_of_ref": "indicator--ac67f338-299f-41c0-bfbc-abcdc38bc3ab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b275753-eae3-4d4d-8ae1-d6d619872375", "sighting_of_ref": "indicator--ac67f338-299f-41c0-bfbc-abcdc38bc3ab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36eb6dd-7226-43fb-976d-86811c3bc29a", "sighting_of_ref": "indicator--0545a68f-ccf2-4e00-b68e-b6ba4f477cc3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f20c92d-eafe-4ad7-87fe-2a3fc2fd2a1f", "sighting_of_ref": "indicator--0545a68f-ccf2-4e00-b68e-b6ba4f477cc3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a9ba14-20e2-4830-a798-c238c33e3124", "sighting_of_ref": "indicator--142244b9-c489-4b3b-afa0-590285cf2c2a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9552a9f-9777-4d56-8910-dbcee2a82ff5", "sighting_of_ref": "indicator--142244b9-c489-4b3b-afa0-590285cf2c2a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d1b585-0bd8-4610-838c-2da30a7613ba", "sighting_of_ref": "indicator--0708fda4-4beb-4a0e-80b6-30ab68ba4bc2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe99e12-49b6-4fae-b6b0-e2b65fcbb4b2", "sighting_of_ref": "indicator--c3ac6708-d6db-4de5-9ec6-7ddf7392c9c2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3d066f-1fb6-4eb1-a89e-c63895e63b16", "sighting_of_ref": "indicator--2718ac22-00ad-4f5a-85d3-8e3e016ce6f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc189fd-3140-4eab-b350-8936bf09b258", "sighting_of_ref": "indicator--fe63f890-9716-475f-9b8f-6cdb000c4a16", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238a4691-dd69-470d-9796-4b686f863462", "sighting_of_ref": "indicator--1c0bd385-29c5-463e-8161-4d58d1f048c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd1952b-8419-45d1-b8c8-bdbab18cb159", "sighting_of_ref": "indicator--f7ea53df-3277-498c-a5cb-4fb06ea9ee5b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bb66be-da75-4ce5-a25d-b3056cb25e7d", "sighting_of_ref": "indicator--67814ea9-9e7f-4064-a5a9-d8acc64d128b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781d3e16-9698-4cb6-9921-607692bd7095", "sighting_of_ref": "indicator--e69dd95d-5601-4130-b2dd-19b7148325ff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e21fe8-1008-4fbd-91a7-18cbf2db1d10", "sighting_of_ref": "indicator--8b5c3451-c7af-4ca8-8ab4-7fbbea94dbc5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bceb7473-3058-4fee-aa82-1bc862577a51", "sighting_of_ref": "indicator--24a80cb0-ea15-43f4-a085-bb40314ed3f9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42760485-d935-4cca-bb04-b91223710562", "sighting_of_ref": "indicator--99a9ba8c-abe5-4a8e-b45c-f00b807de9fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2195e4b-bd72-430a-a192-b268716ae263", "sighting_of_ref": "indicator--3d3d4ffc-f92d-4632-8989-890f914a7293", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee1deb2-3b2e-44e3-88ed-2bef6adc5237", "sighting_of_ref": "indicator--a140e7a4-c302-476f-8f66-d6e93566a80a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7fee9f-68a0-4372-a471-8b66cf762f5c", "sighting_of_ref": "indicator--7505f513-3efa-4bab-a2db-508bd5e6fd89", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1288c2d-2027-4582-a39f-1c22a2196649", "sighting_of_ref": "indicator--379c468c-7fd1-4ea2-962c-c945f5a88b3d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9a362e-703a-473c-8dd1-4fe91726f343", "sighting_of_ref": "indicator--b4dd9a9f-92b3-4f33-a24b-7acb7bf909e0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9b9661-e385-417d-ab24-76458ede87a1", "sighting_of_ref": "indicator--a8afffd8-1b73-4448-998c-fea9a7fe0f93", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df59617-b6ea-493f-a855-66c7a557cff1", "sighting_of_ref": "indicator--1beaab51-7413-4ce8-a2c8-20639ac0305c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee737e2-af36-400d-9c68-88db438e531d", "sighting_of_ref": "indicator--60f942ce-c147-4741-ae3d-994d30e706be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91e2197-57fd-429a-83e4-5ed10c6a6878", "sighting_of_ref": "indicator--1b59a753-8e49-4559-9594-2a6310f58a4e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfed7d5-9dbe-47fc-9e5a-56a61249a6ad", "sighting_of_ref": "indicator--4c0755c6-9007-4890-9e9f-726a03535d4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cb1135-aaf0-423c-a592-45c160fb5c41", "sighting_of_ref": "indicator--4c0755c6-9007-4890-9e9f-726a03535d4b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1987f393-8968-43ba-9bee-c3ad4118a099", "sighting_of_ref": "indicator--1b8e4091-2229-4670-a268-e0e30c2be447", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7615ed4-79a4-4c41-9647-5a8f8967df8e", "sighting_of_ref": "indicator--12658f81-e809-4503-8e93-bba0d17ed760", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2d5aa8-ac27-4e20-84fb-68eb4ba8ece1", "sighting_of_ref": "indicator--61469166-b87a-411c-a489-f5ec66ec4329", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50c4e29-31a9-4703-a60c-6e4eebe2eea1", "sighting_of_ref": "indicator--e53de8e2-6afa-4947-8642-dbf4213e6e66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6aa31a-b1ce-405d-823b-3f5999422130", "sighting_of_ref": "indicator--e53de8e2-6afa-4947-8642-dbf4213e6e66", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42713aa-8d4e-4efa-b1b4-3a349c438a5c", "sighting_of_ref": "indicator--48ce7a97-4b51-41a1-b685-1ab3023d81df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154b8377-d698-471c-870a-806e4093118d", "sighting_of_ref": "indicator--48ce7a97-4b51-41a1-b685-1ab3023d81df", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7ec838-a3c2-42d7-91ad-5c4943b9f6c3", "sighting_of_ref": "indicator--de3a05ba-b4bc-4937-ac1d-d77db2a2c261", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19a51ff-9610-40e6-b816-572c070748ce", "sighting_of_ref": "indicator--de3a05ba-b4bc-4937-ac1d-d77db2a2c261", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f385da-9f62-4778-83da-9b1e634f75f8", "sighting_of_ref": "indicator--8d2b61aa-75b0-46db-8bd6-c42dc71fe0de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd711dd7-4ef4-44d7-a8da-cd5abea0d9f2", "sighting_of_ref": "indicator--8d2b61aa-75b0-46db-8bd6-c42dc71fe0de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf04eea-9867-4546-93c0-774785284e02", "sighting_of_ref": "indicator--e465bc71-fdd6-4d53-921a-4a4139fa7e2c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb83431f-169e-49e7-8a39-e3af723f24c3", "sighting_of_ref": "indicator--94381c7d-0058-4b6b-a9a5-dc356f075395", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71642f9e-46e4-41f9-9b45-e72616000b32", "sighting_of_ref": "indicator--1091889c-9308-4565-a141-497cbe7f8047", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c4ac9a-19d9-42ae-8ad2-6dffd5c42c45", "sighting_of_ref": "indicator--201546da-3f07-4137-8ad2-51db1b9012eb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545d78ef-4436-41d2-88da-ee2262ffa71a", "sighting_of_ref": "indicator--45e52823-ee35-456e-ae17-aa15f927675c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec012a7-ca55-45e6-aedf-e4d55e3240e5", "sighting_of_ref": "indicator--45e52823-ee35-456e-ae17-aa15f927675c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6718096-4c41-4d55-90e0-b88991b39a9f", "sighting_of_ref": "indicator--dbf220d2-f13a-4326-83c6-dfe59978e685", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4688b12d-4f01-405d-a6ce-942ed222c7e9", "sighting_of_ref": "indicator--fb2711a9-403a-4f73-9a85-c37c09cf6994", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f0b0cd-d8fb-40f7-a4b6-7ed9d7202513", "sighting_of_ref": "indicator--fb2711a9-403a-4f73-9a85-c37c09cf6994", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f24aa4f-5594-46b1-b780-2882b5df31ac", "sighting_of_ref": "indicator--21d4a558-17c4-408d-bf1b-f0048394da58", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d01bd73-3bcd-483a-bf9a-35d6b815cd61", "sighting_of_ref": "indicator--45af8b3a-0f9a-4674-858e-eae42d84f272", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ca7bdd-64f4-48d1-b624-5b43600bda48", "sighting_of_ref": "indicator--2d97f4db-20dd-478a-9bd0-e85801136fbd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5704f962-5848-4c3c-860a-bdc2cfe42b1d", "sighting_of_ref": "indicator--f0a75480-c642-4faf-b0ca-4b1b82df0b49", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30250125-c80a-4be2-83ec-851fc6845610", "sighting_of_ref": "indicator--f0a75480-c642-4faf-b0ca-4b1b82df0b49", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d897afd-39f2-42e0-adca-89cfa02c3db8", "sighting_of_ref": "indicator--f995865b-a557-4362-9e9b-d9c3a073f47c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd160e2e-f557-4c9b-8fe8-039dc516ddd9", "sighting_of_ref": "indicator--bdbd84a1-fd50-4a0e-9aab-9c7527b87226", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b879f9-6794-4ee5-8b45-6bf20dd33dd8", "sighting_of_ref": "indicator--cdd21cd6-c3b0-487a-8a0c-e5d02520e572", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5d55f5-10ab-4fe3-b202-8fd3062b6ec9", "sighting_of_ref": "indicator--cdd21cd6-c3b0-487a-8a0c-e5d02520e572", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5824a9fc-9519-45c0-9d7f-e75816505db9", "sighting_of_ref": "indicator--a4eb61aa-258b-4593-af11-53d0dbdb7c21", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6381afc6-715c-49b0-831e-6c448e80f5d4", "sighting_of_ref": "indicator--a4eb61aa-258b-4593-af11-53d0dbdb7c21", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6110c263-6417-4a20-a7ad-3a3b84f1744e", "sighting_of_ref": "indicator--8716152d-5733-4ecb-9537-3751722dc704", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cde082-3644-4ba8-9367-4e3578cfb9e4", "sighting_of_ref": "indicator--47dba901-25a2-4a9c-a552-356173f021aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380d291d-4dfe-4fef-8ee7-094bb58f7437", "sighting_of_ref": "indicator--329f23a6-94d8-4a66-99e3-117223d1ea72", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3fe821-5fc3-4e63-8087-11956425aba6", "sighting_of_ref": "indicator--329f23a6-94d8-4a66-99e3-117223d1ea72", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4dc47f-dc0a-4ddd-a602-fdfab46b2439", "sighting_of_ref": "indicator--329f23a6-94d8-4a66-99e3-117223d1ea72", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721222e7-2d34-41cf-bafe-d880691c4179", "sighting_of_ref": "indicator--f8ce966c-c32a-4a6f-80f9-4fbb81df361c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921aa48a-5872-4aa6-860b-3ab49ad766b0", "sighting_of_ref": "indicator--989663f4-6182-4a9c-a1cc-b99bf22ee31c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f274c26-47be-4337-9b21-ae5835663514", "sighting_of_ref": "indicator--c224462c-a5a3-4292-986a-a1e75ed3c693", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824e1a82-fbb2-47d2-81a0-272b5dd37cc5", "sighting_of_ref": "indicator--c913b425-1f66-4cb9-ad7f-af6b09164a1b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb2d129-1dac-4088-b990-a43d0536acb8", "sighting_of_ref": "indicator--c913b425-1f66-4cb9-ad7f-af6b09164a1b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a7fed1-5b68-45e3-8203-7523601b320b", "sighting_of_ref": "indicator--a8cbe645-5587-482b-9f67-b4d7e79134fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7431ad-2e75-4045-b279-92c07aa80979", "sighting_of_ref": "indicator--81e4c53d-737f-4e17-b81d-95b9bdadc967", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf149a2f-d27b-4017-9c40-8fee26b2c283", "sighting_of_ref": "indicator--a075b2f1-7ebe-460c-bf29-997d19032260", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c2a714-cad7-4682-b7ab-a9d9eedc3fe7", "sighting_of_ref": "indicator--a075b2f1-7ebe-460c-bf29-997d19032260", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83baa76-7719-4b8c-8088-46f83e885afc", "sighting_of_ref": "indicator--a075b2f1-7ebe-460c-bf29-997d19032260", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743fbf88-72c0-4aca-b412-760625023131", "sighting_of_ref": "indicator--1c5963cf-9b49-4684-a438-2e3fee6412fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4195500a-299c-4941-9307-86672f4fb494", "sighting_of_ref": "indicator--4a6e8f40-6f56-47c3-9dbc-f690b64bbc45", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa937c9e-0621-4d5a-b1c9-da24f2734d41", "sighting_of_ref": "indicator--f91b3e03-b9b4-4780-9952-c1a9e2546aba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c31e8c9-bafa-442e-835c-e3cd914afdb8", "sighting_of_ref": "indicator--4e868cc3-ce0b-4f04-a57c-0d6703df069e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778398b0-d6cd-46ea-b7ec-a0e0498e925c", "sighting_of_ref": "indicator--fa715e51-bf8f-4199-8540-7b484cbb4b85", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c3798a-c7f6-442f-977c-cb9e245971bb", "sighting_of_ref": "indicator--fa715e51-bf8f-4199-8540-7b484cbb4b85", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642b375f-6ba7-4c8b-a350-5fa6a1b45ec4", "sighting_of_ref": "indicator--b0668161-1ba4-4333-b467-1cc9b57e262b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e937b6ec-abcc-4a17-a00d-d4fed21c92ee", "sighting_of_ref": "indicator--c33a175f-66af-40bd-9ab2-0e3714585cec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022b5f11-b2e5-4b35-9a63-9ffb9c030a54", "sighting_of_ref": "indicator--c33a175f-66af-40bd-9ab2-0e3714585cec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76efc12a-1957-45b3-ad26-9e69ed93c8a6", "sighting_of_ref": "indicator--88fa4a4e-7c9d-4b95-9573-f6b80e960d1d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba762e1b-aa63-4c4f-95ca-08337ec39976", "sighting_of_ref": "indicator--88fa4a4e-7c9d-4b95-9573-f6b80e960d1d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9eee3f-e0bb-4309-8e8c-64eff2ef986d", "sighting_of_ref": "indicator--771d3c5d-61ff-4739-90c6-816c3e79dffc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e26d433-2b14-49cd-ba74-dda833d640ca", "sighting_of_ref": "indicator--e4bd80c7-f887-4c0c-bc65-57e16db0e97d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70e0d81-0652-4082-aa9b-44d1e570ae77", "sighting_of_ref": "indicator--fc8d3b35-8961-4f3d-b2d4-c6801bf63cdb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ffc678-ad91-40d3-b363-f7ba2ea525d8", "sighting_of_ref": "indicator--fc8d3b35-8961-4f3d-b2d4-c6801bf63cdb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d2dd0d-bda5-453d-9d8c-3f681fac7ac1", "sighting_of_ref": "indicator--92f44dd7-1c88-467c-b38b-13efc8c6e69e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df07a1ab-e351-4218-8297-222c1ffdccf5", "sighting_of_ref": "indicator--23bea262-d01e-483b-925d-0ed4a4d18220", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2ced79-d8e3-4c19-b602-ee15349aab0c", "sighting_of_ref": "indicator--85880524-b584-4401-bf45-d930ce9bee20", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cf9a91-bff2-4c3f-8f91-69f965d3e906", "sighting_of_ref": "indicator--85880524-b584-4401-bf45-d930ce9bee20", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834ce3b7-1fbd-444a-881f-5268690ff6b5", "sighting_of_ref": "indicator--85e301f5-c3bc-4fa3-aafe-1e06f2822701", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a679de-c927-404f-870d-b5ddbe12e38a", "sighting_of_ref": "indicator--578a4163-5f7c-4cc2-acdd-bcae44c2d377", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf8d618-0f84-4a9e-a4a4-61eb94eec1ba", "sighting_of_ref": "indicator--ed1cca42-9484-4290-8716-977012fa0dd6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39eaf83c-de9c-4d04-be29-b773f0c481bc", "sighting_of_ref": "indicator--c51e222d-8988-4fb4-b143-7cef2e0a3f9c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bedc77-9092-437e-b67d-79f07180a089", "sighting_of_ref": "indicator--35df8a0d-c6dd-429a-bf98-7ddb699a5df1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dec259e-e1fe-421e-8c72-0b58ea778ad7", "sighting_of_ref": "indicator--ac3e4281-044c-4662-8680-0df5efb36c2c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc76724-a4fb-4cee-a8d4-35429dbf53a9", "sighting_of_ref": "indicator--d8480cdc-40f7-49a8-ade3-8ffa709409e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5807e6a8-7e9b-4f26-9fe6-cb1a6eb4a570", "sighting_of_ref": "indicator--f648a047-5c3f-4df3-9271-8fe566d9bf3a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678f2b1d-8e96-4346-8139-8fe0ccb3d9e9", "sighting_of_ref": "indicator--7f51c1b4-6432-42e4-bb59-baf0126fe0f9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1b3fd7-e9bb-4114-bca5-f81095434108", "sighting_of_ref": "indicator--7f51c1b4-6432-42e4-bb59-baf0126fe0f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deef304e-7604-472a-8c0c-3568b0749417", "sighting_of_ref": "indicator--4911809c-d7eb-4d51-8c50-a402639bf523", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bb8372-f670-45b6-bc5a-4d91e1f22b41", "sighting_of_ref": "indicator--d1e9053d-3e3e-44a9-b0e6-fcaf5231485a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70a605a-a888-4b5e-ae1e-87ed8fe7d577", "sighting_of_ref": "indicator--d1e9053d-3e3e-44a9-b0e6-fcaf5231485a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b982d2b-e6f8-4934-bf8e-a17e0606f6d0", "sighting_of_ref": "indicator--d1e9053d-3e3e-44a9-b0e6-fcaf5231485a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde58ee0-6020-44ce-8f8a-b7ec82cabc3c", "sighting_of_ref": "indicator--8164a26d-81a0-402a-a4ef-26a35b8b5ea6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8894fb96-6a14-4f01-8223-4a527c50f38e", "sighting_of_ref": "indicator--8164a26d-81a0-402a-a4ef-26a35b8b5ea6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae794535-e88b-405e-9a6a-75481b14663a", "sighting_of_ref": "indicator--6f43ca37-6fa3-4951-a865-a90d296ee177", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e42c1e-5e10-454c-88b1-e21bd4e5db78", "sighting_of_ref": "indicator--6f43ca37-6fa3-4951-a865-a90d296ee177", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cd7af3-e252-48d7-9803-300fd237f546", "sighting_of_ref": "indicator--3ff1230a-f133-4a42-85ef-0e3129d3bacc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e0d067-9b34-4095-bd30-eaf76383bf5b", "sighting_of_ref": "indicator--3ff1230a-f133-4a42-85ef-0e3129d3bacc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e942a96-d4fe-44ed-ace1-c2b3cec0e357", "sighting_of_ref": "indicator--851a490e-b89b-4bb0-830b-aa6ad1e083f8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242d7178-fdcc-497c-9464-3c07d9d30a2e", "sighting_of_ref": "indicator--851a490e-b89b-4bb0-830b-aa6ad1e083f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbbe0ea-6ca8-4c2a-b89d-9dd9470b6a17", "sighting_of_ref": "indicator--4bc48cad-6f92-42a4-adb4-cba13fbb7b94", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e64d52-e6e4-4a60-ab41-97ff192e1cc6", "sighting_of_ref": "indicator--8955cb88-dd5a-402b-9da4-6f1221935717", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ef39e1-fec4-4c16-ba4e-dc7a5be31e33", "sighting_of_ref": "indicator--8955cb88-dd5a-402b-9da4-6f1221935717", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87952cf-4fb5-4550-837f-5859e5535f47", "sighting_of_ref": "indicator--d6868b65-9a48-4641-8b79-4dccebefbeda", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3ef935-1512-416e-897e-a832fe0f30d4", "sighting_of_ref": "indicator--ba4b1d53-0a9c-4266-8529-7cd00500ee44", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a00d86d-aeed-4bab-a1b5-835dc9985b53", "sighting_of_ref": "indicator--7b1a73bd-fa20-4db8-903f-ffad41d94c31", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59c633c-630a-44a1-b44a-0714bb903353", "sighting_of_ref": "indicator--a78fd867-e45e-4527-b150-4887bc4c14b6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf2c32e-007b-4b60-af1c-1c4b2319bdb7", "sighting_of_ref": "indicator--e9c74af5-d05a-4886-8580-df6f5a5c0dfe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c69399-1413-48d2-8512-dfe1910184a8", "sighting_of_ref": "indicator--84de17b4-3538-4725-bd9b-c44c582e9fc6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3190c225-622a-4378-9676-cc77be966f2a", "sighting_of_ref": "indicator--e44c17d2-0f68-423d-b3e3-086368372681", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55c4aa9-a1db-4ff8-8ca8-0c8787b3765f", "sighting_of_ref": "indicator--e44c17d2-0f68-423d-b3e3-086368372681", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea3633f-4747-465b-b53b-07daa86c7acd", "sighting_of_ref": "indicator--9716c44f-85cc-450b-9dd4-70acfa271dc9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44083c29-d618-436e-8665-5d027edfd178", "sighting_of_ref": "indicator--9716c44f-85cc-450b-9dd4-70acfa271dc9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f7c739-a4cd-4028-ba25-252d3ab4ef3a", "sighting_of_ref": "indicator--41a0c794-f486-4fb5-a96f-1a497d243c0e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee1d30f-e24e-4288-9a0b-cc2a7ed06deb", "sighting_of_ref": "indicator--df515447-9a8a-4902-b535-c9db697eb192", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b936f1e-2079-47e7-9e64-da3118e5f2e0", "sighting_of_ref": "indicator--df515447-9a8a-4902-b535-c9db697eb192", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3802ae1c-d2b5-44fa-af32-e2904fb10473", "sighting_of_ref": "indicator--b73c27a3-3902-46f9-ab8e-db6b419f9374", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df39a5d7-16b8-4146-a3a4-093a154a8bc3", "sighting_of_ref": "indicator--5b1321ff-88ca-4198-8d0b-fd9052e8b2a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a746e0-3e50-44b5-bc2c-f616a3c612d1", "sighting_of_ref": "indicator--e263a8fe-aac8-4420-a4cc-c00f0ac322e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06499e7-f079-4223-9feb-471adcf06072", "sighting_of_ref": "indicator--e263a8fe-aac8-4420-a4cc-c00f0ac322e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc527b91-734d-4fb3-bb52-29e6d821a9c4", "sighting_of_ref": "indicator--e263a8fe-aac8-4420-a4cc-c00f0ac322e7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906d43a5-8ef2-4f3a-9d16-f5800cc7599d", "sighting_of_ref": "indicator--5ab498df-90ac-4e03-82ff-c3da51b1a0de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eef6eb4-514d-48d5-aa1e-154dfcea47fb", "sighting_of_ref": "indicator--5ab498df-90ac-4e03-82ff-c3da51b1a0de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41ed2b9-f0f8-460f-8520-cf7f2a390a83", "sighting_of_ref": "indicator--66a70666-d347-48cb-8958-0e03aca1b873", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13e4e7e-5c86-4adb-86cc-bd461e86b877", "sighting_of_ref": "indicator--66a70666-d347-48cb-8958-0e03aca1b873", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7073c4-c58d-4ad5-9034-2b6c1231eab4", "sighting_of_ref": "indicator--66a70666-d347-48cb-8958-0e03aca1b873", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42fa0d1-26d7-456a-919e-de37b06757e1", "sighting_of_ref": "indicator--d047692c-3bf4-4320-8184-8805df8bbc17", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97303c04-f7d9-4205-9361-e52fb5f8b7f0", "sighting_of_ref": "indicator--d047692c-3bf4-4320-8184-8805df8bbc17", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753944be-5a00-4775-8613-a76add95d1f7", "sighting_of_ref": "indicator--ccabf13c-a8f5-4cb5-bba0-cdfa4abda7b4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e9ad86-2c51-47de-85cb-378f3a362b31", "sighting_of_ref": "indicator--ccabf13c-a8f5-4cb5-bba0-cdfa4abda7b4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ab9fbc-a0ce-4dc7-95e0-074c79f45462", "sighting_of_ref": "indicator--f17647a1-f7c3-48d0-b2e2-56663fbb3e35", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bcf133-856f-4c2e-8321-594f9c4b94e4", "sighting_of_ref": "indicator--f17647a1-f7c3-48d0-b2e2-56663fbb3e35", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b701b1-8d6f-4eb4-bfa3-aaac97339a78", "sighting_of_ref": "indicator--7deef4b0-421b-46a5-97bd-d4903354606d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1392d541-be6f-40bf-adfd-6a9509cb764d", "sighting_of_ref": "indicator--7deef4b0-421b-46a5-97bd-d4903354606d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51083b41-ab32-4dbd-ba3b-ee16361b89fe", "sighting_of_ref": "indicator--666b8f6a-4bfb-473b-afa0-91c87fcf9a66", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166b859e-73a5-4880-8130-6703948dba98", "sighting_of_ref": "indicator--666b8f6a-4bfb-473b-afa0-91c87fcf9a66", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4290526-5a1a-42fa-a827-a862bea97f95", "sighting_of_ref": "indicator--17821192-464b-4399-9117-09f50725d724", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b0f1f1-2df8-485b-ac7a-1d2d1e51ed01", "sighting_of_ref": "indicator--17821192-464b-4399-9117-09f50725d724", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abf105b-fe71-4b1f-865b-0171464d0dde", "sighting_of_ref": "indicator--1ae05476-9ef7-47f9-a7dc-5f9ff008441a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0abc8cd-6de9-4bfb-aaef-84343614ba33", "sighting_of_ref": "indicator--1ae05476-9ef7-47f9-a7dc-5f9ff008441a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa7b03c-da0b-4698-a1d1-38fb7b3db9d6", "sighting_of_ref": "indicator--1ae05476-9ef7-47f9-a7dc-5f9ff008441a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6266d5d9-8f20-4bc2-8a86-eedfe51ae782", "sighting_of_ref": "indicator--0b5246b3-b73f-43f0-ac8f-cd2692da6207", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ade44e6-7933-48f7-ae81-e9c1fd83b3ed", "sighting_of_ref": "indicator--db86bdee-347b-402a-b564-f8b100b1ed2d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfecfbf-e65f-4db9-9e7d-63a343d2b430", "sighting_of_ref": "indicator--21697c96-47bb-4bc2-b5da-bdc0f42d46b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4178756d-a843-4b56-b874-256644871143", "sighting_of_ref": "indicator--12744a63-1d84-4bf7-95b3-fdfa63c237ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fe1050-8189-4c1c-beb6-b690679ccb3d", "sighting_of_ref": "indicator--7d576e0b-c85c-4d73-812b-dd9a65b4c5aa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f754ab-acff-46d2-b5bb-6bfbaaaa2763", "sighting_of_ref": "indicator--7d576e0b-c85c-4d73-812b-dd9a65b4c5aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda3ccc5-0997-410f-ab0e-4b63de9c48c3", "sighting_of_ref": "indicator--5004983d-2a0e-45cc-8149-044a85d431e9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3ac4fc-c91f-44b6-8c0e-d26135c1e894", "sighting_of_ref": "indicator--5004983d-2a0e-45cc-8149-044a85d431e9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b5ede8-6aae-461f-9421-5103f71dfc71", "sighting_of_ref": "indicator--10fda3d7-f9e7-44ca-9f8b-da72465bc64c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d15ea7-98af-481d-af78-f2307031259a", "sighting_of_ref": "indicator--10fda3d7-f9e7-44ca-9f8b-da72465bc64c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3988587a-6ad4-4000-badf-83259acf16d5", "sighting_of_ref": "indicator--da0688d6-1a1c-4793-bbd6-d27410f08596", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c074cd-21c5-4793-b3f4-b94c58173ed7", "sighting_of_ref": "indicator--e30bc07d-ff31-4bbd-a654-30e70e69a2d7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000b2628-1edf-47b2-9135-5655d29af9c7", "sighting_of_ref": "indicator--8eacf7b8-3c1e-4745-87ee-e09e3764b59b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d6f378-0503-4145-a7f3-3f5d46eba884", "sighting_of_ref": "indicator--8eacf7b8-3c1e-4745-87ee-e09e3764b59b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9223e7cc-744e-404d-8fa9-198167e70621", "sighting_of_ref": "indicator--2ecea5c7-cd01-49ca-99b5-87fc6c80ed67", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e86d5a-5d09-4166-ab29-24f9ec72618f", "sighting_of_ref": "indicator--dd62e6dd-b4fd-4372-85f4-8717b9934b09", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397a90eb-cdb4-4bf5-89ed-08746e4bfa34", "sighting_of_ref": "indicator--dd62e6dd-b4fd-4372-85f4-8717b9934b09", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dfa121-fc48-4b00-9b19-371cd4e9215e", "sighting_of_ref": "indicator--82adb59c-c60a-495a-a4a8-a7b236396715", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9693abb-5139-4dab-80f2-b101827b44d7", "sighting_of_ref": "indicator--82adb59c-c60a-495a-a4a8-a7b236396715", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c258b4-fc3c-499b-93d2-a1806747b0a6", "sighting_of_ref": "indicator--ab771a07-9345-4770-bbb3-b1a9200fa10a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecc3f53-1541-4468-9cd7-ec259281ae96", "sighting_of_ref": "indicator--62f0458b-e48a-4261-99e2-ca0b1aecfb85", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1696e8ad-e400-4090-b480-95c5421d79cc", "sighting_of_ref": "indicator--62f0458b-e48a-4261-99e2-ca0b1aecfb85", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887b00f7-3e0d-48c1-9710-9888a22319c8", "sighting_of_ref": "indicator--62f0458b-e48a-4261-99e2-ca0b1aecfb85", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd38899-6449-4419-9f6c-ca8f753a9472", "sighting_of_ref": "indicator--5c2f4831-3e1e-47ad-8c11-82bb6123bd83", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caad5c93-c70d-4ac6-afca-ceffda2a0c54", "sighting_of_ref": "indicator--63e3d992-436d-4dda-8be9-68fa282531b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e416160a-b210-4c3f-bf28-8779cabcd297", "sighting_of_ref": "indicator--63e3d992-436d-4dda-8be9-68fa282531b5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abac5274-64c5-49c2-9d19-b64b728b0dd0", "sighting_of_ref": "indicator--63e3d992-436d-4dda-8be9-68fa282531b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114fdd2f-bef1-40e5-a3c9-0243a93f56ea", "sighting_of_ref": "indicator--0fada936-bc01-4777-80e6-822447d67dec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eae60bb-237a-44b6-b3b5-9fcb8779f459", "sighting_of_ref": "indicator--9765de97-eb0b-42e1-9aa4-236e0ae16841", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc57bb65-6cb0-4182-9b07-08ab0e689c10", "sighting_of_ref": "indicator--0093514b-4819-418e-a0d1-e129ad699b40", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e4b260-a9e7-43ef-bc0d-beb10e6fba84", "sighting_of_ref": "indicator--0093514b-4819-418e-a0d1-e129ad699b40", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9a4dbe-3309-4b80-9d89-50c4d0f07cac", "sighting_of_ref": "indicator--0093514b-4819-418e-a0d1-e129ad699b40", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110adc49-07d9-4e92-817f-199d5e10d235", "sighting_of_ref": "indicator--9d8a695c-73c0-46bf-b748-14337430ce51", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f53d59f-ff77-4506-9b37-e64b2ff398e4", "sighting_of_ref": "indicator--9d8a695c-73c0-46bf-b748-14337430ce51", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac79c0bf-d5f3-41ab-8323-acbc4245442d", "sighting_of_ref": "indicator--60854921-6548-480c-a0fd-78bb6d581e8d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e2dba10-bb7f-4239-89c7-b1b68d2640c8", "sighting_of_ref": "indicator--dfac1140-9a2b-409a-8bb0-411b14f20f5e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719678ff-a0a1-4ae5-8176-fb3e57ea34bc", "sighting_of_ref": "indicator--dfac1140-9a2b-409a-8bb0-411b14f20f5e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589201d7-d13f-4838-b569-a095384a5618", "sighting_of_ref": "indicator--fa1ca206-9bb1-4315-9f42-769b956968e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d640a7f9-db3f-4d18-9e6d-0d5003586c59", "sighting_of_ref": "indicator--fa1ca206-9bb1-4315-9f42-769b956968e5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5aeabc-99e5-4e15-8d6c-265ef41b0873", "sighting_of_ref": "indicator--751b0d44-c886-4343-ab56-507a9707e3ce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c82c875-3740-4213-b8ee-978b48c794eb", "sighting_of_ref": "indicator--8f57216e-1067-4c81-8286-635f462dc48b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34900308-1ce3-4bc3-8101-804af3e0dee7", "sighting_of_ref": "indicator--8f57216e-1067-4c81-8286-635f462dc48b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0835a66b-a5c7-4165-b794-289551779be9", "sighting_of_ref": "indicator--d22b505a-f971-4133-934b-fcfb9dc456bd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc7deec-0028-423d-8cc6-27cd57f3f773", "sighting_of_ref": "indicator--ff2992ad-8980-4f53-81e0-47f573d01a78", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982e1470-9738-4b7a-b53d-c6f50a4305fb", "sighting_of_ref": "indicator--ff2992ad-8980-4f53-81e0-47f573d01a78", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc38cb7-6a94-4eac-a7fb-f8e366e27ce7", "sighting_of_ref": "indicator--d0a89a86-25c5-4f8c-a442-6d239d9996fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1952526-87e4-42ef-8bfe-de241bb0d5e1", "sighting_of_ref": "indicator--1b11eb8a-8ebb-4eda-b0e7-d5a8a31484ef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7607f9a1-4799-4eab-ba73-3577c9a7887e", "sighting_of_ref": "indicator--1b11eb8a-8ebb-4eda-b0e7-d5a8a31484ef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2813de1-5de3-4680-9073-4e7a4c62240b", "sighting_of_ref": "indicator--89d8f5cf-f471-4aa2-9730-66a736d3daa4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddaf4fb5-084e-4fbd-bc8f-1b6037f4a91e", "sighting_of_ref": "indicator--89d8f5cf-f471-4aa2-9730-66a736d3daa4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffa86d4-9719-428a-8420-5201e2d9afa2", "sighting_of_ref": "indicator--52379669-9450-43b8-b334-bf458bf4d7a4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2ba3aa-7592-4e69-8984-e965fde9fb46", "sighting_of_ref": "indicator--00428173-c695-4734-a1de-e29131590daf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256dffc9-ff2f-48ab-8c54-199deb7b6de5", "sighting_of_ref": "indicator--18a95b8d-7867-4e59-ae13-b399ceffa3be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade68517-ec1a-4e1d-8e7d-77bd6a9ace5e", "sighting_of_ref": "indicator--18a95b8d-7867-4e59-ae13-b399ceffa3be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c539d53f-b63a-4f85-a288-f5b2458991c3", "sighting_of_ref": "indicator--ff43e404-4939-46ca-81ed-4b92e834fb33", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869b836e-cfa4-497f-9c48-cc8b4fe30cf7", "sighting_of_ref": "indicator--f4efc3fc-ae92-49bc-bd41-5528fc97a6b2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5950d92b-2eb7-43a0-9228-7a51572c37e7", "sighting_of_ref": "indicator--37e7c31a-5a61-455d-beb6-1d47300b35b4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ed19e0-f3d0-4a0e-ac96-c9a3c5732a94", "sighting_of_ref": "indicator--805fd6bf-d536-4af8-be48-d8b35399ed4b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c7e896-6367-4e1c-a657-b9c9c9cd8bd6", "sighting_of_ref": "indicator--805fd6bf-d536-4af8-be48-d8b35399ed4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879e80a5-4c79-40c9-9f32-af6bb17d9b00", "sighting_of_ref": "indicator--805fd6bf-d536-4af8-be48-d8b35399ed4b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037e2ef9-8340-4e27-9128-07ae4bd58994", "sighting_of_ref": "indicator--33665541-868a-4b4b-b443-aa000b1864fb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d93d669-0706-4cf6-bf89-0b29007209af", "sighting_of_ref": "indicator--60aabc7a-3855-4ea7-93a0-279594f379d0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35699bf6-c558-47d7-9503-730493a1d357", "sighting_of_ref": "indicator--60aabc7a-3855-4ea7-93a0-279594f379d0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a961ed6-5b49-4971-91d2-482ff8c0cd42", "sighting_of_ref": "indicator--75e455b4-d8e5-44af-8e17-f33ade767573", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234a56da-5734-4b1d-a1c5-8174328d39b0", "sighting_of_ref": "indicator--288e8c11-2c66-4f38-b2d1-418b9b9226a3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5354ce-ee7e-432b-bbb5-857a99f4e8cb", "sighting_of_ref": "indicator--ce45eb50-fdd9-431a-8c62-1c0fb803f80e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87127a2d-c758-4fb1-bfc9-1ff11479ede4", "sighting_of_ref": "indicator--0af52f64-00a3-4dd0-b96b-c5b4bf713804", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e522aa72-f076-40ef-b33f-13b44855bc9c", "sighting_of_ref": "indicator--f30e171e-a18d-459f-8ae0-96214e4070f7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be40cb6d-0ae9-4cfe-a055-d01b62a944b9", "sighting_of_ref": "indicator--8c51a070-e841-4262-8db9-d1d186fba1c0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d02d144-addb-4ec4-97b4-e39f0a03fb18", "sighting_of_ref": "indicator--bf763b29-bdd9-43a4-a6c2-dad86460be64", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d552764d-b317-4f12-83cf-42b92e6c6bf6", "sighting_of_ref": "indicator--5fe6b1d7-0294-4f1b-92ea-adf6cf118101", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f1390c-530e-439f-ad2d-cdc04796494e", "sighting_of_ref": "indicator--a4b44752-5eab-49db-b852-2fe15f8c22f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899d33b4-a072-4e01-98b7-43a9546fa8aa", "sighting_of_ref": "indicator--973760d9-9650-4984-8072-0dc5e2764c9b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5b5635-f396-44ef-9911-ede514a13d28", "sighting_of_ref": "indicator--bc14f4f5-5f2d-4023-9cfd-2cd63e9620d0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc689c0f-6f36-4ad8-9ba4-ebdbf9a8d2ff", "sighting_of_ref": "indicator--bc14f4f5-5f2d-4023-9cfd-2cd63e9620d0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d40691ee-b18d-4961-90cd-3e8e26e170a5", "sighting_of_ref": "indicator--0e4fda26-7081-48aa-b604-4c6ed01aa7a6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2678c55-e987-4c92-8f45-251f2d46438d", "sighting_of_ref": "indicator--0e4fda26-7081-48aa-b604-4c6ed01aa7a6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b038f1-06c5-45c0-bc27-8125c94e07a0", "sighting_of_ref": "indicator--9de0927c-8171-4d30-a701-c37088193321", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec607ff-b4ec-457e-b387-29e2b4c6d761", "sighting_of_ref": "indicator--9de0927c-8171-4d30-a701-c37088193321", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d2c14a-5d02-4251-8eeb-787bfbb46621", "sighting_of_ref": "indicator--9465537b-2644-4727-8616-577777c734be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d908a8ad-9f4f-4bea-9334-6abc367a7394", "sighting_of_ref": "indicator--9465537b-2644-4727-8616-577777c734be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f62bae-4136-47d6-be9b-24b7c7de144b", "sighting_of_ref": "indicator--9465537b-2644-4727-8616-577777c734be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80eeac14-5485-4489-8175-7886a4db6c78", "sighting_of_ref": "indicator--b5e58ae1-d488-407b-a3de-ad468dbe369e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b176674e-061d-4691-9073-b1d9ace7b393", "sighting_of_ref": "indicator--b5e58ae1-d488-407b-a3de-ad468dbe369e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c85fcba-b4bc-4879-9058-5f417bbeb1b3", "sighting_of_ref": "indicator--b5e58ae1-d488-407b-a3de-ad468dbe369e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614aa433-9b1d-4749-af2d-2b3d2113a35f", "sighting_of_ref": "indicator--b8ea4a99-08df-4882-91d9-dba3ab839de9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db1cc05-2cde-4c8f-9906-d6f2306c6ee4", "sighting_of_ref": "indicator--af5f20a7-4df0-46fd-956b-2d61815049c8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e1ab7a-6a66-4b72-87c1-967d6bd9f20b", "sighting_of_ref": "indicator--25c73c99-2751-44aa-9a27-952ca0d7c8b3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c14bc3-9b57-4022-9ba5-ea5e5fca0945", "sighting_of_ref": "indicator--32a0360b-01f5-4b2e-aba1-8044f46a1d40", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24dce87d-4a77-464e-9fa3-1aa34932c175", "sighting_of_ref": "indicator--d7009828-26aa-4377-9ce9-c92ffe6d3953", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7033e35c-3291-4b2b-b542-024dd490e2df", "sighting_of_ref": "indicator--d7009828-26aa-4377-9ce9-c92ffe6d3953", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e393ce3d-7272-46a5-bc3f-514f31e4952e", "sighting_of_ref": "indicator--69e83a1b-8fe2-47b3-b8df-2d66d4d51c43", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5e1d19-9fce-4644-aec4-cbf606d0a575", "sighting_of_ref": "indicator--44c3f615-f0b2-4a01-ac82-b740ff368356", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dba699-1f41-41bc-9d5a-c1b092c85054", "sighting_of_ref": "indicator--7b861562-ccfe-4521-8ce7-375952f144a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e422bb9-1515-4065-9d58-6a70f336d676", "sighting_of_ref": "indicator--7b861562-ccfe-4521-8ce7-375952f144a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16deb02a-a44f-4a4c-912e-f2e9f2bd82e0", "sighting_of_ref": "indicator--d4f7b858-61d0-469f-82e5-7cbdaac14f36", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cb3611-ec89-4268-9790-875b320c6de3", "sighting_of_ref": "indicator--d4f7b858-61d0-469f-82e5-7cbdaac14f36", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340aeb4e-1f58-4068-ad67-b668a581d11b", "sighting_of_ref": "indicator--8911c8f4-c5aa-48bd-9cfc-e1b3e01dc097", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fb81c9-181e-4ddb-83a6-f9b7dbb139a8", "sighting_of_ref": "indicator--f3e13c37-fb47-4f13-88c2-ca66093123a3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac8d26d-5f82-41d3-952a-bddc581eb9f3", "sighting_of_ref": "indicator--f3e13c37-fb47-4f13-88c2-ca66093123a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feefe569-4194-4167-85a4-3734ae365b79", "sighting_of_ref": "indicator--f3e13c37-fb47-4f13-88c2-ca66093123a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea85222-8a07-4887-91ff-17745ebb7ace", "sighting_of_ref": "indicator--0b529f5b-1b83-4d5f-9bbc-48aa39e23806", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe60a96-e345-41a4-b632-5cea3db94bf9", "sighting_of_ref": "indicator--0b529f5b-1b83-4d5f-9bbc-48aa39e23806", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cec4c6a-48f6-479b-851f-533516c2c545", "sighting_of_ref": "indicator--729c0216-db20-411b-a01c-167e1b9534d7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8f0ed9-36c6-4637-bdaa-090455c077a9", "sighting_of_ref": "indicator--6a5c4d1c-5d64-4ec2-a6d6-b01d9aaa2cb6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6c272c-87b6-4d7e-bd68-ff54878a41a0", "sighting_of_ref": "indicator--4bb7426b-126c-42bd-9004-4554c0bb65ef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49cc7d8-3b24-4a49-8297-f1f8cb1b1a54", "sighting_of_ref": "indicator--091a0635-3e18-45ed-9c2b-23552145f705", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1256f5d-bb6b-414e-b801-749c5e59a3d7", "sighting_of_ref": "indicator--091a0635-3e18-45ed-9c2b-23552145f705", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c52b826-f630-4e35-a2ea-38dd38d741d0", "sighting_of_ref": "indicator--d51d40a7-eeea-4f36-96a8-25bdf10bd712", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d25857-4b3f-4e7e-bd17-7eaa8cc76291", "sighting_of_ref": "indicator--ec70c627-d4db-456d-967b-c16b2d8dd3e6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b81095-9c9e-4498-8b91-38e4e930d7da", "sighting_of_ref": "indicator--50246b23-9cc7-4b78-9542-db94fabf7df9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9853db-2831-4620-9527-9efcd00fdb1c", "sighting_of_ref": "indicator--b75886db-2a5d-4251-bd5b-437bf328f7de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecd3e3a-bf05-4d97-9b8f-a238b5d01982", "sighting_of_ref": "indicator--b75886db-2a5d-4251-bd5b-437bf328f7de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e35e97-2801-4e75-9c37-8cf518f72790", "sighting_of_ref": "indicator--b75886db-2a5d-4251-bd5b-437bf328f7de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114fb90d-6fb7-4b4c-bb8a-f8ee85a98477", "sighting_of_ref": "indicator--020797c1-aa63-4f1a-96aa-35427cbc4a53", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3441c94-b538-4a45-8a84-cf2eeb875c52", "sighting_of_ref": "indicator--020797c1-aa63-4f1a-96aa-35427cbc4a53", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e3165d-6a40-48e9-86cb-7f582bfa12b9", "sighting_of_ref": "indicator--85757fad-7670-4a0a-9bab-f5d5805b4b43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb37376-d83c-49d2-8a7c-9763ce87530c", "sighting_of_ref": "indicator--f4499356-794e-4cb1-ba31-4b3e533cd391", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc49d5e4-afea-4e4e-bfde-5b8e56e507e5", "sighting_of_ref": "indicator--4dd635fc-bf3e-47e2-b931-d409390c7548", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd21a93a-d4ac-4129-98d2-f466e5ec42a8", "sighting_of_ref": "indicator--f2f30dea-6396-42dc-af27-1d7ae7d7c596", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c004d76-e6cd-4976-83c3-78cb79efc2e5", "sighting_of_ref": "indicator--fc220077-d3a8-4002-9a40-caa69269da59", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b65bfe-fa20-4f42-8d73-f4841893ac21", "sighting_of_ref": "indicator--027f9376-bc93-4871-b6d2-92baff24c17a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42798166-c270-44d4-9c1b-63c89561768c", "sighting_of_ref": "indicator--93005b5c-ecfc-4553-b0a5-4c2d314db40e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec71f8d-19e4-4973-a138-933ae6145ab8", "sighting_of_ref": "indicator--7cfff605-5374-4d81-a83e-ab7ff0ec887e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a2556c-1d58-48bd-a361-ffe4074474d1", "sighting_of_ref": "indicator--33282d3e-7775-41cf-9757-47a51fe6916a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3e3f05-e0ed-49be-8975-96c1c06bdfa3", "sighting_of_ref": "indicator--d24e9357-cf33-4810-a4d3-9f049ebfbb08", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b594360c-ef08-483c-90cf-64978448524f", "sighting_of_ref": "indicator--0cd3544e-d66a-4c78-a12e-1527de8ae286", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcc1332-8041-4191-b114-f94b3b4a165e", "sighting_of_ref": "indicator--f89d24f4-e6bd-4ebd-94f5-9fef4af367e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55e92cf-1c5f-47da-a196-20183378b928", "sighting_of_ref": "indicator--ddfb4771-ca07-4702-92dd-246c07846ba7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65df7359-dd97-4643-aa28-5b9e9a76bfab", "sighting_of_ref": "indicator--ddfb4771-ca07-4702-92dd-246c07846ba7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eee33d6-6741-4bee-8ae6-8637fb0f8878", "sighting_of_ref": "indicator--12dbf542-1dbb-4dc2-a6dc-0fca86f86ef7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678abbd0-bae8-4e8a-a97b-e2119fb66e94", "sighting_of_ref": "indicator--23d86eb8-42cd-42f4-ad1a-d3fa1899595c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404c85b4-3498-4abd-a547-671965a21d00", "sighting_of_ref": "indicator--aeeeac8b-8207-4f00-93c1-60a5eb0c7f44", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6e4f30-301e-4ef3-8742-3ba372f810b9", "sighting_of_ref": "indicator--aeeeac8b-8207-4f00-93c1-60a5eb0c7f44", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74989ba9-a211-43f6-974a-62c33db5ff7e", "sighting_of_ref": "indicator--aeeeac8b-8207-4f00-93c1-60a5eb0c7f44", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba2872f-0f66-4ba5-a697-23f64a6e824b", "sighting_of_ref": "indicator--aa8a033f-5cd2-48cb-b79d-eb9a28262f95", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639809e5-d8f1-4b5e-a119-4bb087737568", "sighting_of_ref": "indicator--97e46630-3380-4bdf-a90c-1c7d68c419a4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad959002-b9cc-4eb4-9fdf-a803caa49fa6", "sighting_of_ref": "indicator--1b33a90e-6e24-4576-9401-dc784d667e6c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db2141b-f7c8-4912-9f16-ffdd3f710b91", "sighting_of_ref": "indicator--a6bda900-1138-496d-8d0c-fb06c014d40e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e998a20c-8060-4806-8290-141e3e830684", "sighting_of_ref": "indicator--d5e06d4c-61dc-4c5f-a8d4-5d83253cdbfc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d69e677-8b44-404d-82aa-dfb834786bd6", "sighting_of_ref": "indicator--e9981489-ab03-4232-b287-ee5a6d3679a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef64f78-a182-4eb4-b6de-d84917631b07", "sighting_of_ref": "indicator--e9981489-ab03-4232-b287-ee5a6d3679a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50321cc6-5c8e-43f5-b652-ade6c4cee397", "sighting_of_ref": "indicator--45441c9d-5121-46d8-8a8c-bf0c8d11dcf8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb9e60b-63f8-4b20-b589-5241833ee818", "sighting_of_ref": "indicator--e8989596-0f4b-440b-bc1b-820a5afa16e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a02a4a-6141-4b4f-b341-c0ff32313e70", "sighting_of_ref": "indicator--c0e13e46-cd46-4fa6-8eb9-87cca31fb9b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80049f81-4bd0-4f07-94dc-789e4c434361", "sighting_of_ref": "indicator--b6fa2e63-0ff4-4780-bfdb-3d77745ef840", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdefaeba-262a-46e2-a025-e9e57c2817c3", "sighting_of_ref": "indicator--90b5ce87-c577-4a4d-8c89-fa742ac6a6bc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b21796-1f29-4248-951c-bf096c37aa43", "sighting_of_ref": "indicator--b3c0dc7e-2ed1-4340-89bb-3166342138c0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544169fa-5714-4297-b6bd-51bf6d2db35c", "sighting_of_ref": "indicator--b3c0dc7e-2ed1-4340-89bb-3166342138c0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ffb577-4eea-4f09-89e0-fe5593961439", "sighting_of_ref": "indicator--ee902492-7d6b-416b-8ea4-98a3e85b8ec5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130d53a8-4c51-4ece-9eb8-f8ed8249f850", "sighting_of_ref": "indicator--1cea1f52-3f03-46bf-9caf-eebf42fa3d90", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34ce11b-1493-4c1b-aedd-37f44073138a", "sighting_of_ref": "indicator--5f6ba4a6-7d5f-43ea-b7e9-08b238288d1d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7fce126-cd03-4e6b-9731-4114344e06b6", "sighting_of_ref": "indicator--851383e8-308f-4834-9209-1da6832a869d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce3fc4e-5c09-4c4c-869f-5d7de67d6bfb", "sighting_of_ref": "indicator--7d82fa5d-c04c-4681-a89c-5fb301da61eb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08df748a-8763-480d-b9f2-65d10378d241", "sighting_of_ref": "indicator--9e6c509e-7a3c-4ac6-b82b-936457ba5d7c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e718390-16ae-4545-be48-8236e61a80e0", "sighting_of_ref": "indicator--53f69169-e59f-4447-b871-ce891ef1eb0d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfd5835-fc71-4a10-84ed-c1a3e0d304fa", "sighting_of_ref": "indicator--53f69169-e59f-4447-b871-ce891ef1eb0d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11442da0-e26b-4fda-83f9-96d8564fb4c8", "sighting_of_ref": "indicator--8362e46c-c50b-44b1-b471-1dd1920d7082", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0776d296-e74c-4536-8748-a62242c2e151", "sighting_of_ref": "indicator--1ccc554c-8344-4975-b462-a0fb08eb1bd0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97b476d-1977-45ca-ab66-530f563c3100", "sighting_of_ref": "indicator--4d2a81d7-6336-4de3-bc8f-6dcbb18d0f62", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f92269e-a1a4-45ed-8d27-48c6f8e6cffb", "sighting_of_ref": "indicator--ccef2e49-7590-4978-8b08-486e6eb78356", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d36859-6af1-4a99-ada6-8e9f8b13361a", "sighting_of_ref": "indicator--d9ce1e69-e492-4fb8-bf6a-a91a0f77dcca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d38ee7-7b55-4376-b12f-455d98f49518", "sighting_of_ref": "indicator--420ae7d8-bf44-47c1-8928-c164ba4b396c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a411ff40-bc21-40a2-81a7-3c091048863c", "sighting_of_ref": "indicator--7b30f666-a77b-4a37-b339-a5a0d979bc08", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950a678e-f777-4837-810d-658557d795c7", "sighting_of_ref": "indicator--7b30f666-a77b-4a37-b339-a5a0d979bc08", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097ac1bd-2f76-4952-a95d-54cb88ec3d1f", "sighting_of_ref": "indicator--7b30f666-a77b-4a37-b339-a5a0d979bc08", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b460b0-60e3-45e2-aec9-710c15a6b880", "sighting_of_ref": "indicator--de3bbe7b-14e0-488b-a019-1b583c2daa19", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e5d49c-4d38-4639-bc4b-eb53900fb622", "sighting_of_ref": "indicator--d32eca3f-15f7-4b78-9d28-1446ace43c24", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d429f7-f8f9-44b2-b53a-f1ef4a01be59", "sighting_of_ref": "indicator--60357839-3a97-4ac4-9355-30afddada14d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed6b290-22db-41f9-8582-0f6ff8f3af87", "sighting_of_ref": "indicator--60357839-3a97-4ac4-9355-30afddada14d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1bfd6d9-049c-4ac1-8813-f603c625561e", "sighting_of_ref": "indicator--28cb7e1d-9135-4dcf-bcf4-4cabe8785694", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0972df4c-42a1-4265-adc6-4e8d51959645", "sighting_of_ref": "indicator--7f71e6fd-cb0d-4adb-b544-3f9b7d3d4db8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d4b3c9-64d7-4f1f-a49f-ce488064fbad", "sighting_of_ref": "indicator--0f20d36c-18f1-4cfa-8bb0-ec23f3cce560", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a4abc1-6929-46b3-9bb0-79b957b82a70", "sighting_of_ref": "indicator--407064cb-77ae-4847-9470-f14a417a5657", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c71ce48-1650-4588-9e95-25325c50e638", "sighting_of_ref": "indicator--39f51e32-7897-430d-bd83-50a17848e767", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de050849-6039-4a83-b3ca-46cce52ba30b", "sighting_of_ref": "indicator--39f51e32-7897-430d-bd83-50a17848e767", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdb4a59-076f-44e7-adbd-f6a3e997ca91", "sighting_of_ref": "indicator--ffc8f1e5-8a2d-489f-b402-91661a4077f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1574870d-83d4-4b82-9e84-ba608c5d220e", "sighting_of_ref": "indicator--ffc8f1e5-8a2d-489f-b402-91661a4077f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fde1e05-71f4-467a-b969-701259c0b1fa", "sighting_of_ref": "indicator--2e85ad7a-42ae-41fa-9b15-d63d79f49021", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a653257c-38db-4871-aa2b-f9b1d2e11bf2", "sighting_of_ref": "indicator--ec7011a2-f5fa-4650-b664-2753581a7037", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fee6a05-6fdb-4d32-b353-77eb7de430af", "sighting_of_ref": "indicator--91367411-fc19-47f2-addc-98fe3e6a5e99", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e934aee3-a65b-42e9-a6bc-21af88f23465", "sighting_of_ref": "indicator--086262c0-8ac5-4623-803a-c9c6a72d967d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e22427-2e59-41b0-bea9-3ec7e3471237", "sighting_of_ref": "indicator--1b6491c0-5d2c-47f1-a0ca-b66a98493260", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5fc627-3d01-4f29-80ad-b63938ed8419", "sighting_of_ref": "indicator--d188cbd8-d79d-496c-8a92-7b05a648d251", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09855583-ec83-4012-81a8-39a1bbe1e2b0", "sighting_of_ref": "indicator--3e37b283-9ecb-4040-8868-d441da64897d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa60673-af8b-48d5-a7cb-acca10d76781", "sighting_of_ref": "indicator--e3208299-3b15-4ea6-a8a0-d02ba23f0ef8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f68aaf8-486c-477b-a50d-44746ae5e0a7", "sighting_of_ref": "indicator--e3208299-3b15-4ea6-a8a0-d02ba23f0ef8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fad7ed-d65c-43c2-b691-5fac13eb02d5", "sighting_of_ref": "indicator--319a91cb-a2c7-4a3b-ac91-63d288844833", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc87db9-8dcc-4ff5-a8cb-3fc1a0c7edd4", "sighting_of_ref": "indicator--319a91cb-a2c7-4a3b-ac91-63d288844833", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c154cb-7fc3-4bee-bef6-1f9fecadfc9f", "sighting_of_ref": "indicator--cd036e20-ad04-47dc-bbc5-b599a9ac87a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe131187-3770-4c1c-9ffd-61dd9b4658fb", "sighting_of_ref": "indicator--482ad0e3-7a87-46d7-9c6e-9d38df21f5e6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88518fd-f4d1-41f2-9a63-7ec034f4f729", "sighting_of_ref": "indicator--ffe2099d-0d90-4609-8c5e-2b6b7c9cffd4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7611a30-98ad-48d2-aee9-d5098066d31f", "sighting_of_ref": "indicator--c05a99f4-a31d-4e7d-a670-1c34a1542f95", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db45c5dd-ae1c-4f4b-a470-e6873415c128", "sighting_of_ref": "indicator--d12eaf85-19df-4f15-822e-9c2331867361", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa560c18-275d-4d9c-8b7a-1c35411ef203", "sighting_of_ref": "indicator--bda2b630-def9-49ca-b697-15e810afa18a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbda1e79-959b-4fdd-b2d6-9dc632a51508", "sighting_of_ref": "indicator--68f8cb7e-e749-4689-bae7-c783f782a3cc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0027997-ab71-4328-bd3a-c6b54d72dc3c", "sighting_of_ref": "indicator--f96770cd-0436-44c7-8f05-b50446990125", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e46d32f-de67-4216-bb34-8dfa1111aee0", "sighting_of_ref": "indicator--770202cb-da41-44aa-9b85-83634613e7e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4243071a-147b-46ae-a1ad-89c5ddfbcfbf", "sighting_of_ref": "indicator--d128a6b0-5f22-48aa-bce6-44bab2f9ea53", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa929c2-6ed5-46f1-a5a0-e3f015dc2615", "sighting_of_ref": "indicator--3dbb815f-9b3e-478a-944a-07275777b7ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3ea40b-c44c-4486-b677-2aa3a46da9ff", "sighting_of_ref": "indicator--3dbb815f-9b3e-478a-944a-07275777b7ce", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2b49e1-d694-4759-ba0d-d70a5cb8ffdb", "sighting_of_ref": "indicator--05e85200-d11b-41e6-a6dc-82a495fc6ffa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314f0979-08df-430b-a6cc-8a31f5d544b9", "sighting_of_ref": "indicator--05e85200-d11b-41e6-a6dc-82a495fc6ffa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65e24d2-1e74-4b50-878a-3bfd5c3e3903", "sighting_of_ref": "indicator--758e3ae2-b95c-464a-b97a-9dec6924f41b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029a5640-99b7-4b56-8d67-291fb3da7f16", "sighting_of_ref": "indicator--d61e3c15-04b2-41af-a196-ab8723412eea", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3ee9c4-8c53-4cca-a1b8-1dcef8a674f7", "sighting_of_ref": "indicator--33ba11ea-9f41-4b07-bc93-60077dbf641a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdb9967-6c50-4e30-b459-a3869d3971de", "sighting_of_ref": "indicator--33ba11ea-9f41-4b07-bc93-60077dbf641a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e20a3b6-52d4-41af-af62-61d01478b0a8", "sighting_of_ref": "indicator--ee5913dd-e199-4d2b-ba0c-1c032a3b44a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb07ef0-3be6-4a12-a8ff-0f8e0050ac12", "sighting_of_ref": "indicator--007df997-f8fd-4c6f-8fc6-7588b6376282", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4eadb8-516e-45b8-a834-0e81e5aefd6e", "sighting_of_ref": "indicator--fc3c17a6-764a-45f6-9834-97a44703da07", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020ccd53-2b2b-47f7-98fc-575c9670f060", "sighting_of_ref": "indicator--fc5d347f-a014-4a28-ae7a-ec6b0ccd1e35", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3120b026-b3fd-4bda-8690-0775091f3a5d", "sighting_of_ref": "indicator--0220e664-fba2-4348-a7d7-f786af5cdcce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89bfe5e-351b-4c44-bcf5-596d4f3b978d", "sighting_of_ref": "indicator--5783b3f2-746c-4ca5-a194-2ca2054a2c99", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefab0b9-112b-479e-8f8d-b883b2b49a53", "sighting_of_ref": "indicator--1271c4e2-ba0e-4cc2-a3c6-60b5362f5125", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21828cd5-4546-45c2-ad27-97830fa4ad9f", "sighting_of_ref": "indicator--1271c4e2-ba0e-4cc2-a3c6-60b5362f5125", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5271a05b-9102-4156-8690-581e3043fc73", "sighting_of_ref": "indicator--1271c4e2-ba0e-4cc2-a3c6-60b5362f5125", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a12d746-f895-4eab-b8ac-da62e7269b20", "sighting_of_ref": "indicator--bb03bb31-3a2f-4751-baa9-c681e8f61fcc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75a5736-29cf-4485-b9b4-2b5a0de92330", "sighting_of_ref": "indicator--bb03bb31-3a2f-4751-baa9-c681e8f61fcc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4112550e-f42c-4241-8ead-cc4980628fe3", "sighting_of_ref": "indicator--b521ec39-64cd-487f-9d3e-b519157bdcee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bd6a17-0143-407d-a31d-86ac6d69102e", "sighting_of_ref": "indicator--b521ec39-64cd-487f-9d3e-b519157bdcee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f2a4d8-b3c6-491f-84b2-f0b6e0eaadf2", "sighting_of_ref": "indicator--716441ad-71ce-4762-87e0-a029bd937eea", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66924af4-e79c-4a39-a43e-da06072351e8", "sighting_of_ref": "indicator--fd1894b9-9481-4554-824b-c96c8fc9cd0d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111f2283-9d90-4a26-91ec-a0bd7f89160a", "sighting_of_ref": "indicator--d1c51ecf-5a08-4d98-8425-5bec2184c502", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17593a18-6555-480b-997b-b5f3584d36b5", "sighting_of_ref": "indicator--ca224f06-21b4-447f-b477-2041bebc6ea5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a8b4ad-ae50-4de7-8965-01ef55c3f3dd", "sighting_of_ref": "indicator--831a601c-75d8-4c70-8126-b2cee02af786", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cace39-8156-4991-97e3-967b29957616", "sighting_of_ref": "indicator--877645ac-a92c-4672-89f3-503bbab00bd8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5032b95-a2db-4cc9-809a-76dfeb2b8c95", "sighting_of_ref": "indicator--f3efe72b-0447-45da-bb32-e87ed8c5baab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bc2823-a1b9-4734-a290-6898c722706c", "sighting_of_ref": "indicator--8b11a5f3-3153-4876-bbc5-61093bd09473", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346cd167-c9f1-420f-ae56-f0d1ea8d207d", "sighting_of_ref": "indicator--c644101b-b963-45bd-a9ed-84ff80974cc9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae35f180-c3d7-466e-913d-b87efa3cb1b6", "sighting_of_ref": "indicator--c01365df-08f3-4524-aa75-25a214d8a47d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea80824-e449-4501-a663-bf6c01e02cec", "sighting_of_ref": "indicator--c01365df-08f3-4524-aa75-25a214d8a47d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d0a200-0e77-4e98-847a-e8a372d57125", "sighting_of_ref": "indicator--f8534b0d-b17f-4c1d-8e1f-4a08365ee233", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b661c4f4-dcc9-45f9-9491-a8d0c20bf980", "sighting_of_ref": "indicator--ed7e70c5-01a7-423d-bd9c-21e6a7e6fb3f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d28b36b-9c26-40f1-aed0-635755e1bbba", "sighting_of_ref": "indicator--ed7e70c5-01a7-423d-bd9c-21e6a7e6fb3f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b2eeb6-3d0c-4d78-b571-e95494c4c966", "sighting_of_ref": "indicator--3491b782-fee1-431b-a84d-da090bdd11a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba60468-ba27-4039-ab7d-92f9d6626168", "sighting_of_ref": "indicator--3491b782-fee1-431b-a84d-da090bdd11a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b7dd1d-8d84-47c4-adfb-8a834398cca2", "sighting_of_ref": "indicator--2aba944d-ffd3-4e62-b9dc-223bba0e3ae7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64dc6bd-3d11-4e95-a30c-96654df9321a", "sighting_of_ref": "indicator--4d2b8d48-0e60-4e47-8218-9656057405e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ed2693-25a7-4fe0-a201-3bb033e288a1", "sighting_of_ref": "indicator--8766320d-1e96-46e6-b2d9-46e7d2611a6b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb050600-f235-46d4-897e-af80904b2819", "sighting_of_ref": "indicator--e679bd7e-facf-411b-bf84-e1b92ef3ec50", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a38cfd-542e-4aa5-80d4-21a872ff6275", "sighting_of_ref": "indicator--cca8f48f-ad5c-4856-b1be-e118ccfe5ba2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b00bd2-af11-4a5e-915e-f997cf25463f", "sighting_of_ref": "indicator--cca8f48f-ad5c-4856-b1be-e118ccfe5ba2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4740fbf3-f210-420d-9cd6-51753703df94", "sighting_of_ref": "indicator--0f236a82-53bd-4eb6-8b94-e879ddb5d818", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5b892e-ee3e-40f1-a4bb-d3f899359592", "sighting_of_ref": "indicator--334c3b07-6c9f-4a9d-af84-42af45382e22", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1605d47d-dbb6-48af-b281-1a67f27e0648", "sighting_of_ref": "indicator--9e2f0af2-1866-48ee-8bf8-b8f667d81ede", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f1bbaf-5adc-4e56-98cc-b06dea989f47", "sighting_of_ref": "indicator--9e2f0af2-1866-48ee-8bf8-b8f667d81ede", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76793a7d-93c7-4917-9cd9-3726fc959e3f", "sighting_of_ref": "indicator--f378e17e-c68c-4cfa-ac6b-dc02c114b988", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96fe473-477e-4f91-ac55-2333f5123d80", "sighting_of_ref": "indicator--bd84e14b-1c29-4319-ab47-cbdd93c9d068", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57dc230-16b5-40ea-8470-e197b438d95c", "sighting_of_ref": "indicator--a957eed8-97c4-4ef6-9c0e-eef9f17c4e22", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811baed9-6ea1-4289-9df5-87c5b468fd6d", "sighting_of_ref": "indicator--93dc8aff-9d2d-49e8-a606-c64b7bdc4a14", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab1f432-6475-4ca5-a625-9de98ae2dcf8", "sighting_of_ref": "indicator--93dc8aff-9d2d-49e8-a606-c64b7bdc4a14", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b240bc5c-01a8-4344-86e1-8432cd6c5754", "sighting_of_ref": "indicator--4206870e-8bd7-4302-b0f4-c37d058a2b64", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3b0932-f4fc-48ac-bb37-43526611e3c6", "sighting_of_ref": "indicator--4206870e-8bd7-4302-b0f4-c37d058a2b64", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0582466-a9c2-48f6-b601-9695a5b0f397", "sighting_of_ref": "indicator--c65edff9-da55-4eb8-bbc9-7c62ffba6423", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ff583b-6d88-4149-b037-15ef0e5da879", "sighting_of_ref": "indicator--c65edff9-da55-4eb8-bbc9-7c62ffba6423", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca367c00-e451-4bff-a22e-e4df51b5dcb1", "sighting_of_ref": "indicator--1e38cc46-a62a-489e-9a11-69b041793cc9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcb87c2-dff0-46b4-963a-17f39a5569a9", "sighting_of_ref": "indicator--ca22a8f5-d6ce-43c0-b867-fdb487f59bb1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584c35c9-9fad-4f0d-8b13-31625cfca831", "sighting_of_ref": "indicator--b2adeb32-33ec-4c93-8a0a-fd6c8847002a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496c87b8-ee77-4bb4-9cdc-6f95c5e73ba5", "sighting_of_ref": "indicator--b2adeb32-33ec-4c93-8a0a-fd6c8847002a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5810f79-894b-444a-9848-fcb7c8e8b7ff", "sighting_of_ref": "indicator--6ca67806-c995-4c8d-82a4-0ad54688f78c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efbfcf0-e824-4900-9e68-5dbcac7af7e0", "sighting_of_ref": "indicator--c11da2ad-58af-4cdf-8dcb-cee81d701c94", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1837985-b65d-486a-b531-6dfa4b170e2a", "sighting_of_ref": "indicator--9c9d9f5e-a12f-48e5-9872-ff3b21a2ba33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99559b28-b470-4e40-a3dc-782b9a472a66", "sighting_of_ref": "indicator--9c9d9f5e-a12f-48e5-9872-ff3b21a2ba33", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe3ee76-dc83-4e18-9f4c-856f0c473891", "sighting_of_ref": "indicator--9c9d9f5e-a12f-48e5-9872-ff3b21a2ba33", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ce9207-9b89-4ea9-a2ae-2cd40ab3a31b", "sighting_of_ref": "indicator--4cdf4aec-8150-4086-99a7-4aa3af889bb9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ad6614-b8ee-42a4-962c-d9b9bdc3b61b", "sighting_of_ref": "indicator--4cdf4aec-8150-4086-99a7-4aa3af889bb9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ec905c-84bf-4a03-9ede-857e9624a9e9", "sighting_of_ref": "indicator--4cdf4aec-8150-4086-99a7-4aa3af889bb9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182b56c3-d6cf-4ee6-a9ce-40929abc0043", "sighting_of_ref": "indicator--eb74ab4e-db9e-4d6c-b1e0-002d7938013b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f80b87d-0c3c-41d8-a25f-2a5e5de6af53", "sighting_of_ref": "indicator--eb74ab4e-db9e-4d6c-b1e0-002d7938013b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07578de5-c90f-4352-b058-22b1f3d85c88", "sighting_of_ref": "indicator--bf8cf325-45be-47fc-91e1-db64018b55b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b250ea6a-e311-4711-928c-382664336702", "sighting_of_ref": "indicator--176c2adb-a7d0-48c5-87ec-d87319a9c3d5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aac4646-87c4-4607-9ffc-d6c0f77b6e29", "sighting_of_ref": "indicator--c8394c2f-4869-4f31-8888-78c48b701051", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3d680e-79ed-418a-9d78-5a19728b5d01", "sighting_of_ref": "indicator--e1eaa31c-2260-43fe-be04-56b5ea8bc70b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0136619d-dfb3-43ca-a737-acc5390105de", "sighting_of_ref": "indicator--49d47c46-022f-42ff-b7a9-441cc3a7ba63", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202d6495-6281-4bac-8db7-3eaa99eef739", "sighting_of_ref": "indicator--6baf0f17-ecf7-43d8-acfc-e07a0083e4f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92433405-6e24-4eeb-bbe5-90baa6173093", "sighting_of_ref": "indicator--5bd96629-952d-44fc-b230-cf878964abd8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589880c2-1021-4b23-bd42-ff8505afc38d", "sighting_of_ref": "indicator--179ac0a0-f795-4b0a-9cdf-b22a5bc06b81", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72ceb4c-f81e-4135-9d89-0169f1a9d44d", "sighting_of_ref": "indicator--60122c75-f509-4469-9a16-c32ab48ea7d0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcca96a6-41c7-4159-9e4a-d8d2b171339a", "sighting_of_ref": "indicator--97f21bfb-cad8-44cf-a291-313bc188c6b6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf55fad-a67e-433b-9015-7975e4de6881", "sighting_of_ref": "indicator--97f21bfb-cad8-44cf-a291-313bc188c6b6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30c463d-9244-4916-93e1-469e99fb0cb7", "sighting_of_ref": "indicator--7810c0a3-d026-4b54-aa66-765747a68ab0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9742c64-9aec-4b50-bae1-71f04d59d37f", "sighting_of_ref": "indicator--7d4a4086-b50b-4a79-be85-4e4cea31c0f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a26128-4337-4c38-a1fe-0ce95b35ea96", "sighting_of_ref": "indicator--7d4a4086-b50b-4a79-be85-4e4cea31c0f1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f48aa0-820c-4e62-b473-fadbcb74bde8", "sighting_of_ref": "indicator--7d4a4086-b50b-4a79-be85-4e4cea31c0f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fd8168-7c37-4d80-aa09-8ef8dd38fe7d", "sighting_of_ref": "indicator--e25441b2-631f-4eca-886f-e232859e0955", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7af775-4948-47b2-84b5-80c98a286528", "sighting_of_ref": "indicator--497af48c-2c9a-47ef-9c17-018e187b959b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000768f0-faba-43ad-b6a8-26e1a770dbc2", "sighting_of_ref": "indicator--1890e738-3c4e-4b38-8694-7b1ab104bda0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9742be7a-8559-4777-bac0-69fb6b4d986e", "sighting_of_ref": "indicator--1890e738-3c4e-4b38-8694-7b1ab104bda0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e18172a-243b-4d55-a687-11aa95a9e3bb", "sighting_of_ref": "indicator--f08e2976-a41c-4ef8-b55b-f6724c2009e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a933d3-a09e-4f9c-b7c1-58cf136dadde", "sighting_of_ref": "indicator--5fb1bf78-13f4-4fce-80da-76c3ecb9a9ec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0c74cd-e38c-4a65-b84a-a231ed2e5e7a", "sighting_of_ref": "indicator--5fb1bf78-13f4-4fce-80da-76c3ecb9a9ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a47bb4d-6fad-44a3-89d3-11267a20f3aa", "sighting_of_ref": "indicator--d482053c-6099-4a31-85f9-4b32821304da", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afda92e-83c5-46be-b1eb-dd79af7bdcac", "sighting_of_ref": "indicator--06cf3fcb-c7a3-4a51-958a-3b3602fe859e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a28c45-f5c9-4761-8037-7d1cfead096e", "sighting_of_ref": "indicator--06cf3fcb-c7a3-4a51-958a-3b3602fe859e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a3bd46-370a-4172-ba2e-684045304941", "sighting_of_ref": "indicator--f3a6ba28-eed9-4fe2-aeb2-d2b9302c3adf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a2f911-eb32-4ab5-b042-4090604dbc27", "sighting_of_ref": "indicator--d2e44338-713d-47da-969a-97e0a0ee7f19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdf6193-75a4-4cff-bdd0-69136aa6a2ea", "sighting_of_ref": "indicator--4b6c729a-934b-40e5-b59a-a7460a59a4bf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bdf78fe-f1ac-4f9f-a760-ee8f3a9d2852", "sighting_of_ref": "indicator--2cd1b820-fe9f-47b8-8ece-146dafd0bc79", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb9c05a-d8b1-4e04-8c17-06e401340d69", "sighting_of_ref": "indicator--330ed1ba-61a0-467d-b4c5-f3e9e936fd55", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6568900b-632c-4c21-8b0e-6d8ea9984ff8", "sighting_of_ref": "indicator--f88023d4-c494-4813-9cf3-3c862c1a6988", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fd9a53-9042-4e7f-b4ad-8e3796d17be2", "sighting_of_ref": "indicator--aef391f9-f15f-4ed2-8c0d-eff73d85331a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38e409f-119f-4536-a45a-01c81b4e9268", "sighting_of_ref": "indicator--aef391f9-f15f-4ed2-8c0d-eff73d85331a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1aa578a-a2e9-48a6-a3d4-51bf942e405c", "sighting_of_ref": "indicator--421ea4f0-0a7b-4c9e-848f-7bd30fee5f85", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafb0dda-5ca7-4ea3-8494-c3afa1fa2ea4", "sighting_of_ref": "indicator--a6fecdfe-4839-454d-9d35-cfa15b082888", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbddcc97-2181-4cf2-a1d1-6dd780a32aec", "sighting_of_ref": "indicator--02f2fa65-2d50-4739-8293-caa4ce43c1c0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa95bd8-2fbb-49e8-bf62-710c8b18c9ab", "sighting_of_ref": "indicator--3cb9dfb5-a7be-40fb-b4fb-4427b9398054", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b769b5ad-3dfa-4662-b02d-2b5200d36438", "sighting_of_ref": "indicator--3cb9dfb5-a7be-40fb-b4fb-4427b9398054", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47a2122-5fab-4574-bbb8-d3d2b4020ec7", "sighting_of_ref": "indicator--d49a95f2-4639-40aa-83fa-e926be9d81de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee671327-965f-4b17-b212-706e31bac0ee", "sighting_of_ref": "indicator--ea261200-d351-4974-b3b4-6efc64fd7fcc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade43ac8-0a0c-4f32-b8ea-d25d3e5505a4", "sighting_of_ref": "indicator--b434ccc3-661d-454b-ba94-7513c1903a36", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdaae708-0cb6-4129-b14a-be458440d262", "sighting_of_ref": "indicator--18e25369-b250-40ab-ad6f-9ae81593abcd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110cceed-25e0-484e-998c-213df8379799", "sighting_of_ref": "indicator--18e25369-b250-40ab-ad6f-9ae81593abcd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634a65ef-e160-498a-b925-a2d98620cefd", "sighting_of_ref": "indicator--1879f5ab-dbfd-4e2f-bc3a-0716b215aeba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b2c17e-9389-404e-8586-adc6537c7971", "sighting_of_ref": "indicator--1879f5ab-dbfd-4e2f-bc3a-0716b215aeba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf3b878-0381-4913-bfb2-23d5a5d1532c", "sighting_of_ref": "indicator--1d3de552-aea4-4582-830e-9a0e65e0e8b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeceb339-dfca-4110-bd1f-b52c1bad940f", "sighting_of_ref": "indicator--1d3de552-aea4-4582-830e-9a0e65e0e8b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bfd99d-da55-44d1-abaf-ac6cd5244899", "sighting_of_ref": "indicator--9c372d23-42fc-4c2d-b496-d7cbddfce2aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4df8580-e24f-4732-8ab8-18fc59335ea1", "sighting_of_ref": "indicator--5107f474-87d2-4c74-b008-4107b189899e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2493732-0854-4d14-8f54-6492674582d8", "sighting_of_ref": "indicator--e646ba50-a39b-45df-80d2-f59cd2b6bd4d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd26f4fa-6a88-47f3-b989-52e643efdf44", "sighting_of_ref": "indicator--77aac6ed-e03a-43c6-be0d-da04bc3dc558", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc50b83-4dc3-42fc-afe8-4422bf3f4250", "sighting_of_ref": "indicator--77aac6ed-e03a-43c6-be0d-da04bc3dc558", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed0d298-c51a-418d-a0ce-be3caf859556", "sighting_of_ref": "indicator--940a1ef3-abb9-49c0-8dd1-913874a7448f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d804deb-0d73-480d-92c0-77bce80a5e2e", "sighting_of_ref": "indicator--8d9efa4f-89dc-4949-a4c3-f3a794da8861", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c9e20a-ead3-4806-90c1-e1711e10e0d4", "sighting_of_ref": "indicator--5b10f366-e44c-4957-85bf-779aa7541c3b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee65170-8826-45bc-8c34-33ab1121cce1", "sighting_of_ref": "indicator--0252cb3a-9377-4938-b725-e0c31bcdf922", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12dd681-ddba-4086-953d-64668867b613", "sighting_of_ref": "indicator--0252cb3a-9377-4938-b725-e0c31bcdf922", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0564fbee-b206-4010-8ebf-b94410840961", "sighting_of_ref": "indicator--0511df19-5016-45f5-bdef-eac25f939db9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c476e3-2f87-44cc-b86f-5fbfdbf63abb", "sighting_of_ref": "indicator--d0659e04-e586-45d7-aa5b-ddbcb325a484", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed87d13-ba5e-49d6-8629-0c0a7ab1497b", "sighting_of_ref": "indicator--dbdb899d-c4ac-4f95-bf05-478977ffdd3e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb05cfb-5599-4ee0-85ff-8d41614b5347", "sighting_of_ref": "indicator--dbdb899d-c4ac-4f95-bf05-478977ffdd3e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357d1088-bddc-4027-989a-4ff63e6ae9c7", "sighting_of_ref": "indicator--dbdb899d-c4ac-4f95-bf05-478977ffdd3e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b02b67-df08-4edd-84b7-7d2c37dd4f04", "sighting_of_ref": "indicator--9419883f-b2e9-400e-b048-131aa476aa44", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbbf683-bcdf-4889-99a9-16d46c233095", "sighting_of_ref": "indicator--9419883f-b2e9-400e-b048-131aa476aa44", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b3ad7b-1a00-49ec-bd07-fea67e0c88c4", "sighting_of_ref": "indicator--2fb7258a-08e6-409d-a471-f9906df2e530", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4beda08-d8f8-4d09-a11c-1159ba79c776", "sighting_of_ref": "indicator--9c06bfb4-593f-40ad-a993-8aea64e1524b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab30152-cd08-4e68-9986-6667a7f31943", "sighting_of_ref": "indicator--9ad7d41e-2234-49f4-bfca-f48e7b9882fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8c1cd2-7aa5-4485-a1cb-e86042f8bc85", "sighting_of_ref": "indicator--9ad7d41e-2234-49f4-bfca-f48e7b9882fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4ed56c-69dc-417c-bd8a-895c599122e1", "sighting_of_ref": "indicator--ff2de8c5-00f8-45fb-b8be-ec745f6f2a18", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346e1a38-a27f-4dcc-85a2-f8f201b2261f", "sighting_of_ref": "indicator--6dab2933-f94a-469e-a9f7-45b251408bf3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ed222d-1660-4cba-bf0b-4f5a008ddf3f", "sighting_of_ref": "indicator--6dab2933-f94a-469e-a9f7-45b251408bf3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2f35d8-351c-40ba-a218-8d9491552d36", "sighting_of_ref": "indicator--6dab2933-f94a-469e-a9f7-45b251408bf3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634e2c47-746f-4aca-9bce-efe3b83ef3f3", "sighting_of_ref": "indicator--618b14da-ed20-41cf-835b-4c36ddeafe11", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab7bca2-d233-4f1c-a622-e0aaf47f1749", "sighting_of_ref": "indicator--3635ea30-0715-4a83-a938-2542240544c8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb339cd-21bd-4eb1-accd-65ef0e44c1f9", "sighting_of_ref": "indicator--a3b1cdb0-77f5-480c-a1c7-fddcda18f201", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f0740d-b2ce-4d6a-a6db-01e384bf6f94", "sighting_of_ref": "indicator--a3b1cdb0-77f5-480c-a1c7-fddcda18f201", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b6046d-c25f-4581-a9e3-01796436d56a", "sighting_of_ref": "indicator--b921c7b4-737a-4390-a52f-1da9551a3250", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb58cd26-6385-4df9-881b-79ce3fcd0616", "sighting_of_ref": "indicator--b921c7b4-737a-4390-a52f-1da9551a3250", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac84125a-8695-4a31-a5a6-8a68b29ee2b3", "sighting_of_ref": "indicator--67244aff-17d1-4cfa-8fe9-552e7171a706", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a160f69-21e6-40f5-af89-4b2aaead741f", "sighting_of_ref": "indicator--67244aff-17d1-4cfa-8fe9-552e7171a706", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21de898c-5397-47e5-8862-01d0337dea15", "sighting_of_ref": "indicator--7cf0e983-8c09-4e67-8f6b-8e8334005faa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae89778a-5d26-4680-8e7f-f98a41062ad7", "sighting_of_ref": "indicator--7cf0e983-8c09-4e67-8f6b-8e8334005faa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f8c7ca-3571-484c-866d-4973748e962a", "sighting_of_ref": "indicator--eb45a5a4-591a-45f8-863a-3b41fbe62672", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a458dfa0-5a4c-4e8a-88e3-a4430542e4d2", "sighting_of_ref": "indicator--9e4d5a54-f516-4343-b528-6bdaf0bc2362", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb82ee73-74d2-4087-b5b2-6379fad61b09", "sighting_of_ref": "indicator--b795b7d5-a100-4730-ab44-bd54fb9b13ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feafe20b-4520-4116-af15-225a8a015553", "sighting_of_ref": "indicator--b795b7d5-a100-4730-ab44-bd54fb9b13ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374e3690-424b-4ab4-9ac1-e8510a7aaafe", "sighting_of_ref": "indicator--59e7c818-2283-44d2-8783-57a2c53d6498", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf425df2-c3f3-416a-ad68-ca8f56e5942f", "sighting_of_ref": "indicator--59e7c818-2283-44d2-8783-57a2c53d6498", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4404727b-dcb8-4a93-b684-5ff61c8febf8", "sighting_of_ref": "indicator--59e7c818-2283-44d2-8783-57a2c53d6498", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533f78f2-1a30-4652-b071-30626b73924d", "sighting_of_ref": "indicator--d4dd6226-f2b1-4384-bfad-3d6e97166c76", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f52dba-d08d-43cc-bb0e-37a8989351fd", "sighting_of_ref": "indicator--f1c8505e-c8a8-45ad-8ce5-e5c8d09062b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dfc71d-5f0f-46de-a3a4-79ab4025aae2", "sighting_of_ref": "indicator--5e60a791-79b5-411a-ab96-fdd3142773c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8089e9c0-5b8f-49d3-9238-0bb9a3a958df", "sighting_of_ref": "indicator--2ca9dbe3-371d-4d8b-8f43-c247c47a6afe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4985aac5-aaf0-409a-84fa-aaa8e7502f1e", "sighting_of_ref": "indicator--853dff32-538c-44e8-a9f1-d0e5a284107f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54838b4-57b4-49db-855d-0334a6cc6c36", "sighting_of_ref": "indicator--853dff32-538c-44e8-a9f1-d0e5a284107f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede33aa2-ca7b-48d4-b2b3-1ce0d279fc5d", "sighting_of_ref": "indicator--0f17b7e1-6505-4f50-bc1c-b6efa6362f24", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ecc7a8-9a7e-4aee-8151-d81783fb777e", "sighting_of_ref": "indicator--f86e50bf-2893-44a2-834b-6e49d8f1b190", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6378384c-9e35-4cbc-a2e7-954ee02a4af6", "sighting_of_ref": "indicator--d7b4a2d4-aba8-45fa-9d00-ec9cdb0d1cbe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1aa41fd-7eaa-4a79-9d88-38a67d920033", "sighting_of_ref": "indicator--d7b4a2d4-aba8-45fa-9d00-ec9cdb0d1cbe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407193ff-3645-45d3-85c3-90dc6cd3457a", "sighting_of_ref": "indicator--1b7c97c8-2ff7-4d32-83ed-9da030f6c239", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6f2379-7f36-4afd-83e3-43c5693f2efd", "sighting_of_ref": "indicator--1b7c97c8-2ff7-4d32-83ed-9da030f6c239", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1732a7-ab96-42ab-8ec1-086ad0e4da4f", "sighting_of_ref": "indicator--1b7c97c8-2ff7-4d32-83ed-9da030f6c239", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a198cf7f-35fb-424a-88d1-57086ad63b04", "sighting_of_ref": "indicator--9dd0406b-ff5a-4e41-95d7-4e8cf02fe75f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1b4746-1048-4949-80a9-f0cf61d9e50f", "sighting_of_ref": "indicator--9dd0406b-ff5a-4e41-95d7-4e8cf02fe75f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae12565-447a-484e-8b71-3d452e7c8f37", "sighting_of_ref": "indicator--92771302-442e-4b09-932d-9d5d8979ab24", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d368f9-f3bf-41c7-81db-505db1a6d138", "sighting_of_ref": "indicator--0be2c10f-2d50-42c3-9c7f-03d6d661f976", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85520f4b-6fce-4d79-8043-554988f3b398", "sighting_of_ref": "indicator--0be2c10f-2d50-42c3-9c7f-03d6d661f976", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b999e8b-6bcd-4d6c-a300-e0472ccb112e", "sighting_of_ref": "indicator--3a995d76-dcf2-4fd2-b7d4-3ed6a7ca8bc9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eeb5440-cb84-4ff5-9db6-82586bc5f272", "sighting_of_ref": "indicator--10da5274-64bd-41e2-bbd0-396ecb6aae3a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc90395-9bc6-4ccf-973f-82b6c8e4d3d0", "sighting_of_ref": "indicator--4d737726-1517-4e48-b8b4-d7e48e50b020", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96919f1-b826-4ec8-bd2b-064285154014", "sighting_of_ref": "indicator--0a5eb3a7-e9ec-4932-906b-775843830e20", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d60bd6b-1f3e-4ba6-b0e1-e62fc0c70721", "sighting_of_ref": "indicator--040dc496-affc-4d7f-a940-9cf4aa903b03", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c507b9cd-9928-412a-9fb4-44a930ce6e0d", "sighting_of_ref": "indicator--984b5221-8ac4-4fc0-9113-39bb022e171f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5821b145-99a4-48e7-8f60-97b7557b77f6", "sighting_of_ref": "indicator--984b5221-8ac4-4fc0-9113-39bb022e171f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc69a09c-350d-4d4b-a61f-ccbcb69bceb8", "sighting_of_ref": "indicator--cbfc4b14-ff49-4055-a047-5c3c7b50c139", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b092ef63-4867-4bf0-bd59-89f7db6451ce", "sighting_of_ref": "indicator--04b87d94-141e-4994-8ce4-53ae3f63cbb9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e01e84a-f283-493c-b029-0fc1a4ece7d6", "sighting_of_ref": "indicator--04b87d94-141e-4994-8ce4-53ae3f63cbb9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e189e074-107c-4fb7-96f2-796a0bd87e3b", "sighting_of_ref": "indicator--cb58d674-1645-4475-bfcc-ec564306863c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecaa3b1-2532-4941-a1f2-37b68ff263f1", "sighting_of_ref": "indicator--cb58d674-1645-4475-bfcc-ec564306863c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa902d2-93ce-414a-9db3-1ceacdef0e53", "sighting_of_ref": "indicator--15595b81-c763-48b4-ac2a-b0d1bae8725c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c87bcd-0900-458c-8fcc-08ecc24d377e", "sighting_of_ref": "indicator--15595b81-c763-48b4-ac2a-b0d1bae8725c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4254a33d-c400-4214-bcd8-62b7125e72e8", "sighting_of_ref": "indicator--0b830f65-3d38-4ac4-affa-7fe9fdd69459", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9fba2c-ef9d-45ab-b84d-b80bed09b4cc", "sighting_of_ref": "indicator--42d4edb8-2534-40cd-b099-6b9b90aedd0a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0e4c50-71af-4bcc-8cbf-b170d02118be", "sighting_of_ref": "indicator--8d6ebdb9-c809-45c6-b265-16f689355930", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa38911-5275-4b77-94e6-f7e03d24676f", "sighting_of_ref": "indicator--8d6ebdb9-c809-45c6-b265-16f689355930", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cb47b9-6600-47d6-bb9e-728d5a853cc9", "sighting_of_ref": "indicator--8d6ebdb9-c809-45c6-b265-16f689355930", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77053b53-bcb8-4a82-87ca-0f004771126d", "sighting_of_ref": "indicator--90537b56-c7d5-473c-b9bf-7fda288c1e56", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b6da50-b2f2-4e12-acd1-aae1ccf4ae40", "sighting_of_ref": "indicator--90537b56-c7d5-473c-b9bf-7fda288c1e56", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483ff8d5-e177-4568-92a3-984fb6fc263d", "sighting_of_ref": "indicator--90537b56-c7d5-473c-b9bf-7fda288c1e56", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689cc92f-0312-4a8b-a0cb-30a3828b175d", "sighting_of_ref": "indicator--4fbafad7-cb56-4cdc-894c-90ea9270ebdb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402c88b3-74f4-41bd-a532-9b5ad0062d71", "sighting_of_ref": "indicator--4fbafad7-cb56-4cdc-894c-90ea9270ebdb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2a7fc6-9ebe-4888-b724-1afb551c2734", "sighting_of_ref": "indicator--cd20414a-15bd-4467-aa6c-e95751678290", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5733d39-a5fa-4139-bb6f-a9540e7e833c", "sighting_of_ref": "indicator--be3b5a5a-c7ea-4b12-aa3f-7f929bb7e775", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233c0f83-8497-4457-8e42-2c65c1ff803c", "sighting_of_ref": "indicator--85761858-1510-4744-8021-f4297d92e399", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf857783-4291-4271-a7fb-a1567caf7cb0", "sighting_of_ref": "indicator--4cc49c97-99f9-4f5e-a91c-baf8f8cb8737", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5ef4f1-c823-408c-af56-9127b86e06df", "sighting_of_ref": "indicator--a5b84b76-f861-4687-a375-10f59d79baef", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefb98b4-4565-42eb-955d-5991029fba63", "sighting_of_ref": "indicator--a5b84b76-f861-4687-a375-10f59d79baef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477ddee4-688f-44b2-b755-37f24239be08", "sighting_of_ref": "indicator--2fdd8b7b-c751-4c16-9519-302491ca5146", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2607ee0-f58c-4ce5-9303-4f399498516e", "sighting_of_ref": "indicator--2fdd8b7b-c751-4c16-9519-302491ca5146", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4a756a-364e-4726-93be-f2890464eefd", "sighting_of_ref": "indicator--93d4841a-5400-4b49-882c-e472bb4e1305", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7177229-7d4b-4e20-aded-7bea2cd8f3db", "sighting_of_ref": "indicator--93d4841a-5400-4b49-882c-e472bb4e1305", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361d4fdd-2ec2-40ea-8b44-a45df6aaab83", "sighting_of_ref": "indicator--6af8ef66-3a04-44ac-a200-bd62c41fdf55", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc62f716-c1f5-4c25-9687-8b34f938ae55", "sighting_of_ref": "indicator--a6d840a3-0328-4f6e-b27c-abfb145a0211", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39644373-27c5-4088-8a0c-c534cb3b8fc2", "sighting_of_ref": "indicator--45524316-2f3d-4011-bfc6-59b94eb7fbfe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c508ac29-afba-46c4-8ea6-7a75b72e5e99", "sighting_of_ref": "indicator--0e86b72a-0a31-40c2-80cd-9f868eda731d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146b45f1-a7aa-43d5-b55b-01a684283576", "sighting_of_ref": "indicator--8cab606a-3eaf-4f38-b9a0-82e9c9807c68", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484e1d47-6c45-481d-85be-085fe539e042", "sighting_of_ref": "indicator--59c49d97-d620-4ffc-a7c3-2891237690d9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5365584-5faf-430b-84ea-b1277b1b6e61", "sighting_of_ref": "indicator--50bc2c40-5056-43f4-85e7-fbd96963a1b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281bdf02-3b7d-4f5b-9ba4-a17df9952d11", "sighting_of_ref": "indicator--50bc2c40-5056-43f4-85e7-fbd96963a1b5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902fc812-201f-47c5-ac61-ddcdd128fdd6", "sighting_of_ref": "indicator--50bc2c40-5056-43f4-85e7-fbd96963a1b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb04ee89-0108-48ae-8759-f66d42b48737", "sighting_of_ref": "indicator--885196ba-88e0-446d-8c9c-38df23f00c2f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a976c8f4-9bef-48c9-a25b-509fb37e4298", "sighting_of_ref": "indicator--885196ba-88e0-446d-8c9c-38df23f00c2f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45b9478-1736-401a-930a-a3266ef0d8d0", "sighting_of_ref": "indicator--7499be78-5ce9-4a7f-9b0b-112fb477bc8e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1299764-22fe-4d4b-8af9-0c1c9d05ca28", "sighting_of_ref": "indicator--7499be78-5ce9-4a7f-9b0b-112fb477bc8e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6bf1f2-151d-4ab3-a0b1-9c65fe1abe70", "sighting_of_ref": "indicator--158eea5d-9073-4b6f-97ed-34acb9ab2dfd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0d3876-55d9-40ab-ba13-c2b47e1f555b", "sighting_of_ref": "indicator--158eea5d-9073-4b6f-97ed-34acb9ab2dfd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5073a5e3-78dc-42f5-aa31-26e9dedc7346", "sighting_of_ref": "indicator--9f10d52b-4de2-4e76-978f-705d9ae40533", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7203a1f-39ae-41e8-9d5f-1a082da86095", "sighting_of_ref": "indicator--05335b95-41ac-43b6-8390-9752635da4e1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a8f5f8-ed9d-468f-9cdf-819402b76d7e", "sighting_of_ref": "indicator--05335b95-41ac-43b6-8390-9752635da4e1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9579f6-e00e-408d-b4c2-083b60876251", "sighting_of_ref": "indicator--472ee7a6-1f70-479d-a550-ab37ebb45f6c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62f335d-b591-4f52-9377-788bca80faca", "sighting_of_ref": "indicator--00b64bee-d794-4965-b146-37c7b1ffa734", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e8b1d1-1c28-48e2-a668-694c6569fcd5", "sighting_of_ref": "indicator--dddb78b3-8cc8-4802-bd82-f505b01466f8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e3d565-00ba-406e-ab10-dc3131d04b96", "sighting_of_ref": "indicator--dddb78b3-8cc8-4802-bd82-f505b01466f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b12206a-4412-4497-9892-3ed0caf7ed2c", "sighting_of_ref": "indicator--3777ab9a-6da7-484a-941d-e7d14ce4c0c6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ed3e6c-a83c-4d76-98e4-a74123f9057b", "sighting_of_ref": "indicator--3777ab9a-6da7-484a-941d-e7d14ce4c0c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b731e1a7-d009-402c-957c-dcf220901768", "sighting_of_ref": "indicator--da401994-4c87-48b4-a834-e0598ff1a620", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b41efc-7ded-4d75-aedc-4ad4ec03b01c", "sighting_of_ref": "indicator--da401994-4c87-48b4-a834-e0598ff1a620", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90b2e0e-183a-4cb5-9e8c-fa1999e5e822", "sighting_of_ref": "indicator--99ef3744-cd33-468c-ac01-dd10ac4f59e1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13b1b2f-f9f5-4f94-afb9-7f60fe5b2e26", "sighting_of_ref": "indicator--4f5f0f3f-7159-4cdf-8bd4-6972c65a2098", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ce0c65-7f76-47b5-86e0-7d95689c6dcb", "sighting_of_ref": "indicator--3cab4b01-a6de-4aa5-98d4-3cb6f99f13f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc60151-7f29-454e-b202-25d83776f2b2", "sighting_of_ref": "indicator--3cab4b01-a6de-4aa5-98d4-3cb6f99f13f3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8721f2b7-504e-4d58-82a8-da733dbf9fdc", "sighting_of_ref": "indicator--3cab4b01-a6de-4aa5-98d4-3cb6f99f13f3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a4698c-b591-46b2-904a-6d0568b89f86", "sighting_of_ref": "indicator--a6373a8c-716c-431b-a8e4-567f259af75b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9385a189-50fe-4a93-93cd-12f981318a6f", "sighting_of_ref": "indicator--931da62c-67d4-41fb-8389-622eb8e90e46", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c004e044-a94b-4176-b80f-51aa1e6cd6a5", "sighting_of_ref": "indicator--da0e6ea3-bad5-45dc-a675-729795c1f6ed", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2001106f-6118-40b5-82f0-9c7c45c6f955", "sighting_of_ref": "indicator--da0e6ea3-bad5-45dc-a675-729795c1f6ed", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08445c44-6eb7-4eb3-bcf2-f472135756de", "sighting_of_ref": "indicator--c2e83948-3a7e-4ea7-8716-29e3af9b4da6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ea97f2-496b-42ed-bf2d-cddb90d40559", "sighting_of_ref": "indicator--6855f864-fed7-483e-ab9e-4ea0f83f1801", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289e8dbe-a18a-4f27-8600-d6b5471eaf31", "sighting_of_ref": "indicator--bc5a48ac-5b63-4d1b-83d1-e69dbe6d306e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34aade3-ef91-425d-bfa4-0bb9abd571cd", "sighting_of_ref": "indicator--bc5a48ac-5b63-4d1b-83d1-e69dbe6d306e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ebc66b9-2eb0-4466-8eed-d5fc5f0bad0d", "sighting_of_ref": "indicator--1dffadd5-44a8-4cf5-8df4-f35a7cb55243", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6300d050-64a8-4446-bb52-cb563144610f", "sighting_of_ref": "indicator--1dffadd5-44a8-4cf5-8df4-f35a7cb55243", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb65af1c-e929-4f73-bad1-f06a81851010", "sighting_of_ref": "indicator--f8e24662-e1cd-4ac6-a6bc-fd279081a42e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba49602-d733-401e-851c-7cdae15fd459", "sighting_of_ref": "indicator--7463a4cc-b765-4dae-b771-b581932468de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f21cb5-d539-4184-ba3c-5106246c1a76", "sighting_of_ref": "indicator--7463a4cc-b765-4dae-b771-b581932468de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf6eac5-e1a7-4020-9ba1-0b4fdb33b653", "sighting_of_ref": "indicator--81e7d4d1-ef3d-4d3e-8dfe-3c6276312202", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24df440c-a1ac-4534-98a9-279fc175373f", "sighting_of_ref": "indicator--81e7d4d1-ef3d-4d3e-8dfe-3c6276312202", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7e6d3a-5789-4377-9e38-353761954417", "sighting_of_ref": "indicator--3f03c56f-5dbb-4fc8-8bb4-a90f6dcfc45b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c88bca4-5862-4daf-a86e-27d8499f8b3f", "sighting_of_ref": "indicator--3f03c56f-5dbb-4fc8-8bb4-a90f6dcfc45b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f6761c-39f2-4ccc-9c05-6fd03545d752", "sighting_of_ref": "indicator--69d0c53f-82c6-4f07-b180-44cb285a0e88", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4107c040-a2ff-4770-8744-848edba08484", "sighting_of_ref": "indicator--69d0c53f-82c6-4f07-b180-44cb285a0e88", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8ff0b6-f883-49f4-b17f-ed653a24dd8f", "sighting_of_ref": "indicator--69d0c53f-82c6-4f07-b180-44cb285a0e88", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d85b36b-62d9-4c44-ae05-3f9369a91a29", "sighting_of_ref": "indicator--4c7b0118-fe80-4c57-bb6f-b0748932a20d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f618db-3290-430a-a2e9-89fc34605b37", "sighting_of_ref": "indicator--4c7b0118-fe80-4c57-bb6f-b0748932a20d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9caef3-5f1e-4f08-825e-faab2594ea2a", "sighting_of_ref": "indicator--3079a548-1f13-445a-b8a5-e54642b3d412", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df4260f-3676-480b-86a3-6f93eece1e58", "sighting_of_ref": "indicator--4d300109-a965-48b5-8033-f968de06543c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f363ec57-f6f0-40a5-a1f0-c0bc7a7ec641", "sighting_of_ref": "indicator--fbb9f58d-c2b5-4be7-91ff-be768fc0baff", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3979fd-c447-4f2d-91bb-a0af991c3eb1", "sighting_of_ref": "indicator--83552995-59b1-48f0-a7b1-8cf5881b4690", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc89a788-af16-4611-9b09-361b3abbdba4", "sighting_of_ref": "indicator--821b3ed2-d876-437f-8920-3edc0bb5fc0c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c32140-e01b-4f79-9714-3f15685f936d", "sighting_of_ref": "indicator--315a6b57-3b80-4976-9a29-2e42b94cc97d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7d4adc-3312-4406-8ec4-6a4fc988aa0e", "sighting_of_ref": "indicator--7cb2d9f5-4167-43a2-9225-6c5ab533e910", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b698f9cc-b99f-4389-bb68-072b064d9ae2", "sighting_of_ref": "indicator--208d0027-7d84-4778-9bc4-074331a758a0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c0b9acf-3b99-4b02-90d5-e885c4ab98d3", "sighting_of_ref": "indicator--1d4da2cd-27a8-43bf-ada1-77d25c79cd94", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e87153-475c-44d7-b9bd-9049342fabc6", "sighting_of_ref": "indicator--2dede9c8-ba25-4059-9efe-31c661283259", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb5bf92-60de-4e26-8265-94735cfb5324", "sighting_of_ref": "indicator--2dede9c8-ba25-4059-9efe-31c661283259", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f890f589-390d-4fcf-838e-7de39096ceab", "sighting_of_ref": "indicator--fb407b1d-f04b-4e11-906e-21c032cae6c3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd1c15c-fc93-412e-a703-b4af2cec2e2a", "sighting_of_ref": "indicator--72c089fd-1f9f-4ee9-8a50-bd4dcc92c9ef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4890b30d-0ff3-4448-88f2-08275c00345e", "sighting_of_ref": "indicator--b6dbd5fd-be16-4250-bc09-1d9431cb6525", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ba7711-b221-43d9-b37f-804f00c6c2e6", "sighting_of_ref": "indicator--b6dbd5fd-be16-4250-bc09-1d9431cb6525", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--934e1a74-e16f-4033-b089-4f313d037cfb", "sighting_of_ref": "indicator--b77f7121-5321-4c68-8e0a-eaff6f95095e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f33ca40-61b9-49a9-952d-f9a4e5e4fe2f", "sighting_of_ref": "indicator--b77f7121-5321-4c68-8e0a-eaff6f95095e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dcd17c-54c4-4c03-a812-f52f180be8e0", "sighting_of_ref": "indicator--fe59f859-2dac-46d6-9f94-e2ea2240de21", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7299cad3-ebf1-42e9-be2a-108e6e1ed452", "sighting_of_ref": "indicator--fe59f859-2dac-46d6-9f94-e2ea2240de21", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aef2089-8366-41d3-875f-2c7105233a5e", "sighting_of_ref": "indicator--28a734e2-65af-4329-b5e5-7489aa0f8955", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9465f651-aa8d-4b92-8708-3757a39f4d1b", "sighting_of_ref": "indicator--c0b6b870-222e-4179-bc35-2bd158c155ab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3f1347-30f1-45a1-b58f-2230e94575ff", "sighting_of_ref": "indicator--ad69de4c-c78c-4ca9-ba9f-b447b16541bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f893599-7acb-4acf-bbd9-6ac9224ee64c", "sighting_of_ref": "indicator--4d61f122-2f50-41c9-bbf8-b8ac562e7c3f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500e0a17-6954-4b61-87d8-e5ee67c90e32", "sighting_of_ref": "indicator--92299319-05bb-41a7-9737-2f26d43bdd27", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c5c8fa-571e-432a-bda4-d352f4f8c155", "sighting_of_ref": "indicator--4947dd5b-91ca-44df-a58f-b0fc9f56f451", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83abdbd-65ef-4430-834c-0851e882e54e", "sighting_of_ref": "indicator--b2cdb053-fbaf-4698-b061-cb792c4d8c28", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3b5901-3212-4ff5-ab65-8d7516978181", "sighting_of_ref": "indicator--5837b6dd-b330-48b2-872f-46ad597713ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ec7d02-6368-41cb-b784-1a800e19176c", "sighting_of_ref": "indicator--5837b6dd-b330-48b2-872f-46ad597713ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789c0966-29a0-4935-bcb0-978c7d629777", "sighting_of_ref": "indicator--a8f8c12d-99c4-406f-bd8d-52a00aea2be0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9755e785-82bf-43b5-b827-39e8aee0cee7", "sighting_of_ref": "indicator--a8f8c12d-99c4-406f-bd8d-52a00aea2be0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fefd2f10-a2e5-4866-99ac-feb5fcf093da", "sighting_of_ref": "indicator--bd6013c9-a739-4103-9c94-bda816ab0ea7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd7d77d-92aa-4b4d-8bc2-f30a097efbe4", "sighting_of_ref": "indicator--63504bf3-58a2-4f0c-97b2-5b9472c29a1d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6b45f2-dfb9-4689-a3b5-d1f0eaaa8bed", "sighting_of_ref": "indicator--f060e3ff-d847-4bb4-b260-b9322d06350a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2076e4ec-0db0-4447-b6f4-8f9d71c80fd9", "sighting_of_ref": "indicator--47486e91-d0f9-46a8-aab5-1ef290033c3d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95270406-6c2f-4c63-b720-accbeb5521d2", "sighting_of_ref": "indicator--47486e91-d0f9-46a8-aab5-1ef290033c3d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd80481b-b607-4b65-8b61-9f19e62b155b", "sighting_of_ref": "indicator--471af187-9e85-45dc-b621-ccff0a92b0d5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23021052-13e2-4b55-94c5-fe99183cf4c3", "sighting_of_ref": "indicator--5cdd7877-c5d9-4cbb-8798-14e7cad2ae97", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b14698-53ec-461e-8276-dac48d615b3a", "sighting_of_ref": "indicator--35a8149e-816c-47df-a6e7-17ccc0a8002b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e0199a-dad7-4d4a-b93a-bf2d57900216", "sighting_of_ref": "indicator--61c19b6d-d13a-4ea9-aced-0fc742749144", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ed0016-c057-4b18-ac37-7f744d3262c8", "sighting_of_ref": "indicator--61c19b6d-d13a-4ea9-aced-0fc742749144", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac9bc65-0399-4a7f-b2d9-7e9976e6f4cd", "sighting_of_ref": "indicator--32974b91-e2fd-4c31-81c4-23670aa282db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ec399f-0aee-4088-b2d3-e631d5687e8b", "sighting_of_ref": "indicator--32974b91-e2fd-4c31-81c4-23670aa282db", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf666ed-6af1-4847-8cb4-d14cfb5bc876", "sighting_of_ref": "indicator--00580a82-8d92-4763-b1df-8ec9f641aee0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aff8c76-aee1-419a-a556-8e0183f447b3", "sighting_of_ref": "indicator--89c46504-8a70-4454-8adb-a72c9b6b8435", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f30adf4-254c-4e6c-be3f-7e13a7cbeb18", "sighting_of_ref": "indicator--5785922e-7241-4cec-841f-16cbd0d6cc48", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4168fce0-66ad-45e8-9127-a7906cd3d2f7", "sighting_of_ref": "indicator--b2cd11a1-1885-4614-9a70-c62d9775a5d8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a2b1f6-5195-4b49-a026-8d0c81e01fc3", "sighting_of_ref": "indicator--3383a90c-6637-4ca4-9e5c-1862eb6a9a52", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b6112b-8036-4782-9167-3b6c5256d56e", "sighting_of_ref": "indicator--6ce6332b-07b6-4467-bb6d-64c35527e978", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4deeab89-d378-4a62-9d8c-aa234419a683", "sighting_of_ref": "indicator--3f3379d0-dec1-4270-ab6c-d5cfe0863480", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1627ad7e-7c0a-4cf5-8cf0-730a6741f62a", "sighting_of_ref": "indicator--991fd376-d819-4ac2-be60-3e9e059df3ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d29c04-5417-4473-890a-79400ee4e1b1", "sighting_of_ref": "indicator--f9100f2e-ce87-4d3b-a7bd-4bae19877c50", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98222650-2408-4132-abd4-89c86bfb696f", "sighting_of_ref": "indicator--8a2294e0-f3f6-4f81-8d64-628183c83858", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ef79f3-7d6e-444a-b668-ccdfff3081e6", "sighting_of_ref": "indicator--622b5c4a-4a21-4444-830b-c54939c5a554", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc6a3cb-5918-4a30-ac2e-1f419a11c9fe", "sighting_of_ref": "indicator--fa454b38-4253-4dd6-9a45-bd3aead2d8d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae8cde1-27db-4f49-9523-70f16ad4b218", "sighting_of_ref": "indicator--12d2598e-1405-41dc-99a2-d43d2c2e7f32", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51108134-4fbc-47ad-b6dd-46d975d23e54", "sighting_of_ref": "indicator--12d2598e-1405-41dc-99a2-d43d2c2e7f32", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af89aa6e-752e-4bd3-af3e-67f8a81db6a3", "sighting_of_ref": "indicator--aa1610da-1605-44e1-b0ef-f41de783cc9e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df4325e-158a-4541-84bb-64d5e1fbd795", "sighting_of_ref": "indicator--408da772-2563-458c-96ab-2f1cf01fdb7f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ead7d49-810c-4a8c-b6f9-dd1a1506e563", "sighting_of_ref": "indicator--c048fb05-4c7a-41ec-9cef-ca2bd33dbe74", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f745081-7fe1-4bb8-ae98-19d0cc09c94b", "sighting_of_ref": "indicator--a1521387-da98-4f6b-a532-87023b52e0f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0760f858-5535-45ec-af0a-c9700bc0b375", "sighting_of_ref": "indicator--277b4c90-b72d-4754-853c-7866123ff9f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddf9473-59bc-4b19-9546-9d5f1493abdc", "sighting_of_ref": "indicator--eba37c5a-9543-49eb-8774-a4ca7250ffa0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510b3d0e-7481-4939-b905-2ab98d793246", "sighting_of_ref": "indicator--544a42fa-c2df-4b09-a16b-f5ff7f1841b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be72570-5a65-4841-b452-934e2615307f", "sighting_of_ref": "indicator--544a42fa-c2df-4b09-a16b-f5ff7f1841b5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9f535a-e1c7-4550-b449-2ffd1fbf0bc7", "sighting_of_ref": "indicator--70456fc0-6b24-4e33-a427-ffff4199e3c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63a6cd4-40f6-4a7e-9030-a0fa7f2ce67c", "sighting_of_ref": "indicator--44f753b0-5d7e-4410-baae-b07bc50b150d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a28fac7-36c0-4068-bc7d-f69220f3d2b9", "sighting_of_ref": "indicator--90f1a757-6063-4db6-a9d7-7df9a0eea906", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6c047d-2b55-4a7e-b048-3585fcd5472f", "sighting_of_ref": "indicator--4cfbae51-cf62-4148-abdc-c9e5cc35c0e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90502b3a-b1d5-4d9b-8fe2-4a0187eb0e37", "sighting_of_ref": "indicator--4cfbae51-cf62-4148-abdc-c9e5cc35c0e7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed39f75-8429-49db-af50-702b256de78e", "sighting_of_ref": "indicator--9eda05d7-ab20-44e7-a318-66d0b80d6730", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bca8f57-9920-4384-8b13-47c895a0cf09", "sighting_of_ref": "indicator--9eda05d7-ab20-44e7-a318-66d0b80d6730", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea07c30e-a933-471c-80b4-916741f9017a", "sighting_of_ref": "indicator--68298daa-0633-48e4-b06d-c534cf232746", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420bf5e3-ed70-49fc-bd79-5dd332f38084", "sighting_of_ref": "indicator--1ad8312c-5780-4839-8992-3355b84984a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d8a9c5-e77c-4aa9-9b0f-4dc9a6fcd4ca", "sighting_of_ref": "indicator--1ad8312c-5780-4839-8992-3355b84984a2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c22baf7-efc5-4808-b158-4abe7d2d1d12", "sighting_of_ref": "indicator--2dce9cf8-2295-4d43-94ca-bf4aa3ed60ae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363bca47-fdb6-4fcf-a2cc-3fc1e7994018", "sighting_of_ref": "indicator--505710e1-d2ad-4605-85db-166c889c5be3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661ff184-ce0b-4e27-80eb-bd36bbd6e42c", "sighting_of_ref": "indicator--2694db28-ef9c-49d3-8f71-3b19905b6a56", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9958d17-1fc7-4145-b8d5-de5851c91a48", "sighting_of_ref": "indicator--2694db28-ef9c-49d3-8f71-3b19905b6a56", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96852bdf-48cb-4684-956d-cf01d10e6bcf", "sighting_of_ref": "indicator--c1049eea-cfed-4986-9a58-6e1a5ae75373", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fda1c74-29fd-4cc4-bfe5-1a993cbadd69", "sighting_of_ref": "indicator--c1049eea-cfed-4986-9a58-6e1a5ae75373", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2896451e-3d6b-46d6-8207-9d6990e8e1b3", "sighting_of_ref": "indicator--a910611b-7ecf-4e1c-97a9-d40d7f1c7933", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbefda5-7c0f-4e9f-9898-41d82470033e", "sighting_of_ref": "indicator--a910611b-7ecf-4e1c-97a9-d40d7f1c7933", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95854e51-f5f2-4d49-8780-6efdbb194177", "sighting_of_ref": "indicator--f0047835-77d3-4c75-aefe-cd3d5905120c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbbcb12-9283-45e6-85b5-5c613dab04ce", "sighting_of_ref": "indicator--9fafbd3f-9312-4fac-b21a-3d633c318062", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde0e1ee-8909-448b-ac6d-63c58cb9add9", "sighting_of_ref": "indicator--9fafbd3f-9312-4fac-b21a-3d633c318062", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806c558e-e9c5-4007-bdcb-b9accb834356", "sighting_of_ref": "indicator--9fafbd3f-9312-4fac-b21a-3d633c318062", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4579e840-7a68-4c24-9ef3-e0269f5b2e22", "sighting_of_ref": "indicator--52be97ec-23a0-4380-bbb2-8c2ea6beb31f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c438ac-f50c-4e10-9db6-867c5b659157", "sighting_of_ref": "indicator--2d23f257-cf6e-4aa5-925c-6f4e66cef084", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66490892-92b2-4145-9628-e2976ce393d9", "sighting_of_ref": "indicator--1b732605-61a4-4b7a-955f-bcc656fac7b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204c7c1f-6491-4ec6-aa95-8477c674e1c7", "sighting_of_ref": "indicator--f45fc1d6-90bd-47a1-a614-27194c3aac88", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdeb3abf-ba32-48e2-b1a3-4a892fd81d1a", "sighting_of_ref": "indicator--e19b025f-0a44-480a-87be-cebae4875912", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d516781-ff0d-4d78-9299-e6818484c94a", "sighting_of_ref": "indicator--d20596f6-238b-420c-b526-4c5e5616eab0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32799bd9-74b9-484f-9112-38db0ce147c6", "sighting_of_ref": "indicator--d20596f6-238b-420c-b526-4c5e5616eab0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d443164-cc21-435a-9477-8fd21a4ff112", "sighting_of_ref": "indicator--010ac752-44fb-4d82-b2a5-79d7be5a40b5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593960e2-1c61-4cc9-ae24-2631d9bceba3", "sighting_of_ref": "indicator--010ac752-44fb-4d82-b2a5-79d7be5a40b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a5da76-eb9b-41d6-b882-71d78c17b141", "sighting_of_ref": "indicator--a31a2854-bded-41b1-858f-99cbfe355402", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9a50ff-1c52-4741-9af4-0674159205e9", "sighting_of_ref": "indicator--a31a2854-bded-41b1-858f-99cbfe355402", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b626510-f79c-45a2-a72d-75ffa0067925", "sighting_of_ref": "indicator--a31a2854-bded-41b1-858f-99cbfe355402", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d9ded1-83b0-4c28-ba37-17e25d164f78", "sighting_of_ref": "indicator--46648ad4-bd56-4b81-a444-5ac5d90e45a4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6857b4bc-1780-4fc2-90fc-326711fda2e0", "sighting_of_ref": "indicator--c183b9cc-2de8-4339-b3e0-6d95072ad6d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7c6e32-33e4-4561-a6d4-3f910a1f4e8f", "sighting_of_ref": "indicator--c183b9cc-2de8-4339-b3e0-6d95072ad6d4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671eac01-3f67-4ccb-a460-10b9ea3e7a0b", "sighting_of_ref": "indicator--54f92fa9-e172-40dc-a1c1-118859bd667e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd53fd03-5146-4462-9072-84ac8093be66", "sighting_of_ref": "indicator--c52bbbc8-c926-4bae-bd48-2f84d8609dad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef64196-5550-4446-96e9-831c156bca58", "sighting_of_ref": "indicator--5f1cc8d7-673d-41ff-a564-5132bfbd2e23", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252afb56-2fde-489e-9c51-eb939e221f30", "sighting_of_ref": "indicator--11ce1f53-b093-430e-9a1f-d67c7c74b837", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ae5af4-a20f-488a-a757-6df59de8fe8b", "sighting_of_ref": "indicator--75337d9c-b87f-4861-a776-46978f1cfd9d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7c8e89-e6cd-4274-8793-a2ab790e766d", "sighting_of_ref": "indicator--75337d9c-b87f-4861-a776-46978f1cfd9d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcdfe92-0060-4fa6-89ec-7f4187cf5a68", "sighting_of_ref": "indicator--75337d9c-b87f-4861-a776-46978f1cfd9d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e010b092-ca9e-4fca-933d-22f21081ac99", "sighting_of_ref": "indicator--b92447bf-e20b-4e8f-b1d9-090ac03616be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc79e5b-257f-4302-a5dd-753b3ecf2df7", "sighting_of_ref": "indicator--b680cc49-84a5-4036-a5d8-fe8e991111e5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4605f31c-d7a8-41e6-8c0a-4e5835d01c70", "sighting_of_ref": "indicator--b680cc49-84a5-4036-a5d8-fe8e991111e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80399e1-43cd-4762-b736-ae8d4bef9fae", "sighting_of_ref": "indicator--d4a2cc12-a2fb-475e-9f81-cf4ee2ee989b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f679792-391f-491d-8f55-8f73bf07ec0a", "sighting_of_ref": "indicator--fa9341b5-5509-4d95-b46b-212e9b94be45", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20665eb4-7f28-43d3-b3ca-e06796e3620b", "sighting_of_ref": "indicator--2e3f63b2-4758-45d6-9def-27b08a22d223", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b598d27a-f128-40ea-8912-22d549684d92", "sighting_of_ref": "indicator--3ee18de7-9cd2-4f31-a8ac-181553df952b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4252492-2746-470d-850e-f5f0fc5b6a0f", "sighting_of_ref": "indicator--8b4b1e87-878a-4374-bf8b-85e718a194c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc229c1-c195-4e86-8480-baa39f21b900", "sighting_of_ref": "indicator--8b4b1e87-878a-4374-bf8b-85e718a194c9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5c8d09-c378-4327-a9e8-fd8c2c43cf14", "sighting_of_ref": "indicator--8ba8c4fb-d955-4eb5-bf08-a403c2e74891", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcbaca1-2540-413e-b629-eeb6442170e1", "sighting_of_ref": "indicator--47d6b3c9-fdfa-4fae-881e-7755213e0408", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72cfb5d-93d3-4237-a3a5-4a1b98c44edb", "sighting_of_ref": "indicator--47d6b3c9-fdfa-4fae-881e-7755213e0408", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377fbaf6-9506-43fb-8a35-5cf143a4ef16", "sighting_of_ref": "indicator--29042d65-72f6-4a81-baae-0ff3dbf1a7e3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7216d9b8-f6a9-4997-828f-e4086f86eb4a", "sighting_of_ref": "indicator--29042d65-72f6-4a81-baae-0ff3dbf1a7e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b205bfd9-c3da-4910-90e7-23ec4c8e9dc3", "sighting_of_ref": "indicator--29042d65-72f6-4a81-baae-0ff3dbf1a7e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531482c3-2d2f-43fc-ae92-da081660c624", "sighting_of_ref": "indicator--b8636592-9d11-4853-835e-13ca16dee4d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fc6a74-752f-42e1-83f2-78082216781f", "sighting_of_ref": "indicator--b8636592-9d11-4853-835e-13ca16dee4d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7152a7d5-fdde-42ca-9b88-88dc4e7c5424", "sighting_of_ref": "indicator--b8636592-9d11-4853-835e-13ca16dee4d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064e3549-210c-4d96-bbe2-a9a4ae2d9aeb", "sighting_of_ref": "indicator--6ba98ede-9eef-4d3c-8d9b-7acd8d9cda62", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb35acd-b1ee-47cd-ae9a-d8ea412f3629", "sighting_of_ref": "indicator--6ba98ede-9eef-4d3c-8d9b-7acd8d9cda62", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f8732e-532b-4129-a488-ad4921ef35b2", "sighting_of_ref": "indicator--5a6d7eb5-e12f-49b3-8090-74be8ee4df27", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63c17fb-5862-4f27-8b1a-2e521471f636", "sighting_of_ref": "indicator--5a6d7eb5-e12f-49b3-8090-74be8ee4df27", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49cf1bed-7b8f-47a2-9be6-9aee53d2397f", "sighting_of_ref": "indicator--5a6d7eb5-e12f-49b3-8090-74be8ee4df27", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4311b4bd-bb0b-4a1a-96ae-9e9c8d17870a", "sighting_of_ref": "indicator--e5fbb9c0-8161-4d85-a7a4-3da679a20baf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1ec647-93a1-42f6-8906-9909a90dffc7", "sighting_of_ref": "indicator--e5fbb9c0-8161-4d85-a7a4-3da679a20baf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d357226-39fa-42c0-9780-68a78e2d1af0", "sighting_of_ref": "indicator--021cfa18-19a2-40a1-875c-7346ee031077", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0380e007-dcf6-43cd-8a14-0648e6f2e5d1", "sighting_of_ref": "indicator--021cfa18-19a2-40a1-875c-7346ee031077", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0a3451-bba7-4e82-82c7-8260a0be0bf2", "sighting_of_ref": "indicator--021cfa18-19a2-40a1-875c-7346ee031077", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ffb460-9fbc-4287-af4d-cc4c09c9f5fd", "sighting_of_ref": "indicator--b9694de8-ad39-4fdd-8119-1ad536d68a3b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1731f5a1-56c1-4515-b702-2010022fe422", "sighting_of_ref": "indicator--b9694de8-ad39-4fdd-8119-1ad536d68a3b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc669943-aefb-4d45-abe6-840cc1634e0e", "sighting_of_ref": "indicator--a57e0204-1b9a-4314-a814-55e6c476b2bc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb20d0a-6724-4c98-9e88-bef25419e124", "sighting_of_ref": "indicator--a57e0204-1b9a-4314-a814-55e6c476b2bc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7e045b-2e01-4f81-b124-f0003992c5ee", "sighting_of_ref": "indicator--a57e0204-1b9a-4314-a814-55e6c476b2bc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb766e2-5d93-4c46-866e-26531a238005", "sighting_of_ref": "indicator--bc577ea7-8638-4b02-a123-194a907f654a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298df251-39fe-4d93-acba-d1a760e28a41", "sighting_of_ref": "indicator--bc577ea7-8638-4b02-a123-194a907f654a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbe8b89-2e13-4e99-89ac-0e38837ecf88", "sighting_of_ref": "indicator--dce28e7d-386d-402d-beac-8a4c993fc6d1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b18af6-6c44-4eca-81bb-db7056115b47", "sighting_of_ref": "indicator--dce28e7d-386d-402d-beac-8a4c993fc6d1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8727e283-9864-4452-90ac-6ec42c1a979f", "sighting_of_ref": "indicator--dce28e7d-386d-402d-beac-8a4c993fc6d1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcae7176-3640-4d43-8141-79f594b76537", "sighting_of_ref": "indicator--3ec2c996-89c5-47c7-b099-a716268dad88", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e48dfcc-d56a-479d-9643-199e1486d23d", "sighting_of_ref": "indicator--3ec2c996-89c5-47c7-b099-a716268dad88", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c666b53-3120-4556-bd6d-e57f79b24295", "sighting_of_ref": "indicator--3ec2c996-89c5-47c7-b099-a716268dad88", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4000bc37-a829-41e3-85f2-21a3ae55b83c", "sighting_of_ref": "indicator--d9b2254c-c90e-4e57-b8aa-e14108427a4e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2311bec-f042-4d38-a72a-8e00b4892906", "sighting_of_ref": "indicator--d9b2254c-c90e-4e57-b8aa-e14108427a4e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1013e3-b3c1-4427-970c-3412ec3a3525", "sighting_of_ref": "indicator--d9b2254c-c90e-4e57-b8aa-e14108427a4e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5394fffa-0d5c-4c87-8615-a0dc1e9af940", "sighting_of_ref": "indicator--7bbfeb79-bebc-44d7-bf41-7155c2947ff8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d8cf46-9a01-4333-beb1-11f826e2d341", "sighting_of_ref": "indicator--7bbfeb79-bebc-44d7-bf41-7155c2947ff8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238471e7-f076-4487-a572-01670f73fc69", "sighting_of_ref": "indicator--7bbfeb79-bebc-44d7-bf41-7155c2947ff8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2944feef-a927-4c5d-92e7-8123f682efb1", "sighting_of_ref": "indicator--c160d6dd-e992-4a84-83c8-fc39863382e6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15583be0-0b07-44c3-be8d-c68a64c6d62c", "sighting_of_ref": "indicator--c160d6dd-e992-4a84-83c8-fc39863382e6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941ca157-19d5-4e7a-b22b-f76868d648a4", "sighting_of_ref": "indicator--a3cf1793-e85b-4a15-bc76-90e526fd8297", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32126c72-1fa5-47cd-96a1-8a3f286b4a55", "sighting_of_ref": "indicator--a3cf1793-e85b-4a15-bc76-90e526fd8297", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbab8d2c-1efe-4e43-84f8-eda2d9a73dd3", "sighting_of_ref": "indicator--324f2f00-4ff2-40cb-8b3a-be6beba65014", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5722ba23-bb34-45e7-9921-88ba4a456b6f", "sighting_of_ref": "indicator--0e7c1bed-5e1f-4204-90ce-6dd603bbd536", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc8c3c4-cd6e-4e85-be1a-ee8431dd8cb6", "sighting_of_ref": "indicator--d20e5a33-1635-4870-b9de-4634ca77feba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72514e5b-b713-4a39-9c2b-38a34cf922fe", "sighting_of_ref": "indicator--546a5bd8-de35-42fa-b4fb-ed7db79c10e8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d045a0-0e37-4fce-89ae-da9ab47e6bf2", "sighting_of_ref": "indicator--8a51598d-5e33-4540-9052-c09ca733bf72", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e90958e-967d-434d-a352-33fce9ac2f24", "sighting_of_ref": "indicator--85078012-a207-4f6f-a846-2b13f9aeec48", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59f67fc-1720-40a4-aa4c-ad5f256a6415", "sighting_of_ref": "indicator--b2251cd6-1ff6-4080-ac31-005085ac9dac", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0544c7-fe38-4127-82f2-c292c16ca6ef", "sighting_of_ref": "indicator--a1c5bc72-2a3f-48e2-bea8-830af9fed7a0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567e87d0-5e3a-4cb3-a93c-496f391bb671", "sighting_of_ref": "indicator--a1c5bc72-2a3f-48e2-bea8-830af9fed7a0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f567a7-f87f-4853-a55d-bf2e6542454e", "sighting_of_ref": "indicator--46afadf8-6553-4400-8eb3-c8fd42145a5f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb426de-2931-4e30-bfe7-72da481397d8", "sighting_of_ref": "indicator--347d29ef-06bc-4f30-86be-a999bf6f9e99", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce595bf-7320-4f05-91d0-0617901befd6", "sighting_of_ref": "indicator--347d29ef-06bc-4f30-86be-a999bf6f9e99", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f785820-9164-4360-ad89-eaa2908bf9e4", "sighting_of_ref": "indicator--347d29ef-06bc-4f30-86be-a999bf6f9e99", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fa681c-e4f9-4405-9dd2-3c7c2bea3648", "sighting_of_ref": "indicator--06668e31-3714-484b-9229-85890706f477", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1205d01-2a15-46fe-9e3f-a6ec52cbd75b", "sighting_of_ref": "indicator--06668e31-3714-484b-9229-85890706f477", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b11a5c-283f-40e6-97fd-705a2be7786f", "sighting_of_ref": "indicator--06668e31-3714-484b-9229-85890706f477", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29fca54-5962-4d98-857a-c06b0eb1ec49", "sighting_of_ref": "indicator--addd09ee-2da0-496f-97b5-e1e73809d9be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e2ec50-0b10-4c30-af2c-b8b5a118c602", "sighting_of_ref": "indicator--addd09ee-2da0-496f-97b5-e1e73809d9be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3cdb72-ef60-4f0e-bfb5-cbaf1f8a1e3d", "sighting_of_ref": "indicator--81df274f-a133-4068-99d3-d4b30c2a849d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75aac4df-1d06-4859-9727-2f8db5d809de", "sighting_of_ref": "indicator--5557854c-d43f-4785-8ff9-992a3d40954a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceba5cb0-b3a6-48a0-b019-a5e920efb99a", "sighting_of_ref": "indicator--5557854c-d43f-4785-8ff9-992a3d40954a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9381b884-bb7a-4dbd-9db5-65a2883f9449", "sighting_of_ref": "indicator--07361a7a-3cbf-4ac5-aba6-175b298cfc5a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0680d0b1-f177-44d8-9d9b-64da068cd2f0", "sighting_of_ref": "indicator--07361a7a-3cbf-4ac5-aba6-175b298cfc5a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f67cb47-e36a-4f9a-9bdb-8c59618ddee1", "sighting_of_ref": "indicator--07361a7a-3cbf-4ac5-aba6-175b298cfc5a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2575321a-e1e8-4f2a-840a-7257a7df9625", "sighting_of_ref": "indicator--b6a31e3b-d865-4793-88a6-24e1ff80446b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b77fc3-ab62-4941-bb97-789820a11508", "sighting_of_ref": "indicator--b6a31e3b-d865-4793-88a6-24e1ff80446b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b966272e-d6e7-463f-b8fa-fe3e72e65eb4", "sighting_of_ref": "indicator--b6a31e3b-d865-4793-88a6-24e1ff80446b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf8cf35-8499-416e-8436-9e22e0f6ee39", "sighting_of_ref": "indicator--9a016ea4-7e01-4221-bff3-d27389586d48", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87bc65f1-f977-4358-96da-6ec5a9ad20d7", "sighting_of_ref": "indicator--9a016ea4-7e01-4221-bff3-d27389586d48", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0098f9f-e9b5-4cb1-9b2d-10342465cf27", "sighting_of_ref": "indicator--9a016ea4-7e01-4221-bff3-d27389586d48", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce5b551-dacb-46ed-840a-ed6bce557467", "sighting_of_ref": "indicator--90912754-cc8c-4788-a919-1dfdeaae61fa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38b64a5-8b1b-4d3b-ae8e-8be0d6c4023a", "sighting_of_ref": "indicator--90912754-cc8c-4788-a919-1dfdeaae61fa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34263d2-45cd-4ba5-9671-ee92807be11d", "sighting_of_ref": "indicator--90912754-cc8c-4788-a919-1dfdeaae61fa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cf119f-9995-4818-92e3-d0258efc7f30", "sighting_of_ref": "indicator--bf3c210a-0548-457f-a3bf-b33661f0c7aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0571fcf0-70c2-4af0-be02-6ba1d7113670", "sighting_of_ref": "indicator--2740c68b-d241-479a-b8b7-b270897fe7f8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296fd0c5-042b-45ad-ae6e-40b195eb244a", "sighting_of_ref": "indicator--2740c68b-d241-479a-b8b7-b270897fe7f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbddfd19-084e-4d7a-8150-6c125db1eeb9", "sighting_of_ref": "indicator--964a479b-7f74-4e97-9092-033b03bcce74", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c990c16-bb83-40d2-b6c1-75f4a74f30ae", "sighting_of_ref": "indicator--964a479b-7f74-4e97-9092-033b03bcce74", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d11c912-0ce4-4f84-a2e7-a45bcf40a328", "sighting_of_ref": "indicator--964a479b-7f74-4e97-9092-033b03bcce74", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8910c228-9e10-44aa-a2de-28d6c5fce46e", "sighting_of_ref": "indicator--43b1fccf-584a-4aa8-93a6-04b7e9f18391", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70e3c8d-7d3e-45ef-b3d0-c10712fea6bd", "sighting_of_ref": "indicator--43b1fccf-584a-4aa8-93a6-04b7e9f18391", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028ef477-8eba-44b5-8114-c1ac36de93d2", "sighting_of_ref": "indicator--43b1fccf-584a-4aa8-93a6-04b7e9f18391", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67298dab-6827-4b4e-9ebf-0bf79291aac8", "sighting_of_ref": "indicator--df577e2e-e91c-47fd-b5f7-d3953748fdc8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc440128-1fec-4108-bb5c-b1a65a90f52b", "sighting_of_ref": "indicator--df577e2e-e91c-47fd-b5f7-d3953748fdc8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc9ab32-1d62-42c4-a319-33d6a5edb4d9", "sighting_of_ref": "indicator--df577e2e-e91c-47fd-b5f7-d3953748fdc8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e1a019-032a-4eaf-9c64-532dc3b196ab", "sighting_of_ref": "indicator--005378de-b0c8-4a22-b34e-061dab196952", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f75d912-7e97-4914-903b-e0beceeeda9d", "sighting_of_ref": "indicator--005378de-b0c8-4a22-b34e-061dab196952", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46bb885-bb06-43cb-bf13-444e2cc2007c", "sighting_of_ref": "indicator--005378de-b0c8-4a22-b34e-061dab196952", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65aea514-34a9-4a7c-8fa7-53dca8129a88", "sighting_of_ref": "indicator--3ab1c69d-09a5-454b-b964-11e53c77d710", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e41040-c515-4856-81df-07a970a8439b", "sighting_of_ref": "indicator--3ab1c69d-09a5-454b-b964-11e53c77d710", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169d1e16-e835-4ba1-80a0-4334af02d65f", "sighting_of_ref": "indicator--aee32547-cc59-4f69-a06a-754e625d1055", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f330be9c-1261-475d-9ced-b07e88afe15d", "sighting_of_ref": "indicator--aee32547-cc59-4f69-a06a-754e625d1055", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d4bc8d-fd6a-4652-9e6c-2a508402747c", "sighting_of_ref": "indicator--aee32547-cc59-4f69-a06a-754e625d1055", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c824cc-099b-406c-bacf-e91e312c14b9", "sighting_of_ref": "indicator--c7563715-2850-493a-9664-57008210b6ac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e17a979-fe7f-437a-9323-0537e0a8a968", "sighting_of_ref": "indicator--624dd778-45b7-4e7c-a3d6-b3b7709408ff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cdda0a-256d-46c1-b993-f91c08c6eb03", "sighting_of_ref": "indicator--82f47b2b-5ebf-475a-b373-a1c207562f61", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ebc1df-89a8-4c86-bf9e-59cbfc2e42b3", "sighting_of_ref": "indicator--148bba2d-bd31-428d-9d58-a0ac28021d25", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7bb3a2-9d94-46d4-8c9c-be78df70d30a", "sighting_of_ref": "indicator--024f616b-60d5-473f-9595-6f3b04b4c76e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126b78db-c255-4606-9445-cfd949873473", "sighting_of_ref": "indicator--c1d109e2-96b6-455a-b816-bd9fd43282d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ba3302-be56-4e3b-bd69-52435ccd128d", "sighting_of_ref": "indicator--bbc55b13-505f-4d63-96b6-5cea6449ce6f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d447f0a-e7f6-43a4-bdac-77a4637764a2", "sighting_of_ref": "indicator--bbc55b13-505f-4d63-96b6-5cea6449ce6f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04742d80-a619-42ba-9542-229630f3d55e", "sighting_of_ref": "indicator--f27692e6-54dd-4449-a407-d284d0707ab5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5459f379-96dd-490c-9c34-103f51dae79d", "sighting_of_ref": "indicator--f27692e6-54dd-4449-a407-d284d0707ab5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8b5ebd-4fa2-4cbf-b779-33bb54e0aab2", "sighting_of_ref": "indicator--565a7e5b-4034-44b1-892d-bb25edf1a523", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47f3c92-8807-4f20-bf89-4b0a4a5ba2ea", "sighting_of_ref": "indicator--5d8f3628-fd70-42a2-807d-1f488348b044", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914607b6-5b6e-4845-8416-9b761dded056", "sighting_of_ref": "indicator--5d8f3628-fd70-42a2-807d-1f488348b044", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1fb841-a6bb-43a7-8ffa-f725262288e6", "sighting_of_ref": "indicator--46fd697a-1cd5-4829-99bb-5fc1f9999445", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21359c20-5b78-42ac-b3b8-3405b9f9120b", "sighting_of_ref": "indicator--9d82b570-cce1-49ba-8c80-37e0ae9a8a54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4092a585-a0b5-4a16-a579-1a8d094a487d", "sighting_of_ref": "indicator--5c95d1a6-93e3-454d-9fe8-c950373c15af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de738000-7c0b-46fa-83e0-0fe9bcd8f1fa", "sighting_of_ref": "indicator--3dfe5a82-9645-4932-8143-c707db4687cf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c045e18-f8e7-4930-831d-17299a6808fb", "sighting_of_ref": "indicator--2ec28046-85d9-4ba9-afe8-3602e9e7f624", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33561087-931d-4c79-813a-516d8f12aaba", "sighting_of_ref": "indicator--b3cc25e0-e78f-446e-8735-cfa1300127b6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33295de-12a3-4056-a428-6ef1b9198cea", "sighting_of_ref": "indicator--b4510f0d-ff2b-4fbe-9b51-9b31f149a260", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f45cf83-b3a5-4577-84b7-c8f411a25f84", "sighting_of_ref": "indicator--b51fa48f-0d5b-4255-9236-e9cf068cfcf4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ffd3ff-61e1-48c4-a362-ef24db7d9b54", "sighting_of_ref": "indicator--b3d3d370-8715-4a7b-93a1-3071ba6c78d6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc697794-5993-442a-b63c-61803b3c8235", "sighting_of_ref": "indicator--d8be0cd5-343b-45c3-8f42-aed8ea7bb5ad", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1453ecc2-0b49-4583-a076-b8f18a9c6236", "sighting_of_ref": "indicator--747370ce-3e48-405e-8349-6a03431c7cbf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ae29e2-ed59-4839-8634-4054817668ae", "sighting_of_ref": "indicator--747370ce-3e48-405e-8349-6a03431c7cbf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab7bc5c-a35b-44b2-82cd-bd8213b2fcf0", "sighting_of_ref": "indicator--602c990f-5d7c-4a2c-8f48-88bd51211f68", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f61f64-d953-4def-930e-ccbf55241de6", "sighting_of_ref": "indicator--72b55641-9fbe-4358-bbc6-8e7bad15ac1d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d56323-3670-4f05-b0a0-9d45dfdf2686", "sighting_of_ref": "indicator--72b55641-9fbe-4358-bbc6-8e7bad15ac1d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2ebbdb-6a41-4488-9c77-8ee328c6aeeb", "sighting_of_ref": "indicator--90dab538-f0b3-4cee-8893-b8d8ae8a8bf9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b4a70c-1df2-41e7-95df-6b237dd0c137", "sighting_of_ref": "indicator--de19c0d2-d301-4980-b8db-113a2a83ef88", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7b1068-c8f0-43cc-82cf-f8cc73f085f7", "sighting_of_ref": "indicator--de19c0d2-d301-4980-b8db-113a2a83ef88", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77718d5-8b05-4a5b-8598-afb8a179a75c", "sighting_of_ref": "indicator--ed0f2e1d-ae2a-4de3-be87-d0670d3c8493", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355bb971-da0f-48f6-8eea-6a0a12391969", "sighting_of_ref": "indicator--ed0f2e1d-ae2a-4de3-be87-d0670d3c8493", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271f421e-1807-4a71-a48f-f1e06a6cd433", "sighting_of_ref": "indicator--ed0f2e1d-ae2a-4de3-be87-d0670d3c8493", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20c001a-228e-407d-9559-0faa70419f88", "sighting_of_ref": "indicator--60ef52ce-b1ce-4935-bafc-2acbe19e96f3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf413ab-adae-42b3-9b3e-f88824e45dfc", "sighting_of_ref": "indicator--60ef52ce-b1ce-4935-bafc-2acbe19e96f3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fe823c-0912-4710-916f-f25dd9eb84a5", "sighting_of_ref": "indicator--323e5ec3-1002-4ec1-aec7-c11131e96e2a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b2c449-a4c2-422e-8fec-facfef45a475", "sighting_of_ref": "indicator--323e5ec3-1002-4ec1-aec7-c11131e96e2a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6242a896-fda9-4df0-a562-b3e0951a1261", "sighting_of_ref": "indicator--323e5ec3-1002-4ec1-aec7-c11131e96e2a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47280a0-981d-4a87-9b76-95e094d96d18", "sighting_of_ref": "indicator--e096b2d9-d3f5-4476-918a-9c05acff46cc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec55e3a6-19bb-4248-baa1-06498033ebf7", "sighting_of_ref": "indicator--e096b2d9-d3f5-4476-918a-9c05acff46cc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f353df33-13d4-4f4a-be26-be041c88d967", "sighting_of_ref": "indicator--33aaf03c-b5e9-4e33-97b8-41b891d7ebdc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05cf059-ff28-4797-bd26-d44e8f94be4c", "sighting_of_ref": "indicator--33aaf03c-b5e9-4e33-97b8-41b891d7ebdc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa189154-2bef-43d5-a386-a02682c9bbc5", "sighting_of_ref": "indicator--083b6c88-e221-4fe5-a19b-1f998ce9d05e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf4a3cc-dff8-49f4-b6b7-9adec7a19f60", "sighting_of_ref": "indicator--083b6c88-e221-4fe5-a19b-1f998ce9d05e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4eaa907-4079-4ed9-b9be-c1844f2d681d", "sighting_of_ref": "indicator--1a94b59f-a711-45a7-834f-1b9467ea985c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb77b627-5cb5-4b91-97ce-a282f49d6611", "sighting_of_ref": "indicator--1a94b59f-a711-45a7-834f-1b9467ea985c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6af8427-84a3-4844-aad0-7a060699bf5d", "sighting_of_ref": "indicator--8f5b4064-fb6d-4f6b-afcc-fcac959495a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ed108e-d02c-492f-a6c9-430e23738169", "sighting_of_ref": "indicator--8f5b4064-fb6d-4f6b-afcc-fcac959495a8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdced58a-6c6e-48dd-974d-e02cb826434e", "sighting_of_ref": "indicator--8f5b4064-fb6d-4f6b-afcc-fcac959495a8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b17607c-9237-4ca9-952e-722c9e963914", "sighting_of_ref": "indicator--91b49911-bd5b-4325-9f9b-cb2748571a9f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffcdbc3-fa37-4bab-a37b-4f8657dac646", "sighting_of_ref": "indicator--91b49911-bd5b-4325-9f9b-cb2748571a9f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6872b2-24e6-4b5f-91c6-012378cbff6f", "sighting_of_ref": "indicator--cdef99f5-ee21-4514-b0fb-f3c4338ae20c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec89579-8761-4a2a-a441-94eda7bdb466", "sighting_of_ref": "indicator--cdef99f5-ee21-4514-b0fb-f3c4338ae20c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7663aa55-0a65-4213-af68-877948375631", "sighting_of_ref": "indicator--cdef99f5-ee21-4514-b0fb-f3c4338ae20c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85c953b-6902-41e0-8419-7239a0a3e870", "sighting_of_ref": "indicator--316bfe7c-244a-493b-9de0-6141949b69a7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88438e36-0888-4d01-935b-ac7a97abaaee", "sighting_of_ref": "indicator--316bfe7c-244a-493b-9de0-6141949b69a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a3276d-bc9f-4387-8ff8-204e3eb688b1", "sighting_of_ref": "indicator--316bfe7c-244a-493b-9de0-6141949b69a7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f94c116-317a-41f7-82e4-5fdb72705ae3", "sighting_of_ref": "indicator--f6d8bfb6-80fc-4ae3-8704-f759b8985549", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8dc528-a5fb-4ddb-9fb5-2a8ac1d5b449", "sighting_of_ref": "indicator--f6d8bfb6-80fc-4ae3-8704-f759b8985549", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba33b2cd-4d8a-42f3-a2fa-de238780ac67", "sighting_of_ref": "indicator--f6d8bfb6-80fc-4ae3-8704-f759b8985549", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc37ce52-ecdc-4bfb-8d08-5852205435c4", "sighting_of_ref": "indicator--7d3ec9d8-2c96-456b-b9af-8704fe1b7c6b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8b1be2-580f-4320-9ad3-dd3e4ad9a751", "sighting_of_ref": "indicator--7d3ec9d8-2c96-456b-b9af-8704fe1b7c6b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cb8abb-a4ae-4da1-8bcb-fb20eed113be", "sighting_of_ref": "indicator--7d3ec9d8-2c96-456b-b9af-8704fe1b7c6b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528ab633-fafc-4fa9-a3a1-e5bbab525d17", "sighting_of_ref": "indicator--68bbbb6f-2022-4a5d-ae87-8bd08d1e767e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bec042b-8a51-48dd-8d8b-a2bc8cf968d7", "sighting_of_ref": "indicator--68bbbb6f-2022-4a5d-ae87-8bd08d1e767e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4ae5c7-b2cb-48fc-953c-059a5a959116", "sighting_of_ref": "indicator--edd173a2-ec2d-4816-8f0b-9812816ab491", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0303a476-b38c-494b-b3db-ccb5f62a7626", "sighting_of_ref": "indicator--edd173a2-ec2d-4816-8f0b-9812816ab491", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664b09ed-8bf6-494e-8093-275d530cc93d", "sighting_of_ref": "indicator--ee82f504-8ac9-4197-9df7-404d4c52d245", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e3e64a-a901-40c6-bb63-59b69a6f3300", "sighting_of_ref": "indicator--ee82f504-8ac9-4197-9df7-404d4c52d245", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b1cda5-3c89-4814-bd4f-4c65eb8a6652", "sighting_of_ref": "indicator--116c53e8-3507-43e4-8742-0852df1dfd1f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec426d9-11d3-484d-b57b-c08fad5f67ca", "sighting_of_ref": "indicator--682c6908-d12d-44b4-b810-99f3b3b6a916", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6660991e-5b18-440d-8149-01077ac556bb", "sighting_of_ref": "indicator--f340ac0b-80d4-4dec-b910-ea607eb49303", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e43a36-a1ff-46a9-bda3-85fc0db3b7f1", "sighting_of_ref": "indicator--f340ac0b-80d4-4dec-b910-ea607eb49303", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8364f536-62d8-4072-a420-34bdfd8e1c75", "sighting_of_ref": "indicator--700cc31e-9ab5-45f6-87dc-12151426465a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b1b9f2-1360-436a-91fd-4feec12c1f2c", "sighting_of_ref": "indicator--700cc31e-9ab5-45f6-87dc-12151426465a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e68decd-925b-4d30-adc3-8dfe5b5224ca", "sighting_of_ref": "indicator--700cc31e-9ab5-45f6-87dc-12151426465a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b31f34b-1bf2-4523-bb00-feba91eeaa1c", "sighting_of_ref": "indicator--1e8b18ed-c294-482d-b414-e560c01bd0b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab767d83-2fa3-4969-a3a9-c76d177888d3", "sighting_of_ref": "indicator--b06daae7-c4ca-4e99-bc2d-cfff7b767101", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52514607-cd82-41be-9bb6-65fb08849c4c", "sighting_of_ref": "indicator--b06daae7-c4ca-4e99-bc2d-cfff7b767101", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673cbd5a-670a-4b83-93f6-27de6e17e6c3", "sighting_of_ref": "indicator--b06daae7-c4ca-4e99-bc2d-cfff7b767101", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bed7f5-4fcd-49d3-978a-ecf02b4e7a64", "sighting_of_ref": "indicator--49ef05d2-0959-41b0-a3ac-21bd036de785", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcbfcd0-599f-44fb-bd06-37a5c73fc664", "sighting_of_ref": "indicator--49ef05d2-0959-41b0-a3ac-21bd036de785", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8cdd45-897b-4066-848d-1b1f7018767d", "sighting_of_ref": "indicator--49ef05d2-0959-41b0-a3ac-21bd036de785", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216b5c3e-9529-4c5b-8b6b-db1533603794", "sighting_of_ref": "indicator--406c9965-79e0-4dce-b39c-6af647995f4c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3adc01-e1d0-4020-84b2-08ffae766890", "sighting_of_ref": "indicator--406c9965-79e0-4dce-b39c-6af647995f4c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a466675-18b4-44c8-b3e3-e2be04e8ef71", "sighting_of_ref": "indicator--406c9965-79e0-4dce-b39c-6af647995f4c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5681ccf-299e-44e4-9190-164ac851f289", "sighting_of_ref": "indicator--31713a79-49a5-434d-8866-e6edb7ebd533", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5717ee3-2e83-4cd2-b1b0-29a35d8c68e3", "sighting_of_ref": "indicator--31713a79-49a5-434d-8866-e6edb7ebd533", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3e25b1-06c8-49ef-adcd-bc9186fc047f", "sighting_of_ref": "indicator--d11fbac7-4f18-4377-a71c-84d128f65f63", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb194c0-0a7f-4db4-a686-c070c7083156", "sighting_of_ref": "indicator--d11fbac7-4f18-4377-a71c-84d128f65f63", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d5b924-93dc-4e77-a1ed-383b5248e346", "sighting_of_ref": "indicator--d11fbac7-4f18-4377-a71c-84d128f65f63", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5afeb1da-ee2c-475b-99b3-1943a14fde55", "sighting_of_ref": "indicator--6d6427ee-d853-4283-9fa4-5471ebdcc77b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75039e2-b20f-4b16-b51a-7bd48dcfdefe", "sighting_of_ref": "indicator--6d6427ee-d853-4283-9fa4-5471ebdcc77b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061998d3-5f2c-44e5-9ae8-3bc1f4d309e6", "sighting_of_ref": "indicator--21c992a5-551d-458b-a2ac-202b069d9942", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe214667-efab-48f4-a27c-89aab8f576ad", "sighting_of_ref": "indicator--21c992a5-551d-458b-a2ac-202b069d9942", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e0f3b7-448c-4f10-9f91-92db3b4f4fb2", "sighting_of_ref": "indicator--21c992a5-551d-458b-a2ac-202b069d9942", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8767d7e8-d7a0-4001-b775-13c1e60dbaa2", "sighting_of_ref": "indicator--415d56a3-d259-4a8f-943e-fbb9796cc014", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b90ff9-d466-45d1-95ca-1c90cf06ccf4", "sighting_of_ref": "indicator--415d56a3-d259-4a8f-943e-fbb9796cc014", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e36f93c-0a8a-4188-909d-5e8125bd4f5e", "sighting_of_ref": "indicator--415d56a3-d259-4a8f-943e-fbb9796cc014", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d60b73-44d4-41c7-9072-1ec6fa9ad915", "sighting_of_ref": "indicator--5e1e2566-9816-45c3-a3c3-f8bbc2226bf7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f375bf-5f74-404c-a90d-b78a548bd112", "sighting_of_ref": "indicator--5e1e2566-9816-45c3-a3c3-f8bbc2226bf7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46326a9b-29ff-4799-92fa-f373d69a174c", "sighting_of_ref": "indicator--5e1e2566-9816-45c3-a3c3-f8bbc2226bf7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c367ffc5-2d0c-486c-b105-56432ddcb290", "sighting_of_ref": "indicator--44450793-676d-4174-bc8c-ed9889b4396e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2342a005-67a0-4f5b-b1e5-0496dcca044f", "sighting_of_ref": "indicator--e9542e0b-413b-4ca9-9106-bc7cdf462d38", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d3f8b4-e50d-4b8b-a1b1-21ebf344d90f", "sighting_of_ref": "indicator--e9542e0b-413b-4ca9-9106-bc7cdf462d38", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ed03b9-8624-44ba-b6ec-71f2e2b38e48", "sighting_of_ref": "indicator--e9542e0b-413b-4ca9-9106-bc7cdf462d38", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453a9938-5423-4ad4-b842-3a56fe2c3b11", "sighting_of_ref": "indicator--055d3149-a4a2-46d9-a1ff-db9fd329b680", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531f8a56-1276-47d7-8420-e81e50ac0fbb", "sighting_of_ref": "indicator--055d3149-a4a2-46d9-a1ff-db9fd329b680", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf1bc7e-2021-47b0-bb4c-b6aa2eb3607d", "sighting_of_ref": "indicator--055d3149-a4a2-46d9-a1ff-db9fd329b680", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659e1cea-3766-407b-9775-9517953a2d02", "sighting_of_ref": "indicator--7e869107-769f-411f-aa62-744165881293", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d9c814-24a6-40ec-8f6e-d7143b9108ed", "sighting_of_ref": "indicator--7e869107-769f-411f-aa62-744165881293", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e042ba67-b519-4d32-9922-80fea9815837", "sighting_of_ref": "indicator--629bdabd-a988-4a5b-a1b3-39600a1b1307", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7507049-f8ce-4036-9106-86192c4bbaa9", "sighting_of_ref": "indicator--629bdabd-a988-4a5b-a1b3-39600a1b1307", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e38b80-1b50-45f2-8e88-e19aa22e7b45", "sighting_of_ref": "indicator--5b097e60-a5ab-436a-bf7d-8e8405a1b0a1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cbbb15-b870-4f19-96a7-55e9a3817c72", "sighting_of_ref": "indicator--5b097e60-a5ab-436a-bf7d-8e8405a1b0a1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da269efb-7c07-4827-b3c8-01ae628cefc4", "sighting_of_ref": "indicator--5b097e60-a5ab-436a-bf7d-8e8405a1b0a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3f1349-af0d-4241-86e7-cda600441879", "sighting_of_ref": "indicator--669242e8-0102-42b0-954d-e09d79f82954", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c627841-d416-476c-899d-9a3612e8a444", "sighting_of_ref": "indicator--669242e8-0102-42b0-954d-e09d79f82954", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fd38e2-c552-48ed-b521-672d6142eba0", "sighting_of_ref": "indicator--669242e8-0102-42b0-954d-e09d79f82954", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8093958f-76dd-438e-a966-b70b21b1a0ca", "sighting_of_ref": "indicator--8285c2ae-d671-49cd-94cc-768fc3fc6591", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c63e475-6c27-4f36-b3c7-acca51da4eb3", "sighting_of_ref": "indicator--2776e4c0-8bf3-42ac-87a3-85a5758cc675", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951b6f4f-5f04-4328-9fcd-3ea5d6989d74", "sighting_of_ref": "indicator--2bfcdf67-c5e6-4fc8-b45d-4e8df4228dcf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79f9f07-cf6a-4a6f-bf84-53f277472c02", "sighting_of_ref": "indicator--2bfcdf67-c5e6-4fc8-b45d-4e8df4228dcf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8daf82b7-64e2-4830-9450-6ec4c9189d0d", "sighting_of_ref": "indicator--2bfcdf67-c5e6-4fc8-b45d-4e8df4228dcf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2af9da0-02d7-4e02-8cfb-d718075aeaa8", "sighting_of_ref": "indicator--8a684b99-8425-4be9-ac37-f71370df797d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c0fe5c-8c2d-4d1a-aea8-3bf8b98c81f3", "sighting_of_ref": "indicator--c362dfa9-5747-4db7-aec4-7b033638caea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bd31cb-185c-4e82-9a5b-ef5ce9cce3c4", "sighting_of_ref": "indicator--16c105ea-7420-4349-97e7-1d5d10556e4a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6dcf1b-6ac5-4e5d-bfe6-19e3208f90bb", "sighting_of_ref": "indicator--f987568c-34b4-47ef-bec7-06250d92624d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ba5df0-b138-4a2a-9e91-9b73bd3ec89c", "sighting_of_ref": "indicator--073af6f3-2243-4679-96dd-2b5b637e39be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f770f026-495f-4e70-a4ba-413d52af9c95", "sighting_of_ref": "indicator--073af6f3-2243-4679-96dd-2b5b637e39be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a1d2aa-004b-4dc4-a605-6062554dc4bf", "sighting_of_ref": "indicator--3407d781-f158-45d0-ba4e-12fbd1c5af95", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58ab850-4857-46e1-8b72-8a94b5d5bdc9", "sighting_of_ref": "indicator--11aab9cf-3445-47fc-a0c5-938c87ccd8ca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc36acef-7a51-4247-9949-58be844e8708", "sighting_of_ref": "indicator--443d263e-b208-44ab-87a4-fc03bbcf32e1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9982bf-414f-4ddf-95ec-b0618aded236", "sighting_of_ref": "indicator--4c3ec6c7-425b-452f-a286-b861bb6c3137", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70bf994-33b5-4521-9889-646cf99c1b60", "sighting_of_ref": "indicator--cdc3d856-36ca-442c-bbcb-da101cc85c8d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ad9e4e-c709-42e6-b3d5-3d021e7baceb", "sighting_of_ref": "indicator--620ce47d-de15-4a6b-86e1-4b7f887b6df0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce67e50-f733-4203-b2ff-3a2b88e78396", "sighting_of_ref": "indicator--147c7391-9dde-46cc-99fe-7088ff5e4375", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8f710b-3a42-46ad-8ec2-7991f76f6be0", "sighting_of_ref": "indicator--a19931c1-5552-4c84-98b0-f2e3f795f248", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66b0d10-8830-4a3d-aac4-68959ff80732", "sighting_of_ref": "indicator--13c847a6-5828-42f0-aaf4-279952f537b6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7803d164-497b-4a0b-8be5-f45b6a9d8c1e", "sighting_of_ref": "indicator--ffeb8a8e-252a-4db2-a26b-f295ee1a9d8d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a18959-b52e-4448-a0c2-aaa07664062c", "sighting_of_ref": "indicator--f386e58e-d853-4fc3-8f5c-549a969b06d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485cd949-5e30-4f80-8a56-40adef63d9a3", "sighting_of_ref": "indicator--c47ce06e-b792-48d8-a466-4888af82a0f9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b948e7d6-6529-4e99-9743-515c14b6b9b9", "sighting_of_ref": "indicator--c47ce06e-b792-48d8-a466-4888af82a0f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08e23fb-8704-455e-81ae-ab28872bd543", "sighting_of_ref": "indicator--c47ce06e-b792-48d8-a466-4888af82a0f9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cd3d63-7f2e-4c04-97a8-d6964699b805", "sighting_of_ref": "indicator--44900aa4-b28d-4385-b31d-43b4ee825dc7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6afbda1f-3145-42a1-9f94-6518fb607bd0", "sighting_of_ref": "indicator--44900aa4-b28d-4385-b31d-43b4ee825dc7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3f49e6-2031-4ea7-b98f-ed237b6c6994", "sighting_of_ref": "indicator--f4c39874-578d-4d34-aef7-d7a73fcdd74e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483b9e82-dfb4-4475-a7ac-9fc4939daae4", "sighting_of_ref": "indicator--f4c39874-578d-4d34-aef7-d7a73fcdd74e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2f6d2d-6a78-4683-8624-fe13a1868390", "sighting_of_ref": "indicator--dabc9bc7-e2fa-4771-94a0-6e3db27a8963", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7ca160-6309-46fa-a1f7-3a6f0c5e8ed7", "sighting_of_ref": "indicator--dabc9bc7-e2fa-4771-94a0-6e3db27a8963", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7812fed-ed87-462c-81b5-fdd496b52663", "sighting_of_ref": "indicator--dabc9bc7-e2fa-4771-94a0-6e3db27a8963", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fba87c-6369-4bd1-9679-0c0efda76afc", "sighting_of_ref": "indicator--87287416-8668-4d5c-908e-14fa7b46e5df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e534c6c-d1f4-43f6-9716-4988f977c497", "sighting_of_ref": "indicator--87287416-8668-4d5c-908e-14fa7b46e5df", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380b973d-2703-4e96-8cf1-c607e5e7b1c2", "sighting_of_ref": "indicator--87287416-8668-4d5c-908e-14fa7b46e5df", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a977868-ec1f-498c-9eb7-374b1bbcc7eb", "sighting_of_ref": "indicator--2f487111-2087-474e-b630-019c2910257e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e078384-ad3f-4250-be29-f70a841b4397", "sighting_of_ref": "indicator--2f487111-2087-474e-b630-019c2910257e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4de9611-bcf4-4e96-93ee-938e9976f574", "sighting_of_ref": "indicator--4ba73ee4-5739-4cac-8d55-dba0ce309b67", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6b74c8-06ad-4ba9-81a0-57a8d1b29ac4", "sighting_of_ref": "indicator--4ba73ee4-5739-4cac-8d55-dba0ce309b67", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c636eb-a6fe-4b2b-b99a-927555a21705", "sighting_of_ref": "indicator--4ba73ee4-5739-4cac-8d55-dba0ce309b67", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d75131-1a3e-47de-8edd-fa31ef48461e", "sighting_of_ref": "indicator--c5e05d79-f267-4689-a07c-f669720758f3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038da994-bd61-4567-b051-11c35db3e777", "sighting_of_ref": "indicator--c5e05d79-f267-4689-a07c-f669720758f3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fb513f-970f-4f64-bbe8-b198efc47bce", "sighting_of_ref": "indicator--de2ebe3f-45e9-40c2-b5c0-6611b02750ba", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd55d42-f3be-4316-80fa-17161c1bc7c8", "sighting_of_ref": "indicator--de2ebe3f-45e9-40c2-b5c0-6611b02750ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb00d465-4799-4cd1-b1cf-fbd69f23d0eb", "sighting_of_ref": "indicator--de2ebe3f-45e9-40c2-b5c0-6611b02750ba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5caccdd-ceb8-4db9-aa91-ae61376ac295", "sighting_of_ref": "indicator--c206ba86-3230-41d8-9cb9-4523f062d43d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebb231c-cdfe-4bd4-b179-b701add55ca3", "sighting_of_ref": "indicator--564a9397-ea7c-4833-bb48-de1bb7fe6882", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d9415a-c891-49f0-91a0-9e136dc29ad1", "sighting_of_ref": "indicator--564a9397-ea7c-4833-bb48-de1bb7fe6882", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5785237-d075-4703-bd43-7fc4971c0394", "sighting_of_ref": "indicator--ce9343e2-1132-4f65-b3c3-1f9c611e6900", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2918815e-bd8a-4ec2-9799-b96bedebc06e", "sighting_of_ref": "indicator--ce9343e2-1132-4f65-b3c3-1f9c611e6900", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23905f28-a593-4126-9bd6-631418666ec5", "sighting_of_ref": "indicator--b0c71c74-6d9f-480a-91a8-a603a2c626c6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33debb3-45c3-4441-977f-adeaefcb9869", "sighting_of_ref": "indicator--b0c71c74-6d9f-480a-91a8-a603a2c626c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614b400e-7e5d-42d9-9d3d-964edaf729a7", "sighting_of_ref": "indicator--66cc0f75-0573-49f1-a8eb-faa5652cc4da", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115f378d-3232-4e23-a853-82f938f2f59d", "sighting_of_ref": "indicator--66cc0f75-0573-49f1-a8eb-faa5652cc4da", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cc981b-a5e2-4b3a-9971-09cb65cfc257", "sighting_of_ref": "indicator--66cc0f75-0573-49f1-a8eb-faa5652cc4da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1e4cbd-3623-4308-83a5-8bfd90f15e20", "sighting_of_ref": "indicator--690d1177-612a-4beb-a370-89b8d4dd7c85", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4493d794-c8ab-46e8-9fa2-94086315e9f2", "sighting_of_ref": "indicator--690d1177-612a-4beb-a370-89b8d4dd7c85", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c787b470-91da-4929-897c-3fed1b0d2c7d", "sighting_of_ref": "indicator--690d1177-612a-4beb-a370-89b8d4dd7c85", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2322245-c872-43f4-b88d-9cb910e700a9", "sighting_of_ref": "indicator--861ab439-6cbe-4b89-81b6-4165552651ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0b985b-5378-4702-a71e-bbcd65845df1", "sighting_of_ref": "indicator--8903aaf0-1894-4fea-b9ec-a1602b18c789", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bd49fe-cb9c-4feb-89e6-c819f14ef03c", "sighting_of_ref": "indicator--8903aaf0-1894-4fea-b9ec-a1602b18c789", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4554c89-316d-409d-80ca-adbb1722c46a", "sighting_of_ref": "indicator--b19cea19-83a2-4fe0-81d5-334f10ed00d2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d236e6-b7a9-4a13-9cff-9b2848361879", "sighting_of_ref": "indicator--b19cea19-83a2-4fe0-81d5-334f10ed00d2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09aa01ac-51e2-419e-891e-a51cfb330048", "sighting_of_ref": "indicator--2b59ac6f-3273-44b8-8aa7-d7c1a27c8d80", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf9d9ad-fb0d-4c69-856c-b5ba17e782ff", "sighting_of_ref": "indicator--2b59ac6f-3273-44b8-8aa7-d7c1a27c8d80", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990f9a2c-1963-4b06-8db4-aeb2302fc66b", "sighting_of_ref": "indicator--a0f0bb3f-9057-4077-8b5e-9e2573b740bd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f02ae01-e926-44c1-8495-7c0a942a0f99", "sighting_of_ref": "indicator--abca9c84-c18f-4e4f-b646-1f7fd50b487b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25da5ff2-3651-44d3-90ee-f50cd30135ad", "sighting_of_ref": "indicator--abca9c84-c18f-4e4f-b646-1f7fd50b487b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea523e6b-52e1-4747-81b2-d972339db74f", "sighting_of_ref": "indicator--abca9c84-c18f-4e4f-b646-1f7fd50b487b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363dfc1a-da08-4475-8389-ab11a21673e9", "sighting_of_ref": "indicator--15d19170-a9ea-4d3f-bbcb-6b7e1deb80f0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1528a22-bfc2-4eb5-9ba3-4dfd74ba10d5", "sighting_of_ref": "indicator--15d19170-a9ea-4d3f-bbcb-6b7e1deb80f0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6933cc-d821-4768-85f7-4106a9abdbca", "sighting_of_ref": "indicator--29f1324c-b5c5-41f7-99cc-52997d92b694", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfb0026-ea96-49fd-bb71-1e80dab5c2a0", "sighting_of_ref": "indicator--c703a63c-784c-4258-b76b-73f66ead9064", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b66871c-f70b-48da-9f36-cc25eb03a9a1", "sighting_of_ref": "indicator--e5dd78ea-17f9-4613-9ce9-98b83fdcbda7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef472530-5235-4f6e-af15-170ed2c1d99f", "sighting_of_ref": "indicator--e5dd78ea-17f9-4613-9ce9-98b83fdcbda7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509731d1-29bb-48ce-a5aa-6b1dd9312c19", "sighting_of_ref": "indicator--e5dd78ea-17f9-4613-9ce9-98b83fdcbda7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ccef85-b1de-43d8-bcaa-64b0ab1f1723", "sighting_of_ref": "indicator--65fa3d48-e6b2-4590-ac9c-a3fb39424a43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c2c657-60b3-428c-90dd-3230a71a52ab", "sighting_of_ref": "indicator--65fa3d48-e6b2-4590-ac9c-a3fb39424a43", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68837ba2-6a00-4760-840a-4402e0903e0f", "sighting_of_ref": "indicator--65fa3d48-e6b2-4590-ac9c-a3fb39424a43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc7d495-f285-4430-8bd5-8d232715d972", "sighting_of_ref": "indicator--f2510c0b-6776-48e9-ad29-3c66cb57642a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70f8070-2684-4f18-b429-cb75ba87c130", "sighting_of_ref": "indicator--f2510c0b-6776-48e9-ad29-3c66cb57642a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24825e0-e435-4fd9-95bd-a1f7ee64bf76", "sighting_of_ref": "indicator--54037ece-659b-4d68-9ab6-98c83335d45f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dabbc8-1d8c-4f90-b367-876235512b53", "sighting_of_ref": "indicator--54037ece-659b-4d68-9ab6-98c83335d45f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910a5f60-557b-41e7-8312-e8ce65cee908", "sighting_of_ref": "indicator--54037ece-659b-4d68-9ab6-98c83335d45f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac850bce-6764-4854-9336-1f96f8ad61a0", "sighting_of_ref": "indicator--91213522-a2c0-4694-ac73-fab947222230", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811ae1d9-55ef-4be8-9a99-de96be507ea0", "sighting_of_ref": "indicator--91213522-a2c0-4694-ac73-fab947222230", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831b83d2-3ecc-4152-b747-eea873b42687", "sighting_of_ref": "indicator--91213522-a2c0-4694-ac73-fab947222230", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb979c73-d80e-4c21-96e2-465c0b3b1459", "sighting_of_ref": "indicator--808e3d11-0b34-469f-89c1-b22cdb74757b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8da3335-c365-4dc2-bb03-f8b53db81bf3", "sighting_of_ref": "indicator--808e3d11-0b34-469f-89c1-b22cdb74757b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24872f5f-e6e5-4f47-82da-5ea4dc370aba", "sighting_of_ref": "indicator--07dfb651-353c-4fd7-be9d-adaf820b4191", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bc6b2c-a09d-4708-b1eb-ffea18b1de2e", "sighting_of_ref": "indicator--07dfb651-353c-4fd7-be9d-adaf820b4191", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edfad2b-4fa5-49a2-9919-cf3d7408ebf6", "sighting_of_ref": "indicator--07dfb651-353c-4fd7-be9d-adaf820b4191", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b186ed5e-4c9a-4d50-9b21-90378cea9eb4", "sighting_of_ref": "indicator--1145ebc2-9f76-4514-a42a-5bc923d6efd1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ad25fd-fe04-4581-9d31-97de26b1de85", "sighting_of_ref": "indicator--1145ebc2-9f76-4514-a42a-5bc923d6efd1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9680276-cd01-4fe2-b097-147513e2f337", "sighting_of_ref": "indicator--d3b73200-da50-442e-b349-e15fca0ad544", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef52cd95-1773-4f4a-aa69-6b624dc30301", "sighting_of_ref": "indicator--d3b73200-da50-442e-b349-e15fca0ad544", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d64fd9-7ddf-406e-9544-3793953bbf7c", "sighting_of_ref": "indicator--d3b73200-da50-442e-b349-e15fca0ad544", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1754aa-d0b4-4948-bb88-7c3687626e68", "sighting_of_ref": "indicator--2a379001-176f-4536-b5f7-5537978b8ef9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f47bd1b-96e9-4ada-8779-8c799f33e3ed", "sighting_of_ref": "indicator--2a379001-176f-4536-b5f7-5537978b8ef9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c761d4-92d5-422f-9cb5-a1c2cb3c566c", "sighting_of_ref": "indicator--2a379001-176f-4536-b5f7-5537978b8ef9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bde1e8d-d36a-4601-b249-74cc7fb1782a", "sighting_of_ref": "indicator--a06347f6-c3a6-44d5-98a6-a0a65b55691a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccebedc6-4367-418a-90fb-f8db01b07325", "sighting_of_ref": "indicator--a06347f6-c3a6-44d5-98a6-a0a65b55691a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1f01b2-92f8-45e9-9cad-a4f03a2075a2", "sighting_of_ref": "indicator--d0d38b9d-1137-4b86-9b31-588604c355b4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8f92bd-142f-4f39-9db4-f9173a666580", "sighting_of_ref": "indicator--d0d38b9d-1137-4b86-9b31-588604c355b4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0aaebc8-4b2c-43bd-8b1e-89011e3fefed", "sighting_of_ref": "indicator--1e4c61c1-df26-4527-b77c-2ed7ce2408ca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bac73f5-51d8-408b-95aa-d3adc7c1ac39", "sighting_of_ref": "indicator--1e4c61c1-df26-4527-b77c-2ed7ce2408ca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38814019-cd19-4068-9acb-d19e4d88a4fc", "sighting_of_ref": "indicator--94ea9623-c5cb-4b8b-98d7-80e322269d6a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafedc86-5eda-4758-93d8-5a8f330307d8", "sighting_of_ref": "indicator--94ea9623-c5cb-4b8b-98d7-80e322269d6a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f89e12-e187-4dd5-b295-d6016dd81aac", "sighting_of_ref": "indicator--b842b30d-3e56-41c6-9a3c-ccebcfb7ed3d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d820ecf4-0896-4f9a-aeef-fc628041fedb", "sighting_of_ref": "indicator--b842b30d-3e56-41c6-9a3c-ccebcfb7ed3d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82eba846-2cfb-4185-993c-f4da4ca829a6", "sighting_of_ref": "indicator--1fe5486a-af46-4f30-a44a-545e11e397de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d85c0f8-117a-429d-8883-74bee1885fd3", "sighting_of_ref": "indicator--d991eccd-3c8a-44a5-bfe0-7e968ebc8e66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19e5d15-ea56-425c-a4ec-5cfb0068a719", "sighting_of_ref": "indicator--d991eccd-3c8a-44a5-bfe0-7e968ebc8e66", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d88781e-91fa-4c4c-8731-0d6af7279eaa", "sighting_of_ref": "indicator--d991eccd-3c8a-44a5-bfe0-7e968ebc8e66", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b398f73-cb3a-4bf2-83b0-705ecd6dedc1", "sighting_of_ref": "indicator--2cd216fa-217c-4ec2-8b80-b74f3987d669", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b6ebd9-5340-4408-b433-83876a37f726", "sighting_of_ref": "indicator--2cd216fa-217c-4ec2-8b80-b74f3987d669", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5809b3e0-4bfd-466c-8ed7-a960634361e1", "sighting_of_ref": "indicator--2cd216fa-217c-4ec2-8b80-b74f3987d669", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363445a7-561f-4a49-a069-3fd5800beee5", "sighting_of_ref": "indicator--2ceb8696-36f6-4666-9761-960d1752caa6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4beb7d5-eaff-4343-9376-4fc73f6a59a7", "sighting_of_ref": "indicator--2ceb8696-36f6-4666-9761-960d1752caa6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517819d4-cb0a-4acf-ad9b-abacfc6b2a87", "sighting_of_ref": "indicator--2ceb8696-36f6-4666-9761-960d1752caa6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fca133-3fa3-4ebc-b04c-98f5a2d45697", "sighting_of_ref": "indicator--1fe4eb8b-aee7-4382-a526-d4156060c936", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4576520-252d-4dbd-a9fe-17eeef45e74e", "sighting_of_ref": "indicator--1fe4eb8b-aee7-4382-a526-d4156060c936", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0602743f-f6f5-4afd-9bbb-0e7ee5215648", "sighting_of_ref": "indicator--1fe4eb8b-aee7-4382-a526-d4156060c936", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1122dd-6529-41c1-a25c-1231c6adf606", "sighting_of_ref": "indicator--7b8e534c-2cc5-4d91-9f7a-8107e5f32ea4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d89770e-c929-423e-ade3-b71ce0260775", "sighting_of_ref": "indicator--585695f2-6e7c-4cdd-97b5-3ddcd9e4df90", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a7701a-dcd3-4fc3-9df5-12a8f0219e7f", "sighting_of_ref": "indicator--585695f2-6e7c-4cdd-97b5-3ddcd9e4df90", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9059812b-9653-441a-bb13-44bb21f27bac", "sighting_of_ref": "indicator--043c11a1-2891-4132-b297-09f422832aee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882e50ed-0ec8-4ffe-8a50-1aabc2145183", "sighting_of_ref": "indicator--043c11a1-2891-4132-b297-09f422832aee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f618b3cf-6c6d-4468-855d-efdb1630362a", "sighting_of_ref": "indicator--043c11a1-2891-4132-b297-09f422832aee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f6f9d6-82e2-4c22-9bed-afba4033f6c9", "sighting_of_ref": "indicator--27352a30-67a4-41d5-85a0-65b66e3631a4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ca98da-f6e7-4b76-ba06-85454b9f6cfd", "sighting_of_ref": "indicator--6bb5c191-8db4-485d-8a1a-686418bc4ea7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c37a72-1d7b-44c6-860f-745d082670a5", "sighting_of_ref": "indicator--289064b7-db5a-4c5d-99d0-ed75db548dc2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743b6d94-3443-4fb7-bdd9-f932b829ac77", "sighting_of_ref": "indicator--49709711-c534-4a21-bd49-4523656da4c8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9925db38-2796-4192-8639-7cd0f564f22b", "sighting_of_ref": "indicator--49709711-c534-4a21-bd49-4523656da4c8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b680d7e7-9c2f-416b-af97-6c27c5bc5871", "sighting_of_ref": "indicator--ef462865-d383-4366-b007-786779569aeb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cf2f8c-f7ea-45ab-b2f8-23f861adc260", "sighting_of_ref": "indicator--a474de56-739f-45dc-9c67-3c69d43ff6d7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9198ca28-6214-4a84-91bb-66da0bd82cc3", "sighting_of_ref": "indicator--2683ee5c-6a11-476a-be13-5d0da9102e87", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da16330-bb21-4958-b19b-f2c110cbfb7e", "sighting_of_ref": "indicator--513992b6-2cf3-4861-a383-eebbd302b60c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebfe5b3-7532-46c6-be1f-27f7ebdc06ae", "sighting_of_ref": "indicator--2909db11-2a64-4605-a287-08271ed86e3d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67abb5a-b6eb-41bd-a282-3c32afe43c94", "sighting_of_ref": "indicator--2a6cc565-ce04-4463-9991-4189a16fbf25", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6796725-f624-4000-a6ca-77a624d68e7c", "sighting_of_ref": "indicator--5395ed8f-40d6-4f08-8c8c-40cb0a83bf65", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf14b0b-0449-402a-bbbe-106d0e9f2b45", "sighting_of_ref": "indicator--2b06a764-1a3b-4a92-bae6-e1886677dd2f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43281634-efb2-4065-8b76-22676e8eb6e0", "sighting_of_ref": "indicator--0624271c-73c9-49d7-95fa-32cc89d25f15", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0887d8a5-189a-412f-92ee-03f5b53a8433", "sighting_of_ref": "indicator--35b4c592-0ffc-4f82-bb32-4699580c6c12", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d41b0f1-cc69-4ec9-ae69-707e1de7236e", "sighting_of_ref": "indicator--869b75e7-e012-4510-9e8f-9ea0c79b792a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08d30b8-42b4-41a8-bd4a-41e646bd7c64", "sighting_of_ref": "indicator--a34158ad-86de-477d-b0ec-d8e52c21bb9d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97100821-96f4-4682-98ad-b69ac6140b94", "sighting_of_ref": "indicator--95bbd91a-2ec1-49f3-95db-f82b2b20780a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4742999-7976-48cf-8494-eac59cef74db", "sighting_of_ref": "indicator--95bbd91a-2ec1-49f3-95db-f82b2b20780a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6fd955-4985-4263-94e8-b81e063507a8", "sighting_of_ref": "indicator--be407116-bac7-4aaa-8469-72fad75cc24f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c01a9ba-bd8c-4e64-8e7b-9aa3c64af380", "sighting_of_ref": "indicator--be407116-bac7-4aaa-8469-72fad75cc24f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cda5ec-caa8-4d08-a3bd-d90f8d9414e9", "sighting_of_ref": "indicator--be407116-bac7-4aaa-8469-72fad75cc24f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dec5660-86a8-43d8-a443-0eb6f324ace2", "sighting_of_ref": "indicator--ef84ca49-ce6a-4b88-9db1-8b50bcf9b2a2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaff8ad1-287a-4125-beae-3ff9facc5b7e", "sighting_of_ref": "indicator--ef84ca49-ce6a-4b88-9db1-8b50bcf9b2a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8353c3a3-2d98-4046-96b4-090c8a7533cf", "sighting_of_ref": "indicator--ef84ca49-ce6a-4b88-9db1-8b50bcf9b2a2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc6975cf-9ec9-46a0-9fcb-6ffc4ed69468", "sighting_of_ref": "indicator--1dc9b1ee-565a-44ac-9d71-20dec3d93421", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcb61a0-3fb1-414a-9ce2-30f478bbec5d", "sighting_of_ref": "indicator--1dc9b1ee-565a-44ac-9d71-20dec3d93421", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb35bc3c-405a-44b1-892b-5c2bc554467c", "sighting_of_ref": "indicator--1dc9b1ee-565a-44ac-9d71-20dec3d93421", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fc61da-1dd4-425f-9b33-32b33156a9ab", "sighting_of_ref": "indicator--bc90f272-51ab-4b55-8be6-b64ff8a7b551", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62396e94-25ef-455f-b5aa-bda728961edf", "sighting_of_ref": "indicator--bc90f272-51ab-4b55-8be6-b64ff8a7b551", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b346aada-f0af-48a1-aa21-d6e643559adc", "sighting_of_ref": "indicator--bc90f272-51ab-4b55-8be6-b64ff8a7b551", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdebf804-fa34-49ef-ae85-2cc3053a6989", "sighting_of_ref": "indicator--1273ec16-9859-4d3e-b8cd-76afaa41167b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eddac58-4b82-4204-b6a8-f7e8382309a7", "sighting_of_ref": "indicator--1273ec16-9859-4d3e-b8cd-76afaa41167b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6954f4c7-31d1-4c6f-8df5-43f1cb4e6fe9", "sighting_of_ref": "indicator--f0db9c5a-a11f-45ee-8d7b-3dcf16d7e97c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716d98a4-a961-4eec-b5ef-120170a0c918", "sighting_of_ref": "indicator--f0db9c5a-a11f-45ee-8d7b-3dcf16d7e97c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd691455-247d-4119-a17a-99532087bcd0", "sighting_of_ref": "indicator--f0db9c5a-a11f-45ee-8d7b-3dcf16d7e97c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0692ddbd-c0cb-4198-97b9-67bd96bb0bc6", "sighting_of_ref": "indicator--18b43a73-8e9d-42a4-89b8-140cbb1de054", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a08f5f-cde3-4c90-91b7-322f912b145d", "sighting_of_ref": "indicator--18b43a73-8e9d-42a4-89b8-140cbb1de054", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f6a4c9-b0a6-4ce5-ad5d-67c65d240b69", "sighting_of_ref": "indicator--18b43a73-8e9d-42a4-89b8-140cbb1de054", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a44af0f-9ba9-4b00-b4fb-c6e3700b5ab7", "sighting_of_ref": "indicator--a06e9f97-6511-4fc3-9799-3220db217506", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4353ca4-48ca-4d5c-b311-0dad0e02d241", "sighting_of_ref": "indicator--a06e9f97-6511-4fc3-9799-3220db217506", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56df1dd4-b5e1-4190-b66b-15064d12f329", "sighting_of_ref": "indicator--a06e9f97-6511-4fc3-9799-3220db217506", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1df1a3-42ff-44b8-bee6-594e4ac57b8a", "sighting_of_ref": "indicator--01a35ad3-eb7b-4341-a676-1b0cb502f276", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7e9da0-4c47-468b-aab4-33f36633b9a7", "sighting_of_ref": "indicator--01a35ad3-eb7b-4341-a676-1b0cb502f276", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606fb7ca-e8ee-43db-b24b-93d3b3068833", "sighting_of_ref": "indicator--01a35ad3-eb7b-4341-a676-1b0cb502f276", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1ad0e0-3379-46dc-9161-24dc6d64c5c9", "sighting_of_ref": "indicator--29fca26f-3be5-4c18-8ba1-b203ae088d6b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380bfc90-e6ba-4f19-bf6e-b3063a48b4d5", "sighting_of_ref": "indicator--29fca26f-3be5-4c18-8ba1-b203ae088d6b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77064435-41e2-4e14-a3a2-737e78f341a1", "sighting_of_ref": "indicator--29fca26f-3be5-4c18-8ba1-b203ae088d6b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32c1848-3b6b-4d5c-8288-02055ab20c64", "sighting_of_ref": "indicator--f9ab75de-385b-4f99-98bf-79bdcde9c67e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebccc242-e3c5-4e7b-8a5f-6222912df896", "sighting_of_ref": "indicator--f9ab75de-385b-4f99-98bf-79bdcde9c67e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7c3c30-8398-457e-8fdb-84efe1679cd7", "sighting_of_ref": "indicator--f9ab75de-385b-4f99-98bf-79bdcde9c67e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4a432b-e25f-485c-895a-7b8ba555a9f9", "sighting_of_ref": "indicator--764ee37a-edfa-4ea1-be31-37a1726c4d3c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717f529a-30bf-4700-83f7-d8b06cb530d2", "sighting_of_ref": "indicator--764ee37a-edfa-4ea1-be31-37a1726c4d3c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776263e3-0025-46d5-a5f5-10923fe86bdc", "sighting_of_ref": "indicator--764ee37a-edfa-4ea1-be31-37a1726c4d3c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7278e5-2e28-49f4-bfb0-e2d550621830", "sighting_of_ref": "indicator--d7e6df9a-6f7d-4056-8c5a-957864a9139f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b601073-2826-4aad-be3e-e8f19b3fe337", "sighting_of_ref": "indicator--d7e6df9a-6f7d-4056-8c5a-957864a9139f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880381af-a4ae-4e79-9e37-304ff26fc452", "sighting_of_ref": "indicator--d7e6df9a-6f7d-4056-8c5a-957864a9139f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ce18ee-cc48-4660-988a-67911737b3f4", "sighting_of_ref": "indicator--29bd29f9-c6b9-4541-a752-6371193d0f29", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03124134-16c7-4d26-9692-758bd6651062", "sighting_of_ref": "indicator--29bd29f9-c6b9-4541-a752-6371193d0f29", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f308386-5696-4539-a57a-a300a3b1d17e", "sighting_of_ref": "indicator--29bd29f9-c6b9-4541-a752-6371193d0f29", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5489564b-1cf5-4bc3-bd15-e32f5579f305", "sighting_of_ref": "indicator--f520268c-91ac-4841-b4c2-7ec6043febc2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cafa52a-cd60-4699-8ce4-a1c5d8e4b700", "sighting_of_ref": "indicator--f520268c-91ac-4841-b4c2-7ec6043febc2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f08530-b62d-4aab-8e0f-20fe25f1138c", "sighting_of_ref": "indicator--f520268c-91ac-4841-b4c2-7ec6043febc2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c45c1f-80d8-4f3a-9fd6-63fa2deec7c4", "sighting_of_ref": "indicator--7209ebb9-6ea6-493a-b742-17adddcb04f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4c5187-1317-47a0-b350-127161873e32", "sighting_of_ref": "indicator--c8fd3da1-0f25-4113-ad4f-6428dd958d7e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b96488-3a96-4ed3-942a-2da41f325417", "sighting_of_ref": "indicator--556b8d48-88c6-4ec2-bb61-a9286790dfc1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ece3cd6-bede-4388-ad3e-798fea95f55c", "sighting_of_ref": "indicator--a9e1227a-ca75-4277-b522-43a9459aa638", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de85656-f7c7-426d-ae3f-d5a4b65e65df", "sighting_of_ref": "indicator--cefdffb9-0da3-4df7-906b-45324e6f444e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc729ba-4c84-46b0-b781-4948b9bde4f1", "sighting_of_ref": "indicator--7fd00388-2ccc-4a8c-a39f-4f78cf5d0e3b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d094e5-5e86-43b3-b535-d5bb3b18d530", "sighting_of_ref": "indicator--78c6a905-c43c-4395-8445-ba894adb25d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d692dd-9044-479b-a65a-e241fd0d0137", "sighting_of_ref": "indicator--78c6a905-c43c-4395-8445-ba894adb25d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8508ef3a-120c-4006-8d80-3fde9122f208", "sighting_of_ref": "indicator--96693ba3-c2c5-4e4c-9deb-66f66ab8363c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e89bdf2-e618-4faa-8b47-47e7d0375dea", "sighting_of_ref": "indicator--1a25b53c-8113-45fe-a2cd-37d1c04febf9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22389a08-14d0-4a5d-820a-4447d5fd150d", "sighting_of_ref": "indicator--1296730a-a941-4c7b-83de-8509b4c96867", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca4dcf5-25a5-4d09-9730-aa8709019c02", "sighting_of_ref": "indicator--7097cebd-e38a-4371-88f0-71f653f64400", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a8de68-3b42-49ae-8cac-eba647dc8936", "sighting_of_ref": "indicator--1d181233-2b0b-4640-9c98-fc81cd7c1edc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391e55d4-ff81-44ee-91c6-963c60da2633", "sighting_of_ref": "indicator--aad0bca2-0762-4304-a249-f2a59398758a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0439b4f-2816-466f-82f4-3d2eff2881b2", "sighting_of_ref": "indicator--d4c7e75f-e92d-4a93-bc6e-32ac5e8d9431", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c2e601-0c91-4124-b238-5dc74c87c247", "sighting_of_ref": "indicator--ac32a678-942a-49bf-baaf-10b0e6c21021", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceec84b9-8f40-4d48-a13a-d3b9f5a66d76", "sighting_of_ref": "indicator--8ab9ca13-84bc-451f-8b0e-cdd2adef8be1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0508d9da-754a-410c-9d19-f049e45df298", "sighting_of_ref": "indicator--aae5a643-b161-4524-bed8-8185e14bfd0e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ea9259-a65e-45c2-b22f-c6c58e094917", "sighting_of_ref": "indicator--e4bc5739-2696-4c51-985e-bf368216b64e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34faf19b-aec8-4d97-9947-d7f4d2aa48fe", "sighting_of_ref": "indicator--e7d61460-28ed-4179-a803-4222aae946e8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf27c91d-3ef0-4382-b187-d87f783b3818", "sighting_of_ref": "indicator--e7d61460-28ed-4179-a803-4222aae946e8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02313f7-4c68-4a7a-aee8-3c706413e5b8", "sighting_of_ref": "indicator--92d5791c-51d9-4c8a-bf39-2b1c72a65e0e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6637054c-483e-472f-9ae8-f3f6eccf6c52", "sighting_of_ref": "indicator--4918ee9f-d095-4bfc-83f9-f22d07deb39a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e939f3-9f77-4adf-9fcf-159babab902b", "sighting_of_ref": "indicator--4918ee9f-d095-4bfc-83f9-f22d07deb39a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059e5d24-28fd-4468-b14a-e24ee0502391", "sighting_of_ref": "indicator--10b74cef-98da-4061-b478-aae9c0ce85b2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4043599-40da-4e9c-b892-6bf56825898e", "sighting_of_ref": "indicator--73c41de5-1f75-4055-a77e-59592c15b3b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303df0ea-0a0c-4553-9ead-f76b50b74035", "sighting_of_ref": "indicator--96656b93-f5d4-4d19-897b-6f38c26127bc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399f03b4-4c10-4953-b2ee-7e64a6cac649", "sighting_of_ref": "indicator--e5d14a01-b0b7-4a1a-883c-5f204fb20f49", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5c5f8a-7e67-4250-9716-12192497259d", "sighting_of_ref": "indicator--e5d14a01-b0b7-4a1a-883c-5f204fb20f49", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4956194-c58f-43cf-9bb8-81bbe76d0b4d", "sighting_of_ref": "indicator--9e179df8-2219-4fa6-b545-7ddae4dcb834", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a188e4f0-71f0-47da-8122-750e802e8aab", "sighting_of_ref": "indicator--069a40f2-a928-46d8-91c3-17905fb218b4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7671c387-7c45-48cd-9849-4d72b554bb3d", "sighting_of_ref": "indicator--069a40f2-a928-46d8-91c3-17905fb218b4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90813136-aa45-4360-813b-f60309e51624", "sighting_of_ref": "indicator--3c4ece06-7492-4bcd-8645-5bc7188662aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c811ef1-10fb-40f5-93fc-50ec9d46f7cb", "sighting_of_ref": "indicator--6cc41de0-07ca-4d32-9a8e-13d8dbfc0ccb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040cb0ab-1090-456e-9f47-a513efdb2245", "sighting_of_ref": "indicator--5aca4d6a-898a-4e71-b2f3-1504ff6daa31", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcaaa913-369b-4044-a3d0-854c09daee1f", "sighting_of_ref": "indicator--a7ad7635-94b0-4ecd-8070-1c8603fd32a2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66d899f-016a-46c7-a579-b5be70818eb0", "sighting_of_ref": "indicator--a7ad7635-94b0-4ecd-8070-1c8603fd32a2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d88e005-193e-4086-acc1-22ae57502faa", "sighting_of_ref": "indicator--89a5746b-6d00-43ac-abb8-904241195609", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aedd764-345f-4e12-bcae-213f25606c2f", "sighting_of_ref": "indicator--1a3823e3-d4a8-4740-866b-f0b331b18d5e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72627a40-bd9d-4e9f-b939-fdd802b47a2d", "sighting_of_ref": "indicator--b3a23adc-a26b-45ec-a75a-fd11375a2cde", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa4445c-2116-48bc-aadb-8bd5385ebe46", "sighting_of_ref": "indicator--b3a23adc-a26b-45ec-a75a-fd11375a2cde", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa503c1-7d68-4a8e-b732-10eca1851797", "sighting_of_ref": "indicator--b3a23adc-a26b-45ec-a75a-fd11375a2cde", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38654fe0-ec3d-41bd-a72e-2401d6d88f22", "sighting_of_ref": "indicator--77ac778c-a214-4251-bd90-8e99c36ed206", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad56dab-9de1-4200-9e7b-02ba2bcef038", "sighting_of_ref": "indicator--77ac778c-a214-4251-bd90-8e99c36ed206", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9c627a-5750-485b-ab1e-0613b16b8053", "sighting_of_ref": "indicator--49f563df-e369-4ce8-9eaa-f080a1005798", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af10cc04-5175-441b-9d84-7113fef8ffed", "sighting_of_ref": "indicator--49f563df-e369-4ce8-9eaa-f080a1005798", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ffa0f7-ce0a-45de-bd4e-09e7d867c232", "sighting_of_ref": "indicator--19aa8154-c3d5-4955-940a-d7a36161cf45", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02dc6be-6958-48ef-8ba8-b5a9f9506c33", "sighting_of_ref": "indicator--19aa8154-c3d5-4955-940a-d7a36161cf45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0176dd47-0ae1-4996-a5dc-0788df8febb2", "sighting_of_ref": "indicator--350ffab4-4108-4e04-8de3-478d85c46ca2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8d88c6-7739-4851-8398-32f7a2364d4b", "sighting_of_ref": "indicator--350ffab4-4108-4e04-8de3-478d85c46ca2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e12ea8-01ec-4e47-8a7d-bdc2398b581e", "sighting_of_ref": "indicator--350ffab4-4108-4e04-8de3-478d85c46ca2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5fe4b9-3cd3-408d-be99-41b0cefa65b3", "sighting_of_ref": "indicator--dac7d8ba-a13b-45c9-9786-0e5bd2026d00", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50676fd-14b6-4e38-b518-87dea1c57f52", "sighting_of_ref": "indicator--1f60e388-c2bf-488b-9b4d-90e07660842c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3905aee8-96af-47e8-b8a4-ffdf452e6930", "sighting_of_ref": "indicator--1f60e388-c2bf-488b-9b4d-90e07660842c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aefa8e42-5d9b-4ea8-b241-afb90f838764", "sighting_of_ref": "indicator--1f60e388-c2bf-488b-9b4d-90e07660842c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ea6d3e-06b3-4d38-9a63-3846155e5c69", "sighting_of_ref": "indicator--5c150db9-a512-4397-bbf9-35e6947745b4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c31e02-1d76-4f93-8ef1-27b67b2b31ed", "sighting_of_ref": "indicator--5c150db9-a512-4397-bbf9-35e6947745b4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297c688e-23da-489e-8963-810fb3a567b3", "sighting_of_ref": "indicator--1b818dbf-9743-4829-928d-9d7db28cfd0c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4d13b2-7e94-4769-bef2-ef798e2dbaba", "sighting_of_ref": "indicator--6b161cbd-9456-4875-9af0-8edc6f659e57", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a9e349-1008-4007-ae76-da09f848ce20", "sighting_of_ref": "indicator--bdd0dcab-3058-43a3-b62e-536e06edf6ae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaaf90fd-ed80-4ba2-afe4-92e46c3bd3e9", "sighting_of_ref": "indicator--bdd0dcab-3058-43a3-b62e-536e06edf6ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752e43ad-293b-4b51-a848-501c063e4376", "sighting_of_ref": "indicator--bdd0dcab-3058-43a3-b62e-536e06edf6ae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f967c0f-28cb-4f13-a2cb-7393fbdee3c2", "sighting_of_ref": "indicator--9d4388db-a45c-441d-baf5-885918c02cb0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b542a781-97cd-4517-a257-2f5acea1e866", "sighting_of_ref": "indicator--d358b5fc-c624-4fc8-89ec-7f49d6cbe264", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9e615f-7dc9-4087-9eb3-805ab59efbb6", "sighting_of_ref": "indicator--37574a66-c700-426e-811f-655276359d83", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d3307c-61d7-4407-898a-4760a4f4ac68", "sighting_of_ref": "indicator--585510b1-5f68-440b-bc03-d267c3c467c8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688b2894-2c7f-4181-86b5-3303092aabfe", "sighting_of_ref": "indicator--335deed6-1b96-4ff0-8099-3860c47df143", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9139c43c-cd8d-41f1-95e8-e67fa7041430", "sighting_of_ref": "indicator--3a3ea096-688c-412d-9136-936485301605", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ffd81d-9c6e-45d1-b32a-da7024c9905a", "sighting_of_ref": "indicator--3a3ea096-688c-412d-9136-936485301605", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d057823e-de65-44d5-a160-9deb9055205c", "sighting_of_ref": "indicator--060824fb-6e68-427c-8198-83606ccbb564", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a694b8c-f43c-42b7-8e7e-c6d956e3b45a", "sighting_of_ref": "indicator--6463f6eb-3678-4a66-9474-a03e937865a9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d154702-995f-4367-8a60-2427551c23c4", "sighting_of_ref": "indicator--fdc345d9-edc7-4227-a356-fa2ff197a50b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e2aa8e-72b4-4aa0-9396-b0bd01b02f21", "sighting_of_ref": "indicator--b2cf3d8c-09cb-4b67-a3ad-74e56384d10e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4191932-93a0-4216-8f5c-e2aafc60bc56", "sighting_of_ref": "indicator--b2cf3d8c-09cb-4b67-a3ad-74e56384d10e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785a4ffb-53c3-4339-9bf5-27203b2dba13", "sighting_of_ref": "indicator--5a593027-0359-4bc1-8989-1fb868e6f18b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69d7f2e-3269-47a5-bbc2-a6194cbaad55", "sighting_of_ref": "indicator--5a593027-0359-4bc1-8989-1fb868e6f18b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8447a2-7af1-4907-9521-2d66816a17ad", "sighting_of_ref": "indicator--85487364-6642-41bf-b83e-3be0787288c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45d70e9-059a-41d7-87b5-0170349ac695", "sighting_of_ref": "indicator--8df998ac-f693-4c4c-946a-f52764ae33c0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e619a50-a6a9-4c38-9333-cf4f844d4f47", "sighting_of_ref": "indicator--fe5cac3f-4c67-4b8b-8042-051f41458f3c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2d3847-1aed-429e-b3ba-9bbc2603a600", "sighting_of_ref": "indicator--fe5cac3f-4c67-4b8b-8042-051f41458f3c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee2c5e3-6db8-4e69-b18a-5b2de7975495", "sighting_of_ref": "indicator--636f3175-8d42-4191-8812-18c555927d45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7179a6b-afcc-4904-a8f7-372821474bc0", "sighting_of_ref": "indicator--973c26d6-ea6c-4235-90e7-b15c7636552c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44e2be4-891d-4aed-a11a-881a502d22c6", "sighting_of_ref": "indicator--c99458d3-aea5-4451-850b-6ad33964eff3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bd0bac-e303-471c-a547-c627614d88aa", "sighting_of_ref": "indicator--989af3b4-0ef4-4321-a15f-b93504b1135c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab8e8d8-40f1-4d22-a924-708276faa2ef", "sighting_of_ref": "indicator--989af3b4-0ef4-4321-a15f-b93504b1135c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c76b2e9-3150-4078-b861-ef83e19ed1f5", "sighting_of_ref": "indicator--12c83b26-f7ce-47f7-b2b0-ad264c4b1691", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535e266c-bce7-4123-ab7e-1df350231743", "sighting_of_ref": "indicator--3b34b36c-6d3d-4dbe-8eba-3d4b547585e1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9609338b-655d-40b8-8020-5c269d302b7c", "sighting_of_ref": "indicator--35df2d0a-0b45-4641-8677-6604bfcfd009", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd6690d-a102-45dc-89cb-f36bf852ba02", "sighting_of_ref": "indicator--1e544def-696f-45ea-9f81-0b91e9fe8360", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7dcc86-079a-4e67-92e5-f1ab8119edcc", "sighting_of_ref": "indicator--1ac28458-2b5d-4dea-986c-436e9572fd09", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd310107-e9e7-445b-add8-d427efb21553", "sighting_of_ref": "indicator--aca3b6e7-3718-4c54-92b6-f4961a412740", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab83c6a-b970-4dce-ab7e-baa9839b33a1", "sighting_of_ref": "indicator--aca3b6e7-3718-4c54-92b6-f4961a412740", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5c465a-55a2-41e7-a8db-f95ed0af5be5", "sighting_of_ref": "indicator--aca3b6e7-3718-4c54-92b6-f4961a412740", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3797e799-6ff7-4634-8895-03c0e56a926f", "sighting_of_ref": "indicator--a2527a89-bb43-40a0-917e-52daa7a07f70", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e415202d-7cb3-4b05-8291-d8083bec08e0", "sighting_of_ref": "indicator--9dda13dd-35c9-49f8-9c23-97e3e14b3e0b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881ecad0-9ce9-4927-9c8e-21a7dc7833f1", "sighting_of_ref": "indicator--009d3891-a8c1-4a1c-b65f-b1a9dfd9a7e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d20bf5-b5d6-42d9-acee-d1442822c865", "sighting_of_ref": "indicator--615456f6-9aa2-444a-9460-d787102d766e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335c3df0-5db4-4c7a-a2ed-89073b26c0c2", "sighting_of_ref": "indicator--615456f6-9aa2-444a-9460-d787102d766e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12962e62-adaa-449f-b753-a93ce45a7143", "sighting_of_ref": "indicator--56e897ef-f7a2-46a9-b75e-c683efbe14d2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f9b5b3-98bf-4fa3-9365-b2c83b63db49", "sighting_of_ref": "indicator--7383f699-c4c2-44be-8024-9e826033add0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de4a01f-9cef-473a-9b2e-598fd965d634", "sighting_of_ref": "indicator--7383f699-c4c2-44be-8024-9e826033add0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8dd4ac-8aae-4e18-978c-3136f82d2994", "sighting_of_ref": "indicator--7383f699-c4c2-44be-8024-9e826033add0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1316233-4ca2-44dd-8f1a-18a9af52ba3e", "sighting_of_ref": "indicator--abd603b0-6b1a-487c-8219-c8bd247d311f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21097534-d5cf-4a7e-b63c-e3f1e4b7f6ec", "sighting_of_ref": "indicator--abd603b0-6b1a-487c-8219-c8bd247d311f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fa5b02-9f65-408b-8511-7f09e814be1e", "sighting_of_ref": "indicator--b8ea1681-fcdc-4142-8ffb-9e1394c28ca9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db14e334-5bc4-4e6a-a629-adfcf2e93b3c", "sighting_of_ref": "indicator--69e9431a-726a-4885-b76d-dcbe05fac564", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb6dd47-5ae3-4a94-8202-5e8bbb5a08a8", "sighting_of_ref": "indicator--66a206a2-4c39-482f-b4f1-ed0462df5156", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08681d8-5295-49c1-8e3a-f917436113d0", "sighting_of_ref": "indicator--dc85a96b-1785-4f8b-be75-6f8bfdbaf1c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5085eb5-f114-4e4a-a14e-e955713faf88", "sighting_of_ref": "indicator--27c2d67b-2d3f-4db0-9e03-675366429345", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a6b6cf-fbd0-4ff2-b177-9b49597b2c1e", "sighting_of_ref": "indicator--c0bf0e5b-902d-4cbf-a223-bd2f416eeb3f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750644e3-4670-4fcf-bf50-629c37fd9fbb", "sighting_of_ref": "indicator--c0bf0e5b-902d-4cbf-a223-bd2f416eeb3f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b94bbe-2aae-4e2e-b446-f61b0b8c2e2b", "sighting_of_ref": "indicator--56b2e15f-2445-4c8d-8e43-b80549120ec6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb3244b-80f1-469a-83a3-75f2075aec5e", "sighting_of_ref": "indicator--a65d8abf-869f-4498-b970-11649588f978", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dad073c-5459-46fd-9ba9-59768a9c8ba8", "sighting_of_ref": "indicator--35d56986-5d2c-4407-a91d-00d3035c9bf4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e978f364-699e-42df-aafb-066296c06ffa", "sighting_of_ref": "indicator--35d56986-5d2c-4407-a91d-00d3035c9bf4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3328ccc8-3890-4ff0-8f8a-d6e47a08fb8a", "sighting_of_ref": "indicator--4048c5f2-56b8-4a9c-8c3c-e9b8162ce85f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee84afc2-fca1-4507-9f12-b82ecb8a38e9", "sighting_of_ref": "indicator--b747668c-ec56-4519-9f95-89b6a8502bb8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4703e01b-7cea-4af1-b7ef-a8761a17866b", "sighting_of_ref": "indicator--b747668c-ec56-4519-9f95-89b6a8502bb8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d2943e-9e5a-44d8-8f25-9dada4240b1d", "sighting_of_ref": "indicator--b747668c-ec56-4519-9f95-89b6a8502bb8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3fc609-a932-44bb-9ee3-6da7929f0376", "sighting_of_ref": "indicator--93eb2898-3244-46d0-b526-4fe3bfba1a80", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc5a53f-5a98-41d9-884a-387fb9dbbd60", "sighting_of_ref": "indicator--93eb2898-3244-46d0-b526-4fe3bfba1a80", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88457d5b-fef2-433b-a490-2d54e02af6b6", "sighting_of_ref": "indicator--93eb2898-3244-46d0-b526-4fe3bfba1a80", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f83bfe-907e-4508-af72-c19c8eac8265", "sighting_of_ref": "indicator--bb143d8b-22ff-4273-b5b0-9b9c15e2dfa1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc7cef4-9671-495d-bf30-896f594350b9", "sighting_of_ref": "indicator--3a403a08-bc91-4855-bf9b-d11ed797f523", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adf079e-4854-460b-96c1-5513f72fc72b", "sighting_of_ref": "indicator--f9639819-fc23-4470-9d1e-38b429ddb312", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed491b8d-fb35-431f-9d78-1566d73a637b", "sighting_of_ref": "indicator--a8c48aa6-28fa-42c1-a89a-93c337a8c0b8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281d1674-bd82-44c7-9fbc-2714642f76d4", "sighting_of_ref": "indicator--a8c48aa6-28fa-42c1-a89a-93c337a8c0b8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4176a1c-64d0-486c-bcec-d78f6fd9e76e", "sighting_of_ref": "indicator--f3713f38-f70d-4230-8e96-46a20a84e24a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2339d3-0adf-4909-a950-b6f35dd6c4a6", "sighting_of_ref": "indicator--8a9765fa-b865-4be2-98fa-9171aab2fad7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caa457b-4ec5-4ef9-adf8-08c3756e647a", "sighting_of_ref": "indicator--59fc9e0b-1ae1-4c96-a896-c707254ad7bc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51e372b-98ef-416b-8b2f-cba8e6998779", "sighting_of_ref": "indicator--3298ccb0-386b-4f65-bb6f-2b90ea51712d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7678197d-118d-4355-be82-9c369ab307a4", "sighting_of_ref": "indicator--96728191-e96f-4d4e-b917-7d98e5564ec0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03a300c-f22e-44a0-9a49-cead1f87a151", "sighting_of_ref": "indicator--22159b02-0dee-4b37-933e-5ba0c5eacdbe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411c77ee-39df-41f0-ae09-b2ce38d2d8df", "sighting_of_ref": "indicator--d0619e5b-3bc8-4e3c-85ec-9d2f56da5010", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fff9f2f-3ae5-4297-a516-ff9c4ebe64b4", "sighting_of_ref": "indicator--a8eefcb2-84b0-4b4c-b4e4-044939cf6ecf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858dc996-14f4-4abc-94c3-5b72ccd351a4", "sighting_of_ref": "indicator--b7aca3d6-b0ba-4a90-b1e5-0819a7fdc4a4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8475869-d2d6-4284-9314-6d7e10f9b6e9", "sighting_of_ref": "indicator--cd500494-1fcb-4dd2-b87a-30e27faa719f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954fe976-0c2f-4771-a5c0-6e5983c1d36f", "sighting_of_ref": "indicator--83bc3774-b6d4-4066-8993-298e5cd5eea8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17388ebf-b169-41e7-8fe1-b32b4668efaf", "sighting_of_ref": "indicator--83bc3774-b6d4-4066-8993-298e5cd5eea8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a6e681-6cb2-486c-b598-6c63f6e1c80b", "sighting_of_ref": "indicator--975ad6c0-c6c4-4622-a00b-6225b1b97d2f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15ba2c1-0b09-4f0f-ba8f-fcae0533b1bc", "sighting_of_ref": "indicator--a34849e4-8aa3-4b03-8c51-490ce040294a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a4404b-a036-409f-844e-cf782a2a6761", "sighting_of_ref": "indicator--a34849e4-8aa3-4b03-8c51-490ce040294a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b440e3-9d3d-4106-8cd3-c9d7c4f98f48", "sighting_of_ref": "indicator--f892b4e9-137b-480c-96f6-bb2dae23e21a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2be439-165a-4f43-a49b-bfc64327855e", "sighting_of_ref": "indicator--d140241f-899d-4fbb-9ebb-d8e78488b7bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cde1b1-c87f-44d6-871c-9cc3a745fa12", "sighting_of_ref": "indicator--b2e76618-a402-41bc-bac6-ded8b77b86ae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20a7b22-5688-44e5-8249-429d03d385d3", "sighting_of_ref": "indicator--8920806f-f652-42d0-a63e-d7ce0cf2ff37", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05363e3-f2f1-45d1-887c-2e522f9b06d3", "sighting_of_ref": "indicator--8920806f-f652-42d0-a63e-d7ce0cf2ff37", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c02b16-e66c-4a40-9c62-78d876bbca04", "sighting_of_ref": "indicator--8920806f-f652-42d0-a63e-d7ce0cf2ff37", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd76cca-c0c3-40ed-a4b6-c9608e7f20d1", "sighting_of_ref": "indicator--7121f828-bde0-48ad-8d34-0adf380f2ed6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79dc04f9-883e-4290-b2bb-565b8898e398", "sighting_of_ref": "indicator--7121f828-bde0-48ad-8d34-0adf380f2ed6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a43a74-8096-4b1b-ba34-66d21e2f2f06", "sighting_of_ref": "indicator--7121f828-bde0-48ad-8d34-0adf380f2ed6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14311e0a-b0b1-485b-9940-4294a4ddcd64", "sighting_of_ref": "indicator--b05bcb18-ebcc-4f24-bfd6-2716871f9a85", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb489808-c239-46ca-8f69-598e099b6688", "sighting_of_ref": "indicator--b05bcb18-ebcc-4f24-bfd6-2716871f9a85", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a25b7c6-898a-45bc-881b-c74619294283", "sighting_of_ref": "indicator--b05bcb18-ebcc-4f24-bfd6-2716871f9a85", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f90a428-eea9-40c1-ae81-acba0ccccb61", "sighting_of_ref": "indicator--0177b18f-5fd2-4d64-95c0-3c98b660b439", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2548c551-e86a-4178-a920-8f643924b4d8", "sighting_of_ref": "indicator--0177b18f-5fd2-4d64-95c0-3c98b660b439", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89ab4f0-7307-4897-b400-da3e55916e29", "sighting_of_ref": "indicator--0177b18f-5fd2-4d64-95c0-3c98b660b439", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9110a859-36b2-4dd2-897d-548785301997", "sighting_of_ref": "indicator--faae3131-f7d8-40c5-92a8-1b9d164a8b76", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07f4bad-80e2-472b-961c-25fdedefb033", "sighting_of_ref": "indicator--faae3131-f7d8-40c5-92a8-1b9d164a8b76", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503efc7d-f0ca-4cc8-8487-b930c1be739e", "sighting_of_ref": "indicator--f7446bfd-cc68-40cf-aa10-7a52161dae8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9796ab2d-7425-4c9f-bf34-9decadcbf926", "sighting_of_ref": "indicator--7780825d-02dd-43fb-8492-b312ea86609e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96efc38a-92a9-4376-ac07-1f22ad919923", "sighting_of_ref": "indicator--562d800e-dfdb-419d-8093-75ad9a72d48e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ea770e-34b4-4c7b-8f63-de38cdc6893e", "sighting_of_ref": "indicator--562d800e-dfdb-419d-8093-75ad9a72d48e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13bf9cc-f39c-4cdb-9b59-8c02a5e74cbd", "sighting_of_ref": "indicator--ca68a600-d1b5-4f04-88af-5f24982f817c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c91b19-ddb0-49b3-a320-c344e7a3bb16", "sighting_of_ref": "indicator--dfea8a65-12a6-42d5-8b5c-31926db80308", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c357ed-8a29-427d-9840-45ee528f8398", "sighting_of_ref": "indicator--04c18dd9-6cb3-4612-8280-03ac1fd27b09", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e851c53-00f2-4f79-b719-4a6df743676d", "sighting_of_ref": "indicator--03d53245-d365-40ed-8fd9-04f27d6eb6c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df53fee-c7bd-4afe-bd34-83422ebf54ea", "sighting_of_ref": "indicator--39437a0f-4bfa-46a3-bd4e-9a1d2308d3dd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9492561e-0db9-4add-bd95-3668bc7097ea", "sighting_of_ref": "indicator--b4a9ec6e-e2a2-4cfb-9bc4-001cc8c7b556", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390f7f8c-484b-4f3a-a0a1-cb6746f72e3e", "sighting_of_ref": "indicator--b41a8a01-6db8-48c5-a4e9-fc3747e502c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1368f18-2d5f-46ad-ba4f-3eff3d4b0692", "sighting_of_ref": "indicator--673812cf-4290-452a-bce3-bb1340a919cf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d9c475-2f5c-41c4-8ebc-dec0b0310d63", "sighting_of_ref": "indicator--f18ae4e1-8fc5-4dc7-a426-f12643f0aa3b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994f2618-a847-4ac6-b749-6e9acf11f0b4", "sighting_of_ref": "indicator--2621a2ff-32f3-4fb8-9d41-8e96be7b1ef9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae69e2a2-03ce-4b7c-9d71-1a0aede899df", "sighting_of_ref": "indicator--2621a2ff-32f3-4fb8-9d41-8e96be7b1ef9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7e4773-3206-47bd-8fd7-e5ab9d33719b", "sighting_of_ref": "indicator--f88ca004-a4f8-46a9-8fb8-1f6b36c63609", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85dc833-94eb-4b7e-b2ae-ac23fd018eef", "sighting_of_ref": "indicator--f88ca004-a4f8-46a9-8fb8-1f6b36c63609", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2764dd44-8c25-4e22-a64e-6200cc2be896", "sighting_of_ref": "indicator--f88ca004-a4f8-46a9-8fb8-1f6b36c63609", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4d5150-46c1-488c-9c9c-caf1e4786e5f", "sighting_of_ref": "indicator--2a6738f2-a8bb-432b-802c-49a484ef761d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d7d5fb-df8b-4f52-be52-19b303f13f21", "sighting_of_ref": "indicator--2a6738f2-a8bb-432b-802c-49a484ef761d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e3aaf7-2f70-4389-b67e-69903bd22198", "sighting_of_ref": "indicator--3094ba60-4754-4fd9-9588-a416a5452a53", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6eecdf-f135-46a7-9450-1a9173869654", "sighting_of_ref": "indicator--3094ba60-4754-4fd9-9588-a416a5452a53", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a5dd61-d5f8-4916-9dbb-23df06abd212", "sighting_of_ref": "indicator--62ac3329-d7e4-44c5-a0e2-9652a96cf7eb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97878bfa-0fdd-4d29-9890-b6fb7b31c522", "sighting_of_ref": "indicator--5bd0091b-c550-4d9b-8593-de994d61bf4a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ee7880-ff3e-4a13-b1e4-7b1ae5a343e3", "sighting_of_ref": "indicator--5bd0091b-c550-4d9b-8593-de994d61bf4a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c957f64a-98e8-499f-b328-46a8b5b0613f", "sighting_of_ref": "indicator--3878c619-26e4-42cb-b33c-9d3f4410b69c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3de22c-d5b0-43b4-8303-a491d5b65228", "sighting_of_ref": "indicator--44ba1ed3-b4bf-4c55-8019-b97ab5d5bc09", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd79980-e5dc-4d24-a56b-343c58368fb7", "sighting_of_ref": "indicator--2398b25d-923c-470f-a88c-11598e7af01e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7d52d8-dd99-4f9e-b234-066e45bc78c1", "sighting_of_ref": "indicator--2eae5df8-3276-42bf-979b-fa7f8c300f00", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce65046-8d79-4df2-a209-413642e81456", "sighting_of_ref": "indicator--da67702a-c870-45f3-add5-9f9ffe5e3cd0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67c1b0c-6447-42cc-a208-5c835a2d9fc1", "sighting_of_ref": "indicator--851a0461-f9eb-4ede-9dbe-c8692dff2fb9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0742f909-a9fa-4872-ba6a-82f62d6c83ba", "sighting_of_ref": "indicator--851a0461-f9eb-4ede-9dbe-c8692dff2fb9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4117d9f3-b3f8-4bc1-817c-b0d42b0492e3", "sighting_of_ref": "indicator--851a0461-f9eb-4ede-9dbe-c8692dff2fb9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264ac491-1b18-47fb-9018-40981cbdb8a6", "sighting_of_ref": "indicator--bf6da15b-884e-434d-8120-859d0840f7a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee3dcd38-6c68-4353-9b5d-58ab27004a80", "sighting_of_ref": "indicator--2c64261d-ea9d-4e2d-8b9f-83ec595e7d3c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8841cc0b-9d83-41c5-8e20-121434006dab", "sighting_of_ref": "indicator--2c64261d-ea9d-4e2d-8b9f-83ec595e7d3c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6d7b85-8888-4e36-be05-e8b77f8edd09", "sighting_of_ref": "indicator--37c80830-e619-49d4-b097-bfed37f9036a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8400e568-95bb-4f34-8b44-8a994c060e51", "sighting_of_ref": "indicator--78198b9d-b103-4b0c-8031-4d423e81e3f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e8c44f-c26b-4f8f-92ca-f95413847fa1", "sighting_of_ref": "indicator--301f3e40-28b5-4e20-9d00-6ec1712f8396", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313abbd4-d175-42e3-b906-b3cb3173753d", "sighting_of_ref": "indicator--782491e6-eebd-4338-8004-ec342e42bae0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882879be-1e8a-4a3b-9c31-5acfa6122854", "sighting_of_ref": "indicator--1a4ff531-6461-4dfc-b4a0-d9da1b207099", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035a3839-ce61-40b7-bf72-d12091cf4ece", "sighting_of_ref": "indicator--0eb5f123-e0b1-4068-b1d5-ffc0e1a942e1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d360e08-b200-4001-b162-e0f3359df22d", "sighting_of_ref": "indicator--cbfbcdac-378d-4fe8-aa48-86758e82e4eb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cfa6a0-d195-4476-8f72-1faf06f990ad", "sighting_of_ref": "indicator--bebbd45a-26e3-42d9-8885-197ad5ec4b59", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f14eb7f-b2fb-4d95-b4d2-13eaa989ddac", "sighting_of_ref": "indicator--8e3a54d7-fc09-492e-9f77-44cfdd02f981", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29457dd-308c-4ca8-898b-71d262646d68", "sighting_of_ref": "indicator--8e3a54d7-fc09-492e-9f77-44cfdd02f981", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301d7829-4313-4fb6-b255-90960d3f3e11", "sighting_of_ref": "indicator--8e3a54d7-fc09-492e-9f77-44cfdd02f981", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be147db-7f19-4474-81ac-4ae4bf7132ca", "sighting_of_ref": "indicator--a967d569-8527-4c8a-a7f6-d4549f47988c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbde1586-7afa-4c86-b65e-b0c9a6bc82ed", "sighting_of_ref": "indicator--1410db00-ba13-4a6c-bdec-d0c99952368c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf601e4-5768-463a-bddf-0dcbf8f81225", "sighting_of_ref": "indicator--c387f29f-b0a1-49f2-a066-218336c3b1ac", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13d26f3-386d-49d4-bc74-edb90ca14914", "sighting_of_ref": "indicator--c387f29f-b0a1-49f2-a066-218336c3b1ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa9dd17-3b6c-46d6-b94e-04c799744e24", "sighting_of_ref": "indicator--c652b825-9d38-401c-8757-dc2acbe1dbda", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd0ac9e-f058-4c68-8973-91cc90198ade", "sighting_of_ref": "indicator--c652b825-9d38-401c-8757-dc2acbe1dbda", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4eda739-d246-475b-8115-5a911959a886", "sighting_of_ref": "indicator--d4f974e7-3895-4deb-addc-bc71c1eb826d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6eeda9-32bb-4ff6-83d6-2e8302a6f546", "sighting_of_ref": "indicator--d4f974e7-3895-4deb-addc-bc71c1eb826d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5235b1aa-fd8c-49a2-9d5f-74f477887b02", "sighting_of_ref": "indicator--d4f974e7-3895-4deb-addc-bc71c1eb826d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51126273-27c8-4d70-88bb-525213b8b8ba", "sighting_of_ref": "indicator--61773bd5-751f-4112-83fa-87e40840be76", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2975be0-7741-4322-8db5-4907be1071e6", "sighting_of_ref": "indicator--7484b35f-3364-4ff3-b684-2f5f2c0bde83", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4cd0c2-f1ec-4d21-b723-d4522cadb387", "sighting_of_ref": "indicator--7484b35f-3364-4ff3-b684-2f5f2c0bde83", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835efbdd-b313-4ddd-a2dc-647a778f7d85", "sighting_of_ref": "indicator--c96ea897-9314-492a-887b-595fb9643329", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d78e018-2e9c-4b2d-9da8-4bad1bef4de3", "sighting_of_ref": "indicator--c96ea897-9314-492a-887b-595fb9643329", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ae0f60-5bdd-4ce8-8d4e-f5f2f070b575", "sighting_of_ref": "indicator--8f174b02-5b77-432c-b1e7-b0da8dfce249", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2b591e-c28b-4faa-b01a-7139c8d6247d", "sighting_of_ref": "indicator--8f174b02-5b77-432c-b1e7-b0da8dfce249", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55993ef-5a02-49fd-9f28-4e3820ac3c5e", "sighting_of_ref": "indicator--b01c13f3-8dce-44e5-8ab5-cbc14c634407", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f69ff1-966a-485b-8372-a2c48b0ad219", "sighting_of_ref": "indicator--d9bcbc70-e7e9-4908-9a27-3e70743b5177", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f437ac6-440d-4d37-ad74-1f5bb6ae4ab7", "sighting_of_ref": "indicator--4d1b66c6-3756-4e9a-be21-228b345f0f64", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f150de5-e796-4635-91eb-7b22aad12d4e", "sighting_of_ref": "indicator--2aa3f108-e775-4f5c-aba2-d0502b4aa8b7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fccf4a0-0e63-4eae-bb85-73861fe08465", "sighting_of_ref": "indicator--2aa3f108-e775-4f5c-aba2-d0502b4aa8b7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0b77a8-0466-4162-9af0-2fd8a4188a01", "sighting_of_ref": "indicator--de78bc24-f3f6-42f4-8950-214a11ff7e9b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3dd6b2-7f08-4e4d-90c5-b779e22d36b1", "sighting_of_ref": "indicator--1d4d935e-0163-45a7-b5a3-26773689ebe2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fce654-8f87-44bf-b560-5e968a2747c2", "sighting_of_ref": "indicator--1d4d935e-0163-45a7-b5a3-26773689ebe2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a57f781-8a05-41e2-854b-b4574452f6b5", "sighting_of_ref": "indicator--1d4d935e-0163-45a7-b5a3-26773689ebe2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb83e2a-aa7f-4049-b135-bb823f7fe25b", "sighting_of_ref": "indicator--bf4684fa-b057-4b81-aac1-af8f656b8659", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6cb14d-67b5-4205-8e55-fd1c2ec5b798", "sighting_of_ref": "indicator--bf4684fa-b057-4b81-aac1-af8f656b8659", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785d5b96-e31c-43f9-a1bd-7befdb157281", "sighting_of_ref": "indicator--be6cf402-e84d-4f74-ad89-51fb0b75cc49", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9133935-9118-4471-a875-c1f75da44a4b", "sighting_of_ref": "indicator--d3726871-3618-4e4e-b89a-d67fd8e916eb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f860edd-50a4-4d1d-ada6-d693ef2c9bbf", "sighting_of_ref": "indicator--81c2851b-1d44-4107-8593-cc50248ee477", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b51837b-20ef-41e0-b63c-20134f15c5a9", "sighting_of_ref": "indicator--20ee1e09-43f5-42b0-8781-9e7db0b25d4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1564cae3-91c9-4b4b-ae87-1cd75e1b6c98", "sighting_of_ref": "indicator--20ee1e09-43f5-42b0-8781-9e7db0b25d4b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527e7628-3ebf-4288-a44f-a97349523026", "sighting_of_ref": "indicator--745c6805-9ddc-4623-bff4-bffaf53bb42a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb75b724-f4c1-44ac-9fcc-6a79094d937e", "sighting_of_ref": "indicator--ff74dc0d-b647-4198-b235-c191fd9122e2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d76069-522b-4246-9c49-6c11f8d3c5d9", "sighting_of_ref": "indicator--61f3af12-1d40-4b69-ac58-251932174b85", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae26331-8d6c-4c40-8512-b6983a5e97d3", "sighting_of_ref": "indicator--f79d70d5-ce60-4102-833a-5f0e8d22652d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc7454e-5692-47b6-a27b-b45ab7a39910", "sighting_of_ref": "indicator--e7fb3590-d7c6-4374-bf8e-802d624cf286", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68342291-d580-4628-ae93-828930180432", "sighting_of_ref": "indicator--e7fb3590-d7c6-4374-bf8e-802d624cf286", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ebf0c0-8fd9-436d-9e6a-1a3bbc49175b", "sighting_of_ref": "indicator--367238f8-9eaf-41aa-88f6-165c3cd30514", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a25ac6-c290-401c-aa0d-a911ccc2f2d3", "sighting_of_ref": "indicator--367238f8-9eaf-41aa-88f6-165c3cd30514", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8130273-f8b1-4536-99f2-4c578a128eea", "sighting_of_ref": "indicator--367238f8-9eaf-41aa-88f6-165c3cd30514", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7d59af-6eea-4fd8-b1bc-967c164b3158", "sighting_of_ref": "indicator--920153a7-5a39-49a7-9d08-ca3397a4977b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b47a8c9-d689-4f61-be1e-2999396ee79d", "sighting_of_ref": "indicator--920153a7-5a39-49a7-9d08-ca3397a4977b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ee737d-432b-4540-9896-ac46af5bbf2d", "sighting_of_ref": "indicator--920153a7-5a39-49a7-9d08-ca3397a4977b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be51ce2d-0812-43a1-a4f0-c603a3723581", "sighting_of_ref": "indicator--7112fee6-ec60-4042-b61f-c8f744783898", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871440a0-224f-4e4f-9c8e-9f97f1606cf2", "sighting_of_ref": "indicator--2e7f1e9a-e475-4a48-a9ec-b3f72601d87a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22cff74-0178-45ba-ade7-fa7ed666bf0d", "sighting_of_ref": "indicator--2e7f1e9a-e475-4a48-a9ec-b3f72601d87a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7c6528-beba-44ea-ac83-129a30dc2d15", "sighting_of_ref": "indicator--2e7f1e9a-e475-4a48-a9ec-b3f72601d87a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5756f6f5-b32b-48d6-9c6b-e8b07a074daa", "sighting_of_ref": "indicator--82c24ea0-2b63-4f39-80c7-6f24b8c3274c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865c16d6-f235-4a4c-a435-8bcb795a968f", "sighting_of_ref": "indicator--82c24ea0-2b63-4f39-80c7-6f24b8c3274c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2118a4b3-1978-4662-ad3f-0bcf4874ce07", "sighting_of_ref": "indicator--82c24ea0-2b63-4f39-80c7-6f24b8c3274c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe7b575-126e-4fc8-afce-1b54ed41b3e6", "sighting_of_ref": "indicator--ff9cde5f-6b98-4b5f-8374-41711f12f3d6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b348191e-fcbf-4df9-8cb1-9025113d5799", "sighting_of_ref": "indicator--ff9cde5f-6b98-4b5f-8374-41711f12f3d6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6650cd-3593-4ae6-abc1-c109125b524b", "sighting_of_ref": "indicator--ff9cde5f-6b98-4b5f-8374-41711f12f3d6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189ff9c6-f6c9-49ca-9f39-7f841c021304", "sighting_of_ref": "indicator--40577b39-0a41-4eba-93b7-5431f086e4f8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a5d717-fd40-4912-8d8b-76560f075a86", "sighting_of_ref": "indicator--40577b39-0a41-4eba-93b7-5431f086e4f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ad5065-34bb-4241-b506-800c491fb9db", "sighting_of_ref": "indicator--40577b39-0a41-4eba-93b7-5431f086e4f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3996e1c3-9749-4357-8a00-112a8a2e5cd8", "sighting_of_ref": "indicator--d761dd58-2eab-4094-98e3-f009b14b3b18", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9fc5cc-8c24-40de-ad4d-6fa936a30fbb", "sighting_of_ref": "indicator--d761dd58-2eab-4094-98e3-f009b14b3b18", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f0d77a-6afb-4194-bd64-d7a7315008b8", "sighting_of_ref": "indicator--a16744ad-b83a-4c9b-ba82-6ba49afdc347", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25d718f-9d44-4ed5-91fb-dce22f0bdb3d", "sighting_of_ref": "indicator--a16744ad-b83a-4c9b-ba82-6ba49afdc347", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd62abf-bc2a-44f7-a167-e869b47d1cb4", "sighting_of_ref": "indicator--a16744ad-b83a-4c9b-ba82-6ba49afdc347", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3b538a-f01d-4d15-86df-b32dbbe63a0b", "sighting_of_ref": "indicator--64adb819-6003-44ca-b590-f19e50d0e693", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165d7447-1481-494e-a713-e7995cb9f49c", "sighting_of_ref": "indicator--9ed94721-824c-4b3e-a081-89558de5992b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b7218f-7ee2-4c7a-ba26-916889d2fb6a", "sighting_of_ref": "indicator--9ed94721-824c-4b3e-a081-89558de5992b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c5562c-f7e2-46c9-9492-be5338b5a1ad", "sighting_of_ref": "indicator--9ed94721-824c-4b3e-a081-89558de5992b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a6402f-4e90-47cf-a409-a2e23e5f9290", "sighting_of_ref": "indicator--1fe7e1f8-3f02-46c0-bbce-ba5779e6fd34", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbd4984-8fa1-487b-a9bb-52ac062aecea", "sighting_of_ref": "indicator--1fe7e1f8-3f02-46c0-bbce-ba5779e6fd34", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb1e1ac-5268-4de8-846d-22535c5f7fba", "sighting_of_ref": "indicator--f1b8d07d-9324-4e7d-bdc6-2b98b8e39da3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ebb56b-5b36-4c1a-b6d5-824d337d5b67", "sighting_of_ref": "indicator--f1b8d07d-9324-4e7d-bdc6-2b98b8e39da3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6eb1923-5623-405f-b3e2-970736c5e95d", "sighting_of_ref": "indicator--9330111e-4a54-41b7-b3c0-b6a50a10c9b2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8bef0c-3e2e-4534-8599-344b563389d3", "sighting_of_ref": "indicator--9330111e-4a54-41b7-b3c0-b6a50a10c9b2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eacf09a-399c-4123-a52e-43abbee7a631", "sighting_of_ref": "indicator--9330111e-4a54-41b7-b3c0-b6a50a10c9b2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058b4488-8717-4a4b-919e-6f68576a82d9", "sighting_of_ref": "indicator--2eca315a-5f2d-4b85-a810-4551be8b0fc5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f8bef2-f715-4be9-ba3e-1f20676c896b", "sighting_of_ref": "indicator--2eca315a-5f2d-4b85-a810-4551be8b0fc5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca3a000-be9f-4a9b-bbd2-b2938c950731", "sighting_of_ref": "indicator--2eca315a-5f2d-4b85-a810-4551be8b0fc5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1a7c2a-2a8a-4cc2-9c20-d55c9f22b8c2", "sighting_of_ref": "indicator--a7611791-3fcc-4681-8552-3e942dd914ac", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de68fc72-4d77-4b07-b94a-26ccebe1bf0a", "sighting_of_ref": "indicator--a7611791-3fcc-4681-8552-3e942dd914ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5751f3f6-97b7-4bfb-97d5-d7f0129e94a1", "sighting_of_ref": "indicator--a7611791-3fcc-4681-8552-3e942dd914ac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbeab50-5125-42fa-b9d8-66748ada658e", "sighting_of_ref": "indicator--a734a1bf-0e02-493f-99be-c9aaf3eea841", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b593c576-bfc2-4799-9623-7e1a8579d2fd", "sighting_of_ref": "indicator--a734a1bf-0e02-493f-99be-c9aaf3eea841", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b117c11-3145-48b7-91f4-de51a727ef44", "sighting_of_ref": "indicator--a734a1bf-0e02-493f-99be-c9aaf3eea841", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c1595c-905b-41ac-b378-c4306980655c", "sighting_of_ref": "indicator--da7ea756-94ed-4f7d-a97f-21b9e913a070", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6779e973-781d-45b5-bff3-f9c2399ea97e", "sighting_of_ref": "indicator--51d0ac55-3476-4ee1-997a-59fd005d5456", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c0a366-1420-4bc2-aa44-a61279874f57", "sighting_of_ref": "indicator--51d0ac55-3476-4ee1-997a-59fd005d5456", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739c8eb9-7490-4bab-8150-c953b3ebfe3b", "sighting_of_ref": "indicator--51d0ac55-3476-4ee1-997a-59fd005d5456", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fa947d-3d74-46ab-85e5-7c6daa3f56ca", "sighting_of_ref": "indicator--1a99bc8d-f862-4bc5-bf71-80dd20880093", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797592b4-c926-42f8-93fd-e37cd69706f9", "sighting_of_ref": "indicator--b1fafa46-15c6-449b-a344-e5e29b60a738", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80a14bd-0665-44e9-ab53-bd47e68800df", "sighting_of_ref": "indicator--b1fafa46-15c6-449b-a344-e5e29b60a738", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ed42a6-04df-413c-945f-8020477e9461", "sighting_of_ref": "indicator--b1fafa46-15c6-449b-a344-e5e29b60a738", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d58089-64a3-4d64-ad43-ae8dfd559a05", "sighting_of_ref": "indicator--9411b1e9-8f39-4298-ae0d-c2613d23b730", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f2c1c8-3593-4403-9809-eb5d2fd812ff", "sighting_of_ref": "indicator--9411b1e9-8f39-4298-ae0d-c2613d23b730", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c7efe1-546d-477f-8a87-6b2cca38315c", "sighting_of_ref": "indicator--f62cba57-dc3d-43a0-a4fc-bdec9cc00052", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--110d98bc-e5f1-49ee-a37e-ca91e9dab56b", "sighting_of_ref": "indicator--f62cba57-dc3d-43a0-a4fc-bdec9cc00052", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36072b44-d7e0-4f54-9679-584f12a299ac", "sighting_of_ref": "indicator--f62cba57-dc3d-43a0-a4fc-bdec9cc00052", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0bc5b1-5d2c-435f-ac0e-2b6b5be825cb", "sighting_of_ref": "indicator--b998745b-bd8b-4f07-b78c-93e98874fbf6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96749b6c-b61f-49dd-99b5-e73e8ddb70d1", "sighting_of_ref": "indicator--b998745b-bd8b-4f07-b78c-93e98874fbf6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ef1733-9324-40a8-b82c-47fea1c92474", "sighting_of_ref": "indicator--f033d1c4-e2bd-49e8-8296-16472eabe304", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c107c776-6312-4d2a-b7f6-4f9ef0d9e0da", "sighting_of_ref": "indicator--f033d1c4-e2bd-49e8-8296-16472eabe304", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699ff12b-d47c-4dcb-80ed-ab0bc6cb95ad", "sighting_of_ref": "indicator--f033d1c4-e2bd-49e8-8296-16472eabe304", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a74451-d7d5-4f23-9630-2da8f2cfce93", "sighting_of_ref": "indicator--51782c58-b2ba-4e04-b926-e443145ed65c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b734b2-e96a-4d50-8689-1682eb8e2fad", "sighting_of_ref": "indicator--51782c58-b2ba-4e04-b926-e443145ed65c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d41b43b-cbe0-42ad-93d2-86972fc48f85", "sighting_of_ref": "indicator--19856cec-c791-445b-a9c6-9a041d05844d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fb784f-261d-413c-9830-07dea9f7ab8e", "sighting_of_ref": "indicator--19856cec-c791-445b-a9c6-9a041d05844d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12eb0a8-7ab3-4c74-92d1-d8932e4ffd4d", "sighting_of_ref": "indicator--9a4c6e83-35da-4054-ade7-dc08b0c6c670", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecd09fe-91a4-47f2-b571-3bde03f5b16e", "sighting_of_ref": "indicator--9a4c6e83-35da-4054-ade7-dc08b0c6c670", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b5ae93-d392-4a83-99c7-8a9a4765d32e", "sighting_of_ref": "indicator--9a4c6e83-35da-4054-ade7-dc08b0c6c670", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930ebcd1-296c-4014-b9c3-22f7e5141e40", "sighting_of_ref": "indicator--7bf51b69-3e81-4f8e-b304-63e79c7e087e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef58639-669e-4bc2-b4b2-073dabf90bae", "sighting_of_ref": "indicator--7bf51b69-3e81-4f8e-b304-63e79c7e087e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3054ed8c-3e4c-42a8-976a-bb6451b990f1", "sighting_of_ref": "indicator--32ec0cd2-3a32-41b2-af6a-fa347898ec66", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52a65b7-816a-4662-b581-352af0a7917a", "sighting_of_ref": "indicator--62ce0853-5f19-407b-9335-5cc655bde337", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92db1c06-6412-4d8d-bc4f-b4713f4e1187", "sighting_of_ref": "indicator--62ce0853-5f19-407b-9335-5cc655bde337", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737a81df-07f3-4fb9-aa40-68d27cb1d22b", "sighting_of_ref": "indicator--49e90fe9-a38d-49bf-9708-56ccbcaa86a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5041795-b468-4e73-8f70-66b12032210b", "sighting_of_ref": "indicator--49e90fe9-a38d-49bf-9708-56ccbcaa86a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4600fba3-ae66-4050-9523-1a4db10f417d", "sighting_of_ref": "indicator--49e90fe9-a38d-49bf-9708-56ccbcaa86a5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba8d73a-ac75-4c5c-b82e-91f701ba0232", "sighting_of_ref": "indicator--7b44a644-aa91-4d21-ae52-21c54845f4b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df372c8-26ad-4fb9-b512-161090a9122b", "sighting_of_ref": "indicator--7b44a644-aa91-4d21-ae52-21c54845f4b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0686434-1f63-42d7-aa91-d647242a8966", "sighting_of_ref": "indicator--834302af-e4e1-413f-83ba-ad3581af825d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8567bb70-c09e-48a4-b492-95da0c767cb4", "sighting_of_ref": "indicator--834302af-e4e1-413f-83ba-ad3581af825d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847edb89-143a-4b84-ae58-2bfc93aac9eb", "sighting_of_ref": "indicator--834302af-e4e1-413f-83ba-ad3581af825d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d290ab72-4d77-4e43-9dbc-54770915df53", "sighting_of_ref": "indicator--8fa60959-4f05-4c54-a8ec-27fae2b1724a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c561e8f-4a6e-4488-b97f-7fb38f895254", "sighting_of_ref": "indicator--8fa60959-4f05-4c54-a8ec-27fae2b1724a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4f106a-2eea-4329-a757-f0098305723c", "sighting_of_ref": "indicator--a9c40bff-53f1-4536-938c-4a14fe8044b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003f616b-7ca3-40ad-973b-6fbb10b5a21f", "sighting_of_ref": "indicator--a9c40bff-53f1-4536-938c-4a14fe8044b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7816f35-bc5f-4ccf-947b-98f093a2dca0", "sighting_of_ref": "indicator--4b2e3993-a643-4c13-bb63-7a2311d29fe9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05f1a1c-f1a6-4c42-b789-0382cc82d001", "sighting_of_ref": "indicator--4b2e3993-a643-4c13-bb63-7a2311d29fe9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec141b2-c92d-4eab-8a9a-bd02bff6e1ce", "sighting_of_ref": "indicator--4b2e3993-a643-4c13-bb63-7a2311d29fe9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30889717-38b3-4bb9-9a39-3e46487280ef", "sighting_of_ref": "indicator--d9b80957-7a61-4a5e-a538-1257a061af1b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c15d888-cec4-4728-987e-1c9c63c1320b", "sighting_of_ref": "indicator--d9b80957-7a61-4a5e-a538-1257a061af1b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c090e5e3-6583-40cb-83e0-1464052cece4", "sighting_of_ref": "indicator--d9b80957-7a61-4a5e-a538-1257a061af1b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a0786b-0ff2-4aba-a2cc-6fa63fc8176e", "sighting_of_ref": "indicator--5fbb8282-2c03-4b59-b2ce-35589728c25d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b978c8d-7420-4cbb-8209-72bf340a9c2e", "sighting_of_ref": "indicator--5fbb8282-2c03-4b59-b2ce-35589728c25d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e86c7ce-f2db-4773-8f96-d5741419c1bf", "sighting_of_ref": "indicator--5fbb8282-2c03-4b59-b2ce-35589728c25d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d338ab13-e723-4a9f-ba22-77902a1e88cc", "sighting_of_ref": "indicator--ad521c9a-20b3-4cbf-811a-9b4d2a9f5942", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c073559-76e8-4c72-b14b-6c1dde4ffa0e", "sighting_of_ref": "indicator--ad521c9a-20b3-4cbf-811a-9b4d2a9f5942", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a754d2-ed18-42bd-9ac5-284ec753bf62", "sighting_of_ref": "indicator--ba4531ad-0653-4202-b9a8-3d72c075261a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3339ae4-f570-457a-9142-116e97313a1c", "sighting_of_ref": "indicator--ba4531ad-0653-4202-b9a8-3d72c075261a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5041297b-5814-475f-8e1c-0976490fb12d", "sighting_of_ref": "indicator--ba4531ad-0653-4202-b9a8-3d72c075261a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f316ec-9933-4971-a73e-99fbe9de4e46", "sighting_of_ref": "indicator--2b76a280-ea30-4595-bd47-aaa5426c1f37", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab9a7f0-2a6a-4868-99a1-3f6e72312b0b", "sighting_of_ref": "indicator--2b76a280-ea30-4595-bd47-aaa5426c1f37", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0679bd61-953c-47bf-8440-ff0706b40011", "sighting_of_ref": "indicator--2b76a280-ea30-4595-bd47-aaa5426c1f37", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550c02ca-e90d-473e-82e6-c1d675122edb", "sighting_of_ref": "indicator--b612eda6-0f57-4861-85a1-bb28103a6366", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4096033e-4816-40d3-9e01-b18eb264b932", "sighting_of_ref": "indicator--b612eda6-0f57-4861-85a1-bb28103a6366", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9cc6d9-1f56-429c-9cc9-8bafb5fb8ecc", "sighting_of_ref": "indicator--b612eda6-0f57-4861-85a1-bb28103a6366", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c3b9eb-e52f-47eb-a598-4a45ca120039", "sighting_of_ref": "indicator--81c0fe63-04c1-4a1d-9fcd-7da00b9bb5d3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919c415b-cc36-4db7-a896-d16d03969b67", "sighting_of_ref": "indicator--81c0fe63-04c1-4a1d-9fcd-7da00b9bb5d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6825c9b9-5c76-4da8-ab6e-180c0dcb1885", "sighting_of_ref": "indicator--81c0fe63-04c1-4a1d-9fcd-7da00b9bb5d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c02799-56d0-44af-86e9-db4d9c0dda41", "sighting_of_ref": "indicator--606256a6-8744-4428-9e95-16a6a892b065", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2f3e76-e0e1-46f7-a28e-3eb9fbef2290", "sighting_of_ref": "indicator--606256a6-8744-4428-9e95-16a6a892b065", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73354cca-069b-440e-814a-1f9f673c1491", "sighting_of_ref": "indicator--606256a6-8744-4428-9e95-16a6a892b065", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99eb16a3-b023-430b-96d7-54f1da22e6bc", "sighting_of_ref": "indicator--bb94bfe9-a10b-430d-ad07-fded5b7188c0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936bdc3a-2fa9-4e39-a4bb-530c0f9f7fc1", "sighting_of_ref": "indicator--bb94bfe9-a10b-430d-ad07-fded5b7188c0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9141b0d8-fe40-41ff-995b-d966650c6330", "sighting_of_ref": "indicator--bb94bfe9-a10b-430d-ad07-fded5b7188c0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6043d48b-f644-429d-b599-37b727c8e635", "sighting_of_ref": "indicator--a2fe6623-89c1-487d-9b9c-650331e8a649", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7865b396-96e9-40c2-86b4-eed6c915335b", "sighting_of_ref": "indicator--e69bdbb4-6871-44b3-a7f4-a8eb24771f33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d28720-64d0-4f5d-9c4b-79af1aea3560", "sighting_of_ref": "indicator--e69bdbb4-6871-44b3-a7f4-a8eb24771f33", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d58285-8b78-427d-afad-df67910528a4", "sighting_of_ref": "indicator--e69bdbb4-6871-44b3-a7f4-a8eb24771f33", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94302751-667c-491e-a40d-e38ebf0f6ab9", "sighting_of_ref": "indicator--c0a98f45-a31d-45ad-b9bb-dfbd013c42d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9fcc85-f567-4730-937b-98cd1c5a7c26", "sighting_of_ref": "indicator--c0a98f45-a31d-45ad-b9bb-dfbd013c42d4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ba79a1-327c-4c7f-bd97-bbad32b87aa1", "sighting_of_ref": "indicator--c0a98f45-a31d-45ad-b9bb-dfbd013c42d4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e4cb77-bb01-4b46-9351-501d6de98fca", "sighting_of_ref": "indicator--a397d96d-6ed6-475a-9624-28d6f539bc6a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c26895a-373b-4dc2-be97-8c6cb90cff39", "sighting_of_ref": "indicator--a397d96d-6ed6-475a-9624-28d6f539bc6a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7a798b-8d39-43c8-8741-632ff1f04768", "sighting_of_ref": "indicator--fd4699c4-3cdb-4ace-942d-174da2ac2e68", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ca11a4-053a-4113-a282-916ddbb6f6ef", "sighting_of_ref": "indicator--fd4699c4-3cdb-4ace-942d-174da2ac2e68", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d54c205-d7be-4c45-a2b7-08872a275566", "sighting_of_ref": "indicator--27b4a398-b900-4b1f-b507-e729788a211c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804927a6-60af-405d-9375-9c5e15650a91", "sighting_of_ref": "indicator--27b4a398-b900-4b1f-b507-e729788a211c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0eaff2-1925-44d5-9633-0763d9197789", "sighting_of_ref": "indicator--27b4a398-b900-4b1f-b507-e729788a211c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a53ec42-d8db-4fae-ac9a-2a891f27cf5f", "sighting_of_ref": "indicator--1795e676-eb7d-4bff-9436-6b2805a2af4b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3adff12-3ab1-4309-9d09-29e7ae3cd343", "sighting_of_ref": "indicator--1795e676-eb7d-4bff-9436-6b2805a2af4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10c3266-5d2b-48a6-92e0-2cf0a583b85a", "sighting_of_ref": "indicator--1795e676-eb7d-4bff-9436-6b2805a2af4b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb41f0a-3338-4890-97d8-2e46d722aa7d", "sighting_of_ref": "indicator--01ac81dc-4bb6-4363-b825-da28685d8fff", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40985668-4517-420f-8363-6440b15823f7", "sighting_of_ref": "indicator--01ac81dc-4bb6-4363-b825-da28685d8fff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd61baf-c810-4ad0-9f03-056783fc68ea", "sighting_of_ref": "indicator--01ac81dc-4bb6-4363-b825-da28685d8fff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6b5405-cc97-4ea6-a5bb-78223232647f", "sighting_of_ref": "indicator--4c99b803-c6cd-44b8-bb4d-86af96f43d40", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696d5323-0e7d-4ffb-b422-0f752aea27da", "sighting_of_ref": "indicator--4c99b803-c6cd-44b8-bb4d-86af96f43d40", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a30282e-498a-4e51-82e7-7a872c900902", "sighting_of_ref": "indicator--4c99b803-c6cd-44b8-bb4d-86af96f43d40", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cef57b8-7572-479a-a655-c9516862259e", "sighting_of_ref": "indicator--5e97fc06-c93d-4637-8cc6-4cb408b19f44", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97c9724-81ee-44aa-8ef2-a0c771af2051", "sighting_of_ref": "indicator--5e97fc06-c93d-4637-8cc6-4cb408b19f44", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97976bd-0c7f-491b-b782-36b1d8afad54", "sighting_of_ref": "indicator--f3f1179c-f849-4911-959d-b544b0848071", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1785769b-8da4-4b9e-85df-1e25870fb3d2", "sighting_of_ref": "indicator--f3f1179c-f849-4911-959d-b544b0848071", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201394e0-c6f5-4fb5-8e0d-05f211d4642f", "sighting_of_ref": "indicator--f3f1179c-f849-4911-959d-b544b0848071", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e8128d-35d4-402c-8a6a-91dd2c886104", "sighting_of_ref": "indicator--ef219c1d-391c-41fb-b877-577f1906a2bc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db419d72-e0fb-46c4-9aee-167c37a71feb", "sighting_of_ref": "indicator--ef219c1d-391c-41fb-b877-577f1906a2bc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6476dec4-b779-4ff0-94b7-b220c2d05ec8", "sighting_of_ref": "indicator--ceb72e9c-5878-4ae1-aaf5-2b82fa6fb8f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d78933-c146-48b9-9c65-0d5d5c9cc079", "sighting_of_ref": "indicator--ceb72e9c-5878-4ae1-aaf5-2b82fa6fb8f6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db9569e-4f89-4793-9426-d3e2d8ee4978", "sighting_of_ref": "indicator--bdf30bbd-df1c-4f5e-9325-c7aa55050536", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c2ab26-a829-4215-af49-8cccc5187ee7", "sighting_of_ref": "indicator--bdf30bbd-df1c-4f5e-9325-c7aa55050536", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5020011e-6588-4360-a302-f29ceb496a7e", "sighting_of_ref": "indicator--bdf30bbd-df1c-4f5e-9325-c7aa55050536", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc4c87b-3d07-4678-b3fe-0f00fc37b833", "sighting_of_ref": "indicator--b17f6d8f-d193-4b86-82a1-6b5742daced9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18ace3c-38c3-4dd8-9b77-ee6e59c34f2c", "sighting_of_ref": "indicator--b17f6d8f-d193-4b86-82a1-6b5742daced9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b446f657-efeb-4c13-92a2-acb8be9e8e0d", "sighting_of_ref": "indicator--a3076408-6685-4238-bab6-fdcce669967e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e35a7dd-1b8f-4594-be04-ff1c03a8bf4c", "sighting_of_ref": "indicator--a3076408-6685-4238-bab6-fdcce669967e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68df2b48-2196-45a6-b176-ce34fdc66175", "sighting_of_ref": "indicator--a3076408-6685-4238-bab6-fdcce669967e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d427aa7d-29d3-4619-a84b-f2daee3558ca", "sighting_of_ref": "indicator--159a2230-03e5-49b4-815a-ba05c2bfb5c7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6c46cc-5565-443b-9dc0-b23aefe5d18d", "sighting_of_ref": "indicator--159a2230-03e5-49b4-815a-ba05c2bfb5c7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c658704-1e7a-4446-9806-131cb33454d0", "sighting_of_ref": "indicator--159a2230-03e5-49b4-815a-ba05c2bfb5c7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249d9414-7f99-4584-b30a-969b4b913832", "sighting_of_ref": "indicator--a73361fd-6276-4ea0-ac2c-439bd42ac816", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ab4114-b613-40a1-b0bb-dd5100c0df72", "sighting_of_ref": "indicator--0529d594-b678-4d55-a050-1c2fc127c289", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ef6247-b3c7-41a7-8d89-d02c8b6b31df", "sighting_of_ref": "indicator--0529d594-b678-4d55-a050-1c2fc127c289", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad0cc45-bffa-4def-adc2-a61cf3835f94", "sighting_of_ref": "indicator--0529d594-b678-4d55-a050-1c2fc127c289", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbd8d46-362b-4d6b-b177-42a99d66213f", "sighting_of_ref": "indicator--eaac01d1-695d-4b8f-a62d-80a8a1938339", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585294b0-e47f-4639-acb5-a208f10b2783", "sighting_of_ref": "indicator--eaac01d1-695d-4b8f-a62d-80a8a1938339", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f1dd5d-f54b-4827-ad69-3912f447801c", "sighting_of_ref": "indicator--eaac01d1-695d-4b8f-a62d-80a8a1938339", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fc2310-ce25-455b-aead-a3a3b2776934", "sighting_of_ref": "indicator--4744647e-d4bb-48f5-be28-33d2c8b89442", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b5665a-a789-4791-8f2b-3b654a677941", "sighting_of_ref": "indicator--4744647e-d4bb-48f5-be28-33d2c8b89442", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5c648d-a01f-46cc-b122-770023de258d", "sighting_of_ref": "indicator--176ebfa2-9528-484c-b2df-32af117e5b0f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a10dd0a-1054-4304-bca4-90f6e867d7f6", "sighting_of_ref": "indicator--176ebfa2-9528-484c-b2df-32af117e5b0f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e08000-7ed1-47b6-a8ed-858c06885b42", "sighting_of_ref": "indicator--176ebfa2-9528-484c-b2df-32af117e5b0f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e3d4c1-ea47-4571-a9eb-f23f2e13ebd8", "sighting_of_ref": "indicator--9e762fbd-c3bc-49f0-b638-50d30641481f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e73173-2fd1-4f3f-ab91-6c88e7116c2c", "sighting_of_ref": "indicator--9e762fbd-c3bc-49f0-b638-50d30641481f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1c44ba1-a319-4ce5-818a-4bb5db1144a0", "sighting_of_ref": "indicator--9e762fbd-c3bc-49f0-b638-50d30641481f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c76de69-c4bb-4a43-9a3e-febed07abad3", "sighting_of_ref": "indicator--b7bc25b5-7ed5-48e3-8b3c-ae9b7eb064de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f993bc-7eaa-4adc-a288-87512b9bb74b", "sighting_of_ref": "indicator--b7bc25b5-7ed5-48e3-8b3c-ae9b7eb064de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7cd987-41b8-4d0d-ba81-84247abd9774", "sighting_of_ref": "indicator--b7bc25b5-7ed5-48e3-8b3c-ae9b7eb064de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93affcdc-98c6-45be-96bd-ab502fe1c09d", "sighting_of_ref": "indicator--dafc8fa5-4d4e-4367-b05e-cde070e1eb84", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01ebe79-0a9a-433c-a745-a48d8b67e466", "sighting_of_ref": "indicator--dafc8fa5-4d4e-4367-b05e-cde070e1eb84", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39a67d5-5c28-44b5-b0cc-c2ffc67fa690", "sighting_of_ref": "indicator--dafc8fa5-4d4e-4367-b05e-cde070e1eb84", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7b774e-1645-408e-b3db-842557d1542a", "sighting_of_ref": "indicator--f806d9ad-dc90-48d7-a2f1-61fd5b8197d8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cdd937-5e3e-4ea2-8ea3-90ebb6a79182", "sighting_of_ref": "indicator--d088b8d6-1358-4175-83c6-c2bedf26babc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac17500f-3b45-43bd-a4fa-4236cf695835", "sighting_of_ref": "indicator--d088b8d6-1358-4175-83c6-c2bedf26babc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1bf044-670f-4e9f-ab70-af441375881a", "sighting_of_ref": "indicator--7331c9d4-5c1e-45a9-89c5-824c4463eff5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750a4aba-bfb3-45f3-a061-044c4805b90f", "sighting_of_ref": "indicator--7331c9d4-5c1e-45a9-89c5-824c4463eff5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3060a33c-1a3f-451b-99ab-d1732b933c47", "sighting_of_ref": "indicator--7331c9d4-5c1e-45a9-89c5-824c4463eff5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a94992-4ba2-46f3-a3d1-43a9f6c2eb03", "sighting_of_ref": "indicator--0a9f99cf-c29b-403e-af52-260dd561d4ae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e98cf4-2fbc-4de2-801b-6567c6d4afa4", "sighting_of_ref": "indicator--0a9f99cf-c29b-403e-af52-260dd561d4ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9269a4-6211-456e-97f0-abc49e2ca4bb", "sighting_of_ref": "indicator--0a9f99cf-c29b-403e-af52-260dd561d4ae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c723afeb-5771-44e2-86ee-dcc0871f0ed8", "sighting_of_ref": "indicator--f789cad7-eb49-4782-8272-8842d537807f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489d2ea8-79ec-4df7-8b48-b3036d30a17b", "sighting_of_ref": "indicator--f789cad7-eb49-4782-8272-8842d537807f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b8bc06-0e63-49e0-bef5-7b3678efe772", "sighting_of_ref": "indicator--f789cad7-eb49-4782-8272-8842d537807f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2aebf3-53f4-40ff-984c-622de1002f15", "sighting_of_ref": "indicator--61097642-6a30-474e-9e0e-2f9550d21755", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68beb613-8201-4e19-a407-5882277ca00d", "sighting_of_ref": "indicator--61097642-6a30-474e-9e0e-2f9550d21755", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ef714d-b0ab-4831-babe-536ceafb7f99", "sighting_of_ref": "indicator--61097642-6a30-474e-9e0e-2f9550d21755", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4002c0-d881-4db6-bc68-48a3c446e13c", "sighting_of_ref": "indicator--bce03801-d020-49d5-94dd-2f108cfded89", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225faff3-b0ac-4985-ae3e-5a45c49e168e", "sighting_of_ref": "indicator--bce03801-d020-49d5-94dd-2f108cfded89", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e25e6f-45ab-4596-848c-8c48502e4594", "sighting_of_ref": "indicator--bce03801-d020-49d5-94dd-2f108cfded89", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65946d1-64bb-41ef-9cbd-57882b28d3f2", "sighting_of_ref": "indicator--6a9cf9bb-bb09-40e4-9ac1-0c1cbc364aa6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240aea48-870d-4355-a0cd-b2ca04504292", "sighting_of_ref": "indicator--6a9cf9bb-bb09-40e4-9ac1-0c1cbc364aa6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f29ddc4-f13b-4430-8cae-2ff02991590f", "sighting_of_ref": "indicator--6a9cf9bb-bb09-40e4-9ac1-0c1cbc364aa6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e99fd17-1690-44a4-889b-679956355cd1", "sighting_of_ref": "indicator--fd2b8e0c-7363-4111-ba34-502bc3ab7e55", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4586b761-2b68-4ad0-ac59-855dad996e0e", "sighting_of_ref": "indicator--fd2b8e0c-7363-4111-ba34-502bc3ab7e55", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50241e71-867a-4457-b1cb-da9a46e68705", "sighting_of_ref": "indicator--fd2b8e0c-7363-4111-ba34-502bc3ab7e55", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8de412b-b1c5-4f39-8596-217176e15bbd", "sighting_of_ref": "indicator--fc4b9651-c2ea-4440-8462-da9210f9e570", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f945c0-6d43-4132-826f-7c5f6da042f4", "sighting_of_ref": "indicator--fc4b9651-c2ea-4440-8462-da9210f9e570", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fc14d7-4c96-4804-825d-9076548ec517", "sighting_of_ref": "indicator--fc4b9651-c2ea-4440-8462-da9210f9e570", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061131e1-6813-4753-ba33-1310def839f2", "sighting_of_ref": "indicator--b3a53fd4-ecbb-435d-8c50-07f6e1772916", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d38679-0721-45a0-823c-4e30f4c4e383", "sighting_of_ref": "indicator--b3a53fd4-ecbb-435d-8c50-07f6e1772916", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9839551-99e0-46e0-8b8e-559dec1e7645", "sighting_of_ref": "indicator--b3a53fd4-ecbb-435d-8c50-07f6e1772916", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff777b4e-fcf1-4dfc-90ae-7715798a766c", "sighting_of_ref": "indicator--d56b6a51-7ec7-4481-b113-886eb08cb48f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96163132-f86a-4d8b-b97e-17959b3caeed", "sighting_of_ref": "indicator--d56b6a51-7ec7-4481-b113-886eb08cb48f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1508009-76de-4880-9050-b56131ff6142", "sighting_of_ref": "indicator--d56b6a51-7ec7-4481-b113-886eb08cb48f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b0a0ac-77e1-4d1c-8aa9-a241509839f7", "sighting_of_ref": "indicator--4892f338-8ef6-49bb-b47a-c03ea00f39cd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236b10f1-ff4a-4d4e-8c9b-e9eb0a4e05b7", "sighting_of_ref": "indicator--4892f338-8ef6-49bb-b47a-c03ea00f39cd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725c1fdd-9a2b-4bef-9be6-a435bee69016", "sighting_of_ref": "indicator--4892f338-8ef6-49bb-b47a-c03ea00f39cd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf1d618-685d-4d3f-b5f6-4a1646bb4756", "sighting_of_ref": "indicator--ef2ce202-85c1-4c28-b681-89c4327d5639", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2e2d16-974b-4a2b-8ff9-5b2a8de2be63", "sighting_of_ref": "indicator--ef2ce202-85c1-4c28-b681-89c4327d5639", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b2eb61-5f7e-4e0f-92f6-06e187271c04", "sighting_of_ref": "indicator--fe7ae4e9-fa45-4642-b3ad-2f5110734cc6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6867b91-b95c-46d4-9e5a-1e1dbebf9c91", "sighting_of_ref": "indicator--fe7ae4e9-fa45-4642-b3ad-2f5110734cc6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1d6018-e50a-4787-aacf-3d3033352db8", "sighting_of_ref": "indicator--fe7ae4e9-fa45-4642-b3ad-2f5110734cc6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ad48bd-c336-4162-8c31-136f837ae627", "sighting_of_ref": "indicator--60af6ad9-101d-4e93-ad43-7fc31d794205", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b942582-3457-44d8-8cce-a2e892f9ff50", "sighting_of_ref": "indicator--60af6ad9-101d-4e93-ad43-7fc31d794205", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37768185-f555-4fdc-ab87-0c0ee07b154c", "sighting_of_ref": "indicator--60af6ad9-101d-4e93-ad43-7fc31d794205", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97181f37-1cda-412d-b1e6-585314e2804b", "sighting_of_ref": "indicator--7f79853d-7988-4bae-9f3d-a567a7da4ee1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a38f7f2-7373-4e28-b46d-bd22b78f489f", "sighting_of_ref": "indicator--7f79853d-7988-4bae-9f3d-a567a7da4ee1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c06d937-a4fb-4e01-8216-1e902f9a4fda", "sighting_of_ref": "indicator--3686a9c8-42af-4991-9146-ebb149587549", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d7e19c-fa27-44ac-bf85-5569cb928e00", "sighting_of_ref": "indicator--3686a9c8-42af-4991-9146-ebb149587549", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5b411a-4cbb-4208-b30b-8e543d4444d8", "sighting_of_ref": "indicator--3686a9c8-42af-4991-9146-ebb149587549", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f21389e-829d-4b82-8137-39ca627c5dd1", "sighting_of_ref": "indicator--09a37923-9a41-466c-99fe-2cdab51ba0c2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bef0a7-78f4-4ac6-a922-e44e570b9e45", "sighting_of_ref": "indicator--09a37923-9a41-466c-99fe-2cdab51ba0c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a37191-eb10-4252-b8bf-30080f4daf31", "sighting_of_ref": "indicator--09a37923-9a41-466c-99fe-2cdab51ba0c2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ce67e9-d4d6-4b48-aa3f-b217a44e189a", "sighting_of_ref": "indicator--602ef954-8c8f-409b-babb-b1e832a571b3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6736668-2190-4edd-bc3f-21e77bedeaa1", "sighting_of_ref": "indicator--602ef954-8c8f-409b-babb-b1e832a571b3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6afbc8-eef5-45a7-b3ee-4d9d0335e6e9", "sighting_of_ref": "indicator--602ef954-8c8f-409b-babb-b1e832a571b3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4f3676-8fd0-4bf2-9363-42e0f303c964", "sighting_of_ref": "indicator--d8914b07-f57f-4251-b978-ea85066d96f9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b41641-cc29-4585-982e-b938f73b2b75", "sighting_of_ref": "indicator--d8914b07-f57f-4251-b978-ea85066d96f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85d1bce-20d1-4694-a9e7-a8ca6403a128", "sighting_of_ref": "indicator--d8914b07-f57f-4251-b978-ea85066d96f9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2da98b7-5a5b-4801-be01-387a794fcd5b", "sighting_of_ref": "indicator--ea773d38-2a8d-4170-b64f-3dfdc4786b62", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87542a9-f362-4b9b-8d34-7ac351423c0f", "sighting_of_ref": "indicator--ea773d38-2a8d-4170-b64f-3dfdc4786b62", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb488a2-dba1-4e3e-a374-db18b8f5e7ce", "sighting_of_ref": "indicator--ea773d38-2a8d-4170-b64f-3dfdc4786b62", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a83f5d-e0f8-4482-90ee-f485009fe6e3", "sighting_of_ref": "indicator--c103fef3-4469-417e-9f69-293f499d62e2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed0e2b6-0b13-47f2-a164-91ca8259b62a", "sighting_of_ref": "indicator--c103fef3-4469-417e-9f69-293f499d62e2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81a38f8-c353-40fa-8d8d-11f3cbaf74ae", "sighting_of_ref": "indicator--197d8f18-40a1-401f-9310-b97887f0345c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820508b4-c4c9-4eb3-8249-adf0799e1c1c", "sighting_of_ref": "indicator--197d8f18-40a1-401f-9310-b97887f0345c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ecad23-c1cf-472f-8140-62eec013fb79", "sighting_of_ref": "indicator--7e3cfe10-ac88-4530-b05b-ee3c2083cc37", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0c3d52-60e7-48c8-b05c-ff81c060c94e", "sighting_of_ref": "indicator--0c2f818f-1c0b-41d6-bebc-93e39957eace", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0163ef-5eda-47c2-8d1c-814191bd44f6", "sighting_of_ref": "indicator--0c2f818f-1c0b-41d6-bebc-93e39957eace", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb32022-0019-41f0-ab02-efa1e6e42a73", "sighting_of_ref": "indicator--0c2f818f-1c0b-41d6-bebc-93e39957eace", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c353dc-09cc-4292-ac27-97c87b4b2dd3", "sighting_of_ref": "indicator--aa46ce37-2fb5-4235-a7bd-5d182c782b76", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9c1d77-c5bb-4059-a48f-d591f16351fb", "sighting_of_ref": "indicator--aa46ce37-2fb5-4235-a7bd-5d182c782b76", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794ac367-6f0f-47e7-9341-bf6b0ea43090", "sighting_of_ref": "indicator--aa46ce37-2fb5-4235-a7bd-5d182c782b76", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bd1aea-1133-4521-9e03-c5d42f74f76b", "sighting_of_ref": "indicator--abf6e39e-a60b-4515-b995-e1ad91927417", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0874e27-174a-427b-9f2d-d3f6f9a193f6", "sighting_of_ref": "indicator--abf6e39e-a60b-4515-b995-e1ad91927417", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9843eeca-aa07-4c90-b553-46a0b06cbdd9", "sighting_of_ref": "indicator--abf6e39e-a60b-4515-b995-e1ad91927417", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3add06bd-3c77-4590-a8df-25a8c79c330f", "sighting_of_ref": "indicator--971d99dd-0baf-4b85-8f12-e8270778b5ed", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b065bc-8213-4b02-919d-ef4976b08cb9", "sighting_of_ref": "indicator--971d99dd-0baf-4b85-8f12-e8270778b5ed", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28f2f6e-6fcc-484d-a524-ec859cb3146a", "sighting_of_ref": "indicator--971d99dd-0baf-4b85-8f12-e8270778b5ed", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099cfc66-4e5d-4689-90e9-3830e8bbe4b1", "sighting_of_ref": "indicator--f8131f43-2b89-4f2a-9bf4-5d4206f02490", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7797af31-9f9a-4da5-bf62-9ee95fb380a1", "sighting_of_ref": "indicator--f8131f43-2b89-4f2a-9bf4-5d4206f02490", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2af686-debb-48ce-aab8-a2b03bcc5905", "sighting_of_ref": "indicator--bb9bf271-b8a0-4646-a258-a67c2787f483", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce9f34f-af7c-46b0-b762-0f6af48e1b7a", "sighting_of_ref": "indicator--bb9bf271-b8a0-4646-a258-a67c2787f483", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad368f63-b5a1-4c79-85ca-bac695a7bceb", "sighting_of_ref": "indicator--5d94e5f4-26d3-455e-8eea-31ffc468b85d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3faf77-8e40-4f72-ac70-d11ce1817fe1", "sighting_of_ref": "indicator--5d94e5f4-26d3-455e-8eea-31ffc468b85d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399b0a49-92b4-4ef6-b351-3136b1757180", "sighting_of_ref": "indicator--5d94e5f4-26d3-455e-8eea-31ffc468b85d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd48cb8b-032b-418a-ba38-87ae48753e97", "sighting_of_ref": "indicator--8b475793-05c7-4d10-9430-044c826ffc62", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a287190-da00-47c2-a2d8-005cdb451287", "sighting_of_ref": "indicator--8b475793-05c7-4d10-9430-044c826ffc62", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d3ef08-a8c0-4886-9874-4be4e4ec8f15", "sighting_of_ref": "indicator--f7b46d14-88f7-47d9-80c5-264c804a4e21", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ec6d87-aaaa-44f2-a767-653f5bbc15f8", "sighting_of_ref": "indicator--f7b46d14-88f7-47d9-80c5-264c804a4e21", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00970744-a834-4f5f-9aa8-1690259dcdcb", "sighting_of_ref": "indicator--36a96897-ed4b-441b-8c33-1ef74312d00e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91be73ca-f191-45a8-a649-ce57c7b492ae", "sighting_of_ref": "indicator--36a96897-ed4b-441b-8c33-1ef74312d00e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ff081f-2a2e-409c-af90-cf1316e92a42", "sighting_of_ref": "indicator--fccd56a5-9aaf-4340-81d4-0c914cfe42d1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5750c5de-2ac8-4f1d-afe9-21960e4f1366", "sighting_of_ref": "indicator--248b6473-705d-41dc-9f11-a25bab41bd14", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4169340-6259-4094-8b77-cd02642718f6", "sighting_of_ref": "indicator--7f999723-e025-4d21-8b53-4f5f4058ec80", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf78c43-8925-4918-938c-8c305404a3af", "sighting_of_ref": "indicator--a013cd8f-8405-4f2d-986f-4f775e4e14d9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18444852-bf71-4921-8df2-91dfcefc8e80", "sighting_of_ref": "indicator--a013cd8f-8405-4f2d-986f-4f775e4e14d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7148eea-b94c-4b4e-afae-ff36ea1818dd", "sighting_of_ref": "indicator--3aa3a928-9b86-42dc-a88c-07b552a2a112", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49acdea-2ad7-4987-92f8-fe6dd66e87cd", "sighting_of_ref": "indicator--d435f0df-b71c-40d1-bf27-030eb8829733", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a7c422-e1d2-4ff7-8fc3-58f41a1b64eb", "sighting_of_ref": "indicator--d435f0df-b71c-40d1-bf27-030eb8829733", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd743c8-babc-4094-8187-02225112b267", "sighting_of_ref": "indicator--bb319402-488f-4dfb-8fa8-158e1005daed", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9213f9b9-51d5-46a6-9ac5-e94bbcfdaedf", "sighting_of_ref": "indicator--bb319402-488f-4dfb-8fa8-158e1005daed", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3310b04-2cfc-407c-ab96-3df26eb5ac01", "sighting_of_ref": "indicator--4e8a0023-a945-4580-8311-cc471c1b6ad7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187d773c-1b5b-4008-9efd-ee793bcf648d", "sighting_of_ref": "indicator--6e6d6971-35da-4246-ad1d-536613c17f77", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68086c26-a0af-4e6d-af2b-fc898f4a1cb4", "sighting_of_ref": "indicator--c5012efe-0ddd-4f6b-8d2e-eb8e38025fb5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a58ca9-f388-4e95-8694-c0beca368167", "sighting_of_ref": "indicator--c5012efe-0ddd-4f6b-8d2e-eb8e38025fb5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dde77f0-ba1f-4eaf-93c9-9ae632e309c3", "sighting_of_ref": "indicator--6a45dd3a-73f6-4f2f-97db-b9b3e2c7e2af", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903ee4b9-b29e-4916-b17f-8aaf9374f36b", "sighting_of_ref": "indicator--6a45dd3a-73f6-4f2f-97db-b9b3e2c7e2af", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520834a9-10d6-4e7f-b921-0f69841018c8", "sighting_of_ref": "indicator--97654f91-2882-485e-87bb-466315201b79", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e84b38d-7a88-48a4-9399-ea5088a1e309", "sighting_of_ref": "indicator--92fb5f7d-0318-4072-a32d-c7ade4f79b20", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f33fb8-7e34-471a-bc19-8175ccc817ff", "sighting_of_ref": "indicator--92fb5f7d-0318-4072-a32d-c7ade4f79b20", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843a27d8-7382-4ad5-89a8-5a41b0d40d93", "sighting_of_ref": "indicator--239ea441-9bc3-4b87-9f10-f1bf5bd2009f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6271ac29-5d5d-4c2f-bfae-093c501b79f3", "sighting_of_ref": "indicator--5007c0a7-6500-4468-8f65-121ef2521d05", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54534614-6a49-490d-9c25-44aea90d4751", "sighting_of_ref": "indicator--d640aa7e-700f-4390-a18e-4bf288290dfa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f5dc78-8c78-441f-88b9-e369c71ea572", "sighting_of_ref": "indicator--e795b47b-31ff-463f-a7ca-90bc4279e6a3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38406c5-ecd9-4b06-88e5-f7d17dfa9c07", "sighting_of_ref": "indicator--e795b47b-31ff-463f-a7ca-90bc4279e6a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfd28c3-94ee-4313-abb5-18e48a1bd73d", "sighting_of_ref": "indicator--8d204ec6-b713-4f53-baf7-7bbe4cacce98", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7d64b9-8fe3-44e4-af0f-6742fca3a7b1", "sighting_of_ref": "indicator--f1007b22-e533-495f-a4f0-fd143fc46dca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adbdbb2c-5baa-4a25-aa48-9c7b63e7cdb6", "sighting_of_ref": "indicator--f1007b22-e533-495f-a4f0-fd143fc46dca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b074c281-b393-4221-b8f4-43781704f296", "sighting_of_ref": "indicator--f1007b22-e533-495f-a4f0-fd143fc46dca", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e10018-793f-40ac-9167-a31bf444de3d", "sighting_of_ref": "indicator--ba09da5e-5512-4afa-b411-db82e0f995a3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699bbbbf-1753-41ae-ae86-e5d5af411dcf", "sighting_of_ref": "indicator--ba09da5e-5512-4afa-b411-db82e0f995a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73d1d4d-bf06-4c93-ba89-9676e196ba27", "sighting_of_ref": "indicator--2a44ddc2-f02d-42be-8712-26a7bfbd068d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4950fb5-8588-4b85-af04-f6d3c1841761", "sighting_of_ref": "indicator--2a44ddc2-f02d-42be-8712-26a7bfbd068d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bf8eca-adc1-4eff-9fe0-400d9ec4cc37", "sighting_of_ref": "indicator--11891df8-a935-4f4f-aa69-ab59f35ab128", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abbd99a-4d08-4106-9707-4b782e163373", "sighting_of_ref": "indicator--180c5685-b9e6-4ecb-8983-16547d48e7a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c01ca5-c5bf-4c4a-9045-ee39f60b115a", "sighting_of_ref": "indicator--895995a4-e8e2-4bd0-ae4f-f76ca657d923", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135c5789-bd6e-4549-a3da-b2620f29fc88", "sighting_of_ref": "indicator--1bacec27-87fe-4457-a9a1-6184288aff8f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b15961-7a5b-483c-8882-348cd173357e", "sighting_of_ref": "indicator--e9228893-6eda-4f35-bad8-aecdece09771", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201a32d6-2405-4fe6-b85e-795ce1745338", "sighting_of_ref": "indicator--e9228893-6eda-4f35-bad8-aecdece09771", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ef47e7-ec6c-46a4-a4ab-7056ad508b17", "sighting_of_ref": "indicator--f34f3224-e963-488b-9112-c11a5089f180", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1557d32f-c086-4ae2-b5b3-fbc516c4a7fc", "sighting_of_ref": "indicator--dd3e54e8-2f05-42cf-b117-32619515cfd5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b022745-3c65-4a1e-8d27-70550290657d", "sighting_of_ref": "indicator--ae044387-199a-4739-858e-d2347e4a3a06", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701bb853-1770-433c-ae82-9659331b0f62", "sighting_of_ref": "indicator--c5e1d54a-62f8-43bd-bf63-16c0537280a0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a006d4-2a98-491a-b86b-f8dd07dcaabb", "sighting_of_ref": "indicator--8b2c2d71-db4b-41fb-bc8a-71741f3e2524", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb9ca79-0a68-4b5d-86bd-250a791d4ab1", "sighting_of_ref": "indicator--17c8f4d5-0f0c-48da-8574-95bcfee42fc8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17581d94-bac7-4ccb-b269-104cafef80b0", "sighting_of_ref": "indicator--17c8f4d5-0f0c-48da-8574-95bcfee42fc8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b53ae48-1221-4338-8681-8da0cfecfc36", "sighting_of_ref": "indicator--d4789e75-c795-43cc-98f3-decd1a6dbefc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5044835f-56a0-4048-88f7-b24281e19eb8", "sighting_of_ref": "indicator--356384c1-118b-4a6e-aad5-78cd9695ceb6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9e9402-b3c2-4467-9d47-ed925fcb6633", "sighting_of_ref": "indicator--356384c1-118b-4a6e-aad5-78cd9695ceb6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819e969b-4311-4b0c-894e-5db968291f21", "sighting_of_ref": "indicator--356384c1-118b-4a6e-aad5-78cd9695ceb6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6540f8-a2c2-4d3e-90c9-b2f749239050", "sighting_of_ref": "indicator--4d5e0803-23e7-46ba-8f7e-00e9396d3a99", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f4a38f-7585-4900-a876-6e69dd60c208", "sighting_of_ref": "indicator--e6e2f4ea-58bf-4d32-aa0d-e2ec2baa1366", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d077d9ac-a0b2-4803-85cf-f9a55b35797f", "sighting_of_ref": "indicator--12d03b3e-1d17-41e7-a2e5-add8f97e9bdd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2f853c-bb07-4c34-82f4-0f23a6b7ee0a", "sighting_of_ref": "indicator--9ad33198-5263-480b-81a7-8f681c79f314", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ab2b1d-3bc4-4be3-8502-2eecbcd42f99", "sighting_of_ref": "indicator--36ae83ac-635f-4688-8179-f06c2f464e76", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36f7d92-21b7-4771-9c21-71348f3dfd86", "sighting_of_ref": "indicator--36ae83ac-635f-4688-8179-f06c2f464e76", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4595eefa-b84f-4075-a301-6e459fccd508", "sighting_of_ref": "indicator--51136948-90ce-4869-9146-83d4365bd614", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf97eab4-e919-455b-b46e-4378a242169c", "sighting_of_ref": "indicator--55e11481-01c1-4f49-85ea-dabb69bda3bd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21947a31-04bc-4684-85af-69ae19324543", "sighting_of_ref": "indicator--ab3a7f4c-12db-4f89-be9b-8876898748b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4843794-09d4-40f9-bee4-186216dd5513", "sighting_of_ref": "indicator--b3b24d20-3653-41de-bdfe-d9a8fdd48e9b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f8cca7-a6eb-4692-878f-19d2c464a9ac", "sighting_of_ref": "indicator--b3b24d20-3653-41de-bdfe-d9a8fdd48e9b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57dffb7c-62b2-4455-861b-fe57205f27dd", "sighting_of_ref": "indicator--da998c93-b9f8-4305-9d86-78672a208dba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96947941-71b7-4c01-8f71-7f44841b0845", "sighting_of_ref": "indicator--c78c4bf1-b25b-4ae3-ada3-d58400eda66c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24dd3dc6-6912-45fa-bb85-197446ef5096", "sighting_of_ref": "indicator--bb883ecd-9277-4748-bedb-52195f782a12", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b77f61d8-2fb2-4429-8472-82bc032b3a64", "sighting_of_ref": "indicator--bb883ecd-9277-4748-bedb-52195f782a12", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65eac900-268d-4ccd-8c1d-1064ac8887ee", "sighting_of_ref": "indicator--14c80dce-fa0b-49e2-b64d-1db594b63c1b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42db568-2786-46f7-a54b-dc4044d41e4a", "sighting_of_ref": "indicator--634bd40d-5df9-4c52-ac46-27ab38249dc1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede62c4f-b7aa-4ac6-ac1a-ec6328fb66a0", "sighting_of_ref": "indicator--634bd40d-5df9-4c52-ac46-27ab38249dc1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e3a54e-0b26-4f10-830c-d9780d958302", "sighting_of_ref": "indicator--9280aa64-edcb-472e-8df0-f38b305f9944", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625522a4-45d1-4c98-a241-69ecad424e39", "sighting_of_ref": "indicator--41918145-2761-4a49-95ea-db51e5430477", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ea17fd-6875-4790-bb0d-e657dbeabd9d", "sighting_of_ref": "indicator--9c1f49a5-d5b0-47e7-b772-1cbdb1de46c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da5e294-b1f0-4eb3-ad6e-404a33ce4ef9", "sighting_of_ref": "indicator--ad238fc1-aa2f-42ea-949a-84768a8cb179", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03af54a3-c73b-41f6-8de7-1541eaf4872f", "sighting_of_ref": "indicator--ad238fc1-aa2f-42ea-949a-84768a8cb179", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49b2fb3-45ef-4e95-bb67-30a33f8bc3c6", "sighting_of_ref": "indicator--bbacdc36-7d72-4688-98b2-0b3838c7edd2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89394d7-6bec-4444-98f5-6f9803554cdf", "sighting_of_ref": "indicator--e3eaa707-d5ba-47ef-baa4-abbd1096c4a8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bcb4c6-9e97-4d7c-aa21-1207b2b9fef6", "sighting_of_ref": "indicator--05f572c0-252d-4588-bfcd-28fe6ae2464d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399bcdd3-26fc-44db-8e26-e178ed9f6ca9", "sighting_of_ref": "indicator--3aa0be9f-5ad7-40ab-87e3-addc84a03638", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0344b3-8c89-4346-8ec8-bf7e3e8b3c8d", "sighting_of_ref": "indicator--3aa0be9f-5ad7-40ab-87e3-addc84a03638", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71352df8-1a5a-47c9-aecc-ea653a17559d", "sighting_of_ref": "indicator--ade0691f-6dc7-467b-987c-1c9df963d921", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878a4074-d57b-47af-ba08-497fa293039b", "sighting_of_ref": "indicator--289032b8-e48d-4c72-b386-32dddc248aa0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7203b2f-8de2-4246-b29c-d6e4ba46923e", "sighting_of_ref": "indicator--289032b8-e48d-4c72-b386-32dddc248aa0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0413cbff-4fb4-45e4-bd10-9d4d033c9303", "sighting_of_ref": "indicator--289032b8-e48d-4c72-b386-32dddc248aa0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a19410-1081-4528-93e0-baa6e2a75448", "sighting_of_ref": "indicator--b08e6ace-474a-4bb1-86e6-97675320511d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b6bab1-8280-4a53-81e7-a9f4444e30b5", "sighting_of_ref": "indicator--b08e6ace-474a-4bb1-86e6-97675320511d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f16c08-d8ff-4348-8a0c-13e414b31615", "sighting_of_ref": "indicator--b08e6ace-474a-4bb1-86e6-97675320511d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9936f753-1921-4016-bc65-832ef62220f2", "sighting_of_ref": "indicator--0396e123-d54d-47ba-acfb-941183126217", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0d7e25-64ff-4cc1-a6d9-5028674f59d3", "sighting_of_ref": "indicator--0396e123-d54d-47ba-acfb-941183126217", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08933ca2-bcc5-41b5-9c38-4ec8feff9916", "sighting_of_ref": "indicator--82ec8165-d21b-454b-acd6-e80b64e5882f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283ba635-e798-4181-845f-295ddf5fca6d", "sighting_of_ref": "indicator--82ec8165-d21b-454b-acd6-e80b64e5882f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1065eb-b3e5-4438-9c62-ec5d0d5efe94", "sighting_of_ref": "indicator--7a82099f-2612-4cbb-ad6f-df561d93a7ed", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84dbdec3-7afc-47ab-8803-4047694c43ac", "sighting_of_ref": "indicator--7a82099f-2612-4cbb-ad6f-df561d93a7ed", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2620156a-4576-458c-8fcd-cf329b24d161", "sighting_of_ref": "indicator--bc4ddfda-6564-4b79-a456-0f163263995d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8dd99e-d5f9-4498-8b1f-e3a5b34b8cb2", "sighting_of_ref": "indicator--bc4ddfda-6564-4b79-a456-0f163263995d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d800dc-e40e-4d55-9799-07299b6bb536", "sighting_of_ref": "indicator--bc4ddfda-6564-4b79-a456-0f163263995d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ad8018-7ffb-4d02-9c7b-536c9e72a920", "sighting_of_ref": "indicator--531a75b0-1cde-43c0-b6e8-784ab40c70d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a26eead-1980-4c7e-90a4-3b9e291b54c8", "sighting_of_ref": "indicator--c1fbb43b-bf03-4908-89ed-f5d580c8d14d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03006212-c24f-49ce-af19-8a5f028a90fd", "sighting_of_ref": "indicator--c1fbb43b-bf03-4908-89ed-f5d580c8d14d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbd7aeb-4fd8-4d98-8e87-f067e6d0f43a", "sighting_of_ref": "indicator--c1fbb43b-bf03-4908-89ed-f5d580c8d14d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51efc4f7-07a5-4a57-af65-635baa91c359", "sighting_of_ref": "indicator--d2da6e33-576b-40a5-a5f7-a98be04c433f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec69864-f239-4ad0-9400-9a38ce73cd05", "sighting_of_ref": "indicator--d2da6e33-576b-40a5-a5f7-a98be04c433f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e61722f-1438-4623-a238-f96c400fb1ff", "sighting_of_ref": "indicator--d2da6e33-576b-40a5-a5f7-a98be04c433f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204785a9-a509-4ed3-b599-6ee6797b8258", "sighting_of_ref": "indicator--73efa029-d9fc-4e74-8f49-a20f43743c9f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60024b94-e071-42fb-85c8-aaa9dfdc2f51", "sighting_of_ref": "indicator--73efa029-d9fc-4e74-8f49-a20f43743c9f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a05e41-9943-48a7-a86b-08e7d0d91622", "sighting_of_ref": "indicator--73efa029-d9fc-4e74-8f49-a20f43743c9f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128d717d-95f9-42d5-8a90-ca110763e844", "sighting_of_ref": "indicator--ff1f1301-da3a-4bf4-9207-98d9b3a5938c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc4ad2b-ac36-478e-b53d-f9dee1af6faf", "sighting_of_ref": "indicator--8dc94938-f5c7-4e37-bd5d-0e4ef8f0201d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940363e0-6242-428e-b7d4-0c7e3a589ba9", "sighting_of_ref": "indicator--8dc94938-f5c7-4e37-bd5d-0e4ef8f0201d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c9a832-2306-43e0-a6a9-b43e2b2cc3da", "sighting_of_ref": "indicator--5bff114a-b251-47eb-a18f-5265531aa5ad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5786f9f6-9594-4f1c-9cbd-35dab543db8e", "sighting_of_ref": "indicator--5bff114a-b251-47eb-a18f-5265531aa5ad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a4d6fb-b2a7-4459-aa38-5ce74adfec2c", "sighting_of_ref": "indicator--5bff114a-b251-47eb-a18f-5265531aa5ad", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f629e1ab-bf3c-4ffc-8d5b-a4165f07aeda", "sighting_of_ref": "indicator--7a6fe328-e566-4fc5-98b9-ed421c5c47c8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2032ebf3-2e04-4338-9e29-2940bb408551", "sighting_of_ref": "indicator--95380c82-a7d7-405f-a774-653ce55f3c90", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58169f4-d06b-475e-a818-fcab29dcf46b", "sighting_of_ref": "indicator--95380c82-a7d7-405f-a774-653ce55f3c90", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead530ab-9c13-4157-aa06-d377b2d76b34", "sighting_of_ref": "indicator--19b75d29-f506-4202-9e0a-477def37fbe8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bc3f581-1170-4673-87f3-79840d725037", "sighting_of_ref": "indicator--19b75d29-f506-4202-9e0a-477def37fbe8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c202ab42-6f58-49b0-a439-93a429b99ac6", "sighting_of_ref": "indicator--c8e2afd3-0c5c-4e2a-b5c2-c8e4706610bc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb483f81-853b-4663-90de-dbc8f663748e", "sighting_of_ref": "indicator--f2e125d1-b2fa-4e22-b944-59089b82fb46", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce996e54-0575-4566-9d62-65e25a666efe", "sighting_of_ref": "indicator--4f8b5045-55bf-43af-9c08-0f0dadf64c26", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9da4e6-49eb-4a22-8ebe-4af89cffee69", "sighting_of_ref": "indicator--4f8b5045-55bf-43af-9c08-0f0dadf64c26", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f46369-d368-47c6-b32c-9bcf3f415111", "sighting_of_ref": "indicator--4f8b5045-55bf-43af-9c08-0f0dadf64c26", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead93f41-2171-477d-b23a-ccbf09a7d841", "sighting_of_ref": "indicator--72068170-a7b5-49fc-a4d8-931b094a997b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6abe2b-079f-4dd5-9e84-13584bc0413b", "sighting_of_ref": "indicator--72068170-a7b5-49fc-a4d8-931b094a997b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c605f348-9f82-44ed-8dc1-61628bb26d03", "sighting_of_ref": "indicator--72068170-a7b5-49fc-a4d8-931b094a997b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c40a55-f2d0-49d1-b5fb-b207f0713f61", "sighting_of_ref": "indicator--9e047960-7577-4fb4-81b9-0f432367c79f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df6531c-91e1-4487-8450-6d66bf2cef3c", "sighting_of_ref": "indicator--9e047960-7577-4fb4-81b9-0f432367c79f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698d6ee3-6b17-49ce-b70c-7fb3a6892a3e", "sighting_of_ref": "indicator--9e047960-7577-4fb4-81b9-0f432367c79f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efac4153-8a9c-49a3-8692-faa16498f039", "sighting_of_ref": "indicator--0089f6d7-f57d-459a-bca6-17584d779cb8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ae8b9f-296c-4ec4-bac7-afcd6a71f740", "sighting_of_ref": "indicator--0089f6d7-f57d-459a-bca6-17584d779cb8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe375245-e0a3-425f-9452-9b457be02c0b", "sighting_of_ref": "indicator--0089f6d7-f57d-459a-bca6-17584d779cb8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ebfa65-3edb-4e49-a07e-cdf56188eba3", "sighting_of_ref": "indicator--695ffbd0-7828-443b-a833-195591591c1e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ff9acb-4409-4a55-b446-b6ac0d4dcb10", "sighting_of_ref": "indicator--695ffbd0-7828-443b-a833-195591591c1e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17408503-76b1-49ed-bc90-3d93ed550e74", "sighting_of_ref": "indicator--695ffbd0-7828-443b-a833-195591591c1e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4643c3db-6cc9-4c06-8d0f-6f991e5a9553", "sighting_of_ref": "indicator--27e440fe-db50-477b-b3ec-1be321b4267d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd5a1e0-cfb3-47c0-8e76-fa2b52a59e39", "sighting_of_ref": "indicator--27e440fe-db50-477b-b3ec-1be321b4267d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5e30f1-a0b0-4eb8-b296-fa9a68a9575c", "sighting_of_ref": "indicator--27e440fe-db50-477b-b3ec-1be321b4267d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea46f71-ff6a-4006-aa0c-7751a2324b82", "sighting_of_ref": "indicator--dc621738-e7a5-4cf6-95b6-e7acead4c74a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5c59a3-6059-4e14-982b-f82c86555ef9", "sighting_of_ref": "indicator--dc621738-e7a5-4cf6-95b6-e7acead4c74a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8860b8eb-2be3-4c6d-8576-ededf940b6fb", "sighting_of_ref": "indicator--dc621738-e7a5-4cf6-95b6-e7acead4c74a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6095c4f-faeb-4c02-af27-e899affacc6e", "sighting_of_ref": "indicator--9a2a3704-fc77-4258-9cdc-a572309f0535", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25e6e4d-fe2a-43dc-91a7-595d4b84dad6", "sighting_of_ref": "indicator--9a2a3704-fc77-4258-9cdc-a572309f0535", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b1d77e-4baa-4ed2-a5ca-1fa2fb77b351", "sighting_of_ref": "indicator--9a2a3704-fc77-4258-9cdc-a572309f0535", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb4f0de-fac9-465b-a794-3eeafe051506", "sighting_of_ref": "indicator--9af237a8-71f9-4b04-b4f2-1609079c155e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bb8b0a-2961-4fee-a90b-6348e7ab82cf", "sighting_of_ref": "indicator--e033b7fe-42c9-4564-87da-2ff788efd4a9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3aa2e2-7655-4792-a8b8-ecb734ccd2f3", "sighting_of_ref": "indicator--5b1d79dc-96fc-497b-b6ea-fe6bedaa72e1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c75ef2e-f4e0-4d47-8fa8-03090142f77a", "sighting_of_ref": "indicator--a32f740e-7f60-4a29-a4e4-222bd6ef0dcb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65f0b44-71e4-4191-8c6c-a0b4a8e128aa", "sighting_of_ref": "indicator--3c900e0f-ca6c-4a3f-9480-f210d1638671", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3396b71-21ce-49b4-a168-6e68ed509806", "sighting_of_ref": "indicator--26bb5f1b-cae9-495a-827c-04464b698b24", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcd9843-925d-4f25-8dee-5b808707c6f7", "sighting_of_ref": "indicator--26bb5f1b-cae9-495a-827c-04464b698b24", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96caefab-1f99-47fe-8956-d2f74e93e86a", "sighting_of_ref": "indicator--26bb5f1b-cae9-495a-827c-04464b698b24", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384a53cd-f548-4dbe-a764-475aaaf12f97", "sighting_of_ref": "indicator--fb42922b-98c8-49fd-9d54-751a242a7ad4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f616834-75ad-4ef6-834a-739139cb6d99", "sighting_of_ref": "indicator--73ea149e-001f-4905-a8bc-3212fc7240f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec38cb1-853f-4d66-b27f-6e9c42bc0435", "sighting_of_ref": "indicator--3cdeb99e-a9e7-4779-a6bf-50e8929f917c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb60ecc6-a841-45c8-b69b-aa67ee184171", "sighting_of_ref": "indicator--426511a8-6ad6-4f8f-bde2-7ea45510236a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ebeca3-77db-42f7-9d49-ef0e37d59630", "sighting_of_ref": "indicator--5399780b-b78d-491d-963e-06a1ab1fe216", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19997c9-e7fb-42f4-b782-6e928dc1d9eb", "sighting_of_ref": "indicator--4bc487ee-2e10-4609-99e1-5124bc488264", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b6fc2e-9fd4-42db-b7a0-4ffecea7aad0", "sighting_of_ref": "indicator--3e64ea36-127d-40f9-9fa9-78ba389ada11", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5f0e26-2c6d-4d8c-b7ab-a29a8845d232", "sighting_of_ref": "indicator--bbccaf29-7148-4dfa-be47-83f7ec8d4887", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ed973c-a268-4da9-bfd2-512496f17461", "sighting_of_ref": "indicator--bbccaf29-7148-4dfa-be47-83f7ec8d4887", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47134bff-c435-40a6-af5c-64ec0d7bd87b", "sighting_of_ref": "indicator--fb9e9445-eec5-428e-8c05-3b594730a587", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978b1528-4bbb-4a60-9fda-766e9fcc183b", "sighting_of_ref": "indicator--1319026a-d877-426d-bd35-cbc4202012cb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e22093-7dbe-48ad-88b7-cbdb8f296040", "sighting_of_ref": "indicator--70e47f07-dd81-408d-87a1-7694a4a8e479", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884316b3-2b1f-4eb1-943d-70444f340f78", "sighting_of_ref": "indicator--577b5562-ea21-4025-a741-3e7d8ed66cac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--010c1420-3cb9-4ad8-87ac-279cca1f5a26", "sighting_of_ref": "indicator--e2c6b1cb-1ec2-453b-ba32-71952269e0ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a09c305-0e48-4a1f-a47a-5710e4202171", "sighting_of_ref": "indicator--b6b2a00c-4f4d-4660-98dd-9e33ee272244", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b885d3ce-b7ac-415f-afda-a1f2852131a3", "sighting_of_ref": "indicator--b6b2a00c-4f4d-4660-98dd-9e33ee272244", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25aa4cd1-4501-44de-8394-753aa879ce64", "sighting_of_ref": "indicator--b6b2a00c-4f4d-4660-98dd-9e33ee272244", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f756323-cacb-4373-8d06-4572027eed81", "sighting_of_ref": "indicator--15bfab4e-7d3f-4206-9609-edb9e22071e4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40655f0e-cc35-451e-a2a9-791d35523906", "sighting_of_ref": "indicator--de6e2a49-9ae4-4e78-91ab-49219a9dd67c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afd53b4-ba26-4e89-88ee-01c3898c3d97", "sighting_of_ref": "indicator--243e45c4-d172-4a98-aa27-e70f5558d98f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baddebc-8492-4789-aeab-abe5c7c207fc", "sighting_of_ref": "indicator--dd8f5ce1-b60b-47cb-b0f4-620bb20e695c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e06691-4c4f-4072-9cd5-28d0571de085", "sighting_of_ref": "indicator--b81a10ca-dbaa-4f9d-910d-cba345156cb6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43390c42-6adb-44f8-9463-05a814dcbaed", "sighting_of_ref": "indicator--b81a10ca-dbaa-4f9d-910d-cba345156cb6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26a60ee-30a8-45cc-a141-6cbc8bf9e925", "sighting_of_ref": "indicator--b2dbf2c8-f919-4fcc-9d44-5c38f56e68dd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facd09bc-3cb6-4897-9699-4adbd309bcc1", "sighting_of_ref": "indicator--941b143e-eef3-4e0e-83df-b0bc9b7c6c9b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29456bdd-128f-4e74-a4ce-eb6c5efa28f2", "sighting_of_ref": "indicator--777d1687-ea0a-4970-9b62-8f71a81f7b04", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d052f3-8f21-4fe9-a67c-cfbad3100b75", "sighting_of_ref": "indicator--7ed9246d-dbc1-4fb9-ae61-08c325100a03", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264cbb98-45a4-471a-898b-180332dcc727", "sighting_of_ref": "indicator--d7c7f936-6c97-486e-8b8f-ed2e49293af6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4519bf-bb79-43ab-bb41-c38f9b8ecea9", "sighting_of_ref": "indicator--d7d9bf40-e725-4bf4-b78e-b16f304ad344", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b405ee8-d1df-48c4-90bd-973663c00129", "sighting_of_ref": "indicator--ea864fbf-10f3-4c4d-89a5-d9e58a3e5a5c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed1a612-49b8-422f-a9d4-54cfab6c65b4", "sighting_of_ref": "indicator--ea864fbf-10f3-4c4d-89a5-d9e58a3e5a5c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f82b5f-8f1d-49ce-be4f-7a0ccd100c00", "sighting_of_ref": "indicator--2d7c5ea8-97fb-4553-affc-7f203c04ff51", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae69d3a-64d6-4363-b738-0bfa20676edc", "sighting_of_ref": "indicator--edeae91e-d035-445a-93dd-50e2c56320ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb4b155-8d6a-4f32-a47a-84b2dc74ecba", "sighting_of_ref": "indicator--edeae91e-d035-445a-93dd-50e2c56320ec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708813b7-fd9d-4501-8fe2-b7894e3bc7de", "sighting_of_ref": "indicator--edeae91e-d035-445a-93dd-50e2c56320ec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d7d81b-69be-4999-a05c-648a6f608c7d", "sighting_of_ref": "indicator--d4fc157e-4578-43ed-b194-3c2381a09596", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44b05aa-c87e-4e41-a81f-ee3dd526fbfa", "sighting_of_ref": "indicator--e611fde6-a62f-4f8c-8f5e-8c7dbdc9d9aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64854198-3173-4c6b-a9b4-fd9f23682379", "sighting_of_ref": "indicator--e60453f5-c8c1-444c-b7de-4b609edc00be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6159ea-1b28-4dff-99ab-240c94601bf0", "sighting_of_ref": "indicator--26a49964-a93e-48a9-911d-0e1d7ff8c54b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3ada54-f705-4258-91f7-0c286970ced3", "sighting_of_ref": "indicator--bb8f7f96-f5f7-4eb6-b6a8-4cdf76872c31", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa259d1-347c-42a0-bc97-ad699245303b", "sighting_of_ref": "indicator--64fb8868-f48f-43c3-a230-3c4e3d2a8266", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c18e52d-5017-4c3e-b2f4-297b028dd8c3", "sighting_of_ref": "indicator--3eb9fd47-5e21-4162-8d06-ba381875d6f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a2620e-c21d-4235-8984-4b4c0a6cefc6", "sighting_of_ref": "indicator--74dc4c3a-1d84-46a2-88cf-f3403cebabde", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e9a4ea-a690-41b8-820f-e31f108fe6ef", "sighting_of_ref": "indicator--74dc4c3a-1d84-46a2-88cf-f3403cebabde", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cca4c6-e1d4-4d1b-a4d6-f35d91979d03", "sighting_of_ref": "indicator--d6f9ce92-5045-4659-a314-4ddc2275e35c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027130f6-1cfd-49f9-a616-cadbd9855155", "sighting_of_ref": "indicator--a3b0b605-2ad0-4c2e-b322-d4efbf33d83e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4e22ea-8450-41bd-bd85-d2ec429ad971", "sighting_of_ref": "indicator--21e3696b-59b9-49b7-bd4b-246d6eb38c69", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40bd512-0743-4d61-98da-2bbc6b507be2", "sighting_of_ref": "indicator--21e3696b-59b9-49b7-bd4b-246d6eb38c69", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95e7995-c15f-4521-94b7-38a4f6accca2", "sighting_of_ref": "indicator--9fb02ff9-7275-473f-853e-6eed39a92952", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cd4a54-75d2-47e3-af8e-8562944b94a7", "sighting_of_ref": "indicator--9fb02ff9-7275-473f-853e-6eed39a92952", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e83619c-dce1-4641-9473-3118227638cb", "sighting_of_ref": "indicator--9fb02ff9-7275-473f-853e-6eed39a92952", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29684a37-0665-43b8-9f48-87d24647dafc", "sighting_of_ref": "indicator--b12612f0-e46f-4110-b7e7-543b4fd82d18", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1b6f83-1884-4284-b26e-90a20dfd5a42", "sighting_of_ref": "indicator--b12612f0-e46f-4110-b7e7-543b4fd82d18", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a946d5-2d1e-4b21-9353-f07b1b7afe9a", "sighting_of_ref": "indicator--b12612f0-e46f-4110-b7e7-543b4fd82d18", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084ed50e-f76d-4dc9-857b-3846e7e2eb9c", "sighting_of_ref": "indicator--939db87a-e9fb-4599-9a67-3c707955f083", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca294b6-f070-44b5-997b-5305295cf46c", "sighting_of_ref": "indicator--939db87a-e9fb-4599-9a67-3c707955f083", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65114ed3-6599-494c-bfdf-f4389ad2a155", "sighting_of_ref": "indicator--57132cc1-3797-42c0-8500-579bde0e0f5b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0db62a-e768-4b1d-b9fd-dc3be95abb4d", "sighting_of_ref": "indicator--57132cc1-3797-42c0-8500-579bde0e0f5b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556ca4dd-11f2-4474-a014-a5114f64c0b8", "sighting_of_ref": "indicator--9960e289-7d66-4b8d-8485-a15116ef74b7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a6381c-5fb0-4e58-9b06-d0289840efad", "sighting_of_ref": "indicator--eff5668e-bf25-4762-a943-09e6d56fe68d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ad6f68-702e-4848-873d-c3a150fdbad0", "sighting_of_ref": "indicator--eff5668e-bf25-4762-a943-09e6d56fe68d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6d2b51-9c55-4236-894c-71fa73580c36", "sighting_of_ref": "indicator--0b1705b8-38b6-42c0-8a67-7f2dbf56b404", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a789c641-f66b-4384-92f5-bb162279d326", "sighting_of_ref": "indicator--9c316c99-9305-4602-80d1-5ced2162996f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818a3286-c143-4a2f-8996-1a7415b18e51", "sighting_of_ref": "indicator--e8908e63-d27e-47b5-b4f0-da2caafb506f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad806c3d-a071-4a2b-b7ac-7b459924597d", "sighting_of_ref": "indicator--f3b7ffc4-1dc4-4f0a-beb9-75aa187e7440", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf481a6-3842-4a18-88be-6ed432e380bb", "sighting_of_ref": "indicator--18e32665-d130-46b9-993e-c2874d362ff0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c40158d-3914-4faf-9aa9-dce57460d0fc", "sighting_of_ref": "indicator--e9af0f2d-c5d4-436e-9b50-9ff9f55ee374", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d751dc82-4b89-40d3-8b7a-a66c2099cd99", "sighting_of_ref": "indicator--a0607c41-10d4-453a-a65f-0d2b2d6fe29b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a508e9c-dc17-4607-9de4-0a9b144756e1", "sighting_of_ref": "indicator--608ab9b6-d7b3-4478-81ce-6a068212da1e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf236529-7dbe-4f2f-a03a-06d23f590437", "sighting_of_ref": "indicator--5fd18a8c-4411-4c99-a76a-8d9d9f3ac9af", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c4cb79-476c-4e59-a7c9-c0a2c2464b17", "sighting_of_ref": "indicator--11a2376f-d30d-4ee6-aad4-59331a87e57f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e687584b-3a19-4365-b49d-84b2a9fb64b7", "sighting_of_ref": "indicator--8abce160-e4a0-4091-a490-04f56202b88d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12dcd1bb-e679-4a20-aada-57b11739b5c9", "sighting_of_ref": "indicator--e93d6050-5ac8-44ea-9b4a-3d40c907823a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87abe3b5-7627-48c1-98ab-78309f68d2a0", "sighting_of_ref": "indicator--e93d6050-5ac8-44ea-9b4a-3d40c907823a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43214427-a857-4923-b9ed-792e6b1f8aab", "sighting_of_ref": "indicator--4d137f8e-edfc-45eb-8d60-527e54ad8734", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb99046-e6f3-4a43-95d0-87133c094a60", "sighting_of_ref": "indicator--49867d30-ac66-4aa9-8b85-a13e2e4a9735", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814093de-890e-4331-bbd4-c76262354080", "sighting_of_ref": "indicator--49867d30-ac66-4aa9-8b85-a13e2e4a9735", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4035182b-f977-4762-80b5-6b7ada0a00f0", "sighting_of_ref": "indicator--643e34f5-1edb-4926-8911-e37beff4a072", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d89f1e5-2412-4fdb-8301-ea4e0192e5d8", "sighting_of_ref": "indicator--643e34f5-1edb-4926-8911-e37beff4a072", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdef7bd2-b79b-40fa-bad7-13dcc5dc6324", "sighting_of_ref": "indicator--8cf114f4-9b9c-436b-ab17-e77076f3105d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74520b69-3d74-48b7-b5b4-dda41688d114", "sighting_of_ref": "indicator--8cf114f4-9b9c-436b-ab17-e77076f3105d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25909fca-61ca-4a93-bd16-08c06732af0f", "sighting_of_ref": "indicator--f2a82d6e-eb34-42ca-bc29-781a08d01f37", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4351b8-4915-44dc-8efb-839adc22c31d", "sighting_of_ref": "indicator--466b12a8-ae7f-4078-8eb5-d0969cf6335f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecdb435-7c94-434e-8834-18dbcaddcf06", "sighting_of_ref": "indicator--da43d0b8-b5dc-49bf-95ce-7be87d48bb8e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6ab8dc-9baf-49b1-8485-bb36fc76bedf", "sighting_of_ref": "indicator--c32ac847-d2d2-4a4c-a634-a8d5d518dd56", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b78765-e035-42cf-a8e2-c91965fb86d0", "sighting_of_ref": "indicator--364efcf0-8416-412c-8e3a-febbd7018f53", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a4050d-f597-43b9-90de-dc96459bcb7c", "sighting_of_ref": "indicator--364efcf0-8416-412c-8e3a-febbd7018f53", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ab1eca-0ac0-470d-86bd-d926b999360d", "sighting_of_ref": "indicator--0d8f2e08-122b-4968-a6d3-4166ae231208", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68292ab-6653-41e6-9626-d2ae302cc42c", "sighting_of_ref": "indicator--be600848-2c3a-41bc-bbbb-8bea529309f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386c6af1-7d45-4c1f-b697-9977ab9e2af3", "sighting_of_ref": "indicator--be600848-2c3a-41bc-bbbb-8bea529309f6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e843ca-3b26-420d-ae72-d4cdfde21650", "sighting_of_ref": "indicator--da83ea0a-d769-4efc-b46d-3c4d590c3f27", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0dea1c-e66d-4003-8d92-c4a23debc115", "sighting_of_ref": "indicator--da83ea0a-d769-4efc-b46d-3c4d590c3f27", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c39ffba-5e13-456c-aa66-629ad2f26655", "sighting_of_ref": "indicator--9f89acd7-b7fd-4d6d-9658-b76c5abc16ed", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e6b144-036d-4fc7-a46b-7a83004a9f25", "sighting_of_ref": "indicator--6c07b255-d850-4a0c-858a-9735001a04f9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95df69d4-26dd-4a50-93d1-cfb32e910d74", "sighting_of_ref": "indicator--495f23bb-da4b-4ea0-8b8c-87e5e7614c79", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea629d9-1621-4302-9023-ede4353c360c", "sighting_of_ref": "indicator--495f23bb-da4b-4ea0-8b8c-87e5e7614c79", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f935a93-3af6-420b-bd8d-d89100ca692c", "sighting_of_ref": "indicator--72efb95f-ddd1-4044-a875-cdb9124bcb29", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad04f51e-c62b-4c0b-a2d7-da113936d401", "sighting_of_ref": "indicator--51ca208c-0ad7-4692-9ea3-000360ea7fcb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c1341d-f6f8-40e5-aa3b-7edfe5c31e75", "sighting_of_ref": "indicator--25b1650e-bc9e-4904-9be3-1378feb8fc80", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc48518-89da-4181-9dc9-5f623a874f7b", "sighting_of_ref": "indicator--43e125a7-09bf-41ea-b231-09034080c68a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1997cc2f-1738-4ab8-a2bf-d9f527d3fd05", "sighting_of_ref": "indicator--43e125a7-09bf-41ea-b231-09034080c68a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5599c08-52e4-4bfb-8699-70ba4d67adf1", "sighting_of_ref": "indicator--1939244a-50a3-4112-b953-373d8eb5ebcf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7edd7e8-87d3-4a01-bd65-34e715a2bc0f", "sighting_of_ref": "indicator--1939244a-50a3-4112-b953-373d8eb5ebcf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc109c4-b2b8-4564-937f-5fa3ef27fbec", "sighting_of_ref": "indicator--1939244a-50a3-4112-b953-373d8eb5ebcf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a04f0d-114c-45a3-8faa-853ee90d4c91", "sighting_of_ref": "indicator--7bc652e8-5659-4c53-8390-ae03b474dded", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d9bf6f-f844-4e19-9e61-d750f5ec0ef6", "sighting_of_ref": "indicator--3a5f0b0c-752b-49b4-afc3-ed5a7939535b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78599675-243a-4ee1-ba78-86adf8729ae8", "sighting_of_ref": "indicator--c247fcf6-b7d8-4638-95cb-a837af9551db", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8eedc4e-c33d-43c5-ae02-656857c394a1", "sighting_of_ref": "indicator--ed044506-e48e-4e4b-a286-cafcb312fe69", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a79888-8e38-447b-88a0-28e18f1895f0", "sighting_of_ref": "indicator--b7a74389-7551-4e4d-b574-52a31d66ae55", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2926fb-01ff-4224-9607-72c854c5e690", "sighting_of_ref": "indicator--9e7c8be0-8a1b-4118-a6f9-93b0c32e81ad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7341cf0-50b2-458a-9f0c-eef0be895617", "sighting_of_ref": "indicator--9e7c8be0-8a1b-4118-a6f9-93b0c32e81ad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51c0d88-eec3-4b73-9070-934fe51adb9c", "sighting_of_ref": "indicator--9e7c8be0-8a1b-4118-a6f9-93b0c32e81ad", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd648884-0a54-40e4-9a0f-ca14492169cd", "sighting_of_ref": "indicator--1ea6f2e0-b006-48b8-98f5-29533032d773", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35060e49-7a8c-4e9a-9ae5-f09d99ba0a50", "sighting_of_ref": "indicator--4e04c73b-6462-4469-b500-e39a5875418a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d72d86-84f0-47b1-9ec8-7c4cadab124e", "sighting_of_ref": "indicator--10f43449-8166-4537-8dda-0e971beddd29", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c8354f-2190-4e6e-b270-7ae16ecae55a", "sighting_of_ref": "indicator--10f43449-8166-4537-8dda-0e971beddd29", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc92c365-5fe2-40c2-b25b-bf84660c1464", "sighting_of_ref": "indicator--10f43449-8166-4537-8dda-0e971beddd29", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c97086-0fc3-46a6-8c49-1045e8275508", "sighting_of_ref": "indicator--e401fa95-8b6f-47ff-97de-7627797ef4f4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ada9599-dfb0-4fee-9b3f-4ae47e42b714", "sighting_of_ref": "indicator--e401fa95-8b6f-47ff-97de-7627797ef4f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5b1fb5-8c90-4415-9058-ffcd339cf990", "sighting_of_ref": "indicator--01645fb2-a0d7-4285-b318-a1095a27f0b1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c2d7cf-b779-47c1-98c7-39da86114544", "sighting_of_ref": "indicator--01645fb2-a0d7-4285-b318-a1095a27f0b1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecc8a1f-eb9d-4068-8b69-2223a5a91471", "sighting_of_ref": "indicator--01645fb2-a0d7-4285-b318-a1095a27f0b1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a31b52a-6e5f-417f-ab51-b73e1fadea68", "sighting_of_ref": "indicator--2267dcdf-e657-4bca-a218-351422eb9bb7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddeb7f11-a391-409d-94e3-c2c1d72eb666", "sighting_of_ref": "indicator--417ab5b9-0e0a-4639-a049-c6f481ad486a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a79cf1d-38e5-424c-a910-319ec7c7e5ff", "sighting_of_ref": "indicator--417ab5b9-0e0a-4639-a049-c6f481ad486a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fac91df-240b-477e-a836-45e5ec95ecde", "sighting_of_ref": "indicator--417ab5b9-0e0a-4639-a049-c6f481ad486a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdf4356-094b-457b-8f52-e569112468e5", "sighting_of_ref": "indicator--30629df5-c195-45ec-845c-44ebd85a1509", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1022f6-96f0-497c-a48e-d11278cf8403", "sighting_of_ref": "indicator--859acaef-cff0-4289-acbe-9954ac224ad2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870eac36-de46-4c8c-ac02-12f2282bab64", "sighting_of_ref": "indicator--83f09367-ed7b-417a-bbd8-48f2b0543af9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3786df-6d61-4e35-bd4c-3a590294e121", "sighting_of_ref": "indicator--83f09367-ed7b-417a-bbd8-48f2b0543af9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae07e8ca-3e84-43b8-934e-886bb45fd757", "sighting_of_ref": "indicator--83f09367-ed7b-417a-bbd8-48f2b0543af9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f927b4-a0d1-41bb-93df-262f9f538014", "sighting_of_ref": "indicator--47b63ced-9e92-4e3f-8563-097c780446f5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d932d719-26ca-4a4d-8d28-d15681ab914d", "sighting_of_ref": "indicator--47b63ced-9e92-4e3f-8563-097c780446f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22635c03-b92c-4fd5-87f7-685f763bc64d", "sighting_of_ref": "indicator--47b63ced-9e92-4e3f-8563-097c780446f5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdeeb4d0-e4eb-4943-9e09-2201ccd1e725", "sighting_of_ref": "indicator--534b6b01-5e57-4940-8808-23c4be7f1e7c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ad58eb-02d6-49f9-946a-97b13b596623", "sighting_of_ref": "indicator--534b6b01-5e57-4940-8808-23c4be7f1e7c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b536c1-1b9b-48ce-a891-6a2ffe5fa250", "sighting_of_ref": "indicator--534b6b01-5e57-4940-8808-23c4be7f1e7c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fd1e12-ad55-4de4-aa6d-9df994ecc69b", "sighting_of_ref": "indicator--cee14d97-da82-45bb-8168-d7fd332c076a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e2d3ad-2f74-4514-a8c6-e9d65ec0d736", "sighting_of_ref": "indicator--cee14d97-da82-45bb-8168-d7fd332c076a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50877d3b-f35b-40b4-8859-4a8ad0c10c9e", "sighting_of_ref": "indicator--cee14d97-da82-45bb-8168-d7fd332c076a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5103b671-6cc2-494d-a56e-720d61dbee17", "sighting_of_ref": "indicator--9acee02e-d199-432c-a192-47c2d3b1d693", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd0ddf1-16b1-4f59-ab07-78429ca0665d", "sighting_of_ref": "indicator--9acee02e-d199-432c-a192-47c2d3b1d693", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2843d84e-afc6-4d9a-bdd3-f83af1b2cfbb", "sighting_of_ref": "indicator--9acee02e-d199-432c-a192-47c2d3b1d693", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd36bfdc-fd0d-423e-be7d-08625ab7b821", "sighting_of_ref": "indicator--ae1261f6-0408-4117-99cb-59025cbd2392", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901ce220-04b9-4335-9978-3514e86e7c75", "sighting_of_ref": "indicator--3702ad6b-845a-4737-b20f-6f99dd05e552", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea0f227-e384-467f-873c-3d659473841a", "sighting_of_ref": "indicator--3702ad6b-845a-4737-b20f-6f99dd05e552", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb1b1b6-2ce7-4f92-a147-27a5cc0bc475", "sighting_of_ref": "indicator--3702ad6b-845a-4737-b20f-6f99dd05e552", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aefda36e-ecda-4ff4-8121-cf371bd844b1", "sighting_of_ref": "indicator--56a2071e-51dd-4ca9-bc34-b94b4b29589c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15f69d8-aa6b-4534-8026-6c262aae90ff", "sighting_of_ref": "indicator--56a2071e-51dd-4ca9-bc34-b94b4b29589c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505859f5-14ee-45ec-be16-4eb5eecbc3cc", "sighting_of_ref": "indicator--56a2071e-51dd-4ca9-bc34-b94b4b29589c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c84a6c-cf2b-40c2-8122-90ef41ac5769", "sighting_of_ref": "indicator--ba2c248b-744a-450f-924b-7315753eea3a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d7c152-f838-4409-9e38-8f472817fbb0", "sighting_of_ref": "indicator--ba2c248b-744a-450f-924b-7315753eea3a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c065af9c-55f1-4c30-8d5f-9fa83b8bdf64", "sighting_of_ref": "indicator--ba2c248b-744a-450f-924b-7315753eea3a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55334797-cc78-4f1d-8f80-83aba86d3cc1", "sighting_of_ref": "indicator--48380bf1-53b8-46cb-aa31-971b4fdec087", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30886ae3-4d12-4c20-9874-598a8aca854a", "sighting_of_ref": "indicator--48380bf1-53b8-46cb-aa31-971b4fdec087", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9640e976-72a8-4111-8a0f-5ec368b103ce", "sighting_of_ref": "indicator--d348843b-01d3-4332-8ac4-7e98fd4f3453", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a74e513-d14e-4051-99af-954fcad27ce0", "sighting_of_ref": "indicator--d348843b-01d3-4332-8ac4-7e98fd4f3453", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eca44bb-9a02-4504-94f3-aeae16af9d2e", "sighting_of_ref": "indicator--93f0fefd-9836-4313-9ef7-40e39e1e28e9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd1f085-3951-41fb-bde7-10faa4ab7cb1", "sighting_of_ref": "indicator--56b99d14-cc57-4d15-a9ca-0e689a4b83b7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972c4b75-f7e8-4fe3-87eb-b3bb87373ec3", "sighting_of_ref": "indicator--f4c5c80f-b8c5-4b70-806e-c4f9c27d4660", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1781ee96-bf60-4893-9e7e-21a798aa9049", "sighting_of_ref": "indicator--f4c5c80f-b8c5-4b70-806e-c4f9c27d4660", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b551a4cb-22d3-4022-b675-2f4f7d5f1aea", "sighting_of_ref": "indicator--46c01914-bd5a-4128-a415-df65e0ad1c9c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8c3866-f150-4567-973b-aab55a5416fc", "sighting_of_ref": "indicator--ca6a7168-0aef-4db6-b877-0a1713b08459", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7891e629-21b8-4b62-8f74-cbcb81f16a82", "sighting_of_ref": "indicator--d2cd4fd3-f5fa-4a51-96b3-02c2e575d11b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb89dd6-fbf7-407b-aaeb-37c9dcac5261", "sighting_of_ref": "indicator--d2cd4fd3-f5fa-4a51-96b3-02c2e575d11b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58bad2d-b6ce-4b3e-848b-49dc0176fa38", "sighting_of_ref": "indicator--d2cd4fd3-f5fa-4a51-96b3-02c2e575d11b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab31769b-fac5-467c-b0c4-d50158accdf2", "sighting_of_ref": "indicator--3398154e-bfd6-4a3b-a544-1fbe3b429d9f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06213079-c46a-41fb-9e0b-03bb417e900b", "sighting_of_ref": "indicator--3398154e-bfd6-4a3b-a544-1fbe3b429d9f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a691bc-73b9-44a7-b374-adfbbda50344", "sighting_of_ref": "indicator--3398154e-bfd6-4a3b-a544-1fbe3b429d9f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab70f44f-9363-4b26-80a4-8c5e89d9e716", "sighting_of_ref": "indicator--513ab4a1-e4fb-4667-8715-e922163cdae7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b22579-c219-4b07-b16d-ade390c5415f", "sighting_of_ref": "indicator--513ab4a1-e4fb-4667-8715-e922163cdae7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603c3fdd-9e1d-4b33-9c36-9adf3871eb50", "sighting_of_ref": "indicator--513ab4a1-e4fb-4667-8715-e922163cdae7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6338c342-bfd3-44c1-9ac9-ee5a5158210a", "sighting_of_ref": "indicator--1a0a75b6-e53f-4897-9240-d0b7d4c8b3d7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42052a91-ed4a-4119-a085-70b131e5ec0e", "sighting_of_ref": "indicator--1a0a75b6-e53f-4897-9240-d0b7d4c8b3d7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3feae09c-d797-49d1-94e4-4ce10c046d69", "sighting_of_ref": "indicator--1a0a75b6-e53f-4897-9240-d0b7d4c8b3d7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de82a11-e787-4cf8-8e75-ca5038ef335b", "sighting_of_ref": "indicator--d1692665-57a2-43c5-b717-319ad4591922", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b72315f-4e27-4e38-9a7f-fcd3795612ca", "sighting_of_ref": "indicator--d1692665-57a2-43c5-b717-319ad4591922", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d59337-98a7-4927-aaa0-5bfba1ffb881", "sighting_of_ref": "indicator--d1692665-57a2-43c5-b717-319ad4591922", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e21c07-8451-43de-a2a3-4f01885a64af", "sighting_of_ref": "indicator--41e4da87-d9b7-4431-b8e7-2787014ff474", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cd2177-9f48-41b7-a1be-d54a1ef8766b", "sighting_of_ref": "indicator--41e4da87-d9b7-4431-b8e7-2787014ff474", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e63c83-eca6-4a6a-8d53-14024b29360c", "sighting_of_ref": "indicator--41e4da87-d9b7-4431-b8e7-2787014ff474", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e81c5c2-3c89-4910-ab5a-be7bb2068047", "sighting_of_ref": "indicator--f17abcbd-834a-4508-85f9-01f6361bf573", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb58308-aa5a-4794-8c48-df55e07913ce", "sighting_of_ref": "indicator--f17abcbd-834a-4508-85f9-01f6361bf573", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502caba4-5a20-4e2a-84dd-b540e40e4ff7", "sighting_of_ref": "indicator--f17abcbd-834a-4508-85f9-01f6361bf573", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460056ec-dd39-4b67-80b7-e3f23338d54c", "sighting_of_ref": "indicator--16138f65-4eba-4e56-a64f-de8cc75ff861", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191eb875-ce84-46db-9bdf-a237a9e6b891", "sighting_of_ref": "indicator--16138f65-4eba-4e56-a64f-de8cc75ff861", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bcb81a-6233-4ec5-8c6a-61bf10feedaf", "sighting_of_ref": "indicator--16138f65-4eba-4e56-a64f-de8cc75ff861", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf44d2ce-11d5-4d04-aacf-91d50449afe5", "sighting_of_ref": "indicator--0b337e98-7d24-469d-b830-dd4f6cfdd6a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3656a71-95e1-4c29-9cf9-16b7be4120de", "sighting_of_ref": "indicator--0b337e98-7d24-469d-b830-dd4f6cfdd6a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a83618a-8900-4644-ae76-3d116455ea9c", "sighting_of_ref": "indicator--0b337e98-7d24-469d-b830-dd4f6cfdd6a5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c9f716-9fad-4c0f-b7fa-7f7801a511cd", "sighting_of_ref": "indicator--8b3a99ff-9192-4e69-a801-8bdfe6407354", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26398711-17ee-4325-897b-223e20f52bb1", "sighting_of_ref": "indicator--8b3a99ff-9192-4e69-a801-8bdfe6407354", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc65501-59eb-4834-aec9-2b8b8e67afb8", "sighting_of_ref": "indicator--8b3a99ff-9192-4e69-a801-8bdfe6407354", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadb06a5-9671-41d7-9501-68873b0e8833", "sighting_of_ref": "indicator--c620ac1c-9e0b-436d-aa52-97656cf7843d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba393a9-84d3-4000-972b-7a02358d0d0c", "sighting_of_ref": "indicator--c620ac1c-9e0b-436d-aa52-97656cf7843d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3eb2f50-50eb-4676-b65d-cc1e95e54050", "sighting_of_ref": "indicator--c620ac1c-9e0b-436d-aa52-97656cf7843d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631ef8ed-e174-4ab7-a145-eb14c88c0528", "sighting_of_ref": "indicator--5f5f9ef3-2792-4b46-b047-f319ab0ffdb5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa83a0c8-274d-4f4a-8d49-5ee665ca2328", "sighting_of_ref": "indicator--5f5f9ef3-2792-4b46-b047-f319ab0ffdb5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c62e1ec-8d90-4be8-99ad-8dae859e0023", "sighting_of_ref": "indicator--5f5f9ef3-2792-4b46-b047-f319ab0ffdb5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c8a83b-bbda-4673-819a-e88a568abbfd", "sighting_of_ref": "indicator--deb9904d-8553-4445-876e-195028c096f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86be2e5-c8ee-4f3a-ad45-77ce4e404ec7", "sighting_of_ref": "indicator--6d500f53-5e0a-4d65-8434-7096f17f9c05", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf77471-8e82-4bbf-aad4-714a8df1a2c8", "sighting_of_ref": "indicator--d2b865ca-71d6-41d4-a862-896451d8b2d9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf349075-7f87-4fbc-b8a8-2e64e64cdd41", "sighting_of_ref": "indicator--d2b865ca-71d6-41d4-a862-896451d8b2d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20cc79c-c666-44a1-ba97-084ed9c12bff", "sighting_of_ref": "indicator--e2e1dc9a-c6c4-4efc-96e6-075f11137943", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b926911-615c-4155-aeac-3864b887837d", "sighting_of_ref": "indicator--0b08b7e4-44d8-4b08-8476-82b92495bef8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a83f6c8-9950-469e-be38-77b10026ef2c", "sighting_of_ref": "indicator--1bfc7b44-ed7f-49e7-87ed-f115f39d67f0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c189bec8-1b8e-479d-b005-378cba3688ab", "sighting_of_ref": "indicator--3f142fc4-1cf3-4d62-b2b9-c9c400b75292", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ba83f5-092d-4c52-a39a-95766a79026b", "sighting_of_ref": "indicator--ebcaf236-5137-46f5-9c8f-f4d4fcd9abe1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2d1c1c-9b6c-447b-9088-6d45e6694c83", "sighting_of_ref": "indicator--2c3ca0d9-ebf9-4025-a263-343113b97c70", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ed1e57-4b72-4431-8d46-5a0a553d3ab4", "sighting_of_ref": "indicator--19e61592-9a65-40a7-a3d3-6170d2698fa5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fda4b1e-c7e4-4994-ab20-09da47be43a8", "sighting_of_ref": "indicator--76b872aa-4342-4d24-abf4-632d424d4363", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4920cc6-18f7-4bd6-a0d9-cc96bffcf1ef", "sighting_of_ref": "indicator--ddd0835e-632f-4aac-9854-3d5ad0fc20fc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1263fbe0-22f5-461c-940b-d998619dc087", "sighting_of_ref": "indicator--ddd0835e-632f-4aac-9854-3d5ad0fc20fc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272f3dbb-e255-4131-bba3-1e677c3b8b17", "sighting_of_ref": "indicator--ddd0835e-632f-4aac-9854-3d5ad0fc20fc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7643f6-6761-4318-8206-4208c43f2521", "sighting_of_ref": "indicator--fc72d633-14e8-484e-9f85-e26e872ab157", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2d78b1-23ad-45a6-8ec6-421137909f5c", "sighting_of_ref": "indicator--fc72d633-14e8-484e-9f85-e26e872ab157", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de405e3-a482-4839-b8d5-56d5a7048391", "sighting_of_ref": "indicator--fc72d633-14e8-484e-9f85-e26e872ab157", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1bd08f-be9e-4a30-92ae-68d858fecd6f", "sighting_of_ref": "indicator--b1090a11-8e1d-492a-9dc7-452564b6096e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f773f4b3-e451-4837-b953-cd82581de77b", "sighting_of_ref": "indicator--b1090a11-8e1d-492a-9dc7-452564b6096e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ff5ddf-88c7-40e4-b683-eadf6437821f", "sighting_of_ref": "indicator--b1090a11-8e1d-492a-9dc7-452564b6096e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dac980-2b0b-4532-b070-c3e0b659afa4", "sighting_of_ref": "indicator--1a871df3-d0e7-41c6-81af-4bcd495d2cb0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c549abc6-9101-4d8e-8819-7380449f371c", "sighting_of_ref": "indicator--1a871df3-d0e7-41c6-81af-4bcd495d2cb0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba1c848-dad8-4f48-8aaf-4ebae475b970", "sighting_of_ref": "indicator--1a871df3-d0e7-41c6-81af-4bcd495d2cb0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2457eb79-7a9a-44e1-a7b0-bfa65924dd7e", "sighting_of_ref": "indicator--403e9332-fd2c-4bed-92bc-d3764444f2c1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04632543-4415-4a42-a685-72b0dc1fe7f6", "sighting_of_ref": "indicator--e0fb4a09-0920-4819-ad82-b42123462e3b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cae32e4-469d-47ff-b3af-2a0f150a453f", "sighting_of_ref": "indicator--e0fb4a09-0920-4819-ad82-b42123462e3b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce49ffd-30c2-44a5-bfe9-e20738cc8bb9", "sighting_of_ref": "indicator--e0fb4a09-0920-4819-ad82-b42123462e3b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbdf715-2841-4350-825b-7005fc9d62b5", "sighting_of_ref": "indicator--0f584fae-151b-489c-b371-ac1eb295aaab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac2b5f8-9f15-41cd-b8bc-bc0edeafc829", "sighting_of_ref": "indicator--0f584fae-151b-489c-b371-ac1eb295aaab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bd5910-c3f2-4558-ba6a-9941a72b1497", "sighting_of_ref": "indicator--0f584fae-151b-489c-b371-ac1eb295aaab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1b0618-87be-4e2b-9321-665b6aaf4cf7", "sighting_of_ref": "indicator--12581c9c-8f94-4ba5-aa56-e6bc37d95368", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a842310-15c3-4fb9-8d27-71ad94db34bf", "sighting_of_ref": "indicator--12581c9c-8f94-4ba5-aa56-e6bc37d95368", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ab9303-50ac-41e2-b59a-9f57daa57ea3", "sighting_of_ref": "indicator--12581c9c-8f94-4ba5-aa56-e6bc37d95368", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6b19a8-cac6-4529-99bf-28573709067f", "sighting_of_ref": "indicator--43b99f82-fe3b-49d6-8c95-d7082aa06ff5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d386bf29-23e7-4acf-bd33-ab27954368a5", "sighting_of_ref": "indicator--43b99f82-fe3b-49d6-8c95-d7082aa06ff5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac52d39c-309b-41a3-b162-0ce3df039190", "sighting_of_ref": "indicator--43b99f82-fe3b-49d6-8c95-d7082aa06ff5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa6b667-66db-4e87-896d-2318693d1b11", "sighting_of_ref": "indicator--134b1c45-a029-4107-9b6a-b65ab4c1671f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389d79af-6f8a-4b34-812f-1925c558d76c", "sighting_of_ref": "indicator--134b1c45-a029-4107-9b6a-b65ab4c1671f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d7edf8-60ac-4f03-b925-087ded1f6521", "sighting_of_ref": "indicator--134b1c45-a029-4107-9b6a-b65ab4c1671f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba3d1e6-8e3c-4b42-93d9-933f1362b2e5", "sighting_of_ref": "indicator--1028cd78-32fe-4cd3-a0de-51ab5df58c23", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03c4e74-560b-42bd-85f6-6f895b07d3b9", "sighting_of_ref": "indicator--1028cd78-32fe-4cd3-a0de-51ab5df58c23", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82510e96-ef0d-4a0b-8143-6f5c285499c1", "sighting_of_ref": "indicator--1028cd78-32fe-4cd3-a0de-51ab5df58c23", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f2bd14-2279-4423-9aad-0a84b30dd360", "sighting_of_ref": "indicator--3c244e4d-a1ee-40c3-9aed-d69b0964a841", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e2e168-294c-46f3-8bb9-caea8e64b6c4", "sighting_of_ref": "indicator--3c244e4d-a1ee-40c3-9aed-d69b0964a841", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c261c487-2554-4dfd-9daa-8bb86a69844c", "sighting_of_ref": "indicator--3c244e4d-a1ee-40c3-9aed-d69b0964a841", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3b19f1-2330-4fb4-ad41-c46ef0e9dcf9", "sighting_of_ref": "indicator--45344fe4-1805-4041-a389-81a1e4fbecca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64aa1ea3-7199-43c3-a556-63b75e4870fe", "sighting_of_ref": "indicator--45344fe4-1805-4041-a389-81a1e4fbecca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1236aefc-793e-4080-a253-bed50b0fb256", "sighting_of_ref": "indicator--45344fe4-1805-4041-a389-81a1e4fbecca", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df9ba68-e299-40e7-8796-cb4397e26392", "sighting_of_ref": "indicator--a9ad5296-0a6e-4683-b306-48d327a6f6a3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e511ca-96f3-4aa8-bd28-64d3ef875db9", "sighting_of_ref": "indicator--a9ad5296-0a6e-4683-b306-48d327a6f6a3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9ee5e8-ef0c-4afc-bbf7-fd61f1937166", "sighting_of_ref": "indicator--a9ad5296-0a6e-4683-b306-48d327a6f6a3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6018d1-674c-4b24-8bdf-a731da58f31c", "sighting_of_ref": "indicator--a5bb5871-5a8d-4b84-b669-9f67aaf070a9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211a5297-ef1e-45e4-bec2-bd5658c3e623", "sighting_of_ref": "indicator--dc6a394f-a6a1-45bf-9e2e-ee78ca8d5128", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d5b44e-8186-4d4f-bc91-77762b3b1104", "sighting_of_ref": "indicator--dc6a394f-a6a1-45bf-9e2e-ee78ca8d5128", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f48e65b-d264-48ff-aa82-1adc146fff08", "sighting_of_ref": "indicator--4499238c-ee81-435e-93f2-eb0cf293de6a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f87fbb-8488-4b6a-8878-c6fa0a0ffcec", "sighting_of_ref": "indicator--4499238c-ee81-435e-93f2-eb0cf293de6a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6a3d57-ad0f-4050-a5fc-6bb2a40a2c9f", "sighting_of_ref": "indicator--2327814e-d60b-42be-bfb1-667f54fc7072", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc85af5-03e0-4696-97b4-da3a135a055d", "sighting_of_ref": "indicator--2327814e-d60b-42be-bfb1-667f54fc7072", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b86d60-9cef-425f-a97b-ff750405dd4c", "sighting_of_ref": "indicator--2327814e-d60b-42be-bfb1-667f54fc7072", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c916a2f1-ece5-4483-b447-95883a517598", "sighting_of_ref": "indicator--d2766be7-6eff-45b3-8400-07f0cd490ca1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fac33f-cd3a-4e78-9123-41710999e11c", "sighting_of_ref": "indicator--d2766be7-6eff-45b3-8400-07f0cd490ca1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d1649f-432c-456e-9fe8-a23339de2af2", "sighting_of_ref": "indicator--09f8630e-ae8e-4ca0-9928-50e9ef98ed53", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0627dd-cbef-4ee7-b55f-6a9c938606fe", "sighting_of_ref": "indicator--7b8ae977-15c7-4517-a9a9-4635769397ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59b47b9-60ff-42c1-ac90-129f1aebe4fd", "sighting_of_ref": "indicator--41b1e295-cfa2-4a4b-b928-3161433ce735", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa7b689-6c66-4ba1-9bfe-529a7e05befb", "sighting_of_ref": "indicator--00866d26-76f5-4932-a330-9d0a3677426c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ab7159-0a2c-4535-88a9-868f52cb23ab", "sighting_of_ref": "indicator--14c7d883-3428-4a29-a002-5ada4a6db4b4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb96c8b-72fa-4d74-ac28-164ece64ba25", "sighting_of_ref": "indicator--c0331afa-a140-436b-bf8f-50c5ad201dcc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0faec284-9d43-4c5b-a7a4-2dcc0288e178", "sighting_of_ref": "indicator--705dfb8f-54f7-44f9-9355-31214b76c19c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136526ae-4752-440a-b9c8-8dbc4c1ab585", "sighting_of_ref": "indicator--8546a133-7247-403a-b63a-e46335610327", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452ab195-9bd0-434e-8923-4c0fe3223483", "sighting_of_ref": "indicator--7cf315f6-9b71-4274-a937-518b7641d853", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed21d973-011d-41f1-afdc-8105f3f0d259", "sighting_of_ref": "indicator--d75c3f86-1d51-4079-b3f1-a404bbee905f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4d9a76-c25a-4e92-98f0-920598c783c3", "sighting_of_ref": "indicator--cd300370-4b9b-45e5-94d6-4441e2cbd4d1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427cd2f9-b49b-4c38-97e8-a675cdab1de9", "sighting_of_ref": "indicator--cd300370-4b9b-45e5-94d6-4441e2cbd4d1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58038dd1-3b9d-43ea-b695-61536031df2b", "sighting_of_ref": "indicator--a4eb5d98-713e-441b-a924-aa91ca8414d8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a769b4-fa71-4916-9f48-c93b612806b8", "sighting_of_ref": "indicator--1c49f034-2151-4e10-9439-fd713ccfa4a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0af02a-1c56-4de3-aaa1-002c76c98214", "sighting_of_ref": "indicator--5d15214a-e6f4-4dfe-8d50-3747081b3b46", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56715e7f-b27b-4fbb-b6f2-8b0312a88804", "sighting_of_ref": "indicator--5d15214a-e6f4-4dfe-8d50-3747081b3b46", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75cd7903-9ba4-4b6e-8153-26c240767ca7", "sighting_of_ref": "indicator--73e2b2f0-497c-4a10-9084-6bdff212955f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382f3f94-7e37-4c9e-9263-ecc4b3c53b1b", "sighting_of_ref": "indicator--5f9dd25f-f28e-4b25-abea-4b83cc021c7d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c005bbf-5e7c-4f6e-909b-e25bb867eb24", "sighting_of_ref": "indicator--a789b5f2-f961-4299-b6f4-47788772ba93", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248c29e3-24b3-4c44-9284-8c3540a39138", "sighting_of_ref": "indicator--d460e927-0e0a-488a-a06d-b0ecafd171c6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d734e81-920c-4f6c-8cba-2f5b27b8e806", "sighting_of_ref": "indicator--1b0a04df-0a0a-4e92-a1f1-ae996015c652", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342fc113-7573-451e-942c-f4f442f3308b", "sighting_of_ref": "indicator--58922d68-d3be-460b-8f88-1bc0f0ce04f2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e249d6b2-31ec-40ec-9e63-f48a6144e37f", "sighting_of_ref": "indicator--97a21e71-fe62-4514-9c0b-b2f19f3ee4bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d000d80f-4ac1-4e1e-ba95-1fe5fce32054", "sighting_of_ref": "indicator--7e8208a1-72f3-4a78-8361-54d76c0fbad7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843979c5-7f99-4bd7-8476-2601445d9722", "sighting_of_ref": "indicator--4140965b-12c4-4751-aa5e-af498bba459d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b418c1-5793-4588-8e98-8a8600bea5db", "sighting_of_ref": "indicator--64a2deab-43bf-4efb-9091-2fd8fbe7b0a8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab6c2e8-9592-4ab9-a294-e1490b21d472", "sighting_of_ref": "indicator--f926ff73-3799-49d1-b2c2-78b2aa831bbd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d920e2-a01e-4853-adc1-6b5c90f3e630", "sighting_of_ref": "indicator--924dcb45-a379-4dc6-82b5-60de5244ea9a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44500b69-aff9-4c6b-94db-b118ca6c32ad", "sighting_of_ref": "indicator--77f53419-3c8e-412e-960a-d58722a37a4b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f62b00-2c1d-4424-b399-0e0e19722523", "sighting_of_ref": "indicator--a320ce7d-c268-4bc0-83a7-12ef87e83f54", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e84b01-f563-42f8-9bac-27131774ae50", "sighting_of_ref": "indicator--c5c8277c-9aa3-4bb7-92a9-0107a1ca8320", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6ab42f-6a74-41fb-828e-abd673b4471b", "sighting_of_ref": "indicator--b386d60e-f107-489b-83fa-3586e0122439", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ee09eb-2e43-4ea5-9494-601fd4ae16a4", "sighting_of_ref": "indicator--1aee269e-9ff4-4610-8381-6d9132b01b95", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8394b693-6990-4165-9247-5bce2ee1092d", "sighting_of_ref": "indicator--fdf2214a-33ad-4aa8-a72a-1858d34469fb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa08f69-b48f-4f4a-98b2-105fc4bba6de", "sighting_of_ref": "indicator--08868d54-9f12-46bf-8263-3c0506de4f38", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660fcb5e-1fde-470e-aae4-7fd6d7cb060e", "sighting_of_ref": "indicator--bcdceae4-5b68-4048-88e3-1f536471f8f7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43643ff5-8f15-40cb-9ec4-2574b3951375", "sighting_of_ref": "indicator--36a5979d-436b-4ae2-a825-a7a3e026a4d7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69b7ae7-875d-4da0-a098-47bbbc29faf1", "sighting_of_ref": "indicator--20f970e8-53ad-4c9a-ab08-619c1872d188", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c09403-5550-4bfa-aaa0-a1301b83725d", "sighting_of_ref": "indicator--e244468b-9415-4108-8bb5-5ef0ba322657", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6475bcf2-9054-444a-b70a-3f4809cc5bcc", "sighting_of_ref": "indicator--e867de3c-d61a-4240-9a3a-8c4ad210a81a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c19523-be98-4289-aee1-ec3a542dde56", "sighting_of_ref": "indicator--e731dca7-a27f-4bef-9cdb-b66edcefb536", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ce25f0-f170-415b-ac9a-e321bf02b286", "sighting_of_ref": "indicator--216362b7-b993-4322-823e-ff1384bf6876", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b568c697-3eab-42db-be22-d93d14ba19a6", "sighting_of_ref": "indicator--be5f41de-29e9-40ee-a436-268420198b38", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fae800-0400-4af4-bdf6-0ca2af0302e6", "sighting_of_ref": "indicator--e47b7c99-ebb1-4e04-825b-21fad4cae0be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b94c8b-7639-40ed-99bd-183601746e9f", "sighting_of_ref": "indicator--1c9ccc90-ba99-4893-a2c8-cb551629fa1a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf8fce7-7442-4362-8b53-8bd8e0d2c2b1", "sighting_of_ref": "indicator--1c9ccc90-ba99-4893-a2c8-cb551629fa1a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21582e5-ef2b-4805-a41a-2b6b1cc57947", "sighting_of_ref": "indicator--6b83adbc-4b0d-4c45-8e69-369fd262fc76", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c49b4ff-2255-4548-b64d-534f277c53bf", "sighting_of_ref": "indicator--67c17987-c085-4549-95a0-9ac549c5bb01", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63edabbf-0145-4541-b2e8-12654fac01fc", "sighting_of_ref": "indicator--f8e10172-96c5-4e18-9313-064dc0fc10c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637bb1f0-c8f7-4050-a6d2-77892a148bf8", "sighting_of_ref": "indicator--4e0d5f37-a104-4930-b6a3-c8c64a302e4a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef92a59-e1a6-4459-879e-94b544910309", "sighting_of_ref": "indicator--54f61ca4-e932-4f7e-ae88-dc7f4c198060", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6d66de-dc94-48de-974d-bb6d38074d45", "sighting_of_ref": "indicator--2bc54561-8b9e-48ec-8186-4a1218a71997", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8557408-c093-4a60-a11f-3d856ed948e0", "sighting_of_ref": "indicator--1d522811-8d88-418c-8158-98ceae631eeb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e107a0-61ca-4b58-9ef5-36c9bca24059", "sighting_of_ref": "indicator--eeaf4ba7-1694-436d-80fd-3cb97a0a1500", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0170f04d-9f5a-4dc7-b504-32c1bfedd4d7", "sighting_of_ref": "indicator--7737fcfa-1830-4919-9667-7ec6085f2af5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe74d7cc-6b95-4db9-8823-b1220c25ee13", "sighting_of_ref": "indicator--80dde970-9077-468c-b9dd-68b810d6ac52", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b805f6-3528-4623-9023-895fcab87262", "sighting_of_ref": "indicator--0e096148-fc4f-4e01-8e9a-4d2a69a822f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c1de10-0531-4ec9-80a5-2c0e9d55270c", "sighting_of_ref": "indicator--6dbbd8ae-61c2-46d4-904c-6b6dce379ed0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4450acca-d22b-49da-929d-f7291f38c63b", "sighting_of_ref": "indicator--6e4e7b18-a4b4-441a-86b8-6c27461e286f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977ef83b-2092-43dc-b68c-90faa7d4bd8d", "sighting_of_ref": "indicator--500f25a5-c975-4c71-8120-9da3ca2da6c8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03da49a-e4e8-4ad9-a110-ac8590a0ee29", "sighting_of_ref": "indicator--59312b7c-b944-4ed9-bd25-8903a6c01786", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b53190d-1dc3-4e22-b116-d2ac9d82041d", "sighting_of_ref": "indicator--48591730-22a8-46c6-8730-d8b33e2b8635", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831dc845-6b96-4991-abc4-b1718c6202f3", "sighting_of_ref": "indicator--80664e18-59ba-417c-99f5-c81ac88df2a7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25665937-de86-4e13-8c4a-2266cc50a1af", "sighting_of_ref": "indicator--80664e18-59ba-417c-99f5-c81ac88df2a7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10add41c-1d76-4038-af44-14e2e4a93322", "sighting_of_ref": "indicator--754ff1f6-eb49-4630-b013-b9bc4147c618", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead99711-1ef4-41ef-a469-2ec51522aa29", "sighting_of_ref": "indicator--10539c89-6f52-401e-9f17-55b2e673fede", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a20b49-e273-4c61-bd4c-736a6db39733", "sighting_of_ref": "indicator--366aef0b-6c47-447a-bcb7-34d2c31c5f69", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41668599-4ac7-49a2-a334-2911bfc6de4e", "sighting_of_ref": "indicator--3238d12e-5432-42aa-9329-2b71ab310c6a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78d6a27-8199-47a3-b5ff-1b63ed70e375", "sighting_of_ref": "indicator--bc059937-7a91-4626-9b70-5f8870f890ce", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c6db63-44c7-4c1b-aac7-33328a94a863", "sighting_of_ref": "indicator--de27c254-b613-471d-ae38-7e390bfba3cd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e716aa85-792d-441c-a8d2-d8c7f7069207", "sighting_of_ref": "indicator--0c18575d-a0bb-4221-90de-e18b60d1edbd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197e115b-806c-46c0-beee-6a1c3b2ddfcd", "sighting_of_ref": "indicator--0c18575d-a0bb-4221-90de-e18b60d1edbd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88801362-eb31-450c-aa35-d73599b98ff5", "sighting_of_ref": "indicator--9d23b8fb-6274-4767-bca9-ae8e1a42274f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e1dc4f-8079-48db-80ca-d1b7b9c5e884", "sighting_of_ref": "indicator--59164ea3-fc4d-43ee-96c7-31b73c709df8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fefa567-7d20-4668-9205-7c53392bae5c", "sighting_of_ref": "indicator--4b4e82d0-ef37-42c4-99d3-dfef0b9cf6a4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9ec175-2fd5-4015-bf45-a7ee73eb5ebe", "sighting_of_ref": "indicator--14681f8f-799b-480e-9a5c-b4d98acb0f77", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d346107-edf3-4197-8ad1-448a8a1d7a16", "sighting_of_ref": "indicator--21db3c47-1c1b-465f-8cea-b9963ede8bc5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee22202-e0b9-4f14-8f43-81c54ec6deaf", "sighting_of_ref": "indicator--80f8d515-ebf1-46ec-b6ea-c8924145565a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a405e55-b449-487f-abb0-78b646619dcf", "sighting_of_ref": "indicator--ee40db0d-7c32-4e4c-a65b-e2d693061839", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73632810-d9d8-487b-a0b4-719eea680c76", "sighting_of_ref": "indicator--55a111dd-b1c6-4e53-84a5-5572e93c92c4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0b6cdd-745b-4504-ac67-5ed0dc1bf976", "sighting_of_ref": "indicator--c3e114fb-2c01-4e1d-bb26-6dce92b1a627", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db35b1f-04ce-49e6-823b-441d343832c1", "sighting_of_ref": "indicator--6b4962cc-c79e-4e5e-b53d-e34c5d63cefd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e16411-f2de-4338-a4af-e5b2e2f97f5e", "sighting_of_ref": "indicator--52031cec-49a5-4236-b772-fe82f1303f2a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e47e662-ad0f-4e07-b466-2f68c7dda5e7", "sighting_of_ref": "indicator--a4b49a46-63be-4013-98e2-8b249519f0b2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49c0f68-4e16-4df1-bff6-2ca9cfabf419", "sighting_of_ref": "indicator--f8cdc332-3ab7-44a7-8309-e8ce681fb3d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39221e92-8297-445d-8c80-5218e0c4f28f", "sighting_of_ref": "indicator--8cea29f3-55ae-48f5-a661-4859563887c7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257275ab-275f-4fef-8f2d-15461177dd13", "sighting_of_ref": "indicator--4d87bfa6-c960-4870-82d5-9675a3233e87", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562278c7-d705-48c8-9d18-7863b4667332", "sighting_of_ref": "indicator--5cf6207d-50f8-4070-9edb-791b69f7688d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce19f3f5-24fa-4c61-9bfd-5a0ede4926d0", "sighting_of_ref": "indicator--6e3b9c82-e0c0-41ed-8d56-4d3dc6fad25a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6b6c2d-d80c-4238-af6e-ad6495b07504", "sighting_of_ref": "indicator--adef8bcb-a4af-4bbb-a040-0b1f6b2e28d7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0ae5fb-2b01-4c70-81be-7deba1f11e81", "sighting_of_ref": "indicator--1e522ed6-d72c-44ff-afb1-a6c5fd5d1faa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fac92e-a849-412c-b2f7-24fdddc18a3b", "sighting_of_ref": "indicator--68c019f4-c611-451d-8a43-6f0a52b2662c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0329572-c0cf-4132-84f3-6b057c864974", "sighting_of_ref": "indicator--5928a6a2-b035-4293-8b1c-5334f30a467f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0997520-55cd-433e-ad1d-7a1330c90b43", "sighting_of_ref": "indicator--7f6eca43-10b3-4a6f-9ea1-45b1edcc7c48", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7430c9d0-b701-4980-8e00-3ede47b2f557", "sighting_of_ref": "indicator--ec7fa9be-dfba-47c3-9732-b006b9db831c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2eee2c-7bdb-4284-bc20-6057bf7714ed", "sighting_of_ref": "indicator--c7666fd2-6882-4654-b0ad-d07c85fc3d66", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f15a83b-7859-4c74-aa7c-786dacade66b", "sighting_of_ref": "indicator--d9c37d03-a933-4c11-bdf0-fb558bb0f300", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a63c91-41c3-44af-b6ab-ddeddaa900ed", "sighting_of_ref": "indicator--576e7249-c940-4f1a-ba64-e20d46ae7fd0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64f54d1-7fd1-41c2-bb8e-c2b45a14fc85", "sighting_of_ref": "indicator--e5543332-928a-481d-86db-549e57dd1f62", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa956bb-489f-4e21-ad08-09e8717046fd", "sighting_of_ref": "indicator--8cfe6c5a-ced3-4816-abf8-93d1f2d2b547", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b41aa2e-ab73-40c6-bed9-bdfc420c70b9", "sighting_of_ref": "indicator--4bd8b1cc-3776-496f-be96-d948f9449b8b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6609a632-4d17-4b64-b9c8-d1da1bea36a5", "sighting_of_ref": "indicator--9d006eae-fb89-41bd-9a72-397d3ed9a763", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ddc1592-e12c-4577-82ca-81d962b33a65", "sighting_of_ref": "indicator--275700af-1f8d-4fe7-ad26-945d70a38138", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c8b69b-cd32-4522-9620-c5b2a903feee", "sighting_of_ref": "indicator--05b88e06-fd65-4273-a19e-ba54e741fae2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19eb336b-a7d8-4a2c-b121-367de4d90f85", "sighting_of_ref": "indicator--8d7852a9-0e91-48ed-9af3-ba2db97e45d1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1674b9c-70df-4232-a8af-86a6aa0da52f", "sighting_of_ref": "indicator--8d7852a9-0e91-48ed-9af3-ba2db97e45d1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4704da92-2d0b-4bb1-8fb5-18231f3e19d7", "sighting_of_ref": "indicator--4cd3f28d-6b7c-4efc-b66c-68b6928fb491", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3b99d1-63cf-4ad0-ae7b-6844dfe76f92", "sighting_of_ref": "indicator--3a785a46-437d-46d6-91c3-cf3719d35c04", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e695cfd-f88f-467c-95e1-40bfbf797b9c", "sighting_of_ref": "indicator--b8be2cbc-7427-4244-9568-592ad1c944ce", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9559f494-5a0d-46ec-8dc7-b7d0ed540289", "sighting_of_ref": "indicator--181e617d-c6a3-47f9-a2c7-ffb1bcb5b5e7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e49353-a45a-4454-b5a3-eb4b7e36b82e", "sighting_of_ref": "indicator--7a80c9b8-7f2d-4a08-aeaf-d51c2d7a1eb5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e13ab8c-634c-443c-a2b7-733d0fb6c4c6", "sighting_of_ref": "indicator--af81e412-3a37-4ad1-8da4-a06ab43b1a15", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1790589-9a8f-4024-b5b2-9cd1ce517812", "sighting_of_ref": "indicator--2e56d846-db93-4738-86ab-29ac7325268a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e7c0c7-4833-46b5-a10f-994bc36b3323", "sighting_of_ref": "indicator--e1e49a01-d8bd-4815-87d7-8f74e097603e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa07471-9326-41cf-8602-25f741279443", "sighting_of_ref": "indicator--d4e6a0d8-a351-40ad-ad58-2307bcddde59", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74a4eeb-4e2d-456a-b8da-f5752fd39d22", "sighting_of_ref": "indicator--556088dc-d00d-4544-8ab7-c9ac7bb295a5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dc7647-b473-47ed-aa88-73394423fc68", "sighting_of_ref": "indicator--252c5081-8d92-4de6-84d1-90735074f0b5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee598f3b-2b92-48b7-95fa-dd3bfd732b39", "sighting_of_ref": "indicator--ea03e2e9-db19-4e1f-9dec-aa627798e6ce", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88a48af-d5bd-4b27-a10b-168c5bb3de4d", "sighting_of_ref": "indicator--a0386f0e-c83a-48c2-8e3b-3c0b4ce6cb94", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7284268b-18ce-46cc-b56e-3aa10f9225f2", "sighting_of_ref": "indicator--000fa58f-1321-4390-b272-8649c354a2f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0056cd-b4dd-4529-a70c-a13cc6371046", "sighting_of_ref": "indicator--360ab7e6-5d20-43be-b680-ae5ce43a5250", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7798f7-d954-4857-8810-0ee3599fcfa7", "sighting_of_ref": "indicator--1581ed86-919e-4638-9514-821f923bbe27", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa69b4c6-9f3b-4b52-92d8-bfd40c22e004", "sighting_of_ref": "indicator--04b0ee11-420a-4deb-9dcf-f2f28ad108f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dedee2a-7437-471c-94cf-1fb6bd0b8a53", "sighting_of_ref": "indicator--c913c6c0-1f39-4e65-a0cd-12c6283ae53d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2bf986f-7073-4406-b9c5-b935c5c48c52", "sighting_of_ref": "indicator--2c2e097a-112a-4a7d-963d-8d45cb459b39", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8a1d40-e045-4b4d-aee9-d42162d59fce", "sighting_of_ref": "indicator--19b761ec-8c99-4f98-8744-58031fe4560c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc652f3d-3c95-4373-8bb1-4281b12d1ecc", "sighting_of_ref": "indicator--c119875b-f1c4-4b0a-8d4b-a4e62acd6286", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9a00bc-acd5-4e75-a33e-34307660f5df", "sighting_of_ref": "indicator--cd146718-5732-47af-8dcc-59cb6993b452", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b2a723-4347-412e-93a3-709e866dbc64", "sighting_of_ref": "indicator--4bc2d2bb-8266-45e7-a318-9deb19adb977", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95f9982-e794-4162-a68f-3044e68d05d9", "sighting_of_ref": "indicator--17c0ec16-3461-421b-861d-3ef65add9905", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e2831c-498b-430b-afbd-b91d1f02aa0a", "sighting_of_ref": "indicator--53e5cd32-825d-4323-9599-79480b763e16", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d227b1-7d1b-41b3-b3b9-76c0ecb89526", "sighting_of_ref": "indicator--53e5cd32-825d-4323-9599-79480b763e16", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7c1836-6837-4227-b99f-14c21f25fba7", "sighting_of_ref": "indicator--53e5cd32-825d-4323-9599-79480b763e16", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be74a241-9e68-45c0-9753-07083bb9977d", "sighting_of_ref": "indicator--3395c854-a937-4ef3-b021-98ed505519df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48e5cae-76eb-461b-b96b-3c84455e2d28", "sighting_of_ref": "indicator--517c2c1e-9738-45e2-95af-9ef587508bc4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14fd33f-2ae0-4633-9054-e3f5fcaa333d", "sighting_of_ref": "indicator--40cffe55-3b26-4a4d-901c-02fc5216e929", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e644be4f-4a79-4f99-a1a4-a951c1ed8127", "sighting_of_ref": "indicator--0cf5d049-d687-4dee-9851-640f02e56c07", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df298bb-eff6-4a74-97c4-9e416e422870", "sighting_of_ref": "indicator--0b650200-4cf1-4407-be31-052503f50cfe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5213cb9-e0e7-4a5f-b1ee-2ae0bbafb4f9", "sighting_of_ref": "indicator--30c00536-4c81-4d06-b906-718bf019a0cf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585b0540-5bd6-4b40-93e3-87bd2a91cee7", "sighting_of_ref": "indicator--af5e928a-c791-4f23-bd61-c4093e8197be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea935cd-4428-4c8d-9be5-d693b7064b11", "sighting_of_ref": "indicator--54fd8839-75cb-429a-82c2-ed9a0a81cff8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df4a696-c612-46b3-8ab8-5d4c3f7dbbf9", "sighting_of_ref": "indicator--936eef9e-7486-4ce8-94b8-0734ed3de111", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8d1eff-c967-440c-8c27-ffa2b0407859", "sighting_of_ref": "indicator--4ffe2ae6-4059-47c2-a3b4-3db1adf09f77", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c6c747-4d73-435d-8928-3623061e28d2", "sighting_of_ref": "indicator--09055c76-5588-4c3f-8ccb-9f0a5b12bd46", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c261f548-77dc-4494-995b-bbe57eb6de35", "sighting_of_ref": "indicator--55a9742a-ee77-4f65-bf5f-60117aad8b6d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9279ab9-d433-4fec-be2a-dfc9a844a64c", "sighting_of_ref": "indicator--bc1d48dc-0be3-4036-b7da-0752848808c5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5fbebb-8d39-4410-93e8-98014809ec2d", "sighting_of_ref": "indicator--84c81598-67ae-48ee-851f-1f2b8daddba0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620b7a8f-db1c-4a1e-bbe8-1847687b955c", "sighting_of_ref": "indicator--5fd03cba-d3ea-44e1-98c3-9a36c85bd1f1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb516f6a-b356-41e5-bc1b-ca3078123ea0", "sighting_of_ref": "indicator--63753485-0aa3-49a6-a491-1ebdf1708ef9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3ccd96-3321-4792-acd6-bf285b48d6d5", "sighting_of_ref": "indicator--782a42c6-1132-4e04-b70b-c60a461e9361", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e1ceaa-986d-4426-bf9f-093153ebed74", "sighting_of_ref": "indicator--4d18adf3-0a56-49ff-abcb-9ef3347472d2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c931172d-db12-43c4-bee5-8e89c56e06f6", "sighting_of_ref": "indicator--5bdb5a8a-3b80-4c5a-8d85-53519cb55363", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195d3901-24ac-4deb-8411-b7fde70f31ab", "sighting_of_ref": "indicator--5bdb5a8a-3b80-4c5a-8d85-53519cb55363", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c569a9-9afd-4df3-8455-6a074e035782", "sighting_of_ref": "indicator--f52280b2-6670-4268-9750-480dd9cf976c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6041439d-41da-4264-bce6-74942f25a8f6", "sighting_of_ref": "indicator--c682605c-ca14-4572-8efe-cb3faae2a6ea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a1d744-ff56-43f1-bc16-89371b838ec7", "sighting_of_ref": "indicator--c6799728-552d-4467-834a-703e89559199", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebc1066-a497-4d39-9835-6233092b3bd2", "sighting_of_ref": "indicator--f4f2123a-256f-4db2-90c7-44afa728658f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0017056-3637-4d82-b7f9-424e88425f76", "sighting_of_ref": "indicator--128a5e2c-8da5-4335-a9dc-1e134e09bd24", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7cfcb2-ec5d-4a7d-8637-92b570e0a951", "sighting_of_ref": "indicator--603a273a-3232-4a6f-b9ec-297cde5fd817", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad40f998-243f-4eb9-96c0-94e7e176fea9", "sighting_of_ref": "indicator--c4dd3af5-404d-4135-ba41-8d445b4e19f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b508a944-82f4-4950-9dd1-433374e2be82", "sighting_of_ref": "indicator--51fb204d-946e-46a3-ad56-d570497a522f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05848de-16d6-48cb-b301-c8aa61ce81d6", "sighting_of_ref": "indicator--11f230cb-b0f4-45cf-939b-2d32c5427e14", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0a1019-7e54-4b1c-8098-d04baefe631c", "sighting_of_ref": "indicator--1b9c4bab-baf6-43c6-8229-b8d50ef1b113", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914abbf3-e43a-4aa1-8c6d-591ed034181d", "sighting_of_ref": "indicator--e41d78d6-9020-424e-b439-812add6b13bf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4616f1-50b8-4c5d-bb71-823b603df009", "sighting_of_ref": "indicator--5f45dd05-0a9a-4eb8-962d-29776da6223d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5170071f-e5a3-4f3c-9efd-e0e80cd2b436", "sighting_of_ref": "indicator--ba1b5b82-8bee-425d-8323-6bb63a8e2697", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fd14e6-a483-48e1-b317-16c7be6d1f8c", "sighting_of_ref": "indicator--ba1b5b82-8bee-425d-8323-6bb63a8e2697", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b5644d-684b-4654-b794-e8f45690cf38", "sighting_of_ref": "indicator--d175ca56-db52-41ea-a7eb-f097c38bd7d5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af19e803-c0d2-4de8-8670-f2b64ee13ac3", "sighting_of_ref": "indicator--fa0f667d-7137-4a5c-b13c-d97be8a2f94c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9137824-6d53-4488-aba6-eab8a12c1a8a", "sighting_of_ref": "indicator--fa0f667d-7137-4a5c-b13c-d97be8a2f94c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69658872-e4cd-42fa-a74e-d717a1521a5a", "sighting_of_ref": "indicator--fa0f667d-7137-4a5c-b13c-d97be8a2f94c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13e0c4b-91ea-4ff1-b26c-dd2a9ec27d87", "sighting_of_ref": "indicator--2c8825c7-50a0-4274-8596-0c452c922ad9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce8b20d-eed8-4d26-8cbc-88628a2a7695", "sighting_of_ref": "indicator--6d5c08e5-ecaf-43ca-92a7-b293e16ecc59", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d778018-cfc7-4b10-8865-b4258e28c19d", "sighting_of_ref": "indicator--d7dddcc2-19ab-4719-89f9-e89ff067e302", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5a532b-5e23-4b48-8f24-501a45a39b74", "sighting_of_ref": "indicator--d7dddcc2-19ab-4719-89f9-e89ff067e302", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a84ada6-566d-4ba3-9832-210a4bc55bea", "sighting_of_ref": "indicator--d7b58ec9-5753-42ae-933a-f2600088bd3f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c334d0b-b839-412f-839f-6f4925282cba", "sighting_of_ref": "indicator--0706b6c8-9eff-4315-8599-4b65bf443ecb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2a89c8-b13e-4d59-a10b-1a08aeb50f4f", "sighting_of_ref": "indicator--a85ece13-f1ec-461e-bf3a-509b2faac4f5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4874e7e4-20f6-457a-9eff-b71baa8fc25f", "sighting_of_ref": "indicator--a85ece13-f1ec-461e-bf3a-509b2faac4f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02220f9d-65a1-4131-9087-92718343f6c7", "sighting_of_ref": "indicator--57651e38-a76e-448f-ad6b-0c393ef753f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b2cae5-1414-4b4f-a5c0-e1a9e67a4484", "sighting_of_ref": "indicator--57651e38-a76e-448f-ad6b-0c393ef753f6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df72ccc-f21f-4d96-a4ed-e226e9e44d08", "sighting_of_ref": "indicator--57651e38-a76e-448f-ad6b-0c393ef753f6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433e1162-f71a-4285-8f4f-344813f2d5b5", "sighting_of_ref": "indicator--07106a3b-73a1-41d7-86b7-c81287e85135", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad23650-c833-44ec-8958-8cb83240574b", "sighting_of_ref": "indicator--07106a3b-73a1-41d7-86b7-c81287e85135", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbebf54-38ae-4c10-8ee7-5cb2c8ae30d1", "sighting_of_ref": "indicator--07106a3b-73a1-41d7-86b7-c81287e85135", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6439da21-31be-443d-bc9e-c2ff692da3e7", "sighting_of_ref": "indicator--da009c62-8196-4d40-b477-8c2e0f57b043", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d12e4e-d6d1-497c-8f8a-4ff23470da7c", "sighting_of_ref": "indicator--da009c62-8196-4d40-b477-8c2e0f57b043", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a436e9ff-b85c-4f3e-b153-74d5cff30e28", "sighting_of_ref": "indicator--24eb843a-cf47-44cb-a50a-834eeadf1fa8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a23e52e-61fb-4284-8f09-7c96bf037f6c", "sighting_of_ref": "indicator--24eb843a-cf47-44cb-a50a-834eeadf1fa8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5497eecd-5221-412b-839e-2fefdba05d08", "sighting_of_ref": "indicator--8a2de1dd-80f2-4f84-b05e-d8f351bab54b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a05c5d5-00ec-4632-8b6b-d65c2c9adf33", "sighting_of_ref": "indicator--8a2de1dd-80f2-4f84-b05e-d8f351bab54b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3aab85-1566-4491-a081-42a55c015e68", "sighting_of_ref": "indicator--63757dbc-ca23-47fe-acde-ed63e7f8755d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa3ec6a-c40f-48f2-89cd-9ec1f0ae6a7f", "sighting_of_ref": "indicator--63757dbc-ca23-47fe-acde-ed63e7f8755d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03877bb4-b996-4858-8bba-14dc9ccd9e46", "sighting_of_ref": "indicator--63757dbc-ca23-47fe-acde-ed63e7f8755d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9713c353-2e5c-4bdd-b330-d8bb645b99c7", "sighting_of_ref": "indicator--1d780eb4-348a-41e5-8bf0-5b97d6fef5b2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f292eba9-d980-437f-86d1-e510e21e46c8", "sighting_of_ref": "indicator--1d780eb4-348a-41e5-8bf0-5b97d6fef5b2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180b01ed-3731-4a0d-905a-1964ebd50033", "sighting_of_ref": "indicator--1d780eb4-348a-41e5-8bf0-5b97d6fef5b2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4f2849-4154-430b-b3e4-c00f0d252d05", "sighting_of_ref": "indicator--80868262-6dcb-460c-8071-ad1624a687a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b604b0ce-16cb-4bf8-9eb5-01e06c6d97b4", "sighting_of_ref": "indicator--d32dd108-8272-4c26-ab6e-c45cbdac7357", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6842d27-cd53-40ea-b389-eb72539cdae0", "sighting_of_ref": "indicator--c513b5da-a5df-405d-a160-134c3a530236", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66608e96-423b-4496-870d-b427a88f3a39", "sighting_of_ref": "indicator--c513b5da-a5df-405d-a160-134c3a530236", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe573d8-f75d-45c7-acc5-ab83db46371c", "sighting_of_ref": "indicator--c513b5da-a5df-405d-a160-134c3a530236", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c230edef-8429-47f0-99f0-b9c92d151061", "sighting_of_ref": "indicator--cd79d66b-1003-4e79-87f6-f27ed4ade3b6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1109598-6dd7-4b29-9f75-3e41606d778f", "sighting_of_ref": "indicator--f1ce9b7b-2fc6-4bfe-966f-4bfde0be5a4c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32285117-b2bb-448f-8768-9fcf8f3f6111", "sighting_of_ref": "indicator--f1ce9b7b-2fc6-4bfe-966f-4bfde0be5a4c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1d9613-ea05-409c-9f1f-0709ab7a9e6a", "sighting_of_ref": "indicator--f1ce9b7b-2fc6-4bfe-966f-4bfde0be5a4c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0486c32-5653-4983-ae0f-8e2a21f88002", "sighting_of_ref": "indicator--4e1df772-a077-4a8a-b365-4ad61a9c3c89", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460a46b8-4f92-4691-b8ce-f8eef43e32c5", "sighting_of_ref": "indicator--4e1df772-a077-4a8a-b365-4ad61a9c3c89", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be8d3b2-e746-43e9-aee1-de01baefcf9c", "sighting_of_ref": "indicator--c710c042-4bd8-4f5a-a83d-661f7936c4b1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b027079-9b03-4033-953c-de9ca21643ea", "sighting_of_ref": "indicator--c710c042-4bd8-4f5a-a83d-661f7936c4b1", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ba5d07-b594-4bff-bc10-c54c607249d9", "sighting_of_ref": "indicator--3e59703a-2f12-4b23-af28-92fb72eb59ba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea965c7d-64f9-46a6-94b0-66fc440033d6", "sighting_of_ref": "indicator--3e59703a-2f12-4b23-af28-92fb72eb59ba", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28d3ad8-d5d7-486a-8a47-411e9962dde6", "sighting_of_ref": "indicator--bd6d39e0-3a35-4900-a727-598dfb6b7af3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf99ba4-7f8c-414a-b9e0-6b241f0c233b", "sighting_of_ref": "indicator--bd6d39e0-3a35-4900-a727-598dfb6b7af3", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c71c886-64ea-44be-803a-fd262903af6c", "sighting_of_ref": "indicator--8a7a45be-bfbe-4bfb-ac65-acdfa56769c9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47395c7-8e4c-4f0c-a1c6-f397435c720f", "sighting_of_ref": "indicator--8a7a45be-bfbe-4bfb-ac65-acdfa56769c9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d416b56-0184-4bb0-bad7-9455bbf301f9", "sighting_of_ref": "indicator--ac3a5741-8d4e-4636-bd7d-1eab023e1725", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7901c2-215e-4ec0-a46c-628f6c1397df", "sighting_of_ref": "indicator--56ed94cf-5675-4c64-adc8-2e9300cf0c52", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad262a73-b576-4440-bfdf-46e93938fd76", "sighting_of_ref": "indicator--e8eaca52-0a90-40d7-b185-8b62914f818e", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd6db61-f06a-4c87-89d2-182be6c84c85", "sighting_of_ref": "indicator--a21e207c-a79c-461f-a271-5138e3602f11", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e9d337-2770-4430-ad04-97f4431e19ec", "sighting_of_ref": "indicator--1409d5f5-9427-4115-9efc-39b7221c13f5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a389dac0-df9e-477f-8619-b7c38470a436", "sighting_of_ref": "indicator--1038f92f-362f-4342-a333-1d2e810c5cc7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09be8b3-61c4-4a67-bc86-fd3e4efdd09a", "sighting_of_ref": "indicator--1038f92f-362f-4342-a333-1d2e810c5cc7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c01aab-9cc6-429b-851c-4f184f4c72b2", "sighting_of_ref": "indicator--1038f92f-362f-4342-a333-1d2e810c5cc7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243cb284-8cf7-46ad-b06a-7caa1c44b2f8", "sighting_of_ref": "indicator--43b41f65-99e7-4151-8578-ca8ae50af805", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10fe754d-5507-4aa3-9dcf-91917662115e", "sighting_of_ref": "indicator--43b41f65-99e7-4151-8578-ca8ae50af805", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760e67f9-9bc8-400f-9a3d-9ada4b1c05cf", "sighting_of_ref": "indicator--43b41f65-99e7-4151-8578-ca8ae50af805", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96488e88-8e62-4c55-b6be-5412d7e1e2b7", "sighting_of_ref": "indicator--09bd544f-3cf2-4142-a926-aad87a91829b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553afc8e-e8fb-4e07-a927-2bf8bfee9657", "sighting_of_ref": "indicator--09bd544f-3cf2-4142-a926-aad87a91829b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f19bc5-8673-48fb-be82-6e72f4ba56db", "sighting_of_ref": "indicator--09bd544f-3cf2-4142-a926-aad87a91829b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b857af4-119f-437c-9ed8-ceb19966053b", "sighting_of_ref": "indicator--bc26f1f3-e3e8-4453-88d0-db85b5b52d21", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21451fe-c660-4f1c-881c-e25d1b4e67e3", "sighting_of_ref": "indicator--bc26f1f3-e3e8-4453-88d0-db85b5b52d21", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f22b59-738a-43ce-bf59-206caca5c84f", "sighting_of_ref": "indicator--86b7bcd1-d898-4f0e-acdb-703fe537b89b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b4af27-f921-4a8b-bcdc-0c55667b8ab4", "sighting_of_ref": "indicator--2d3fa54e-38d9-48f4-806c-8c9fff444fb9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87256788-13d2-4d81-8b40-fea2b3c097f5", "sighting_of_ref": "indicator--06e0bb59-5fa0-4aed-820c-d6296900a3f9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89dd5cf-0989-46b3-82fa-9cbf95b5d489", "sighting_of_ref": "indicator--95719420-03ca-4d1a-8944-a2f86383bc31", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5627191-6fa5-43fd-93cb-1538ae7340da", "sighting_of_ref": "indicator--43f11e41-59d0-46a7-bf4a-3b736e572644", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--546ef826-e93a-476d-b125-69c0ec9f7742", "sighting_of_ref": "indicator--0f962d45-8be5-47d8-8468-e37a34961b12", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca817b6-5adc-461c-b2ed-bca4cb073b63", "sighting_of_ref": "indicator--6098a5fb-13d9-4865-bb10-570ef94d4503", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f747d81a-59a4-41e0-a93f-e9eef9de09a6", "sighting_of_ref": "indicator--fa23ed50-7bfe-47ad-aa25-e7220b1a577e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8d1955-9246-491a-9f96-11896d323f59", "sighting_of_ref": "indicator--0a9fafe5-db0a-40ff-9f9d-074223f802a4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883c8279-4a99-4786-93e1-8978d1aae641", "sighting_of_ref": "indicator--22b603a3-44c0-4ad6-9d74-04c5d2d4a52b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7284cf8-e9e2-4b71-9a24-8de851658835", "sighting_of_ref": "indicator--6a18a86d-e0a1-4bc2-9bd8-fe4198fbf3ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694a1acf-d899-47c4-a92b-b37eb8d53b6d", "sighting_of_ref": "indicator--562ade2b-4351-428c-a528-9200e6a42583", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b05da5-e6ae-4d8a-a564-0e12fec6bd1d", "sighting_of_ref": "indicator--d1d60378-0cae-4491-b942-79022c71774b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d8a385-9eb6-4f84-975d-a8cf3a3ca39d", "sighting_of_ref": "indicator--2dc346e9-1824-49d4-aa7e-ce915f1a9c29", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0981b016-c5f8-44be-a400-adf99c42f171", "sighting_of_ref": "indicator--2dc346e9-1824-49d4-aa7e-ce915f1a9c29", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3af1997-dd00-4e8a-92c5-c4d1d394a7b8", "sighting_of_ref": "indicator--85ed2f3b-227b-4315-932a-2b8292703d43", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39cdaec3-114f-4ab4-a27b-e34995e1597d", "sighting_of_ref": "indicator--85ed2f3b-227b-4315-932a-2b8292703d43", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cf2182-e5a2-4be0-9ec0-e70e759e9fa1", "sighting_of_ref": "indicator--85ed2f3b-227b-4315-932a-2b8292703d43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698b1e8d-0bd4-41f7-893d-bd886a4f1259", "sighting_of_ref": "indicator--5ce112dc-cfed-4282-bc52-5a121f527c00", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac93e29f-94e6-45ff-bd10-a0f1e4e77f3e", "sighting_of_ref": "indicator--e9328a05-9fd3-448c-9b78-522ba75674da", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134eb08d-d17e-439b-8bf5-4ab045807523", "sighting_of_ref": "indicator--77230934-0012-4e43-a38d-f6c2aee6c234", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d085a1ce-97be-4ff0-ad39-ecd4f2673b2a", "sighting_of_ref": "indicator--ce02b62e-1997-47b7-ace2-962a03de2be9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07eb22aa-eb04-402c-9e56-6943b8d4465c", "sighting_of_ref": "indicator--c0c299ea-1858-4d91-9c6c-4863aa71be86", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331dc8f8-ce79-456b-a6f2-de4514ead493", "sighting_of_ref": "indicator--ee014d2e-00d4-45bb-8c6e-2a9d214a8b6c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9340785c-99bd-42c5-9c95-3dc9befcab36", "sighting_of_ref": "indicator--d82849d0-a166-4ffd-a283-d9b0f38de730", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7300c7-1478-4f44-804f-ddb855e29faf", "sighting_of_ref": "indicator--c2bdb937-aa6f-4c85-8fce-54dd23f0e6d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ba777d-7962-49a6-8848-ac008d297d88", "sighting_of_ref": "indicator--724f09a9-5e5f-41ef-ab30-33b951ed48cc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bbb13d-a9e3-49f0-ad6d-fa57f4d57bd4", "sighting_of_ref": "indicator--724f09a9-5e5f-41ef-ab30-33b951ed48cc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e997eae-903b-4018-aed9-4ff1e5e63705", "sighting_of_ref": "indicator--7dbc8cb8-b06a-4927-874b-dbbdad046363", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e443a3f9-82e9-4b28-b553-fa8e1b149239", "sighting_of_ref": "indicator--3a5b6b0b-aaf8-4cde-b389-34cd17e0b6bd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073fc80e-7e31-41f3-89bd-606203592342", "sighting_of_ref": "indicator--65bab37e-7702-42bb-a572-eb5f371a70a0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183ba8a6-b4e2-46e1-b4e8-8e81aaeeb007", "sighting_of_ref": "indicator--08abf442-2776-462d-ad33-308a5228997a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3f0417-dc48-476a-bfb1-06326961e33f", "sighting_of_ref": "indicator--a347fe87-ba82-47d8-8d68-d0e5098fb6f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c59c16-95c4-4d89-b0a0-2357b2ffcf27", "sighting_of_ref": "indicator--927def19-4a54-40c7-99a9-7ba6ff0cf4ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4c4ccc-7053-493a-9587-7f98213c17a9", "sighting_of_ref": "indicator--6e6282bb-e172-4498-898c-29811b59993a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc13fba-d088-4a95-b911-241a07e2d2ae", "sighting_of_ref": "indicator--2d990895-4d23-4005-8fa4-da6f6cdd8dbd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16d3931-d2cd-4d89-8a99-7448cd1d6bbb", "sighting_of_ref": "indicator--8a5b5b34-ea25-413b-9949-d4239088b21b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561dba3f-0f60-4e69-b182-e23d74480123", "sighting_of_ref": "indicator--eefc1e7c-fc07-41a3-8c59-5de864f2cfc4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b78c2f4-b448-4668-bea0-fe4d14876b27", "sighting_of_ref": "indicator--12a753d7-5f79-4a37-95f3-dad3a1e3c683", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ce5566-24fa-4acb-aa05-30407ba8ff1c", "sighting_of_ref": "indicator--89dd5dec-e3b8-4786-ad0e-c48ab76a4573", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845b8484-0876-4834-ab30-4a59fa82e664", "sighting_of_ref": "indicator--a19e58f2-08a8-40da-ad5c-8988bd44d611", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6483139f-449d-488d-9b26-447453c40eda", "sighting_of_ref": "indicator--9abb5007-77f1-4189-848e-0e4272bc1c6a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc103be5-03c6-447c-8f38-c817ca09dc46", "sighting_of_ref": "indicator--11621ada-ec32-44d4-988d-375f44464acc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37c3506-5685-4a85-a1be-8e8c3814b8dc", "sighting_of_ref": "indicator--23b31088-0b35-4e3c-ab6c-2376e9ef8c8f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dafad0d-0240-43b1-8ac1-0151ac69381b", "sighting_of_ref": "indicator--317d2e25-4769-4ad3-bc65-0bb78002703c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7240d0-2f45-4d52-ac54-c69a8976b221", "sighting_of_ref": "indicator--66295eca-ebc8-48ea-adc8-b9c343d35521", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3653dff7-ff4c-42f5-adbc-d8955e276e77", "sighting_of_ref": "indicator--b9f13a39-1443-4fe6-9ced-b19ae076d5d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880b2c0b-8d46-4c76-b45d-131614348ed5", "sighting_of_ref": "indicator--30aa95e7-74d3-4046-a165-bb4c9eebc296", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae483b6f-e012-400b-a6fd-1dc16daf7fb0", "sighting_of_ref": "indicator--42d0dbff-5e75-4b03-b434-7556a46f575c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad2a7d8-a398-48af-aa93-c6b35e9d76c9", "sighting_of_ref": "indicator--1886f58a-2830-4f5d-8249-45b440c677a3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc78359-c284-4422-9eef-53f193d9c994", "sighting_of_ref": "indicator--36ed2cc8-972c-4180-bb81-1f5c439e9ace", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b06cc0e-8f34-4de6-90e3-0b9ff78a8467", "sighting_of_ref": "indicator--c231b502-1302-4349-a694-33c61daf6b9f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244e4c0c-a30f-4a4a-919b-c5fec0610cea", "sighting_of_ref": "indicator--8e21365b-be2b-4588-aabc-9ffd2076ebac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41849fc-04c1-4361-a510-4164c2a2d934", "sighting_of_ref": "indicator--6362bbd6-8828-4f67-9742-1cc82dd632da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67827a41-974c-4614-ae3d-b36805692937", "sighting_of_ref": "indicator--8eaf6c4c-9f4f-4331-842b-c02e0242292f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e169e98a-ba09-4277-9b19-bfec8fb0edae", "sighting_of_ref": "indicator--407ad484-cfaf-4ce4-ba86-be969e5641d8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa73ab5e-4010-4b7f-8b1b-22e538b382b0", "sighting_of_ref": "indicator--afaa558b-2ad0-4cea-a16e-420b20374169", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902b983d-3904-475d-9915-77063292172c", "sighting_of_ref": "indicator--e05495c8-cf33-4988-8a8f-1367ec0e0982", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70477e22-78d5-4beb-aee9-748d07b51085", "sighting_of_ref": "indicator--25e23fee-0ef6-4333-b20b-59d93514eb15", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032a7759-fd5c-4231-ae0d-778de7c8f648", "sighting_of_ref": "indicator--4fa5f17b-03f2-49f7-a425-e73bb3f6aae3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e514911a-4986-420a-8b5f-1f83c7e21e42", "sighting_of_ref": "indicator--1ecd968c-39dc-4ee2-a5e6-acab721252c4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14d9fb8-3e5b-4287-aa42-ec94c5e8e21c", "sighting_of_ref": "indicator--69ddd623-58d6-4bcb-95b5-082cb77e9162", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2322726-0785-422e-98c6-97233afc2b64", "sighting_of_ref": "indicator--82bc1c57-a418-4b08-8bfa-77d18ea81453", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6154d1-e99e-4d5b-a6ad-bc55be2714c1", "sighting_of_ref": "indicator--ed2f3b5a-e4f3-4942-ab74-4a0c902fb535", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576ea7d2-00a8-4e5a-8fce-8947cb72d327", "sighting_of_ref": "indicator--808a51a6-e227-43f5-a9f8-cced71b90e6b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88056f66-dbe0-4402-bbd4-766e929dd1e8", "sighting_of_ref": "indicator--fa33c6c1-6750-45f9-a862-6f0781128bd9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c788fcf6-3f74-45dc-9326-b1f82378a411", "sighting_of_ref": "indicator--6cb77f2a-60b2-4e8a-8094-61824a40af08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213f3f7e-1961-49a5-b833-75d42fe0ae85", "sighting_of_ref": "indicator--79718804-34e5-415f-bc07-141a8caf6d14", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1b2665-4534-4bb5-a4db-1581d40b198a", "sighting_of_ref": "indicator--d22537b6-a47c-4c9c-b647-816555bac8d6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6deef994-9f79-4238-b65e-40d306fb13f2", "sighting_of_ref": "indicator--e0e4c21d-be0e-4680-97a9-0c6fa8021ff3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27697b9f-2b6d-4ec7-b778-360366210ae6", "sighting_of_ref": "indicator--ba95ea7e-253c-412d-a915-7a06bea77e34", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0257fa51-1eca-4f74-a45b-1723af18f142", "sighting_of_ref": "indicator--c8953f11-878a-408c-8347-9033a558a4cc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d10558f-0db6-4166-91b6-9de8d2b1010e", "sighting_of_ref": "indicator--ab12df4a-43b3-45ed-8bcb-900581f2128e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7feccb36-bbb9-4482-9d58-1d99bcbc8b1b", "sighting_of_ref": "indicator--cb85442e-33f7-4c4f-922b-7201fc02c0eb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b459d58-10d3-4702-a9e9-936a25bc72a8", "sighting_of_ref": "indicator--9c09437a-7a72-431f-9436-41f20cdb3cc1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15989ee4-5e05-45f4-8e59-566ca70f39d1", "sighting_of_ref": "indicator--b9e61659-8400-4f9f-8701-e55971d46c14", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bb083f-fc53-489b-8565-866cef5522f3", "sighting_of_ref": "indicator--3f07cf53-c904-4ceb-883e-3d8ecd5f48da", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0bbcac-0f83-4bab-afd4-81fbe03244d5", "sighting_of_ref": "indicator--c965c3b8-0650-4070-8757-e27539fbd32a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc4cbe4-e933-4605-9230-50190daa12b6", "sighting_of_ref": "indicator--6d575c45-96ad-410d-8f03-32ca28a477fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585a7b31-ae10-4272-9efb-40acea67e303", "sighting_of_ref": "indicator--8d7a5045-c9bb-4bf1-80bd-f626fa483e04", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ada779c-ecd1-47a3-b903-8952aa48c809", "sighting_of_ref": "indicator--8d7a5045-c9bb-4bf1-80bd-f626fa483e04", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d369fe48-811d-4afb-b184-e49614fdae3c", "sighting_of_ref": "indicator--8d7a5045-c9bb-4bf1-80bd-f626fa483e04", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae786f9-5a31-42b4-bb40-f58d4cac791e", "sighting_of_ref": "indicator--1b6a87de-145e-4585-aa47-3226453d0321", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8cd2f4-3818-4773-94d4-dfa95cf0b07a", "sighting_of_ref": "indicator--aa90deb3-1434-424d-b15e-66e0970bb600", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666b85c1-3bbd-4879-b3bc-832b1c390804", "sighting_of_ref": "indicator--aa90deb3-1434-424d-b15e-66e0970bb600", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53c2515-c698-4f96-9ed6-740524eec1f1", "sighting_of_ref": "indicator--f95caa8e-d8de-4e86-9fba-df0dccb82b11", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd97b5c9-cdee-40ed-bc81-eba06f83721b", "sighting_of_ref": "indicator--5501aae5-e78d-4e9f-88e5-12918b4005eb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1a874e-ad28-4ce0-b540-9b7b509a14c1", "sighting_of_ref": "indicator--a52ff817-744f-47f2-9b4e-ff25e89f1784", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59284e5b-73d1-4244-9d68-9ec63b325ce3", "sighting_of_ref": "indicator--3c2947d5-467a-47bc-bc38-92101c494f38", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09605ba8-175c-41ae-804a-e0b3453868f8", "sighting_of_ref": "indicator--3c2947d5-467a-47bc-bc38-92101c494f38", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd761d0c-e842-4042-bb3b-d8c4bbc34131", "sighting_of_ref": "indicator--3c2947d5-467a-47bc-bc38-92101c494f38", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed28378b-b778-4865-a817-1917d9654b9c", "sighting_of_ref": "indicator--8905270f-5f9e-4371-bb38-b35976dacf1d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399a773b-65fa-4c81-9e58-5834b4ca8f3e", "sighting_of_ref": "indicator--8905270f-5f9e-4371-bb38-b35976dacf1d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d99994d-e9f7-403b-8f80-85f82cfe5b6e", "sighting_of_ref": "indicator--8905270f-5f9e-4371-bb38-b35976dacf1d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d32bac7-ddef-4219-9e2b-08c49fd8a73f", "sighting_of_ref": "indicator--ccc22006-753e-4fde-9d18-4705fc20ccb6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6370758d-7923-4ac3-88e3-61954c5ca1f6", "sighting_of_ref": "indicator--ccc22006-753e-4fde-9d18-4705fc20ccb6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a98f10-348f-4141-8d78-1f358302a56f", "sighting_of_ref": "indicator--ccc22006-753e-4fde-9d18-4705fc20ccb6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89da344-fbcd-4385-b6dc-5479b78d92d5", "sighting_of_ref": "indicator--04645319-2b10-46f5-b398-4c14167d11f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc62dda-8c1a-4db7-863a-e2e517fd705d", "sighting_of_ref": "indicator--b581cde5-c883-4b09-b4b2-5f4ae688e4d4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d095ed-4b0e-465d-85f1-2701c81ec590", "sighting_of_ref": "indicator--4603cd30-c32e-4534-ba20-282815f6ab41", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfed161-7623-4e86-b8e1-e002ba792786", "sighting_of_ref": "indicator--0a61a237-6ff4-4012-9f0d-cb90858ed132", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37e69be-b5d8-4d9e-adc5-5e5103fd0a17", "sighting_of_ref": "indicator--03047051-da23-4e3c-a56f-22912f0b4d65", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7826ef-6faf-4e6e-bf18-e088ff228ec8", "sighting_of_ref": "indicator--162cb0e9-f32c-4dfc-95e3-83a8ca3aec66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8672e9-970f-435e-9b49-28ca723a92bc", "sighting_of_ref": "indicator--5c037bde-27c3-48eb-8c11-817ee7c2c0ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55228d6e-2a51-44d1-9ecf-95fa9f12647d", "sighting_of_ref": "indicator--96a3ab8f-67b0-48ce-978b-4ada7c66b3ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc99fc40-123f-4a1d-830f-fa6e7fded58a", "sighting_of_ref": "indicator--52c0eef4-5cac-4a7b-bcf2-5fbf02cc30e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10de317b-7f0e-46c9-b069-f623defc8cfd", "sighting_of_ref": "indicator--d1bce066-7268-4ee7-9fc4-acec194ff242", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce32014f-ae58-44f9-86b4-e5d60aacdae0", "sighting_of_ref": "indicator--dae4f489-b1a2-4ca3-82b6-310869b5d51d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafb9cb6-7273-447b-ae5a-fce27f8a5610", "sighting_of_ref": "indicator--65057013-f667-4b1b-988a-2c94aa64e8cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185a1c97-d097-4b05-8551-a601c77d6f51", "sighting_of_ref": "indicator--6b8e035a-afbb-4d4d-a3b8-25205001c9de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265eb995-6d6e-46c2-9d40-d3196d4b11a3", "sighting_of_ref": "indicator--2978b2ce-6f2c-4687-a209-8c0838370852", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8160f6a0-db8a-41c0-958c-210b9f0403f6", "sighting_of_ref": "indicator--28d1e437-454c-4f4d-b0b4-34b83568d29d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56da184b-c0ed-468b-9832-302d616bbadd", "sighting_of_ref": "indicator--fa6562cd-8805-41bf-98fe-1c6734d17f6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb74b84-c225-4b1a-aa94-58dee81faa2b", "sighting_of_ref": "indicator--2a666af8-7e68-4bd8-9103-5d8a0dfe1ed2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb4dc9a-81a9-4175-9c74-5d437db44e54", "sighting_of_ref": "indicator--e7ad7212-1c1f-4302-bba2-b12b39e4b8ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0728f69-118d-4c03-a304-76d3c1a54388", "sighting_of_ref": "indicator--2791b92d-7876-4ff4-91f1-63d9359dc9ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4628a10f-130f-4ced-9f7f-558fb1a33167", "sighting_of_ref": "indicator--2b8fb1c6-6976-4c20-81ba-c32af13451c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd7951f-ed4b-4725-82c5-c47525231038", "sighting_of_ref": "indicator--574cfe7f-8994-484d-a21e-c5c005d01b33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e750b3bd-2600-484e-b28f-629ed8c9cfe5", "sighting_of_ref": "indicator--dafd1d22-26bd-4208-83ba-c53bb28bc052", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300dc4e7-9535-4857-aa37-3959ac4e6f4e", "sighting_of_ref": "indicator--4091489f-a6f5-4e85-8a28-bd03aa7d35a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d9f271-38d4-4de9-bb76-fb9a360c4bb1", "sighting_of_ref": "indicator--96a08339-1e30-4549-89c6-bf26131dd11e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c2355c-7692-43e2-b502-238cd558673a", "sighting_of_ref": "indicator--23742c9b-a0e2-4306-a96f-648396d27fdf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7383522-c46c-4725-961c-eb01ac8b5db7", "sighting_of_ref": "indicator--395b14cf-aa0a-4078-9033-76d8e4cc2ec6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def291f1-532f-43fc-91c4-018d76daab18", "sighting_of_ref": "indicator--611efd6d-a6dd-46d9-9e5e-58b23fefc0cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec28888-bbd5-4b0d-857d-967875675e71", "sighting_of_ref": "indicator--82a3b73e-058b-42d7-a4ff-95e3da5badde", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18988fab-65c2-4f11-9b9b-45956e342608", "sighting_of_ref": "indicator--c9eeec93-d3a9-4c32-86a5-090fbcb53162", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e60b40-c63a-459d-86bf-5157c78bbedb", "sighting_of_ref": "indicator--c9eeec93-d3a9-4c32-86a5-090fbcb53162", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f0a5fe-1e8c-4101-8260-31fc5275aba4", "sighting_of_ref": "indicator--81a8aa2e-0a99-47e8-aa19-381d026d87c9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfb3a2e-911e-4631-a2cc-02f686fb003c", "sighting_of_ref": "indicator--9d0b88cc-f9c7-40a6-b160-b544246727ff", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b799f876-8d42-4532-90b9-5c3ee821c756", "sighting_of_ref": "indicator--4d5f9b14-431f-46fd-95e3-6cd1981ae5d5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814527da-6e79-42f4-b5ac-ffa583c1141a", "sighting_of_ref": "indicator--078ab124-81a8-4bbf-8d03-295fb496accd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9e9ba9-19b1-4552-8ccb-6347780b5f09", "sighting_of_ref": "indicator--c8b5f091-4b12-43cd-beab-4d8897e43cb4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45ce0e41-fc10-4f94-9bdd-214cfb1e9bc9", "sighting_of_ref": "indicator--42ddfe8b-420d-4f50-a562-ffc79fc0c6b0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58f2c05-4ff0-413d-b740-eb853906ea97", "sighting_of_ref": "indicator--39192ba3-0d4f-417c-b18d-3156c257bd35", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ede043a-4f2d-4f89-9f60-0b504c3b6de8", "sighting_of_ref": "indicator--a20b2302-025c-41a7-a96b-8b2942aab94e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3519e933-b50a-42fd-9581-3a9d978d8a59", "sighting_of_ref": "indicator--20ab1d21-fd66-4818-80d1-8e1ae30cd901", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a451da-9e34-4093-82fa-4fe52115d51c", "sighting_of_ref": "indicator--20ab1d21-fd66-4818-80d1-8e1ae30cd901", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53739e95-6a20-4b4f-851b-dd132f11f510", "sighting_of_ref": "indicator--1866880a-d436-45f2-9876-618cd4f9a67a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c318830-2082-4019-af93-32bd76db4256", "sighting_of_ref": "indicator--947dd977-b48c-4795-9bc2-61239d3039cf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97741664-50da-47ed-b06d-4fd906b730b0", "sighting_of_ref": "indicator--0d7fed2f-d110-4076-8e00-2ca3598fd1ca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d12ae5-460e-4318-9148-463a7f5ef733", "sighting_of_ref": "indicator--b02f9ce4-e566-49e0-a054-7dbbf31819a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f658aa-fd77-4695-8376-5bf1a6f2bcd0", "sighting_of_ref": "indicator--aaa09992-d4c5-400b-b060-d349cc39b800", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d902a7-5e5a-4a56-b630-50dd590214c5", "sighting_of_ref": "indicator--4db8ede2-44b5-4be4-b459-c98af2cd1a86", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72117c5-f41b-44a1-a896-d97fd125cfa4", "sighting_of_ref": "indicator--e001d6ab-1ed2-45a5-af45-798572db66e6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a7edac-83a8-433a-bf1c-cd4912a1d68f", "sighting_of_ref": "indicator--f98d2e3c-c2fd-4638-8c91-b082599b861e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b531d448-73d6-45d2-947b-96f55d8b66a1", "sighting_of_ref": "indicator--4e67631e-670d-4d0a-92c7-8b02a3f91ad7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f165a9-87d7-4020-a6da-6a2eafecac60", "sighting_of_ref": "indicator--8f2ff234-20a3-4964-a1da-0e3460a78ed8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7377d2a6-dae4-4a88-a095-73dc977e1a70", "sighting_of_ref": "indicator--98ccd551-b1ba-455e-98aa-41bc3221a046", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760ab15f-988b-430e-96af-2cd4cc8aa85a", "sighting_of_ref": "indicator--e1224a40-cd93-4ea8-8aa9-35d3a193f145", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5b2524-6b50-4312-84c4-c768d7bb8620", "sighting_of_ref": "indicator--e4c4f8d4-1d38-442b-a245-12350c20cf29", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa39dd3-9867-49e6-863e-0eb0a130f597", "sighting_of_ref": "indicator--9333c8b6-ec3c-48e0-8375-8503ef20f30b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38c1822-6764-4394-ac09-aa43b316a61d", "sighting_of_ref": "indicator--5b4021a8-c0c5-49a3-bf86-835ce2758cc3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59524a76-0a2a-456a-a729-d2de84cdd187", "sighting_of_ref": "indicator--5b4021a8-c0c5-49a3-bf86-835ce2758cc3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6a9f18-d705-460c-914d-0483e6c28e1b", "sighting_of_ref": "indicator--b80e8647-98ff-4790-9d0f-e1308821fc5e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745074f0-ee20-46e8-a59c-6795519305a1", "sighting_of_ref": "indicator--7eb52d1d-4af8-41a3-8179-dafecad56d54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd137a03-db66-40c8-a94b-48db95676b3e", "sighting_of_ref": "indicator--f7510493-f360-465d-af60-7f931ec021be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83aa17f0-0a14-461b-9ef8-cb6af9e43b45", "sighting_of_ref": "indicator--62174e27-eaec-4db7-a329-ab8225c332d1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f5e1ff-428f-40db-9068-165a799d7290", "sighting_of_ref": "indicator--6f14b461-d6d4-46d5-be32-6faa1f6facd1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c06baf3-ee96-48a7-97a2-34f7d649d1a7", "sighting_of_ref": "indicator--476c1d61-21e9-498d-be99-55ef3f985b35", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e62b27-2505-498e-8169-b69a01ed6427", "sighting_of_ref": "indicator--b71c3bc4-2f62-4e05-9c0f-0ff7b407568f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66de455f-c24c-4133-a8db-285626c3db40", "sighting_of_ref": "indicator--f6c05575-fbcd-4d67-8a87-ccb193770705", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa476ae0-10f7-42f1-9180-b65d3ed09b03", "sighting_of_ref": "indicator--251d6303-15fc-4c77-a18c-c958098c0692", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c4e667-28ad-4c77-be4b-22bdb7457a56", "sighting_of_ref": "indicator--e629edde-c560-40d6-b5e4-6ac17468f9f1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2921cbc1-9428-4830-9ada-d9c7588c811f", "sighting_of_ref": "indicator--e629edde-c560-40d6-b5e4-6ac17468f9f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453d8f45-1d5d-4a3f-be5a-b34d8474aa20", "sighting_of_ref": "indicator--6d69c475-caa9-4857-941b-634c6feff456", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d9789b-e4f9-4a80-bb7b-8744d7b32b75", "sighting_of_ref": "indicator--ae7414dc-cba6-4d3c-a10a-20e0e368a14a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae0c117-6b61-47bb-8da1-6784bb39d579", "sighting_of_ref": "indicator--3f03f126-56e2-4685-a82f-8028e5c4d612", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd243159-d284-4b2d-be27-e6d6aaf456a9", "sighting_of_ref": "indicator--3a1dcbc8-59dd-4da2-aab1-97cbe9dd8594", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb8ee5a-e605-40ef-8a6f-05236b8538cf", "sighting_of_ref": "indicator--70d60624-437c-4f61-a45e-ffffac9e4395", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cc3807-00ac-46ac-af3b-7760d9675340", "sighting_of_ref": "indicator--102bea0e-0b75-4f31-808b-d770dcf7af55", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02378b01-9252-449f-9f9b-becdff840359", "sighting_of_ref": "indicator--2d1f9066-4260-4bcb-8d6a-5e0ec4a25337", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531f2afd-c894-46cb-9abd-62d6e9c51e17", "sighting_of_ref": "indicator--c301ce5c-85a0-452d-ac8c-56e4afc9ed55", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc201265-61fb-44ec-9eaf-06e318a5352c", "sighting_of_ref": "indicator--848ed1c6-9f55-46e7-942b-ae5fe2997cc7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afab17eb-b6d1-4fff-b1ca-30e3364e51db", "sighting_of_ref": "indicator--e28ef36f-cf2c-4835-b3e2-9a79822461f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ad63d7-acc6-479e-8f75-9bb20846671b", "sighting_of_ref": "indicator--fc767070-28e2-4ccc-a216-6a627437841c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad72728-6ddd-4228-9eef-b9f1a5ec0420", "sighting_of_ref": "indicator--9cd5223c-1d87-4830-b6ac-e9a9f84fb645", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f923f5a7-7292-4f9d-8c9d-94e37b8da521", "sighting_of_ref": "indicator--fc0cb892-3dd5-43ed-af63-8937a0e8d076", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a544c96-59c2-49d3-873c-2f0f6a3ca463", "sighting_of_ref": "indicator--fc0cb892-3dd5-43ed-af63-8937a0e8d076", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fffb7d-3597-4542-8496-a237ddadf23e", "sighting_of_ref": "indicator--7fa9d647-82cb-446e-afd6-abd939617e21", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2232069-9b88-451f-b419-c7dfdbb3a665", "sighting_of_ref": "indicator--3dca8208-de0f-4e51-bf2b-e49ef2e57d3e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f41d7e-07c7-4b1e-bbeb-8201ad3086ba", "sighting_of_ref": "indicator--3dca8208-de0f-4e51-bf2b-e49ef2e57d3e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf49ff8-33f7-4712-a7e5-4f145f22c4e8", "sighting_of_ref": "indicator--fff7c801-9c71-4f66-b59b-efa60ede0c47", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6f8581-5ace-426b-98e8-24a0e1518993", "sighting_of_ref": "indicator--fff7c801-9c71-4f66-b59b-efa60ede0c47", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ea2334-196b-4103-98cb-b60b87860601", "sighting_of_ref": "indicator--fbea94f1-ccc0-4f0e-aa5c-6da9994ac9f5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c1e58f-16b8-4365-b7b6-d78195096db3", "sighting_of_ref": "indicator--fbea94f1-ccc0-4f0e-aa5c-6da9994ac9f5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d50099e-c5cf-4a5f-a3ff-a234f925eda1", "sighting_of_ref": "indicator--de68a36a-5acd-4f7e-b196-964c26762b21", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef53bbe8-cf52-461a-9436-285ff5a7fa8f", "sighting_of_ref": "indicator--de68a36a-5acd-4f7e-b196-964c26762b21", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22427242-0757-466a-8871-94eef5cc2ea5", "sighting_of_ref": "indicator--cbe6ed19-b9ab-4e4d-8030-c5f8cc58e438", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68dee09a-2365-459c-805b-4d791d249978", "sighting_of_ref": "indicator--cbe6ed19-b9ab-4e4d-8030-c5f8cc58e438", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cdbd10-8bb9-4dad-94c6-eac3fd277c52", "sighting_of_ref": "indicator--c7a504d8-427b-42f8-9bb4-a33ef64061a9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e8fc47-7d1e-417e-be98-09bbfa7efebb", "sighting_of_ref": "indicator--c7a504d8-427b-42f8-9bb4-a33ef64061a9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44b70c6-af9d-4c2c-b0d5-cc85d6902677", "sighting_of_ref": "indicator--7e878a75-61ab-4a54-a7d3-31603055488e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b4f467-5e45-44c1-b6ba-7556813cd3c2", "sighting_of_ref": "indicator--7e878a75-61ab-4a54-a7d3-31603055488e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0d29b7-a612-49ef-adb2-e13bed22c7a1", "sighting_of_ref": "indicator--7e87ea80-8795-43ef-ab17-4dc2c64d41c3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03e2c59-0a1c-4f55-9265-87f57dc33121", "sighting_of_ref": "indicator--7e87ea80-8795-43ef-ab17-4dc2c64d41c3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7425ce53-e8c0-449c-bddf-5d1d0405aeb3", "sighting_of_ref": "indicator--acb1bedc-5ef4-40ea-87bf-38cb29bb97d5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f422f5f-4fb5-447a-9177-16c5791d099a", "sighting_of_ref": "indicator--acb1bedc-5ef4-40ea-87bf-38cb29bb97d5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf5f09a-0877-4fba-ad09-fad39cc57c4c", "sighting_of_ref": "indicator--3d63f25f-3268-466e-88b9-b4427c2b4816", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccfd1d91-52c8-4282-9d90-c9d7991f76d2", "sighting_of_ref": "indicator--3d63f25f-3268-466e-88b9-b4427c2b4816", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8adad4b-a59f-4eb6-907e-e211502c1bef", "sighting_of_ref": "indicator--6d66c390-3568-410b-9916-8b0199950b0b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a9a18d-d96d-4017-9d1c-5c78dce49a52", "sighting_of_ref": "indicator--6d66c390-3568-410b-9916-8b0199950b0b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9c46d5-879c-43ad-9692-c71ffbdf4d9c", "sighting_of_ref": "indicator--5b1f2ca1-ac0e-432e-8994-f9396e1546fc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650ae2b0-fcd4-40d4-914b-42806f803d5d", "sighting_of_ref": "indicator--5b1f2ca1-ac0e-432e-8994-f9396e1546fc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17feb059-d0c8-43b1-bfa3-186075e25129", "sighting_of_ref": "indicator--bcdd161f-7102-4a1a-8c2c-a2906d5c1c85", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab157b1d-1c9d-4d65-ad20-676fb9c15be1", "sighting_of_ref": "indicator--bcdd161f-7102-4a1a-8c2c-a2906d5c1c85", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6e7941-fde5-4151-bde4-15ad12f9845e", "sighting_of_ref": "indicator--b423fdbf-a853-4899-9bd2-384f75376eda", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93287241-7c03-404c-8783-b76f4a6d790f", "sighting_of_ref": "indicator--b423fdbf-a853-4899-9bd2-384f75376eda", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b3b7c2-0fe7-43ee-ab88-cab2490e345a", "sighting_of_ref": "indicator--b92fddf6-ce67-4e55-930a-ddb90e7b8249", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a2fcff2-76dd-4e5a-8098-e2626773acc5", "sighting_of_ref": "indicator--b92fddf6-ce67-4e55-930a-ddb90e7b8249", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4263186-a5e5-41d0-8a0a-bca1a6c5d1da", "sighting_of_ref": "indicator--475629c1-f311-4d6a-b0f8-efff6f0ed7db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc18d1d-d0d1-4f8f-928e-3cbf2d4d66f2", "sighting_of_ref": "indicator--475629c1-f311-4d6a-b0f8-efff6f0ed7db", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0d35b1-7de1-4929-9c55-6c03bed24f42", "sighting_of_ref": "indicator--de2b0e5a-03a8-4d87-92d3-f3ca9af74cc4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bce8689-c303-4e42-9e77-6ab10f228bca", "sighting_of_ref": "indicator--de2b0e5a-03a8-4d87-92d3-f3ca9af74cc4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3abb0a0-2489-434a-abe1-3517635c03a4", "sighting_of_ref": "indicator--767711ff-7574-43b8-8411-b66dd0a06630", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cbe2ce-3adc-4276-96ec-1ea6e035f158", "sighting_of_ref": "indicator--767711ff-7574-43b8-8411-b66dd0a06630", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f972ab2c-2973-4a9c-ad31-97d67b2791b3", "sighting_of_ref": "indicator--ec3ca9b9-3c3a-47b4-b69e-2b311414083d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c12cd2d-147d-4f05-afdc-d6607eab96e3", "sighting_of_ref": "indicator--ec3ca9b9-3c3a-47b4-b69e-2b311414083d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a638c85-5ade-4c6a-89fb-58b5ed560cc6", "sighting_of_ref": "indicator--83fe0cf7-9d9e-41df-93f9-fba9930054de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff715544-b6d2-4b34-9e64-2668be0c1e57", "sighting_of_ref": "indicator--83fe0cf7-9d9e-41df-93f9-fba9930054de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a933d0e7-3b92-4b9e-b706-1a0574be1925", "sighting_of_ref": "indicator--00d5f5cc-894b-476f-8ae7-8d256f5544c1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bfe822-2f96-4c3c-8d28-89298bcac978", "sighting_of_ref": "indicator--00d5f5cc-894b-476f-8ae7-8d256f5544c1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3310cd58-fae4-4bc0-8baf-449750bf0212", "sighting_of_ref": "indicator--1ca20f72-87a0-4b84-ab4d-c56d556e87f1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4080e7e-4c4c-4c5c-814d-f05cf16a194f", "sighting_of_ref": "indicator--1ca20f72-87a0-4b84-ab4d-c56d556e87f1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6df676-3814-4ac2-a65f-d8dba9e604bd", "sighting_of_ref": "indicator--b55bd76f-76c3-462f-8850-0057ee0ffc53", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb4e986-e2b3-46b0-bc34-3088ed74728e", "sighting_of_ref": "indicator--b55bd76f-76c3-462f-8850-0057ee0ffc53", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf9f579-a3b7-43ab-8b00-1647d7d6a946", "sighting_of_ref": "indicator--65db4cbf-fb75-44c3-9ebd-c2ba3f1e2750", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336eb863-69bb-49e4-ae5d-7cf40b90ddce", "sighting_of_ref": "indicator--65db4cbf-fb75-44c3-9ebd-c2ba3f1e2750", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8a91cc-3a93-48c8-8d08-df950ae6cce8", "sighting_of_ref": "indicator--b38533d9-3720-4d45-9800-814566260903", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc963430-78ca-4099-98cb-39ebb2b0de81", "sighting_of_ref": "indicator--b38533d9-3720-4d45-9800-814566260903", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15406d39-2ebd-4734-9053-73f296c0d2cd", "sighting_of_ref": "indicator--397814ef-05d7-47f7-9f52-5a0172fdcee6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abf1851-b563-4b39-989b-57ec6b11e49a", "sighting_of_ref": "indicator--397814ef-05d7-47f7-9f52-5a0172fdcee6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1de73e-a7f2-4484-90ff-9bcc5aec8d0b", "sighting_of_ref": "indicator--28cace55-8087-43bf-8509-1fb2b58391d3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c415d6-0c7a-4cc0-9548-1410d13b415e", "sighting_of_ref": "indicator--28cace55-8087-43bf-8509-1fb2b58391d3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db23a134-0fe1-4677-a4a0-d1bd9fea1fb8", "sighting_of_ref": "indicator--a2700e5d-d680-42aa-b537-16bbbf035141", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77176da-ca48-4e12-a33f-5d7b6d00d2c5", "sighting_of_ref": "indicator--a2700e5d-d680-42aa-b537-16bbbf035141", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80b7a56-a40c-4009-9994-6cf621e8b940", "sighting_of_ref": "indicator--406ae0b5-409f-4250-bf01-738c52c37808", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0573b022-1dd4-4ee7-b984-c83e82162911", "sighting_of_ref": "indicator--406ae0b5-409f-4250-bf01-738c52c37808", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f16f64c-84a6-4bfc-8bb6-4682aaf10ee7", "sighting_of_ref": "indicator--03381275-057d-4be6-aa52-315ef6ba97bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0165d0-c861-4ffd-8823-a613f13d37d6", "sighting_of_ref": "indicator--03381275-057d-4be6-aa52-315ef6ba97bb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8937b72b-95d6-41c8-9f6c-9472dbe6284e", "sighting_of_ref": "indicator--5bb0c5cb-e52a-45e8-9f5a-0d68ea8d9085", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23231ff8-c08f-4c69-8668-ad8700fbab34", "sighting_of_ref": "indicator--5bb0c5cb-e52a-45e8-9f5a-0d68ea8d9085", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cc8d4c-b7c9-4a93-ae4f-08f3000b38a7", "sighting_of_ref": "indicator--c81ab053-efbe-459d-b030-376fccea964d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4ee2b2-2f5a-4fc1-b358-4da7d9b4710f", "sighting_of_ref": "indicator--c81ab053-efbe-459d-b030-376fccea964d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184bca67-aa7c-479c-aed6-630d652ab55e", "sighting_of_ref": "indicator--7df785d1-fa39-44d7-b973-edf87e6e423d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514b18a9-69c1-459f-8c6e-87af710202b4", "sighting_of_ref": "indicator--7df785d1-fa39-44d7-b973-edf87e6e423d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebd2292-0f7f-432b-b783-f9d011df6cef", "sighting_of_ref": "indicator--6b359a6b-2c6c-4c61-9cf9-f6486830b48a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea25894f-4da1-4c96-909d-897db2534080", "sighting_of_ref": "indicator--6b359a6b-2c6c-4c61-9cf9-f6486830b48a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9db325-6d3d-4d2e-b4c7-2839fd7254e6", "sighting_of_ref": "indicator--49994c39-f343-4951-9f77-6fb764d2b537", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491bcc6c-ac8d-4bb9-8dc6-6fd26941ca18", "sighting_of_ref": "indicator--49994c39-f343-4951-9f77-6fb764d2b537", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc7646a-abfd-4479-a04b-8d7e604bc633", "sighting_of_ref": "indicator--d47c0cb0-51a8-4d04-9255-f51ddb991f1e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e1ae2a-fe46-4063-8097-4de34055f1e7", "sighting_of_ref": "indicator--d47c0cb0-51a8-4d04-9255-f51ddb991f1e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77111535-9396-4a75-88fb-a7b4875847a9", "sighting_of_ref": "indicator--07e99561-37fb-4868-b9f4-5446567228d8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fc4f74-b1e2-42af-8f80-1fba4b8725ff", "sighting_of_ref": "indicator--07e99561-37fb-4868-b9f4-5446567228d8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055b7801-bbda-4fbf-9ee8-f3fc53bf7e99", "sighting_of_ref": "indicator--8dd7fae5-2ea3-420d-8f9b-757e1ca7772d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f010ce3-1a7b-45e4-b29f-42a6b5a5bc75", "sighting_of_ref": "indicator--8dd7fae5-2ea3-420d-8f9b-757e1ca7772d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e096e577-78f2-48cc-ad86-0f7fa79f3f00", "sighting_of_ref": "indicator--4214a38f-e88b-4c90-9ff3-19670a9985ee", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e998e3f-8589-4c12-94d9-b490413c662a", "sighting_of_ref": "indicator--4214a38f-e88b-4c90-9ff3-19670a9985ee", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd7e39f-48cb-4012-8781-832f8b9490a3", "sighting_of_ref": "indicator--0c402589-f607-4d9f-bfe1-c586dbadce06", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bafcd5ab-b9b6-4d7c-b3e6-9b916d850a32", "sighting_of_ref": "indicator--0c402589-f607-4d9f-bfe1-c586dbadce06", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23cb07d-8696-4335-aae3-06a608b29296", "sighting_of_ref": "indicator--069dc322-739e-48cd-8512-8b65dce45fab", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e9e8cb-d067-412d-b47b-252486fca272", "sighting_of_ref": "indicator--069dc322-739e-48cd-8512-8b65dce45fab", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d997f2-0423-4119-ae77-8b542c4d8abd", "sighting_of_ref": "indicator--0740b534-697d-40e5-b508-14d2e2a8d2cb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5689a1da-788a-483e-b43d-85b827b841ef", "sighting_of_ref": "indicator--0740b534-697d-40e5-b508-14d2e2a8d2cb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048f5857-9543-46d7-aa33-e49e07c2dd41", "sighting_of_ref": "indicator--7e328ff3-785e-4697-bb7c-a1dec6451776", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc75a01-9c20-401c-a7a7-d5aa6fe9181f", "sighting_of_ref": "indicator--7e328ff3-785e-4697-bb7c-a1dec6451776", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed6f988-c98d-4a7c-932c-6ceb8643da4e", "sighting_of_ref": "indicator--fe291691-378f-4b6d-a345-eaeafaaee369", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92e597f-d3ac-44f1-a7e6-372ed7fb8b7f", "sighting_of_ref": "indicator--fe291691-378f-4b6d-a345-eaeafaaee369", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640d0881-6626-45b7-b6f1-4f07def9f39f", "sighting_of_ref": "indicator--8b684551-44b8-4328-b0f6-ef0e67c7735c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22343135-555c-438d-af90-33c05d8f0950", "sighting_of_ref": "indicator--8b684551-44b8-4328-b0f6-ef0e67c7735c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf91fce-d5e9-48a0-8742-96984948284a", "sighting_of_ref": "indicator--33eac343-fb3a-4171-8904-f652b93f8761", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f322cf2-1ed6-4174-bdb1-7ee378988fed", "sighting_of_ref": "indicator--33eac343-fb3a-4171-8904-f652b93f8761", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2487fe-31a1-44fc-8553-90cd39076221", "sighting_of_ref": "indicator--0e2f1bb4-d03b-44c7-8820-514542612f52", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a5a74e-0648-4e68-9e0d-38a17b30ba77", "sighting_of_ref": "indicator--0e2f1bb4-d03b-44c7-8820-514542612f52", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51af929c-e79d-4926-8d2a-b2aaa08881ee", "sighting_of_ref": "indicator--62a2e553-1d5e-4d8d-93ee-4efc0c78e216", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e22f8d-9354-4c31-95ae-fa11a16cba8e", "sighting_of_ref": "indicator--62a2e553-1d5e-4d8d-93ee-4efc0c78e216", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bf36c8-8035-488e-baf8-0c222ec628a8", "sighting_of_ref": "indicator--d96ac398-8a62-4ff5-bf70-6b56588a1c4b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1721022-a5c5-4c6d-8f5d-9d4c72a66838", "sighting_of_ref": "indicator--d96ac398-8a62-4ff5-bf70-6b56588a1c4b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045768ab-b7e9-43c4-a531-8267b7808c2c", "sighting_of_ref": "indicator--798b2842-0f70-407d-be58-8a2d512980a5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a17a44-d822-4dcf-a5a7-a21d2098b2c3", "sighting_of_ref": "indicator--798b2842-0f70-407d-be58-8a2d512980a5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9001ef-2de2-4853-9b11-9038d0e3cf38", "sighting_of_ref": "indicator--847f971c-af4b-4565-a122-5c3196cfc7cb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42115e35-d153-4d95-b1dd-acb121107cfb", "sighting_of_ref": "indicator--847f971c-af4b-4565-a122-5c3196cfc7cb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811468e5-ff23-47c4-b521-8b8941d7edcd", "sighting_of_ref": "indicator--c1bdefb7-261f-405f-9df5-84ed83550af9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a22fa72-a706-40ad-b7ed-a1eaa2981a74", "sighting_of_ref": "indicator--c1bdefb7-261f-405f-9df5-84ed83550af9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4c72ec-fa89-4863-b7c8-3ad017f6d11a", "sighting_of_ref": "indicator--d0bd7f16-fd1b-4ec0-aadd-4b4c4d20b8bf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6195f382-89cb-43b7-955c-4999eb71ec69", "sighting_of_ref": "indicator--d0bd7f16-fd1b-4ec0-aadd-4b4c4d20b8bf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e689f7de-aa27-4f1f-9e28-bf775a94960b", "sighting_of_ref": "indicator--ffd27836-cbf8-4c18-80ef-ceaa3915a1a8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62f179a-f561-4d29-a5b4-4b7811b566fc", "sighting_of_ref": "indicator--ffd27836-cbf8-4c18-80ef-ceaa3915a1a8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c086cf-6ca8-4133-a9cf-52ebad6704e2", "sighting_of_ref": "indicator--a7d3f4e1-f1bb-49b4-a318-9e9e89fc187e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d64c1e3-ef21-45f5-a7e9-42cdc1b4c1c4", "sighting_of_ref": "indicator--a7d3f4e1-f1bb-49b4-a318-9e9e89fc187e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a2b580-a17c-4d48-a9e8-3e7d1433ea5f", "sighting_of_ref": "indicator--72a058fd-6e3c-46e1-9eaa-127c1d89b28c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b0608a-7a23-4298-b36c-c9ebc82c9032", "sighting_of_ref": "indicator--72a058fd-6e3c-46e1-9eaa-127c1d89b28c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa165c32-9170-446e-9976-b7ec210d86c9", "sighting_of_ref": "indicator--6964196d-4048-455d-915e-143dee078218", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b364d9d-b3b1-4cb6-ad18-ce859a718cf7", "sighting_of_ref": "indicator--6964196d-4048-455d-915e-143dee078218", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5379bb-2db6-4eed-9d2e-59919f9b3818", "sighting_of_ref": "indicator--a082e173-8ef8-4ff5-bad0-3de10f9795aa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2440583a-def1-4210-b105-77fc5bba8e67", "sighting_of_ref": "indicator--a082e173-8ef8-4ff5-bad0-3de10f9795aa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd33e17-f654-48f3-9334-fff90c7f1ca6", "sighting_of_ref": "indicator--1bc8352e-26f8-42b9-bcef-5700b3eea424", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed051937-734f-4ffc-98ea-09f70b458671", "sighting_of_ref": "indicator--1bc8352e-26f8-42b9-bcef-5700b3eea424", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a302dd6b-8140-4ad8-9006-7780b5a7aaa3", "sighting_of_ref": "indicator--7005f7bb-0a5c-4536-aab8-7f334986b04a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c2c03d-7ed6-4007-9338-a31d1a38e802", "sighting_of_ref": "indicator--7005f7bb-0a5c-4536-aab8-7f334986b04a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6d8282-9b97-4112-8810-a9f698d8d142", "sighting_of_ref": "indicator--bb41debc-263e-4187-9445-fa33c6b181a1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c19459-2d8e-4e07-831d-cb7c2ad0e5ce", "sighting_of_ref": "indicator--bb41debc-263e-4187-9445-fa33c6b181a1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04bfe29b-8e07-4daf-b730-d0f470a39043", "sighting_of_ref": "indicator--1a210618-1e66-43a1-922e-991abb8cf9c3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27447e8d-8747-42fe-84ea-cb7ea2ff5847", "sighting_of_ref": "indicator--1a210618-1e66-43a1-922e-991abb8cf9c3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c0c160-ad48-40cc-8a33-632d911d7d2c", "sighting_of_ref": "indicator--08679b28-6f8a-43bf-b5e0-135978458322", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c4c638-2b9f-4125-badb-16b03c1cd30c", "sighting_of_ref": "indicator--08679b28-6f8a-43bf-b5e0-135978458322", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b51463b-6692-4abf-9152-854c33d61469", "sighting_of_ref": "indicator--b37e4bc0-af46-4381-894d-dda04f4ca6d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b40bf8-da9d-47f5-ab41-e304b7ef11d8", "sighting_of_ref": "indicator--b37e4bc0-af46-4381-894d-dda04f4ca6d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cf5901-75d3-41cd-ac8e-281f0b39679b", "sighting_of_ref": "indicator--2b7cf9df-f200-4369-a79f-fa46405c5220", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17192d10-1735-4088-8b07-9ced3514bfb8", "sighting_of_ref": "indicator--2b7cf9df-f200-4369-a79f-fa46405c5220", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee24443a-fb63-4daf-a2e8-9976743724c9", "sighting_of_ref": "indicator--fc8d422a-2378-49ea-8483-b58bd3636cda", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c84c12-ac80-4643-8574-e2e48bc97ff0", "sighting_of_ref": "indicator--fc8d422a-2378-49ea-8483-b58bd3636cda", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16ea0f3-2e72-49b1-8cc4-d105ae599ca0", "sighting_of_ref": "indicator--9ddc2e24-62e8-4765-8e82-6e33bba1349f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67782e8b-fe6b-48ca-9320-bdcef0f28714", "sighting_of_ref": "indicator--9ddc2e24-62e8-4765-8e82-6e33bba1349f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a52422-2101-43c1-87ac-12ec7a45b026", "sighting_of_ref": "indicator--d9b64d5c-718e-4d44-9ceb-f7e0fb8c641a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207991c5-d744-4567-98f6-8bb91382c94b", "sighting_of_ref": "indicator--d9b64d5c-718e-4d44-9ceb-f7e0fb8c641a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d08a32-0444-4a01-8b8d-3ff389c97240", "sighting_of_ref": "indicator--6d01155d-8dc7-4141-9817-f43366d11741", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9407260-7727-4bf8-a996-b6f2f881f00a", "sighting_of_ref": "indicator--6d01155d-8dc7-4141-9817-f43366d11741", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79ae333-535f-4926-94cf-b3933100e7b7", "sighting_of_ref": "indicator--94e90692-36c7-49ba-97ed-0f77f9592cd7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3abacc2-04fd-4e29-862a-3c182d13b5bd", "sighting_of_ref": "indicator--94e90692-36c7-49ba-97ed-0f77f9592cd7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bd9908-64b7-4122-b79b-03b85a0a5f88", "sighting_of_ref": "indicator--7248b8be-9c82-41a7-924c-639349745124", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b236b54b-a146-4c14-985b-b5f598711e65", "sighting_of_ref": "indicator--7248b8be-9c82-41a7-924c-639349745124", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7356d2c6-bd2d-420e-b044-ebf207b7274f", "sighting_of_ref": "indicator--f90a8aba-f842-43fa-b231-66fec2068386", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5252f2f3-3a09-49d2-8900-b211a7dd5788", "sighting_of_ref": "indicator--f90a8aba-f842-43fa-b231-66fec2068386", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea15091-cc7c-4cdd-9cfc-719073b9fcd6", "sighting_of_ref": "indicator--f7e4affe-b3df-4153-a2c5-e16b886058ef", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f90779-d5a3-496e-902c-005f253f5dfc", "sighting_of_ref": "indicator--f7e4affe-b3df-4153-a2c5-e16b886058ef", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4362b766-0821-48ee-84b2-65ef5293542b", "sighting_of_ref": "indicator--93df5c4f-00d0-4f63-ae2b-3a4ceb8323b4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5171cd6-023f-4e05-9e9b-dbc15ab83469", "sighting_of_ref": "indicator--93df5c4f-00d0-4f63-ae2b-3a4ceb8323b4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d808d4a4-666a-454d-ab0e-e37f0bd9f0fe", "sighting_of_ref": "indicator--dc39832e-a49c-4b2c-b8b9-6076e5a7577d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef5710b-b60f-4a14-8b14-2e5ddbef83c3", "sighting_of_ref": "indicator--2e0390d1-8389-4224-81fc-a93e5fb78e9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8506ca8-0213-4be7-8085-09cef4fc8e73", "sighting_of_ref": "indicator--1730f71d-26dd-48fc-bc51-cb34eeae9796", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7093dbbd-c488-488e-b615-d9a4884cece6", "sighting_of_ref": "indicator--9e37c916-8037-4f9b-9d32-2b46250a3000", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d18a00-4708-4970-bcaa-a8c8c93a2114", "sighting_of_ref": "indicator--f837739a-d272-494b-b226-245116358d45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189c43ac-e609-409a-93f9-77f9c3f2b33d", "sighting_of_ref": "indicator--13914a26-76e8-4549-8d04-dda03323972c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3b4e30-42c1-4606-af4b-a914141dc105", "sighting_of_ref": "indicator--13914a26-76e8-4549-8d04-dda03323972c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f42698-b4b7-48d8-a264-6a5f0568c535", "sighting_of_ref": "indicator--13914a26-76e8-4549-8d04-dda03323972c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15271f48-343b-49f2-a67b-a4d41f9bcb08", "sighting_of_ref": "indicator--f528b0cb-a261-4b9f-8350-790be942de2d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ba1fad-8dd9-416f-a543-2df344061cbb", "sighting_of_ref": "indicator--f528b0cb-a261-4b9f-8350-790be942de2d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c84e775-40c7-4788-9b36-4ed559e08fcc", "sighting_of_ref": "indicator--a8b7c825-3993-412c-99cc-690ea0f85d24", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04e59dc-8904-4861-a929-b1b31fe39cf3", "sighting_of_ref": "indicator--a8b7c825-3993-412c-99cc-690ea0f85d24", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19b857f-e1fb-4509-bb36-340c351b32ed", "sighting_of_ref": "indicator--1c6ae334-e8f0-4feb-ad30-a5691df7ff2d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23859f51-f6ec-4ea4-80ca-26d2a78ee087", "sighting_of_ref": "indicator--4fcf1cda-4394-4da7-ad55-c6c787243b40", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db15cf3-37d0-4253-bc7f-32d2f68af019", "sighting_of_ref": "indicator--466868b5-866b-42ec-94f1-56f2afdf133b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9295ea1-c2a2-4333-9f6f-964965aeddd8", "sighting_of_ref": "indicator--466868b5-866b-42ec-94f1-56f2afdf133b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9e09ea-eb0a-4755-a4a1-b5fea00febc2", "sighting_of_ref": "indicator--466868b5-866b-42ec-94f1-56f2afdf133b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d4e10e-6644-45e1-be74-e2727d7a9a20", "sighting_of_ref": "indicator--cf5c2b5d-c503-49a4-a0b9-c6efb47c0e6d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a91a5d2-e084-4871-9f33-f3c4bd5119ce", "sighting_of_ref": "indicator--cf5c2b5d-c503-49a4-a0b9-c6efb47c0e6d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89257f7c-154b-4598-8660-c4a34901aadf", "sighting_of_ref": "indicator--cf5c2b5d-c503-49a4-a0b9-c6efb47c0e6d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155856a3-ec09-4a5a-8123-d4d0b87b3eb8", "sighting_of_ref": "indicator--7ef62dcb-ab2d-4505-a963-fd33a3d0a906", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c1cba0-ad6d-486b-b8f6-7a3a803f6566", "sighting_of_ref": "indicator--7ef62dcb-ab2d-4505-a963-fd33a3d0a906", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ac0c1b-9fed-413e-86ef-671926ae1172", "sighting_of_ref": "indicator--7ef62dcb-ab2d-4505-a963-fd33a3d0a906", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e6f40e-913c-41c4-9a92-b560a25c3a3f", "sighting_of_ref": "indicator--2c0692b4-9bb4-4766-b31f-377084f9a481", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b958fdc4-fa1d-4514-b478-6c9f70038441", "sighting_of_ref": "indicator--2c0692b4-9bb4-4766-b31f-377084f9a481", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaa017b-aaf9-4369-9c32-c6cdf4c5cb59", "sighting_of_ref": "indicator--2c0692b4-9bb4-4766-b31f-377084f9a481", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d65a9a-33e2-4897-af6e-5353ae431d65", "sighting_of_ref": "indicator--93ed1d89-fcae-4afb-99a4-58bd38da681d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01e17d0-35f0-4274-b2de-2871f2d8b1c9", "sighting_of_ref": "indicator--93ed1d89-fcae-4afb-99a4-58bd38da681d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040632e0-6c86-4754-a7c3-bb06a90c0387", "sighting_of_ref": "indicator--93ed1d89-fcae-4afb-99a4-58bd38da681d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dbcaaa-dfed-4478-b02b-2467b741534b", "sighting_of_ref": "indicator--f85d54ec-19bd-4726-935b-336827f272fd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4099d8b-197d-45ea-9207-8bc21712d7a5", "sighting_of_ref": "indicator--f85d54ec-19bd-4726-935b-336827f272fd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6b2c0f-7910-4cb2-81cc-717bbadcfa8f", "sighting_of_ref": "indicator--f85d54ec-19bd-4726-935b-336827f272fd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ff25df-4be5-479f-8537-f77e384760cc", "sighting_of_ref": "indicator--b462dda6-db33-440e-aaea-0aa9001ada3d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f83d6b0-159c-40fa-b38b-c854699e00db", "sighting_of_ref": "indicator--b462dda6-db33-440e-aaea-0aa9001ada3d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d60687-8fc3-4d5f-ba48-97b3027282fa", "sighting_of_ref": "indicator--53f92668-bd2a-44a6-a132-854d67c8e513", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0850bac9-b329-4181-b6d8-b4b0cd524065", "sighting_of_ref": "indicator--53f92668-bd2a-44a6-a132-854d67c8e513", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3fe2da-1665-4723-8853-137e8296c40c", "sighting_of_ref": "indicator--53f92668-bd2a-44a6-a132-854d67c8e513", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690ef03c-b61a-400d-9274-ae0c6a7c6509", "sighting_of_ref": "indicator--88264aef-fc06-4e98-b076-999b76fcbdac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1318cbc-e610-4913-867c-603ff43d5a60", "sighting_of_ref": "indicator--6f6f6770-2ca5-4a06-9b1d-b1ad84d9b5e8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5895832a-b276-4664-b37c-824c636845e6", "sighting_of_ref": "indicator--6f6f6770-2ca5-4a06-9b1d-b1ad84d9b5e8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7109792-e3b2-40c1-a7ce-be9137f0de71", "sighting_of_ref": "indicator--3f0f26f1-9e2a-470f-bb37-b90b81fcaf2b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c397029-fdf7-4e78-a32b-3d032038d2fd", "sighting_of_ref": "indicator--d7403db1-6d58-4c6c-8cbb-6898c8cad556", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac1ad2a-2cf5-4831-a6cc-9ef7359f946d", "sighting_of_ref": "indicator--3847933e-210f-436e-99b2-dd9558169119", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c3385c-76b7-45ed-a9b7-18c56163be05", "sighting_of_ref": "indicator--085f7baa-785a-4db1-a8b9-9375208e573e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1f4773e-8566-4fa4-8c48-3f0004fe1280", "sighting_of_ref": "indicator--03755e40-dc86-4c15-9a27-5abdd8d14c54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc748bf-be7f-41cf-9c3d-852271e76209", "sighting_of_ref": "indicator--19e3a835-dd01-4b79-a1f3-f8b6ba67cc34", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f415510d-496f-4664-ba70-5abd4fd295e9", "sighting_of_ref": "indicator--632b045f-ba2f-4183-a657-b2eddedae2a1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f15063b-d363-43ca-8093-eaadda42b71f", "sighting_of_ref": "indicator--842cd4fa-8f2c-4ce0-971a-3059a983f347", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c461f058-2bdc-45fc-8f06-3c55ce656612", "sighting_of_ref": "indicator--34143475-ac4d-4281-96a0-847b09469464", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a7a8c9-f74c-4315-8edd-0059fcf44d25", "sighting_of_ref": "indicator--a41ee46e-d4b6-4efb-9867-7c2c9c9d666c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793cc63a-874c-4470-90b8-8e0342529b15", "sighting_of_ref": "indicator--f0e4a678-f733-47d6-b07f-36516d3acafe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f0d6317-a289-4b4b-86f0-a5bb692702d8", "sighting_of_ref": "indicator--68629866-9c8b-493a-873a-29bda0dafbfb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c248e334-fe6d-4ad8-ad2f-6a7d4e1143f7", "sighting_of_ref": "indicator--fc9f0629-ee16-46fc-9b0e-70da0e318ac5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc953d07-940c-45f0-bf42-d37d3f0a26ba", "sighting_of_ref": "indicator--62e23d46-d704-4b0b-ae14-2d5175a41b03", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ac9b18-52a2-4ac7-a6ad-a40e8e362fd8", "sighting_of_ref": "indicator--1797c97c-ccbe-44a9-b2db-d39406ad59a4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594f1a2d-b112-4dc5-98ab-0e500caedcd0", "sighting_of_ref": "indicator--e40a667b-d936-4306-989e-d1792715282c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949cf2ec-cf6e-43ab-bc3d-342b2a7d259c", "sighting_of_ref": "indicator--9f52ccb2-d6d9-472c-ab08-83b2e88e2f61", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a6cf72-05a9-4de4-b386-9080af544ab4", "sighting_of_ref": "indicator--9f52ccb2-d6d9-472c-ab08-83b2e88e2f61", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65aad2d5-5737-4525-98ba-90e2343ba536", "sighting_of_ref": "indicator--9f52ccb2-d6d9-472c-ab08-83b2e88e2f61", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f04ecb-dacc-4bb2-8d51-409dc33d47e6", "sighting_of_ref": "indicator--cfac4d92-85f3-4eda-85ae-7cea23e14a59", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4a0e94-73e5-48f3-aac7-ec6e4275f735", "sighting_of_ref": "indicator--cfac4d92-85f3-4eda-85ae-7cea23e14a59", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e56b7f-0d1c-4d58-9ac3-7806d83f42da", "sighting_of_ref": "indicator--cfac4d92-85f3-4eda-85ae-7cea23e14a59", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c27207-402d-4d7e-9059-abce3567fa35", "sighting_of_ref": "indicator--17a40c0f-5e2c-4ccf-b5b4-0bb2cf230500", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7317c2bb-f59f-46b1-9e46-980ce1428e4b", "sighting_of_ref": "indicator--17a40c0f-5e2c-4ccf-b5b4-0bb2cf230500", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8531e8-9260-4de7-9552-9c8c6e7c9da4", "sighting_of_ref": "indicator--17a40c0f-5e2c-4ccf-b5b4-0bb2cf230500", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24609183-a44f-4ca8-baf1-75fb32a2f842", "sighting_of_ref": "indicator--10e39b12-a0bf-416e-b5ba-e810dfd5f620", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa8b4ff-6b49-422a-9d82-7f7c19f049ac", "sighting_of_ref": "indicator--10e39b12-a0bf-416e-b5ba-e810dfd5f620", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf427537-2195-43a9-a43f-4bf1efd4ecf6", "sighting_of_ref": "indicator--10e39b12-a0bf-416e-b5ba-e810dfd5f620", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efc4714-dea5-4280-aa20-2c087327f0be", "sighting_of_ref": "indicator--ff078080-a6d5-4cce-b4a2-53bcd512d5de", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0018464-7273-45a6-89eb-7d26e770ab60", "sighting_of_ref": "indicator--ff078080-a6d5-4cce-b4a2-53bcd512d5de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1748894-726c-4a60-8c55-3afe2ea25b0a", "sighting_of_ref": "indicator--dc5a61eb-802a-4e56-819f-f5af0535f8d0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e5efb9-42e6-4f9f-acef-2093a6bc1ad4", "sighting_of_ref": "indicator--c6633008-52a9-44f6-805a-8ba68633bd95", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311eddb9-0555-4dbc-9fc2-c3033134db00", "sighting_of_ref": "indicator--4a8afcdc-6a42-4eb6-88d6-85271628e8e4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83837686-5952-4f4e-945d-40a8551c2726", "sighting_of_ref": "indicator--667aa5c4-2881-4f74-b9a7-ec05739964d6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636527a6-7886-46d6-8c2d-eecd168e4424", "sighting_of_ref": "indicator--94e3b8fc-af4f-441e-9447-5fea23794941", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbfa977-5818-4a64-aec6-3e0787455131", "sighting_of_ref": "indicator--a241f0a6-c8a0-49da-9442-06c0a9a8e6fb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f27c59-9ad1-4cff-b27f-ea55e51c6f90", "sighting_of_ref": "indicator--a241f0a6-c8a0-49da-9442-06c0a9a8e6fb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdeb0a7-8ab8-470f-925a-252199b642a1", "sighting_of_ref": "indicator--a241f0a6-c8a0-49da-9442-06c0a9a8e6fb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a071b4b6-7389-436d-a095-a3752a52a988", "sighting_of_ref": "indicator--98b6d935-d56d-47b4-8a9f-6f7e04f10660", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c705e05c-ca72-451e-baad-2fb97f1a8ccc", "sighting_of_ref": "indicator--415fa32a-51b7-4f5f-9259-3a4fa4918706", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410bf566-3602-445b-b747-d34a084b5dfd", "sighting_of_ref": "indicator--a3c2ef05-cdcd-49e0-9df6-975d4ae6055f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f5cf5e-d4fa-4533-93f9-7e7dda30647f", "sighting_of_ref": "indicator--30370742-194a-40f0-b466-39e56585ba21", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037db173-fb83-4e1a-bdfd-a9a6a1f45e9b", "sighting_of_ref": "indicator--50938c7c-8b8c-4c4e-8c5b-befeb1a29cce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75612e87-cc4a-48ab-9e84-f03e69410e85", "sighting_of_ref": "indicator--6cefe3ae-0e30-4529-9027-68a55e87aeeb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba6e1a2-93b5-4a9c-9137-6efc33d0eb45", "sighting_of_ref": "indicator--638b0607-7af7-48af-8563-8620ac2f7c88", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c325e4-7de9-43a2-900c-a281f019a250", "sighting_of_ref": "indicator--9c2591b7-2625-4a69-9c89-e38082354e2c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6759f43-d093-4322-bba1-fadb1ca12d27", "sighting_of_ref": "indicator--5f0b10f4-11b6-424d-bbc1-ded6e84e7231", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1794234c-5a69-4e62-a4bb-3375fde3ffbf", "sighting_of_ref": "indicator--ad1c74ea-3f15-4660-bdd3-f06ef7ee3e56", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841a6aa4-72bc-4f66-81b7-3993ec8aad80", "sighting_of_ref": "indicator--d971f93b-0655-4839-b07f-0f5974da2e1a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776d704d-568b-4b42-bd0b-c6d513f28f0c", "sighting_of_ref": "indicator--6b1100c1-e85a-47f1-8ee5-b5d02f7abf02", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4f3801-b7af-4663-b49c-8cfafbc27b5a", "sighting_of_ref": "indicator--c71bd72c-2b16-417f-9185-6a763a52fd96", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0d76a1-573c-4b17-8fc9-4162173013d2", "sighting_of_ref": "indicator--efdb305b-9063-4e79-a806-eebfd6493916", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dd5a82-d919-4352-ad0f-1cd461aa02a5", "sighting_of_ref": "indicator--efdb305b-9063-4e79-a806-eebfd6493916", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ee1642-f033-45ca-9812-8ea7a797ecc1", "sighting_of_ref": "indicator--6fed8106-c09e-4b30-92fc-265ae659feb3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70c028a-5b16-4168-b33c-c961e232fc54", "sighting_of_ref": "indicator--6fed8106-c09e-4b30-92fc-265ae659feb3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074363a3-3b5a-4cf2-b55c-f9d9aeed9ebe", "sighting_of_ref": "indicator--eb672eb8-80a5-4360-a75b-81a672280326", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc12700-8fda-41de-80a8-c41a12f52437", "sighting_of_ref": "indicator--97cf4b09-c343-4092-85dd-002ef13f8e31", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b70bda4-c8f8-4a8a-bb74-6c7456edc580", "sighting_of_ref": "indicator--c9cb51e0-f047-47ba-aec6-087fc4b078bf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63b6d64-8123-4404-8372-8984f5ef9a76", "sighting_of_ref": "indicator--5b310f42-33aa-4eb7-a9d0-d45057f73c84", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e45f908-e42f-4df8-9ec5-b5a88c7c39d0", "sighting_of_ref": "indicator--149d8751-3dbb-4cf0-9089-adc7eec5aea7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8669999-ab77-47b7-bc5b-a92c57162029", "sighting_of_ref": "indicator--7030bfe0-650a-4a21-868b-8b41221c39d0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b112a8-4218-4518-b70f-067bc45d5a0a", "sighting_of_ref": "indicator--5771d590-32d2-4cd0-bc0c-60e09907b642", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80669742-3ec1-4e92-a47d-4c9be7a79140", "sighting_of_ref": "indicator--dc604106-0bdf-44b9-b210-53a419ff1b77", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d02b91-f172-48b1-8356-845a6e5ad77f", "sighting_of_ref": "indicator--de540ccd-7c7f-4f2a-accf-2b4a54cb50e4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0cba1f-59ff-4e0a-a857-3c6bbc9db5ae", "sighting_of_ref": "indicator--de540ccd-7c7f-4f2a-accf-2b4a54cb50e4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bd3bf1-c48d-494d-a6cc-1d51a9b96ee2", "sighting_of_ref": "indicator--a5e41bc3-ed3e-46f2-8f2d-ee96b7f6a306", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a8cc94-e15f-407f-8e7e-981f734c03e2", "sighting_of_ref": "indicator--597e4c6a-6a4f-4f55-919e-a484850872f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f4c5c0-635f-4922-be0f-8fa08f2d7ef8", "sighting_of_ref": "indicator--597e4c6a-6a4f-4f55-919e-a484850872f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c951ee4-379e-4fb0-986f-533b734ccb65", "sighting_of_ref": "indicator--63f326b4-bbc9-4467-bad0-59dfac5ad908", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684be862-b0e7-4f40-87d1-87091f34b3c3", "sighting_of_ref": "indicator--63f326b4-bbc9-4467-bad0-59dfac5ad908", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa0b1de-4a14-4125-ba7e-47eceb1ecff2", "sighting_of_ref": "indicator--63f326b4-bbc9-4467-bad0-59dfac5ad908", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46aed18a-f28b-46d4-8a0b-bfb0cc8f0041", "sighting_of_ref": "indicator--8f0054e1-7a1d-40a9-a064-41d7a004db23", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f1b31c-217c-4350-9ca2-bde51414d926", "sighting_of_ref": "indicator--8a22fc05-3098-443a-8e79-38bf9c3b89f8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36bc4bb-7d08-4a42-851f-a82931f7d42a", "sighting_of_ref": "indicator--8a22fc05-3098-443a-8e79-38bf9c3b89f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4947d0-8b61-4d0e-b0fb-98b5729c7f2f", "sighting_of_ref": "indicator--8a22fc05-3098-443a-8e79-38bf9c3b89f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e773336a-95aa-4236-bed0-2d90541c560c", "sighting_of_ref": "indicator--972aceb8-45f9-440c-8f74-f02e5a38f8cc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c87452-1e46-4b63-a406-b0491f5aeeed", "sighting_of_ref": "indicator--f0dfdd0f-9e2a-4cbf-bbb4-1c96c7c21280", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745b1033-e32d-4f2d-9b6e-cdf170487612", "sighting_of_ref": "indicator--ecac8b19-0e2c-476d-9860-d61631383af5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c0066a-2490-4d30-b85d-d8ebf7f7014a", "sighting_of_ref": "indicator--2a7a346d-10d9-4366-9231-8738ab0435c8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f817aca3-79b4-4677-9845-51f8333ab13c", "sighting_of_ref": "indicator--9d2571dd-abca-48c9-987a-ec1c2567f80a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6cc7e6-cd06-4fd0-a025-10312e90dd5f", "sighting_of_ref": "indicator--4ec83a16-9641-4b95-9e8c-f91f3dd79778", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d38643-6f31-4152-ab44-25bb49fdb4fc", "sighting_of_ref": "indicator--134c5a24-82ee-4d88-9960-2ec2a81e5fb5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4173924-b6c8-4282-98b1-383fec7d4089", "sighting_of_ref": "indicator--48898e04-0e3a-4994-93f3-6c60b7f4e347", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15640f4-1327-4d26-a96a-de3478154432", "sighting_of_ref": "indicator--fe34875b-aa90-4a9c-a93f-ad1db8e9fcab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f078bf9-95c6-4b3a-b449-7a32f19edde7", "sighting_of_ref": "indicator--8da91c72-1479-4fc0-a9a4-1541a1b1a405", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacf2963-dcee-46a0-9a23-82c4504b517c", "sighting_of_ref": "indicator--3c38ef24-37b0-41d0-ae82-be049e8a1236", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc7899d-06a1-4ed8-98bb-2462f348ff02", "sighting_of_ref": "indicator--c780179e-c1be-4d69-93a3-ef0208239094", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7542ee56-3d1e-4534-a567-f3d89490a2b4", "sighting_of_ref": "indicator--59898a0c-61f1-4984-9eae-d069f102f77a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d53112-c08a-400f-b89a-7d5b93b977aa", "sighting_of_ref": "indicator--3026c9d3-a37a-4b90-802a-feba99da752a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a755ca64-d188-4433-af0b-84dc182c83da", "sighting_of_ref": "indicator--58dc5047-0278-4167-8587-a0323c880cae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca219d6-043b-4e88-aa9d-8e23ae16b47e", "sighting_of_ref": "indicator--ca7b79f0-f29e-4e60-9102-23ee3aadb42c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fc32af-5242-4475-948d-ca6de71de5dc", "sighting_of_ref": "indicator--5b02ac67-287f-483a-9515-1639a210f037", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da59730-62ce-4fbe-97c3-724d1d4c727a", "sighting_of_ref": "indicator--7eeb2ce6-6560-4d5e-88f3-29822c6aa026", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c7b3bb-cec6-44fe-a0c7-48916359285f", "sighting_of_ref": "indicator--df40c7da-e284-4cc8-b420-b4d542d112bd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a49731-6802-41d7-a91d-93b873c4a00b", "sighting_of_ref": "indicator--cb2e617b-3602-40bc-a6cb-8599a50bf0c4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a9a2be-acda-428a-8b22-06b7653de7fe", "sighting_of_ref": "indicator--186a25d4-0f0d-4d4c-a57d-3f9e4dc3d82b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b44b7d-ab3c-498b-a0f5-93442d680859", "sighting_of_ref": "indicator--d7dfaa85-fa0d-483c-b052-c89de00d2ee1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0562b235-f7c8-4019-813e-c8e40c6a5dab", "sighting_of_ref": "indicator--1b04f41d-0bcf-4154-81d4-7af7ae0bcaa6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a88c13-2887-4da5-98cc-1781c63e11d4", "sighting_of_ref": "indicator--d19d4e10-e9fc-4c13-aa23-9d4349edad51", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e394600b-9a8d-4517-b475-daa85d2478b9", "sighting_of_ref": "indicator--d19d4e10-e9fc-4c13-aa23-9d4349edad51", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6a392d-0e03-4a1b-85c1-faa19d6de4d6", "sighting_of_ref": "indicator--d19d4e10-e9fc-4c13-aa23-9d4349edad51", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87ae614-70e1-4b6e-afcb-aca1c3df421b", "sighting_of_ref": "indicator--f3fa2d9d-79ee-4f5f-9f09-89bce3134a2e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12730cf4-1bc0-4e00-a381-f3e662877276", "sighting_of_ref": "indicator--c327a745-b512-45e2-8886-77b47a997085", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f026ceb-d3a9-4fe2-a6cf-9475be0df5ad", "sighting_of_ref": "indicator--c327a745-b512-45e2-8886-77b47a997085", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27a6188-df12-4ce6-b162-648816fb617d", "sighting_of_ref": "indicator--c327a745-b512-45e2-8886-77b47a997085", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f66cee-50e2-4271-832c-79c75595ab7e", "sighting_of_ref": "indicator--a0e9dee0-008c-4eaf-9759-0bff76fac544", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001b857e-c91a-4c79-a5fd-e553aeaaac5e", "sighting_of_ref": "indicator--a0e9dee0-008c-4eaf-9759-0bff76fac544", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705614d0-e3cd-454c-bb98-e5611772ebc8", "sighting_of_ref": "indicator--a0e9dee0-008c-4eaf-9759-0bff76fac544", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d051e1-26f8-4d3e-9309-5097142dae76", "sighting_of_ref": "indicator--39007eb8-e760-415f-a343-43e0b19f85a8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f916818-7cb0-417c-8f19-d7481d6adc46", "sighting_of_ref": "indicator--39007eb8-e760-415f-a343-43e0b19f85a8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660de19e-d0a6-4d68-abae-bbc1fd8eb614", "sighting_of_ref": "indicator--39007eb8-e760-415f-a343-43e0b19f85a8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cecbb03-9803-44e8-845e-79d64a7eff1b", "sighting_of_ref": "indicator--e432629b-965f-492b-8b79-daab4ba5f070", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e334a9-61a9-4877-a91b-2e3196823a05", "sighting_of_ref": "indicator--0c9addba-da57-4a2b-a361-0283ec276261", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0400dab0-4a84-40e5-bf6e-9f2f29bc0b3e", "sighting_of_ref": "indicator--c4c1bf30-7d73-4dd8-bf9a-b5683d88cf3d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bed2f47-aa2e-469d-8281-4807e03b3197", "sighting_of_ref": "indicator--653dc545-b9f9-45c0-a2c5-3ef3d9b54113", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1f1edb-9d78-4679-a6bf-5ae70746ba0e", "sighting_of_ref": "indicator--2ac32f48-bca0-4fbc-8879-ac6cbeff50af", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5de3091-3451-4985-a9a9-8cd9a3760bc0", "sighting_of_ref": "indicator--3948c0fd-1ed2-4253-b6ef-bfe9a0498993", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb922cc8-73a1-43ec-9c3d-0a12057a4143", "sighting_of_ref": "indicator--b6205144-b559-42fa-844a-c30b7b73cbaa", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242406cf-9cee-4a3f-a26a-4eba007e9352", "sighting_of_ref": "indicator--e66f7ae4-3ccc-4d1a-95fb-7dd01b24b098", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef439b73-5981-4490-849d-69aa68e5a080", "sighting_of_ref": "indicator--e66f7ae4-3ccc-4d1a-95fb-7dd01b24b098", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1978d8fb-0613-4349-8ff7-6fff8e4ad64e", "sighting_of_ref": "indicator--cde74d69-77b7-4ea1-acc5-62f52603fe46", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879096b6-d121-4150-8b51-087e75772304", "sighting_of_ref": "indicator--cde74d69-77b7-4ea1-acc5-62f52603fe46", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce839ca-e41c-4e79-98e9-81a6253d0cde", "sighting_of_ref": "indicator--ef55eb46-cd31-43f6-a843-da491d010e73", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea1b7c4-05fa-4557-9552-d87cd425421f", "sighting_of_ref": "indicator--ef55eb46-cd31-43f6-a843-da491d010e73", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f80d48c-dc19-48ac-9456-9e2c61176872", "sighting_of_ref": "indicator--4ac9cf8e-aa62-4f42-a535-5c860d8eeb52", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6154c0-1f2f-4d71-b5e1-aaf375b8314c", "sighting_of_ref": "indicator--4ac9cf8e-aa62-4f42-a535-5c860d8eeb52", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce98fa4-0c9c-4608-9d71-1196bdb2b830", "sighting_of_ref": "indicator--3429ec1b-81cb-47f8-ae88-29db6c23e884", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7662b7d8-8539-4f8a-a1a9-6328933e3f67", "sighting_of_ref": "indicator--3429ec1b-81cb-47f8-ae88-29db6c23e884", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd771ab-e9bb-4ab2-b97b-2f98a6a8196f", "sighting_of_ref": "indicator--1299258f-24e0-4122-86ff-a9db2f42e5ba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72796dca-e7ee-4182-8498-72cdc010c0f2", "sighting_of_ref": "indicator--1299258f-24e0-4122-86ff-a9db2f42e5ba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8f331c-dff4-4419-ae5f-ad9d0ffc4f9b", "sighting_of_ref": "indicator--22364fdb-4140-485e-bb29-f008412aefb1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57da2de8-23aa-4eeb-8cb9-8993546afcf8", "sighting_of_ref": "indicator--22364fdb-4140-485e-bb29-f008412aefb1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ea6553-7cc6-4c6a-94d2-9ccfdb2b52ff", "sighting_of_ref": "indicator--8d36abcc-2b94-4319-9e9c-e3f6b0e2cf8a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3044f5-f174-4997-ada7-542fe9102a30", "sighting_of_ref": "indicator--8d36abcc-2b94-4319-9e9c-e3f6b0e2cf8a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9b6fb2-d7a1-4677-96e7-88f4df5cc82d", "sighting_of_ref": "indicator--dc7815d5-1d9f-4bf9-a248-48dc33b76cea", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25879658-5f04-4de4-a8b6-899310e75961", "sighting_of_ref": "indicator--dc7815d5-1d9f-4bf9-a248-48dc33b76cea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12276a14-f832-4f56-8038-6cc510c1cb69", "sighting_of_ref": "indicator--efcbff6e-ed22-4777-9c22-40537d406127", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe5ab73-4e60-43d0-9ce1-f522f57e4e98", "sighting_of_ref": "indicator--efcbff6e-ed22-4777-9c22-40537d406127", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f5e551-9d9a-4d90-b00c-31f2b810fd3b", "sighting_of_ref": "indicator--a876497a-9f0e-4ac0-b51c-8d9235b5bb21", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b96afd0-ce3e-4e2e-acf0-f732f5b3cf9b", "sighting_of_ref": "indicator--a876497a-9f0e-4ac0-b51c-8d9235b5bb21", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cdb2aec-c483-4939-9e34-c6e63146c00b", "sighting_of_ref": "indicator--92195eb9-b8b4-4eee-acc5-e28cfcb0bda8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650d0637-d6aa-42c8-80e8-6a77aec27eed", "sighting_of_ref": "indicator--d44496d9-7574-41e8-9201-a936704e413b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd492bd-9acc-4dd7-8947-48ddcc760aec", "sighting_of_ref": "indicator--d44496d9-7574-41e8-9201-a936704e413b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0adf3352-6059-4480-a76f-faa547751fa6", "sighting_of_ref": "indicator--50f84cda-11a1-4ffc-8c1a-551f02b03cff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a11efa8-5fee-46a7-9475-0c553acc2bea", "sighting_of_ref": "indicator--50f84cda-11a1-4ffc-8c1a-551f02b03cff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcd58fe-94b9-49c3-bc94-dda936bcd52f", "sighting_of_ref": "indicator--ed6d956e-687e-42e3-8f52-cac4983e45f8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105d9029-6d04-42ec-9041-4086b53da741", "sighting_of_ref": "indicator--ed6d956e-687e-42e3-8f52-cac4983e45f8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e03223d-fd7f-4ada-8da1-19dc06b13a82", "sighting_of_ref": "indicator--ca313af3-246c-49dd-b0ad-446fa3c8d9b3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa7389c-b490-4914-9690-7de2a85810f4", "sighting_of_ref": "indicator--ca313af3-246c-49dd-b0ad-446fa3c8d9b3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49603410-c689-42f8-8909-c3c6a869ec75", "sighting_of_ref": "indicator--2b827b14-7cdc-48c9-a51e-c85725a36fac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b3a902-4d32-4257-ae41-1180cdc49464", "sighting_of_ref": "indicator--2b827b14-7cdc-48c9-a51e-c85725a36fac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee48e9e-51e7-4af0-93c7-d63754c469fe", "sighting_of_ref": "indicator--7a7f0081-e46c-4946-a155-968793661687", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b831f64d-987b-4e2f-a549-a0334f048599", "sighting_of_ref": "indicator--7a7f0081-e46c-4946-a155-968793661687", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839ac448-74bb-458b-9d51-dcb2afec019e", "sighting_of_ref": "indicator--06df281c-9885-4419-a6a2-8c523cbfcbf4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b8a616-0ef3-4465-bd9a-8f9dfa7b79b9", "sighting_of_ref": "indicator--06df281c-9885-4419-a6a2-8c523cbfcbf4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495bdbed-8a7b-4fde-ad7d-bf00f6055988", "sighting_of_ref": "indicator--a3a3ea4c-34eb-4fd4-a5cd-1342c55dd2cd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2f55eb-a119-4d7f-8985-113727d7b6ff", "sighting_of_ref": "indicator--a3a3ea4c-34eb-4fd4-a5cd-1342c55dd2cd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e862a3-2a00-4d47-b8ed-561c12e57585", "sighting_of_ref": "indicator--755fefb9-81ae-4f0e-875c-0783251203ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741e6276-536a-48a2-be78-207e6cd86a86", "sighting_of_ref": "indicator--755fefb9-81ae-4f0e-875c-0783251203ce", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3d82f8-ead5-4dbb-bb7f-f5596c98b42a", "sighting_of_ref": "indicator--94c6aa7c-79e7-447d-8934-875146a8aeba", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cc798a-af6a-46a8-b75f-29d8c9efd287", "sighting_of_ref": "indicator--a034174b-7854-45fe-8088-5b19a17aee87", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e24a9b-3e9e-48c4-b49e-b33e0078cf20", "sighting_of_ref": "indicator--0b5f1918-6fbf-42f8-895a-3d42073e877c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ac3cdb-c520-4ed8-bdbb-a362806e7e8e", "sighting_of_ref": "indicator--0b5f1918-6fbf-42f8-895a-3d42073e877c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46702e64-36f9-45a7-b477-01cb410d05e6", "sighting_of_ref": "indicator--7ed17a97-91df-4482-bfc3-5ce9f3f2d79b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89618d9c-8ae4-41d4-86f5-11c2d465393c", "sighting_of_ref": "indicator--7ed17a97-91df-4482-bfc3-5ce9f3f2d79b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16baa11-932a-4c99-9c1d-27e4985c8ef1", "sighting_of_ref": "indicator--11fd59cb-41a9-4a8f-9613-bdea516422e3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1784a25-27ae-4d15-b1f8-ed24b21f5465", "sighting_of_ref": "indicator--11fd59cb-41a9-4a8f-9613-bdea516422e3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467a037a-c4ed-4ee8-9e4b-59d78fe6c6f6", "sighting_of_ref": "indicator--d6fbbb62-32d0-4ec1-b866-55f6d691fdec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825c3b3e-ccef-4783-8b37-cec3bbe4152f", "sighting_of_ref": "indicator--d6fbbb62-32d0-4ec1-b866-55f6d691fdec", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fe308e-aa0e-4d53-9d65-577d97b760fa", "sighting_of_ref": "indicator--369ad0d1-c737-4b61-ac73-ae2604756cf7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1845879e-7710-4fe2-92b6-dd53baff2327", "sighting_of_ref": "indicator--fe97437b-e56a-487e-88f1-ff691b9ee55f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7661272-911c-4d5f-a13a-a4551c500590", "sighting_of_ref": "indicator--faa155a7-ceff-426e-919c-a9bf48224a92", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621b663b-ed47-43ee-83dd-60acf6b3c531", "sighting_of_ref": "indicator--6a5a6199-c2f5-4d87-9b3d-d560d82c0b0a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be3c1f4-1909-4265-a511-4085c3bee729", "sighting_of_ref": "indicator--bb06d03a-5e84-4cab-bc4a-7aa91913e29a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d1c8c2-6f18-4956-8d90-ca9b364ccfc8", "sighting_of_ref": "indicator--ce9d3ccb-b1f9-4ab4-a558-ca45bb77edb9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ae3431-4280-4c86-9715-f2585daba11e", "sighting_of_ref": "indicator--6684ddd5-7341-443c-b77f-fc6c2334a58d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc16a7c-e0d7-4e63-b438-681a8ace051c", "sighting_of_ref": "indicator--6684ddd5-7341-443c-b77f-fc6c2334a58d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf5ca10-c87d-49d8-8d2d-2545eb7a010e", "sighting_of_ref": "indicator--6684ddd5-7341-443c-b77f-fc6c2334a58d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f5400e-dcc7-4537-b2e3-79e96e9315f1", "sighting_of_ref": "indicator--2d36c6f4-4edd-41a6-907e-39f5271548e2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39f6850-2e0e-4527-b842-a91efa5d17df", "sighting_of_ref": "indicator--5a5ef3d6-bd06-44d8-97d7-6677af80ac6b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ce674e-adbb-4bb2-bd6c-87ba9b23f93e", "sighting_of_ref": "indicator--5a5ef3d6-bd06-44d8-97d7-6677af80ac6b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ae5500-e15a-447c-8e1c-227e8640834b", "sighting_of_ref": "indicator--1a1554e4-c672-4cf5-ab16-75d0782fd409", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a502c32-1eb7-4068-a0b0-45ce264bcb83", "sighting_of_ref": "indicator--22144947-166e-4712-88b8-402da1805b65", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fabc0c-8ae1-4001-b386-148af4e498fe", "sighting_of_ref": "indicator--c7a71f26-6a74-48f5-8a50-58f85adec051", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43d8ac1-e33a-44e7-9b2b-ef59783bdc6f", "sighting_of_ref": "indicator--c7a71f26-6a74-48f5-8a50-58f85adec051", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda63042-804d-4709-b632-e8fed3937cc1", "sighting_of_ref": "indicator--c7a71f26-6a74-48f5-8a50-58f85adec051", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347e4382-5264-452d-8d40-bf25593cdea8", "sighting_of_ref": "indicator--006b0a31-05c2-4610-9068-9b8c8c769a0d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2b8718-a691-4995-b67e-634ebfa2bb71", "sighting_of_ref": "indicator--006b0a31-05c2-4610-9068-9b8c8c769a0d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5eee90d-427a-4ef1-b763-e9f3f7672295", "sighting_of_ref": "indicator--006b0a31-05c2-4610-9068-9b8c8c769a0d", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8764ac59-4b7f-41da-9d27-66360bc94498", "sighting_of_ref": "indicator--7c0cdd00-6080-4247-861c-9a34b6405b6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f857f75-0f2d-49d2-a5ff-5a800db5f6fb", "sighting_of_ref": "indicator--f9638c48-f77f-40f2-8cdc-05d054114de8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7d9e2e-9f6c-4afd-ba2c-e3d1d1b79ad7", "sighting_of_ref": "indicator--2f8e5826-6958-4490-8a20-e307bfe2ed53", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a7eab0-eedd-47eb-93d8-7dbcddeafd66", "sighting_of_ref": "indicator--2bd47087-4f45-4146-a145-ed8541e1aa9d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57148a2a-83c5-42bd-88e7-f53706d87d1b", "sighting_of_ref": "indicator--2bd47087-4f45-4146-a145-ed8541e1aa9d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bf9b22-cd0a-4c82-abb4-48b5cbe8c94b", "sighting_of_ref": "indicator--04587c9e-ab4b-4ad3-addd-5b0f06f019a8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2f1888-1c7e-4587-b903-0b73c5c514ff", "sighting_of_ref": "indicator--98fc801d-e567-4759-93e3-a9223fc3f958", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398a442d-93d6-466a-a792-0e26c24c4eae", "sighting_of_ref": "indicator--98fc801d-e567-4759-93e3-a9223fc3f958", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fed760e-1c3e-44d6-82a9-2aa2a1ca6ce7", "sighting_of_ref": "indicator--9ca8da38-b783-4f80-a136-fdddba4e04d0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa11ec48-6608-424d-adfc-901cd6358720", "sighting_of_ref": "indicator--9ca8da38-b783-4f80-a136-fdddba4e04d0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1256586f-a1ab-4e9e-886a-a38e198a0fb3", "sighting_of_ref": "indicator--00c41efd-4b91-4d3a-95cf-576f7b6ed87c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70b5d5c-f847-4682-8ca9-4f14888f51a7", "sighting_of_ref": "indicator--00c41efd-4b91-4d3a-95cf-576f7b6ed87c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f87f574-291d-4f41-9be7-87544754ea58", "sighting_of_ref": "indicator--71153609-93c2-4ae8-8f65-8d719b67c763", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416e8701-1915-41f5-bcab-5f67729f69e6", "sighting_of_ref": "indicator--71153609-93c2-4ae8-8f65-8d719b67c763", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872d2b07-c8f4-4f61-aee8-f99f17f02dfd", "sighting_of_ref": "indicator--91d09e8d-1217-4b12-b3b1-889f1f3c174d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f23c275-fa28-42e4-9362-7672786c8078", "sighting_of_ref": "indicator--91d09e8d-1217-4b12-b3b1-889f1f3c174d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc06b17-6912-4e7b-9d83-17d697e922a6", "sighting_of_ref": "indicator--8a7458d1-d738-4373-8d20-628af0fd293f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c304b9-c7df-4e92-b00d-1d36c3ecb5f7", "sighting_of_ref": "indicator--8a7458d1-d738-4373-8d20-628af0fd293f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73f7ad2-18ef-4a20-946d-ca1686a8c1b9", "sighting_of_ref": "indicator--b00fe72c-733a-4b13-bf1e-febaeb980978", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213839bc-b340-49eb-b66c-67dba736834e", "sighting_of_ref": "indicator--b00fe72c-733a-4b13-bf1e-febaeb980978", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7a44bd-5879-4d89-88ea-551c26a32bc5", "sighting_of_ref": "indicator--987812d5-92bb-4776-82a4-2a5f422d883b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25e59a2-daf2-42ce-985a-b6d8675fa56b", "sighting_of_ref": "indicator--987812d5-92bb-4776-82a4-2a5f422d883b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14fdf8d-f63e-4f65-9eb5-baf02b0820b4", "sighting_of_ref": "indicator--64fcdc86-6fdb-4de5-bf83-55c966c9fb70", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd541256-ae27-4c4b-9fd0-dcfbf9ec3798", "sighting_of_ref": "indicator--64fcdc86-6fdb-4de5-bf83-55c966c9fb70", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26a07d2-2d4c-43dd-8f86-d7581407a37c", "sighting_of_ref": "indicator--1e9c74e9-0808-4343-a962-9a59e1266b4c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932da04f-8531-4157-b4eb-e8fb48242a05", "sighting_of_ref": "indicator--1e9c74e9-0808-4343-a962-9a59e1266b4c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e63aaf6-d37f-4f0b-8c0a-27058881a43d", "sighting_of_ref": "indicator--293c9fc5-3e93-4f9d-9a0e-81a5d9a1cef4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e561d4b3-cb13-4815-824e-230864f3c931", "sighting_of_ref": "indicator--293c9fc5-3e93-4f9d-9a0e-81a5d9a1cef4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f55941-03a8-4a8b-892b-39ab6bd585c8", "sighting_of_ref": "indicator--90502417-c813-4741-9f6e-6b39b49318f6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e55ff9-47ca-4c5a-87f1-6832dafc41df", "sighting_of_ref": "indicator--90502417-c813-4741-9f6e-6b39b49318f6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e8e2d9-0a50-4cef-bef0-77fe7cce08dd", "sighting_of_ref": "indicator--fba2dfa3-5f47-4cc2-9f1f-ca03a5daeae1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8173114e-85ef-46f7-9d84-6b60478d2fde", "sighting_of_ref": "indicator--fba2dfa3-5f47-4cc2-9f1f-ca03a5daeae1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb11e78-43e8-4b58-bcd2-264447c126fa", "sighting_of_ref": "indicator--c0b6ad8c-9a8a-492a-a586-1b289e8b438e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a06230-7e92-4168-8bc7-49f06a738c94", "sighting_of_ref": "indicator--c0b6ad8c-9a8a-492a-a586-1b289e8b438e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f46efbb-5bdc-4db4-b271-ba8a1db1e0fa", "sighting_of_ref": "indicator--ad768c04-242c-4405-b898-2d4537a8d4ba", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadd5379-7afe-4437-a4a4-424c2cf295f3", "sighting_of_ref": "indicator--1e3d8327-828a-4bb1-bc22-f626f20c40c3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0186f1e4-5dae-4dae-bece-5528cbd45060", "sighting_of_ref": "indicator--04f75fbc-b17b-41b0-ab83-5453b3576127", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3df5a0d-6321-4047-a54e-acd0dccbb602", "sighting_of_ref": "indicator--66290f9a-c760-407a-8524-2ff9ac361742", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842d92c9-63c1-466d-9fe5-8feb1fd5be3b", "sighting_of_ref": "indicator--66290f9a-c760-407a-8524-2ff9ac361742", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b82190-0ea8-4df6-9e75-a79a8e80675a", "sighting_of_ref": "indicator--8a619f14-edac-48f7-af91-26e97ff78bc9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed51b1e-ae65-4d15-9e8f-50bc8c22401f", "sighting_of_ref": "indicator--f89b77d2-7b76-4c3d-9872-c20b919dc505", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1de16d-d94b-452f-95b7-ff9c7f8209fa", "sighting_of_ref": "indicator--f89b77d2-7b76-4c3d-9872-c20b919dc505", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62259764-e64e-4478-be6f-279b2ec6106a", "sighting_of_ref": "indicator--79b4706b-17b4-413b-aa9c-f8d71f3f1ac5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebabb61-0bd7-4830-b291-62c0612eefa0", "sighting_of_ref": "indicator--fc740518-4585-48b2-873f-2aa2e13c4dea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8fadae-a3a7-4601-a53f-8b5a852c3d01", "sighting_of_ref": "indicator--c062d8dd-dc84-44e7-b7f3-f74eb7905f29", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e3f3b3-9c48-420b-89f8-ff71353d0885", "sighting_of_ref": "indicator--8c8416b8-bf27-4613-a0da-d76569be7da7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f74b75-e4b7-4b2a-b5f6-8d594f3f52f6", "sighting_of_ref": "indicator--0ee6a998-f56e-4d44-8529-590e8930610a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d617c34-7c73-481d-ae42-c0dffa140f49", "sighting_of_ref": "indicator--0ee6a998-f56e-4d44-8529-590e8930610a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3933a7cb-45c8-423e-8f41-efdfc256a4cd", "sighting_of_ref": "indicator--0c4976b4-0351-4ce4-ba37-142887e3c794", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d385b0-070c-46cc-842e-70fb4d61e77a", "sighting_of_ref": "indicator--0c4976b4-0351-4ce4-ba37-142887e3c794", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f239a677-0c9a-4fd3-a795-4576294ce413", "sighting_of_ref": "indicator--c4435537-b8be-47db-b895-5f64bd964ee4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef64832-5fc8-4222-bd76-862d0acf9e2e", "sighting_of_ref": "indicator--c4435537-b8be-47db-b895-5f64bd964ee4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d49b57e-67fc-4b1c-b7ee-1b870bc17136", "sighting_of_ref": "indicator--e33ffbb6-b504-497f-a314-c62ad318324e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12c5ee8-6ede-4920-8c30-4749b0c2bcaf", "sighting_of_ref": "indicator--e33ffbb6-b504-497f-a314-c62ad318324e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a02e7d8-bb68-4cff-92ed-febac42397ad", "sighting_of_ref": "indicator--041778df-ebc1-4e95-be37-44df546fe157", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c7a617-2082-45a9-be2e-80c7d3266c29", "sighting_of_ref": "indicator--041778df-ebc1-4e95-be37-44df546fe157", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad7def0-3e3c-4341-b700-72bd31441205", "sighting_of_ref": "indicator--20588b89-b96f-4f51-89f4-4f4a34341025", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2301ce-99b0-4311-ba1f-ee7f9ded70c4", "sighting_of_ref": "indicator--4c803be3-f600-4ee3-b880-c53797154996", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58895b62-2166-4391-8fc3-bb06ab32c986", "sighting_of_ref": "indicator--7dac4063-44aa-4592-8c87-b0899da072e7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c5ed3a-b45e-49f7-85d2-a3313bb08e7b", "sighting_of_ref": "indicator--d61b3b41-1757-4e13-b755-0e7e0c273f16", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b06e7c3-bf3e-4920-ae5f-f70a900a0c3b", "sighting_of_ref": "indicator--62c1bc31-2c06-479b-90f7-3523c396ba2c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d2181f-7f2f-4d9d-9280-5214acd96fd1", "sighting_of_ref": "indicator--62c1bc31-2c06-479b-90f7-3523c396ba2c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6f87a6-2f7b-4285-a5eb-f80cceab357c", "sighting_of_ref": "indicator--e55190f7-49f4-4557-8648-da2104331e6a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e506d66d-504a-4af2-b932-9185b71c9660", "sighting_of_ref": "indicator--e55190f7-49f4-4557-8648-da2104331e6a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd10ea7a-7268-45dd-8914-49f3e69a7858", "sighting_of_ref": "indicator--01a729a6-06f9-4f62-a445-68a56365d6fb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32064b8-78b3-4fe3-b8e4-b29bf6bdfeee", "sighting_of_ref": "indicator--01a729a6-06f9-4f62-a445-68a56365d6fb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8dacb57-f340-4f3c-869a-742efa86af66", "sighting_of_ref": "indicator--5cff7bfb-271c-4c05-ab84-37696d0d55d8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca326f3f-3143-4a0f-9b57-dc96aaed6b92", "sighting_of_ref": "indicator--5cff7bfb-271c-4c05-ab84-37696d0d55d8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5032812c-9299-4dd4-964e-94d76dcaac1f", "sighting_of_ref": "indicator--fc05cd8f-f40e-439b-8d6d-212724fa7716", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244b17d7-f13e-4617-8395-b36cac75c3ac", "sighting_of_ref": "indicator--fc05cd8f-f40e-439b-8d6d-212724fa7716", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32fd33f-86cb-4f54-8fd4-4c306891bff2", "sighting_of_ref": "indicator--fc05cd8f-f40e-439b-8d6d-212724fa7716", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4226fdb-2116-4321-a45c-2ae3106a1cc5", "sighting_of_ref": "indicator--8ca949e1-95db-49c7-a61b-9490b4396fb7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84fe4c0-a86e-4ba9-945e-f612f14aad5d", "sighting_of_ref": "indicator--3e255138-6db7-4003-b9c8-46668ed5054f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23754653-0cea-4924-9186-2d155aca3f4b", "sighting_of_ref": "indicator--46e0602f-9391-4801-b459-fa365dff1898", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fb214c-9e91-464f-b15d-240b4f0b0455", "sighting_of_ref": "indicator--46e0602f-9391-4801-b459-fa365dff1898", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0ae0a1-04e4-46cf-8e89-c74d625b0fe1", "sighting_of_ref": "indicator--768d203c-8988-431a-b4ca-f664595ddd92", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37535df6-76ca-4aa4-9f3f-3d885d35fc48", "sighting_of_ref": "indicator--768d203c-8988-431a-b4ca-f664595ddd92", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abdc39b-fc9c-4a45-b314-faebe8ab71d3", "sighting_of_ref": "indicator--9fb4f978-ad6b-4429-a3c1-3460dcb2cd43", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6924f3-6549-47c1-887f-8f5c7868fe7c", "sighting_of_ref": "indicator--9fb4f978-ad6b-4429-a3c1-3460dcb2cd43", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566de99b-72b3-47e3-8808-a1bf1e9b9917", "sighting_of_ref": "indicator--8cecf1bc-9727-4285-b1e4-2782045563b7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7cc720-35b9-49ed-9821-36339146ebe2", "sighting_of_ref": "indicator--8cecf1bc-9727-4285-b1e4-2782045563b7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04fd357-628c-47d6-aada-9f5bbd5f6adb", "sighting_of_ref": "indicator--91af08ad-b29c-4333-af41-b9621ffd2b89", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab2a291-682f-4e2a-8ade-4c30fecf5453", "sighting_of_ref": "indicator--91af08ad-b29c-4333-af41-b9621ffd2b89", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f9014e-f0c8-4ceb-b39f-b2d0fef59b33", "sighting_of_ref": "indicator--4f8c7c67-3a8f-4f5a-8507-5c8dce29f91e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf42253f-4a20-4a76-b578-b0747234e292", "sighting_of_ref": "indicator--9928953d-d3ac-4023-ba3c-780c6de4faf9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80867f8a-1e35-49a1-ab4b-10d4bc8f9652", "sighting_of_ref": "indicator--81c1287c-e966-4802-9539-42f804ba3e99", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cf46e4-ad06-4853-b019-52838f4b9a29", "sighting_of_ref": "indicator--81c1287c-e966-4802-9539-42f804ba3e99", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dee406d-e5fd-428e-84a1-6819e3bfe159", "sighting_of_ref": "indicator--84213708-a14f-412b-81d1-50f5cb631412", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dcdc46-1a41-49a6-99d7-0ac345e439e9", "sighting_of_ref": "indicator--84213708-a14f-412b-81d1-50f5cb631412", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf70501-7908-4fa5-82fe-6e7d93a44138", "sighting_of_ref": "indicator--6576aed1-a57d-498b-9ebb-de6548f95ce3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb03bdd0-25a7-4fb9-ad86-86ec255e7e56", "sighting_of_ref": "indicator--6576aed1-a57d-498b-9ebb-de6548f95ce3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f03a0a-c36c-4ea0-96de-1457fd6b033d", "sighting_of_ref": "indicator--b71df779-b472-41e4-93f8-63413d14130f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1752ea2e-acdd-4e1e-a79b-2800aec16595", "sighting_of_ref": "indicator--b71df779-b472-41e4-93f8-63413d14130f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc53681a-3615-4280-84f4-973d17757bae", "sighting_of_ref": "indicator--32543b57-f78e-4d58-b6fc-71b54f3fb9f9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2faf3b3-1f75-4e93-a01d-b9c6f99aaf89", "sighting_of_ref": "indicator--32543b57-f78e-4d58-b6fc-71b54f3fb9f9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84992507-c643-4ae1-bac5-b04507f1ba72", "sighting_of_ref": "indicator--b084bf30-701d-4d82-9980-d9108c181fe0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efa9d81-c551-4be2-8b6e-b63fb82ae479", "sighting_of_ref": "indicator--b084bf30-701d-4d82-9980-d9108c181fe0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45672985-787b-4a16-b54e-e8ed3f7ad3e5", "sighting_of_ref": "indicator--87c5431b-d025-4195-8fc4-b2f5647ad4f4", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f062dea-d83a-413c-94af-227b6f65356e", "sighting_of_ref": "indicator--87c5431b-d025-4195-8fc4-b2f5647ad4f4", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e022d7-0fd9-4b76-a54b-36e99af94a20", "sighting_of_ref": "indicator--4ab53e8a-888e-4d51-b2d5-2ef4e8547022", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985e12dc-376f-470c-8027-c0debe3f3bc1", "sighting_of_ref": "indicator--4ab53e8a-888e-4d51-b2d5-2ef4e8547022", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc2d490-cbad-451d-805e-2964c1bd42ae", "sighting_of_ref": "indicator--7e9651ea-d7ad-4ddc-a8d0-51ff08c37ce3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52676d84-1cf7-4b67-a29a-24b886a2248f", "sighting_of_ref": "indicator--7e9651ea-d7ad-4ddc-a8d0-51ff08c37ce3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028e7881-2b37-49e1-bef5-8243f72a79e9", "sighting_of_ref": "indicator--97d882a1-a31e-4901-b4fb-42d26de66311", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defcb7ff-51ee-49e8-a842-352f00170f4a", "sighting_of_ref": "indicator--96550439-dcc1-4098-96f6-f3a6d0129096", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8500a4d-366c-4532-aace-41df58d90851", "sighting_of_ref": "indicator--80759c45-2b74-4a2e-b3a2-1bceeb9bbbae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1096658a-b7b7-4254-b9d1-65a89089b1cc", "sighting_of_ref": "indicator--80759c45-2b74-4a2e-b3a2-1bceeb9bbbae", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f17a99-b71a-4091-b4b1-26eee73d9576", "sighting_of_ref": "indicator--876da4c1-9f9e-4f61-902a-fe5f77adca89", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc29cb0-1fa3-46fa-bff4-6b45c60180ff", "sighting_of_ref": "indicator--224e077f-3614-44ea-ae06-baad9baec6e6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b08cdcc-13e7-4e6a-8793-63b9bcb5444f", "sighting_of_ref": "indicator--01e170f0-3c30-4a83-8a7d-8253a7247a45", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab69027-211f-4bdc-a346-d93db8f27a41", "sighting_of_ref": "indicator--01e170f0-3c30-4a83-8a7d-8253a7247a45", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28098e96-f6c1-4bea-a30e-63e03783b49f", "sighting_of_ref": "indicator--ffa695ee-ebee-4f86-9f5d-5d878c1661a5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac14819-020d-4a76-8753-5097f89baf7e", "sighting_of_ref": "indicator--672b42fd-3cad-4c63-9ec1-cc830e8f8832", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13260cec-0f5c-4b09-bce4-a3a7e16a1fa2", "sighting_of_ref": "indicator--6a03e943-1b52-4d5b-bdbd-61ec013e82aa", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3e46a0-0e70-4e74-9017-f9988da4f314", "sighting_of_ref": "indicator--a1398072-6e1c-4196-9d34-6bc9a13a1318", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccdccab-1255-4987-bccd-897fedbcb4c2", "sighting_of_ref": "indicator--a1398072-6e1c-4196-9d34-6bc9a13a1318", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c844ea-acfb-4c9a-9d9c-b57427a09f4b", "sighting_of_ref": "indicator--ff501cda-43b0-45a6-b09c-7e4c6ee3b81d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856d5800-f62e-4f5a-8b71-75bb32ff908b", "sighting_of_ref": "indicator--ff501cda-43b0-45a6-b09c-7e4c6ee3b81d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7290e05e-3af6-46ec-a3da-6dbe0865dec5", "sighting_of_ref": "indicator--144ab893-cb11-48fe-9123-e0f8374264d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e1f4cf-7cf6-478d-981f-42851b34b83a", "sighting_of_ref": "indicator--144ab893-cb11-48fe-9123-e0f8374264d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5d448d-7cf9-4c0f-8a54-d409b8ef8276", "sighting_of_ref": "indicator--860d4297-4dcf-49c7-a652-8e74a2426ae7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d17f4a8-adc8-44d5-8849-624204497b8e", "sighting_of_ref": "indicator--860d4297-4dcf-49c7-a652-8e74a2426ae7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3e8454-c67f-40bb-9fef-f3704db98eaa", "sighting_of_ref": "indicator--afc40197-ed14-43ff-a9dc-16c49c6db427", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7aa918-f4e4-4953-8333-4095526f676b", "sighting_of_ref": "indicator--afc40197-ed14-43ff-a9dc-16c49c6db427", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c21acb-f0cc-4d32-8e11-1372b71b24db", "sighting_of_ref": "indicator--24e91c60-c4a2-4614-8727-8383cc1b88ae", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c8795e-1fbc-465a-a6d5-13afccd48bd0", "sighting_of_ref": "indicator--2d6d4bbd-9b34-454d-ae40-3af11f82e19c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058f9509-dc78-4824-be76-a4e2d5f4e375", "sighting_of_ref": "indicator--2d6d4bbd-9b34-454d-ae40-3af11f82e19c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19008368-6b91-4305-ae21-4c0ec8e2001d", "sighting_of_ref": "indicator--549f2e18-3ad8-46b8-8ae5-7ff158bb8afd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41025380-14f8-47a8-8f9d-a4ee64a1caf0", "sighting_of_ref": "indicator--549f2e18-3ad8-46b8-8ae5-7ff158bb8afd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4ddd6f-ae11-498c-a013-9e59ec21ee0d", "sighting_of_ref": "indicator--de172b1e-35d6-4238-8e72-a716637a6cfd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e11c40-dbcf-4d31-86ac-f352d00a44a3", "sighting_of_ref": "indicator--de172b1e-35d6-4238-8e72-a716637a6cfd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31783cbd-79d1-4aaf-9b03-18c07e07d06f", "sighting_of_ref": "indicator--9bad716f-ade2-46ff-941f-71303efb1c3c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75532fe-119c-481c-9734-024c98c20c60", "sighting_of_ref": "indicator--9bad716f-ade2-46ff-941f-71303efb1c3c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701c689a-7cbd-4153-87f1-d3dbe12088d6", "sighting_of_ref": "indicator--fd51b78e-10b1-4b7a-9046-92aa0771440d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b04f6b-ae45-4e64-9c7a-1e0e4e5ef0b1", "sighting_of_ref": "indicator--fd51b78e-10b1-4b7a-9046-92aa0771440d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34679af-2589-46e8-b55e-a6145c2f4176", "sighting_of_ref": "indicator--d167f4b3-947f-46f3-bb41-56c381b684c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f462de5c-25e7-4a85-b4b1-c30f49745799", "sighting_of_ref": "indicator--d167f4b3-947f-46f3-bb41-56c381b684c2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1844b9-e179-4164-b18f-dc629103e645", "sighting_of_ref": "indicator--86bb0881-f571-4b13-b07a-85cd9274fc4c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c985e15-7bdd-480e-9472-6b27feca4652", "sighting_of_ref": "indicator--86bb0881-f571-4b13-b07a-85cd9274fc4c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd276f51-3d61-43a5-9b24-545508a5e866", "sighting_of_ref": "indicator--0365f8e7-a477-4c5f-84c4-283c1b32b113", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9518ce56-75dd-4f02-8d38-70d2aaf1f742", "sighting_of_ref": "indicator--0365f8e7-a477-4c5f-84c4-283c1b32b113", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3647985c-2a14-4aae-b697-1b339ff76e33", "sighting_of_ref": "indicator--f9b78de9-3d82-4b34-acf8-9182717abb6c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98acd33-893d-4b89-a5bb-a2858ce017fe", "sighting_of_ref": "indicator--f9b78de9-3d82-4b34-acf8-9182717abb6c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4ed5a6-768b-4de5-b01d-9f1317a4dcd3", "sighting_of_ref": "indicator--ccb32849-5a48-4b0c-9b0f-3c63482e7c69", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d410bd70-9635-4613-a942-7a8be93f3ed8", "sighting_of_ref": "indicator--ccb32849-5a48-4b0c-9b0f-3c63482e7c69", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abeb85ac-5361-487b-8768-73cc5e544b9b", "sighting_of_ref": "indicator--36df8350-cc95-4d96-af9f-c0d2589130be", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b22962-bcb8-4806-8314-3557db83a205", "sighting_of_ref": "indicator--36df8350-cc95-4d96-af9f-c0d2589130be", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751ac805-0a9b-4bca-bfa5-8c2dadf21267", "sighting_of_ref": "indicator--ac6d9c6c-c438-40a3-9e95-a7f291587fea", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b3337c-5f97-495a-a364-47f84996f3f1", "sighting_of_ref": "indicator--ac6d9c6c-c438-40a3-9e95-a7f291587fea", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fcf4ab-d2b1-4e33-a9ae-3371f118f15c", "sighting_of_ref": "indicator--7ebb3817-7e12-45e4-a020-dd2e594ad0fe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a618bfab-b7d7-4eca-a1db-df99ecebe659", "sighting_of_ref": "indicator--7ebb3817-7e12-45e4-a020-dd2e594ad0fe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1eb264-d1e7-4a5f-9b09-b4da32fab52a", "sighting_of_ref": "indicator--443c0e0c-3b0a-4c5c-a155-e02a9f8be6d9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e971f8dd-3265-405f-bb21-9c74cdc42965", "sighting_of_ref": "indicator--443c0e0c-3b0a-4c5c-a155-e02a9f8be6d9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7856ca-78e8-4c5d-9927-0d183b8a664f", "sighting_of_ref": "indicator--64b7bec6-df7c-4b76-906a-5d2be840961a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaafceec-4a01-403d-bc4a-2874c354b109", "sighting_of_ref": "indicator--64b7bec6-df7c-4b76-906a-5d2be840961a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83af657-5096-47a9-9c33-fd92d7e2a06b", "sighting_of_ref": "indicator--6b4dc817-a3fa-451c-b076-461076e0fc7d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79297525-9324-411d-909b-dc106114a546", "sighting_of_ref": "indicator--6b4dc817-a3fa-451c-b076-461076e0fc7d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc45be2-0447-4a7d-b21f-d7a73fe76531", "sighting_of_ref": "indicator--89c17230-d794-4d8b-8361-49928035629c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669114d0-fe6b-4773-819d-a2abf5bd134c", "sighting_of_ref": "indicator--89c17230-d794-4d8b-8361-49928035629c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b710193-c877-47a2-afeb-6a2752f3b039", "sighting_of_ref": "indicator--da6bb922-65fd-47e5-9102-51267b4148c1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c0fc33-fd3f-4154-b0df-6068e8d95470", "sighting_of_ref": "indicator--da6bb922-65fd-47e5-9102-51267b4148c1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d26544-e91c-4560-afc2-cf65d9c823af", "sighting_of_ref": "indicator--72d49a1a-5c91-45c5-b051-5aeb54154d47", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33a1be6-5a59-4114-8ffc-2c3d0f80347d", "sighting_of_ref": "indicator--72d49a1a-5c91-45c5-b051-5aeb54154d47", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2918d189-3181-4c4c-b2f0-3c592fc62558", "sighting_of_ref": "indicator--b23e7e9d-021b-4da7-9088-5b1f3d5a100e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d05112-ea5e-4ea6-ae34-4a8341ce8e96", "sighting_of_ref": "indicator--b23e7e9d-021b-4da7-9088-5b1f3d5a100e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a29679c-9a95-4e6b-a64a-cf09a20d24d0", "sighting_of_ref": "indicator--86b4cc63-759a-4877-920f-a59b94869897", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459c9d96-7a3d-41ed-af27-0201fdb7ee9d", "sighting_of_ref": "indicator--86b4cc63-759a-4877-920f-a59b94869897", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede05a2a-e87a-40fa-8d5e-776fd03eeb75", "sighting_of_ref": "indicator--9f7b282a-e8f0-4175-bbf1-618c7389ffd3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67faf000-449e-40c6-a3bc-f6b4e9ac2f8c", "sighting_of_ref": "indicator--9f7b282a-e8f0-4175-bbf1-618c7389ffd3", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b174bdbe-eeeb-4b35-86b9-1b175b45bea5", "sighting_of_ref": "indicator--41b6fbd6-1409-4855-b4d0-54e3272025b9", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb443124-1c52-4f5d-b537-565efde238ab", "sighting_of_ref": "indicator--41b6fbd6-1409-4855-b4d0-54e3272025b9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a1038b-a384-4d39-8d2b-c105f91bb0d8", "sighting_of_ref": "indicator--bfe087d7-e44e-4500-9393-f7c46d4fc1fd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debe4860-619d-46ef-ac0b-6cc8bb44462a", "sighting_of_ref": "indicator--bfe087d7-e44e-4500-9393-f7c46d4fc1fd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387de782-abc9-4f8b-9733-ef7695005f54", "sighting_of_ref": "indicator--b300eb47-c2d0-48ef-9f6a-d174245512b1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e6fd5b-b591-4043-9e32-47e6682fde15", "sighting_of_ref": "indicator--b300eb47-c2d0-48ef-9f6a-d174245512b1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a06e366-8137-4886-9f88-c21fa1fab367", "sighting_of_ref": "indicator--3166590d-dd7f-42a5-82f7-e07e187ac13c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c4761a-b686-4c8e-9625-2e20b1d3ac0a", "sighting_of_ref": "indicator--3166590d-dd7f-42a5-82f7-e07e187ac13c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76a004d-e6d1-47aa-aab0-3850edcaada1", "sighting_of_ref": "indicator--2b190f88-443b-4c68-8b66-0c51449219c1", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f679ee-7157-43d1-8da9-b9136e669aa6", "sighting_of_ref": "indicator--2b190f88-443b-4c68-8b66-0c51449219c1", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180eb766-87de-4d98-a13e-e4ac73598758", "sighting_of_ref": "indicator--aed517ee-254a-49be-a776-d35775ee1da6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6813ef-822b-4507-aa77-2450232d6a79", "sighting_of_ref": "indicator--aed517ee-254a-49be-a776-d35775ee1da6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0853ee04-c2cb-48ec-b6ec-e189648cd360", "sighting_of_ref": "indicator--a1edeb58-c118-4d21-bf67-c12947a78be6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a4d788-6809-48c4-b590-e40b67fc798f", "sighting_of_ref": "indicator--a1edeb58-c118-4d21-bf67-c12947a78be6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32c07c9-2d2d-4794-bfa4-e724636804bc", "sighting_of_ref": "indicator--920bbbe1-8104-4bff-ab6f-a7a5488dabeb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e0ed87-9d25-404c-9ec4-cd776bed35a9", "sighting_of_ref": "indicator--920bbbe1-8104-4bff-ab6f-a7a5488dabeb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1e54b6-bf08-4286-bf9c-037fdb868316", "sighting_of_ref": "indicator--f42d7c62-99dd-4860-abe5-0cfc4c8f6d53", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6230fa1-dd01-4b9e-9e3c-66c55074cb49", "sighting_of_ref": "indicator--f42d7c62-99dd-4860-abe5-0cfc4c8f6d53", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56b038d-5990-4b17-aa2b-a965b7308b75", "sighting_of_ref": "indicator--7827a32e-b8cd-4994-b35a-8c43a5b0eb62", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7370d57-d361-412f-a204-d28b8f0855e7", "sighting_of_ref": "indicator--7827a32e-b8cd-4994-b35a-8c43a5b0eb62", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d08e2f-a4a6-465c-9356-b82a5fdbd874", "sighting_of_ref": "indicator--dca1b878-d166-4583-8f78-8a41952bac25", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb9b5a1-1030-43e3-aae9-b36180fe78ce", "sighting_of_ref": "indicator--ffea58da-8a92-4e3a-819d-1288cd2141df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd37d12-2b5d-446e-8dba-1c9f729cdb62", "sighting_of_ref": "indicator--b9f5e6b7-9bf2-4b24-b804-2781b62ab420", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e833f8-c07f-4c10-9bc8-96713d3ab73c", "sighting_of_ref": "indicator--a446b549-6ea0-43d7-b89f-2684976c66fe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d64255-6eb5-4447-a6c6-7acf7bb7933e", "sighting_of_ref": "indicator--aedc6234-86fc-4d40-9f95-2014a4e40179", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fce00b-cd21-4c98-81dc-1f4107015320", "sighting_of_ref": "indicator--84e77403-9c97-495a-9e5d-d67c2b151f1c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f04fea7-7317-4ff7-895b-6b5db11e2419", "sighting_of_ref": "indicator--28b5e396-50bc-43c7-8e2a-bdb2852e9add", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320904b1-4a41-4088-87b6-d9e50dcd8c34", "sighting_of_ref": "indicator--9e5189f2-55a2-4a96-ad87-9af4cfd39a15", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49993cb0-1e2b-4839-8395-4771318d2df3", "sighting_of_ref": "indicator--9e5189f2-55a2-4a96-ad87-9af4cfd39a15", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155ae5bd-b72d-46a8-8802-cec3bb627ecd", "sighting_of_ref": "indicator--aec3fab6-0f8b-4b58-ac82-8ed57a34db8a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28cc9347-9394-4c62-a881-ddcbdd0ab827", "sighting_of_ref": "indicator--aec3fab6-0f8b-4b58-ac82-8ed57a34db8a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6844896e-db0e-4526-a714-a3cbca6b31f2", "sighting_of_ref": "indicator--2d89fdf0-5bb8-4e5c-bf84-8bd7d32541cb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fc06ce-a80b-4a43-bbbb-9c41c7a4dff0", "sighting_of_ref": "indicator--2d89fdf0-5bb8-4e5c-bf84-8bd7d32541cb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1086bfd8-361d-481a-8b8b-ce4cdda413be", "sighting_of_ref": "indicator--33660b3a-04f0-4e0d-a3c8-20639941c4e5", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312f5c18-877b-4b3b-94b8-b4c0d5e61516", "sighting_of_ref": "indicator--33660b3a-04f0-4e0d-a3c8-20639941c4e5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a452af-7f01-43c6-9509-e4ec4ba2cc07", "sighting_of_ref": "indicator--e72ffef1-c307-44c8-ba32-d5a89c807a38", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb04a7c-457e-434c-b204-1b375b42598c", "sighting_of_ref": "indicator--e72ffef1-c307-44c8-ba32-d5a89c807a38", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5405ec-ad95-4319-97ca-11bc944881f2", "sighting_of_ref": "indicator--1e9a5bfc-b227-486f-aa25-0f1cb670a966", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fcfbee-34dd-41a8-9be5-4d605851a374", "sighting_of_ref": "indicator--1e9a5bfc-b227-486f-aa25-0f1cb670a966", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb5fe99-99f8-493c-b8ab-e390f2311078", "sighting_of_ref": "indicator--ea4af11f-7d82-46d9-88cf-4ff705e81644", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8147a750-8bc2-4ad8-88ca-f0fd90eceaa2", "sighting_of_ref": "indicator--ea4af11f-7d82-46d9-88cf-4ff705e81644", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3d3780-8132-46dd-83bb-68d05b11e6d1", "sighting_of_ref": "indicator--5550f0d9-1f7c-4b9a-97a4-0d0d3af58695", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ca58be-0879-471b-bf11-7cd58597e308", "sighting_of_ref": "indicator--5550f0d9-1f7c-4b9a-97a4-0d0d3af58695", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92151e83-b862-42f4-9cca-7986dfc553ed", "sighting_of_ref": "indicator--de6a931b-9605-4143-ae3a-fcf14b9f9871", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9797e270-655c-418e-bd3d-5ea772760497", "sighting_of_ref": "indicator--1e1f1261-fb37-4661-a0c8-6e56b2728273", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b7e055-c08b-4909-87b8-b2ab7743950e", "sighting_of_ref": "indicator--71edfcf9-8ddf-46b0-a26c-d6a7c055da09", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0d61e4-c63b-467f-b80a-47d525ab695c", "sighting_of_ref": "indicator--71edfcf9-8ddf-46b0-a26c-d6a7c055da09", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebab931-383b-472b-9bb9-45d0ea1a9f05", "sighting_of_ref": "indicator--45fe864c-89ad-4db5-a7df-e11cefe8aeff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b6a8ba-74a1-417b-ab81-38116c687901", "sighting_of_ref": "indicator--45fe864c-89ad-4db5-a7df-e11cefe8aeff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9299d63d-9441-47a3-a341-4f5d54f6ac16", "sighting_of_ref": "indicator--a0c93792-7fe1-4393-b590-a9ef7c859c75", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36259335-82f3-4d6d-85a2-a274fa584943", "sighting_of_ref": "indicator--a0c93792-7fe1-4393-b590-a9ef7c859c75", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102fe0a9-4b92-426f-9ded-1a384d72d094", "sighting_of_ref": "indicator--5c1c2141-616a-4aec-8f69-483140ed9c3a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99fdf8e-0df7-4e1f-bfef-7b3044fde302", "sighting_of_ref": "indicator--5c1c2141-616a-4aec-8f69-483140ed9c3a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce056f1-8518-4255-b646-bca4546bff7a", "sighting_of_ref": "indicator--2fb767db-f17c-4de7-9050-4e72ce15f8a6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb20126f-ac8b-4f73-bd02-8071959101c7", "sighting_of_ref": "indicator--2fb767db-f17c-4de7-9050-4e72ce15f8a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1a0a66-dac3-49cd-b9a1-181ab0c3ef31", "sighting_of_ref": "indicator--55de0dd1-cec8-4ded-a661-e9cceba46d5d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c899cf-6ee3-4f7a-945d-def162923a76", "sighting_of_ref": "indicator--55de0dd1-cec8-4ded-a661-e9cceba46d5d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f835d99-4d9a-43c5-94e6-4f41998a307f", "sighting_of_ref": "indicator--d7513c8f-3707-4b4e-b434-e83905c24f00", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460368bc-9541-4c9e-b178-41bdfd2c2d00", "sighting_of_ref": "indicator--d7513c8f-3707-4b4e-b434-e83905c24f00", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5914ba-d18b-4d1b-adfc-a54f344ce608", "sighting_of_ref": "indicator--354a5414-ce88-479f-ba48-a4515260255d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9812fd28-f123-4c0b-99af-39dd157aab2c", "sighting_of_ref": "indicator--354a5414-ce88-479f-ba48-a4515260255d", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e988a44-035f-4d63-9bcb-b69bf08d01bb", "sighting_of_ref": "indicator--a55070b7-06b4-4c2f-b501-b06534702e05", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be56cb5c-6c75-4cf8-9e54-99a34e4f8aef", "sighting_of_ref": "indicator--a55070b7-06b4-4c2f-b501-b06534702e05", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb21a0e4-8207-47d8-a71e-88a0c36f024e", "sighting_of_ref": "indicator--fec6c79f-ac1f-4f4c-a395-0ef7f4316e9c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a989f65-33f7-40e0-be39-9e7472573b58", "sighting_of_ref": "indicator--fec6c79f-ac1f-4f4c-a395-0ef7f4316e9c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b91091-c5de-45f6-a433-1e44d43882e7", "sighting_of_ref": "indicator--47b58745-f059-4fd0-a40e-01b01578a51c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb40867-dfc4-4ead-be2f-527d0d7e2392", "sighting_of_ref": "indicator--47b58745-f059-4fd0-a40e-01b01578a51c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdda93ea-4c75-4f8f-9e8c-f4efe5eac11b", "sighting_of_ref": "indicator--6b5e5ebe-1f30-439b-a0db-2366450a008b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce8be11-2faa-484e-b5e6-8af1d398408a", "sighting_of_ref": "indicator--6b5e5ebe-1f30-439b-a0db-2366450a008b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053f3ce8-692f-4089-b205-f6393b5fd522", "sighting_of_ref": "indicator--e845262d-5dd2-48b3-a0c0-2af3f0836e80", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cd77f9-609f-48b9-9c0a-1c93f65f384b", "sighting_of_ref": "indicator--e845262d-5dd2-48b3-a0c0-2af3f0836e80", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9d339a-cede-47f3-8fbd-f541dad74a76", "sighting_of_ref": "indicator--6070786a-12a8-4e43-b3f6-20ecd59303ad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf77b0c-650b-407e-971c-bcf01191741a", "sighting_of_ref": "indicator--6070786a-12a8-4e43-b3f6-20ecd59303ad", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6f246d-1732-43b4-b0a0-563ff2e2b411", "sighting_of_ref": "indicator--f95e00a3-5558-4bf4-92ff-d002720b75ff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3fa1dc-5aae-4722-b7b7-5d7a627dea0e", "sighting_of_ref": "indicator--f95e00a3-5558-4bf4-92ff-d002720b75ff", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0abe7fa9-5063-4637-a5f4-ead6a6319663", "sighting_of_ref": "indicator--e5ba242b-d67a-488a-825b-8a42bcaea1c0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1e7392-1d95-4e13-abba-2147ce2b9353", "sighting_of_ref": "indicator--e5ba242b-d67a-488a-825b-8a42bcaea1c0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53eaa078-e046-44b8-9c12-860988e7d634", "sighting_of_ref": "indicator--fc892f0d-330b-4ffd-acbe-b20420160935", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229a2a5c-c2df-4589-97cf-4c21fd69dba8", "sighting_of_ref": "indicator--9c08e854-fb65-41ac-b16b-e0e2160fbe32", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709760eb-42da-4307-b850-74ea781a67a6", "sighting_of_ref": "indicator--9c08e854-fb65-41ac-b16b-e0e2160fbe32", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b36144c-e41c-4402-9aac-099d10a588b9", "sighting_of_ref": "indicator--2b346bdf-a8f5-4d94-bfad-e41574023fe6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc9dd99-64f0-4a6d-a4e1-135de2c0a9d5", "sighting_of_ref": "indicator--b2afeaa2-9a5e-41a0-822e-4cc81c6ae9aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e073e3a7-8215-4493-89e9-40050c6c2012", "sighting_of_ref": "indicator--203b07eb-41bd-4534-82ff-46b6d936760c", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bf1572-806c-4e84-9370-91f64f9078a3", "sighting_of_ref": "indicator--203b07eb-41bd-4534-82ff-46b6d936760c", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573811d8-0fab-4d38-9459-8a76c95b08f1", "sighting_of_ref": "indicator--2b437b90-d556-4229-a7ba-17d71d01515d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78a6bf7-9a01-4ca5-93ab-4688bd70ec35", "sighting_of_ref": "indicator--1632c1dd-1505-4014-baf7-48cea0970505", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8d42bc-3ace-416a-9e53-27744971d603", "sighting_of_ref": "indicator--1d0c13b4-7ea7-4315-ae45-9bce3bd63a28", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2b1495-af89-4ae7-84ae-e2ca7bfb86e4", "sighting_of_ref": "indicator--1d0c13b4-7ea7-4315-ae45-9bce3bd63a28", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a93d5c-bf53-4a71-a5de-f919e42177b5", "sighting_of_ref": "indicator--7488552d-187b-46d0-8557-70dcf0d17016", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4080c11-a92e-4fa4-b2b4-0af32d4b204a", "sighting_of_ref": "indicator--7488552d-187b-46d0-8557-70dcf0d17016", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5e48ca-ad5a-4a45-aebd-a38905f59869", "sighting_of_ref": "indicator--e58b0fc0-c42f-42e0-962c-58017a5d1d2a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43eb9cca-528e-4a71-b204-8dc30571b6ff", "sighting_of_ref": "indicator--e58b0fc0-c42f-42e0-962c-58017a5d1d2a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0338b9ea-6446-41e1-aa08-895012c9470f", "sighting_of_ref": "indicator--77396c72-4d01-4245-8372-2d640aad045b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f379ff16-5ba1-4db1-aa0d-148bf0d4819b", "sighting_of_ref": "indicator--77396c72-4d01-4245-8372-2d640aad045b", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc7a867-97b8-4269-ae25-d65383bfac60", "sighting_of_ref": "indicator--8fb8ac82-4634-4756-b2c0-ae4f55d12ba8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc48533-ae89-4f2a-846a-458ec966bbe6", "sighting_of_ref": "indicator--8fb8ac82-4634-4756-b2c0-ae4f55d12ba8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae3982f-1225-4ddf-b2b5-484b4297e464", "sighting_of_ref": "indicator--99640029-01ed-44cd-984d-1730c256f606", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7536a93a-282f-4d47-87ac-6101d1f8f409", "sighting_of_ref": "indicator--99640029-01ed-44cd-984d-1730c256f606", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ed7958-4cf2-4525-8c1c-d20bb0e2cc4c", "sighting_of_ref": "indicator--0992a510-3f6c-44ba-b624-49f89caf3178", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2323e4f-4a35-417c-9be9-7b368b46a964", "sighting_of_ref": "indicator--0992a510-3f6c-44ba-b624-49f89caf3178", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf02eef-d02c-4414-8227-c533994e4b20", "sighting_of_ref": "indicator--a78f5f2e-99b2-4b45-a62e-680d2a1316ac", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee6daaa-51b5-41f9-8ea3-341ae6de4445", "sighting_of_ref": "indicator--a78f5f2e-99b2-4b45-a62e-680d2a1316ac", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a053b08-04d0-4782-9620-a47ed831ad2d", "sighting_of_ref": "indicator--5219b611-d963-4c08-a2d6-5a2c3a246a22", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2470f4-0db0-434c-8b64-c3e138b7ac7d", "sighting_of_ref": "indicator--5219b611-d963-4c08-a2d6-5a2c3a246a22", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d46a6f-a326-4fdf-843e-1a1c026f8a4d", "sighting_of_ref": "indicator--5a807570-07c3-4fe9-b7e9-76ab93508069", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14758298-1b5f-4dd6-b0f2-bf8212bb3a67", "sighting_of_ref": "indicator--5a807570-07c3-4fe9-b7e9-76ab93508069", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca62e8e-aaa9-42ba-bb2a-ae9fe37195f2", "sighting_of_ref": "indicator--fc780eec-bfcf-4ac8-95fe-87cd0827dcfe", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b618ec0f-8352-4daa-8b98-34dbc6b4e8d4", "sighting_of_ref": "indicator--fc780eec-bfcf-4ac8-95fe-87cd0827dcfe", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c575bb71-9310-4127-8b70-ff5361a7f922", "sighting_of_ref": "indicator--270d0448-e4ee-4d77-ab2f-7f66007bc9a6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e42384-2a6a-4566-b6db-3ea97dc39899", "sighting_of_ref": "indicator--270d0448-e4ee-4d77-ab2f-7f66007bc9a6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0adcd35-7ce3-4e7b-9b67-e95385a559ee", "sighting_of_ref": "indicator--df71697a-6206-493c-8543-46643912aebd", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf815b2-de94-4c3b-86da-a8c662a78a1b", "sighting_of_ref": "indicator--df71697a-6206-493c-8543-46643912aebd", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6001a5-29af-4bdb-bb83-b6171c1d47dc", "sighting_of_ref": "indicator--0678f9ef-6bca-4760-845c-2eeedfcae7de", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166cee18-bd42-4fd3-a9b3-f5675ffedd7a", "sighting_of_ref": "indicator--0678f9ef-6bca-4760-845c-2eeedfcae7de", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df63875-99c9-4eab-86da-ee6da7a1af06", "sighting_of_ref": "indicator--5d8f27fe-dddd-41a4-a1c4-496db571242e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5370148-7392-4681-aff1-7d94edc6dcb5", "sighting_of_ref": "indicator--90feb06b-b4de-4a93-a93a-f78b3261f4eb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2629d40a-afcd-4071-8344-6d365efa01dd", "sighting_of_ref": "indicator--c9d93d87-38b9-4788-b17c-dcffdb21583b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf22ae76-f085-467e-9d68-66a964a237b9", "sighting_of_ref": "indicator--605ee876-9bca-4f18-b4f7-4757161e25fe", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34ac628-05a8-445e-8eed-89e2c1ffffc0", "sighting_of_ref": "indicator--d51b6109-abe5-46ed-b7cf-88bbe40446ec", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c72f711-7178-47ab-9b95-25d62ca4aa27", "sighting_of_ref": "indicator--73f16adf-872c-4750-9c10-5efdcc8dfa0b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a5be8b-69b0-496f-982b-15e05e732de7", "sighting_of_ref": "indicator--3cb10ff4-3adf-4dd0-9d16-f6170096428c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4477f5-271e-4a44-a336-9dc952cddfb2", "sighting_of_ref": "indicator--ceb7563a-86dd-4d28-9d76-9f1e574e34bb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40845af-bbb3-4dfc-9960-575b50c8d637", "sighting_of_ref": "indicator--f3e2ae3e-fcb6-418c-8149-cd94a8c646f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11be4eca-d5d0-4dd3-94b9-815dae443fb3", "sighting_of_ref": "indicator--b164b2d4-cd59-4faa-bca3-268053d90e41", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b65184-c184-4a9f-b54a-92b0984ec017", "sighting_of_ref": "indicator--4c6936c6-d07e-42a5-8c0c-dfe747893c95", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b37d91-0bc9-4ce2-ab7a-f70e2cf28f39", "sighting_of_ref": "indicator--4691d1d4-96a0-4d89-9b6c-cabe21d4f24d", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83424dde-2724-4485-bef0-1391a9b23555", "sighting_of_ref": "indicator--0f19aecc-022d-4c09-841d-a52d2578a92f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9215b32-cec9-477d-ac45-05afecdd6c5f", "sighting_of_ref": "indicator--d8418d23-9f2f-4969-9773-9c6682c01128", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6d6cc2-5413-4f84-802c-2c9bf99457b2", "sighting_of_ref": "indicator--a22b618d-a5c1-4f39-a496-af273ebfac02", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca51ad1-d5cd-49c5-ac95-0789c249b268", "sighting_of_ref": "indicator--a22b618d-a5c1-4f39-a496-af273ebfac02", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef3f5c0-a71e-4c20-8880-94591a2f343a", "sighting_of_ref": "indicator--a22b618d-a5c1-4f39-a496-af273ebfac02", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b00cd8c-9095-437f-8ac1-c648529b0c20", "sighting_of_ref": "indicator--685f6148-1a5f-4fb1-b10f-433ed354e07f", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9c4c25-e319-4a76-b3cb-09807cc798bf", "sighting_of_ref": "indicator--0f994acf-cd54-4419-9db4-083afffe2647", "where_sighted_refs": ["location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60616619-4e88-4b40-9ebf-a101d4d59434", "sighting_of_ref": "indicator--5d1832c4-2efa-42f3-864e-d4b86582d67f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96af69e-7a5a-41b9-92de-ace702530d57", "sighting_of_ref": "indicator--3c719ddb-3265-4a55-92f4-e8249435e330", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3baf9a-2cc3-4095-acab-c56f2aaf7452", "sighting_of_ref": "indicator--3c719ddb-3265-4a55-92f4-e8249435e330", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29dd7a31-6fd4-45e4-a39c-0ee9ad9c91c5", "sighting_of_ref": "indicator--81c7746c-16a6-45fc-9134-b815f634920f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6da7f82-9e28-4ee2-82f6-05dc2691c092", "sighting_of_ref": "indicator--6cd0c284-ca00-44b7-9f0a-d3a7fe7bfa78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7dd1baf-7ad4-4c4e-b562-b16c5a8bd181", "sighting_of_ref": "indicator--92a69255-39ed-4739-8b40-1eae93921242", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53ac57d-3970-491e-b221-0b3e963a53e7", "sighting_of_ref": "indicator--606dfe11-395e-43a9-a56a-db77b3d24a5f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460bc5fd-f6d0-4e5d-85bb-3fef0b77b8ce", "sighting_of_ref": "indicator--606dfe11-395e-43a9-a56a-db77b3d24a5f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150c5976-2c1f-473c-8910-5880854ad763", "sighting_of_ref": "indicator--606dfe11-395e-43a9-a56a-db77b3d24a5f", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507024d1-33d3-410a-abda-303482d24770", "sighting_of_ref": "indicator--a130b695-dae1-4c41-8277-3d7c48971962", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59484040-add0-4497-b58c-249f4d7a6e01", "sighting_of_ref": "indicator--3e455d21-015e-4385-96c4-ae56ec6fbfae", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f6acb2-cdfb-4389-b283-d04f4092569d", "sighting_of_ref": "indicator--928b2bee-2fb5-47b3-9519-c89444e1abcf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fa261f-b3e4-4665-972e-4a90291dc409", "sighting_of_ref": "indicator--928b2bee-2fb5-47b3-9519-c89444e1abcf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d27858-712f-4758-9c36-abb01f59a726", "sighting_of_ref": "indicator--2abd8f53-0258-4afd-8da5-35ad8dcabb0a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3196ffe-deca-40d7-a2ea-26b5088103fc", "sighting_of_ref": "indicator--e981d3b1-a686-4be1-9752-385cd5aa2a4e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ed52a3-69f3-43a1-92e9-71e70d49f05a", "sighting_of_ref": "indicator--b72017bb-92d5-4ea4-819a-83e1b3a89eca", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aec72b5-b155-4d2a-b3bf-acc3c733aa6c", "sighting_of_ref": "indicator--b72017bb-92d5-4ea4-819a-83e1b3a89eca", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fcfe31-baeb-4d39-8d90-4ff18cd45c53", "sighting_of_ref": "indicator--16ce2038-a2ea-411a-bc6f-47f21e8fed27", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e561a0e7-e581-4500-bbcc-0929fb4661ea", "sighting_of_ref": "indicator--16ce2038-a2ea-411a-bc6f-47f21e8fed27", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4380e16-6915-4331-b73a-46ff974028ef", "sighting_of_ref": "indicator--dd251424-c58f-4ab4-8ebe-c744e28e81eb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40212a66-220b-4258-ab82-654a4392c48f", "sighting_of_ref": "indicator--289af231-8b51-40e5-9158-f98cef223011", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496a71cf-e879-4b6c-97a3-9c8d538a6f76", "sighting_of_ref": "indicator--d63d5e34-17e1-4123-88db-29b44d6cae9a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bcd6fe-210c-440b-8985-c9c43bf0fda0", "sighting_of_ref": "indicator--d1c5d0e8-8ed6-4a88-9c91-a2b9d08b1096", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e32d0c-74e0-4f3b-add0-d72ab5c1e294", "sighting_of_ref": "indicator--8891dc54-2765-4812-9ca1-ff4e80ee7695", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e122ef4d-a33f-4aa4-8a4e-585d6bf0e214", "sighting_of_ref": "indicator--6feb4f78-f6b5-46a4-9d5f-a18a09573c66", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2b88c0-83db-4a16-acb3-8ab13bcea98c", "sighting_of_ref": "indicator--bf0914bd-abf3-4644-af30-55a996a8fba8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df11b09-5570-41aa-aff8-9a9b193a148b", "sighting_of_ref": "indicator--bf0914bd-abf3-4644-af30-55a996a8fba8", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3eafe4-8e6b-4e3e-9de3-1f72c98e95f6", "sighting_of_ref": "indicator--bf0914bd-abf3-4644-af30-55a996a8fba8", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6957351b-47cf-47ea-8890-90a7c9941655", "sighting_of_ref": "indicator--8687c979-0c25-4dac-af4c-734382cb0ef6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50d1a42-7513-442e-a77f-236adcde8542", "sighting_of_ref": "indicator--8687c979-0c25-4dac-af4c-734382cb0ef6", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d13d408-28c0-483b-992a-360b05feb5f5", "sighting_of_ref": "indicator--8687c979-0c25-4dac-af4c-734382cb0ef6", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc638258-7704-4b02-8360-454290d5069b", "sighting_of_ref": "indicator--ed11cf20-7f74-42f0-aee4-519932d1d397", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9daa11af-296d-4af1-91a6-d252b6ce8775", "sighting_of_ref": "indicator--76e6e41f-0d86-444e-b59d-5aab510d27ad", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa24527-75d7-4283-9e48-b84654e86fc1", "sighting_of_ref": "indicator--9999c703-d190-4f9b-87be-bdd43798fb76", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c824b6-05af-44fc-92c5-c6f1888ed67f", "sighting_of_ref": "indicator--f0bf10c5-29dc-416d-a5b3-76f176a9d801", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fe6d5c-837e-455e-b229-a9f9a0878434", "sighting_of_ref": "indicator--f0bf10c5-29dc-416d-a5b3-76f176a9d801", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc848a54-1c6b-4d08-a1c9-bd71414897dc", "sighting_of_ref": "indicator--f0bf10c5-29dc-416d-a5b3-76f176a9d801", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73b51ea-b8dc-4ed7-9069-64c6d01fa4d7", "sighting_of_ref": "indicator--7617158c-63d9-46d9-a8e1-fc2ba8ad7756", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bd33eb-daa8-440c-9523-ba9a225bf381", "sighting_of_ref": "indicator--7617158c-63d9-46d9-a8e1-fc2ba8ad7756", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4181f532-a929-4b10-bdb5-e4228405668d", "sighting_of_ref": "indicator--7617158c-63d9-46d9-a8e1-fc2ba8ad7756", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e7d185-3fb5-4e43-8233-4e949892c10b", "sighting_of_ref": "indicator--11226b38-dc07-473c-b7ef-ffef112c0523", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68db045-6d61-4ab4-927e-5010164a6ff4", "sighting_of_ref": "indicator--dda78be5-0f18-4ac7-b714-8dd4562310e2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412e90bf-0605-4a6a-93a3-a180ed3e7938", "sighting_of_ref": "indicator--2d0c9aa4-6e08-491d-8b63-3ce45578e759", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106ae7bf-3d50-43ac-99bc-8f44582ae620", "sighting_of_ref": "indicator--2d0c9aa4-6e08-491d-8b63-3ce45578e759", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c510e6c4-b284-49ff-85f4-1df27692be55", "sighting_of_ref": "indicator--2d0c9aa4-6e08-491d-8b63-3ce45578e759", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef82f4e0-82ac-4e35-aaa8-94bdd5fde66f", "sighting_of_ref": "indicator--735b4b75-cfd9-4be3-acfb-3c6e19e8efd3", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdd4b7b-efd0-4e14-ac4d-66d4c283aba5", "sighting_of_ref": "indicator--a05c4078-2612-4214-90c2-64913bfd9b5e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa0f4cf-0277-4519-ac87-e1d928bdc0a0", "sighting_of_ref": "indicator--a05c4078-2612-4214-90c2-64913bfd9b5e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476eba09-45a1-4913-9887-15b49647a4f9", "sighting_of_ref": "indicator--a05c4078-2612-4214-90c2-64913bfd9b5e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41d2549-615f-4be3-9aea-6c6af4f603f9", "sighting_of_ref": "indicator--ea91950d-3649-44b3-b9f7-c9025e06a709", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb3eb73-d070-46fe-9402-2dc4d2482694", "sighting_of_ref": "indicator--ea91950d-3649-44b3-b9f7-c9025e06a709", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be33dcec-3789-4a0d-b8d4-e3ad268d15ef", "sighting_of_ref": "indicator--183fe362-743c-4268-a1d5-d4ca01751914", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da33202d-5b94-4333-9387-0d5bff46f614", "sighting_of_ref": "indicator--881f2df1-e439-49d0-a2e7-0f5fc64a4ae0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd0ec89-eee4-4c87-8c15-9382a554feed", "sighting_of_ref": "indicator--a5d0fef6-adfa-4100-9664-a76a6dee4354", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33558e84-9c8e-442b-85e2-04d4e3cd0660", "sighting_of_ref": "indicator--e1f09db8-3f2d-41ce-ac6a-bcdf3b123760", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dad6fcd-a9e2-4272-aa2b-32407925d347", "sighting_of_ref": "indicator--7db392ed-ca16-437f-a228-534b56714756", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f7e50f-7948-4736-afa4-68ef8ded4219", "sighting_of_ref": "indicator--8b933fd0-17ab-418d-bc88-3554d35730f2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7be3ff-fb96-4c4c-9f1d-b739d6f9da9d", "sighting_of_ref": "indicator--e8aef339-d95e-48f9-a742-8fb86f087407", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35d5eff-f0ab-449c-b9e2-46c668ae0a2c", "sighting_of_ref": "indicator--a82585e6-8311-4ae6-9b5c-2fd30f3ff603", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cff67c-77fc-4213-bf6e-99f32de001d9", "sighting_of_ref": "indicator--e9922ee9-a109-43fa-89e6-7d525e81663e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebf3836-e3b6-4ef4-b7fb-c2bb64a19483", "sighting_of_ref": "indicator--917ad552-b686-4328-9b5c-59b737ba8335", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87866f1-a825-4ff0-8fac-922c18a4e5fc", "sighting_of_ref": "indicator--b76e734b-d04f-4ea3-b3e5-3d823c80cc6b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81d3c87-e994-4ee5-8f57-7c5856f28711", "sighting_of_ref": "indicator--270decff-e1bb-40d1-9760-b8e8121ac5ce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba11f6d2-5080-4825-bb7e-8da7cb902155", "sighting_of_ref": "indicator--0a60db9c-f270-4091-88fa-6c540ca62517", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c189ff-3600-4f0a-9166-31855a090d04", "sighting_of_ref": "indicator--c81af74e-e321-43ff-88cc-322689c124c7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3e72d7-ae75-40ee-8ca3-412750c2e2fb", "sighting_of_ref": "indicator--131c1bec-844f-4497-b381-5579621d6529", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0985156-af1d-4885-ab94-31fa2b500047", "sighting_of_ref": "indicator--9cd16f8e-13bb-4da4-8ee8-d541eb4c5f33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6b46da-42e4-40e8-a0e9-43cdcfed503f", "sighting_of_ref": "indicator--25c928d3-bbd3-4ab4-80c9-ec6a4cc48414", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a588b315-af86-4a86-882b-454ed101d042", "sighting_of_ref": "indicator--e4f70536-7875-4df3-ad65-9fce12a64068", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4254cd20-bd55-43d3-9235-a88eab1183e9", "sighting_of_ref": "indicator--0fe3b8c9-14c3-4173-80e7-9f1154019b04", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db944cc6-07c8-453d-a7b3-b0b581a13bc0", "sighting_of_ref": "indicator--2ef333f9-e816-43d4-bf8d-639258b0a1ab", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155182e5-4af6-4e98-aeeb-ca8777cf709f", "sighting_of_ref": "indicator--7d27d70a-563d-45da-8978-6bc686e7d72a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3b28d1-943f-477c-9e03-e0ba3b1df247", "sighting_of_ref": "indicator--391ede98-120b-4842-806a-1d77fd85a5f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6bf6dd-9b6e-4108-bd36-45a58d5a2f49", "sighting_of_ref": "indicator--97824876-37af-417d-9a47-996371fabd7d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0038805-e385-4baa-8959-e999abad3cb9", "sighting_of_ref": "indicator--4c99263b-8db2-456f-a2c5-d8770f71acdd", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d434486-5b54-424a-9cfe-4c312d40b73f", "sighting_of_ref": "indicator--a51d24c5-1a37-4e7c-bf57-c06e5414e3a6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c625399-8a67-489f-b4cc-4db29c16141a", "sighting_of_ref": "indicator--84763868-0a45-4c1f-885b-128e68831ac7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69256ae-343c-4b93-87b3-8b0cda9ee122", "sighting_of_ref": "indicator--14cf97aa-df52-4856-9873-c73c05013164", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8f813c-0092-4174-a435-79780ca7cec7", "sighting_of_ref": "indicator--808d7974-307f-4935-bbe4-1e0010068918", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5455d6fb-e6a0-4c93-9afb-c923d2902cd1", "sighting_of_ref": "indicator--bb465d7a-f39c-423a-a99b-21f70689e702", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86f97ad-d659-4a6c-883c-d176d4a40601", "sighting_of_ref": "indicator--a360c1d5-21aa-4327-baa2-2b9ca7293fa8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53f2034-c5cb-4262-afa4-7eace8b20fdd", "sighting_of_ref": "indicator--a84e6ee8-60d2-4ac5-99b1-bbb7f7bdf954", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ab5330-343c-4e1d-8611-b499cc415afa", "sighting_of_ref": "indicator--8d9c7ead-a584-44a2-a9e9-b3e73b3ef43d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8cc5c4-3eb1-49b3-974f-e29d43025411", "sighting_of_ref": "indicator--494a7048-55ab-4292-b194-d66ef1fc9a87", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab0b6b6-24dc-47f7-917b-ce45a92d7bd4", "sighting_of_ref": "indicator--3b27bd69-9bfb-498c-a9f9-dc605429c211", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f5a9d8-3928-41af-818f-2a48dd597b0c", "sighting_of_ref": "indicator--9872791d-9c10-44d0-beee-be2d1aeb5fce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc990cb4-6de4-47df-90a9-3f07d0352a2a", "sighting_of_ref": "indicator--0f44d146-b2ac-4524-b224-a6d40ae85756", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b054f671-1469-4bd6-a6b3-5ad5a9645c1e", "sighting_of_ref": "indicator--9a325bd1-7936-47f9-9c6c-49827a96a76c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411adee6-48f6-4f3e-bfb7-2a9b179b0f0a", "sighting_of_ref": "indicator--d2c32eed-a9c1-465c-bf0c-9855c5091009", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3a2bf7-6ab4-49d5-a3a9-7930df57be9d", "sighting_of_ref": "indicator--d9505632-057e-4385-8f94-0811c2d75c88", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8c3a30-e994-4076-b01a-b59143b1f018", "sighting_of_ref": "indicator--52771fb8-e9a0-4a8f-95ff-4de164bcbf29", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab5ff7c-f3ff-406c-851d-82e088befb87", "sighting_of_ref": "indicator--89b36ac0-cda2-41ff-b994-9e97ae656a40", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75b3ef9e-23f0-4b4a-a55b-030d5255606b", "sighting_of_ref": "indicator--67373c02-8177-4bf0-9b6d-92f78fceaa14", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1185da-f5e8-40d2-bbbd-c84fb9148217", "sighting_of_ref": "indicator--4691ac09-4b84-49ac-bc26-24cf2dfc9aea", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc268c7-6c88-4d2d-a3b0-34491d45d231", "sighting_of_ref": "indicator--e246e1d0-baa2-4414-b412-80a730e0d84a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32839555-4adb-443d-abca-ae28f36e7c3d", "sighting_of_ref": "indicator--2596142d-ff57-4d8b-8d06-df946ee1aeda", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71c7c56-dad1-41f8-b6b1-8427e97b4a94", "sighting_of_ref": "indicator--70a5a7b6-de12-4a63-a525-58efc53928f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9f3f26-4a3c-4399-a93a-cb5906c17147", "sighting_of_ref": "indicator--46f46fa6-8ec8-43cb-bbe3-775e5c4de177", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d5084c-3360-4d4b-bf50-be6511a9a0f4", "sighting_of_ref": "indicator--358de9c2-75ff-4376-a0b2-7dae40872ea1", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf63699-80b7-4938-8888-c90e6e16e08d", "sighting_of_ref": "indicator--cacb8e35-f177-403b-8158-569304b68517", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bc3c8b-f5ff-422d-adcd-cf1f99331821", "sighting_of_ref": "indicator--26538f71-2a71-4d61-9d9c-3d6458d4c672", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36539c94-9a87-4511-ab2e-04ed770a64ac", "sighting_of_ref": "indicator--c195e056-5423-4f29-937a-70f440b7cfdf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99164d3-47d8-4481-a5ba-4454c279e9ee", "sighting_of_ref": "indicator--20f0a16e-52ec-4a81-bf57-9483a77f590e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204c13b3-b5dd-4346-8c2b-4577953d0006", "sighting_of_ref": "indicator--e60f5e96-11b4-4c63-80c2-7692e04e5a7d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d83d267-13f9-4e13-bf35-4724b231a7a2", "sighting_of_ref": "indicator--d870c7eb-6f45-4ec6-9513-68d000fae981", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b450763-62aa-4055-9ba5-4d7180d77dfd", "sighting_of_ref": "indicator--771a40b6-debd-4430-a5d2-f1084fe97dca", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374eb4e4-873e-4f51-b08b-4c8cba02a953", "sighting_of_ref": "indicator--dfff1d15-1869-4bcb-971e-9a23244cd534", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d5d02b-6d11-4b40-baa0-c06d48151247", "sighting_of_ref": "indicator--10d04c8d-3510-45ce-877c-25291f3eb503", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea783f8-d970-417a-8e89-27baa4f01aad", "sighting_of_ref": "indicator--a7a774bb-c1ae-4b44-a4da-14060a3782b9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448e8361-a4c5-4b4a-b892-dcefc1a93bc1", "sighting_of_ref": "indicator--2216e3da-d190-4f17-bd8d-bb0765d1d38e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26228bb2-3740-4781-aadf-dfa5eb552fdd", "sighting_of_ref": "indicator--b608d425-eaf0-4ab1-8677-1a20b74c54eb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d4c5c4-fb40-498b-a337-ad1d9dd76b78", "sighting_of_ref": "indicator--5f9882c6-2628-4ebe-a6ee-4bf0d67dd070", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a81dc3-a665-4a81-a417-33ca85c50670", "sighting_of_ref": "indicator--b01ec483-0806-4b18-b235-1d9bc6ace1cb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c613d5-a813-4646-8fea-4fef82069298", "sighting_of_ref": "indicator--4178a03b-d3bb-4196-921b-5fcf5e8e839c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56de768-c4fa-4e91-aa73-c457666ceabb", "sighting_of_ref": "indicator--5bbacca5-3d0c-49eb-8c4c-1a45120a2bc3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73294e2-f471-46f3-968d-e6fa15968fd8", "sighting_of_ref": "indicator--70fc8096-949b-48f4-b048-1bc30b1c58f4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa7085d-5f86-40a4-ba26-80345ec3956a", "sighting_of_ref": "indicator--d7449322-d315-44d6-945e-5fbb596216e5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d174c01c-3d57-47aa-b644-0a57283b6c0e", "sighting_of_ref": "indicator--e99a81dd-cf23-4277-a375-1cec3ee5fb17", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66aac29-888f-4555-aa71-adc524e4577c", "sighting_of_ref": "indicator--0dc4fc92-de8d-4d5d-9095-9007387412d7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1327aa4-9f33-47c6-a839-887ed19b5dca", "sighting_of_ref": "indicator--b08bbc15-ae33-42e7-8445-bef9a90b214e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c92b478-e37f-4f8e-b3e6-6317b8d8cf12", "sighting_of_ref": "indicator--bb4339ed-7d9e-42a4-9577-2b8a5f1ad8be", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1671b51-ec4f-4d13-8a75-968349de2768", "sighting_of_ref": "indicator--ccfbb156-2ae0-417e-8deb-58aae6ffa66f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03de49cc-2764-4324-9738-d116c133c576", "sighting_of_ref": "indicator--94ecf943-abaa-425e-a4d0-9140ed5568ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6ac68b-f028-4808-8c44-19fbb9c1b063", "sighting_of_ref": "indicator--5afe1158-233c-4dc8-a461-e833990e2b96", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017ede1c-2666-48c2-a6d7-3b1191debaf4", "sighting_of_ref": "indicator--06597fbd-0d42-4e15-9f7d-98b2d6a63a82", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269fe065-707c-4d23-a124-94424bd91bc6", "sighting_of_ref": "indicator--4f3c93f1-db65-42fe-a193-cb098e619b07", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e869fdb7-25e9-49eb-8645-3fd86e15b588", "sighting_of_ref": "indicator--2ee5ef82-7f45-4e2a-8c0d-02828ce1c49a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c37697d-be76-4a99-9407-80382a5006c9", "sighting_of_ref": "indicator--66d4530c-bec7-4bf4-937f-0db0a084a72f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca328209-5c69-4343-8c1e-72c425e64874", "sighting_of_ref": "indicator--d4d72b7d-2d25-48dc-bef1-1c2042a22d76", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285e67dc-c2a1-4879-8a21-cb05a5be5a9d", "sighting_of_ref": "indicator--470479f2-7b8c-4385-92b0-1c57398176ec", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71128d2b-a483-47bf-a191-ba788deb9b33", "sighting_of_ref": "indicator--7cc9e077-7669-407e-9479-5e51c73fbd39", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f9dc31-3343-4f9d-b3b6-eb7c50d03a62", "sighting_of_ref": "indicator--828a504e-e8ee-41cb-ae34-72424b7ab620", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9e3f1d-35a9-4a09-9199-fe10579b3b8a", "sighting_of_ref": "indicator--1f5b173c-2555-42ad-a92c-0c1db414e7c2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36b6b7b-2c05-4d61-8d61-527e8b700fbd", "sighting_of_ref": "indicator--a608e3bb-a05a-41d5-864a-890966c8b3bf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e92312-6feb-48f3-9236-9ba167aa0cda", "sighting_of_ref": "indicator--efc5af70-930e-4405-9909-551bfcbc2d1d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c39e68-d42d-4845-807c-4a9a777190ac", "sighting_of_ref": "indicator--3d6ede95-d7b2-4ede-9d08-f10b259b0d60", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50aaa67b-f837-431d-bdac-85cec5497258", "sighting_of_ref": "indicator--0cc8e7c5-fe5a-46b1-b9a3-4bb9d5e23b4b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692aebfe-9695-4c3b-a75a-cbd7143eb70e", "sighting_of_ref": "indicator--bba18550-b469-4afc-bb25-e8e531d8856b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacd7ba5-7023-49dc-a6d5-a571f5cc6716", "sighting_of_ref": "indicator--4f9b15f1-4d59-4324-a006-75b569c2ca9c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c243199-6052-42a7-8698-71fadffb863a", "sighting_of_ref": "indicator--670e9194-1812-4b69-967d-750cec4b9a4f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa43f31f-5078-4824-8155-6946a804122e", "sighting_of_ref": "indicator--3fe1f263-9514-4c92-9e8e-e4133c8830b2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec64246-d366-42da-85ae-e08b53c99103", "sighting_of_ref": "indicator--4e475c0d-225e-4f43-a031-adf444c81db9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36d6252-0c0b-47fd-ada5-cdd966aaa8f6", "sighting_of_ref": "indicator--50528314-322f-4458-97a4-4a56f6af1f0b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c80b133-a211-4915-8f62-7f435d22198e", "sighting_of_ref": "indicator--2afdc66f-19ff-4764-b42a-e4ba878e4075", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1ecec1-9e4f-4125-ae4f-a7f6fe08dde2", "sighting_of_ref": "indicator--5771384e-53ed-4f69-803f-f71800c08ab7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a710e6-6800-436b-b5aa-d384381958a6", "sighting_of_ref": "indicator--dc73ff52-58bc-4dfa-96c7-3ee7f12ce9ee", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88665615-515e-4630-85d7-c7a9a4b02d9e", "sighting_of_ref": "indicator--15e224e1-f1aa-4ce3-afbd-7636e0817c0f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ea1ae4-e152-4da7-bd1d-6b7d6b1f16e0", "sighting_of_ref": "indicator--aaea91b6-4ac9-4d19-923f-31191bf35f09", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f049f88-f66b-4efd-a388-cc90533d7ed6", "sighting_of_ref": "indicator--5fa92f3a-40a9-4102-9523-f88ab20f5ad0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8484b9a2-539f-499d-8ee7-3420a56eb115", "sighting_of_ref": "indicator--a8bc7ed8-ca39-4a24-919a-8aa09a915405", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4857cb-d11d-4305-be77-2df26d735df1", "sighting_of_ref": "indicator--bea964b7-3729-47ae-bdc3-b90f654ecd5a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253082b5-e93c-446d-8dfc-844312540900", "sighting_of_ref": "indicator--2e52656f-0d82-4291-a39f-39c8d4ea02f3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe8fa7b-6b1e-43d5-8a5a-f055078bb745", "sighting_of_ref": "indicator--b90d35ba-4ab8-46c8-b4c4-f7ece7dd4a99", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3eeb37-7708-4e24-90d6-e76a1b50783e", "sighting_of_ref": "indicator--5504cffd-8252-4b4a-a935-891e70422123", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d95c6b-e596-4fc4-8dbe-9e4719809545", "sighting_of_ref": "indicator--20ce2535-4640-429f-9cc1-de2c3c481849", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6018c625-13d8-48f7-83c1-65c583e0b986", "sighting_of_ref": "indicator--abb46162-9717-4e1c-a7ba-d8ba1b8705d9", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f239c24-df25-4bb0-8ddd-37bfcf2d2837", "sighting_of_ref": "indicator--8956761a-004c-4b29-ac3f-a97fab3ffb64", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53552241-bc1d-4a66-9612-7bbd269c1505", "sighting_of_ref": "indicator--c215517b-f4fa-4c02-9ba2-edefc2fe399e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbb5db3-2f30-4e45-86ff-b809fa18f1a2", "sighting_of_ref": "indicator--df30140a-fd67-43c3-a859-e199239008f6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e99b32-ff80-495d-806a-bd611633f782", "sighting_of_ref": "indicator--3b7ce2af-2962-4ee0-9a0f-62a357e33fa0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923c596f-fca4-4c8f-b051-1a19a009cf1d", "sighting_of_ref": "indicator--77124c13-002e-435c-8611-118654818df4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd132c2-c922-4e68-b1a7-c678a7dcf61f", "sighting_of_ref": "indicator--53dc220a-45d9-41a1-818e-2fdf60d9e79e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb8894d-90cd-4249-b837-dc30ddc36087", "sighting_of_ref": "indicator--cee55eb4-c3e3-41ba-8ba1-eb66ff31749c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15b7771-b3d8-4728-a90b-486fb9b36f51", "sighting_of_ref": "indicator--2a92dd32-235b-4363-b841-a4daca6013c0", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54980da5-6da9-48d1-8a01-ffff3860db92", "sighting_of_ref": "indicator--5ea1059c-259c-4590-9b11-d3b39aeda990", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a51414-d115-49f8-8760-ab74f2d72fbc", "sighting_of_ref": "indicator--43f7223e-8a9a-4f87-9997-44640e4d82fb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458e729b-a185-451e-bd9c-a9b4fe075a06", "sighting_of_ref": "indicator--6b54fc0c-efae-4b37-abd4-b5bd3c88c712", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907e01db-0399-4994-b788-fdbe78976805", "sighting_of_ref": "indicator--bdbcbad9-cc1e-48f8-94ae-b8bef903ebb5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfafe6df-09a3-4082-b57e-9d755eaa6112", "sighting_of_ref": "indicator--ac0c8210-fa22-4239-9c1d-a89a6921c5df", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795f17a9-e50b-4496-97ab-9ece27c2f053", "sighting_of_ref": "indicator--3a113ac2-ab90-4860-9e7b-de072d820c54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16228e7d-036b-4d7b-8895-1e23db3ad3a4", "sighting_of_ref": "indicator--41ad1c2c-6a29-4ae5-8d9e-8e9b0395c169", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05a2d17-a7aa-4a53-be72-137eedf77770", "sighting_of_ref": "indicator--7f26b7dc-9baf-44cf-acb8-166c97c65839", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cbab9e-6e54-4c83-bd06-ae7e8e07e6dd", "sighting_of_ref": "indicator--66e3449e-843a-4f6c-bf11-414912ea7786", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ef80ec-c615-441a-bc8c-562425bb9136", "sighting_of_ref": "indicator--1ee004f5-b5a8-4960-aaeb-936e9fb15edf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24373b56-fded-4358-9a4e-6c5069fa1e53", "sighting_of_ref": "indicator--594668e7-2c10-436a-83a2-a83a15b08258", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d3dd35-ad3c-4de5-b63c-14d77cb6f26e", "sighting_of_ref": "indicator--87ebdea0-d133-4f21-a0ae-1e72a60ec71d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256abd40-9366-4973-933b-1c3e69cd308a", "sighting_of_ref": "indicator--11adb8e9-5be8-4e6a-8a59-42b244556321", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eefcd59-8497-4b4a-a42c-be3d3af90ef1", "sighting_of_ref": "indicator--d493f9f3-e70f-4208-a157-531cbea9b2ad", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d35a05-349e-45a7-a90f-193055cf0933", "sighting_of_ref": "indicator--da5fcc2e-36be-4192-b425-55367ac2ee3a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3696883b-7cea-4131-9c92-9b42231df927", "sighting_of_ref": "indicator--eccdb246-0488-4a24-9ac4-c6535d9338c2", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0bb1db-fb8c-4b95-ba38-6cc1a2728f3b", "sighting_of_ref": "indicator--70308908-a7e8-4cc9-8906-e92b59dc3c0d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fdf20c8-527c-4330-b94c-3abaf315075a", "sighting_of_ref": "indicator--2e6de0ff-2c9c-4d99-b09e-d3d0ff5477e4", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1eb0b9-f1af-4b55-9e49-cc42d564f5d0", "sighting_of_ref": "indicator--d818fab0-d9b3-4580-bce3-8417fc460864", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b13a1e-ae73-49f4-b9b8-54c2ff3b1cf8", "sighting_of_ref": "indicator--c5d82069-84bd-46d1-92b7-d3ac1ec0d9bb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84ac91a-0ae5-4685-8499-322a5e82f1ec", "sighting_of_ref": "indicator--9de1d028-d277-4f9f-bbdc-c36bddd82736", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85178c0d-8952-498a-9d0e-c98f00b79761", "sighting_of_ref": "indicator--98bd639f-508f-4571-8cf8-a8b163c43deb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6854acfd-734c-4b20-91ac-17a158805364", "sighting_of_ref": "indicator--5834450c-2faf-4a67-bace-0ca308541c55", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73610c33-ce47-49d6-b2db-56b37f26115f", "sighting_of_ref": "indicator--18861f01-4c26-4d0e-8f96-d955ec732176", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88be7015-dc94-4787-b2db-6023b7af26d4", "sighting_of_ref": "indicator--44cc0a8b-7158-4e30-944c-73b51e6a8977", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84304cee-3fc5-4a9e-b9f0-625921e53892", "sighting_of_ref": "indicator--dc386fad-e50b-4db5-8430-8b782b629e69", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a082b5dc-f8ce-4968-96dc-79cad74bb8f2", "sighting_of_ref": "indicator--6c47b607-ba77-446e-9e58-74b6567077aa", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab44746d-f333-46d2-94d7-81d4cb157113", "sighting_of_ref": "indicator--f4186baa-7e58-4570-ae0e-e0e7233bb896", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f4e8f1-f679-4414-a7b5-cf6a58ab8ac0", "sighting_of_ref": "indicator--6d7df2fb-b9ca-462e-a59e-113736028671", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d318bd-085d-4bea-b766-ce316eafaa8a", "sighting_of_ref": "indicator--7e638bb6-0b9c-4b07-bd5b-b308cf00199d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3bbc52-6182-4d1a-856e-adc1fb597c55", "sighting_of_ref": "indicator--2e10a11b-ec4b-405d-a779-a243cce71d04", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc36875-dd57-4ef7-9954-b23755234c63", "sighting_of_ref": "indicator--bc09a59b-6b26-49cb-bd7b-3dddc41dfa32", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06605b22-a3e3-461b-bc8b-78e9c56e58b6", "sighting_of_ref": "indicator--7f4ca2af-5c0a-4ea8-81b8-d7eed48ebd4e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eaf0a5a-83d4-4830-bb4b-1f861c4bf593", "sighting_of_ref": "indicator--43bdc928-6d02-429e-85a8-d111a02a65e8", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e8bc04-ddad-4c81-8578-b652cc5b4e79", "sighting_of_ref": "indicator--d2a933b1-ec0e-481e-bb00-d1e0717d1c33", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20f8259-9e13-4d9d-abaa-4e8ff5632fc2", "sighting_of_ref": "indicator--4f1205fb-aa47-42b7-8f9d-36bce1924c0a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a3c1c7-4cc5-409b-9996-d23c024d86b6", "sighting_of_ref": "indicator--a9fe4a55-514f-4c50-ac7a-1abbded4696f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af119342-c27f-4b53-af00-36958d0b507e", "sighting_of_ref": "indicator--cb641a66-a733-4679-9937-891ecb802f5d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a380ed48-cb92-4540-975b-805b0f6b2156", "sighting_of_ref": "indicator--cc3474d8-caa7-44a7-970e-8d30f676d5ed", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e5fff5-a3ab-42b5-a82d-b1d81265cd22", "sighting_of_ref": "indicator--588831ec-364d-4944-b7f3-ba0b1dd39228", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c97542-79dc-435b-b93a-e29fba751b49", "sighting_of_ref": "indicator--f4b3a2b2-8531-4a11-ae3e-6e10feb04894", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa6e0db-977f-4a09-9220-a9287bc09423", "sighting_of_ref": "indicator--14a7af11-50b9-4c57-9033-9188c42ca31c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f309095e-228d-4ad2-8017-61ec7838a694", "sighting_of_ref": "indicator--74e320b0-71a0-4730-95c4-bd799a8de88c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d752d5d8-f761-4e8e-8e7c-e66861c2e132", "sighting_of_ref": "indicator--ba9630cc-3ec3-4e2d-8223-d3faecd81275", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb60477c-7592-4518-9999-55e92aed575f", "sighting_of_ref": "indicator--d9b983e8-2513-4e14-b765-92ce1f136af7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48340a3b-6b37-48e8-be77-7736ab6dc2f9", "sighting_of_ref": "indicator--ca587392-1ccb-4834-b55f-70cae187469b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e52fd5-40ba-42f7-b8cf-8cd569a74a5c", "sighting_of_ref": "indicator--67fa4af4-9704-4e7c-92e5-9b1a14fea400", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c631f18a-903b-4ed4-9e16-31398a12d99e", "sighting_of_ref": "indicator--7528aa19-9793-4843-8b25-b3624c1db0dc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4688ca1e-4aa4-481d-b704-de00e3dbb7a4", "sighting_of_ref": "indicator--e9eadb42-b12c-4fca-93db-092148c1521c", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b73bfc3-e024-4827-8cd4-b15455263d91", "sighting_of_ref": "indicator--173bf19c-4ad7-4168-b5ae-9b008a806876", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62333ace-9862-45bc-95a9-559d67659394", "sighting_of_ref": "indicator--6e3c215f-c9c2-41fc-a2b8-cfcd1a3cca8d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ccda2f-14bf-42ff-bc5a-2fa69b3de825", "sighting_of_ref": "indicator--b3f6702c-6580-4388-8c32-e252817fa710", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30cd08b-58f3-49af-9346-acee7a98c6b4", "sighting_of_ref": "indicator--cf87c516-3048-4a05-a909-2850cbdac7e2", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e8af96-e9f6-414c-9746-6256993c50a7", "sighting_of_ref": "indicator--6d85a1f5-4809-4c20-adb8-0dbcadc393f5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62de6e37-9156-4b40-9de4-7cf7ffdc1734", "sighting_of_ref": "indicator--b22fccdc-fb79-4bca-ba55-546b2eb6a045", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce57cb2d-7fb0-4a0e-831a-52e4f378a97d", "sighting_of_ref": "indicator--cf885901-7669-4488-bc1c-41bb18abe011", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515ebe2d-401e-45a8-b9ee-01fc830a8965", "sighting_of_ref": "indicator--87d10b2f-6749-4630-93f8-6f15186f64b7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b729f36d-1bba-4053-a3c6-94cb38de763c", "sighting_of_ref": "indicator--67f7d8e1-3134-4ed5-9c2d-7b7396eb1ddf", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b1dea2-51eb-46ed-ade4-740709b44d9b", "sighting_of_ref": "indicator--67f7d8e1-3134-4ed5-9c2d-7b7396eb1ddf", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e21ce6-7b59-4b7c-a4e0-9612abbcfc63", "sighting_of_ref": "indicator--67f7d8e1-3134-4ed5-9c2d-7b7396eb1ddf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcfca81-3543-42d5-951c-5492ba564566", "sighting_of_ref": "indicator--40fa156e-3efe-4026-95fe-1a7a16d93f81", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f955a6-921e-4931-baa8-70665f799dd6", "sighting_of_ref": "indicator--d80861aa-5387-4c47-9dd2-a728b63993db", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba0c9d15-8c8e-4c51-ae33-f6ed4bf5dbb8", "sighting_of_ref": "indicator--d80861aa-5387-4c47-9dd2-a728b63993db", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28056ccb-66c1-401b-996a-e5b110ffedb6", "sighting_of_ref": "indicator--149c8075-4e5b-41c8-a4db-c297d2760e19", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e30450-680c-44a3-b9b4-3a4ba4877618", "sighting_of_ref": "indicator--6ebb8c9e-d7ad-41b3-93ad-0af84bff4853", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ae2a00-d69a-4b9d-afe9-44bd9d06160b", "sighting_of_ref": "indicator--6ebb8c9e-d7ad-41b3-93ad-0af84bff4853", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b27e3d-6c8b-467b-ba4e-2ee3f80e3b27", "sighting_of_ref": "indicator--bd1c8a16-79c0-4d49-8272-aeec3dc5edbc", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39697da-3a3a-4f08-8450-a6119328464d", "sighting_of_ref": "indicator--3b62a72b-38d1-48d2-811f-690735b797b5", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ca94ac-60bc-4d41-b3b9-da8572ba0239", "sighting_of_ref": "indicator--a5ae4a5d-f776-4d6a-9c5f-2f05d75cf711", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57749bd-fbc5-4fe8-b3a3-9d4c94ba0b74", "sighting_of_ref": "indicator--04ddaf5d-142b-4512-9a3d-c47a11bb3edf", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfb9cec-8fa2-4600-b4d1-8a8a3fe40919", "sighting_of_ref": "indicator--e028e9b8-b689-4081-b8b3-d72a47b5f6eb", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc63117-318d-4e8b-b679-9554457a4ada", "sighting_of_ref": "indicator--c904a97e-b46d-45de-b89f-65bc0045f1bc", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbb12e9-0276-48a1-b933-997a6d49ce8b", "sighting_of_ref": "indicator--c904a97e-b46d-45de-b89f-65bc0045f1bc", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b782aa71-1da0-4f92-a51a-619318874199", "sighting_of_ref": "indicator--5cf0fd00-7312-4e39-90a0-262810e01c1e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d411ac-cb8c-402d-a42e-97067735bf56", "sighting_of_ref": "indicator--5cf0fd00-7312-4e39-90a0-262810e01c1e", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ce552f-bbbc-4489-92da-f2c6d81e2d81", "sighting_of_ref": "indicator--5cf0fd00-7312-4e39-90a0-262810e01c1e", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f529757-3633-4e9d-b459-67027dea5f82", "sighting_of_ref": "indicator--c7956f71-bd2c-459a-9b2a-c4ce96d02de5", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4506b844-6500-470b-9c3b-67461cf46b4f", "sighting_of_ref": "indicator--cbfbdce5-b18a-444f-a3a6-d8ee3f9fe7c7", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83d5d3a-e357-4a18-9574-f7b02bea59a3", "sighting_of_ref": "indicator--cbfbdce5-b18a-444f-a3a6-d8ee3f9fe7c7", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffb405b-d846-441c-a824-d34fb8de2092", "sighting_of_ref": "indicator--cbfbdce5-b18a-444f-a3a6-d8ee3f9fe7c7", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dafac02-5ce0-4dde-aa0c-55df1d19dcb9", "sighting_of_ref": "indicator--e8903083-654b-4a75-9d4b-672ad0a0e46a", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c4770a-5757-4a32-87cf-c48de62ddc4a", "sighting_of_ref": "indicator--e8903083-654b-4a75-9d4b-672ad0a0e46a", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f937a03b-42f7-492b-be50-177ad0c96f08", "sighting_of_ref": "indicator--e8903083-654b-4a75-9d4b-672ad0a0e46a", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae32047-fc3e-4809-983f-86d8cefd904e", "sighting_of_ref": "indicator--19e1a8c0-db66-45f9-b3b3-aae55e005805", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9506f5f5-ca0e-467b-976b-4998f7d18655", "sighting_of_ref": "indicator--4fe3136a-fc7b-4219-8d61-0a479dfbe2f9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a952db7-6246-45f8-bd66-6282a2b48d0e", "sighting_of_ref": "indicator--91f61407-d2e5-4b30-94a1-670a5c239b88", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c69846-2c8c-4737-ae16-f9388a1dd186", "sighting_of_ref": "indicator--18e7ab79-0e1d-4441-808e-a4d9417d3946", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4757788-67bc-4e55-aafd-382aca3f8a8d", "sighting_of_ref": "indicator--07b1dd7e-74fb-42a5-9c77-422689f95942", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1110de-ccad-4bdc-b389-b784dd5522bf", "sighting_of_ref": "indicator--2432056d-293d-4caa-90c0-c2a89ba6f2ce", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9000dfe-3deb-4549-913f-60021c512fcf", "sighting_of_ref": "indicator--2e7e5c45-d7fb-4619-9ed8-b47947cc4b6d", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bcad0e-324f-4f6b-974f-4c3801a9bb71", "sighting_of_ref": "indicator--7c1de551-7256-4889-8f5c-24a7c02b1805", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce288daa-d2f6-4c61-8f6a-fdd76c5752a4", "sighting_of_ref": "indicator--7c1de551-7256-4889-8f5c-24a7c02b1805", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb56cfac-c121-4ae8-bd66-f44eff1ee7f0", "sighting_of_ref": "indicator--a8e7e380-7dc9-4845-9a54-45f17e4fa4a6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96eb4b7d-71f3-4dad-9b5f-7f627f195039", "sighting_of_ref": "indicator--a7dac4ba-5077-4084-a23a-f66821958548", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ee9f17-12d4-4c7e-b584-01b184483687", "sighting_of_ref": "indicator--132c6253-cbe8-4d00-a3b6-0afdb77ed422", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4632d4b-5326-4b8b-a63e-e665d4379bbb", "sighting_of_ref": "indicator--c9cca49a-cdca-42d1-8f01-f69ac00350fb", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35329654-cb00-4992-ace7-f130a6d7808c", "sighting_of_ref": "indicator--c4635a0e-fbcf-4687-a665-66a5f90cb7b6", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42e179a-4654-4b94-b7ea-4e9e4e430366", "sighting_of_ref": "indicator--b169c231-007d-4c7a-9e75-03998dafeada", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655179a4-dc76-4ffa-b852-b43548d0b382", "sighting_of_ref": "indicator--b169c231-007d-4c7a-9e75-03998dafeada", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4691332b-dc68-4022-923f-98dcc2bd01cd", "sighting_of_ref": "indicator--3bd6c704-e733-4ee0-a54b-6718b86ca7fb", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a3aab1-3d4a-4c4d-90e3-51fac84317e7", "sighting_of_ref": "indicator--37d29da3-7e23-4b6e-a8ed-f657471cdba3", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6004a4b-ba5c-4174-bc66-0a40270d80b3", "sighting_of_ref": "indicator--ac6eec4e-8a88-4b7c-ab10-a4cbc7cada1d", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b417c47-c1aa-4e54-8b85-a12b87445efc", "sighting_of_ref": "indicator--d48b9526-cac4-4684-952d-96a36c28164f", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed47b51-9f60-433f-8552-447c67ca662d", "sighting_of_ref": "indicator--d48b9526-cac4-4684-952d-96a36c28164f", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bca1a7f-9db8-42de-89eb-e46d059ea3eb", "sighting_of_ref": "indicator--4b137230-338d-43ac-8157-1bbe0a3f98ff", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e422dd42-374e-472a-9795-4b1f200abdbe", "sighting_of_ref": "indicator--e590f500-d829-4b83-ad43-cb230a96c8c2", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8eb237-ed19-4b0f-85be-f0b5e7952517", "sighting_of_ref": "indicator--39ca690b-72bc-4102-ab7b-3754d5ee727b", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef2ac3f-79ed-41c7-80e6-46f205f001bf", "sighting_of_ref": "indicator--cd802c57-a4ba-447f-96ba-07b557cf5721", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038beff9-625d-4e99-ae4b-917744515335", "sighting_of_ref": "indicator--d15e4233-c58e-4192-8368-ca7d82cd0932", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343138a5-3ecf-4632-aaa3-fcae2f41ffbe", "sighting_of_ref": "indicator--97268f60-2991-46cc-b568-42f5d53c4c54", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8985fbc-ff7b-4fa2-8304-9ea1d6601b76", "sighting_of_ref": "indicator--97268f60-2991-46cc-b568-42f5d53c4c54", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed8df9b-a867-4fff-92c3-c568689571c0", "sighting_of_ref": "indicator--97268f60-2991-46cc-b568-42f5d53c4c54", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2d6e75-193a-4c2b-b24e-408e86a99c87", "sighting_of_ref": "indicator--467e385f-8459-48a0-bce7-2f36cee77878", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15eeacd2-d5fd-466e-9c85-d4255be78c4e", "sighting_of_ref": "indicator--d7588938-893a-4e2c-aa80-17e4b4e62b8e", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004686b1-69af-4021-b9b6-b6d06aa2d221", "sighting_of_ref": "indicator--dd34d943-81d2-499f-9fc9-26c0953f147b", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34933f3f-3404-46aa-8a10-1da81ba1cc9d", "sighting_of_ref": "indicator--5f78c414-9305-4f19-b637-ba6c8b6d0184", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb20bf8-c0f5-4ef8-a08f-609779fd9721", "sighting_of_ref": "indicator--5f78c414-9305-4f19-b637-ba6c8b6d0184", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebce831e-c61e-4bb4-9773-ae31e93a3416", "sighting_of_ref": "indicator--5f78c414-9305-4f19-b637-ba6c8b6d0184", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fa4b47-adb9-4c0b-bac1-1fd66266625e", "sighting_of_ref": "indicator--8bda9b3d-1fa6-4f4d-acde-4920b6d8e1da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3f8dcc-5c35-448e-ae91-ab84bba318f6", "sighting_of_ref": "indicator--a185cb70-42b4-4694-ab6e-186785add6e0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f44fb56-c227-40f8-9872-182cbca62231", "sighting_of_ref": "indicator--2bf5b9b8-419c-4666-bb4c-8632ac87c038", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5b106a-6853-424e-b17d-e5092785e7be", "sighting_of_ref": "indicator--2bf5b9b8-419c-4666-bb4c-8632ac87c038", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f51340-65c8-4d44-b2ef-4770770cb4a5", "sighting_of_ref": "indicator--2bf5b9b8-419c-4666-bb4c-8632ac87c038", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc88460-39f7-4dc1-ae02-ebadea4f7c8d", "sighting_of_ref": "indicator--70bd8730-3d81-47c4-ba86-b59d3670c2b0", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5ed367-ac76-48ab-a934-98c8d3768ba2", "sighting_of_ref": "indicator--70bd8730-3d81-47c4-ba86-b59d3670c2b0", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6d7c67-0874-4a88-8b62-410ee3c7958f", "sighting_of_ref": "indicator--c3a2095c-1d63-4bc4-b6cd-0586751b6135", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67d2310-76ee-4415-82cf-4be842bd9e4a", "sighting_of_ref": "indicator--075aeafa-2dff-4705-8c5c-b057fa6c2452", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe7070a-a96c-4f93-8e18-bdd200dbe859", "sighting_of_ref": "indicator--3cd41cca-0493-4e9a-9f62-d9089166e0a9", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94454613-5184-4a65-8411-0d675b8bb692", "sighting_of_ref": "indicator--4df1b781-2346-4ab9-9525-119e3136cb08", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47db1dd9-5400-4fae-91bf-50afb00e5b56", "sighting_of_ref": "indicator--ed4a3800-6cac-4357-9715-893119b7e981", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abec519a-27a5-4b28-a647-106aed8a043b", "sighting_of_ref": "indicator--ed4a3800-6cac-4357-9715-893119b7e981", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7442211f-b55d-49c7-97eb-a1b4e1bfb8c2", "sighting_of_ref": "indicator--ed4a3800-6cac-4357-9715-893119b7e981", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3aeabe3-a6b5-476f-9632-78768258c0fd", "sighting_of_ref": "indicator--5f3634f8-b22c-44b5-bcf7-6aa1080eebce", "where_sighted_refs": ["location--48f7b216-aaed-4081-9a42-4499416f5dbb"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba854840-fbfd-4e04-86dc-750b93fd2f1b", "sighting_of_ref": "indicator--5f3634f8-b22c-44b5-bcf7-6aa1080eebce", "where_sighted_refs": ["location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1ee241-5715-40f0-b1b6-35c6b46963a4", "sighting_of_ref": "indicator--5f3634f8-b22c-44b5-bcf7-6aa1080eebce", "where_sighted_refs": ["location--1672506e-9b8e-43c0-9891-83b3142c3e82"], "first_seen": "2026-06-17T00:00:00.000Z", "last_seen": "2026-06-17T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--00fc2761-f330-436e-bd66-5d0ef932c7af", "name": "Threat Report for 2026-06-17", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-18T11:00:01.174Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--48f7b216-aaed-4081-9a42-4499416f5dbb", "location--bfd172f8-dc16-456e-b5c5-e1d8b1b7c728", "location--1672506e-9b8e-43c0-9891-83b3142c3e82", "location--e3afa1ac-d042-4b01-aceb-4f8fc64c6be8", "infrastructure--18d481e2-b984-43f7-bdec-40c3b878b752", "infrastructure--5bdc331e-5949-4115-8312-eb66f59c49ea", "relationship--ae03a9de-77ce-4f57-a2be-ce337818eb6a", "infrastructure--481ebfca-8258-49b8-983d-c67844b34e60", "relationship--1f21aade-ffdd-4d35-8e6e-6dc6e928b140", "infrastructure--0278d08f-119b-4391-b736-d7ea9f6f9911", "infrastructure--9beaeb2c-b4c8-4d31-b1f0-b0a316293f1f", "relationship--3839b684-a752-49eb-b071-63ce41746038", "infrastructure--5e8cc15b-75a9-493b-a0c6-e0aba009a79d", "relationship--1c0fb33a-6e9f-4912-8190-bd5a40b79872", "vulnerability--59365971-9aff-4d45-9779-fde5e05a902b", "vulnerability--75f6c9bb-ba02-407b-83a1-2b2e2c44bc30", "vulnerability--e0c5c0c3-2afc-484f-9c71-65705a5c9c36", "vulnerability--bda676fa-f8a6-45b6-9c11-85202656290a", "vulnerability--dedbba31-b3b9-4b96-919d-d87d06c5c1e9", "indicator--b505ec45-9b32-4a39-9713-652fd61e3b42", "indicator--d1ae4b7c-a53b-46ef-b0b7-a6733b9a84e4", "indicator--754219ba-5632-4b4c-9c9e-754f91dad198", "indicator--48424e21-8ff2-450f-b963-0bb777decc9e", "indicator--2c4f656b-6454-449d-a51d-32f613a7137a", "indicator--de521365-f1c4-4466-8894-a00c4991376e", "indicator--25bbfae2-30a6-424a-b9dc-c46825821f2e", "indicator--0541eb18-d7b0-431f-b95d-38760fb13671", "indicator--9e745908-cb1e-4643-9d2d-b25b0ce3eefa", "indicator--dbe903d6-218d-4b7a-aad6-a043206fa2eb", "indicator--7dcbec72-7629-4c84-89f8-53a6843fa6ab", "indicator--1b811594-0310-4fcf-aba1-cb85a51d518b", "indicator--f2769a8b-3903-4797-b7d2-36b40135213a", "indicator--2528fe4c-80a2-489d-ba11-e6796d57283f", "indicator--8bbef0cd-bfff-49dc-8c12-1b4f0f28803e", "indicator--ffea2686-161b-4311-987d-30419a71351b", "indicator--01b29dcd-71af-4d39-bf28-c765d6c187c0", "indicator--46adc723-32e6-4989-bf97-d165700ec876", "indicator--c44b1545-9054-4240-b0ac-1395a293a69f", "indicator--3012ad52-01e2-4aab-9433-1fc8d898857e", "indicator--4e1c7799-dfcf-4266-9f2c-06b115fe474c", "indicator--42cd1310-379f-487a-aa6d-739fb9fc5ce2", "indicator--2f2e715a-0db3-46a6-8b2a-0a6875c592d6", "indicator--320eb954-e443-44ea-a3cf-3e209c1842f7", "indicator--896f650e-0e26-41ee-84ce-f50343202b47", "indicator--3a52a328-15a2-4b4b-81a1-2e9676314315", "indicator--9e3721fc-cac7-42f7-90fe-0dc2f9d95a1f", "indicator--16c704ae-30fd-461d-8471-acf08320d9b1", "indicator--696815cf-a248-432b-bb4b-543bde0dba30", "indicator--219ed898-adf7-475a-bd72-a7d85b8f2a7d", "indicator--30e86e41-42a6-4766-835c-6793e135097c", "indicator--d6caaaa3-2c94-4df3-8c5f-43cb084e1c65", "indicator--bdd8bbf5-ab46-4760-b94f-5d666da77681", "indicator--5f47c4a7-b2c8-434a-8389-4e953e277eca", "indicator--6472d6af-18a2-483a-b54e-a0d2240c5c55", "indicator--e287ea22-012b-45fc-a2d0-a8f734f45a72", "indicator--6919e9b0-17f4-47e9-86be-4a48432abdc2", "indicator--025a710b-7985-412e-a13d-89f5ebc14bf8", "indicator--4fce92b2-0b6a-40fe-b4bc-c270ee784bcf", "indicator--2a5a703e-b40d-4032-94a8-751e57d1a9d7", "indicator--197aec22-d812-4863-ac0a-9ee0e5627a84", "indicator--168dcbeb-c186-4838-9be7-6e455b96cca9", "indicator--0db631e2-cfc4-44ac-8328-cf07109a704c", "indicator--6e30a379-1a97-44be-96b9-b554c8555f68", "indicator--abb73fe2-0951-4992-9dd5-9954177a6ac3", "indicator--2bb28af5-95b7-407e-8261-ea485ea7e4ca", "indicator--dde279a0-e770-4df9-bf16-d06e3788f1d0", "indicator--e92a46ac-7b9f-4253-9a8c-2725512243a0", "indicator--1ac0f078-aaef-49eb-87b2-d42117ceb305", "indicator--8590c9a0-b6f7-452b-844e-b71dfb0fada6", "indicator--c1a39a7b-7477-4316-840b-59f12688a9e4", "indicator--268a884b-ec45-45e7-8bd1-ec794c527984", "indicator--97cd31fd-e3c6-404b-b4c3-a72952ec9699", "indicator--6b0de000-fe28-4095-8a4e-b117a91f7a9a", "indicator--1a283303-f50c-4023-9709-e654d5cf863c", "indicator--d04fb1fe-3a7a-40c3-9e21-db591cc9894d", "indicator--7bad2246-e99c-4822-b5f7-c34a43268ca5", "indicator--7887cf67-d723-4cb5-b73f-6449204a4851", "indicator--e2b7840b-2b11-4835-9df6-6aa53bc729a5", "indicator--ca969b5e-bde3-45bb-b5a9-192bdf3ba16b", "indicator--5d2290d6-0859-4a41-8dc9-9656cea6d460", "indicator--2a4f4b09-626c-4c75-a8a5-3b1f38d2d624", "indicator--ea924662-a8c6-4644-8b71-c20eb7fe31fb", "indicator--6502b00b-81ed-44fd-b8c0-4e24393882ee", "indicator--5cbe2337-d517-4171-946f-e8d5f64158db", "indicator--75364750-03de-4715-afbb-48d32f9b12bb", "indicator--02bc0385-7b94-4de6-9d8f-f88c738448aa", "indicator--b7c0c1bd-0321-4556-b014-778174de60cb", "indicator--27c82c25-5508-4d43-847b-1b40c04f8948", "indicator--93e2ff44-0a5a-4e4a-9828-47850fc82a6a", "indicator--c1f1254b-5830-45fc-95c9-abba2dc5c3f4", "indicator--474a91af-d476-4353-b584-ad46bec68afd", "indicator--2ce46f1e-1a12-433f-86d0-44a3318f778b", "indicator--c0a4d129-3cfe-4e71-9fed-68b258bc8f20", "indicator--6dd8576c-12eb-40bc-864d-6521c050bbbb", "indicator--646a53fc-13c1-4ac3-b6be-15d52fcec91a", "indicator--23daa41f-0dd3-4dfd-85a2-8dcc4a2ac3b1", "indicator--8ebd05bd-a4f2-4214-b8fe-03971d391097", "indicator--a8af1fd1-6338-4e18-8387-a169173ad3af", "indicator--de69f102-c7c1-422e-b0e6-655e7e8c4d0a", "indicator--fbf94004-5f3e-495a-89c5-6ca2e80ac2e3", "indicator--7e3f355e-8d22-45f1-b6ee-75969bbf90cf", "indicator--c2f9e61d-e9ff-4d34-8449-77b29a5e8e31", "indicator--709a239a-58be-4bb7-8b7c-d4236d3e78ef", "indicator--cef0e39b-ff6e-46f7-bcba-b1baf890286a", "indicator--be927951-54ff-4772-b7ad-2fb5ed4f3b0c", "indicator--31505a76-305b-4e10-beac-60b512f02f52", "indicator--9e8fc994-0cf5-4f79-84c6-f5ec0e8b7528", "indicator--3f92e248-34b4-4a93-ba45-e7000a69d0b2", "indicator--d32ec99b-f4a8-4466-b2f4-ecd58cd5d091", "indicator--a4bcab43-7201-438a-92b2-c5e8df96db11", "indicator--c8c2d25c-fbd1-47ca-9353-a134485f9f1d", "indicator--ebd8368f-3b13-42de-b66f-91034914b7a5", "indicator--7ac4ff53-1298-4a5d-881d-6506eb093076", "indicator--f564b4a4-744a-4454-b88c-135a204d9111", "indicator--053517d6-f873-4fce-96ed-ac8b698e21fd", "indicator--4aa03ab0-8b13-4235-a2ef-d4f25fcefc88", "indicator--a9694eae-78f9-4d54-89cc-899a0dd30678", "indicator--84148847-bcd5-4dab-a2fc-a7fe5de127da", "indicator--074919c6-81c4-436e-b2c2-8e3e3561c388", "indicator--0e188004-394d-499e-8a0c-95b030b4a25f", "indicator--72a59c83-42e8-49bf-b2c1-a10639aafdb6", "indicator--6741d9da-fce8-4926-9480-18ba869495ee", "indicator--c693fa09-96e9-4c87-bdfb-ce38c918cded", "indicator--811f26fd-2f6b-4854-b0aa-8e345296811c", "indicator--9a05014f-88a6-4c7d-ae14-5f0c429bbc47", "indicator--01cd5a4b-7733-4ca0-a0f2-4b1104ffe83b", "indicator--a348bf20-490b-4695-be44-26d792112946", "indicator--1cfa7fe0-570e-4d5b-9a87-09fd4b1e97b7", "indicator--2bf3eafb-e613-4c0e-bfca-7250ad1d9487", "indicator--a91afb03-f3f6-45b5-8c03-1b0cd578a094", "indicator--a9f81abb-fbb2-4cef-8ed1-03cbe5e272c4", "indicator--99c6c74e-bf07-4f96-8542-e426495b5d38", "indicator--4f4befab-e986-4e2f-abd9-5dde4290a25e", "indicator--849f4345-144a-48f3-beb0-c703953b1fe2", "indicator--c27c6c50-bfd7-4a5f-88bc-fef30928949a", "indicator--bad73a1a-01f7-4368-ac21-b88c03b6fcae", "indicator--223b2744-3a04-4212-864b-f9f29ca6d403", "indicator--23fdeadc-1986-4ece-945a-eea58aa4867c", "indicator--51b812c2-f693-453f-8a48-c5a40ece4470", "indicator--a5b18a76-bc32-4851-b271-e12d1687e413", "indicator--d05c9ea5-d066-4da9-a98b-e1f0120e181c", "indicator--1fbbbad1-ac0b-48f1-b4c3-ddb6b68a1c6e", "indicator--6b4216e1-5042-4f5a-94cc-d8e1cdb6a409", "indicator--2b5ba1ec-cc08-42c1-a427-885b19546663", "indicator--ddcc8c69-6abf-486b-b2cc-93e68e1bde35", "indicator--e8b79cfb-93ac-4003-a837-79c99ad481e5", "indicator--5291f043-25d0-488e-9880-d38209fd3973", "indicator--580580d2-204c-4cca-9fea-7f0bba40c7f2", "indicator--13d7325a-dd48-4819-b9e4-2967fe774ba6", "indicator--0632f591-d328-429a-b680-e24799c17a76", "indicator--f0f33b59-eaca-4fd4-86a9-0b48d64092e5", "indicator--16e64e6b-5c27-4472-b7a7-6c82a0b7606e", "indicator--c5f10b9c-79c3-4678-a6b2-dddd2e2e20ed", "indicator--6d5fc6c4-36af-464e-be38-7b0d52db3c94", "indicator--7c13a806-bffc-4b46-8cf4-725757bfc0df", "indicator--73d9633f-7887-4100-84bd-26200ebf3f03", "indicator--1402d2ad-6b11-46cb-a16b-eb7caf3d5bef", "indicator--f043d22a-3b0d-4e6e-90bf-2f4149f7f5ad", "indicator--29782777-dfde-466e-a6f9-4736cdad258a", "indicator--bc7be80d-4bb3-412b-8cb8-89dc1dfec299", "indicator--3b29139e-34b5-4f35-8c6b-7bad1597bf17", "indicator--d78d8109-ee2c-423d-aa3b-20d9442b0325", "indicator--e8e73b5c-c0b3-4727-873e-fa8582491373", "indicator--c8fe792b-bcec-4c56-8742-c7715f147719", "indicator--03252686-22f6-469a-910c-5add6d989336", "indicator--1caede79-3068-4b9c-910a-01ec60ae73e7", "indicator--fa3874a5-f185-40e7-8054-5166ed66c122", "indicator--06ce24f1-9ce0-44b3-a123-144707b743e4", "indicator--3a027b48-99b4-4ed3-9b14-aca69497a987", "indicator--6c3b9b4e-49c3-4bd9-9216-a89346184009", "indicator--a33e58a9-3558-4b1d-949e-e36387a74bbb", "indicator--faa64ebd-62a6-44d2-a89f-42044e06854c", "indicator--90db2a10-0ccc-4d7a-8d07-78bb970c6dba", "indicator--6c1b2f25-6c0f-49c1-9c59-4a8f7c9deb2a", "indicator--cf0a94c7-e047-48d2-b4aa-7c1e2669fef2", "indicator--8797b299-5fca-4e01-9a71-fef6e728c723", "indicator--3285bebb-2825-43de-be95-757bf731ae23", "indicator--f418ba96-5dd4-4ddc-ae28-2015e2c1c491", "indicator--5161fbcb-86c4-43a3-9920-c8e53b655087", "indicator--d1c3422c-12de-459a-ab83-b77b52f5be5c", "indicator--ff66dc23-8d02-45e9-9a8e-8268468c1fbd", "indicator--4760a862-dbda-4a68-932e-4e7128475361", "indicator--78194477-7efa-41f1-a312-400ac715382e", "indicator--4ced1ea0-e4a9-413f-914b-ac1b2e3cfe34", "indicator--561ef881-3ba3-449e-ba6b-8a4e23c24861", "indicator--d655028f-67d5-4f51-bfe9-70ec5235cc69", "indicator--1f3cb084-4155-4675-97e8-9976bdbac98f", "indicator--1b9b13c7-2ae5-40e3-ae9b-e5bf9704a751", "indicator--886a7cf5-2569-48ce-9b3c-96ef9c013b27", "indicator--d68d040b-7d18-44b7-8762-5b6c2a31b9b7", "indicator--d5d50fbd-969d-4322-90d4-64e9c343b25a", "indicator--80ffa2a0-4a44-4687-88dd-9b6018610010", "indicator--b99ddce1-751c-4433-ba51-d7149f775670", "indicator--3cd62fa5-85d4-4e9a-9ebe-8628447f9fcd", "indicator--297fed5a-2cf1-4b4d-9e8b-f1ded1c1972c", "indicator--5e85718c-bc72-4a6e-9d59-8a45e05276d9", "indicator--4906fa61-647b-4ea1-9fdc-804938d81e74", "indicator--7060817b-bddc-4c19-8a9b-44b80c23c3e8", "indicator--a01237b7-05bd-45bd-893a-22b7ad57f50d", "indicator--a0c3510b-eccd-4074-b8be-4d46dd245910", "indicator--5bae3586-ae05-42f4-bb04-4f94f746a6d6", "indicator--44d01f2f-59f2-4df5-98ec-49a2ff828808", "indicator--1019653a-662c-48fa-87ab-f9b05ddb131b", "indicator--44fcf200-db44-4b85-8ff1-95b143863d22", "indicator--a9a60191-7b47-448c-b0d3-2537faec2b09", "indicator--f1126d03-150d-47c0-a106-27aae8c33ddc", "indicator--44fde374-3f63-464d-b11d-eb5e98681b84", "indicator--ee15698e-8eef-4d3a-be5e-8fad80622fc9", "indicator--011a5a6d-4a56-49c1-a1bb-080f596ff5eb", "indicator--805700f6-9809-4824-9eae-b1b2bcd3eca9", "indicator--04e1739e-f4c9-4513-881c-f82f4d48603e", "indicator--2317da34-1c21-4b02-9779-05d628483257", "indicator--6f8d018a-7cb0-43fb-85c7-44496dcace96", "indicator--c394f822-1ae2-4cdf-b955-522522409d56", "indicator--6ce625a9-74d0-489b-819f-031970ba377f", "indicator--1874e24b-7b8f-4898-ae91-ec37aed64160", "indicator--e9e11b37-4a01-433c-8227-dbb9287241f3", "indicator--5d558a00-b5ee-4026-8604-074537307951", "indicator--b9a1939e-1ebe-482f-b5f2-545b5ff99531", "indicator--b15cf6cf-61b9-4704-bea6-f57c96f4fc50", "indicator--bdc6038a-ddef-4c0c-a60e-fed1de1c01af", "indicator--0de7fb31-8593-45de-87bd-55b1641178cd", "indicator--93f58f25-9831-4c71-ac89-8cf927e405d8", "indicator--4059dfd7-b06a-4413-91c1-c8722bc19943", "indicator--fe0608c9-57f1-4246-a562-45d2b7899c6d", "indicator--8b7b69fd-6180-4239-b569-16e3844a97dd", "indicator--4442b388-d749-41fc-9c1f-16d36e85d943", "indicator--a8ab2c05-d869-48b9-b105-6d40436237ba", "indicator--6dbac7b6-b743-4e5f-9bfc-72a46e628aab", "indicator--24305050-3e6d-442a-9cbe-6c3b2e189f7a", "indicator--a58d2364-41fc-470e-9aa5-1a08df81fa46", "indicator--255b4249-1588-4fa1-9763-a9374f6ca80d", "indicator--f13d6025-faa8-453f-9dd5-fedbb1618efd", "indicator--de9e9125-e8da-48d7-997a-13b899640b61", "indicator--aa8fb7b1-9ce1-4fbc-8210-7a12084f80c2", "indicator--6b1fbd77-6f2d-43e5-9e9a-34a6aadec12a", "indicator--99d875ad-0bd6-4834-b97b-1c64c14cca56", "indicator--a2410795-9859-4975-aa09-0fed3c4d5460", "indicator--b31f936c-e28f-411d-a5e9-515665469cb4", "indicator--a63542c0-0172-42d9-a6ff-663f33df3edb", "indicator--b636bf8b-055f-468c-86db-2d63707f523c", "indicator--977f95de-ed06-4e69-9590-8b7e76c7d799", "indicator--f7d159e6-2dff-43db-8a88-9c816666f208", "indicator--1a8ebb42-433f-4e89-b263-6b81e54656d3", "indicator--42996e1c-99e2-4577-8105-6a7eb9067537", "indicator--7ec145a4-a0d0-4743-a3c5-477f6ed4afba", "indicator--c374d4ae-e495-4110-9176-3e8a0e76984e", "indicator--c5dfe887-d137-42e7-ad35-654cef5545c8", "indicator--d9327400-b676-4b96-909b-30cd3c19c96a", "indicator--cc4feb41-19c8-4b1b-91d0-99425530dbc9", "indicator--4dcfa2a6-e888-425a-8963-7f0b45987a78", "indicator--94c19909-f0ea-4e78-a4c9-ec803a38e34b", "indicator--fd321486-5620-4dcf-a61a-32124c8e255a", "indicator--70b549fb-5155-4af6-b6d4-f3f902bae9da", "indicator--fb2f2dd1-0ee2-4c1f-b77a-d04f877136ce", "indicator--62b094cd-fd60-46b4-bb3c-5b7209bcdb21", "indicator--36408354-728f-4ee1-8f3c-d9ae21d4fa78", "indicator--73e63e41-7076-4cf4-859b-987a1788685d", "indicator--e2ca0803-137b-4ffb-8ebd-e49e8e02ca8b", "indicator--0ddeac08-b895-4323-b96d-4dfbd4b73011", "indicator--00f024da-92ef-48dd-8f8b-34037d12d69c", "indicator--cbc72cc6-1e73-45ab-a287-38013717bc77", "indicator--640557c9-e6b0-4a8c-a786-596cc9bf3678", "indicator--402715c5-7d98-462f-8e5c-6baa1ca3a80b", "indicator--4fc8f83d-1f3c-4b78-809a-a6c852526308", "indicator--371b043d-4502-49a6-a4b9-3bfbd3313c81", "indicator--94d825d6-251c-4d98-b812-8bec86b1db44", "indicator--61400dae-5f17-4622-b95e-d22996b435d1", "indicator--a2292368-b8a5-4d4a-8973-a5e9f69fb1d8", "indicator--790a1979-da10-40db-84d8-816e0824628b", "indicator--336965bf-2165-4014-b9ca-3d097d5f9b89", "indicator--7ef085de-a40d-4f62-a313-a23c185354c2", "indicator--addb0958-4075-406c-95be-a34f67838892", "indicator--230f0784-7d07-488f-9110-5802f74a72bf", "indicator--d96287d0-6a3e-4c73-916d-1815f87a16c8", "indicator--3229bcf7-06cc-468d-9b62-0fbca5c10914", "indicator--51662d9c-f353-4a10-aabd-cdf8cb3e1b8a", "indicator--1d58adeb-026c-4dbd-b076-597987a96220", "indicator--fee343de-30f4-4073-875b-0703d67e8c61", "indicator--1d9387e6-bedb-4a6b-8297-9627c9dc4a32", "indicator--a9223615-2355-442e-9cd0-04fcd8c22c79", "indicator--44109239-cc8d-4a78-afb3-cf5195738c8b", "indicator--d75d3abc-cc87-4007-b2ca-175479fdcb08", "indicator--c2bbd120-1ff7-412c-afe5-44e1a187a2a0", "indicator--30dae5fc-e788-4e2c-9173-9dd2ecac7540", "indicator--2c1181c5-bbbd-4c68-89ce-4b6a7aaf1fa1", "indicator--e5dfff25-063e-409f-af41-3540027f76f0", "indicator--21910862-0d0d-40b2-97c0-0233b15968a1", "indicator--b9321e7f-3776-46d8-8dce-354db198af2b", "indicator--db8a7ef7-b6d5-4733-bbb2-1b1361247a07", "indicator--35c4c8e0-ca03-4326-bc37-78af6620e922", "indicator--129562fe-ab73-4d19-a598-59f00b76fca3", "indicator--707def81-19b0-4242-9e11-15341581c34f", "indicator--cb16d63c-c869-461a-b295-ebd5b8a31491", "indicator--5b421569-ffe0-4da8-aed2-c9c308a6c089", "indicator--9787fd84-706e-46e5-9fed-66830fb4b6ae", "indicator--ca38ce4b-ef5c-4539-bfbf-50d83233828d", "indicator--df51fae1-624c-4745-a9c5-a77c0b97587f", "indicator--49360069-4ff7-40c6-8968-04420b5640c9", "indicator--f3958335-e922-4348-a72f-2dfd7055f405", "indicator--89c4c08d-c9eb-4c1e-9ecb-99b12a3494a9", "indicator--0ff1440d-45c1-4316-8b77-cffd083b1066", "indicator--8631e418-151c-43b7-9cd4-dd3e39582cb9", "indicator--153bb94d-e45f-4bd7-9a94-42347b90cb1b", "indicator--f1d7a071-743a-4bb9-a23b-664977f7ebaf", "indicator--adfaccdc-0511-4404-9d57-6ac0067032eb", "indicator--5624aa1c-0384-47ce-a98b-eda335715594", "indicator--c4a31f6f-5f5b-4e3b-92e8-688903e16779", "indicator--82b02be0-c64f-4746-9712-bdbb9df7c314", "indicator--3f415345-09dc-40c9-827c-7e7bb8838ac1", "indicator--a6672a3b-8eb5-4f64-bc1f-9a1e64c0a3f1", "indicator--0eb40fe5-78b0-484a-a647-69690aac1e1e", "indicator--ebb672e1-437f-4648-9dcf-3201a2a3eab3", "indicator--ad2795e6-306d-44f4-86aa-ba49ee1df0dd", "indicator--98a12712-6597-449b-a8aa-4dd17950da23", "indicator--3cec62fd-7e77-41f7-95a6-2f223defa4f5", "indicator--1902c711-1f42-43be-97f5-832c8851cb08", "indicator--6fed5922-dd75-4bca-a665-49873a102f43", "indicator--122bd7c1-58e9-493d-b924-3a002f31603a", "indicator--5bb099c4-e588-4536-9710-f6546a0025e3", "indicator--c292d58a-64ad-4e16-ad31-b36869afbeba", "indicator--7a57a777-e67c-430c-b2af-22367b764e7f", "indicator--8699cd06-b420-4669-856e-87d9bf38c779", "indicator--74e13445-d209-4742-bf3e-907b3b7ee483", "indicator--cee4a71e-d4c7-4e83-9559-604bf4876390", "indicator--68236feb-b588-4590-ae1b-46883799a653", "indicator--27b16c53-5268-4eca-ba89-602eeeff9b4d", "indicator--e4d73623-4c48-48bd-9ccf-c5ea8006c29f", "indicator--9d1b5046-ab79-473b-af55-5d3571ff24c1", "indicator--27dce1ec-6ce7-40d6-9055-c71fd4b42353", "indicator--418d582c-8b6f-4413-a10b-24d291a796cb", "indicator--be356eec-9805-4782-885e-45f94ca960c3", "indicator--0e521371-0b9b-4309-9b65-4b81babefd20", "indicator--2faba260-d3db-4fb0-ac19-0f1b752959aa", "indicator--2e53a0bf-eec9-4841-9dcc-6fef1942d463", "indicator--a484581c-19cc-4d0b-8009-c9c5b9d54e92", "indicator--fe7d60b5-3c9b-4e9e-80a6-12a686e22e1a", "indicator--ddfc2e66-3ef4-4dbe-8439-cb7eea5fecb4", "indicator--d3841ec0-5d79-40c9-b2d4-b5f8e704c90b", "indicator--ce444d78-e41f-49b9-8dad-56ff6e24a2d0", "indicator--996718e7-2372-4268-990d-f3ec517a2f2e", "indicator--b6a80bdb-ef37-4277-825f-80b39fbbbd30", "indicator--a31000c5-18b4-49e5-9f32-d3e1b39daaf5", "indicator--86671908-e9c8-40a3-b50c-389ab37bbce0", "indicator--6330e008-9ad3-4b9c-9fd2-2ae056fc4906", "indicator--17a828cb-ae38-4cdb-9560-b58b679e0e36", "indicator--a4c43637-e120-4734-ae07-35afd6e1e36c", "indicator--7351500f-84b9-4732-b104-1c14970f731f", "indicator--74dbf966-9a1d-4528-b0c2-d5cb5758976a", "indicator--f036a6af-c955-46e8-a0ec-187ca2c60b16", "indicator--d8a8395b-6e49-4434-aec5-e5324a399ccc", "indicator--6ade2fcd-9626-4cb2-93f6-0f9211c857bb", "indicator--8a2e783d-fdb3-4e3c-a012-ac63f705f91a", "indicator--abc6696f-979d-4222-96fb-221a87527dc1", "indicator--c2c04e3a-2fba-4017-a0bd-ca2295bef818", "indicator--e00915d8-42dc-4346-9ab8-b7aa92415a79", "indicator--4a69fb10-18a3-4490-882b-7a974a0410b8", "indicator--bcc27298-3e03-42ac-afe8-b57080e31604", "indicator--355df8c4-736b-409b-be64-559daee08e98", "indicator--b1741e9a-e90b-40a8-befd-635196e1c74c", "indicator--1c789714-4532-4fe1-a5e9-25149ca60c3e", "indicator--65dc725e-c436-4a91-ab18-65ef6997e71e", "indicator--f17b2b7f-5946-424d-ad03-41f58db3c6d5", "indicator--fd8bf872-3433-4888-9b45-0a5c29fbf299", "indicator--6f1b3ec8-0b11-4495-bbb1-d9b0cf669bff", "indicator--5868f0ec-e9bc-464b-8a1a-0030cde8d87d", "indicator--0bc5898c-b187-4465-b4af-a7ff61cdac98", "indicator--e4b24814-46a4-4a54-ab8e-fb88acc94aab", "indicator--08e257d9-3f3b-462f-8978-9c0d988c2016", "indicator--526b6696-8d37-407d-914c-824dcfe95b0f", "indicator--ad4b0438-0e4e-48f0-8ba9-6d30f9b79295", "indicator--03fb9e5f-dc8a-4530-b7af-4a740c0b17d1", "indicator--43b10add-e91b-4aac-b47c-69d10d475abd", "indicator--3f636ec2-1597-4c9c-88ee-e916053ddd99", "indicator--856002a9-0dfc-43a7-b0b8-5ba81f7819ed", "indicator--239c41b9-7c4e-4178-89f3-cd430e5aa465", "indicator--4b262715-570e-457a-b1cb-a9ceb668d0ee", "indicator--f402b9fe-c604-4626-884c-b61089d0cb5f", "indicator--e6ac8ec9-55a5-4f18-9c55-a64bed614546", "indicator--e8bd8105-ad0c-4041-8537-80a258db3a0f", "indicator--621b49e6-13aa-4972-8ecf-57d3defc8f90", "indicator--d891aec1-87ea-4487-bb80-513af9dfc2f6", "indicator--246d96d3-4402-4996-a031-3a3cfcce6acb", "indicator--41f6c273-8812-4c47-9efe-3b64e7262cdc", "indicator--e981f496-27ce-42ae-8c78-1636618fb69f", "indicator--7942d15e-6b35-497b-b309-ee7782aa53eb", "indicator--bb9a7046-a1a9-4ab9-8fc3-a5c5ec0fb7d4", "indicator--57ba9ae3-c16d-45e5-8b90-43e5385430b3", "indicator--02f8e7e8-95c2-4a86-8dfd-1f688dde5156", "indicator--c20665a7-fb9f-41b2-a7c6-0f8afbe608e1", "indicator--4b19ae60-cdd5-4717-b47b-fa8eadc4f616", "indicator--22ec0278-4694-4df2-85b7-3048a7d72528", "indicator--7c8781ac-f577-4834-8f98-c8672a1e9346", "indicator--66d9bead-bf97-4f12-84ed-f0aa2ffef496", "indicator--f4614033-9381-46f3-9d34-e9d54b332ba5", "indicator--1a301495-29b0-45e3-bdec-6817a3454016", "indicator--c585855c-6be0-4825-9aaf-c287455f2098", "indicator--9afb9ccc-6331-48b4-83e1-6d1ef55d9f7e", "indicator--9940494d-6abd-48f5-bf54-40e93d1cd3ba", "indicator--134e8645-600b-4445-8002-54c5d6062018", "indicator--fb1a197a-3bdf-4064-aa0a-21e02c58674e", "indicator--6f0aca80-b743-42c1-802a-1d7102a0cee2", "indicator--5e7e0049-9188-40f9-ac0a-4c82b0a862fc", "indicator--129025d8-3efb-4a50-b945-d3fc813c329e", "indicator--67a074a6-ec9e-4769-b603-055d55e2e99a", "indicator--77d1037f-24ef-4c49-b8f7-b1a696d05727", "indicator--ef88eacd-c4f5-48e5-8b7d-7ebcbf092b1c", "indicator--1e682d2f-c8e5-4ba4-857b-6a97b38cba45", "indicator--5b38a4e8-c040-443f-9d59-dd0593f935c4", "indicator--64743bb6-48cc-49d6-9cd8-bbe4517e1e00", "indicator--200d9b2b-ada1-46d0-b549-6752a72fb9b9", "indicator--54e74549-444d-4dd8-9b93-fe34bf62b870", "indicator--5bf726d5-5cc2-44ce-99e7-a9225329469b", "indicator--807b62a2-adb8-48e8-82d1-c4cc8683c738", "indicator--9995a547-44cd-41aa-946a-5d417949db88", "indicator--fac597b3-3c10-4611-b93c-4fd152384e04", "indicator--0f8d7747-54c4-4fa6-b842-fe0e1344fecd", "indicator--01dc9993-ba43-4c4a-bd6b-e686ca6dafc4", "indicator--ce3d9284-1bc7-4127-9d2b-923082993b96", "indicator--5ada2de4-ebe8-42ac-9101-af96573557ec", "indicator--58fc7d34-3e8d-420b-8d81-1df6b2ac3618", "indicator--40fce2a0-13c2-4907-8c8a-859a920e35fc", "indicator--fa9777e4-a0cf-4f2e-9d25-4263d3561f88", "indicator--f8a85afd-4ebe-4231-9761-d160e8e7f1b2", "indicator--b5281157-00bd-4755-89d5-8f7007c19641", "indicator--537b8420-26d0-43b3-bcd5-7480aa87dd6b", "indicator--222dd149-6df4-4602-b705-340220be9584", "indicator--1f15237d-7264-4ebb-aba5-a7d57f2b84d3", "indicator--7b3e030a-0222-472c-a35f-2b358a7072c3", "indicator--1163d11f-dcda-48c1-8b4f-f5d7927de92b", "indicator--93a9ee74-1471-4f2c-b0a1-4b3f58e09ea4", "indicator--a35a6fb5-d640-43e0-8813-7f4fbf2b0750", "indicator--5336ea9e-85b0-4c9f-ba0c-76e1c451964d", "indicator--05b4c14b-d97c-48ce-a9d7-85af329e36ab", "indicator--4fa4c30c-edd1-4d94-9579-e538fe516db4", "indicator--cd3e14a4-454c-488c-9059-e6e9b03c677c", "indicator--27017d7e-4ef8-425c-bd86-91bc6c3e662c", "indicator--25012e86-9202-4f23-97a0-1d7265301200", "indicator--bbcd4f3c-083e-4ffa-bcf3-7a08a7b05fda", "indicator--5606f4f6-f773-4cd3-9efb-1fe1cd0f438b", "indicator--e8ab1632-48c7-45b3-8495-dab7437a279c", "indicator--f27dbec8-09f9-4c77-a730-aea2cb716cf0", "indicator--aeabef0c-6d61-44ba-b6aa-1735d00218d6", "indicator--1b87c74c-c76c-448d-be13-719263c337bf", "indicator--3991370f-2fec-4698-8f3c-ccec5f700b39", "indicator--26d435c9-1982-43f1-9071-401912185389", "indicator--e5e2e4f7-3551-46df-9a61-6f86228d15e9", "indicator--478a7bb6-475c-408d-880e-1a81d8a15328", "indicator--ca0cd751-87e4-45b9-9117-78a68cdbfb8c", "indicator--dcf302aa-17fe-49bc-9ad0-7aee672a9d5f", "indicator--0a86ca0a-2b10-409e-a3e0-c6b3236e7f1f", "indicator--196ad346-f12f-4466-87a5-f36fd2f3f509", "indicator--16dd2e4b-2144-40c3-a8a8-708b57aaa475", "indicator--268437bd-2dca-4fa4-a803-69bdf89240bb", "indicator--a1872610-c19b-4d81-a586-2b23c5eb3598", "indicator--fcc98bbc-1cb9-494c-be31-9535c861199c", "indicator--62b634f2-83b6-4b70-9fdd-57fcbd73149e", "indicator--de641ed4-482e-49c6-b521-0c704685bc81", "indicator--c3a77f72-0068-493b-9b37-cc8349def56c", "indicator--67bb90fe-35a2-4903-8730-6041b5644e31", "indicator--4c2dcccf-6d64-41b7-a0d0-90a2adbb2e93", "indicator--5da1a077-e15e-4482-a9f6-d1fd61d8874b", "indicator--048aa377-ab18-4ca5-91e0-b3fc8f671e98", "indicator--e59cbb1e-ef77-47ce-a042-625677aeec3e", "indicator--b7bd4c68-7cad-4f2d-a41e-fc8f51a48880", "indicator--8c062b30-b3c2-49f3-8620-4c117edcefb4", "indicator--bb9cc50a-62d6-4205-88c2-e46b34c641b4", "indicator--f8e0a6a8-63f9-4b2b-9bfe-b184402914b7", "indicator--e8a11c17-05cf-457d-8024-d811ceb2f013", "indicator--bcd073b1-0fb4-4864-b01f-70b8a93ec315", "indicator--ee5ef180-02e3-4da1-b9b5-a27fbfc95191", "indicator--15708be5-9282-4fdb-9383-2a5649918617", "indicator--190eb467-9fb2-4fae-80ca-15277b05066b", "indicator--c8f53434-a144-4b61-b549-5d3b85dd8da6", "indicator--2bdcaed5-8fa8-4459-88af-d032936ea92a", "indicator--5183ac55-7e6c-4d0c-9837-913313eb8a1b", "indicator--b8cce9f8-4869-425b-8496-260881ba91c6", "indicator--0b2d282c-b330-43f6-82c0-cd464333c499", "indicator--76e06e58-c56d-41b8-9bf2-8f4a9d4feaf0", "indicator--22922768-0152-4859-b2f7-a36b7759064d", "indicator--d746770f-4432-49db-9383-4c8ef481da06", "indicator--ee2571e3-1eb9-41cd-aba7-ec0cf439949e", "indicator--8209917a-119a-4b53-9132-2c2b9610a25c", "indicator--c2afc6e6-e00e-42ad-8024-71ce4092c682", "indicator--954962d3-8fa8-4137-b286-52fbdad88afd", "indicator--96038f33-6d7d-41ee-addd-8ef97b11b509", "indicator--fc6e9b02-2fd6-48de-90cd-835ec1c3cc3e", "indicator--9bcd64b1-7ec0-41e8-8cbb-f5d2945a4bef", "indicator--e77b1ffc-1838-4fc2-af8e-01e3fa2518e2", "indicator--f33e5227-c250-4025-b722-8038d460fcc4", "indicator--008aee8a-22af-4c7d-a7e5-110ecb12b9cc", "indicator--bd3b668a-c423-475e-8557-16e11eaa27e8", "indicator--a6269c16-03cd-4c49-a70b-7c5daa6b8c4f", "indicator--b2d30547-7498-4d1e-9480-5b4395ff976d", "indicator--8f3292c8-f823-43b1-9fd5-299d919af491", "indicator--eb18a3f7-3512-4fe7-ad4d-20a8fb5fc657", "indicator--a2a0bdbb-7fc3-41bd-9069-d2b63ebd4d75", "indicator--b6230e33-d907-414b-a861-15924b42016a", "indicator--7d6b8fc3-b523-4e43-9995-3fb17c3b5014", "indicator--39551a19-52f3-4dd3-9caa-139c41d64698", "indicator--455a6723-fa55-4156-9405-d00f02ff2e2e", "indicator--8feddf67-ef28-4d3a-b144-088c3f33b76b", "indicator--968d13c6-060a-4ecf-9adf-fb6ba6106102", "indicator--dccb3324-0200-4e5e-a33d-3406c6675772", "indicator--6244d785-bd24-47c3-87f4-79b1a1c27079", "indicator--37efb970-61ec-4ea8-9db3-cddef73914f5", "indicator--39a395e9-e09e-4db6-a732-8bcac037edc6", "indicator--471594b4-ecfa-45a0-be5a-340c53c65fe4", "indicator--7783a8c7-187e-4b0f-860c-38cc1530ad4c", "indicator--f75b4323-1a61-4c2d-901d-c26c6c73bba7", "indicator--98911b49-0ba9-48dc-9383-534c4ea9edf2", "indicator--d4bf3609-4d09-44bd-9714-ecc6c1c279d4", "indicator--17218df3-e406-4049-ac60-48f4c32690c8", "indicator--28d2ed22-6529-4df9-b782-4c8f7e6dbd31", "indicator--be960f00-c4c2-4ede-a0db-b027a1454947", "indicator--b0868413-c8b6-401b-9df1-df6913c51613", "indicator--fd17045d-0690-4178-90a5-9568094a8788", "indicator--dbcf3f47-408a-4485-9416-45fd900a95df", "indicator--8d58ca7b-2eed-499e-8b73-25b3c9912af8", "indicator--9f9555a6-d854-4b06-941e-0c90f2de73a1", "indicator--d37ca6bd-f41b-44cc-9417-093f1c62078e", "indicator--43245ae8-9efd-411a-8fb5-25b54362eb45", "indicator--f37371fe-2e2d-4278-a70d-75f52776f5d6", "indicator--10e49190-cbbb-48f6-8324-b16af2f3d622", "indicator--26ea6df2-29be-4872-bb71-9f5e74bdb526", "indicator--b233ca08-0ee3-4696-bbe8-988f590935e5", "indicator--0e4b37b9-bc0a-4715-925b-f03d9286be7a", "indicator--7eb595a5-42aa-40f7-be87-3cd36bd4ab17", "indicator--615768eb-6a0d-4502-94fc-49da51a7bcfb", "indicator--7385c202-42b3-4e35-ad06-40e310119ec6", "indicator--70dee1d9-6f17-4660-b132-ce80df42cc54", "indicator--53a205ea-368c-4893-a500-da7645604f2c", "indicator--1a62c22c-fa34-440b-8bd5-91c30a9fdfce", "indicator--5f6f1667-cfa3-4f86-a1ca-cd4760130905", "indicator--1a143159-b7a4-4f4f-a7a8-0204e615aecc", "indicator--e55bba14-2f37-409c-97ae-7435ad7756e2", "indicator--fb93b739-718e-4567-a139-d66d6c192d85", "indicator--869973c9-359b-49e2-a5af-14bebc2b7914", "indicator--ff391592-92ba-4ad5-9f87-9122a6cc9c6d", "indicator--f80b580c-75c0-462a-b55b-d9df747928df", "indicator--7defddd6-f4b1-46a7-9bf2-889d4e31abd4", "indicator--f0c52036-2bca-483b-b3e0-2418a6c0aba3", "indicator--337032b2-cf32-4f95-b512-f40beb133d1e", "indicator--7ffe1d3e-3aaf-4b73-8b38-5279c8f2ada1", "indicator--3ec7945d-c387-4dc2-a397-fead558bf39b", "indicator--16cc9480-e2a1-497a-94fd-e7dc686eb630", "indicator--8bafd867-5a37-4fd1-88b5-176e7537eb5c", "indicator--0704fbea-163f-4531-a105-d4f0793c7a5b", "indicator--cbb489a0-ce10-465b-b86d-979343014e11", "indicator--4d079546-4a22-430b-ad36-bb8374b1ed38", "indicator--e90ce91d-57e2-42f4-b5b1-c3cc9efe4f4b", "indicator--bf5cb8b6-d755-4525-a7e3-f18412557a7c", "indicator--63c1835c-6f02-4d85-b878-5b87685dd06e", "indicator--1aef0e29-8c3d-460e-9a85-04e5412de68a", "indicator--a1182e2b-af40-42bd-a27f-1203efe54715", "indicator--276b6289-47af-42c0-b284-a07a213cc965", "indicator--681ecb7a-5050-4024-ba98-940f30986e56", "indicator--152c97d1-63bb-4586-8066-c6510058ed16", "indicator--e3409566-40a1-4383-beba-c891c49ee42a", "indicator--cb8a2c49-260d-4638-8df9-5aa2b4d2af49", "indicator--8e0a6ee1-b2e1-4fe9-a384-f609d1d2c70f", "indicator--7ffa295d-2eb9-4a89-a97c-83a57a02c443", "indicator--714a7a24-fdb4-48bc-8e1a-917378d0552b", "indicator--7e8d58c0-61dd-4173-81cf-70fba4aeb54a", "indicator--2b8a9769-9643-4597-9a2e-1b4dcb6d003f", "indicator--a1cbd94b-2bb8-4ce6-af64-2918a4559e71", "indicator--cae90e52-1920-48ee-a143-7c60bf4f425d", "indicator--aa5ca02e-2f1b-49dc-8fc7-f445e93d6927", "indicator--378c901f-5f1c-4b5a-bceb-54b1499bcc48", "indicator--08a34e4f-1ae9-4f7c-9c37-210f36ab3437", "indicator--7bc37fad-2379-422a-9452-671a1b87b041", "indicator--71a90177-e995-46b7-99df-4aeebd3ce561", "indicator--39283b71-3ead-4a4e-b10e-50071b958a93", "indicator--cdbdbfda-de6b-458b-9922-68067cd15217", "indicator--c563b854-78e3-462c-9ae5-fd23c633a594", "indicator--950dc678-6997-4b5b-950a-d68bf65dc4af", "indicator--5ae53606-0552-423b-abb2-a747910461f8", "indicator--9aff1537-5f74-46db-9468-d06c5eed2d43", "indicator--8e974b11-d8d0-4b9a-975e-42efa1b3a714", "indicator--cedc28fd-5094-4a6d-ba2d-1e1f6fef338b", "indicator--502d1a98-8532-4369-ada4-25388430172a", "indicator--67631e92-2c1b-4704-800e-79166d1022c4", "indicator--a5976b64-a828-4a2d-831b-0b89892d7d6e", "indicator--ceef2203-f2b9-4cae-874c-f43b9bed6108", "indicator--50305ff5-af5b-47d3-9961-3f2d22a7052d", "indicator--a6bfa26f-aad4-42a9-8b65-fb8a4f35fa3e", "indicator--aad1af25-71cd-4141-9dbd-289e89de4c9f", "indicator--1c29ee3f-6759-476c-8e27-3397e6bf751e", "indicator--bd8f25aa-fae8-4971-8e6c-b1ea45a27b7b", "indicator--5ae46723-3203-45ab-a639-b6f641615c0d", "indicator--27b2802e-4600-4361-841a-d135628c537e", "indicator--86af5a19-542d-467d-b5e5-8032c51f9dbd", "indicator--925e8720-ceaa-4aa0-a1b7-2fe0fb7baf66", "indicator--de6581c1-bed0-47b0-a542-8772c5041521", "indicator--8d3e95b3-2786-4f50-a8c5-ad0e7f8485f5", "indicator--0c777a61-9762-4a2b-8681-d5467f3428f0", "indicator--90efdef3-71b5-42e3-b249-42e21e5dbab0", "indicator--260fb4ff-ae57-4038-beeb-ad9d483ad5d2", "indicator--a32e6ab4-cf70-4502-8875-2f22671b6331", "indicator--052c0516-aa75-4d46-baf7-233359fd090c", "indicator--106d3057-2dda-481c-845b-45e2d67f035b", "indicator--2a0a629b-ce68-4298-90b3-dda6d69b9ab2", "indicator--f8defbaa-4fb3-4411-81c5-3a43d555690f", "indicator--5e9cca60-fd1b-4c8a-9bf3-9f255d60b437", "indicator--6db5fdab-481f-4c5d-b0f2-efea780b74c2", "indicator--b18203f7-8ddd-4aea-ae53-bb2f0c380c3a", "indicator--5b411f9f-4cb9-4d2f-bd29-2c02c0ee9dea", "indicator--a23747d3-5bf0-4934-956c-ad6de439e23d", "indicator--412720f3-7aef-4ef4-b440-ba3a62ffe472", "indicator--c960058f-1fc7-4c33-843d-190a62f8f28e", "indicator--80e2bfdd-1ea0-474c-ac15-ed8a1820ecd3", "indicator--75d41b42-5005-4451-9001-d158fa45c9a9", "indicator--6aeaaf39-1856-4ec1-be9a-9cb6cc8250b0", "indicator--a3317d60-0df5-435f-8b08-960a930335af", "indicator--47a8b915-b264-438e-a2df-7d52b3d95c88", "indicator--f1b1c8ad-fe19-47df-b2cc-c7f8a4183235", "indicator--3dfd5bd6-d2a2-46f4-9bf7-2d3db5dd99e8", "indicator--f05b1679-59c0-4d57-840a-03d4fbe9cfa0", "indicator--8b1896a0-5f4a-4c5c-9f67-eeaee1a0d93c", "indicator--fbee765f-3a9a-4246-a4dc-a394415a9f96", "indicator--12fd12b8-66ee-4ff8-bfcd-3ab4d67cbd5f", "indicator--81ba3bc9-913d-4484-bfca-78816d4be429", "indicator--cdf18137-6088-4ec5-a310-324ffb6add7e", "indicator--2d614ce3-3db4-46fa-8095-d6224bb4e441", "indicator--936fcb27-28c9-4074-bc0b-4e9d1184233d", "indicator--14f40bad-48b8-40f3-92c0-c029719e94dd", "indicator--93016490-0e5f-4d61-844a-710bd8566129", "indicator--da58a8f0-dbcb-41f8-8f70-a8c13c782c51", "indicator--09874975-0a6e-41a7-982a-8cffb20cf59e", "indicator--cfbb4360-c9a4-4393-8c19-2728cf3dc3fd", "indicator--9992dae7-2dee-4c9c-8319-78e199bde8a9", "indicator--28fc1e6f-5f78-40bc-8137-1308c1558d08", "indicator--aa06574a-47ed-4c44-93c9-3599393ca779", "indicator--f5659bc9-47d4-4366-84be-93157bcf4ca4", "indicator--9fe460c1-e69b-4b59-aa72-01f361cc55c1", "indicator--04e971e9-4c86-4a64-8d33-ae9d12ea549a", "indicator--b9133fc0-c9b9-4b29-9c86-12f2ed1bd6c2", "indicator--ccce082b-dc0e-4b34-8731-daec1b764db1", "indicator--1c213dc2-131a-4136-bdab-7f7dd96097d5", "indicator--a53241cd-7ead-4cfa-ba2e-0e9bfa7771b7", "indicator--8e85ca1d-1325-44f9-8d93-28a13a71469c", "indicator--a0102940-7d31-43a4-92ff-ecd978d0d333", "indicator--5a239ca0-f47a-4d2a-b44c-ba5243ccd3eb", "indicator--ed1f3e79-380c-4c63-8ea8-932fb47a0591", "indicator--5c1bc726-865a-4d8e-88e4-a0f52f5bc875", "indicator--1de72ce1-2c0a-4b5d-8f2d-cf4b58909820", "indicator--4fdb868a-aaf5-4895-9bd0-436c6a496b09", "indicator--ae021be4-855d-4030-a4e7-bbca3f3099f8", "indicator--977aae94-2089-4bf7-9539-a02ea16fa4ef", "indicator--fbe6c780-1c0d-4164-b997-cb23ce17a451", "indicator--22b2c03e-5f44-4dbe-b909-1b746b442666", "indicator--65bcbe8c-bc63-4de0-bae6-a48ea9b9b03c", "indicator--08b8f1e1-a09c-4f31-8ca5-af63c78709dc", "indicator--b59c5cc3-288b-4ddc-a40b-fd93ef7b86dc", "indicator--15ba9f21-2a82-434a-b9a2-6d5329d68f7c", "indicator--ea3d0f26-1297-459e-869c-9e320703b5e3", "indicator--7b78f3aa-0899-42ee-9385-cb25550cb6cb", "indicator--2ac57485-09d7-4f43-83e2-dd7d60e350ee", "indicator--bb1d9c31-99ee-427f-ac60-471be28dea6a", "indicator--f16efb84-f82d-4536-999d-a2cbe47ebc93", "indicator--bda0c59b-ec5f-4e1c-93a7-1a18a21296c8", "indicator--9fc0ee86-8f8d-40f7-ab93-5df796f7f139", "indicator--4ab59bc9-a8a9-4daa-85c0-4b1eb81e9c9b", "indicator--a68c72f0-83e6-4707-a464-3232f0b2645e", "indicator--a46bbd18-8eed-431c-8133-d11ae0267044", "indicator--11f39a21-3533-4355-8388-9b2996b7d42f", "indicator--c52d8ba7-5af5-400e-bebe-dc6f7d5a37ae", "indicator--85902de6-b667-4bd0-83bf-f15be0d782b2", "indicator--cf8a0c5f-b55d-4263-a874-dd796bc8e727", "indicator--3ee449b1-347f-425b-8b9d-67c0e6c35a49", "indicator--cff743d3-5852-4321-aabb-2d792cbd589b", "indicator--88879712-76e8-4e6f-82d5-e719e2738d58", "indicator--95d4a38b-7313-40f4-9561-f2736d831664", "indicator--25eee2ff-92da-4a2e-8402-28f1567a9b04", "indicator--70f553c2-3834-4ef7-871d-e15794e977d6", "indicator--4413c48b-3e28-47a9-ad8c-61b7efb3df5d", "indicator--c04b0f46-1d6f-4475-9a09-afcdaac6ccea", "indicator--ca569ca8-31ee-4c6b-804c-e218f536e168", "indicator--da717735-bd9d-4f0f-a0b5-92b35bb92b1f", "indicator--644f44b9-0bce-4fa1-8ea3-ffe3a70467a8", "indicator--219256ee-4d59-43c1-85af-e77c34ce5bb9", "indicator--0a9388f7-9444-4732-b8ca-a43d66a6ee4f", "indicator--f0da5b35-df0f-4edc-a0b0-3ae9561414c9", "indicator--40dcfd1f-cfe7-48a4-a6b9-1112ab85baca", "indicator--81f78fea-5369-453b-8dcd-0c097bbacb0b", "indicator--bee02178-03ab-4017-8668-7c8d169775f6", "indicator--b51bd4b5-dc4d-4bbe-a262-eda28c0846d8", "indicator--ca602229-4978-4da9-a8e7-87e05417f44e", "indicator--4e1c552f-7169-4536-8166-ae2918d05511", "indicator--673bc002-76b7-4012-8ed2-440aef408a6f", "indicator--ddc7da2e-bc20-42ff-9427-a568ce76dfd6", "indicator--1285ca4c-a8fd-4e3f-84b1-3e103a8fa09b", "indicator--4fe0a957-779e-4ebf-90c2-4f01689ddfc5", "indicator--463fb5d6-e8d4-47e7-84d6-a2325144d003", "indicator--ce8bcba7-aa2c-487d-92d9-abaa7597a5bd", "indicator--b0d29e09-2815-4c1a-a60a-228bb4061826", "indicator--37616bac-c5a5-4a95-abe7-948d35efcf04", "indicator--cae79e9c-45f9-41f4-90c6-f8e7208cb004", "indicator--a5225fd4-f531-4317-94ef-67f1753ce540", "indicator--1f3e5c41-6cfe-48ef-a067-d5a904693d00", "indicator--0eb8abf6-3a12-476b-ad7e-b7ce703086dd", "indicator--efb58f15-6ee0-462f-a174-8746b2711e00", "indicator--b710e66b-9ded-4ffe-8939-57c73ccf484d", "indicator--350ef393-0563-4fb8-bafc-d7adc5fd5fa7", "indicator--4391be36-53ce-41ea-a606-709de068ff2e", "indicator--44ecc217-116a-41e8-9c90-48c62d5c878f", "indicator--d7602f5c-0b0a-4253-b474-cd6759dbe37d", "indicator--fb3d8c18-f8be-46f9-b11b-bf65c32eb4b3", "indicator--e12fde62-f165-4a0c-b8e4-24c4eaa5a7e9", "indicator--0505a534-5e0a-4967-920e-3019d5613873", "indicator--798a2f06-6769-422e-a0a4-f6b07b84a954", "indicator--c65ee373-6b0a-4b06-98d8-e5357d30abad", "indicator--53b66e38-265c-45c6-a6e4-8d2c98fa42ef", "indicator--0e66a810-3196-4d4c-a0e2-22389e4402c0", "indicator--a1dc708e-9669-4b8a-97e3-a65a13d0db1e", "indicator--5a852c7a-0a1a-45c0-a13d-f9c906751d82", "indicator--e9effd74-e3a8-40f8-ae6a-d20b6f1a1a39", "indicator--294b59a1-e111-44a8-894c-e12959175532", "indicator--2a252e68-8059-44bd-a360-05c81d919e15", "indicator--af85f2da-25dc-425e-b15b-815e76c91873", "indicator--1a12785a-2f91-4793-a77a-918408eabacd", "indicator--32a777ed-64cd-4cd3-81cc-a324bc6ed2af", "indicator--a20a0a84-a982-4a31-b472-81a72641b145", "indicator--73a20c3d-141b-4daa-93a2-e80552fd2c1b", "indicator--ab92d363-0fb9-42b3-ac45-d6a371634c4f", "indicator--ca80066b-b4b9-43c9-8d16-743b31253b26", "indicator--1b4a1045-1947-4919-87a7-b6a7dd7f9b8e", "indicator--9aa4a660-b91c-4401-8516-7ffd70deba7f", "indicator--984dd005-415b-4dcd-bed3-4ac752742bb4", "indicator--0fb34368-8b17-45fc-b89d-6a3b7d10ad6c", "indicator--67b0eb2e-3941-4a9e-8927-c8bccd5d2792", "indicator--98083fe1-8353-444b-88b7-e872197f277f", "indicator--d2f7465c-9b09-423f-bfdb-451c13fee15d", "indicator--f849c0f7-4b86-4e4b-8014-cfc306b53756", "indicator--1573491f-2c29-4c43-811c-8df0020fd7c8", "indicator--9dd92ccb-c708-4248-81ce-c5fc65fda107", "indicator--40789854-9113-44b5-aeb8-61f470da55d5", "indicator--b5b1705b-afbd-4e9a-801b-1c86ab526968", "indicator--30de8f36-cf46-401e-ad6a-7323ca722ea2", "indicator--e8806a55-eff2-488a-be43-8b44fac11f53", "indicator--33f42f27-b762-49cb-9c0f-9931072b4f3e", "indicator--e11657d5-c0e0-4726-b797-d83222c6cd5c", "indicator--5f5d43f1-40a7-4c80-83c3-fa4c461c78d4", "indicator--5359f355-afc0-4e78-996b-b4df28cfcbbd", "indicator--0ed971ef-4bbe-4afb-811b-f0bda3d45eb8", "indicator--481a8ee5-f13f-4751-bdef-f9ab9a23460e", "indicator--1844b4e6-7ccc-443a-9e02-bc3858a5cb45", "indicator--d3c6a0f2-85c8-4382-bbdb-d82ea81cfd1f", "indicator--42062ebe-853e-40c1-bf39-3e31a4d7d531", "indicator--fbb8d6ec-2abb-4e25-ab4f-ffcc5ed9ac6c", "indicator--aa9a1757-c1ec-4e09-930c-e450714855cf", "indicator--15e81594-601f-4bee-a0ff-532ec5b7f660", "indicator--0d1f358b-fb25-4d9c-aeed-9b3ac395e578", "indicator--1ec33b40-8c57-4b96-a005-b07da567e1ca", "indicator--7bc4b440-96e5-4482-8f0f-1a515e01f37c", "indicator--160bb4ce-7d29-4e60-b2a7-06dee90b8831", "indicator--b7c8b9b0-872f-4001-96ad-70451742a984", "indicator--ec06ea64-2623-42e2-8cc6-281ff86081ec", "indicator--8aa770ec-6622-409f-b6ca-79af15759b39", "indicator--ba37eef1-7809-4551-abad-391391f8b76c", "indicator--7c561064-5f56-40f1-b55b-1ce4dd48f464", "indicator--65e5877a-0f82-4bb1-aee1-859b968d281e", "indicator--d2e66466-0a67-454c-bc73-533a5495a878", "indicator--4ac7cfb9-42fe-46aa-b5eb-f118907ebec3", "indicator--fd5a4dcb-e143-4578-9425-38c30395d677", "indicator--b33618fd-2b34-40ac-9143-132fce6776ea", "indicator--a9d59150-efa2-49db-b13a-0628907c49f8", "indicator--11621317-2951-47b1-88fd-91e7ae9269a7", "indicator--83c8e0a7-de34-47ae-8852-d6b15779630b", "indicator--594c3f6e-ab4c-4299-86a8-b8f6a0506242", "indicator--e6de93c8-d706-4ea6-b1d5-c52615974d0a", "indicator--035099de-5370-40b1-98a6-a5f6c6347654", "indicator--6687fdf4-2884-448c-875d-af8c6cc0cc88", "indicator--6de61547-1030-4c5f-baae-da0d8a17597b", "indicator--75003949-b8f9-4998-957e-41e194b502a5", "indicator--84a66f78-133d-4a09-961d-ed23a9792b45", "indicator--58878d7e-8f9c-4205-ada4-30fb30dcf875", "indicator--941f49b4-f56c-44d7-b5cc-138374bccffe", "indicator--1f620edb-0c55-4e67-a270-72135db82ef4", "indicator--356373be-7ab6-4a93-bbe1-43c97ff50152", "indicator--bc9854a8-07cb-4486-abd5-e976761054da", "indicator--4fa60fd2-291b-49fc-bd54-3a8d75aab4da", "indicator--367e7014-014b-435b-b04d-712053637245", "indicator--4091ec3f-bddb-49b9-ae88-23857b8d0f20", "indicator--b3afe9f3-f38f-4c40-927a-891a4574fd52", "indicator--da826f9e-671f-40ed-a5b9-60022a51651d", "indicator--9c18a842-ff4f-4502-aaa7-21e98761449f", "indicator--2ad29118-98b2-401e-817b-328cf696596b", "indicator--220dffc5-e9a0-495a-8787-77dece814957", "indicator--8538fe09-b524-4e6a-94d3-c00b174adf86", "indicator--d15428c5-3993-42ce-aef4-3aee888bc076", "indicator--b8577e71-7f1d-4e66-80db-23e44c5af807", "indicator--a3601828-0e0f-4a38-8c88-2e2038366810", "indicator--f81bf9e7-28f1-4eec-b484-86a9f042f01c", "indicator--8155bbb5-4de5-42ea-a139-700e96b78b20", "indicator--a8bd071a-9281-4528-82dc-976b940af4c7", "indicator--6f46f7c9-67ba-4e3e-a6ca-73759e6139ea", "indicator--3c568f4f-9622-4d19-a59a-b8a811df5529", "indicator--ade6e84d-2c10-4619-a314-3ad78aa04d73", "indicator--a1f50092-ad38-47f3-bdbf-748e7cbd54ed", "indicator--4059d4d1-2115-4088-968e-492ad860c7b0", "indicator--f64ea689-44aa-4e46-82a8-2bb532dfc739", "indicator--cf1dc417-c196-478d-8a6e-0c9a0bc17dbd", "indicator--da370e9f-1b0b-403c-8458-226152ad3e9a", "indicator--68d437ad-8179-41b3-a0f2-0b0071ca4686", "indicator--18c8697f-3ac6-4fef-a451-b33f83b8026c", "indicator--eabb68bf-4593-4202-a651-1bc76bc7ad67", "indicator--fc5daf96-9157-499c-9d60-9a31cadf2ae9", "indicator--1f7dcd2b-4267-4ac4-b8dd-d6d835f2ec2f", "indicator--e1f02614-5443-4223-935c-cd0458d115e2", "indicator--e789bed4-409f-4a54-9240-2b26b42c0307", "indicator--1d3aa047-be0e-4bf5-8099-3d82fb631457", "indicator--ae0ba7b9-c703-4843-a379-53a02d3d0023", "indicator--80b21d50-0f08-4f82-a1f4-5082b3e06c13", "indicator--a50fb171-4fea-44c0-b2d2-9b660d9e7dbe", "indicator--e0cb9c82-8ee0-4d40-8191-62808a849f41", "indicator--33c32003-dbe3-4ddc-9cc8-e80d9bff4ec7", "indicator--d99c20dd-81ec-4c43-8a44-5f6da1540d27", "indicator--92388480-0a26-4798-ba05-0d448316c965", "indicator--754d9a09-aa08-4425-bc0d-53ba268fe13f", "indicator--98373cab-c3c8-4e21-9380-33bb9fc29618", "indicator--f20abf84-6b01-4b78-bfe2-bb91afa5dc5c", "indicator--cf5b0690-4ff6-4731-86be-c48fc8814e10", "indicator--f6632c1f-68fe-4dba-81b9-b9fdbc81ef20", "indicator--da394237-7326-4692-b80b-3e6cced90a6b", "indicator--653ecdc5-bf7f-44c6-8f52-94912959f207", "indicator--5253b92e-fa9b-4345-ba8d-ba1d1152e24c", "indicator--7afc8a50-8cdb-499e-8a8a-5da66d4a3412", "indicator--03720346-c77c-4b38-8280-590d537b76d3", "indicator--efab4198-c8d3-4716-8b81-6b04ce527008", "indicator--7d758fac-2e04-4f85-aac9-3f0ca6196945", "indicator--62437340-f991-407a-a596-34700cf54a35", "indicator--3e6d9076-10fa-4839-81cc-253d3e22528f", "indicator--2479e5db-e795-4cd8-bc86-960fcbcb9c1d", "indicator--b0a16350-bf3a-4b8e-984b-5b6e149442ec", "indicator--d5360552-bf9b-4cd9-8e81-ce7065859327", "indicator--0e6dde44-9ab0-417b-be3c-b9e08a12cfb6", "indicator--0be66ff5-5522-4008-b31b-1e4fa3e65d3d", "indicator--e4ec7607-576e-4799-9844-df4253586e73", "indicator--5af32c57-38af-4fb8-b66a-b44595a00aaa", "indicator--8d71b234-77d8-487f-8b68-1bf6be3e3295", "indicator--915493d1-33f9-4114-9549-ad4e3c38617e", "indicator--2e0b8702-b57d-4425-aee9-dbc31c550f07", "indicator--01bb18c6-d4c4-4528-8ce3-f46ef08182eb", "indicator--a9445dae-0469-40a1-a7fd-666a691ffe83", "indicator--9a4e66e6-2542-47af-a437-d411c7c76b73", "indicator--5e41503f-fcf1-4c7d-920c-1cea9e5f5475", "indicator--36b6a6d1-977d-4393-88c6-0b2c71734bfe", "indicator--f80866ee-9b4e-4310-93fb-a8f0e22253ac", "indicator--a3ea6088-6579-44a3-a6e5-09ad69aeb887", "indicator--85f887fc-94a6-4ee8-b9ab-361929869235", "indicator--f8d70c0e-940c-412f-a404-2d9846eba61b", "indicator--5840b016-1cf1-4a23-8bbe-fabd51253f1a", "indicator--c3bcb9f1-c31f-4c1b-852b-c6c7a1f57055", "indicator--a95990b4-1850-4233-a237-a22438854dfb", "indicator--9f5f94c4-5757-46b9-8db7-8f0ec60205ea", "indicator--56148601-1eb0-41d6-b1f7-e10adea0e947", "indicator--673c4a76-18e4-47ec-8c6b-407e51485e87", "indicator--1fac5c0c-3b43-4807-9449-39c7ef6adb4d", "indicator--712bae5b-fa09-41ac-b524-64f9f6454229", "indicator--d5020819-786b-4af0-abae-71f3972dbcf8", "indicator--e393b980-b7c9-4e3a-ae66-b5c66195e30d", "indicator--9eb3eb42-8905-4817-a843-3b93086359fe", "indicator--95f1aa0f-8bef-49c9-a23f-ddc2cbc2bd49", "indicator--7941ef90-f311-4d01-b260-3e666e78fbc2", "indicator--b655e13b-cae1-4b14-8c0a-b8268e4b2a06", "indicator--9ab34061-256d-4b71-af98-a27d776a7cee", "indicator--fc0d7771-e6c5-45e2-abc5-0e10b556b1a2", "indicator--b2d13c01-6b73-427b-b9dd-6029d6309171", "indicator--4ebf2849-b896-413d-8412-41bdea734ef8", "indicator--976bcd95-93a3-4cd7-b05f-27c26949319a", "indicator--18cb454b-1b54-4f0e-8593-798a3b1d5a5c", "indicator--de5ac317-93d9-45a7-a849-8dc43e9daba4", "indicator--41877250-d4b0-4438-ba76-8ecb8a00e106", "indicator--857795b2-70da-4b27-ad5b-0f88c98bd922", "indicator--6a890dfe-f561-4e27-95e5-272a007d71ce", "indicator--caa320c0-1e13-4762-bf02-76f26e12978e", "indicator--e9362f72-bc1a-458d-b786-35a37c14ac74", "indicator--f9ed4bc2-5745-44c8-84a3-e3c84dc38759", "indicator--ff5e86c3-2c6a-4adf-9afa-77a28f2eb6fd", "indicator--8b8289e8-6fb8-4586-afe0-b09f5d1cd810", "indicator--db6cefd8-53b1-4ee0-8778-25f0a6c22d77", "indicator--d9a9ccdd-aea4-4028-be7b-55bc9d434178", "indicator--370d73b3-5893-4315-94a7-88222909befb", "indicator--c36300ae-c750-4941-a26f-a8ead4b11151", "indicator--d496ced1-280b-4f73-9a40-83a1ff0319a1", "indicator--495777e7-4cfc-4165-b67d-a5a418f76a8a", "indicator--da583a85-7546-49a7-95ec-3b0aec02ef08", "indicator--24fa16c0-a017-4742-acc5-d20b2ade6771", "indicator--2326cf34-c437-4a36-b990-84d836a27931", "indicator--364734b4-fafb-4a77-ba5e-3c9f05ae61a1", "indicator--84c56d08-8b58-44b3-9ee8-6fcd81fb0d3a", "indicator--4532de85-7569-4230-abe7-5c8950f754c8", "indicator--8afb13cd-df9e-4717-8dcb-8154d009e5f5", "indicator--e1658d0b-f511-4327-b984-ad3cd372d0b5", "indicator--ebae3783-ebca-48ba-a1bc-4a19413535f1", "indicator--f4b32fc5-423b-4af8-ac3e-7b2e232de296", "indicator--9503f5fc-5e7e-4032-855f-36440c843cf2", "indicator--5df1e1c4-5f88-4c7f-9b09-232ab8196d6b", "indicator--a3cb9bfb-513b-4fd7-adf6-a38a6598a0fd", "indicator--e7945ae3-25f9-4356-926d-eb5b20f8bf41", "indicator--a4042e3d-6e05-44c5-a1a9-8c4a61fbd5e7", "indicator--1b024573-927a-44e8-8f9a-05185cc67988", "indicator--f5d6faf8-02fb-441d-92b3-f5998f1f6fea", "indicator--18803301-dd8b-4b1b-87c4-7813c04e4929", "indicator--5034d3b8-67b3-46fc-b34c-ce8748b8c66f", "indicator--98abcb19-520a-4a85-8c3f-ec62ced9c282", "indicator--e68028bf-af26-4bf8-8f22-5d60ed3d018d", "indicator--77668f34-866b-47ba-a584-e8d5b3645e6e", "indicator--36397fd7-b169-4c0d-8e8d-8ce7602ff340", "indicator--42cb7562-9c18-4fe8-93c5-5765f09318b3", "indicator--48f38ab1-8cb4-4afb-bef5-b12234230b19", "indicator--20268ef6-4a14-4d69-981c-7a9f15664a42", "indicator--4cffcfc8-8387-4b0f-bcd9-c3e1a61327a6", "indicator--441b1208-1e6a-4be4-8c6e-590cc2651e86", "indicator--a49971d2-f374-42c4-ba74-a5c14136e88d", "indicator--9c4eeb9f-5b18-4f92-9636-a4ae867f6f51", "indicator--5e4d1607-798d-4e6c-9fd8-e335932114ce", "indicator--475a3686-c0a0-4eff-83ee-414373067c32", "indicator--df288591-7e64-41f6-9033-972ebec908fd", "indicator--049f2015-d054-47e9-8174-9894ce60d206", "indicator--37bfc8e3-10b5-4601-8387-770f37f2e221", "indicator--0a418c46-ebb9-49d3-bfb4-98e165e76f77", "indicator--51de6c50-ce5d-4215-b68d-7b398ca46a9f", "indicator--8cdab69f-97b1-4c0b-85ad-ec4cd0137cf8", "indicator--e6ee141e-1127-4c55-8963-008670829c92", "indicator--8bcc95c9-e10a-4cab-93ca-53cc12216dab", "indicator--c944938a-c8f0-4d30-bc97-cfc870745c11", "indicator--9b74dabf-5419-4de2-94f0-6b5347a160c4", "indicator--84a5991c-831c-4325-8196-de89d89650a3", "indicator--f076b500-6765-4115-baf6-da8c9318b57b", "indicator--3b82565e-5ddf-4f34-b5e7-8fc31d229ba3", "indicator--be7540c6-271d-4d0e-916b-b98c808d3529", "indicator--8d64eb19-7f0d-4028-8cd4-84206157b764", "indicator--4aa32a23-4e6d-44fe-95ad-8a29089bf180", "indicator--cf034b17-3767-495d-a7ce-9c0399de267a", "indicator--4a950167-f06b-4fcb-b0f4-8acbabed391b", "indicator--8653a676-89e0-4be6-88c3-452b362ea561", "indicator--325af8b4-fda7-4519-b708-998ce660f145", "indicator--8bbafb43-b044-4f9d-b610-b6488e97c3c6", "indicator--cec8f130-8ed7-4398-a650-3766d69c0a51", "indicator--83fee353-79c5-45b5-a9ed-96cf3e1bf739", "indicator--e8c85c56-21d8-4d34-8ea9-5f8c28cf9ecc", "indicator--ff24f37b-435f-40d6-8bd7-187c85f89d4d", "indicator--aa57fdfd-cc9a-4853-9539-005f2e03e7ae", "indicator--77583b66-bbfc-4068-bcf3-04dc1a7a0b7e", "indicator--69d4306d-90ff-4c3f-9663-110a2746dac3", "indicator--3d99fc8e-7dec-42bb-b63e-d71fd3649357", "indicator--086eb853-1ce7-406e-b15a-975e525e46b1", "indicator--6ed717d3-f569-4aaf-8a29-f8db5be330e4", "indicator--aea1ab88-3571-46c1-b677-0ba54fbda487", "indicator--5240ed58-81c7-4641-b3a9-e258399ef83b", "indicator--a011e3f2-5c2e-4da4-8910-77983ab651c9", "indicator--adfca9fa-6895-4134-84e2-4c98682d574b", "indicator--b265241a-c05b-4969-bd79-48bb070bc073", "indicator--332d3f1b-c540-498c-8e06-4edca4f75ab6", "indicator--ecdbe70c-19e8-4f5c-aa96-a43040f6f3b5", "indicator--d1b23cc5-9a39-4350-9618-ea52a3816423", "indicator--6b402ecd-6c3c-4aa2-8954-7f8044bd69d2", "indicator--900c322b-569f-487c-9026-dfbfc9ff1b97", "indicator--c6637de7-76ec-4350-9467-448cfe518497", "indicator--7af30105-8101-4281-a4e4-4e7025b08f8a", "indicator--37d8348c-560c-4801-9b3f-9b352f6151c9", "indicator--49e815ca-a232-46f9-b67d-c7ea7085386e", "indicator--f0e63a13-9bf7-4aa1-8389-096fe59ac4ec", "indicator--396b94d2-c4d7-4989-9778-eb878d3ab3a9", "indicator--de3edb39-bdda-4e10-9ff3-fa2761d647af", "indicator--4571c991-15e1-4be6-ada4-86ebb243425b", "indicator--14077c9c-b2e3-4f28-b7fd-a67c5b898db0", "indicator--af00ae08-e86d-4310-bb4c-24a148e68b97", "indicator--8cd0389e-3ce0-4884-b985-9d8e1c15ab41", "indicator--346d1ef5-0918-4050-af1c-0ca9cd37f036", "indicator--7983d567-3944-401b-87b0-edaaab284204", "indicator--6dbfa2b2-b903-4898-9ba9-2f52721253fd", "indicator--050e7d65-e28f-4761-85ad-c3565a34fcd7", "indicator--d78ea1f5-302d-4f49-a46b-3b493d10e620", "indicator--1ad73a07-654d-4c9e-a0ed-ba7b07ee23c4", "indicator--37e0078c-52db-4c11-8f03-2726e18da98c", "indicator--3e8a1ef5-12d5-49c1-8ead-999eaf10f660", "indicator--27bb9be0-f358-4c11-94f2-c4a9e9026c57", "indicator--45c10936-8eeb-4be3-8c39-6b62680bb729", "indicator--19558dea-4c30-404c-867d-045333da58ee", "indicator--909e151d-f5ef-456f-9cd7-d8b9f091d607", "indicator--9e662294-f995-49d8-b140-79c5ab764dc2", "indicator--7f528297-7849-43cc-aeaf-c287e9e5d5bb", "indicator--02a8be80-0ab5-4ea7-b1e4-c350d0a12f0e", "indicator--0704ef47-74b1-46ad-9214-7ecde66ed62e", "indicator--4e8a5d97-0b09-4fa4-90cc-74348d3a6a06", "indicator--27554ffd-10af-4cf1-aec0-75774702f626", "indicator--82395b1d-a17f-408a-ba8d-28b5316ec0c0", "indicator--fdd20a61-265b-4ac8-8791-133b671a53de", "indicator--cd9a0ad9-27d5-4da9-9ae2-37e21028248b", "indicator--c22b6510-7c58-45d5-8ee0-8b66adf7f296", "indicator--23d683fd-7082-410b-881b-78f6de117129", "indicator--5c33e7be-f83e-4834-88d2-fb86e7a86d4c", "indicator--e128418b-3e96-4c36-9f99-988ae48e8765", "indicator--74e5c960-9cfd-4339-8cb8-c5b99be1a004", "indicator--d1a23263-b67f-443e-b6d3-2de15d715a1e", "indicator--4816212d-cfa9-4960-80fd-95d0f2fa00c4", "indicator--51f34eba-425a-4d4e-b6db-b9edb7df0a9b", "indicator--c2e90d59-1eeb-474a-b383-121614fe8bf5", "indicator--6ceb0b1f-1019-4cca-864f-f00f1b9977b0", "indicator--fefeb1b7-3817-4805-b3d6-38ad4e09cd81", "indicator--a825a87a-3fa6-436a-b4d0-f86b8e76f552", "indicator--4504b2d6-b24c-4f34-81b4-8d3280f8e886", "indicator--363fe299-ba83-4a6d-81e5-72dc2ded433c", "indicator--29059291-46dd-4595-94da-6b492106471f", "indicator--a4751ba9-937c-498e-810e-e70a38f0d65e", "indicator--c53d98e5-9b05-4c85-9901-52cd189a1353", "indicator--6e114f24-7b8c-45d4-8fd5-cb227454005a", "indicator--b1dc0d12-a950-40ce-9877-9d5bff3a0373", "indicator--5f0912b3-39fd-4b23-a0f8-6a5901772d30", "indicator--7f9d3a55-dc23-42d3-b846-c605f25b6cf8", "indicator--11a6bbba-d49f-426d-93e5-33a4b57ec1d3", "indicator--33dcd24f-6a89-4008-857f-12169a1f9b26", "indicator--f370abda-0efb-4592-a3b8-ffea670e06f7", "indicator--b574f264-1cc3-4fe1-a9e9-936b68e46eb7", "indicator--35877586-9ad4-4294-bd31-04da3c17c93b", "indicator--49079228-ff9a-482e-945c-482f290daef9", "indicator--f4a30825-496d-4915-bdf7-1ecfbaa5d3b3", "indicator--1e1d2619-bfb2-4203-9913-70aca7714dcd", "indicator--651a3735-d67d-4c40-826d-5c457f8fe16a", "indicator--75d3619c-1294-4e92-8122-edec34228442", "indicator--c3f0476c-650b-4649-a127-6c4ab1e28c9a", "indicator--14b82a71-bd78-44bf-932b-f308dc92f8ec", "indicator--57bbc1fe-fa22-407b-b4c2-1e3d03406584", "indicator--5a7877dd-9ecc-4094-97f8-557eaeda5380", "indicator--32c95a6f-f606-410e-94ee-68fed422b212", "indicator--6619c1ee-aca3-481e-92c9-6a6895a952cd", "indicator--efbb93ac-8efd-49e3-acfe-849e1cca3c57", "indicator--d597aefa-ed77-4c03-8028-2d05285f9455", "indicator--195ddf6a-b495-4305-9157-95d4fd2efc79", "indicator--a82406d8-4635-481e-bb9a-4ba52450e91d", "indicator--00542f86-e1e6-4c79-9bc6-42f83876a947", "indicator--8b60cbf6-c629-4ca9-95ed-e3b2941fcbbe", "indicator--f8653907-cd0e-48e5-a38e-45352cd4faca", "indicator--a5ca0c0b-bb19-4353-aee5-ce2e94e41d5f", "indicator--510f60d7-88cf-4335-9f1c-8129b1bd8a03", "indicator--95fc21dc-2b68-4b40-94dc-43a0f1298db5", "indicator--893c1f83-4596-4655-b7e7-6d0b9c8d5cef", "indicator--4dfb5ad8-a7a1-4883-8e2a-f5b7528b66cf", "indicator--5b918ada-4966-4845-a2ad-2f3ed8247a7f", "indicator--0e22962c-14c9-4956-978b-8126f0fd85e9", "indicator--13afc54c-af40-434d-82fe-835dbf16888a", "indicator--7261b491-425e-4371-a1b2-40aff73c23e2", "indicator--6f8135f3-0f08-41d3-bfa9-b091ec454c84", "indicator--8e54e3b2-2df5-477e-bcdd-41cd11c792ce", "indicator--29c4a426-ae7c-4c9c-9a33-fd718f888338", "indicator--6537fcf4-00f3-4871-8c58-affe937ea8fa", "indicator--d6f57e28-6143-499b-9e90-131ff4903137", "indicator--146bc0eb-1356-481a-9c2c-56f81b079302", "indicator--dd9e6424-8e4a-453c-849b-485efd181f1e", "indicator--fbe904ca-a305-4eaa-b7b5-402b5a4607b0", "indicator--4ac4bff3-99a6-49bf-8a89-2175fb39d90c", "indicator--448e0d72-69ef-4d46-b28c-52a42cdf98ee", "indicator--05691de9-82cd-44b9-a09d-78819d359dae", "indicator--863700dc-f3e8-406c-b8e0-cbed1a64f7a9", "indicator--2c084173-bcb5-4e8c-be21-49dd7e8c5f77", "indicator--20d8a4a0-9904-495b-b8e9-b43d9481940b", "indicator--81f831de-5061-4354-85e1-c4579ce0f177", "indicator--5248258b-7e47-4de6-aa28-974e6d859989", "indicator--ce3a61b9-dfbf-4c81-9f16-8ade8b64ae37", "indicator--d8927697-ed50-42de-91d1-8d3b4ce734c1", "indicator--b67b8cde-1746-4930-991d-641855af23ab", "indicator--d6fa50ba-28c6-4c08-8a64-f11f56b51d9a", "indicator--56e2bf5c-697c-477b-bf33-f000a0b0c962", "indicator--462f77d9-bb28-49d0-9748-d788756e6c7f", "indicator--de2f1d05-045a-4b35-852b-748b3eb425cb", "indicator--5e080ea5-34b4-4948-a163-fd4c300de396", "indicator--a938b484-b91f-401d-bc83-aeb941037fce", "indicator--b80e17eb-4f17-46c5-bafd-226f847ea51a", "indicator--d2154cf3-8abf-45c1-b25e-eab89017f474", "indicator--cf9bb9b4-f2c8-4d4f-9d8b-d82893b5237b", "indicator--c12915c4-5381-4a34-999f-a322ee979c50", "indicator--5605d2cd-5c77-4d54-8bcd-077e61e339ff", "indicator--f2da99d2-d6fd-4267-bdd5-25812c4d9464", "indicator--16168509-c937-49c0-9031-c9d5f5f22651", "indicator--9fd93f43-f18d-4703-a6d2-906fdbdd9331", "indicator--19690bb6-c069-4ed9-a781-083bfa14bb45", "indicator--0d70506d-bc24-4a0e-ac00-cc2309050be1", "indicator--1b27e908-b84b-4390-ad02-942a23ea04ea", "indicator--b0182575-c10a-421a-8053-a287071b5123", "indicator--92565ac5-4a3d-4bfb-8dae-821b543df6be", "indicator--453b9ecf-5145-40cf-8ba2-090081e0d4d4", "indicator--1b493176-e16f-43a5-bb26-48550920edb9", "indicator--d95a74f5-beb8-448d-ba50-3d67220fb172", "indicator--9707243a-8c53-4ddc-8183-af62fab865d6", "indicator--cbd1a6f4-edcb-4167-a58f-0aad0ff6de03", "indicator--a5546645-79a8-413a-925d-7852eb3d2e59", "indicator--f863ae13-27d2-428b-8f68-b69d2cb55ac9", "indicator--300c4321-1dcc-4eb4-8670-0c24ec69cc2e", "indicator--7673ec85-1e1d-49a6-bd8f-0cde141c873d", "indicator--3563749b-3541-4e8a-9b31-f90477442f97", "indicator--6396d4e0-10ee-483b-bcce-a33f842d4b10", "indicator--2b6b4c82-24fd-46ca-ad5b-c194ddaea01c", "indicator--643247af-db9c-4c4d-b728-75500c4c0a8b", "indicator--617067d4-8c32-43ee-b950-22bc8a8bb23b", "indicator--337fa134-0c5d-44ce-8ab0-5174ca31309c", "indicator--da72da58-29e2-4ed2-bee1-8257fa06f8ae", "indicator--113f58c4-3be8-4ddd-9b45-162f87ae81e6", "indicator--af78a487-c7b1-4880-8f19-ff30cb722aba", "indicator--7ee2333e-6dbc-4e8e-9711-f5503e15cf49", "indicator--eea64ce8-6c35-48e2-8ae4-98c9d72b069f", "indicator--0480f27a-98d1-43e6-b728-869cbc909a23", "indicator--1df0eeef-e5b3-4f95-b50a-a0006d243794", "indicator--bbae1544-1bdc-4fbb-a52b-08d2b39a3289", "indicator--fb7145bf-55fe-4e97-bdc5-c62cf1a8fe71", "indicator--b66a480f-8be1-4819-a052-4b27c5b78cb2", "indicator--e15654b2-00bb-4312-bdb1-02792e5d9040", "indicator--bb127fd4-651e-41c8-902f-1ac7906761a5", "indicator--6e4b93dc-8dac-4148-b58c-357dc30f32b8", "indicator--8329b384-0dd5-4d30-8395-c54c4ac5e943", "indicator--738dd9eb-a685-4a30-91fa-25a98a5d7d83", "indicator--bb54b0d7-cc02-4de8-a00d-ea5ffec79500", "indicator--9772f251-1c0b-4ce1-bd86-5a351274a114", "indicator--b54779d0-dc75-4d7b-b5f2-7ae2445b21a9", "indicator--d38deb4c-6e84-462b-99c0-e6bdb75afb2a", "indicator--aa57c899-40e2-4b00-918a-4c9c57508fa9", "indicator--48cab0d6-93bc-4249-8b55-5caff05f6749", "indicator--1852ecec-32ce-40c3-8850-369dd6c763d2", "indicator--602e13ee-727b-4486-8aea-8d78dbbcac7a", "indicator--f5352f83-5d4a-4ff6-a56d-4724bbebe916", "indicator--52c34133-7bd5-45b5-8176-08cb0433e9d9", "indicator--8c4decc9-dbbc-47f6-9445-52c3728f865b", "indicator--78d69e6f-3739-4d52-ac1a-4ea05221024a", "indicator--40015d60-c340-43fd-b18c-0fa8b62f92f7", "indicator--b434395c-06f0-4416-aa9e-80f80d7921f8", "indicator--caf91255-abbb-4709-b5cb-0ef71ec8fbbd", "indicator--94e209e0-f647-48ae-af2b-5aa5e656cd63", "indicator--120fc3ee-58af-4bee-ba7e-ddfe6a162336", "indicator--5528b083-08e9-441b-a99e-88eeb3441ddf", "indicator--cd5786fb-2ad2-4cfd-bb34-8e9a3ac176a4", "indicator--0a69a81c-7a1d-469d-bf33-b4b3610e737c", "indicator--f41a3791-985e-4c8d-972a-1eb94f3a8535", "indicator--b81eeb6d-d047-4921-bc19-094391b9f204", "indicator--b3bec7f7-ad54-47cc-9a7f-78eaa68c0632", "indicator--a6f23b4d-96e1-4100-961e-4890445cdce8", "indicator--61b99924-4a98-4e07-8ff4-0b038a0c472f", "indicator--495c0ef3-0fc5-4d03-a780-37223c6c783c", "indicator--5121a053-4392-4aa5-9b77-6b1e603a424d", "indicator--a1d3da7e-9070-440c-90d5-14abd6129f66", "indicator--7ac6b758-7e76-47a7-818a-e98c3311855a", "indicator--144532fa-782b-4565-83d3-e88d3b49d687", "indicator--935413fa-f3aa-4aae-9ead-6788b78f90ca", "indicator--7560d7c5-5412-4011-9693-ca76e9e2eaad", "indicator--d11996c0-a820-4473-a675-d6339f264d78", "indicator--db50306e-fd98-419a-a494-fc6677bbf857", "indicator--a05431e0-d585-4e7b-8686-9fa542de7736", "indicator--d90f182b-dca1-4f2a-9ab8-ac93ee017192", "indicator--8ccdfddd-fd7e-40bb-bef3-83560434479c", "indicator--2c7afebf-5805-46df-be8f-4dd62c703d06", "indicator--bd841fa7-4b15-49e2-82fe-3ebb2d43cfb6", "indicator--e72c22b4-2ff4-4524-9913-17fb4c910399", "indicator--a0985987-ae28-43db-a66c-b04451f82e9e", "indicator--5d43113b-8f03-412e-aa6b-8514c229efb4", "indicator--a4c54d5c-f7aa-4e9b-b8df-7081fda3cb15", "indicator--8f06bca0-e3a5-42ab-8046-7e9f8c1cc68b", "indicator--149c1210-9975-4e04-ad02-41835ef8798b", "indicator--37b86945-82d4-4852-980c-8b20f7248b32", "indicator--75e30fb2-522a-4daa-9526-62e0afa08d77", "indicator--1c8594c0-8e78-484b-84d9-829d655c0d42", "indicator--8a3add21-f024-493b-8f4a-4f0eaf4a8648", "indicator--f3825afa-dc57-4244-a7ef-8da2f207ce02", "indicator--37663c9d-b17e-41a7-851f-135523ef7040", "indicator--02cc3430-8597-4cb5-9086-64d3c8f1086a", "indicator--1c6fb087-8f52-4b2e-8a36-89acbe4d0967", "indicator--1789d706-0ed9-456b-b21f-60ff484897bd", "indicator--ed9e954b-e5e2-4838-8d8a-290d7908fea5", "indicator--f4c5c6e4-2e1a-49c0-aa10-ee59f274ad7d", "indicator--996e4075-0be9-4b74-9b16-95a35c99160f", "indicator--23e4d528-252f-47f3-9a15-d240ae9e1a4b", "indicator--c0ca27b9-c415-428e-aa8d-2252fe001d45", "indicator--3d8ce7e0-322f-40bd-828d-e1f8005d9f5c", "indicator--108f6893-2278-46a9-9eb2-85e7d48db310", "indicator--6c67e2ab-2c5d-44ff-b949-0ad565467fa6", "indicator--399a23d6-b795-459b-81fa-9321bf5ea56b", "indicator--a195855f-a082-4ccc-b679-935a720bca4b", "indicator--305dab5b-3348-4094-accf-878fd87d0733", "indicator--96af72cd-4d3a-4e4b-bdce-b549bc47359f", "indicator--0fd56764-dbef-4b42-ae03-0e8f1e4746c8", "indicator--59161018-5303-47c0-b6f7-654772bf1e89", "indicator--b64d3b28-128b-49c0-b9ba-272922fac661", "indicator--641da955-f4c1-4551-ad26-20abfd6b37de", "indicator--36209676-7e9a-42e1-874d-0e9fd02dcaa1", "indicator--2fb7ac0a-3995-4a71-a54d-c07231be73d5", "indicator--2342b863-62f2-4454-8a4b-b2949d84bb49", "indicator--1c7abc92-a89e-43b6-bf6d-45c79cac40e9", "indicator--26a3239b-97de-47e4-b288-0efda2696a39", "indicator--3a4e9f50-3059-4687-b108-8346ab9badeb", "indicator--180bf614-fe6f-41a6-b125-fca102ed334b", "indicator--a5df3397-1570-46f1-9151-48a81b0f9daf", "indicator--4d91635a-97ab-4325-a089-bdd0869051f8", "indicator--3f1ee142-7b2c-4b06-aae3-8535e8f7a6ce", "indicator--6b06bbe7-58a8-489c-b9fc-6a5c0999f5fb", "indicator--c393888f-4ac2-44ca-9554-aaf008384f8c", "indicator--008d559e-2423-4a25-8806-079a9efe5ac9", "indicator--44f6e147-10b3-4a17-a28f-1cb4b7258c6a", "indicator--0d37b023-31b1-48ee-98cd-166dd1e299ca", "indicator--9741d1df-c0d7-475b-9d00-5e64c0d3324d", "indicator--25a86bd5-a959-40b1-9b0b-54fecbfe1aa5", "indicator--693cb6d8-fb8c-47af-a39d-7f5adb7afe9a", "indicator--93eb1378-8790-4b2d-a4e2-8d809070449e", "indicator--f994455c-fd0d-429d-96ea-53f520f9f83b", "indicator--9f7f8eb6-bc38-46ba-a0eb-d36cc0eee038", "indicator--d88e01ff-b832-4c58-8809-dd09c0c0d4ba", "indicator--17b3f829-87a2-4845-9e6a-4e31c33170ae", "indicator--783563af-688c-4857-bc9c-d16531aef229", "indicator--a9db47a9-d02e-4105-9f84-08b6a3acdce9", "indicator--1d6a1345-f00d-4a27-85da-8d8937d3374c", "indicator--0d2968f8-2fe7-421a-ab4d-046de5111432", "indicator--798ac7fc-9f76-49ef-815a-8e4967f5e49b", "indicator--8b582d0b-73cd-418d-a720-1e44bf4839f9", "indicator--14613106-afc6-4962-b724-c82bc16331ae", "indicator--e93d1fa8-1e86-447c-b49c-be7319bc0520", "indicator--ccf8b344-b62f-44ae-8d20-76b3b8347237", "indicator--a00f8e73-c78b-4e20-8e95-528dcdd115c6", "indicator--8071a2d1-cb70-4d3d-b5a9-814cee8f6679", "indicator--f7541d9f-e143-4b91-91b1-3920b59f2fb0", "indicator--0302eed7-b935-4aff-b533-7749e7b8a3f2", "indicator--e3a275df-67e4-4486-b1c3-8a54302f7294", "indicator--0896c886-c4c3-4216-81b8-bee6253950ba", "indicator--69dfc5f6-99d4-4863-a2c5-b1c025392e21", "indicator--2ceea160-806f-48f8-8f0a-f8bc89de4faf", "indicator--009a5150-02f9-4218-9014-df1865814c65", "indicator--90b0be69-da07-4f1c-a730-2f7768a31206", "indicator--dfb1d4fe-12d8-42d0-8b8a-1113eed23ec9", "indicator--9e5b2e2e-db65-4ac0-9fdf-20a726d45435", "indicator--0418453c-4dab-4ef6-be6a-5867bf8bccca", "indicator--6ca0278a-a077-4512-a8ca-07b939b0f7e2", "indicator--cd29cd30-0299-4429-88fb-b65bf33a0994", "indicator--9d6d4698-1615-4961-9a94-a632c743cf9d", "indicator--42ad6ea3-5e41-4d8c-af38-9da55dd33ada", "indicator--fe412adf-837b-4de7-ac0a-4b86e27ae7c2", "indicator--769ede93-7ff7-4621-b8ba-ebaf0dd55d9a", "indicator--cb891adb-0a42-4b47-840d-713333d51336", "indicator--52b55989-155a-4b90-adb9-68b0e937f661", "indicator--50297e31-13bf-4302-bec2-8306d76f96f8", "indicator--01e43b09-8882-45cc-a730-73594f032941", "indicator--81a0ea8f-f946-407d-bfbe-2c0b6e0624b5", "indicator--eb2f4b97-eee9-4db3-a2dc-40076832aac2", "indicator--d4b01d65-9125-4281-aa63-a0323c599aa4", "indicator--f0d95f2b-eb43-4381-8aa7-b613ae885c28", "indicator--54f5b40a-8a57-4f87-8bb1-f6ae216b1248", "indicator--ca92cde2-5bde-4ec5-a945-791107f05d35", "indicator--c8ec3e81-702b-4d6d-b010-d6bcdd463a92", "indicator--173b3022-cf0f-4cae-8e9a-e8fef8bd4916", "indicator--1860f5c9-522b-4cbc-a9e9-85ac854853f4", "indicator--2d8be2af-ece8-4783-93d4-71c920acf4b8", "indicator--e5aad39d-f123-464c-99f1-e7ecbf638768", "indicator--17d75c7b-f28f-4c49-993c-a330ae9de9c2", "indicator--de6574f0-eb13-4aca-8802-dcb784c17c0f", "indicator--b11654a7-3199-43e6-bcf5-0668131292cf", "indicator--974ebaee-de8b-4f70-83c7-d78055327495", "indicator--b9ed91a2-f5c8-4ff6-8c51-f204fd2f84e9", "indicator--82baf63e-1253-4218-8c01-502ee1d3405b", "indicator--dd4462d6-16bf-418a-b13f-e77ee3124d79", "indicator--6d861bc7-1657-4e88-963c-fa46da29ad18", "indicator--c3fceaed-9b95-48a2-858f-3ccd13a60516", "indicator--29c60b8f-3610-4c60-bd02-a57aca140bfc", "indicator--b04c4930-9fc1-47f3-8734-f265d83d981d", "indicator--8dc33942-e5c2-4983-aeab-c1c6141f1224", "indicator--59e30fa6-2244-445b-8912-3b491b7f6542", "indicator--6efa4a74-c52b-41e9-8837-dfb0deea025c", "indicator--0ce443a6-de96-44bf-8052-55b2c952e8df", "indicator--f59591fb-4245-489c-896c-b1e9aa35a6fd", "indicator--5aff3b34-accb-4137-b699-83a1d0df3154", "indicator--4d0d7005-fd03-41fc-8095-6668b1675938", "indicator--6e36104a-f11a-4931-a3b3-893a82e76d74", "indicator--98081adf-5b0b-4056-9907-a835ff8ac269", "indicator--f7c841db-c3df-496a-b175-0444841a4063", "indicator--77270c34-339f-444f-bbf9-20cb468fe1d8", "indicator--496c8ad2-a5b4-4d67-9f5e-1676c2ac9f0f", "indicator--c208e7ad-146a-4c24-8954-78fa3707eea4", "indicator--67483254-89f5-44d2-a2db-320748b08f83", "indicator--37f62482-3d85-4328-b05b-3f2a76033918", "indicator--32212b86-8054-4839-8db7-fe418063c2f6", "indicator--ba48aa7f-6c02-4fe4-9372-7432ead6ff46", "indicator--f5bac371-a9fc-40b8-9541-4830fd527214", "indicator--980f955f-6140-438f-a41f-94740e2b1028", "indicator--fba475ae-caf9-47ea-b9d9-b9c8cda80310", "indicator--5e475bf7-0e69-4166-85b9-67af0cc51c4c", "indicator--99e980bf-7a3b-48b9-bfd8-99cf14e88b20", "indicator--651d6aea-3aab-4b2b-b216-8033a529c4df", "indicator--cd1f7cc2-f53f-4c8f-907e-e5aa334fa9a5", "indicator--8375abf6-e145-414a-960f-e0f04177150a", "indicator--bc4e5a03-3145-4ab3-8160-657e17abf131", "indicator--44daf216-09c1-41bc-a43c-311a0e14b999", "indicator--cbbb0f0e-208a-4479-aa72-e78815586d38", "indicator--1195c2c5-dce0-4451-bd54-37aa2f8c19ca", "indicator--01f608b8-d9fa-46ac-9cca-ac3acd1b47ec", "indicator--61a7d397-e143-4668-a726-512105cea2a9", "indicator--ccda27cc-24c5-4570-9b21-4ee52a6a521a", "indicator--e0c06e42-c97f-4f0d-8ea0-5234620ceb5f", "indicator--fdc4ecd4-2e18-4109-8bc5-e06df97b6999", "indicator--70f78ddb-c1d8-44c8-836b-390d651d35e5", "indicator--88a7d7eb-4a63-4266-bcb6-4a0180226681", "indicator--f8944128-faad-49de-aeb8-d08aba680dca", "indicator--946f5d6a-da04-4e10-a3c9-ecb2c866c760", "indicator--2469fd7f-7d88-460f-a1be-c2fa49ff751f", "indicator--c444c368-6066-4488-ae80-c38ad120e77a", "indicator--3656f37a-9acf-4baf-8a35-a943656243fa", "indicator--d473c021-e692-458d-8c79-4481f35b8299", "indicator--e9c0e96b-b120-4f80-acd7-011ac177033e", "indicator--13608048-3762-4734-b9ba-3984a186e533", "indicator--bcadae59-39f0-4f7d-ab81-2c64eddacb74", "indicator--41317110-2fa6-4ed4-9b1a-85261b49f1a5", "indicator--4626cfa3-caf7-4a59-9bcc-bd24c0e45017", "indicator--3be427c3-75b4-40ed-baea-34ece4e685f6", "indicator--facb406a-abf4-46f0-9788-faa354bf1f63", "indicator--c6fd72c3-f459-467d-bf29-af1c4a8b5f46", "indicator--e199d8b2-8284-4eef-bea1-0f68eb00045d", "indicator--81dbbbf0-35bd-4f63-9cde-56246840ae9c", "indicator--8b1cf5db-61b1-4493-bd22-778b7adf2b59", "indicator--ccf5bddd-48f9-4292-b784-3d35a8e29dd4", "indicator--298d2ade-cccc-428a-b626-cc6b0c3ff568", "indicator--ebab8f16-3429-4ad6-b1bb-e2267157e5db", "indicator--c1052ba5-d425-4012-a792-2e4217a0d33c", "indicator--20110dd6-e81d-468f-a85b-034bb1995bbd", "indicator--45e036a2-a44c-4cd2-a352-4bd9805b33e7", "indicator--25a9793e-b70e-42bc-8f4d-14ccad5fa972", "indicator--0ef4f7ac-4673-4e74-8972-6519d05b41da", "indicator--0baae9c9-316a-4004-809e-b9c21cb09ab7", "indicator--4a6ee64c-f72e-487c-ae23-f76556752620", "indicator--bde4661c-4311-43fe-8164-d90b6023528a", "indicator--7e646546-aa49-4b35-ab52-f5fd815e5758", "indicator--1b76be66-e4dd-4549-ab30-dcc95773cd17", "indicator--3c8334a2-3796-495d-8f65-caa6faf50b39", "indicator--ecba18cf-6633-43b5-aecc-a6dd5b720b54", "indicator--7402e57e-e095-45a1-beea-8c72c9e715ad", "indicator--8c22d635-86b7-4be8-82bf-ba02ab24f217", "indicator--cc665908-7749-4bdd-8388-d3f25fb5eaf3", "indicator--526b5d3f-453e-4897-b161-2bec594f9dc3", "indicator--e86213e0-ff83-4de7-abb2-a81dc217817b", "indicator--c61a7c37-f50c-487b-8f5d-119235a7908d", "indicator--50e9d0ab-b048-4da4-91e8-b82ab0e072c5", "indicator--69800985-043a-4a86-a27d-dc74528cf045", "indicator--14b0ef0e-0f38-4eca-966f-d1558fa043e5", "indicator--00e09541-af02-4f67-93be-432496e639a9", "indicator--c9b4ebfa-42f5-4973-a3f5-8e20512d9416", "indicator--ea7c3ef5-b192-4617-a6f6-2ee95e0641f4", "indicator--4d1e4f8f-24ed-4d27-8a98-31dbb2e97c80", "indicator--817a3fd8-3be6-42c0-b1c9-b32baea08d11", "indicator--482ea2bd-bf64-4810-b24c-c364b09fb5f6", "indicator--0dcff7ed-9cda-4dd9-94be-37b77e998ed7", "indicator--b9872509-229b-4b05-9692-cb0840252276", "indicator--2fd36fac-15fe-4dfc-8236-9bb01a64e647", "indicator--b58f77b8-15eb-435d-819d-c2a5b1a99196", "indicator--b2e1e08d-7947-42f4-90a3-2fd0869b91ae", "indicator--1d276509-749c-4ddf-b7ab-1e16785fefe2", "indicator--4764e8f8-f7ee-4ed4-a7fb-18f18b63d87f", "indicator--ede60d22-5a91-4d12-aeb3-80f4c56832ba", "indicator--fd41fabc-8f39-4268-9d66-e7f22458b15b", "indicator--a331a1d3-e231-4b0e-bd9d-aa61dadb59cf", "indicator--923f006c-cc68-4b7c-9f63-103079951b2a", "indicator--f1b45d0a-3fdb-46c3-bc28-66ea62f72cc9", "indicator--2b65db93-7e21-4958-94ca-156e37fd016e", "indicator--cc77840b-568e-4314-9969-e19cf398721d", "indicator--93b46e8f-af1a-4898-9297-57116c953a6d", "indicator--893fac71-21d3-4649-a0eb-f816cee92f65", "indicator--fd49b0d1-a5c4-4243-8cd9-e0dd9d955646", "indicator--6cf5110b-6ce3-4be4-abe6-9a54eb91a122", "indicator--3cb15f7f-507d-4701-9958-5e078ce13edf", "indicator--5c773f31-a351-4c0b-a54b-16c8fac9c438", "indicator--900a3707-8638-499c-8acc-9cf8060931e0", "indicator--74e7a520-8799-4fd2-91b8-a241392d00bf", "indicator--fe945389-f07d-4583-9e00-a3b54412e02b", "indicator--4949c2eb-c279-4111-87ac-cccb9f409617", "indicator--113d5082-9ef4-4ba0-a4c4-61fd95c65106", "indicator--27297e26-2778-4cce-a742-7d8d1518f5c6", "indicator--4e13da33-b4cf-4faa-87cc-4f8888b0f66e", "indicator--4437435a-77cc-4412-99fb-90e44e9b9826", "indicator--6516ea4f-7169-4c7d-bffe-276b6bbaf4af", "indicator--fef1d4e8-179a-4f9c-860a-632610e15f34", "indicator--b8f76ef1-952f-402f-b23d-ea86fead9671", "indicator--fa326c19-0f35-403d-bbb6-792a385224ae", "indicator--c88e817f-7903-449e-abfe-30d5ef8daecf", "indicator--c0b2e27c-db44-42bc-88f8-3568afac4a60", "indicator--18023c23-06f2-4e81-9427-72c8f2062d48", "indicator--d2e36d88-5ad4-4fec-aa6c-53585d172325", "indicator--11324c37-4112-44e5-90b0-6042af679379", "indicator--7d3bf482-cd4c-4ad0-8ecb-fe9a7e3c2b0d", "indicator--2107b0a3-ffd3-41e2-a16d-44e4c034d020", "indicator--a0b64b59-d946-45b6-9d9a-07fc206ae655", "indicator--0918e993-66e7-4b94-a12e-ce47743ca5a7", "indicator--b13efe3b-5171-4629-b513-88a307bc5df2", "indicator--abdcebf6-cb95-4b71-9165-481bec44f4fe", "indicator--bee57c86-57a8-446f-af5b-90a0e48d0e49", "indicator--70d03c97-874e-4d22-aedf-92d6a81f58f9", "indicator--cd1a9754-5fee-4487-b149-93087137e939", "indicator--afc91723-e1a4-4be6-a043-7984851e3711", "indicator--bbcb11d2-86e1-497d-b5fd-c83783b38a85", "indicator--5e3d1c60-638e-4559-8593-5bd60e688e42", "indicator--23fc3946-fc69-4f7e-9e94-38f0f87f4434", "indicator--6f90f379-09ed-4613-8ccf-ac9f948ee559", "indicator--a7bf500a-12a2-4a25-9cb2-7e14a1e62e74", "indicator--ac58e96a-a83b-41f4-ae8a-c1be5abf0e97", "indicator--5e8841ce-fd46-4909-98cf-a278de035e04", "indicator--8f33b941-c916-424e-ac44-f13c33a23d40", "indicator--1d50aefa-0e5a-4433-9fd5-9118ed0138ba", "indicator--fcaf79e8-9eb9-4b83-8671-169c5288123a", "indicator--920ccd2e-551f-4379-8536-dc389eac4d87", "indicator--a8ef81f8-bfee-42b2-a497-bc2c26b793fd", "indicator--12d27477-d98e-46d4-bf1e-9ed3eaa2f675", "indicator--7126cde7-8907-4586-9554-b0c17568e813", "indicator--7788e759-a04c-4d57-b609-e8e605b64ee5", "indicator--e0e40cb3-e0e0-42eb-b0ec-2cc5017ffde1", "indicator--effbdb89-3ef4-4195-9274-1ed4e88f4a20", "indicator--5825fd18-3b71-4456-a916-e9f4196e9878", "indicator--fe8f4c80-1c1c-4a11-8d7c-07626ab266e0", "indicator--a3dba47f-de6a-473e-aff9-c9de988385dc", "indicator--fc2fba1c-b041-4c37-af81-936e8cb96424", "indicator--561a01e2-bb7b-437e-845f-25b82bc8c173", "indicator--dd78eca9-f025-48ee-ae15-36b6fbdc9710", "indicator--e2d92212-2378-47f8-8433-99977baa5c69", "indicator--63f3296d-4a8c-4e08-965d-92780661aad6", "indicator--22f71df1-af6e-4753-a0dc-c233988f3f89", "indicator--4d70f054-1367-42b6-90a1-66dc5cf4ed67", "indicator--fe5e5717-e283-4a3b-a670-34669af69f0e", "indicator--771efeb0-8302-4b92-9dc4-29bc22810896", "indicator--68e8f766-8250-4a8c-bc28-6755876c18a3", "indicator--e4a7cdc2-a14a-462b-ad78-e7d2dbd8bf03", "indicator--bca11799-1fcf-4bde-a30b-2ed8c91c8bfc", "indicator--0473b28c-7b27-4fad-9013-bf7a52206fc8", "indicator--0bb18a22-9565-4abe-9f37-b3d1c6eae2f9", "indicator--30a6cf31-ec7c-4f1e-bcfd-0b3b38d5a046", "indicator--42ed1c57-8517-4647-ab03-2bbb6720cbe1", "indicator--310f8c45-e536-4c58-b307-516cce7dcf60", "indicator--3f8d7366-5f0e-4454-9479-73b548d6964b", "indicator--c27c11c7-df72-4dee-adff-5e0ef80c1f05", "indicator--b69a28c2-6d8a-47ea-8eb4-d71e976bea0e", "indicator--a872df5f-a0e3-4708-9b38-a453eb49c926", "indicator--c0d83016-91b2-4fc5-932d-96735a8b6698", "indicator--96efb79f-e8b4-4dc4-b813-24367a1a8b61", "indicator--3ff16d5d-1050-48db-afc7-e1fa5d7921b0", "indicator--49f6d78d-efce-4d79-936c-71926f7d87d2", "indicator--902f76d1-5007-4a00-b6cd-23d35d4192b4", "indicator--c288334a-4564-449d-a4ff-dc64c465982e", "indicator--c480a1e1-7048-4585-9155-093b3080d0f1", "indicator--dfe9ac7e-c3c3-451f-9dd2-7d12593d040f", "indicator--6d999fd7-3235-4655-9365-023d17771240", "indicator--301c7261-c72a-42c3-9514-1d752a4a9a42", "indicator--cdb4ed8f-ca45-4b70-90b2-b63b09545f93", "indicator--f86cf9a7-9650-4fc1-96e1-214d460998c6", "indicator--1c277e4c-b867-4375-8e8b-ad132e11f368", "indicator--2f2474d2-e416-4ab2-b331-4adc30bf8b89", "indicator--e321fb2f-f224-456f-a7ac-310543317313", "indicator--ea4c8159-9ed4-4d22-89ad-201372e6871f", "indicator--854c042a-86de-46c0-b98a-7eb66254f2c4", "indicator--bfc27f4b-49bc-4e32-86b9-6f21c7dad2fa", "indicator--220fc0c4-903d-4a41-a601-026c703b9f13", "indicator--e7918c41-85f8-47d3-b5ef-7508f919678f", "indicator--18a86dd8-4005-487c-9aa4-04cc3a4a6331", "indicator--8135a989-6c8d-4b8a-a14b-bd5783c4ee2f", "indicator--26f4e840-75f4-48cf-b081-b3cc31193ab0", "indicator--6c9e0294-c99a-4caf-a3ff-cee5db1e5355", "indicator--8edfea54-40db-4b83-b5ae-bc6a9bdec8ce", "indicator--3fa99a80-766b-4e52-b415-eca88971bd3c", "indicator--e6da2f18-b0eb-41cc-a3b5-ac25e8b4eed7", "indicator--baca0119-509d-4084-adde-b23e50067349", "indicator--d796b4fc-69f7-4ac7-bc69-8d4f095a46cd", "indicator--02fb897e-25fe-4c27-bcdc-ef4421f4c826", "indicator--41f9273d-8ead-40ac-9708-1ecb6e58cdbb", "indicator--f731070f-e5ed-4e13-b9fc-654a66070c52", "indicator--a67f015c-8a41-4c3f-b092-2c2f8446a88d", "indicator--bb52f750-8b88-4be5-997c-536ee96a0c42", "indicator--e7f226e9-be25-4b14-bf1a-b1139070f25b", "indicator--1d6fa672-ff31-4638-879f-2fc935ce8753", "indicator--cd886699-e074-4fd4-ae3d-2a28627c2c4c", "indicator--903c84bd-7ad7-4e40-9bd9-0b665fdc17cc", "indicator--2e68c6f7-0069-406f-9054-17fdc6b78bd9", "indicator--4ec23c81-918f-44b1-a6d4-75ac871456cd", "indicator--156f675f-653c-495c-a38d-d501f0ba5901", "indicator--029d1d28-4050-49d6-8d2f-6714cfcf0a7d", "indicator--1894bf8d-5cd9-48ef-b70f-2804567d01d9", "indicator--70c2fa78-edae-4a5c-85d0-e6500cb518e9", "indicator--a40421da-8459-409e-80b3-e0a369c7b5d5", "indicator--17751528-0cfc-4bae-bf44-8ee1e33f6240", "indicator--95f59b7c-84c5-4209-8f96-a2551def4bfe", "indicator--b623178f-59fa-45b8-ad0b-ae109e0bbb3f", "indicator--55e050fe-aa55-4498-a126-0aa49e621333", "indicator--464a03cb-ffa3-4283-bcd1-802eec1de2df", "indicator--583a596d-7ceb-4dc3-8ddb-6ff851698c55", "indicator--9f6ce960-ab75-4b52-9d61-90560647e56c", "indicator--2f7e52e8-bf9f-4904-a4d9-e783d64c4c0e", "indicator--36a14f1c-7b95-463d-b8f6-d8993c6dcfbf", "indicator--9959fcf6-c568-413e-ab5c-633271e2f0e5", "indicator--94f75a06-6716-4441-9a29-5a854070e908", "indicator--c5c02517-ead5-4e31-b758-b9eb4c8e2bd1", "indicator--73132554-4572-4746-8649-193e3e92e9b0", "indicator--b172a423-e969-49dd-abf9-74c33518a72a", "indicator--cada2e90-9284-4548-937c-d044ca5baf65", "indicator--40051f39-bc88-44f1-9e74-16afffc3a1ef", "indicator--cb299ff9-b82b-4e02-afab-a8d3c758781a", "indicator--dda7a037-1ed1-4f4d-a06e-6cdc2ba12b7b", "indicator--6d2b3cb2-fb79-410f-8ea2-34400713fdf7", "indicator--30140a12-b40f-4698-96e7-48a8d7936e09", "indicator--8ffcab6d-a2b8-42e0-85d7-ce927217af61", "indicator--84b34dd0-67df-484a-b577-3a4200eb0893", "indicator--afcb3276-32e8-4c67-afb1-3a05195a422c", "indicator--92032598-7c26-4ceb-bcd4-5c03256a4980", "indicator--e97c43e6-6622-49bf-8b8e-3d2d432d2c9e", "indicator--3ed92191-e281-46c0-b259-a426d88d02ee", "indicator--17e42283-5d49-4676-8951-37f455ef3f4b", "indicator--401b98df-b5e6-457b-ad41-682b594638a1", "indicator--8c6e9ddd-8d18-44c2-8c24-b8c53c16a982", "indicator--0631deb9-48a3-4d26-a598-496e435e796b", "indicator--863b7604-a38a-443a-b041-0451ca5e4374", "indicator--7d463601-4ecb-45d2-b764-e9762c01f8a5", "indicator--4ab9bb7c-ecdc-424d-b3b7-5cc56232f8fa", "indicator--3936c28c-f33a-4a22-8797-89dd93009b8f", "indicator--64be7a7e-84f8-4c5a-84a8-551021f26a3b", "indicator--0575dec2-d666-4b75-9007-5e6455d4724b", "indicator--0fc2aad7-e08e-4af7-af90-9e7f2f1171d3", "indicator--b6725a53-ff62-4c1e-9703-1e1bcd43523c", "indicator--af5ed964-abf1-4d47-b1cd-cd4fa356f26f", "indicator--7ced4f6f-3788-42cf-8b6c-d36aee5a2a79", "indicator--92cbcdd5-ce81-4111-bcee-480bd6dc97e0", "indicator--3623c6ed-4020-4d4b-86b9-c47962a82b66", "indicator--66aae84d-7921-41ea-80f3-4da04ab1cf12", "indicator--7fccbce4-84eb-4adc-88fa-56114f599f1e", "indicator--88275249-8efb-47c4-b26d-737177b3ddfc", "indicator--56f8072f-227d-476e-ad3e-4375d3d12124", "indicator--adfedd79-5e53-4e46-ae3f-26860fcf7112", "indicator--8b0af923-a754-4821-82a2-5d52f0609a50", "indicator--82e33a7b-a6d8-4d11-b217-09e27ddd4994", "indicator--f9b684fc-cefc-4949-9e57-5774a8ff0c5e", "indicator--f3115e75-ba5e-46d3-b4a4-10842dee9f19", "indicator--a96f0297-422e-4a1d-bf13-9e03908d6471", "indicator--c755335f-f8ea-49f2-91d5-f8369e3543fc", "indicator--ef1ada65-b38e-46b5-b94b-1df65199e626", "indicator--5a36e48f-2ad6-4a1f-a0e1-cc986e153205", "indicator--a892c285-eee1-44cf-bf85-145800615254", "indicator--e52b4a88-8a1b-4846-bccf-bb14e917bccd", "indicator--db0cc275-7bbb-4f76-91cd-4661c9d76d37", "indicator--79d0f84d-9b52-434e-a113-c852f78ef986", "indicator--b198007a-4917-430b-9b64-7918652609dd", "indicator--323b60f6-830b-43c2-a4d0-2b471f35a4ed", "indicator--457b4ef4-90f2-46cb-b97f-8771ee4546fc", "indicator--479849cc-e009-43a0-93da-c5d030991832", "indicator--76439b6a-7919-496d-8976-a1aa6b6e065f", "indicator--61b6e527-537f-4ca4-8451-31f1c23ce8cc", "indicator--66085a2d-949e-4dad-9014-9cdafa30dfa2", "indicator--0a01c34a-8967-4a60-84ae-f0e1962b3813", "indicator--acfcf48d-681b-43ef-8d40-95b9e21854be", "indicator--86d3119c-5b3a-4f8a-ba34-258c252f54dd", "indicator--f156e3c8-3f13-4c05-9d32-62fb17c3934c", "indicator--ec5b7d6f-35fd-4818-bf8b-e86d7c9ede65", "indicator--3a451d0f-7114-4074-b2d9-45e49a93effd", "indicator--2f5e3d90-5ab0-47cf-a7aa-8b4303ecd314", "indicator--77655349-ebc2-4a2a-af92-ee380711af8e", "indicator--9cb5aa88-f1ff-4bb6-a57c-9777bd655bf1", "indicator--6b9f0063-0965-44f3-a471-94a43652e053", "indicator--9a761a55-a02a-4eef-9ba9-e1a6baae2a8d", "indicator--c98fca2e-d999-45f3-a46c-0f4914d9cd51", "indicator--0ec112ca-80b4-4aaf-8218-90f79b64082a", "indicator--2efa3271-f66d-49c2-8d77-a50e80fb653c", "indicator--e74cd3d6-549d-429b-9b07-1c3daf87ceec", "indicator--05a22343-5129-48c4-9385-80ad64080be9", "indicator--f08d2e00-7ced-41bd-858e-31d0df38aea9", "indicator--c26a66b7-f7ef-4c7c-a9b2-369ca4ddf203", "indicator--3359f8e7-d9d2-4086-a0e1-92bfd28434f9", "indicator--5190a28f-8739-4320-af09-d327ff4d2dc8", "indicator--2afd694b-089f-48bf-b08e-7e2bc0bf5fd2", "indicator--e135c31c-9240-4369-bbc6-21e2911025a2", "indicator--73250750-42ee-44cd-a6b3-2075852bc2ec", "indicator--0a28637e-3b9f-4975-ab89-b94ccbdc39a7", "indicator--57dec02a-0754-4148-a384-47e779935448", "indicator--7d1476e6-f1d6-4f86-a76d-516b3fcca10d", "indicator--730be465-f728-4568-8034-e0205a1586cf", "indicator--886ae0d2-c678-4f93-afec-2effd9d2886d", "indicator--dfc01bc9-6134-4101-b3e2-c6b052a1b0b0", "indicator--83d19589-e2bb-4945-9da5-a996b844c98f", "indicator--cd09da01-afc1-444c-86ac-db449d17e01a", "indicator--0b836ba9-b66f-4141-ac95-89c076916462", "indicator--c11f2eff-0c43-4cb4-8760-b209625cd1e3", "indicator--b3d0db7e-8a9d-4235-9024-26eeffdd253d", "indicator--801a8f92-c31d-4986-a9f5-2e494ccd269a", "indicator--103c5978-0fe6-46c5-a53b-ae9bfd5e3e38", "indicator--12baa887-a655-439f-bc39-738c292c1d5e", "indicator--d7bca207-2b8c-4b97-b8b1-110394fdbeb3", "indicator--b4840230-e260-405c-b7be-9340b01706a4", "indicator--c6be6beb-db26-4764-9eea-306b6baa7c1d", "indicator--6932d041-982d-4dab-ae16-66f7fea4dcbf", "indicator--95132609-2aa5-4e4f-83c8-0f688292e7d6", "indicator--0e64910b-d7f7-45e2-9596-640381f82360", "indicator--f196c5f7-69ac-44c1-8936-c5330cae9862", "indicator--895893f6-8af2-46c8-bcd6-73c101cb2eaa", "indicator--da99fddb-6534-43af-a45f-6f241b490c01", "indicator--c9f0551a-7a04-460f-aa02-4e65d1f82595", "indicator--5102adec-8f33-4dcd-bef3-98e2977027e2", "indicator--560bec05-0a92-4be9-aed1-c92e74fb5fa3", "indicator--f1a58287-892e-4162-847c-68ced058367d", "indicator--43b78c17-2fb3-4da4-bbfe-8b8d4058dbc6", "indicator--3ba9ce1d-5966-4cf8-b624-59502b851789", "indicator--43a29c7c-70fe-4040-bd46-652d54923505", "indicator--534948d6-bba8-469f-81eb-cf4890c2c7d5", "indicator--54b75d83-9479-4b1f-acfe-fcfb015f0433", "indicator--ba48bc40-0239-4190-a032-29d666188dae", "indicator--67b4cc6a-ab9d-410b-af0a-585eaf34e083", "indicator--ae0307f3-b5d2-4738-b794-c1c38fd3c789", "indicator--19a30363-c7de-42d6-bbfb-025b39369320", "indicator--a81def6d-11c7-471b-8113-d5f846dd9520", "indicator--2b4b6784-17c7-469f-8969-95d518a5eec8", "indicator--e332fd00-f657-4d18-940b-7d68cdbe64f5", "indicator--474a89ee-82fb-4d52-804f-7bf9b6230658", "indicator--3bba85eb-97cb-4eaf-9351-3356ff3d1ee9", "indicator--d5b0465d-7837-46eb-918c-ad052d29904e", "indicator--f7617127-d69c-4e41-965f-03748f9153b7", "indicator--75ec8792-12e3-4792-a629-d2fd0a928add", "indicator--7a7deb11-52ab-4321-9434-24b0683eadf4", "indicator--7527f88b-da10-4633-b9e4-2248d5370912", "indicator--c265685d-e510-46ef-95f4-52625196eeea", "indicator--52f7e885-ec7e-4cb6-b212-c25a740edb69", "indicator--bcb5d8ee-a92b-410c-b17b-59708298ce8a", "indicator--d54d898e-8a8a-4998-bc16-5da4bed50a1f", "indicator--5c5cf079-49a3-482f-81af-8ea984764ff8", "indicator--039bac7e-327c-4e3b-bf35-97d26b7a8270", "indicator--6ac91d76-e895-4ca6-8773-b6d7cd9e0973", "indicator--7b7d2daf-dfa1-45fb-b3df-d84e774be99f", "indicator--b577bc8c-262b-454a-b30a-d8fe6e440b95", "indicator--0ba545b5-caf6-4e9a-ac41-eae887c03448", "indicator--022162b4-d33b-4d11-869a-c4169a4954a1", "indicator--fb8a4b03-d1cf-47df-9d2a-4e8eee9804cb", "indicator--456254ee-8995-414f-b6b7-e170735f17a0", "indicator--660a5702-f15a-48c8-966c-6d3fffcddc09", "indicator--03719c19-011b-412e-903c-ff79e0715743", "indicator--4abf49ec-993c-4c81-88fc-3bfc284dd5ca", "indicator--b61843ac-495d-4996-8f34-8484ec4bc83a", "indicator--6e449b97-8d69-4db8-9311-bf133c4bd438", "indicator--ca440e9f-1a5b-460d-a56b-d20cc1e8379d", "indicator--eb1ef7a3-a6f3-4172-8ab2-46826e5f64c2", "indicator--24b21996-439a-460f-b0c9-de055048f8f4", "indicator--cd86cc8d-bbc8-4c3d-bfa2-6a1289b968b6", "indicator--92a430ba-4a00-49e7-97bd-8a67230978e4", "indicator--62b8c39b-d892-4111-972a-f9d84c1bc629", "indicator--676881d4-1ea3-4c15-abfd-a4b1fd7eb1a9", "indicator--198def6b-e267-40de-98c6-ebb6c417f6bf", "indicator--bf3eb523-ee29-4e1a-b003-4781b7cdee41", "indicator--3654373b-b4d4-4b36-8bb1-62284c8edcdb", "indicator--9c366358-1740-400d-9562-6a845f51f815", "indicator--53096258-e2f3-4789-9556-b4f3a02e1072", "indicator--9b6e4d8b-635a-40e6-8a7b-ba51d0742f66", "indicator--35297631-7621-4ef1-8243-743c2a219d0d", "indicator--87999de9-3867-469b-a11a-545f385184a2", "indicator--7a48b6ca-1b26-4051-a6fb-8a0e7bd1c04b", "indicator--29984864-dc07-4257-adb3-16641bbffc1e", "indicator--d0fe6807-3818-43ae-9ef9-f86b1e87d247", "indicator--2d5e68b0-5797-4ab7-a9b8-ceb271060aa0", "indicator--88461268-4593-4fc8-821e-0d07588eab0c", "indicator--fffbb14f-a5a9-45ec-aa7d-06c573dd0380", "indicator--effa1264-675a-4a5f-a748-1be811377d46", "indicator--fd91b7cc-c19c-47fa-b631-e051ce4d2684", "indicator--f5a68bc6-97c0-4941-9afd-d9ad54b7c96d", "indicator--293182e5-3fca-49d6-b828-70a839f99c40", "indicator--e79c5632-09b0-49f7-9a87-8566d4d8985c", "indicator--e3b6281e-5a63-4914-9800-632b2919be02", "indicator--32387a59-9ed0-44fc-987d-9d2814bccd58", "indicator--b355ec62-0b08-4d73-87c3-10937290503e", "indicator--c4a439d8-808d-4435-98f4-5ce76db8c6d4", "indicator--459b3712-27f6-470f-adc5-eddf548a3084", "indicator--b8490f3c-30ad-4fa3-ac57-b244afbae820", "indicator--e6ff55f6-b52b-4e08-8e44-a6cd6ce8ae65", "indicator--a2bfe9c4-200f-4f06-b05c-24f41232c3a1", "indicator--1803ef5b-43c2-44a1-ba11-9c105007602a", "indicator--b2e3fa7e-c0e1-4edc-a6e6-579625775834", "indicator--d6321a1f-3bb7-4e49-a26a-9891a3b15e79", "indicator--b62600b3-6628-472a-9709-a3a30b958b2f", "indicator--e94bf2fc-088b-474c-86da-c175aedb08d0", "indicator--b10c823b-7442-4bed-94ea-cd29c6b975e8", "indicator--e9ce1016-02e4-4218-a95d-d18133dcf227", "indicator--0d032941-5a5f-40dd-ae74-65b63e7ce6b5", "indicator--be0c8779-e31e-409e-bcb7-971f322e2cb8", "indicator--79d85c60-14c2-4249-bb1e-d4c398960b98", "indicator--1ae05508-a3d5-4f7e-a313-1dd035bf1043", "indicator--d2e8e7cf-f6ba-4d56-8a86-da1daef37e4f", "indicator--f5fe18f3-2653-4f2f-abb5-f0b0e9cd7fdc", "indicator--17223ebe-29da-4971-928d-81990461122f", "indicator--bddb27e4-f57b-4612-a524-59427c171df0", "indicator--feff1f8f-91e5-4cd6-8e7e-85576b0441d5", "indicator--1f17003f-b929-43ce-93c1-252bb16287e4", "indicator--117716c4-dfe5-415e-817d-d384dfa8ee6d", "indicator--4f7e83f3-0d88-4334-97b9-db222e25cb10", "indicator--4a8b393b-f546-4878-be25-42291380713b", "indicator--83c09a00-598a-41ff-b1ac-686d6cd54435", "indicator--9e4abccc-c8db-4cc6-85ea-b73e1f821db6", "indicator--a4504fde-3e71-4a7e-9327-92f234c2f7af", "indicator--180f187a-b9b6-4d32-900d-07ae39914868", "indicator--de03c1ae-22c7-4a2c-a79f-ef1d5dd0dd41", "indicator--2ef19b7a-1ad9-4e71-8010-24c34e53a9aa", "indicator--9634c80c-5b43-4514-ab67-3248f333521b", "indicator--ee04ce3c-33ce-49cf-b8ba-31cc0aa5735b", "indicator--804f358f-d8eb-400b-8215-8a1b19157ba8", "indicator--ebd6f64c-a73a-4726-b4b5-9857d73cac0a", "indicator--9e46c6e5-36f2-4b6d-a9a4-4356ffc96732", "indicator--b9b3e9f1-b030-43a9-ad3b-8d97880af06b", "indicator--07024085-94de-40ae-b89f-418a6999f863", "indicator--8153d62c-653d-4575-ac69-26c6935f8065", "indicator--ca86d08a-a4ac-477f-9ee8-547387e83cfe", "indicator--23abd6af-579c-49f2-b84c-f68af4a37fc8", "indicator--b717cf1e-a293-44eb-ad7f-5850d050d40d", "indicator--ab32b766-7967-42e4-81d2-de6e24b9bd7f", "indicator--0dade959-c3f9-471d-be0c-bb9350f8c744", "indicator--900e095b-7af7-4bd4-b373-e2088fe9fb32", "indicator--e37882a1-4f9a-4ca1-afa6-ba5192ada743", "indicator--9ef30fae-099a-42c1-8636-add98b48eb2e", "indicator--5d199dd8-cc43-4d8a-b6e4-b41273f2a81e", "indicator--4323c624-9f03-4fba-95b7-7710acab6667", "indicator--ff947d9a-a8b5-4009-92a2-fc76fd7a6ce7", "indicator--eae6079c-fd0d-4427-9b97-d7034f674272", "indicator--a7a170b0-9117-4518-8b19-607a06213790", "indicator--eb27e905-61c8-451b-8625-70039a9340f6", "indicator--b9049e28-0887-4ce0-8daa-d121544b5739", "indicator--5d76ff89-ea91-4798-9185-314f5b00766b", "indicator--52928c30-0bc7-4214-afee-8f770575c0c6", "indicator--de8ba857-02b5-4ac4-ac30-ddf7ede33362", "indicator--724f9efd-bc19-4c60-90ef-3a671aa4d2f7", "indicator--6eba23f1-852a-4453-8109-7975b4c504ea", "indicator--a7096ff1-e55d-4c3f-8f44-b0cb2ed8c8a8", "indicator--91b02df5-4f13-4c0b-8f0f-bf69d278eb5c", "indicator--abfec285-8ae5-4106-ad91-421e3d4d6c6d", "indicator--8382192e-2e3b-48cb-b8ac-27dc3bd9c7b1", "indicator--93282a5d-e700-4036-afa4-8566636dcb8a", "indicator--290c1276-59b1-4ce0-81bb-fabfe2434852", "indicator--8095687e-8588-47a4-a948-fe6eaa54d845", "indicator--54bb46cd-e7f2-4fdc-a5de-a589d9a1c20b", "indicator--5341d3d4-992b-4631-9a8f-2cc42e7c2f5b", "indicator--61df8507-fba3-416d-9dfb-9c3342d39f4a", "indicator--4378b81a-f296-4151-b844-a8d3a36f941e", "indicator--b9aa2e44-0064-423a-ae40-2a5e127acce2", "indicator--cdaa1036-d62d-45ba-bddd-951e1c8bc4f5", "indicator--3c40ff84-24d7-4f71-8042-1567562c13c1", "indicator--09492af5-884a-4a18-bb53-f6170745be1d", "indicator--dae35a64-c873-446a-8529-6cb2e3bdeb8c", "indicator--b4283624-7807-494a-adae-f141b59a8e63", "indicator--22889937-8c78-48a5-9c9e-e9958183ed06", "indicator--63b8533c-ada6-4c47-8517-fa82e42d2d23", "indicator--895c73c8-70d0-4881-9afa-deab2b7e1032", "indicator--f1049530-e0e9-4ad1-b1ac-6497348720c5", "indicator--7a47beaa-f76a-4807-9d33-7d7f8f74ecfb", "indicator--f67757df-b1d9-4f1c-a3eb-7b63ef07baf3", "indicator--3739a902-c159-48a0-9898-812ff5005a0b", "indicator--1f62e21d-a0a9-494e-9eb6-611a61c739ee", "indicator--100d2bee-ebee-4d07-b238-2faccf11cb3d", "indicator--83f25bdc-4e87-49a8-b838-01f4fba23e9c", "indicator--2e1e8573-0988-4daa-a72a-b68ff57f7ff5", "indicator--5868d2c8-7fb6-4a55-8d6d-26cc643721d4", "indicator--0039ff81-0692-440d-945d-bf09553f1517", "indicator--8aa8c5a0-0498-40e7-b9d3-87c78bd00ba4", "indicator--9b80d040-6df7-46f4-97d3-5b414be7339c", "indicator--7b17c96d-4ff1-462d-b559-0c0ee8f1f45b", "indicator--6cf1abc8-baa7-46b1-9a74-77ef6809ee2b", "indicator--33d8e84a-b93f-415e-bd46-52ac00f1fb1a", "indicator--2db4edda-83b5-463e-b7bc-d1913e19f878", "indicator--a109e661-caca-4b42-afcd-25089442652d", "indicator--4b44bef2-2bbb-484f-b146-f600a2cf3fda", "indicator--ec2f48f5-59b4-4d80-bff0-8840f625042e", "indicator--b7d74a2d-5f4a-4907-a455-336221510562", "indicator--4d4b2366-fb1b-4b78-868e-2c8a074045d0", "indicator--156ce5bf-475f-43ba-be75-cf3b5484cf94", "indicator--751414ae-ade8-45e4-bf30-571d1b67902f", "indicator--a1c8fa14-5ae9-4f98-83fd-29497655cd89", "indicator--e57dc74b-e4fd-4286-9d6c-6b6006bfcdb0", "indicator--6ab0648f-76c3-4e61-83b6-94a32a670596", "indicator--082409ff-ad08-4c8b-bd30-f82afdcf6de0", "indicator--df3b3e3a-dc4d-4237-bc20-0224f75347e8", "indicator--c9a9604c-b13b-4050-b816-c3d2abb2cbd4", "indicator--6764a20f-a0a8-4d17-9912-b778a4d61e6f", "indicator--2c59ea64-635c-4a4c-ac79-8f9a23c32cc7", "indicator--4c681f47-b1e1-4e26-845c-857b7ecdb9ab", "indicator--1435a167-f128-4811-9361-a9ee08bb002d", "indicator--c001d3f3-3caa-4478-9c8f-a282aa41b027", "indicator--3490503d-d73c-4745-b8cc-6a846b8af59f", "indicator--4eb91169-999e-4bd7-b060-0ce1796521f2", "indicator--6073215f-3d8d-484b-a1a8-35d11c57d27e", "indicator--a5462631-4cc6-427b-a5a1-86079b7c8f9f", "indicator--4ccb022b-c860-4e88-8a25-4c7f76ca3fa7", "indicator--468fd94a-0ba4-4c67-ac0c-0b7cf80b68d4", "indicator--c7ec4e0b-e134-481a-8bd9-96860c6d31b2", "indicator--ee106e7f-c889-4386-956e-ba189ff4b025", "indicator--6a55bcb2-2c61-47c5-a532-1b709d65efb8", "indicator--9d1c4b57-2b8c-47b3-8129-9b2abfd6b328", "indicator--18f308cf-2459-4d14-a86f-b28d1864eeee", "indicator--827029ea-d9be-42c5-9700-07ed2c08f719", "indicator--b702650f-13fe-475d-b25f-75dfbaba42e3", "indicator--55ae6890-de3f-499d-939c-a6ed4cd4054b", "indicator--d5b21373-1d15-4a51-af95-472fff05359f", "indicator--b54e11f1-e50c-4edc-ac3e-aee5d26f79dd", "indicator--45b59e14-10cf-46b0-a512-a741b27061f7", "indicator--46760250-1ee8-4ae9-af5c-4a407f6ce805", "indicator--d3b9ce9b-a7f3-4a65-a046-93f3c0ec00e1", "indicator--7fb8cbe5-a2bc-44b3-ad0c-13b20d615002", "indicator--0624e09d-12eb-4380-b1c0-ead71f33a200", "indicator--57050c4f-c029-4627-9935-05cc30844b7c", "indicator--77815d0d-8fa4-45dc-ac61-96ca0873135a", "indicator--14577dfe-1db1-430b-b70f-39079f22573f", "indicator--04c9d7fa-9871-42ed-ab21-a96341e5a0ea", "indicator--4ffa58ed-e673-4943-abb9-5499531ed150", "indicator--7ecee485-2a1f-4a44-8920-7cbdd61e6258", "indicator--66776659-defb-40ea-8356-505bdc03945f", "indicator--13370914-de62-4eb8-9cbc-1fd3867d7a9a", "indicator--2c9d3977-7e22-407a-9f24-125b227b9a68", "indicator--ce9c22b8-3202-469d-9a7b-9241466a2a77", "indicator--eef1a334-99af-4fc1-8fad-4443d94d154a", "indicator--419829f5-827f-4b55-ba6d-1a403f480f3e", "indicator--644b0315-bc0e-4bfe-b197-5745d8935c02", "indicator--98ed3dd6-3b64-4291-af18-f1bdd9d6ad4f", "indicator--e531d38c-d5dc-4501-908f-ade6d1a75cca", "indicator--0d435561-3236-49f3-a337-59f50ff03cd4", "indicator--44f6ea5a-97d2-4a4c-82ab-bad74dd43485", "indicator--0786c6f8-3ef4-4ffc-a47e-57b87c095614", "indicator--d1edbe7f-39c8-4260-ae8c-e286185212fa", "indicator--61aa891b-3a49-497e-aeff-b423b62d92e8", "indicator--00bdcc6b-9eb2-4f9c-a09a-ec79bc473f9f", "indicator--c8170bb3-c054-43eb-a233-e5ea70639b50", "indicator--8ea3ab56-6592-4617-8496-0f41be177c66", "indicator--c99a2a73-2bdb-4f55-b7ad-c19eb09915ef", "indicator--b8388036-3672-46da-8527-a5811b4afec8", "indicator--b24f86e9-353a-40a4-99f5-4786357af73d", "indicator--1db743f8-74fb-40f6-a677-03caf1fe1bbc", "indicator--84c6f3fc-ea03-43db-ac58-b3abc6c6798d", "indicator--a2fa0860-03e5-4800-ace0-1415ffe82a78", "indicator--afa77928-7884-4731-bc8e-3414ea188eed", "indicator--759beda3-1ba6-47ae-bfcb-97488c514ba5", "indicator--f55d974b-6f73-45ce-8159-ae9b63a1ba7c", "indicator--6476db25-e918-454d-a00e-ae330b607c5c", "indicator--3b390fd2-a75f-4952-8d17-89c996db80b9", "indicator--659022fe-1018-4cd1-83ab-253c7a58779f", "indicator--21ffa77f-eb13-41d6-bf0a-88ce784ae89b", "indicator--822726dc-3016-4c08-bbae-fad31615c3f3", "indicator--ed976f41-45d4-4de2-86e5-3f015e081bc7", "indicator--2158534c-0522-4e4b-8746-698ba36d7e98", "indicator--10ffbce6-d4a2-44ea-8785-94368c3328de", "indicator--eaa83249-42f0-4a5c-b4c5-c4eab0dd981b", "indicator--ca582567-8c22-4917-b4aa-651287938272", "indicator--e55278c5-52e2-4cbf-b434-117013e2983a", "indicator--83784c57-4c5a-4336-aed5-705e4a160a14", "indicator--d8739dcf-b21e-49de-a223-1440a4d95fb3", "indicator--9a90f486-2d80-460c-954b-6338717d4464", "indicator--faa2189a-d289-46f3-a05a-913b12ee33f2", "indicator--5310ee53-8a76-472d-ad2f-895405331d89", "indicator--d5b500b2-bdf6-4d62-80c4-23176d702ca3", "indicator--61e55c3f-6479-492f-a97d-4375bd69faa5", "indicator--9d053cbd-a70d-4cdc-8929-650972ac901b", "indicator--4ae17ab3-a8e4-48c9-8233-0743f52c089a", "indicator--63aada88-4c1f-49bf-bddc-d68e09a95ba0", "indicator--e587d8a4-2467-4373-8b4d-402ebeca5b49", "indicator--2aa32cbe-f7b9-48a2-9072-6782a34b2477", "indicator--85630383-2cd0-4148-9492-1c598f5306a7", "indicator--e9bc8d50-897e-44b1-a461-d06bdf33b8ab", "indicator--79907d51-8c0f-43ff-93f3-1d0b39a134e3", "indicator--b59c1264-f0bc-4794-b0be-b8c68f39223e", "indicator--83891001-3df8-4061-93f4-083b2acd5769", "indicator--55a8c600-313e-4d69-a918-f5d43df10764", "indicator--5c3d41a4-7e18-48aa-9a17-4e78bdf25d2c", "indicator--89cd72b1-ddb7-4051-98d5-3cbdb48c5203", "indicator--0cf13be1-d80c-4dbe-b91a-8f1a74e6fa14", "indicator--54ef65fb-4afe-478c-a760-8e236a77023e", "indicator--595c2f4a-0826-41b2-8006-c5bfa5c560f9", "indicator--eccdea00-05a3-484d-8a6b-484584e075a1", "indicator--049d5ae7-89f7-4a38-848b-e7a40f477a16", "indicator--4e025d96-dfb0-4039-bf6c-81e56db2806e", "indicator--f671ff78-dd3b-4e04-8f46-acdea9ab9441", "indicator--9e857571-c4c0-4434-9611-8030d0d83496", "indicator--46d7adc4-8f0a-4131-a885-18dc8fae1f11", "indicator--a4438ecc-aa9a-4d17-9d1d-63edd6354c67", "indicator--5eacab30-904a-42eb-b74a-8742cf9cc954", "indicator--4939a821-a91f-4349-921d-402e58f699df", "indicator--e993c5ff-7dea-4850-a5bb-6494d71300ee", "indicator--19be3025-1a08-45f8-9f75-f4d40277f1f5", "indicator--1b9715d7-cf8b-47b9-906f-bc50c3e06cb2", "indicator--dee6c4f6-8ca5-4103-862a-7fe22db24328", "indicator--733bf514-32e0-4d90-9cd5-692920db1c6c", "indicator--9fdfe241-0dbd-45ad-a136-417f02d24bca", "indicator--a015e23e-1e1b-487f-8d20-b8f8b016e3ff", "indicator--adf0f2fd-ad2d-4607-a996-b3b8ccda046c", "indicator--6f01b0ca-3323-4387-8779-5de555bc6d60", "indicator--256d1874-a8ef-479b-83ec-25ac1eec1daf", "indicator--a49fcb21-b0b5-47c7-870d-56eae220f64b", "indicator--c2a3a83e-62d0-4e87-a06d-18cd2db9ae39", "indicator--fbdc66e3-be90-4edd-aa4e-4667093f176a", "indicator--f7cd3962-f393-4f74-94e3-e6d278cdf653", "indicator--464db98d-611e-42f4-8a83-231211bebed9", "indicator--aa840ec2-13f2-44b3-a052-be95664bd948", "indicator--bff830b7-fa72-4a43-a85f-d935235196a8", "indicator--dde8689f-2f62-491b-a70e-8eea6d4b293f", "indicator--a93fc6b6-eab6-460b-9fe7-caea8329b891", "indicator--89bb310e-6f68-4d45-a29f-6a24a2fc609e", "indicator--7d086bcd-6c9c-4264-9f8b-8bc488fc0b2c", "indicator--8bc95a05-5f02-457f-bc3b-c9e8f9eef002", "indicator--c1ec6eef-3695-49a9-9d0a-e67e15fe08b5", "indicator--ef92c20f-f86b-45e6-8841-d71227c6ae93", "indicator--afbd7537-f683-4f8d-99c1-21c1c0b9e368", "indicator--2767af6a-fad4-4a78-bf48-f17bceb2460d", "indicator--29b44ee4-3d89-4ea2-a9a1-a17f42361ac7", "indicator--db45fbf0-a0a7-496c-9c49-2e4d514be3c3", "indicator--650c821f-ad76-4f37-a134-4876ccad63a4", "indicator--611c011e-fb72-4698-8471-84870f9d2c91", "indicator--f33d2f7d-6911-4b6c-aa9d-3209a184d919", "indicator--df4bb684-48f9-4b63-a395-758aa4e3de01", "indicator--1008a0c3-c10d-40e2-a382-53d2e7924a33", "indicator--eac16b65-3398-4167-82a8-8eb79759a053", "indicator--bc908904-4a8f-4e4b-9563-ea681c9f8146", "indicator--2f0ea578-7e41-40a8-a4dd-bc56d7e6d275", "indicator--0fe92bb6-1ddf-4e46-b52c-d687351c40f7", "indicator--a8287120-f3bb-481e-a79f-70c90eac8dcc", "indicator--72f88a29-fd59-4737-b39e-45cf011538c5", "indicator--cf9a52c6-bb15-4e05-a2bb-334a10a8272a", "indicator--ac94a637-cd13-4689-8810-f41f5c79ee1d", "indicator--bd5d9450-bee3-42b5-a097-7cc3a85a4c83", "indicator--4a5a7043-2ed7-4079-acab-6ae897e5a993", "indicator--86fdfd84-679d-4509-b2c2-2e21713299bb", "indicator--2d47bf25-2aa1-4251-b439-36804c89e953", "indicator--98a488e6-90a5-48db-8184-1b7306845b03", "indicator--f88aa02a-52f8-4c10-baf1-6f79fe92768e", "indicator--251891ce-cd4d-48cf-97cf-9152ddd6712b", "indicator--89a87f31-2a68-47d9-938b-fde3d929accd", "indicator--bfa88090-d8aa-4226-a71f-d51df3398a4d", "indicator--0544a89b-8353-4b4a-ac7c-488c69ea3f81", "indicator--97eb033b-e58b-48eb-8b1c-c71f76fff4da", "indicator--fb931539-be1c-448c-b906-1f28ba64663b", "indicator--7a828e69-d21b-4ebe-8ee6-211256b56db1", "indicator--8278b1a2-4a18-42d9-bced-ccc592c3182f", "indicator--fac4913a-0791-4381-a498-651ba0a291cb", "indicator--4b8dd242-5eb7-4900-a69d-88104b46d184", "indicator--821d96b2-4d5c-4b4f-a8d4-f720bc639c97", "indicator--ac3450b6-15e0-4ad0-bd35-756d922d6339", "indicator--6bb1f19d-1a01-416e-b18e-ea080d4ee3ea", "indicator--db4b913e-2476-4d0a-8e5d-6b91bcfd0ae6", "indicator--aaf47bc7-5c66-43b7-a476-61f54b901ff2", "indicator--d42797f2-058b-4490-9c5e-d0a8afee6b72", "indicator--8a3f8623-4076-4252-900d-f3727b1b4ef7", "indicator--f487bbce-4655-4cf4-858d-48ef90383dc4", "indicator--bad86d67-5ab2-4425-8cdd-b405e33e688f", "indicator--0a0db14f-5ed7-4cb6-b520-d330848789ea", "indicator--36878dcd-2b25-4ded-8306-216be765edc6", "indicator--86da62fa-ccf8-49cf-873d-effcada69dc3", "indicator--87b15411-97f7-4a2e-9fdf-b694f83e6248", "indicator--7e0d1349-50da-4fd7-be11-5ebe78ecf55e", "indicator--596af8f2-5c33-4a5f-89ee-5595187cf540", "indicator--5bd40a93-f69a-4092-af89-8e9f8b8db49f", "indicator--6616271c-0028-417b-b04c-cdebc107fa4a", "indicator--aca1e48f-03c3-4722-8d81-b43ce5c90e38", "indicator--c291f7a9-0c6f-428d-af22-ab6a738cd643", "indicator--f7054598-bc48-424f-a45e-ee6afd11af6e", "indicator--9dc517cf-4f6c-4302-88ee-5f81ff8cc36e", "indicator--3a2ff2cf-8c46-47d4-bfe9-c710b2396328", "indicator--d8669af1-dbc8-488a-bf77-30b6336bb744", "indicator--ab7d71ad-7d31-437d-bb74-34cdfe5abc00", "indicator--33cb736f-b3cb-453e-961a-498c87deefe2", "indicator--1cd4e1c6-c251-4c28-aa1a-94af3649fd0b", "indicator--37af24d4-bbbe-4797-bd6c-5312f79a91fa", "indicator--e532309c-05a6-4f4e-bddc-ffa5a361d485", "indicator--48cf7f96-2f0c-4224-852c-b2a3b310ccd7", "indicator--1b9b121f-f0bc-4b25-bd55-24c4ac1acb90", "indicator--acc8f5c2-8ad1-44bb-abea-8c71f80b653a", "indicator--6481b3f1-3ebb-41dd-8fa0-b15166808b81", "indicator--8eb8fe32-1cf0-4133-91a9-3f53491ee10e", "indicator--0407c1c9-c17e-4372-8b78-8100c195173b", "indicator--3aacf12b-013d-4d29-b94f-117ed37bffe3", "indicator--62accf95-a12f-4c76-8652-a276f670a812", "indicator--042bf007-5526-4e16-b0ac-c7a547fabcf2", "indicator--3ef612c1-be2f-4081-8145-f19dbe7a09fe", "indicator--60aa01c6-5a9c-4d89-b5fe-cff939d49343", "indicator--76b58098-a366-4473-ae79-3e6334420c4c", "indicator--53c95269-479c-4f93-9535-e7ea957ab3d2", "indicator--09a6dcb6-e6b3-4375-a723-b9c7aedf3c76", "indicator--3e10b800-782b-4962-9aa2-cfe37496632d", "indicator--dcddd554-ae13-47f1-9ab0-275e818fa9f5", "indicator--a24bd70b-dd94-4b02-bdd2-0a13ddbd846d", "indicator--c9d4f8fc-f663-460a-883a-828900367ae8", "indicator--65c381a9-7d4f-4ca9-81f1-276a16721b03", "indicator--40420324-da48-49ad-ac20-62732e75daf2", "indicator--05fe9b18-86ec-4474-b0b7-c49ffb48e152", "indicator--d3272631-a5b2-4532-86d1-b0f22d675d68", "indicator--40d55ca5-9414-449b-ad43-e2171ce9570e", "indicator--eee12be9-d7f5-4e71-87cc-e8c6cb799a49", "indicator--63be117e-42c8-40b3-a44d-8ff422840b7c", "indicator--bf772db2-d2e2-4af9-960d-a437cba5d363", "indicator--41a2d05b-7a9b-4b08-975d-ef7870818831", "indicator--020a0a2d-1060-4333-b05a-95dc91634cd4", "indicator--da65672d-446a-4ff1-8c09-29c00f300730", "indicator--a5482d7e-7f28-4899-828c-19f6522c6ac8", "indicator--8283bd32-9532-48ce-9d13-5479fbf7eb0d", "indicator--94a289b8-0344-4b81-9c00-38b2598256ef", "indicator--55952e73-89c7-4d0c-ae7e-4b9de5cfafc8", "indicator--bc167514-5454-491c-b5c8-379f05604f5e", "indicator--c6e8da37-6923-4223-bc26-220d2a824c2d", "indicator--7fe9bf77-5267-4778-859c-c736c8823a36", "indicator--8fccb520-05af-4c20-b7f9-ce259e6f0153", "indicator--2edddc7d-873c-4e75-867a-3b7555fe9e43", "indicator--05d55ccb-0030-494c-9c15-bee89d6326c3", "indicator--15f341f0-b31f-497b-b5f3-7f15ab10dbaf", "indicator--dfdb642f-9c17-463e-95ab-5101166ae967", "indicator--40857325-0ddc-4b1e-a923-ac7fd1d054e0", "indicator--b6d95066-d8d2-4097-bd83-772239427e62", "indicator--194e03d6-8396-4bcb-8ecb-51110532eb43", "indicator--b907380b-124d-4174-8a56-f6cd5a34a02b", "indicator--a254aa94-c5b5-4caf-9b36-4807f0b9be25", "indicator--e7357dc8-7a03-46eb-a650-e6e1d03227ca", "indicator--ba752a7e-12f9-43fe-b32b-6787d0f09289", "indicator--b9937e26-90ee-4dca-8284-feede82f68a9", "indicator--d3e3e1cb-f353-4d54-918f-503ca9c190b7", "indicator--c6b76355-5316-4f0b-8454-b5f3e7647912", "indicator--ed5e0684-9c55-470a-921d-5b30b7db771e", "indicator--7c966692-db03-4814-a5d6-442a80a58cdf", "indicator--8e952b71-2fde-477d-a8b6-f80b844a2ba9", "indicator--b52bc450-c818-4f77-aacb-049c51e933f8", "indicator--d276f13a-356d-49a1-bbf0-d29d83a2f73c", "indicator--74e66030-13c9-4dbf-af12-8b2d717b1529", "indicator--6e1e0eaa-b8a7-4b3b-9692-1a8c985ee7ed", "indicator--340e74fc-a5c5-4e5c-bcea-ff7f4a9a861b", "indicator--c92d9f8e-10ab-40dc-bbbd-7bb4c80e61c6", "indicator--a7b0f28a-7881-4711-b466-0ad6b9d56fe0", "indicator--3f306412-4077-4467-a20a-149c67fb5a91", "indicator--e4552a38-13b4-423b-8d17-a0eb0ba91578", "indicator--0d43da83-c820-414b-b8d8-6ad3a6565a9a", "indicator--840c17cb-1759-40be-abcd-df2df00b0bd4", "indicator--cb11a28c-8115-43ad-bdea-9e380c6a3a36", "indicator--141dde3a-7d3e-4b04-9729-83d00a43951c", "indicator--6c02e909-cc66-438c-bd28-8de6c70676dc", "indicator--a8963ca8-c449-4728-a496-23df6021e8b5", "indicator--c645058d-94e4-4a1b-9c81-61a3a9ae425b", "indicator--56dd83ab-8118-4195-ace6-1f52c343ad1b", "indicator--ee7d662a-f430-45b0-a7cd-88c09514c77a", "indicator--f82aad87-42d7-4881-ae11-585438becf02", "indicator--c545a042-8cde-4a34-b93f-3a108e01c5fa", "indicator--2c56de37-147c-4c24-b767-79553a538fff", "indicator--9d739142-2bf7-4282-a5fb-32fca2753461", "indicator--65de7d4e-b282-41fb-838c-007703a6fdca", "indicator--4ba1b3c2-3e9c-46c0-a381-6b12eb4f230c", "indicator--c8bca6d3-4d93-4fb4-b407-c4340989921d", "indicator--ae85d232-e375-483c-96ac-2cb92ca3e4c4", "indicator--c78776c7-2ca0-4565-bbd6-ebfef8c7222b", "indicator--94ebbac1-d681-44b7-92e6-6ec3769e46f5", "indicator--3b391f1e-a7f1-4592-bab2-f7b6287fd364", "indicator--7c3362ef-f1a4-40a1-b7aa-23b6da58408e", "indicator--b2739930-08e6-4bd8-86c4-aae31a9ab503", "indicator--f0f8397b-4517-4ff2-9478-ea15bd3e9d8b", "indicator--e9bfb326-ef04-4ec3-9f9a-e52cdac05bda", "indicator--858936be-f8a9-42bf-8211-f5673f787e57", "indicator--799246a4-252f-4b68-ba58-4a285606496b", "indicator--934ea2c4-0b6b-4235-b0c9-aebb5baa06be", "indicator--931fee1d-a989-498f-9922-b2c75661c468", "indicator--b2f1d7ca-f45d-402d-9e9c-a09d074cb477", "indicator--96623a2c-873c-433a-aa37-601d0f0cc991", "indicator--5cfbecf1-76ff-4384-8309-309cc8cad1ef", "indicator--6b6ebb72-df10-4170-bfe3-e1c45c95b499", "indicator--5155a8a3-5182-468c-9f23-a2de5cbbf972", "indicator--6faacc0d-7da4-46bf-939e-82c557a7ffc1", "indicator--70a1580f-9157-48c7-b38e-316a21049783", "indicator--2dd8039e-6886-4d9c-95fe-648537631b17", "indicator--60c9aaaa-55b5-4fdc-acbf-f3ae511991be", "indicator--2214eb3a-ff5b-450c-aa39-b11fa1eaff74", "indicator--ac302daf-b35e-409a-9188-39bff19ff171", "indicator--1ce1e94e-a465-42e9-b5da-8756276578ce", "indicator--991bcb80-8305-495d-a2cd-5bad5670cdc2", "indicator--8191dac5-aec5-4bff-b169-7a04214926b7", "indicator--8489f683-5a54-462c-b16a-92b64adb4500", "indicator--97ec7098-7c53-4aac-bd7a-d408b52c6ae9", "indicator--bd33f185-4b3c-44c5-815c-c679d62970d7", "indicator--8219ca23-0177-4439-84f9-17504383f20d", "indicator--1be1a931-b467-4bf0-a425-31fa6da1620e", "indicator--394963d5-e439-49ba-ac53-bd7446add436", "indicator--8da17d5c-8463-444b-9527-84832096b76c", "indicator--2e8fc91d-95e6-438b-ad79-392411b8731b", "indicator--405821d0-ec4c-4a0d-baea-27f3acea7657", "indicator--60455430-607b-4d33-a6c9-6c1a8f95647e", "indicator--81ddcf8e-0e0d-47e1-b517-54cbe5885c2a", "indicator--a4ed1223-bad1-4316-b1ab-657ccb814fc3", "indicator--522c3430-077a-461b-a7e9-d6e674877570", "indicator--e0435adf-3780-4981-a939-00f7eb91bba5", "indicator--f3e1cdb3-62fa-4ad0-8b3b-ee8e429ec7bf", "indicator--58f666fd-989e-4822-ba67-0dd6a85f3f29", "indicator--da572e43-74cd-4688-b482-c49342a180a2", "indicator--22837797-d139-4c14-8ee1-ddec1c2e99da", "indicator--dcc840b1-9db9-4c9e-a05c-2cb1d1d77254", "indicator--65cd330f-5698-4928-a477-b2d16955f201", "indicator--963b85b4-b1cd-4c43-a45b-22740df23941", "indicator--f71de108-383d-4edd-a3b9-767a7f835e1e", "indicator--69ccbb84-61f6-4824-8904-0f68c91c3e5e", "indicator--40156b85-8d6d-4734-bb95-4f03820cc2c5", "indicator--b41a2a49-4161-4f80-a05e-d98ae58f1da1", "indicator--6066c2a8-69a9-4e98-bd05-ff865d9eac0d", "indicator--bec3bb6f-effd-4dc4-be0b-b7f98252bdb9", "indicator--5557ee54-3564-4626-83b7-eff03b7c1ba6", "indicator--530fda9b-171e-40ee-8549-11c55673cfd6", "indicator--d3cbeaab-164d-4017-888b-99bba5039428", "indicator--ee967e85-fd7b-49a2-8fbf-0c1d1a814215", "indicator--71c4becc-58a3-4347-b5d6-2b958063c698", "indicator--f1642eb3-e7a0-49e7-b135-a33450101d22", "indicator--6fba0f13-20b7-41b7-9c53-b39d5576456b", "indicator--449db81a-dd9b-4294-b9e0-013c58df7324", "indicator--818e129f-6bd8-4c46-9004-4a6962a5fd66", "indicator--f58731de-7027-4daf-8df4-df4134820b71", "indicator--8ca370f5-d21e-418a-a8c5-7692d5694ae9", "indicator--f96981bb-dff3-459c-9f3d-9b556953dbc0", "indicator--e6f57538-b657-4106-887b-ed159e8b6fa2", "indicator--dad00366-a72b-4518-b908-9d1ed5e3e3c5", "indicator--d5f61438-243e-4194-b36b-d61cc64599e9", "indicator--67c4e69d-f34b-40a6-9a71-a6c568c4afcb", "indicator--a0450c68-0bf1-4bec-b6f1-969750d31f9e", "indicator--85b3efab-aa9e-4a52-80ae-ef645ee296f9", "indicator--103b1330-efd4-4f09-b1e4-6ffcfec2b78e", "indicator--a3433b1b-4d20-4966-a9cc-ffe1d5c6b5f3", "indicator--fbc45612-e1ad-4a53-b6f3-2a6a88848676", "indicator--6f19d7d5-3126-49b8-9a4a-fbf0fa316839", "indicator--4406674b-d30c-446d-a011-d19d3cbc4d7c", "indicator--0d4c42f7-04ff-4bbe-9082-ca4151845245", "indicator--491f63ba-3263-41c6-a5e7-acb6255428f1", "indicator--1a8e09e2-e000-42dd-b214-f2046066aab3", "indicator--95f09c67-402c-4a95-8734-fda79c187034", "indicator--f19fed4f-1a44-46fc-9d4f-62f2055904c5", "indicator--9a579581-6b2d-4e67-8122-7e24521f2346", "indicator--119fd4a5-a95a-41d8-9b38-99672e3ebe4f", "indicator--165c433d-9869-428f-966d-a4a4005746cd", "indicator--e1f1031c-024a-4a32-85f0-b263c103af25", "indicator--974c51c8-e9ef-4a22-84f4-1a804896fded", "indicator--f4838b03-0254-497a-b3ea-3d95d78855ef", "indicator--e46e6029-8e2d-4c4e-beb7-e8eb4020b826", "indicator--4c5d2c41-7ada-4780-a6d8-ab8f800b8603", "indicator--c11a9c4b-f064-4e02-a169-2fc41348e73c", "indicator--23c3e4e0-61a3-4844-9212-abad3c9762a3", "indicator--59eed76c-3c7c-4000-9f02-3925b24386cd", "indicator--5109333f-1a42-4faf-9ed5-cf1241b9bb45", "indicator--8030d368-a4a2-4223-9fe1-a88a49463afb", "indicator--375758fc-2c5d-49ab-aec6-b91e51e581ac", "indicator--2f97ccd7-8975-4078-809b-8912c75c7296", "indicator--2777c3de-8c24-4256-bf2e-4ae032542ceb", "indicator--98ad3ffb-7742-4b32-8f27-f323b56a0f6b", "indicator--78728bf6-c388-4a5f-b5f6-6616a5624ece", "indicator--4267bdb0-51c5-4b65-ac33-e0239eb7849e", "indicator--ec0e4dc8-10de-465f-ac11-e2a65b44819f", "indicator--58ff2308-68db-4d61-b8d8-f4118171cdb1", "indicator--28715de6-3cac-414d-8d66-4bd0ac9bb9c2", "indicator--794dd665-5f4a-4cee-9775-95699e4f9e43", "indicator--bad318db-a854-42b3-8f88-d6ffdccb54be", "indicator--e3ac1392-b088-4518-a5fb-1e2d92308c8e", "indicator--2645d1e2-eb7b-48a4-8cdb-644b1b12fd5a", "indicator--ad639d66-f0f1-45b4-b4d6-61785ca8ede7", "indicator--12736f04-f612-4289-9b31-cb62994fc9d6", "indicator--1c787880-1563-4f99-b71c-61276054a1dd", "indicator--67825a43-f6f4-4176-ac3f-ddc84a060416", "indicator--19362cee-f7f3-48ee-98d7-9df6e7a24b01", "indicator--e55d9533-4b95-40a0-8193-ffb90993568b", "indicator--2d379667-872e-4121-a10d-9ae29a690af2", "indicator--90084be3-5fc6-4ad5-9e4c-5a301e648c34", "indicator--485a0556-91e2-49cb-99bf-aea1badde0e1", "indicator--706e0d20-9cbe-457c-adf4-3ba254f12a97", "indicator--5e9bb7b9-9bcc-4c05-8d2a-4f6985d2f727", "indicator--cb93e51f-6ba4-4b84-a5b2-7362dbfe478e", "indicator--d7bf6aec-3645-46dd-9c40-932029b9e73f", "indicator--a544dbb5-ad1a-41ff-afcc-608551305170", "indicator--63a4c3ed-02e5-404d-b4f1-64abcc5e14cf", "indicator--c2ee70d6-991b-467d-9492-ff360d52e8a2", "indicator--c979003d-83e9-45a3-bbcd-956ff6f5eebb", "indicator--6670ec37-b02c-4253-b337-7162368c22a8", "indicator--b1f1f8a6-f44e-492a-9092-13284bee1874", "indicator--5413cd4f-355e-44b2-b3be-adf539fc92d8", "indicator--02964273-df9b-41d5-aac3-f2c9cc0e8623", "indicator--b4416177-804e-44a6-9843-6d4785f018b7", "indicator--932017a7-dab4-4859-add8-842df18ff1a2", "indicator--240c9abf-fb91-4237-bf72-e5b01ba2479f", "indicator--fcecf58d-494f-4e62-8d03-0bc0311efff3", "indicator--685807b4-04ce-4189-9ec4-6103c774df1c", "indicator--9af90c8e-75cc-4653-8a57-f9e430d14a10", "indicator--bbc3f4d6-6001-4195-964f-7dbd522da2cb", "indicator--ec26a3f7-1bc8-4f1b-91f0-c5b26f014d11", "indicator--cc476aea-afee-42df-a2ef-852fabe04675", "indicator--c70bd96f-60f1-4460-9c22-63fb93341a1a", "indicator--4b1c8d72-a749-4948-9085-4aee9c725752", "indicator--4b7e16b8-f44a-4445-80a6-751185b057d2", "indicator--029c89e1-d782-4152-9198-01787a33e74c", "indicator--290ae234-195f-44db-9e2e-337c30a4104f", "indicator--f0d4e9d5-a62e-4b12-a72e-6c23be82a291", "indicator--eb1ab0f4-2147-46b4-bb8b-96bd85ee216a", "indicator--f321431d-589e-4eda-8269-f83155857723", "indicator--c51f9e34-f3e4-41eb-879c-133777cbd218", "indicator--aca6fe61-e066-40cd-8e9b-b54b39de0dfb", "indicator--d4a3af6b-921a-4005-8b0a-bf5197999dff", "indicator--237b37d4-4ff4-4197-9d0b-6183d481d693", "indicator--135875cd-acc2-4e76-8ea8-3efac3db74c4", "indicator--ba322a82-8e24-4add-a05e-c80ed8ed3ea2", "indicator--305619f0-64a0-469f-b4d6-275eea5a3838", "indicator--71ea2f8f-3d5f-415b-9c27-721b2b186d36", "indicator--9e9eb0c5-06c9-4129-88c2-cec43e4bdab6", "indicator--ad2ae5b3-0b1e-4c1e-bdb2-2fd8ad7c7bed", "indicator--e87a2b84-b104-4893-a4e7-3e75755ec7e2", "indicator--ac764165-6503-4e71-a0b2-5ccc4ad402a2", "indicator--537afcdb-9363-46ba-9d4d-c61b0892df16", "indicator--e0159ae8-e21c-4850-8ab5-5488d4998c4d", "indicator--89937b0e-ae14-4034-8feb-ab07e6dec02b", "indicator--ceae323b-d221-4789-95fa-05ecbfc74781", "indicator--3f3d0a74-a679-4eb0-ae3c-fad67da9dbae", "indicator--47a44c26-2255-4f4b-9d4e-1dbbf7df031f", "indicator--a59465dc-6d78-4e85-bc54-d853df85e439", "indicator--6893b6a6-4aab-4fc6-a626-9e76ea7291b0", "indicator--fa0b80e5-aa40-414a-8daa-3290220c9a69", "indicator--f670b162-aac6-4ffc-a7b0-10f1acc1a74c", "indicator--858f4a62-84f6-4242-8d9b-abf227249dde", "indicator--2c9a3797-9d4c-4ae0-ba55-2b93e39103d4", "indicator--adc2f220-7a6c-44eb-89d2-586cf9ed5531", "indicator--0bf8d23b-57c0-4b7e-ae47-23834a5ce5a5", "indicator--68fc8f43-27f7-4867-a4d7-d34539fe674b", "indicator--0d659909-6177-40f5-9428-9abcdc75f393", "indicator--f5f71e17-b0cf-419e-b299-789ed9166b7e", "indicator--20c2af82-a95a-444b-ac8a-d34bc4ba149c", "indicator--65c73c6d-20c2-4a12-a572-3de9e0afd336", "indicator--a42534a1-b453-4703-a077-a42dd52ba674", "indicator--cbebcc59-bf06-4eee-afd5-ee4e7f293477", "indicator--404ea64b-eb30-40ba-a8dc-94a4576c106e", "indicator--668fc8fd-a326-466e-91ad-17ef7ea918a6", "indicator--4a26145c-6fc7-418b-ba66-db0487b89ec0", "indicator--2796529a-7405-4a65-a882-861471c95145", "indicator--c5c7ab7a-7ae7-4bdc-ac87-945d38b14413", "indicator--282ec95c-be51-46e8-bb92-9237c342d8f4", "indicator--c5d88e5b-61b8-4a01-b5a7-76f6f10cd29e", "indicator--a4a6c9ad-e6a1-44d1-8c89-2e6cae218207", "indicator--3ed21067-d40a-4441-83cc-e4f68775db93", "indicator--35f8f2d8-2c54-4c00-9d71-a586f6502681", "indicator--fdb50f34-2e14-4811-bf13-4861cb13c2c9", "indicator--4b8de381-2c45-48cf-971f-f572e10ef76d", "indicator--f75a4bd5-4b62-46af-bcca-fbe5e0081c26", "indicator--a38d4291-2a98-4554-a6ef-42a8b266300f", "indicator--cbea30a6-ad16-4243-b863-a2ac69c60da5", "indicator--e1dfca47-05ec-452f-b017-95b921e809d5", "indicator--5a7aa255-715e-4715-8e9a-c6ba834e639f", "indicator--e55352a3-e11d-43fa-945f-5e5ec5762333", "indicator--b90bac05-bc6e-4314-92ee-da8e7031b340", "indicator--82b7b993-755b-410e-8c8a-80cfe9568e83", "indicator--f3a0e755-510e-4e84-bc30-ee7580f5de3e", "indicator--78f2ee0a-c5d6-4cde-b37f-803eb796146b", "indicator--2425ae00-4203-470a-9bc7-8c79bb56270d", "indicator--b1a7062b-4695-4a8f-9f07-b8ddd1e25916", "indicator--ec2e8ec8-87de-4f04-8b50-9563cc624fc1", "indicator--c89bba1c-23fc-44ff-ace3-80f4201b99ac", "indicator--85cdf8f6-84f7-42d9-bab9-8bd3fb3f342f", "indicator--0283f9c2-fe1c-408d-8e21-fb5fa5dd3542", "indicator--b65ea154-90ea-4776-8982-125061a1b86b", "indicator--06d5610e-e195-46de-a758-43dbee0e89fd", "indicator--74791f92-f6bb-4a99-a004-f35817f2a4e7", "indicator--3839f7b8-4c10-4b5f-9530-ce2f7008e99c", "indicator--8694948a-9013-43af-8f04-e6d41263b8e0", "indicator--d20e9cf3-bd55-43a0-bd5f-e3380e6f4191", "indicator--ff3d3610-fbbb-48a3-a3bc-84be87b12af5", "indicator--2d304f23-c2de-47e7-bd39-8d834b1973f4", "indicator--04995d2b-f310-4bd2-bef0-84996483f755", "indicator--1ae3b5d4-b0bf-4a67-96e0-fafcf1d860b9", "indicator--9e7de905-f8aa-4be3-8605-0ed8744fbb99", "indicator--643ebdd3-173b-43e6-b9e6-56717807099a", "indicator--14993401-1f65-49a8-a0ee-e22a8d9a811c", "indicator--b9b2d371-55fe-49aa-88f6-73a58bc4fa3d", "indicator--d16c2693-0e21-49e6-a590-51ba94eb3ca0", "indicator--81acc09e-e865-4533-9090-155c68ee3465", "indicator--1082feeb-c80b-4818-9063-3835851e90f1", "indicator--59b4aaed-0def-4f5c-9dc9-6b04b7b2a3cf", "indicator--a8bf3c57-71ef-4992-b66e-c1f75c7de326", "indicator--26556611-bfa0-4787-80b2-7a1f0e62811b", "indicator--9b71185a-cd91-478c-a8bd-aff95ee4ea71", "indicator--e46f5d58-cbf8-417e-bfe8-79531d161869", "indicator--0adbbf4b-7449-493e-8316-fe2c55066279", "indicator--52c4f4ac-6e1e-4b31-951c-9c1b8e1778de", "indicator--0373c37a-c213-4878-9963-7abf59214467", "indicator--dff7faa6-875f-46f9-ace1-a6301fb108c5", "indicator--81fe8d45-7c9f-4de0-a91a-31d6a00aa8eb", "indicator--a4f365de-7639-43a8-ae17-ed05d71e5844", "indicator--cbd11ad7-78bd-4f6e-b3a2-76f51e3b0daf", "indicator--f51b80cf-6b83-4f4a-9f89-d975f3087f96", "indicator--1492545a-32bd-4eed-b605-d2c983f6245e", "indicator--bb4576f6-d173-447a-8e4a-170ec8dfa025", "indicator--3cfd3efc-f355-4872-adbb-9c2bc8542b22", "indicator--28eee2cf-df4b-415b-b5c1-b9e38c06f42d", "indicator--ce96ef6b-fc55-45f7-bb0a-c98404700b3b", "indicator--a4bbf8e1-2d9a-4870-b284-0d38c13feea6", "indicator--43a2035f-afd9-41f2-ad36-da56248364db", "indicator--9f68ed45-45b7-4981-9143-bc38b04937ec", "indicator--24e95531-ba44-4f76-b355-d0e87606a97b", "indicator--74035121-cd25-4875-9635-64f5ab6c8287", "indicator--f3dfb8b1-1a7c-4d0c-8db2-c100b730ce25", "indicator--7b31d03d-1863-42b8-9142-aeb9e33f7a1a", "indicator--cdf28d43-1fd2-4f0a-b0ba-6539ec057d0f", "indicator--12f09d8f-30c7-42b9-9fe6-81017f1622ae", "indicator--111ca2dd-4080-4064-a94d-ba81e31798fe", "indicator--fb3aff12-d18a-48bb-94a2-54441d8de641", "indicator--ea4618d4-7c1c-4586-878d-aae162d6d9fe", "indicator--f19aad48-bd89-4a0c-b630-8722c0b7d5b2", "indicator--7d4ff11f-626d-4ff6-8573-b342ce6aa0de", "indicator--4234067e-6123-4b0d-8234-11ca3544619a", "indicator--b1ab8555-1238-4e7d-9d29-fd881f664253", "indicator--5d014b63-ed98-4ec2-b1c1-1b36e3623135", "indicator--ffb6ca5c-bf59-44ba-8b9a-a9f89e03a606", "indicator--f70b941d-8123-496c-9a54-92c4872821bf", "indicator--b536c9a3-a407-42a6-89a3-97d08968e694", "indicator--6b5fce41-fcc6-4558-b80b-e1095dbe3820", "indicator--abe8dbdd-d07c-4794-a4aa-406f43fe3b7a", "indicator--57c6da03-d872-4307-b7da-249f72641dbb", "indicator--6710f945-6593-45e5-9624-13e6cc4cf9c0", "indicator--a67d704b-e80d-4442-87c0-b80baedc41d7", "indicator--a398ce60-779d-4f68-a40e-b52bac1121da", "indicator--ecfb4b5e-e22d-41b0-b8cb-53fa51bd786a", "indicator--ed74621c-b2d8-4737-b44a-7cda2e3c2fc3", "indicator--4df00ab5-64e7-4bf7-9b8e-1732813a8ffd", "indicator--d6098f8d-9247-4780-892c-01ce709468a3", "indicator--3b535701-78fa-4339-a6d5-a7ecc0f2b890", "indicator--3dc1e0f4-31fe-471b-9a0b-2608ca651567", "indicator--8c6e62f0-9620-4d09-bddf-125d0d505f1f", "indicator--5ac478b5-9017-4d14-9136-74a0bc36a492", "indicator--fce33ba8-8fbd-4a78-9f03-bae87be3a228", "indicator--b4a8bafe-d620-4ccd-8e3d-c72576c15012", "indicator--3b3600e3-e203-4a05-aefc-bab9c553af8e", "indicator--cbce4c22-d330-4f73-86c0-daf3cd91a214", "indicator--0ae2cfe8-ef3a-4176-876c-458ba72e36c6", "indicator--9107a5a8-f813-454f-a096-38a8fe873bc0", "indicator--c1e65b12-e6e1-4f6d-8ec6-68d82dae0628", "indicator--17c7bbbf-db09-4e8e-b838-3c34ba188328", "indicator--abef815d-578c-4cfe-bf41-965e39560113", "indicator--2076e36b-4aa8-4d3f-967f-14d069da4457", "indicator--4fa0995f-c480-4a7a-8f30-5a6987f84e46", "indicator--286ad1ee-2ff5-44b1-a23a-e3f596c088ab", "indicator--ac857453-175a-49f2-9c0e-ed9aee30a825", "indicator--67f6dbb9-affb-4660-bd78-70b458615ad0", "indicator--8df4f227-bcdf-467f-a276-1019f65be8c4", "indicator--67d0dc89-fe9e-44a2-b5e4-ca340f97a418", "indicator--f9de5b87-a711-4eaf-b3e8-0df5b3abed61", "indicator--db7be68c-d622-4894-95af-984f69243815", "indicator--a70f73de-0ba0-41d3-ad47-2a0a81177904", "indicator--c61799db-e8c5-47a8-8ad6-9f7d7748df4e", "indicator--f392c20a-876a-43a6-8609-e0026b4b881d", "indicator--d32a2234-ba54-4c94-926e-4f59826cf7f9", "indicator--27acadcf-6c4d-474f-a2e3-b6d54b74be23", "indicator--71580d35-1b5c-4a14-a622-cbe5f8ac2a6e", "indicator--dd87ea5f-854c-4251-8110-b4489d4b6564", "indicator--7b34072b-6bba-490a-b0da-b4bc2d02c1f0", "indicator--cc00f32b-d66e-4ca8-a2b5-fe1553d61872", "indicator--c4d679e8-5356-42a8-94bc-2d091d6d2d47", "indicator--2065744e-293d-4a61-af53-3e4283c6fa22", "indicator--c40572bd-1fc1-4805-9dd1-9bdb0f2cb2b7", "indicator--65db25f4-f68f-48aa-9d2b-f63df73422bc", "indicator--ef0fe775-1875-45f1-a05e-678c3314c7e1", "indicator--1d5d04e5-1c7e-4751-8e5d-68ada06f630d", "indicator--46a365e3-1910-4cc7-a538-8384efbafa54", "indicator--ad9c1c0c-9c6d-4260-a373-359e30d3ca40", "indicator--2d199f63-af4b-43aa-90a2-a41df45a4bdf", "indicator--6eecef33-3a06-476d-993b-c9ecf4fda71f", "indicator--af18f23b-ac31-4a8b-b2d5-b0c8edf373a7", "indicator--8c41e02b-0b3c-4be9-bf09-fb4734739e46", "indicator--a94ad79c-6177-427d-bdf1-fc5b97eaa311", "indicator--f68fbdae-d0be-440e-aad7-effa355a41d5", "indicator--229eedbf-1c1c-4bea-a838-183e7bb9caf4", "indicator--80d708ad-dc3f-4f2f-a8cc-35f0165405fb", "indicator--8776b3e3-7c71-41a2-9469-a054fd46174f", "indicator--2f03dd00-dee6-4f86-952b-d9c86c315817", "indicator--880a74e8-2318-4ce9-ae59-811fec654aa3", "indicator--ff47d17b-4ed5-4b29-8395-a11efaa6cdfa", "indicator--2ec63f9d-4588-4ecf-8991-b34d4a06451c", "indicator--dc10a2fa-41ff-4b37-914e-79620153fe96", "indicator--d81ce2b5-6b4e-41c5-9d79-1d6fbd434174", "indicator--4aab38d6-bb88-47f4-a1fb-0ee3fdcca164", "indicator--6c870d25-90b7-4ada-9f9c-a4ea03bc7f71", "indicator--2e123cb4-fd0d-45c7-8cdc-a8f6f1eca84f", "indicator--01254994-9cc8-4a3a-8b33-435d7bb57064", "indicator--1d168712-7cb6-4559-bf0a-8888ab1d12dc", "indicator--9bc91d29-4d2a-4a57-945c-2c65ead73b2b", "indicator--5b6de72b-3d42-44e8-9a7a-fcbe2ef261c9", "indicator--98383c2b-61ee-485d-a65b-9df608f7b4dd", "indicator--780f26c0-f45a-45a3-8e79-54d6980458a6", "indicator--a6602fb5-b83d-4a64-b067-3e97499dbf8d", "indicator--b7eaea25-539f-4df2-ab0b-606d0087ba9a", "indicator--101eb55e-f73d-4b1c-aa8d-bcc84d591161", "indicator--9df81705-d7d7-4e83-99c5-a12283c568ac", "indicator--035f98fa-51b2-464e-ac8c-064979394930", "indicator--5c6cee52-0998-4e46-8b62-75cb55e42911", "indicator--78fe69db-b0eb-4799-8523-440b6e408d92", "indicator--db451a55-f5d3-4ea1-8b58-199549bb628d", "indicator--b5a2119c-469b-41a2-b6c2-8bb90186b12a", "indicator--2bb0909d-c3c9-47af-84ee-fbe735c1602e", "indicator--a62097ff-6492-489f-86e1-6b06e23c0888", "indicator--95530b71-1de0-4b46-9284-c846382edc6b", "indicator--6121079f-34e0-437e-972a-4f4e31294e14", "indicator--8eeff1b0-0430-4753-ae0c-5803b1926072", "indicator--56bb7bee-9b60-4cc3-9238-1a19611d71a5", "indicator--94ea09b5-3f69-4874-8bf3-00c1b512a0bd", "indicator--2a634389-cbe6-4ec0-ad6a-83ba5f05e803", "indicator--fb5352c9-b76d-44e7-aff6-e74ce3a186b2", "indicator--a752050d-40b0-4801-924c-af67ed22f387", "indicator--3689b7d8-1ef6-44e3-a2a0-1df77b5c3433", "indicator--5fdca360-1def-4fa6-81e3-32cfb4d48b19", "indicator--cea707c4-7c1e-49d2-ad84-09877e2af7be", "indicator--92854985-ec61-40ea-8968-0ea21c28e584", "indicator--9d76992b-d68a-48aa-a242-eff7236f12dd", "indicator--771e49a1-2a41-4c2b-9d5e-ae9484a19d63", "indicator--85cb5566-5029-4b73-8f8b-334a0c9ba4fe", "indicator--0fa0eec4-d70c-4ad9-986a-13c0568da78e", "indicator--4bf816bd-f73c-43dc-b18a-df3e35697e65", "indicator--8c069c1d-e730-4038-8e2b-b1c481e82c5f", "indicator--b759d301-8cf4-4516-85ac-45db617ad903", "indicator--b85d285f-7fcd-4742-940c-9698f12347d4", "indicator--fa1aa8ce-a505-401f-9f8e-a9c208963eb0", "indicator--83eb6058-800a-4109-90de-329eb6daffb6", "indicator--0216edde-01b3-459a-b1b9-18482e0b345b", "indicator--14725dd9-fdd5-454d-8bac-c20e954de9a5", "indicator--63d4492c-a99c-40f7-9b7c-89d1d9a9a680", "indicator--5f6c5564-eaf1-4696-a8ed-41364f0f4c20", "indicator--adfd5982-4873-4bb0-9640-af7e0c7dd264", "indicator--229e6f50-f0c3-4879-93d8-f5fc36ce880a", "indicator--76a6039e-1e4e-4dd5-89fb-a5b54cd15a3b", "indicator--fc1a4f82-96b3-4066-8524-51acc9ee2551", "indicator--ed49f088-d650-4777-a86a-2b494ca129df", "indicator--ce971ea1-8962-476e-bd7b-4045fd308330", "indicator--f098a552-7573-4960-b687-254f633a6be7", "indicator--1b9ace66-1b39-4b50-ad31-4b12a6b19c9c", "indicator--29e42168-faad-4f5b-a975-a83c085a19f8", "indicator--9309a1b8-0856-4a3d-95c4-1754450a1cd5", "indicator--b37e398e-46a3-4f1c-ae74-e697388962a1", "indicator--5e932f68-5cb0-47fd-95ed-78ae6f6355a3", "indicator--d3070d5a-85ee-4c89-bf5b-fde418ee0d17", "indicator--f85d88ac-e7cd-4cc1-bce6-6e7589c40a94", "indicator--1ee8be2a-3563-417d-bdf4-ba1980b694d1", "indicator--c7d239b7-bf86-41c8-8a16-4df213311cdd", "indicator--79932179-5ae3-4ec3-99cd-a5baffb55aab", "indicator--0d6e8e8b-e167-413d-8395-3f63618d3be1", "indicator--26d28670-73c2-4edb-b28f-6c16b2867f8a", "indicator--4e12b3f1-036d-45a2-a887-b663cd0d478c", "indicator--7c4daea3-ca6f-4d6e-bafd-fdc74c9211c1", "indicator--59f0f6c8-068f-471f-ab53-71b855f0e2cf", "indicator--986c2228-87fb-48b2-8600-b4dc0798a7a4", "indicator--9c4a484f-aed3-4e30-ae42-bd21680323e9", "indicator--a135adc5-9adb-4617-ac73-a3b0fe01b178", "indicator--3e7fb375-bcfd-4235-92bd-d3630e647f36", "indicator--3059f668-f224-4cca-b2bf-7f770ab70d00", "indicator--f48b9337-21d6-4b3f-b6a6-6f7916572952", "indicator--88e1eb89-7362-461d-b27a-d44fc9a5f4c4", "indicator--78465e65-2c26-4448-be1f-db0f9089a412", "indicator--a719d3de-0b3e-4c7b-a9b7-e55043c71202", "indicator--ef0c81b5-77bd-4b92-88be-4d3aa1b1f0db", "indicator--ba3fe06b-d5d5-4549-afd7-36c2e9d75cbe", "indicator--2bad6cff-7bb2-4de0-9a62-72bc2c034867", "indicator--2d4d9bbd-708b-4aa5-9ec1-537972e990ad", "indicator--8b85f51b-fa1d-4f0d-8f0a-a9c2967ec858", "indicator--73a31c64-d44c-4ec9-b1e3-8ba8423334f8", "indicator--8809b86a-dadd-4775-9ca2-0854dd705ce0", "indicator--7d53cb89-d88a-4ebf-9520-cf71588857aa", "indicator--d2841f51-c480-4e88-8c66-89082c87f126", "indicator--3d444242-80c8-475f-81a9-9b8c8fcea37e", "indicator--e6f98360-f17e-4ac0-bf1a-a9ce2bcda61b", "indicator--4fba32a9-e3dd-42e8-a4bf-98ef7554a4aa", "indicator--e289219c-6804-406a-84f7-4d84db3fd125", "indicator--1840cd93-e320-4ca8-ac0e-00497a2b6223", "indicator--c83821c6-2f32-4cb7-9a46-0a5e63d32ac5", "indicator--964181fe-fdd4-47c8-af0e-0ea553e978aa", "indicator--80d3cb96-4e1b-46b5-b6fa-fa046fd85463", "indicator--392e3f93-7441-46fa-9d89-85d6b31e9b12", "indicator--686d0b0d-b2b7-493c-a2c9-61cc9f8e9b94", "indicator--74878b07-dea6-4f83-9fda-59c4ac598023", "indicator--31593631-f80e-43d9-9493-8f1564abff9a", "indicator--08a019ac-38c4-4f82-8ce6-a7a37ab19d52", "indicator--7efc1e41-f29e-4ec8-9b3e-2feb7f55c160", "indicator--45590e89-a747-4580-83c5-f5dc1c9f590c", "indicator--42f5f495-32e7-4aa7-b6a0-b0f6a6d2cf7b", "indicator--39a1cb7f-732a-430c-bc0b-056642479c64", "indicator--cdb964c8-3a62-445a-b8d6-6b9e3c88f7fa", "indicator--bf9ab998-3cac-4d9a-86b4-6be658eea5ea", "indicator--241b9eb0-d8dd-4ee3-b639-749fa431b7b9", "indicator--fb97f52b-369d-465b-814c-1b6203a5e358", "indicator--93ce57b2-7348-463e-8960-a6e1cada38f1", "indicator--ae6c9c8d-86c8-49c8-b82c-61035f1bd042", "indicator--c749aa84-3cf6-40d9-8e78-c8c889463227", "indicator--18400488-8605-4228-ae9a-04a762c7235b", "indicator--a465c456-8b3d-4627-8d59-7774785e2f48", "indicator--1f682ba3-24a2-4056-8e55-933e17c0681e", "indicator--54aeee83-9f15-4976-922b-5e9da4d843d1", "indicator--7a66dec1-94f3-4ee1-8278-bc1946de75c2", "indicator--269583a6-f1c2-42f6-9362-70e390119ead", "indicator--c0a52e76-dc69-4a26-be92-1d87b1b217dc", "indicator--877ebaaa-c2e3-4678-b34a-12d406242ca0", "indicator--75590a34-6bd6-4196-aa4d-7f4c8497db93", "indicator--3bb3cd4b-11eb-4a22-b621-5da658469cef", "indicator--2e20b501-3937-4b57-9561-9ad595d6c7f1", "indicator--4bed732a-fa1f-4a1c-898e-a9695ff0c894", "indicator--f59e0c33-a0f2-453b-885e-97ef9a098586", "indicator--2fe16e57-6fa2-4d8e-a3b9-a51af24ef66a", "indicator--8db62b81-226b-4e7d-847f-391338c4a0cc", "indicator--0272e215-e9a4-43f0-ac53-7525c7d35833", "indicator--33a41060-ea23-42f1-8cb1-fbd64ccfd25f", "indicator--2683c546-61f3-4305-bf62-fd3be10f0544", "indicator--04e05f6b-3bb3-41d2-bb2f-ea47e33cbf2d", "indicator--1ad88a8d-3a41-4f29-bb2c-29a9ee30a2d3", "indicator--0edd0829-9d41-460f-b170-3a6e5ec15350", "indicator--3a668400-c1a2-4d09-8df7-b0ea02713b1e", "indicator--72415827-35be-4aee-9403-ad21d6da94f6", "indicator--a3e83f2e-a871-4b2a-aaec-879662088964", "indicator--a20c46cf-5159-4f3b-abe0-a359f89a256f", "indicator--44ac77d9-f492-4bad-aecc-e6a9c27139d1", "indicator--e387d371-3733-42dd-98db-0f8f9e062c9d", "indicator--53d3d20b-c4ef-4142-9d5f-0379e5c7294d", "indicator--075a20ae-7315-43fe-a85b-ab6b042878a1", "indicator--5019afd3-c83d-448f-b967-fabdb4f08883", "indicator--ddfcd380-28fa-4494-91ee-6b75e9b435f9", "indicator--c4aec7d6-b299-4323-b277-a85a52b3b9a7", "indicator--2bef7452-a49d-4b5a-a603-9d724d635f17", "indicator--07bbc128-6914-413a-88d8-6d57bbe7842b", "indicator--ee59d1eb-d9f8-4aa4-9f3d-c67ca524b7f8", "indicator--2fd7970a-a196-4162-83d6-95719889bde2", "indicator--33d7de05-2eb5-4044-82f4-d3e8f8908976", "indicator--7df75cab-f199-488d-93c9-21a0833d4df9", "indicator--68639f30-097b-4cc7-b2e9-2ce4091caebc", "indicator--831f4e87-9dcd-46ce-bc14-c8e1d6a8bb26", "indicator--d8f34fd3-d43b-4387-89c5-ba3422af0655", "indicator--db535e39-e3de-4c1b-a3ec-6cae81766aa7", "indicator--225a61e0-b900-4de9-a8d5-901ba43b05f7", "indicator--c99a70e4-3ab6-4e33-ab43-fd1c7783eac8", "indicator--c4ce832a-5364-4952-9400-4c0634dd5b0c", "indicator--b8a08ad9-3337-4e90-a407-23b2b3d9cf46", "indicator--c71005d3-d8bc-4e67-bf52-6791ab0e7fd9", "indicator--4b8738b4-c7cd-44db-a971-c441f4d30919", "indicator--13b89163-c3ea-4613-a2ff-8b507db42b96", "indicator--51f229b1-83d8-431d-ac97-9ba952c0ce0e", "indicator--149a37ac-1c81-433e-b8ec-3a68b91d8213", "indicator--d7c130f5-9de6-4e1d-b328-614a67f74b85", "indicator--4d8cff57-ee27-4524-9639-0cc9fded0536", "indicator--bf83fb9b-ba92-462c-9b96-3cecb44cb980", "indicator--f3992ab5-4804-4a37-820f-4f91ef907b7d", "indicator--ed44522a-7d56-476a-b2ce-a14eff07bca3", "indicator--5c9b1b8a-92d5-4317-8a05-884e4a5398c0", "indicator--c9c7ce2b-53a0-4ddd-96fc-fc823721b7bd", "indicator--3dcd164c-58dd-4ec5-92f0-d0223af11ee9", "indicator--2b2ead92-3aed-431c-acc3-f18a1855a13e", "indicator--15c286e7-2d2f-464b-af4a-70436f4023bb", "indicator--870e6758-a03b-4272-bc19-f5891782f5fa", "indicator--bebbeb90-51c8-4179-9aac-af5369e4a2ed", "indicator--d742045e-5b39-435c-b158-3f336ff4afd2", "indicator--f41415f2-d1cc-4fbb-a7d0-9a8a3fc1f002", "indicator--c04ffdbf-be8d-4fda-ab9c-fa0daeab4bbb", "indicator--0276a1b5-3cee-4e6b-942d-ffa2f0d51c88", "indicator--cc37aa87-bf2c-4f12-b113-0213b5706dab", "indicator--759d7b09-f0b1-4ad4-83d4-fc9ce507d462", "indicator--d8b0c940-bb7f-4821-9fc6-402169138ef8", "indicator--798060cd-0dce-4ad9-b485-ff5fa436a98f", "indicator--cc73a3e4-946a-4037-83e7-dc5858a8b376", "indicator--6802f6e0-ec87-42a5-aabf-84042f760859", "indicator--29424767-2d99-434c-a316-3c4a68c8354f", "indicator--7bb901a9-ae7e-458e-8082-adbb08fc327b", "indicator--0810ce8f-7e1f-45ba-b98d-23ca7e1b5242", "indicator--fc8a4274-1373-4ab7-a4cf-bd9292d786d8", "indicator--51ef4dc1-0578-4e97-8898-f7d291de46ff", "indicator--561d7691-86ff-4286-b989-2882d6c3fb25", "indicator--5c667afc-ed50-4c69-a029-b7a50ec1a92a", "indicator--8a18a8ef-3eec-4d59-af49-98995f5e5621", "indicator--1f8b207d-4a80-4ef5-ac6c-7f0a98dde697", "indicator--247a6693-3371-4ed9-83d6-cdf0f1bfa1ea", "indicator--91ed0278-06f9-4068-b4c3-ea2f1ffae2a4", "indicator--2b483a8d-d213-496b-b478-664f1e461c73", "indicator--0c3cd938-d813-4d0b-8bed-0417fa647317", "indicator--88c18014-26ee-4aa5-a2c5-14ebe42d7ec3", "indicator--bc2572b4-67f0-44eb-a489-22d584590d1a", "indicator--000eac0f-5261-4edb-8a2c-d973d397fc21", "indicator--9557ace3-cd4f-4055-a5a0-7003d9c5b472", "indicator--2c769e1b-4116-462f-9057-07e42b4fde73", "indicator--63110d84-8196-4554-ad89-f04220bfa3d7", "indicator--ca7c477f-fa18-4f63-95f5-0ab149fdab30", "indicator--da05b64f-c939-4c76-a5db-044ae047419b", "indicator--74db6ff6-0835-4511-abe3-6b429a182cc7", "indicator--d1cf0b82-b01f-4e80-a3c8-13e4298b4b16", "indicator--b9fda1a5-fc21-40d8-aecb-36d1a801f3e8", "indicator--37b0a14e-2706-4a4d-83d1-f900f52d36dc", "indicator--734435b0-f3d3-4025-a792-abb16856b006", "indicator--23f31c91-ad82-458d-be9f-f469ddf7f610", "indicator--5e533980-ef4e-46af-9eb3-a1acd44f73b1", "indicator--ef00d126-a82a-44db-96a2-df15bb96da4c", "indicator--f1cb490d-b3fb-477b-a94b-4082d2c4ac64", "indicator--0213352c-18d4-4f49-81fb-5d659263191b", "indicator--dd772a78-393f-4dff-87ec-a4e594fe5a36", "indicator--80fc06e4-696f-45c0-9490-d1411b3267a5", "indicator--de75ae9c-25b0-45c8-a434-ebea007f836d", "indicator--9b32fa55-e6b1-4517-9371-fbb98c2364b1", "indicator--5de46d86-b1a5-44f7-bc0d-0af268ae098a", "indicator--d0bdd880-c0fb-473f-af04-e3f2f308aa02", "indicator--ece3bc25-c453-4cf3-b22d-90bf6b54f6f9", "indicator--e571a59f-bbfd-4695-9e5a-4b4d94f23adc", "indicator--db8e2252-e112-481e-a784-80f0c5cffcb0", "indicator--cfffa350-d882-432b-a747-57835c1dfed6", "indicator--5c07021f-ebc1-46e4-bd6f-64528dc48183", "indicator--bd6abba6-e78c-4aa4-b8e8-235aaf93279f", "indicator--eacf18ce-b1e1-4031-9fe5-03d813ad3f04", "indicator--c9aaf0bd-89c6-46b1-a795-cab27ec94534", "indicator--0fb212cf-3674-444d-938b-a919f8a6a2b1", "indicator--bd8a675b-4c3c-4510-aa04-4fbd9011e6f3", "indicator--30305ac3-8fb7-4c10-a894-66d2cfb6386b", "indicator--270af45b-b46d-43ee-99e9-a96e5ad9a902", "indicator--d01a2c8c-492f-4720-a66c-5eb255d4079d", "indicator--4f67fd5c-1722-487e-9111-09baf9c41c4d", "indicator--c3f5cf51-5199-4990-809f-e789accba6af", "indicator--fea1ff03-1cd1-4ea3-b32a-01fcdbb2d119", "indicator--8199a0c3-f2d9-4f4d-a86a-1fc23b1b390a", "indicator--bcbd2f92-c09f-4fc4-b32c-9cc23a7b5074", "indicator--215ac019-f921-45f1-a512-b9824db9fb27", "indicator--ab7b35d4-147e-423e-abc0-b1c0cd001ba9", "indicator--c975c44b-1b7c-44d5-b12f-4a9021b592e5", "indicator--ace07b9e-936a-4222-80d3-7ec5371b8864", "indicator--26b8b712-5c26-453d-a041-e7ecb7e83a3b", "indicator--49caaea6-afb2-4af9-9b9c-83c030d8c0cc", "indicator--f585151e-222c-43b4-9b51-4471bf20e425", "indicator--9809e054-9edd-443a-8bdf-b8860ece518a", "indicator--eb82bdd7-c113-4a4f-8611-c6ae6887501d", "indicator--eb3bfdf6-b0f4-45d2-9131-c1f3b2b88346", "indicator--2d48a6ba-9f97-402a-a51c-d25eb4fbabb9", "indicator--22d7974a-56e5-4c0c-abb4-1074f4c40abd", "indicator--5227f0c1-ea7f-4ef0-ac74-f61fe27d9164", "indicator--8705e708-8687-4ba6-ba60-8e9789452ee9", "indicator--f3a60dff-4cc8-4a07-a7a5-a902b35ceac1", "indicator--b028fd0a-eb51-4bff-b87d-d01908ff70cd", "indicator--f8bd7ac5-73a7-43e8-915f-01dfec10eb29", "indicator--271fa86d-5aa6-4f5f-91ff-ea95e41b8014", "indicator--3fdbaff2-4c9b-45e3-8d6a-563dfc44e356", "indicator--c73ee111-6710-41e7-adfc-6666da3d4a76", "indicator--ee901b84-6e09-4b07-a359-949cdecb5d31", "indicator--df95e136-532c-4bb4-9b54-ac8c7872c8b8", "indicator--fd54d353-3033-4392-b2b3-bff918a3a67a", "indicator--ef4680a1-c648-4149-a3b3-823658215dbe", "indicator--dcc7cfda-d06d-48d2-9821-ac66dbf6ddf4", "indicator--5490a6e2-6f20-44dc-818a-a15992df83c4", "indicator--b53d01d2-9abf-4f19-bd6e-1cb7794b28b9", "indicator--1f8e7476-9b24-4414-b3ee-a5cd3f1c125a", "indicator--5e5fc4ac-8b13-4aef-ae01-cfdb3b4fdc99", "indicator--9fae87cc-9a6b-4d47-8f0a-7990412d413f", "indicator--36e6270e-19c0-47dc-96c6-1573adc02e66", "indicator--c7d6b608-0e61-4682-ba9d-659961f50d1e", "indicator--4cfa4825-65a5-4af0-b571-34a582ce01ee", "indicator--14909ba1-b257-4d56-9d38-449339998386", "indicator--71aa7815-6f58-481c-9fd5-4369bd959c11", "indicator--5b3ab03e-d083-4017-8c88-ce6b6621d96b", "indicator--8320fee9-affe-40db-876f-2f7074d3b7a6", "indicator--7d03c969-0bfc-4410-80bd-71a50a123f0a", "indicator--cbfafd45-5535-4e57-89ba-45d99a1e9dc0", "indicator--889cb13c-f8a4-4aac-b586-50b2a04f6c8a", "indicator--a5f304eb-c657-49e7-9adb-ecc0b66f80bd", "indicator--bc532ce5-1fea-44a0-981e-84f31bcfdf5c", "indicator--2d289d84-c10c-4796-93ec-2050109d3133", "indicator--461967f5-fd8a-4b6d-9071-e382d0d42c95", "indicator--02135653-06c5-4295-8448-d074c0a6ddff", "indicator--da05a37a-404d-4418-97a0-bea18d399f9a", "indicator--ee3125a0-3239-442c-88ba-c7a5c1d7d65a", "indicator--83a38ef8-8c2c-4bf8-81aa-4b1dcc0701b2", "indicator--4e75d4e0-b2c3-4dfc-afe5-2aebd24bf57b", "indicator--75e2c89d-8069-45be-ac25-86e2bc72e6f2", "indicator--fe1153f1-c228-42c2-9cbd-60b95a1d92ca", "indicator--68cca0d6-15bb-4220-a25f-4c69df627d54", "indicator--dcecbdcf-2742-41d4-bc60-d15b0c16f756", "indicator--517f7d36-705c-429f-827a-f07dc8f8c65f", "indicator--66683818-165a-480a-8de7-f826ac990ae5", "indicator--02381593-38a0-4838-b4c4-1cb2861b88e3", "indicator--842d6aef-6c27-47db-a364-a3de77cab44d", "indicator--8ee4b2c1-c8c1-44a8-a0c2-705c1c9a926b", "indicator--975ce9b3-e742-4d19-a831-2bc53644b934", "indicator--78d78ef4-fb33-4cc3-8714-b994b1aff123", "indicator--d1ab5d00-a11a-4cd4-b482-d33fa40350b8", "indicator--7f5dc537-013d-4861-96f3-826eebbbb115", "indicator--683812be-ac39-4f2f-ac54-40b314fbbb79", "indicator--88edbef6-80ef-471e-9108-08567db346f6", "indicator--46df4253-79ec-4448-aae6-85aa1b922ddc", "indicator--6b34b578-8f58-4f00-8951-8000cdd993aa", "indicator--87828cd6-736f-4cfa-a368-0dd8eec10d0c", "indicator--26348672-1b10-4759-9afb-3bc9a5755d0d", "indicator--08990287-9470-49c5-8bfd-57f8cb3ac8a6", "indicator--99cea49f-6e85-4e2a-b104-9d9a9565acd6", "indicator--c0265604-3b87-4c69-9339-e571d1f8a71a", "indicator--7456b7c9-cf9f-4293-acae-c3ceeff3a180", "indicator--b12c5126-a726-4e78-a34e-ca8a59e55c08", "indicator--73bd2f3c-6185-427a-b829-51c104b0f984", "indicator--a75d5563-09fd-4628-8887-55f1959b9e49", "indicator--d886555c-aefe-4f6b-8604-73e582268862", "indicator--04d688ca-fc08-4d7b-89c7-00c0bf0c35c6", "indicator--0ef7072d-b7f9-49ab-81a8-f5aa302e8988", "indicator--18aad387-51bc-42ea-a307-567f90f3400c", "indicator--e1811483-9317-4008-9d6b-4d1be354c88f", "indicator--b1aa937e-99c8-4e09-aafe-eb98b56d9294", "indicator--f7b7060f-2135-4d66-9807-22ef14d2c894", "indicator--8ba12663-35f9-48f0-8e0b-11cd5838281c", "indicator--18f2ac47-29f2-4396-bcf8-4acd4e6903cd", "indicator--45a3c966-4663-4583-96b7-7a454f495dbc", "indicator--af8d0e43-b4d0-426a-9a0d-d0268fcdcd57", "indicator--4c5a140a-a729-45a3-9ea2-3bb86e032015", "indicator--ca7cf21b-3c00-4fe7-88f6-e5d6c261cd32", "indicator--6fefcdce-e025-4ba7-a25e-cc2cd6e54557", "indicator--f3b17ecc-4aed-4067-8313-f8fe2454f1ae", "indicator--5993ab88-3bba-4808-a034-d43c5860006a", "indicator--7eeb94e4-457a-4781-895a-27af271f83e1", "indicator--3f5facc4-dc51-4ec0-85f5-337513b257e9", "indicator--a0589683-b7ef-4297-ad86-377c2c216fa8", "indicator--f49390a3-b46a-47bd-a75f-1c41ed52bf28", "indicator--b8d68172-acf8-4944-8bae-f972ae414f83", "indicator--18342592-326f-41f4-8556-d9470a8ce5db", "indicator--532c6b6d-ebac-4392-85b5-ec23c8feebbe", "indicator--241691af-4ba7-4017-849e-bc8e1002a237", "indicator--30a83779-5dde-4d5a-b7b0-e58219440f06", "indicator--7e2b1d3b-8db1-4434-b50b-df3d8f87dc29", "indicator--dbf9131a-ced2-4d9f-af5e-c85ff51628ba", "indicator--272f5446-7fb4-4361-a354-0c76587df90e", "indicator--37eed7aa-a6b1-413c-9498-45d173540955", "indicator--b41b6719-a3d2-4d60-9336-9c986ee18a74", "indicator--67948e89-1048-42fd-b878-27456bc2b96d", "indicator--0c9d9734-3d2f-4d1b-bea6-5523c6688301", "indicator--3993b237-b9c8-4dd0-bcdf-1df391359310", "indicator--ef2ba66b-49b2-4559-9290-d6ed807a7d11", "indicator--e7b20a81-8636-490d-b7a3-cf916a0e96de", "indicator--bfeb20ef-7285-43fd-9525-eaeda5510cf2", "indicator--c8a08df4-6c95-4661-b74a-e7c24fc092ad", "indicator--ad06540b-c585-4de6-8f24-51774ddc2de2", "indicator--a37acb1c-4307-40cd-b4ca-facdaff3ad48", "indicator--ae102536-67f6-4999-803b-a857049c6ae5", "indicator--aab518ad-859e-450c-be74-f11855be1d3e", "indicator--886a2a14-6b2a-4cc1-86e5-de59f28247f1", "indicator--7724660b-3483-44cc-8b37-fe2b6ab78057", "indicator--48493761-0a47-457e-8a25-b5ef2957881d", "indicator--79190242-ca1d-4fdf-a97c-525181516b1e", "indicator--2e93ecff-abc4-4bc0-90c3-466208aa4fa5", "indicator--8cd505c4-4067-4cfc-b2a3-9a68701fa754", "indicator--76152059-3972-4aae-a693-0cf9d714fe32", "indicator--8c320110-ccca-4a41-b84e-e9d285ce19d0", "indicator--fb762e36-ecd4-44ec-ac9d-415ef644ecba", "indicator--7e4aaf8d-a8a6-48cf-8c14-e161d3bb6301", "indicator--5a3be449-6b34-4a30-8652-ba7a8f86fa90", "indicator--547b808f-2206-4524-b6b9-4342eb2caace", "indicator--d3d7bbac-3cda-4e14-9afc-6c535bb143b4", "indicator--802caf03-2729-4d38-a4d2-c1ea70f1fcd2", "indicator--3a39bcf2-bf4f-4f63-bebe-5c4f68edb325", "indicator--c00330b0-720a-4c24-a3e5-09838a023468", "indicator--23ab3992-67df-4dd4-96de-c741c7085aa2", "indicator--8a2985ac-40d2-42c4-a7f1-46cd834e8017", "indicator--b843906f-5bc0-4040-82fa-92bfab3b826e", "indicator--29745827-c7fa-4137-873d-3615b9530ee0", "indicator--d14299b1-4c4d-4c9c-9c73-6b393f41fc2e", "indicator--4aa623d7-9634-4300-b406-28696f125475", "indicator--a9238201-3d85-418d-b900-449543abf9d4", "indicator--6caa38e5-ce16-45cb-8de0-1370ad8009df", "indicator--00e81e6c-8a97-408b-9204-903b77f23edb", "indicator--8a8ab557-5399-406f-b5f4-2b96b43f38ed", "indicator--7de922f0-e598-4c45-833d-702b43972da6", "indicator--8036a37d-3fdb-46ee-b2a2-9802dce64e96", "indicator--307d7bbd-e67c-4dc1-9ba4-fdb066d4f705", "indicator--1bd0d22e-b19f-499e-9312-17bf4f621684", "indicator--da885110-8968-43ef-9e79-e3907cebe875", "indicator--04e6c7a1-b716-43ed-a01e-eb23a1c06636", "indicator--5f9a8198-9f65-412e-8830-60f37f407672", "indicator--19ab988e-e034-4568-be5e-71f00d7a16d9", "indicator--068cb56f-f71c-4e4a-b8e2-926d83712de9", "indicator--c6e8994f-841d-4ee6-b788-b76aec46aab2", "indicator--b8730cb9-c44a-4f85-91b2-65674f429725", "indicator--05e2f054-6c4d-4f8c-97b8-dbdd8d7c3234", "indicator--b6f7dbc7-b92a-42ed-a8bf-45d89f2c0177", "indicator--fddee2fb-e3e1-423c-ba5d-76b333956ed0", "indicator--6d95373f-5d7c-4319-b304-20fd8077fe6d", "indicator--0e78ac49-4465-4280-ae79-1eb06b2c0858", "indicator--ae2b3ff9-1274-4cc7-84fe-c6b2331c9a9c", "indicator--1e375992-5814-48ac-915e-17aeadcd45a2", "indicator--b37e7910-adaf-450b-994f-85236239c521", "indicator--e99b16d1-83c5-4b26-99fe-e609e8dcc9df", "indicator--27a4528e-8720-4b11-9aaf-ed936dd1034a", "indicator--dc9cee87-b257-4dd4-a24d-ac834b5930be", "indicator--3d98e179-e42d-4777-bbca-5b1efe0253fb", "indicator--62155911-808d-422d-be2b-02e5ad3db1bb", "indicator--d64d0811-ec45-40dc-9461-4a3d60719262", "indicator--8c9c7cd0-11f9-4775-8f7a-27daf229818d", "indicator--ea1ecdc7-3c53-40cc-9386-219122289da6", "indicator--a333d310-70ba-44fb-ab6d-2fa6a95c9d94", "indicator--9b4e87c1-28f8-4bea-bb6f-f2f04298b0d2", "indicator--02e4ea59-5aa7-4296-bcdb-2484c0771631", "indicator--d7dfe654-c6a9-4315-bc61-3933c6753017", "indicator--4ff24ace-c509-4efd-a96e-b5893178c41d", "indicator--4c4b829c-83f8-4370-8e82-e313f1010223", "indicator--1e0d3103-0990-4e01-9381-90e104dde013", "indicator--7a1c7649-b3b6-4dcf-ac9b-d8a3efc87b9c", "indicator--d43abd76-0adf-4732-8903-19f9cf3f406e", "indicator--13e4efc5-6614-47ae-88a7-98ecf4b5b72e", "indicator--2c110ac3-6047-40b4-af3f-e3667dbbc672", "indicator--8b78a160-4eea-4359-9189-b9ef9f8f8b66", "indicator--e0fab1d3-d2c8-4c83-9e15-16754b721555", "indicator--93647e4d-f53f-4af5-a87b-9c328206e1e4", "indicator--54a40a38-235c-4b00-87d4-d899cb132e78", "indicator--bb602a26-cc41-46dd-9f35-2793c44ec289", "indicator--1fbe9e63-44fa-4dd2-88ed-3f615cb08ec6", "indicator--2735307a-e880-44e3-86fa-d2a67bbd8ef6", "indicator--95349b56-11e5-4d5a-ac96-0590d874bcd2", "indicator--1f20d6b0-9a1e-4dd8-823d-bcf585d0ca63", "indicator--8c2ea829-e831-4e46-af36-e398ab0ae8a0", "indicator--f2a7ff6a-4ed7-45da-bd33-9769faa00eeb", "indicator--aeb8f5b0-fa86-4a27-883b-0ea2add822c8", "indicator--3beb49ca-d9ed-4296-9be9-7cbbdbd700b5", "indicator--204fabc1-54c0-4fcb-8e1a-137cb01a693e", "indicator--d1aa9714-605c-4bf8-bace-e6ab96c19c4a", "indicator--972d4a50-69cd-4cf3-84c7-e05776290bb9", "indicator--6e98db1e-de53-4f28-9381-f7535a9f162d", "indicator--5bba940a-ebc4-403e-a397-041fa0466879", "indicator--e80ca0dc-1dd9-435c-a294-fb7802380816", "indicator--fe6a32e5-5e4f-4eb3-ac4c-d695116cea2b", "indicator--4f9efde7-18e1-486b-8960-bb85d2988f8b", "indicator--9287ca59-d472-4cf0-9d1b-e240b7de2a3b", "indicator--4ea271f3-2e4b-48aa-8896-67825a86674d", "indicator--f1968f4f-78a9-4c7f-b811-f5158335c9fe", "indicator--d4c3d165-220f-419a-a958-94a2451e3b88", "indicator--0553eb2b-9032-437d-9cd1-b8ee75a3c21f", "indicator--3d677dc0-01b4-41e5-8427-012c8505a9c8", "indicator--12bcc5ee-81e2-430f-af24-04231ca8c491", "indicator--bb0aa0b5-ed6a-4417-b406-f741be0e283f", "indicator--913f42da-a01a-4cca-ac0b-c881e23e6552", "indicator--e94d319f-723d-4381-927f-a99d99f53514", "indicator--68110182-dd82-478a-8336-ea02f4c9b8a7", "indicator--748b7208-a9a8-4a00-a8d0-9a1dfb635ceb", "indicator--d7365dc1-aab0-4e3e-a950-50518292d32b", "indicator--079d701a-bef0-4e15-8f9b-10a418a8f16b", "indicator--a43e417b-5c04-4d84-82bb-ee9a033041c2", "indicator--31394c42-df77-4b16-9db4-39acbfbd1754", "indicator--798028b7-d781-4b7b-87b2-a0857350993e", "indicator--0fe55f89-cc3b-48b2-a781-e5f5da9ea0c3", "indicator--d5e149d3-17b2-4fdc-9e05-202af3bb71fe", "indicator--c8e25ea1-a1d2-4aa7-9543-aba780ce7626", "indicator--6bbd8bc1-9a8e-4984-b974-8d16fe38352f", "indicator--4d4dc341-3f19-4765-8b2f-9494215bea8c", "indicator--696c5900-3776-42d0-a20d-018bcb8eee27", "indicator--541cfdda-c80e-4200-beea-8f8ddbda2be1", "indicator--c2408a4a-cd63-4372-8e3d-86e4ee6da379", "indicator--f1504fcf-c74d-40ce-8260-4b71c6142f73", "indicator--5a3b1b3c-4358-4334-bb68-39aa3c30f5e4", "indicator--b4bae084-265e-41e4-9d22-eafd881aae5f", "indicator--dc289cd0-fdce-4bd1-bf5e-d95e55f8f58f", "indicator--792440bf-b6bd-44f6-bb49-a0127a5068d4", "indicator--7488ede1-4a17-4a64-9aac-42aefca9cf18", "indicator--5d28525b-9aeb-4730-9f9c-b765f4570fa3", "indicator--0a12e053-6554-4d96-8419-2e42b4756a66", "indicator--d0e0c579-96a9-42a6-9de5-f44e5e8be418", "indicator--633938eb-04ff-4d5d-85bd-76fccc84c276", "indicator--f22a7cb4-5f09-48b0-bca9-ac2941a6443d", "indicator--540161b1-0d5c-4506-a094-e650c8a1c56b", "indicator--9a286262-3343-4e8e-b458-4fae58d83eb8", "indicator--2d5d474a-5897-4e7e-9a65-035597bda99a", "indicator--8536e336-e017-46c2-834f-ab86b97e7ea8", "indicator--3816b0d0-b598-4f9c-9e2d-2fc930384f84", "indicator--3509d23b-8493-439f-80da-087db65c0890", "indicator--a74081f5-393d-4ca7-9672-3b8c01116a9f", "indicator--cd82050b-a47c-45a6-8c3c-836abd60b796", "indicator--46795f1b-ba26-4d9f-950d-b9146bb5e6ab", "indicator--bdd64398-4d61-4d04-90b0-8262148ccbe2", "indicator--e090bd10-0c72-483b-b7c6-9a61c84ca3a0", "indicator--0381b05a-eada-4eef-b671-dcf106eba0b3", "indicator--0a43de89-585d-462d-9519-76be19a1705a", "indicator--e5aaefec-df18-4999-91b8-ae961a52f7c8", "indicator--6e0049d0-155e-42c8-bf38-733c6957b9a4", "indicator--db47e1d5-6945-4df5-814d-35c5eddd9ff8", "indicator--27e6df0c-4972-49d7-9d9e-39895be1ba39", "indicator--75f8a1c4-c8de-412b-84eb-afdcfc1709e7", "indicator--081e1aad-c7e2-454e-9bd9-eee715e65a59", "indicator--17807612-f2bd-4805-8d02-e4c0ad37ce3e", "indicator--cce3c9d3-dc7e-4949-972b-fefcbebfb823", "indicator--f2d754f9-5538-4790-b7cc-e916ca141ee1", "indicator--764407f2-ba9a-4fb2-b456-2471137555e5", "indicator--7582bb96-dae0-4304-8575-ba955174d87d", "indicator--bbcbd0cc-f0a0-4dc5-ad29-d3e30617ffc3", "indicator--43d724ac-ae79-42ac-a800-d6cdb617bfce", "indicator--fe9e74b2-fda0-443b-bb37-7eaa0d69ed10", "indicator--a8287478-c79c-41b9-b8ed-4e0d622e61e7", "indicator--a47b561c-de16-4b0f-8dd1-9f22e9809872", "indicator--1838cb62-cf28-4520-93e0-315bf719bee2", "indicator--8348abb5-c13f-4fdc-8fe4-7f9286c82873", "indicator--f57d130b-2e3c-4f7c-a388-102aa1f920d7", "indicator--49dd7389-a1aa-47f0-83d5-97abc0d044ab", "indicator--2648b6fd-d0b0-48d9-b67d-9bbbe1157d60", "indicator--0d06b0c7-8a3b-43d7-acd2-baa85c7b0c59", "indicator--9d35281d-3d1e-42f9-90e4-ea554e9cf2c6", "indicator--a8c86275-3a47-493e-a778-818027ed9cff", "indicator--d819442a-2abb-4d4e-8c24-19c72d8e7494", "indicator--b18ceda6-b615-4905-ade2-072b39507885", "indicator--97fbd486-3c79-4181-979a-7d903e7dd5dc", "indicator--7cf1a14b-1b0a-4242-942b-8381f7b7de1d", "indicator--533e5dfd-f83e-498b-ac59-8a7d3799b60e", "indicator--3fbc8f3a-08fc-4bc8-bad7-94d144a943e2", "indicator--200046fc-af6b-4372-8d6e-6dfe34714d6c", "indicator--f5e64dd9-66f7-44c5-aac1-bc99f355b6f8", "indicator--005cb49d-8448-4f83-b9ec-33859a9a2e1f", "indicator--715b85d6-8ff5-487d-be6b-133143bc38c2", "indicator--6881a9a9-adef-4184-b974-ab3498374ddf", "indicator--17bc241b-c34f-410d-8ef0-7df107edd5c5", "indicator--9bba7712-5d54-4cc3-a554-4237f981695f", "indicator--6cf126e4-f584-4616-bfaf-e4ac85ca2732", "indicator--83fa3282-ffaf-48c5-9a86-01263e690683", "indicator--fd6b0f94-b48e-44a0-b472-c4bd1dc5712f", "indicator--3afa1086-67d3-45c1-9fca-582aab71aa25", "indicator--213fec48-ed5c-4948-82e0-8bb1c5d9e3c3", "indicator--e2aa7db0-c4d4-47f5-92c5-d7cabc6aaa86", "indicator--13f4e4d6-f05b-4113-9cf0-18d9284e5585", "indicator--cb9677de-3667-4f50-a3e3-fe6cc0f42ee0", "indicator--8947aabe-21eb-4a31-805c-c7171e364f5a", "indicator--a65338c1-2d38-47a6-a1f8-662a40e8d316", "indicator--53db5d35-40a1-4021-af73-8dc74e266805", "indicator--176454ed-b55e-4bf3-ab20-1b002940ada9", "indicator--c9569531-c6b7-4427-8cfa-350f3abdfc6f", "indicator--a9756ebe-15c5-4525-8487-53afd220dfac", "indicator--ff3dfe04-4bae-401b-883a-ff964040c7f1", "indicator--b724a3d9-0c92-42e8-9550-e83b5f365a12", "indicator--22581088-e09f-40b5-a321-0c7936d6dab0", "indicator--6827aab5-d48b-47f3-884d-734f2eacc401", "indicator--af5e903e-cec9-46ef-b02e-c01c410afbc7", "indicator--e968438d-b861-41d6-862b-64e7390c7e65", "indicator--1be1425a-6596-418d-a518-6cbe70de1def", "indicator--412b6358-74d6-4eaf-b92f-e63fe0a4eaec", "indicator--d86b1781-f2e2-4f49-9d94-f4417dd97104", "indicator--3435071e-cf3f-4ee3-919b-af327326b0ae", "indicator--123666ea-bfce-4b83-b80c-33b9198edd7c", "indicator--f5e0722b-7efd-4076-b26a-60a095e32434", "indicator--ba6f8557-faf9-4dd8-ae98-4bfbbd43cb89", "indicator--932f08b4-32f5-4b93-a25b-4a9a59d8cd74", "indicator--ae90abd5-45b1-4d3d-9743-e0754923d103", "indicator--29b11cb3-0896-4648-9239-2c65fa9fd314", "indicator--15e7d9ea-6c94-4b8e-9a6c-a5eff5990835", "indicator--721fe101-4a83-47da-87dd-aedfc2ecfdb4", "indicator--aaa22307-b838-41ad-af06-f09a22ef0b48", "indicator--d287e40b-8b25-4426-9545-647559b0cda0", "indicator--fbf69c61-eea7-4988-8726-264c6a5d9b4f", "indicator--2672f3ff-75f6-4bcd-a802-b2c5c0030d61", "indicator--39c1d275-5f31-4b5c-b744-e20b53189d9a", "indicator--75fe06b2-a981-442d-b7b5-aa8b9b7792fb", "indicator--0c16604e-38fa-4269-a3bb-456467b91021", "indicator--1f9e3234-d03e-45c3-a092-611003facd8a", "indicator--9b190b6f-681e-45b3-b986-ddbec43fc409", "indicator--d60e10cd-9735-4361-ae00-8b96a71133b9", "indicator--b8e9c681-2d82-4228-a532-717c1081ea8d", "indicator--b94386e6-e9ac-4805-a17a-29b08187cb13", "indicator--a765e7f5-ee6e-466a-9417-a7e166958dc3", "indicator--ef36b872-630c-4e2c-9137-1e2a48dbd9a8", "indicator--d2869811-e788-4ee9-b00a-57bbc73d4588", "indicator--69e52227-e261-45e5-a42f-02b419548cf6", "indicator--4b4baa38-b786-49dd-a6ed-d6d2a1fbfbc0", "indicator--7d0299ef-94e8-45f9-82a3-693e1aa5fd00", "indicator--33a553b9-b8ce-4b35-8a67-28fc34398d58", "indicator--0ff1f0dc-8584-46a9-a11e-cb84a18f8e32", "indicator--5413cc66-25a6-44ed-80f6-e318c1960f90", "indicator--2ddfee9c-4ca4-4da6-a066-79d914e915ac", "indicator--cda6f2d2-7322-4267-8205-87c221494548", "indicator--e14726ff-1b4f-4278-8e40-23f4232837d3", "indicator--1a9d161d-4b95-4e73-acc8-d6ffcc32343d", "indicator--85e773ac-04c2-48d2-ac94-f286529748d2", "indicator--ba8abfea-86ee-4f1e-a0d9-2ed8cef5721f", "indicator--4ff638a1-74fb-44f3-b00e-72f9d196a6a2", "indicator--25abb8ad-0a56-493c-a647-d3bce0da9e2e", "indicator--c861b98d-e8e7-4fd9-a346-d6b706bae858", "indicator--a5abdc99-8017-459a-8542-7f9986b4aed5", "indicator--f78f8532-7ad9-40aa-b6cc-2346cea82bfc", "indicator--1cbeb887-46d5-46ac-b5d4-a53bfebbbd64", "indicator--95e05095-a9eb-486d-9bad-037fa63e654e", "indicator--8212a6f4-59e5-4943-9099-24a61dc69168", "indicator--139ad3ee-e75f-4e23-ab39-d634a0390565", "indicator--aef35968-99f0-4d28-baa7-38e5682bc948", "indicator--85e65f6c-79de-4579-8371-2404bb627d9f", "indicator--84b1fd6e-38f8-4769-9162-23c4e42bf513", "indicator--a22ef399-4e96-4196-b489-cd6e68a48e31", "indicator--9ed689a2-b5b7-4b99-a3fa-1b1c018af2d4", "indicator--a3bf4018-1009-4226-ad78-d3907c6464ea", "indicator--1b309695-ef9f-435c-8640-74a3b366b6a2", "indicator--76b88a9a-472f-4dc3-b1eb-a9f883b11ef9", "indicator--f461b79a-2840-4ff8-a521-4ebcd1785c86", "indicator--344ecbe5-69ff-40a8-9ff6-7e6461b3831d", "indicator--34f7ba67-9a8f-4ea9-a4c2-6d6b00af28a9", "indicator--5d1a9453-1d8d-4e4d-bd3d-819edb9c1ae6", "indicator--7806cc18-b436-4db9-8c25-4593892c0bdf", "indicator--883b2c21-4752-48f6-8a43-d4241f5e7ba9", "indicator--1aa6745b-e585-4486-9c5c-fbb05cf34ddd", "indicator--9f45189c-bbaf-4813-84fe-e3f19e5518a6", "indicator--c3813679-2319-48ea-96af-b612bede75d0", "indicator--24d27cf5-9fdd-48a5-89b1-739a8b5ab823", "indicator--5bb689b4-2cc6-4665-b971-b92ee6aa6dbe", "indicator--bd0c10d9-d911-4960-8db3-7326eaf98ae1", "indicator--38d96c36-a983-496a-8851-1af4666af3ba", "indicator--14c9c39a-f1dc-493d-a6c2-783b966b28b2", "indicator--d28231f6-12d7-46d0-9fcb-9cee756ac561", "indicator--fa093e2d-d4c7-4e45-837a-0a9886586dde", "indicator--3d1ae652-6337-486f-9b42-67404f9bd125", "indicator--3e7be8bf-82d7-4cba-955a-fd79aabf378a", "indicator--41f144b7-04ad-48c2-9d4e-e03674fd86b1", "indicator--8760e72e-75dc-4cdf-878f-336b1b7b776c", "indicator--fa0a588f-f037-4186-851a-2b4e7352d6e4", "indicator--5767644b-b972-4462-b2ea-370c0fc44264", "indicator--a751a76c-a599-4ba3-a287-588356482f01", "indicator--efc87f10-1075-4da2-845e-0c8cf07a530a", "indicator--0ab9dc52-9d2a-48e4-b712-b25444116276", "indicator--fc59e8e8-ef4d-458f-a936-63f36bfbd86a", "indicator--1d3a5db4-edc6-4864-8fcb-5ba42f20cf9b", "indicator--05fa5eb8-4b60-4aee-a0d2-3216032de3be", "indicator--acccee3f-a6fb-4a6b-8df3-5c1c25e1e595", "indicator--304d98ad-22a9-4334-9a44-484db6207aa0", "indicator--326bb3d2-23a3-4188-85af-0ef918b39adf", "indicator--e239c34e-f002-4451-98e9-781a5cd94e8c", "indicator--287f71aa-8eea-408d-82ac-894e74912313", "indicator--f61a7f6a-0a3c-4028-b103-d8d4fe27f7ef", "indicator--010712f7-1dfb-4d3a-8eec-e00464068409", "indicator--ee69205d-0a50-468e-b28c-1fe6cfc4b7c1", "indicator--6e6de8e1-3722-4dba-a31e-f32445712f4b", "indicator--0fe26fe6-2776-4af3-8949-cfde1dc96506", "indicator--ac2bccea-6cd7-4568-948b-4b657008fbe0", "indicator--a890a451-c9fe-40f4-af28-cbe03d5c2877", "indicator--ddbf636e-7cb9-4a7d-9361-56f4a98ad02e", "indicator--c0545ae0-f1d5-4aca-b91f-3ac44c56acb8", "indicator--0d11553c-79de-415c-b6e1-50de2ef98538", "indicator--43c5afc9-b2de-492b-8620-f78fa16e89f1", "indicator--bd57532d-a2cd-4b01-acb1-3978bf45c40f", "indicator--4e37c212-ab95-4aa3-ac3f-315693f9660f", "indicator--fd63d08c-82f2-464d-9285-6afa213d2319", "indicator--e0914601-9653-4786-9cc3-40bb17e4676f", "indicator--1749a18b-4ba5-41a4-9c73-f055df04913e", "indicator--ed0807f4-9ee3-4d57-a113-6fcba367546a", "indicator--d8b60fe1-ba86-4270-81ad-374b6d8c44ab", "indicator--71860b86-5fb4-4a98-b658-4e25d2c3481a", "indicator--9d481d4d-a780-4a12-8614-33b40560bfaf", "indicator--1e4c4ac0-87ff-471d-af29-3fa0f6945ccd", "indicator--782240a8-ca4d-4a8e-a54f-20ff27ee3fb7", "indicator--6405327f-2b00-4969-a038-4e91b75edccf", "indicator--86209788-f033-445b-afe7-97b4ed98b23d", "indicator--0a895a1e-dfdf-4ce0-914c-18e707ce8647", "indicator--e3ea2083-5a42-4209-9e55-838098c8648a", "indicator--707a4a26-4527-4820-bb3d-605f950a03e5", "indicator--b8251853-ce55-44a3-ab6a-4ed308b91f61", "indicator--347afd6a-eb94-4613-b2d6-6f20f441810a", "indicator--beab4738-9995-4a0e-9f26-7fea0427e9ba", "indicator--e4083a9c-87f6-4f16-93cc-82243bce8459", "indicator--0c31f1be-6b28-4a79-897a-825d34e424fd", "indicator--0bd6d710-2159-43cd-87c1-80942e1c534e", "indicator--33573b0e-75d1-4727-b8b7-a7a923806b6e", "indicator--6e0e3e6d-f693-4b1d-accc-7009588291d4", "indicator--d4ed7758-2cd4-4f3a-87a8-c96cca66cf82", "indicator--19b64b76-f029-4773-b533-64c2f623f3f2", "indicator--049ab0ba-b793-43ca-950f-3df1708991d9", "indicator--21feefc7-c6e3-4054-8590-77d4f5e15567", "indicator--7c3368b0-70fa-4180-8641-0d6b69a53f8a", "indicator--65d1eef0-5b2a-471d-89be-eaee9a5de379", "indicator--80c8fbdf-8248-487a-b0e2-479bcd1e3769", "indicator--3b49be9c-ccdc-44da-9289-a74d2eaf0318", "indicator--5eb3cdab-da44-4c9c-afb8-9d05b3dc6cdb", "indicator--d8deee7e-55fa-4e05-9622-8c72d5e9c703", "indicator--eb711ebf-4334-426f-b062-505ebdffcce1", "indicator--36437b00-a368-4519-aa34-b1e7cd9366f3", "indicator--0fa31c65-37b0-433e-9570-75655b13e272", "indicator--8b7927b6-c0bb-429b-a20d-1df3b317b9b7", "indicator--ec210d90-45d0-49b7-8415-b49070283b75", "indicator--83ae93cc-8919-472d-b09d-c9c7dc151dc5", "indicator--1be1301a-1ead-4279-b67f-c2b4150838d5", "indicator--802d5b94-cb5f-40ab-85bf-8e9f4ded85c4", "indicator--1c9608ad-e40b-4431-93de-59df212c6f60", "indicator--1ef7d85f-4da4-4168-9191-e2f67de2b274", "indicator--b3e9faa1-a3ba-4048-bc47-7a8ef920fe37", "indicator--3a835563-2b17-4de9-8fd8-d6c3156420e4", "indicator--4c63ecb3-e9e0-4b3d-a584-6b69c1c8fec5", "indicator--222bb9c4-8665-4a73-8381-8eec0c285b41", "indicator--88e406a6-04b7-4d9c-88b6-aab7d9bfd37b", "indicator--e2a90ecf-9cd7-4481-9eda-a22a424cac28", "indicator--747e77a0-226f-4160-a1d7-8dd1ab74c63b", "indicator--15077818-c500-4544-9b47-dcdef4ca3ae0", "indicator--9a343450-6693-45a0-a791-56e9ddc160c7", "indicator--aa22c492-fc77-4d86-957a-2c853157502f", "indicator--87d8c7e8-3e0a-4eb8-8fe8-27d66459de82", "indicator--def386c6-4a84-4763-a2ce-20413de74f26", "indicator--ca4f7941-3aa2-4ebe-b357-5aa97dd8f43f", "indicator--a8661924-d3d6-4193-9d43-583f8b5b7ae7", "indicator--6fcfbe64-97ba-4820-a754-7f829ed1874d", "indicator--24e64435-bb49-4e8e-bb45-2a7c9a279c1f", "indicator--0eb02bc6-6c4e-4a43-a5ab-f30345f4878c", "indicator--0d103834-feb1-4652-8b67-100975dd6714", "indicator--e36cc2ca-8aa0-4091-a8c3-bc90faadcdaa", "indicator--2ef3dfd6-22d1-4793-b1fb-04fa9ff9a225", "indicator--29ed93e4-147e-482e-8c31-6df26271efea", "indicator--a61d3968-3382-45dd-8d87-860e6ee0bb12", "indicator--3710d730-826b-4a1a-a328-7459411cb1b8", "indicator--efcb3e70-fcab-4ee9-8810-6a3e960f87fe", "indicator--23b655d6-5c75-4359-9349-2197013bcdc5", "indicator--0779cda4-6492-4ecd-a33b-d54955986955", "indicator--cf832d74-3e4b-4078-aa56-f2c1f100785f", "indicator--708e45dc-aad9-4461-bd36-b12014c15e32", "indicator--a624cafe-0ae4-4615-8762-6bb76dd2da6d", "indicator--a6d37db7-aef8-47ef-93d4-68302c6d5568", "indicator--f1e417ed-1291-4d99-909f-c6f1cfc80b22", "indicator--70be00eb-bd97-4572-bd28-472d292e7d33", "indicator--b13d50fc-ba88-4640-904b-59591747cc3c", "indicator--fa28d7d9-bf5b-4675-bf9a-8860482cfd66", "indicator--db11970c-6aa9-4837-aba5-0234b1d30143", "indicator--c95a4b4c-2407-4f03-910b-e64cfc104fb8", "indicator--2ac0e351-90bb-444d-8f47-69698151fe83", "indicator--76580c08-06bc-4e71-b566-f3519ef0c553", "indicator--f210b76f-4bc4-42b2-9604-6e91ab861da8", "indicator--85ba253d-8298-43d7-8524-2e0e1d763464", "indicator--bd14f588-97cd-4e10-ba88-88779a70787a", "indicator--8c6445fb-408d-4237-9b3b-4bbbebb1890c", "indicator--5cb896ce-de2b-4b24-9cf7-6cacd224e638", "indicator--6cffa083-ffd2-457a-aaa3-b576da5ad04b", "indicator--4c9aacd3-14d9-470d-b6cd-5702c513a718", "indicator--2ab85259-b108-4ac4-97dd-614f5aee0d15", "indicator--7374d0c1-a733-4841-87c8-3785d77811cb", "indicator--1efe5fb4-898e-4047-8b82-4245a56e1581", "indicator--a0a1945e-fe58-4c51-937b-2d5ff39ff491", "indicator--f4cc2f32-bd8e-4c07-9fd5-0717672965b3", "indicator--63c0fb0b-35cd-4957-b862-559381fa648e", "indicator--60ced70b-4073-4d27-bb55-5f6d77cc7923", "indicator--92442e48-b418-4240-bf55-77659e93e129", "indicator--bb932643-a20f-4b95-baf6-3b33c55be91b", "indicator--9f150740-891d-4bf4-936f-a681ce909e1c", "indicator--c4820d40-426d-40b0-be30-f0e7f4c1c540", "indicator--566a224f-97a3-41e3-a121-dc22f1b7e105", "indicator--eeadf32d-b46e-4592-9a0b-8b2a2d3d3a83", "indicator--306619c6-123b-4c99-b28e-6a228484701c", "indicator--33c7628c-1074-4d32-8220-9d0dd688a6b9", "indicator--047dcca8-c1ce-4bb4-9d44-a32acfbce9fe", "indicator--ea408a2d-b3e7-4f65-b374-408fe250cf78", "indicator--368d633f-649b-422d-9c6e-d486f35e7461", "indicator--d3298454-47e3-4515-9445-8e23f6b89cd9", "indicator--fc5f26b2-c39b-48f9-a0a9-72e95ee8330d", "indicator--8bc3ebf9-4370-4839-ba9a-e22c5b0af8ee", "indicator--b1919e72-5f1c-41b6-9bee-65fab943199f", "indicator--6f0844fb-67f7-4959-a414-4eda025e3d4b", "indicator--04a602e9-9918-4743-bd4c-b6370c0b9a6e", "indicator--f5aea26f-cb8b-4ece-b2f4-76990d4d5c72", "indicator--3b070b78-06c2-429a-97bf-82c851ae2f56", "indicator--f1432ea7-d34d-4101-968e-3c53340cf33f", "indicator--5d19c7d0-2685-446f-b2cc-8305b63225e7", "indicator--fa2b3e6a-f9a6-4197-8d02-73c7c1c7c2c0", "indicator--ba3ea200-bdab-43f2-a647-2e487f4ecb2c", "indicator--8fce150b-211a-40f9-8705-798f7617b419", "indicator--3397e7fe-e601-47d5-a00e-4982506f5343", "indicator--73c005cd-f13c-41a6-9cc9-f2a3b078b9d3", "indicator--93f765b7-a427-43af-bac9-55f6dbb49d55", "indicator--106fa1fa-e5f5-4e39-88c8-0479c606348e", "indicator--aecf97a2-97ea-4ebe-aa1e-007ca3042c3e", "indicator--77db8809-2948-4ee8-adfe-819153b4a9e4", "indicator--1c9cb981-5a48-4956-acbe-2d6f18ce9991", "indicator--1282b1b7-b308-47b7-91cf-50eb9e28b50b", "indicator--fd224bb4-a5c5-4569-b682-e2dbff52d4ec", "indicator--30ea7564-2004-4673-90c4-1d2bdb6f22a8", "indicator--1340000f-2e63-4df1-989d-60697c203909", "indicator--13b1cd66-8098-4280-a2a3-e2b4bd9c2119", "indicator--fd580c48-a398-4795-abb1-98180d5a4f1b", "indicator--82bb8758-f450-4e19-a10c-aea6f1b1409b", "indicator--7f59eedf-d1cd-436b-a6d3-bd3068906540", "indicator--e52b702c-9595-4740-b323-54a080ed402e", "indicator--01b28841-d5c2-4d48-a010-850a5ffac9d4", "indicator--788d6b83-f597-4668-b845-9d47c685b083", "indicator--1d3f9bfd-8071-4802-a763-53a99d2f0af3", "indicator--76e26dda-2051-45a0-916c-02a5698807c5", "indicator--5d058b31-78c4-4853-ab90-9e6514147896", "indicator--30c39929-6a5f-4ba1-9cc4-2e39b3bef7ec", "indicator--741e0e54-ac48-4bff-aa4f-daf0f9125716", "indicator--b34624a7-1e67-41eb-9f3f-51bb5b6308b7", "indicator--7404f506-f511-410c-99f0-dfc14224a8c4", "indicator--bcc941e4-5693-48d5-9ebb-539728fe4e9c", "indicator--f8fa5eba-70c9-4476-bff1-d21c13e253d4", "indicator--798fc382-d4a0-486e-a535-759b32bbf322", "indicator--d2c000f1-ff5b-4ba8-af78-dafff690995f", "indicator--8398b20a-a762-478e-9189-91876641a0d5", "indicator--1654aa99-8a48-41ad-b3de-0c4275b7b120", "indicator--e5592697-6708-4073-aee6-b46c5c42dd2d", "indicator--e238c8b1-392d-4b6c-ae98-381b925d015f", "indicator--43796c07-abdc-45e0-abd7-fcb52668d644", "indicator--fb2b8ba6-0e45-4c18-a1d8-f9960f5c44fe", "indicator--52ff1d69-81b8-402f-afd9-abca4c1558c7", "indicator--42f7ff04-5be2-424a-9121-87360cd54732", "indicator--d555c856-bf97-455d-bee4-082cfd2cf552", "indicator--7f15877b-5de7-4665-8575-4ae72ff1e13a", "indicator--54a4f37b-9611-41c1-9740-e8fc7028abc2", "indicator--fff7d4ab-11a6-4859-bcca-8b162b43dca7", "indicator--bf0bb612-ae50-41b8-b4a2-96417c5e8efb", "indicator--4fcf1549-8400-49af-b93d-cbb414e9fad0", "indicator--73a09bae-b4f7-4d49-94f0-342bbe7c6c8c", "indicator--c5bc4149-c741-46d5-9c0a-2e13ead31cf9", "indicator--382d38ed-4a1b-4e5e-9e2f-8a47ea79e029", "indicator--3dbe4112-9498-44e3-a5e3-09ba3659b4a1", "indicator--6679ca5d-1f29-4419-903c-51ca03388b4f", "indicator--e10cd1bf-5261-4c19-af39-26ccb67c554c", "indicator--7ec0ec3d-20e7-4605-abe7-c72492f97331", "indicator--c0c95980-4d01-4216-8d57-0a658b000a6b", "indicator--d8557a0b-749b-4df5-a80b-5011747bae99", "indicator--cfc2dbe4-395d-4504-ac0d-998373c2db61", "indicator--3e554e21-8d53-46fb-9d22-fc0951f0077e", "indicator--5f5e815e-98af-40f3-b317-a9aa053416e4", "indicator--893f6d83-7bb2-4f64-9139-bf48759cb56d", "indicator--bc448626-1981-4f92-8039-4869288ac7da", "indicator--0b2e4627-859c-4ed4-8280-44485bb50d79", "indicator--b57afe65-7045-464f-a741-f4d5d462a191", "indicator--5532d75e-d474-4955-8db3-473ae947a28b", "indicator--e2feb125-4998-4938-8c11-c0c37c21ccde", "indicator--ecd5b978-04fc-49d9-865a-225a9314875a", "indicator--8bf6cef5-d51b-4737-862d-676da6c52cd2", "indicator--99611186-6d3a-4b25-9cf1-d5e07569c6d1", "indicator--cfff251d-2fb6-467a-b1dc-351d06067302", "indicator--3846560f-beaa-4e66-8eda-4195cb8e68f1", "indicator--0d2fca03-5a5b-4420-8c23-efab24699d59", "indicator--e82097e1-c739-469c-8653-2ea406f8cebf", "indicator--d1ba591b-b8bd-4583-b61d-f7f3903e8cf2", "indicator--4c68e396-ee30-4e96-aa35-40379a937ee1", "indicator--cd2d8b2f-a3d1-43b7-a633-4d98a0df08ac", "indicator--0d85faff-448b-42fd-b13f-f1da87ccbdd2", "indicator--51383bee-dc4e-4168-bffd-9ffd76b48a75", "indicator--2667a931-e11d-4b20-89b8-24d1d7295189", "indicator--edde3e43-7d5e-40b5-977b-81019a128f66", "indicator--e2d62699-3045-44e8-a1ea-389f457b0bfc", "indicator--5bf8102c-9182-47fa-be2a-cc04af944db1", "indicator--f9528242-3fe1-47a0-9a7d-984ef2fe7da5", "indicator--42edb6ee-3801-4a41-8abc-42be44623c47", "indicator--759fbcab-0f17-458b-b125-1f7be40c6624", "indicator--886b5f00-4c21-46aa-80bd-ff5c181c6600", "indicator--7497c904-bf21-441d-b00b-91613ecac426", "indicator--8fe5cc3e-37f9-4e46-bb11-7546794821c3", "indicator--759010a1-9a77-488e-af28-5964073e9dd2", "indicator--d10d7ca8-c137-46ad-a3db-722bac8d7781", "indicator--f225c342-996f-436f-86cb-17a7b6c71d48", "indicator--16973d55-435d-4928-b876-73117ea0bc25", "indicator--cd4029c3-18a3-4c0b-aab5-4d000fe63564", "indicator--9926719a-7432-4fba-a6e8-3188a530f985", "indicator--e706afa3-8919-4a93-a5e1-6b5f9ae844e2", "indicator--9f90fea2-af47-49b8-9f01-f297b7537e6e", "indicator--e710a564-8be9-41ec-a04c-2a1be0da6252", "indicator--90e262e1-b4ca-46b8-88f5-b828b9a7c050", "indicator--30e65d5d-66ac-446c-81ec-90a96c20666b", "indicator--f78ca025-156d-48ff-a6a0-1ebc807cf78b", "indicator--06b028b7-4387-40e2-925a-eeae8436e93d", "indicator--372a4359-a03c-4e90-9a4c-fa20e6a99832", "indicator--9a1c5a3f-5b18-4d5d-924b-aea29c4a3f77", "indicator--c96ca869-4b2d-4d0d-8e58-d3df1cba2623", "indicator--e09d4dfe-96fb-4733-8e13-b26526e17aba", "indicator--b2ca8597-8d03-4b3f-85dd-53dcd86ed8b1", "indicator--f9ba2fa1-91c7-474f-b283-71d3d4b2a54a", "indicator--3ee0f49f-d2c1-4741-aeec-b4b821ec510b", "indicator--ed6fff66-3b23-4fd4-8f00-95146c4b92ef", "indicator--4a2d50a4-1e10-4926-aecd-ffb0fe496909", "indicator--4f2ee7d2-0d54-466e-b8b8-c4dd88c086ee", "indicator--4ebb2fe8-5ffa-4d1f-8a0d-8656ac85cb89", "indicator--e13b3666-39dd-4a68-82c5-2c1a7b7faee8", "indicator--f06751e8-6d5c-4422-a163-bb72e3d71791", "indicator--61093968-7d78-4299-bdba-c02732d35729", "indicator--2c4ab0ee-4354-41a6-8663-35914c815292", "indicator--6e5f171b-6d18-4940-8a03-548d9fe7d31f", "indicator--458bfc1b-7653-4043-8d44-2b1a7b2d49b9", "indicator--48e89aca-4eae-4ddc-969f-f1757a20e4c7", "indicator--ee91e793-149e-48dc-a729-441917ce5c74", "indicator--bc4c8a1a-b7cd-4902-970b-0ceab542b139", "indicator--9a50dead-1ead-4cd7-949a-150035a161e8", "indicator--5b08e43a-e1a2-4a01-b254-d5e3332f709a", "indicator--ff0b2068-2181-4a60-b0e5-9f38471a8cba", "indicator--8a7195ac-ca7c-4df3-a8f2-fca458ce8b8a", "indicator--dac4dd0a-0ec6-4a48-8c76-fdf8f8cd1d66", "indicator--fc9e5859-27ac-4fea-89d7-cfbb88654d88", "indicator--39cb8eeb-bbca-4985-a335-8f489ec61600", "indicator--d09a1701-28f6-4d20-88b5-dd7e6c50dcb7", "indicator--9f5b0146-981b-42c2-859d-8ccc118e28b9", "indicator--da03b27b-b499-4e90-a220-a8514c04161d", "indicator--5ca23e07-61fd-4575-92e5-e3c4b2fdd762", "indicator--e916826e-2575-4098-bc19-406124f97b54", "indicator--5f877af1-b562-4204-b499-694a352c99f6", "indicator--41a586bc-f9a0-42b4-899a-520cd8b714b8", "indicator--93091dc7-b58e-4bff-b363-ecfb06fdb125", "indicator--72fa249f-f3de-486e-a15d-1d95e821afd1", "indicator--2227ab41-1006-47de-b60b-f309958f7a2f", "indicator--3c9445cf-b477-4e06-a177-947e69924cf1", "indicator--d2978dc9-67d3-4e9a-bb3d-6f7186be3c84", "indicator--19e7f917-3b13-45de-b653-3967353583e3", "indicator--e74f7052-4df6-4634-b588-cd100879c9c8", "indicator--0e7503f4-d805-4e64-8707-eec1a8073bd6", "indicator--fdbec6aa-7c00-4872-af10-68667de98efc", "indicator--0e139478-e7b2-47dd-bd96-198707a757eb", "indicator--0d2d1eb1-a7af-4c09-8492-19ca64a11f9b", "indicator--624f267c-d03f-4682-95e8-6766eb01c764", "indicator--a8e1dc1d-128e-470b-80b8-1da3f0da7c28", "indicator--f910d9e8-2843-4537-a46c-59998b9d4d7b", "indicator--b9592099-cf91-486a-8497-90481f80d6a7", "indicator--d3f33a51-1f0c-4c1b-ba38-b1c5d2711aa8", "indicator--a6ba9186-9217-40c3-b2df-5f83d209ccb0", "indicator--e7e03d3c-1e70-4926-b65b-d4e629441069", "indicator--279123a3-f80e-495e-a2d6-9742152090cd", "indicator--aad49543-5b54-4a21-b146-cdb67916b3d2", "indicator--26f4424e-3c18-4d0c-a409-b564f9010db8", "indicator--26de3ce0-efc3-4b65-a6a3-8026814813f7", "indicator--7af55ada-06d6-41a5-a01f-7991603ed496", "indicator--11b88980-80af-4969-8388-e61495b7d236", "indicator--2a295f91-9c85-40f5-a0b4-69a8499560ec", "indicator--de62e0bb-ed99-48fc-9081-05693ebdce5e", "indicator--29e0262f-06ab-4f5d-8fc6-f060b0e3c1b8", "indicator--9e4397f3-3758-45bd-852a-6437da7623bd", "indicator--94ea85b3-91f0-4d53-809e-03b31a53cf8a", "indicator--d9ebd554-99ba-4d6b-ace8-502374845c0e", "indicator--47a5be33-7722-48de-b4d5-0a5d9212ee46", "indicator--5794aee9-8075-4b83-9f3e-8cba9fc16007", "indicator--a0828083-5a42-4c79-97c7-74551775fc49", "indicator--06454acb-2871-4c96-838e-7885b2320e30", "indicator--073f9323-e7de-4a1c-9b19-9aedd893a3eb", "indicator--18edf4ed-eb42-4b95-aa31-e1f1321cfeec", "indicator--a3b799f8-599b-421b-9220-bd5f86a83422", "indicator--3d5c8a76-8dc9-40a7-95a5-8a975fb018bf", "indicator--90c183da-f9eb-40c0-838d-659013b79363", "indicator--d638c5c5-e503-4077-a5a5-d80e19fadf65", "indicator--69940294-079d-4066-b649-412b48a35ace", "indicator--c6965554-9394-4524-b5ac-7d86e93d0f54", "indicator--f17359de-e7cd-4230-a397-f92f9c471bba", "indicator--3d0c9d67-8938-4b05-a40b-b00363fa5637", "indicator--9a3f9c61-9f01-4531-9a9a-33fcb7507c58", "indicator--2fd15b3b-c303-4dfe-8c5a-24ad13450c0c", "indicator--a355cba8-3748-452f-b869-7074b8cda92c", "indicator--4f888211-5c78-4479-828a-48943a4940d5", "indicator--169cd78a-8b7a-4cbd-9070-90b876cd982e", "indicator--0cb497b4-bfc9-4d57-a8ac-3598bc07a1b8", "indicator--bb64283f-0b6d-467c-b7fb-f82091c8b70e", "indicator--b6a79f65-e36e-4948-9b49-9e2da621ca64", "indicator--ac6102e7-423c-4458-86e6-c575b5576b16", "indicator--37d54dc9-2c82-4a1c-9359-d885e70f2ea2", "indicator--def1e110-8ead-4e84-800e-85fa8ec6ceaa", "indicator--b6ce2d7d-215d-42d2-bc7c-065480cf8aea", "indicator--bbc1efc9-3623-4f13-883c-7b80ad554351", "indicator--bd0e5a77-8047-4521-9721-80ca394c6791", "indicator--3b2c6298-2702-466f-abe9-cd8893166523", "indicator--5d4dbef1-857e-44c3-814a-e828e88f92f7", "indicator--c9ac9f2c-3a74-4666-bad0-a025a529201c", "indicator--c05ccbc4-733f-4a8b-9e5d-39ef5a39c340", "indicator--ec1662cb-63cb-4233-96d4-4cebcbe2acea", "indicator--26fa44e1-1751-44a6-b467-542181142bb4", "indicator--289c72be-452b-43b2-bc0f-8106f7d2e74f", "indicator--89eb745d-a1d9-4537-9858-4e523589f75a", "indicator--45e1f54d-dea2-4f7c-9c3a-a1abea7876f0", "indicator--c7957522-6d27-438d-94de-9bb60f79b029", "indicator--1db751e1-4132-448a-a86d-45249edbbb9e", "indicator--43fe5121-58a7-44d9-9d74-6bba5d914170", "indicator--48e92d12-95b4-4bb8-b8aa-85bca39dbfb4", "indicator--3fa279bb-bdac-40e8-a040-5da8f5317bf2", "indicator--0c48b99d-7984-4ced-9839-5de0f9b4329f", "indicator--f0bbc4e4-f643-4f20-9ad0-a4c2d5369faf", "indicator--c12bd2f3-1318-4c31-b1fd-c90d0c60e3ee", "indicator--de17c187-446d-454b-8725-59d0fe2a5eac", "indicator--04e372e6-93cf-40ec-a01f-7cc9a0ccc34e", "indicator--301f1bec-371b-41bd-8cef-62380670bb1e", "indicator--963bb90c-cfb4-4566-8a0a-3f6180187d51", "indicator--8192dbcd-7a38-4b1f-82c5-30a2d8ab5efb", "indicator--16c7cfd4-016f-455d-8dcc-de47ed98141a", "indicator--358b739a-1373-4484-b5c0-71c3c26de39d", "indicator--3ecb05f2-1ecf-4ffb-b778-f9b5e6e9d10b", "indicator--617854c3-600c-46cf-b1cd-ab3e1afbb1c6", "indicator--71738b47-c29a-4b21-98a2-31cd3de8e664", "indicator--310396c2-ac76-4035-a55f-2022a2989d82", "indicator--5b5db88f-95d3-4a0a-9127-56be5200c28a", "indicator--676fa5d5-9d2a-45f1-b292-02e29de32fb7", "indicator--7ab74dae-eb0c-4f76-bb3a-34fc2943c716", "indicator--48c80fd5-0345-484f-a3c6-f11e2e2b07dd", "indicator--6b77eb48-ba9c-4c56-a7ed-ba1da977b78c", "indicator--bf2c0be1-be2f-48f9-8e83-12576781540a", "indicator--63357fa7-83a2-4484-9cfe-4f43f91355fb", "indicator--527fc661-24e5-4291-9053-05e0e11b059e", "indicator--8d016594-c6fd-4f65-b6e8-0e7ebe222c50", "indicator--8bd5d9da-5b24-4ecd-a46e-25dc35b56e9e", "indicator--d9ba386d-2030-4b38-b776-30194770e82e", "indicator--9a5433aa-9c10-46f2-89fe-c399c2bc1d63", "indicator--dd7b22f2-99db-4014-b36a-89398f95cbed", "indicator--1f54e7e9-94d9-4d13-92f7-b2e7e35444ad", "indicator--9be4990b-07b5-44a9-b164-9572c98bb49f", "indicator--b91a45f7-f1b7-4d2d-8023-463fd54fab84", "indicator--6b946f4c-a275-4f14-8339-1dba02a00a8a", "indicator--2cb3f075-b8d0-45c9-84b4-feee13207ae0", "indicator--e9559872-a9e9-4539-b6fd-0a2a95518039", "indicator--606cfdcc-dae6-4480-8bd6-e66950e111f4", "indicator--7c9357f7-d77f-4752-bf73-34f624ce4f08", "indicator--a4be63cd-38e7-4a80-b35d-b9c8764c0c5d", "indicator--2d856d20-f2d1-434e-a954-12bf591c7f7f", "indicator--6b998841-5905-4e37-b9d8-2e637adc97c4", "indicator--f537d971-eab7-4be7-9270-dd99fb4523da", "indicator--d3f2e4c2-b579-4927-8809-875f6d2143f9", "indicator--93614ee2-6827-4151-9912-25c09408fb02", "indicator--b0cc1882-64e8-49e6-9543-b9598373fcd1", "indicator--200768a7-4c05-496a-a42c-91e491c08bd7", "indicator--756cf549-68fe-4ab5-904b-35afe0fd3465", "indicator--2eba51d3-a79b-4739-a51a-ccf81d408534", "indicator--b986a3e9-6083-4c17-a377-048747437b6b", "indicator--55de3b84-1235-4c47-81c1-fa8a6fc65478", "indicator--4c9a8b37-64ba-4e10-9b1f-e1462f8bf399", "indicator--bce98329-64c5-48be-a942-16d18286c44a", "indicator--9f17a5c5-2f1d-44f1-850b-227daeaf8e9b", "indicator--31314e17-986f-4585-8fe3-1827a998f3e9", "indicator--49c29f23-6ee1-4b58-b949-786834121819", "indicator--785ef743-62e2-4702-add5-1a3cadb0af78", "indicator--a59bc627-fa09-41a9-8c9f-e7f2159a309d", "indicator--fa5787f8-73f5-42dd-b347-003cfc660fdd", "indicator--49afe256-55db-45e5-8346-fe22454034c4", "indicator--435b5928-bfc0-470d-a072-1c3ef2330762", "indicator--773b48be-77bb-4b82-8ae8-890d42ff8aff", "indicator--52427a48-ae6d-49ed-a5a8-f4d85dba7910", "indicator--0161e3eb-057e-4412-bde0-275ea1686999", "indicator--9b4ae7e9-5f5e-4fa7-be0b-0332dd909f22", "indicator--2cf40422-9291-4993-99da-503470d76c01", "indicator--6a7e93f3-d1ba-4817-86f5-5a581f96ffe5", "indicator--3bafd967-5d82-4488-b159-0c39d97a85af", "indicator--133f2e54-282c-492a-b7c7-047aaa14edf0", "indicator--c8d2f3ed-6ace-4729-9cec-d07fb1f07b86", "indicator--b658fbdb-4d42-4614-8e7a-25f70a754838", "indicator--9aade21c-069c-4ed0-b9bd-4c6c3876c2c9", "indicator--f3c69379-629f-43a7-a6f3-63599d73bb72", "indicator--4e568948-4954-4a6d-8a1d-b397fedb39bb", "indicator--35b653e8-ec19-4819-a416-cfc03ee0b6ad", "indicator--c408b8d8-98a0-4c72-b7da-5abe1a20fe35", "indicator--10907756-2def-4bf5-a589-6ce8edc40e5a", "indicator--96a41365-6af6-460e-8f22-fc17faf7fbf1", "indicator--eea36551-993d-4aa8-b2c1-cd728eb6fbfb", "indicator--cc4e988c-1481-4e4e-8e3c-0eba69f8d8ef", "indicator--8a16e72c-7b40-438f-a1ad-164b9636c9cd", "indicator--d17a3299-a5c8-44b6-adfc-6d904dba78ba", "indicator--80d4fe18-c2f4-4422-8c78-f5d128ac984a", "indicator--2fb864ff-a6de-47c1-99e2-e74117763a64", "indicator--1b88698d-2c4f-43dc-82aa-013395a197d7", "indicator--93bb7dd1-0ed3-42ac-b968-79754c365390", "indicator--f705dbad-9632-46de-b760-90fef5ed3249", "indicator--615ed99f-e428-445b-a57e-51b22b0d3578", "indicator--af3e6ca3-aa5e-43c2-99ba-8050d2eb1e10", "indicator--d9550536-1f2a-466e-9a31-00446300d591", "indicator--628ddb69-5668-4b8b-beb2-dc898fe494b6", "indicator--b62d83f0-03ef-4ce4-a448-736bc5add91c", "indicator--4b8e61d4-9f9f-4372-a23d-f4822b656545", "indicator--b79aeb6c-e6cb-4aa2-b1a2-dc9973f18267", "indicator--6c5d36d4-486a-49ac-b8a9-d0fa507115c9", "indicator--1c39b721-00dd-44c3-837b-1cfed73fa4ab", "indicator--9c3a07a9-a7fa-479b-9de9-5819b54e574c", "indicator--00548204-a5ad-484a-87f6-911d5417ae50", "indicator--47969717-906a-45f3-b07f-e3be527139d0", "indicator--703bc2d5-d5cf-41d3-b04d-4cc1f7a9420e", "indicator--f1187d33-e936-4346-8e27-b4d84af24cb2", "indicator--67532daf-a169-478a-84b1-5010c48ce646", "indicator--84343c54-f143-416d-a628-2f4e19471605", "indicator--6938296c-3ecf-4cfb-b132-360915e779b5", "indicator--1a400754-5451-489d-a7a2-8fabac09e343", "indicator--64c09f89-e533-4132-b2b2-28fdb045e1ab", "indicator--5523c1a0-0f81-4bcc-89fd-dbb6e0b1a922", "indicator--4e8653a0-10db-4559-9d8f-7fc9e92df249", "indicator--545e5b75-44ff-46b7-9d29-66c7ffa639a7", "indicator--bb2da84b-1a1b-446b-b845-21b07bf7692b", "indicator--97723817-db1c-4283-8bb3-9f7cbc48dc84", "indicator--a0238bdc-38d2-4e21-bf54-0306b8bf9122", "indicator--d6ccb6a0-e901-401f-a178-34116325a766", "indicator--7b8ae870-39fc-41d7-8a3c-184e2da23e65", "indicator--c3e297ff-bf11-417d-ad27-ed63609fbb85", "indicator--4fe24a49-8df0-4c40-adfc-959f3145b615", "indicator--1c6c495c-470b-4924-9057-a7c2273947b4", "indicator--6698e22a-940b-40fb-bd73-7c67c19fb138", "indicator--7d3fb768-921e-46a5-9d86-2005fd8915b8", "indicator--097b9ed4-d80b-4086-a61c-09e5f9fde048", "indicator--9cb9533d-98b9-4829-bd75-6ffed3ffc653", "indicator--28ada7af-58db-461d-9545-6e898139b54d", "indicator--3c6a13f2-25ea-43b0-a512-2e6c743dbbd6", "indicator--6b43d30d-a79c-4510-9a74-0bb5eb38798d", "indicator--f3373086-d0cc-4b74-be5d-b656b6f55cd8", "indicator--ba8a0234-4c29-48c0-b2d0-87fe0f7c17c8", "indicator--8d17cce5-d55a-4899-bb5e-3a042743dfeb", "indicator--a8ef9e2b-b25a-49b1-9aeb-d2ab103bb0a0", "indicator--be82c619-04f4-488d-8993-931788b88063", "indicator--be142698-1697-4255-b526-c701a304e4bd", "indicator--227460bc-4a86-4a35-b7da-5e81c7755fc7", "indicator--05ed8993-1085-4118-b942-ec4d71159f15", "indicator--a3ab1667-cfc2-4dc3-88b6-8534feef6e5b", "indicator--19858d47-e790-4b4f-9b2e-6bea625859d5", "indicator--3c158187-06ed-462b-b169-da08f996f6ed", "indicator--b362138d-21bd-4b0c-9c33-ba277977a886", "indicator--1ebf85e8-08e4-4fec-8289-f50f5dcb8701", "indicator--26c23e8d-9f19-4957-9354-8888143ca005", "indicator--616eef4b-64db-4d54-a1e0-d6ad830f8b77", "indicator--25a328c2-5923-439e-a1fa-127054f0495c", "indicator--244d9996-e8e6-4a66-aa14-f877b8e15c1f", "indicator--5bfeab47-2308-4ef5-96b2-3be2132bea98", "indicator--fe85595f-694e-40ea-bfac-cc3161702424", "indicator--7192c5e0-d2ae-4d8d-a195-a64f4521d808", "indicator--d822e116-fb4e-4653-a063-b9f8f51ec952", "indicator--1d80fefe-1703-408a-87bd-2da4de2b46be", "indicator--302bfca6-070b-4e3d-b4c3-f756dd57fb1a", "indicator--72d62808-721c-4720-935b-883791fd3890", "indicator--6decae54-9978-4fbc-8154-79d62c02cc7d", "indicator--5160e874-f035-4ec0-abf5-a9d851df93e5", "indicator--653c0cdb-625f-4759-afe3-49ff0152c701", "indicator--a160a4c8-4f91-4081-bfc6-f5186c0544b1", "indicator--d90ec1f4-0f93-4744-bfb7-669cb4b850b7", "indicator--60d63f09-a417-4ed7-9dbd-ce73a054c0f9", "indicator--cc9d4ad1-ee63-4545-bdeb-cdce296e7243", "indicator--691fa7ca-e3b4-4fb3-863c-d88e1f1ff846", "indicator--cb60b935-1b8e-41e5-9ef9-9c8e642bf58f", "indicator--554b0b84-ebcb-4b7b-8cd9-38190899d346", "indicator--834cc284-af01-4d66-a4b6-88b6344b5f07", "indicator--c1c0714e-68d5-4ff8-98e6-82a5a1a5040a", "indicator--a8d1dbf5-eace-41cf-b87c-cb3bf70803e2", "indicator--d4960722-bd9c-4b35-a9c1-b45ac75d6ffa", "indicator--1a152c19-ce0d-4b59-baea-34874e8effc6", "indicator--8fcc95b6-17d1-4728-9695-c4d0ee5420e7", "indicator--cfa26c9b-3a2d-488c-ac6e-e0f9b2c89009", "indicator--95827ecc-b565-4056-bd1e-818085498234", "indicator--08b3f1bc-435a-4259-948a-f06085e09fa8", "indicator--cf960b39-b928-4951-a43a-069bc11049b4", "indicator--dfdf18d0-9873-49c6-a2d9-dcdaca814a99", "indicator--146da34f-1aeb-4e16-9dee-225f61f5944c", "indicator--ea421944-733b-40a4-9f72-dddf53d9280d", "indicator--3799a32c-735a-4ee5-8dd6-cdf500dfdfb8", "indicator--3868e844-d1af-427d-b7e4-28aff4ea418c", "indicator--28331a9a-70c1-47a6-a738-dfe87dccfb8f", "indicator--0c358022-9c96-4cba-902c-21fabf6c4ca3", "indicator--b6d1dd68-79b6-46bd-8b59-88448b51a187", "indicator--b64727d0-e9ef-476d-af54-094a84e9ed38", "indicator--0ce694f9-50b1-4c61-8ae7-48dabcacfef5", "indicator--a964192a-b195-466c-bf43-84c4d034566b", "indicator--158ecf59-8ff0-4886-9610-c87b9e25c640", "indicator--925b141a-b5d7-484d-a2d0-0cfe7be9762a", "indicator--bd1058b1-6989-49fa-90d1-5b9c2331b7a7", "indicator--77f07cfe-2534-4fc2-b56c-e87389d521b5", "indicator--fc0ba877-a03f-435f-9707-5ca119ce9f65", "indicator--dc795b19-0396-43ac-b69b-5463d6ded329", "indicator--451f5e1f-252b-4060-93df-3f8c85c7542c", "indicator--02e3a09d-3de8-48b1-9666-49c85a4940ee", "indicator--c0f9c15f-58a8-4a5d-a9c3-a912be28fa83", "indicator--f9d36937-e65b-4b35-b69e-9f1a5859097b", "indicator--6927185c-6969-49a8-bb18-2b4f73957566", "indicator--98ea8fc9-f3bb-45b7-8723-59eef55bbfbb", "indicator--28f0c069-bdc6-470f-b841-0134dc4b75b7", "indicator--c6089836-4d7a-409c-880e-7a63c3e18bab", "indicator--fa58c563-26ba-4548-8489-0d0876f120ac", "indicator--6e3038b9-9091-4515-b940-37df7635a641", "indicator--d21563c9-b8ea-4f61-9f0a-a1b5522bc13c", "indicator--c220dd86-51a6-41c6-bdb4-66e6442d980c", "indicator--27540c57-a007-4cc0-a794-03a34a5a6981", "indicator--54daf9b8-a054-4492-96f2-a5c31841eaa5", "indicator--d939b4b7-7cda-4d4e-a4fe-c989b94def24", "indicator--4fe69a6b-6634-4061-9169-0ff20fa5ff32", "indicator--2062f6c4-430a-450a-8b14-ff1564c9f137", "indicator--0843b3bf-8702-45d3-8b43-1461ff285a13", "indicator--211b8b49-ce69-4178-93a6-9f36242785ce", "indicator--c6e75b57-2007-4ddd-843d-02494af28f72", "indicator--d59bd054-76a9-4d6a-9884-8f08af9fb143", "indicator--5c1146a1-72f1-4c5e-9898-503bc44b2653", "indicator--6e70d54b-c831-4575-907e-b74a8b4e8676", "indicator--0dd11a56-5673-48a2-abc8-6e8c3e652dcb", "indicator--0a3c7e54-cb9a-402f-8558-53bdf2105d83", "indicator--c22a946a-dfad-43ea-979d-a72836cdddcc", "indicator--3ca8008a-17e6-4b80-94f5-a8ec3c4d0101", "indicator--50bd559e-5c6f-4261-8628-de031e45608c", "indicator--c7182f51-6f89-435c-95e1-57629256fb86", "indicator--e90d3677-e1ff-4289-bc09-bcc84243d16b", "indicator--07d9f868-3afc-46af-a456-0eee2ac87762", "indicator--45770a47-0f1d-4276-b675-86ca0b6b520c", "indicator--56af6313-f411-4d73-9732-2519228c94e0", "indicator--f950dec6-df94-4593-bdab-c97774979883", "indicator--52760b7b-975f-4460-8a61-550e933b9eee", "indicator--2f157f52-b919-4e47-92f3-bf5a6931d603", "indicator--bd10345e-15bf-4ed8-be0f-b2cb65b8588b", "indicator--cf448ce4-8191-4fc6-86bc-5bb60cf12234", "indicator--04345916-58fe-4dbe-9cb9-920d02c1088c", "indicator--b07e8064-1c02-4389-b03a-3079df57f74b", "indicator--0dc5a6b9-967c-49d0-8a97-5653e49bd60a", "indicator--45857067-8dd0-4ca2-9b03-11050dc948e0", "indicator--bc826c5f-46ce-40ac-b491-a464a7f38e98", "indicator--af2efa50-c8f4-4ae5-aab1-96752df91956", "indicator--9f447faf-0492-4ce1-ba6d-e3896cde2a50", "indicator--714cb237-ee6e-4c5e-aa8d-347c0601fe90", "indicator--563e4d5a-20ec-4e2c-9b31-9aaa9b3de31c", "indicator--d2f3f1ba-add9-4aa4-9d46-92b222858bc6", "indicator--2eb82f9d-8073-43ad-8be0-9fdb6f9ab792", "indicator--bc00541f-88d9-4b17-9a49-9370da679679", "indicator--b7223820-90ba-47e6-bf00-c424a541eb12", "indicator--db7fe3ba-eb1c-49e0-a35c-23b271447772", "indicator--a5e86713-cdf8-489c-8844-e798f5e4db4e", "indicator--36b1073e-8c08-4caf-b484-273f8cc54af5", "indicator--65024925-2fc5-4353-9e0e-34a87f261f2b", "indicator--e1b37894-8289-4049-b0ba-55fcbb1e9468", "indicator--59889a86-89d7-430d-94af-8ca0673d9397", "indicator--163b4b08-b1c3-4f22-9f11-e6ce66f801d0", "indicator--cde486bd-9dd2-4f21-8eaa-c98968bf8bd3", "indicator--d363d60d-ce24-4f4d-bbc0-293cbc892cc9", "indicator--c41e8c8c-477c-48e3-86eb-306a97231e3c", "indicator--c5cfd33f-1469-42ca-9e41-d7a5502294f0", "indicator--fdc097ef-2d72-45d0-93fb-4dbdd017579a", "indicator--8579d157-5e21-4e0b-87f5-1062c1a6c756", "indicator--72872fb5-c417-44df-8658-36dc411940e9", "indicator--305913c5-4f6d-4507-aaa6-1ad30b0fbba2", "indicator--1d006e68-09c2-4add-9f34-2d1d55a42373", "indicator--fc1a0b8a-928f-491b-9c9c-3afd084fb82d", "indicator--a7e04012-672e-4e07-abec-225d679b7ec6", "indicator--314107be-7feb-4975-aff0-ff0af788d96e", "indicator--3218f81a-bacc-4edf-998f-71b28b15b5bd", "indicator--77ae6f80-f078-48c3-b374-e1bfb824040a", "indicator--7e633d94-e149-4e7f-abf8-9e9c5d858ef6", "indicator--53996541-498e-440e-8a7e-2ce7c3e59f38", "indicator--8b544bb1-5f49-42bb-82c9-e56c17c3b187", "indicator--03347c30-038e-493a-a6fd-1e6863e2c1e5", "indicator--e5c7fd81-25a7-48a7-a2ff-726225a55ab2", "indicator--cb6bc63d-82d6-449a-8933-a4b4aa50faaf", "indicator--aae95289-651e-49ed-b089-7748efb9ef65", "indicator--a41dd696-c19d-4ef1-b466-d8eadfc1eea0", "indicator--416a06bc-979c-4f51-86bd-a80779712dfb", "indicator--34e6f02c-9e18-4e82-921c-471722594a24", "indicator--6754f543-de98-40f0-bdf5-cdf4bcd87649", "indicator--6f903ac6-6c86-4b13-b8c7-acf70f20ae54", "indicator--efb8ca04-bf5e-4041-b9f3-d29cfe878bdf", "indicator--779d4e6d-80aa-42fa-8d70-5c1684cbf940", "indicator--f62c0578-8b49-4ea1-bb4b-e1e90640f7c9", "indicator--0e1a3dbe-c3a2-48be-9447-b525cd450157", "indicator--418e428d-d44b-400e-bfd6-e13feee3fce8", "indicator--0741a4e2-1eaf-425d-9911-a3e27750722e", "indicator--71fcdae2-7bb5-40dd-a6cc-bc9ddac6a9bb", "indicator--e09b60c4-6aa9-452b-91ef-5547c3059ff0", "indicator--ab1f76e3-5146-49fc-917e-ea7d833646ee", "indicator--42596cd2-0350-4bb4-b391-d908b8c727d9", "indicator--befa97e4-5e11-4bcb-ba10-66d62984f465", "indicator--6b2ce02c-0263-4ca3-9627-141a3ea73ce6", "indicator--be2579b4-032c-4521-9809-2c4e24ea15d0", "indicator--5a843b3d-9094-4c03-9312-5857157b1bcc", "indicator--53524441-b1ba-422e-b8d1-8367930edd80", "indicator--aa140ce2-6db6-4972-b028-ded0247d8d4a", "indicator--59bb9ecc-21b6-42c1-948d-5c8f4bb7decc", "indicator--38d23cc7-0618-43e3-8d52-477ac2cd6b18", "indicator--81caa4ae-e00d-4232-a2f3-9e7de56affbe", "indicator--48b3b26c-8a7c-4527-a61d-13b5210c4668", "indicator--c250dfe0-19db-4b06-914f-3b5aed5b70af", "indicator--16fbfe26-6ccb-4049-aea2-4fb75d0fca7b", "indicator--89a769df-119a-4072-a89e-955d1b438924", "indicator--355d30b6-c4be-43ac-880f-4960fa1e69e7", "indicator--aed0fbdf-6670-4adf-ae6d-d91988fe4004", "indicator--fe30035a-2d99-498c-ab38-ecc307591069", "indicator--8f908dea-2392-4fab-933f-065b00bb49c9", "indicator--c292b0ac-d765-47e4-b156-9614fd942fcf", "indicator--ed02b4bb-64dd-4db5-8ebc-37237e37d7e9", "indicator--b983c571-3eeb-4b28-ad89-5fcfc3a892bc", "indicator--ba9cb344-46fa-49b1-910d-385b06c42695", "indicator--03fdb135-8df8-450d-89a5-bfea0ab51752", "indicator--b9c452c6-bd15-4989-83c3-c5001dc1deb8", "indicator--cdd17835-4bb6-4191-bd9a-e8741fc451c0", "indicator--8ebb2a6e-5276-4479-8cdd-b2a5079c3eb2", "indicator--3404398d-b683-43c5-aae9-93d784496f2e", "indicator--6f105f00-cd25-4f11-8b03-0070c86cc887", "indicator--abf284d2-7427-4533-9a12-154f2fe2342e", "indicator--f0fd4de8-e35a-44c2-9acf-52eac28947dd", "indicator--7e11eb04-8514-4f8f-b9bf-8061e038aed2", "indicator--aed234d4-9031-4e04-920e-03684e11d261", "indicator--87bc1777-e3c1-47c1-ba41-21fab7d98bb5", "indicator--d19fef07-2da2-4538-ac20-664ea61fe215", "indicator--9cafa076-736c-48bc-a80a-0a9f10f4f172", "indicator--bafe1776-3b1f-4b57-9b33-a4b3051daa0b", "indicator--a2f160b2-77f7-44c0-b329-9bf0b3986690", "indicator--aa419188-8390-4b9d-a327-051954b08233", "indicator--ad55d779-c312-41c0-b22a-ee4626d20a79", "indicator--f3cb181c-9865-4a3d-b8e8-024dd6a92429", "indicator--d57ac6bc-c1bd-4ed2-a763-274029331ebd", "indicator--97aac01d-372f-44dc-afc9-d768c84ce35a", "indicator--ff235385-8141-4ca6-b168-c26da1b08194", "indicator--0620be7e-3750-4d46-85bc-332c19d9fcb6", "indicator--14671a53-d7e2-465d-8612-5676c40928b7", "indicator--b154fee9-5948-4276-81b3-8d83e6f5e13a", "indicator--360e24da-4b1c-43a4-9728-8debe364891f", "indicator--85093768-225d-4982-be83-4552d749366e", "indicator--d20f0349-70d9-43df-9cfb-b0972cdf4c14", "indicator--e7c07190-1a32-4c6a-81a3-33e56cc1d5c8", "indicator--cacc1448-b694-47c9-98d9-54aa23aa3fd3", "indicator--09cdb3b4-accd-4185-93b8-b63fe866ff65", "indicator--63e5462d-d028-43af-a926-15e44d890f13", "indicator--5861b359-efa0-4065-9c63-03c9412c7544", "indicator--950ec6fe-7f1f-45e3-a7b8-b2852961374c", "indicator--7880412e-9e62-469c-a419-1e3440523462", "indicator--9e73ffcf-4b08-4fe7-8ec9-dec5b5b96b72", "indicator--f58ab9aa-352f-4fa3-a7c4-1fd12406d54a", "indicator--801d8290-8f7d-4e40-a249-baf61623bf7a", "indicator--733e7526-9989-4b4f-a118-f23d19cc0aef", "indicator--70877ce8-cbe8-43b6-832b-e73944e32611", "indicator--15720b26-4503-4dae-bf25-ab08ff590129", "indicator--27a06ecc-9703-49da-8f8a-74280626bc20", "indicator--498e2178-0b71-44ce-945d-f2fe82ba2373", "indicator--d188d4bc-c949-4def-bf2e-2aa8b66fdea1", "indicator--ff146f57-fe42-424e-8cc6-4b23ab7987ba", "indicator--3526a9f5-fb21-48ee-85f0-3f989c35804c", "indicator--ee3ce772-e617-4e2a-97e5-18b80584fb3b", "indicator--b5ec0823-c9b1-431f-ab31-d74bd5021506", "indicator--f7bbc7d7-47a8-4964-9ef3-16a172e16fff", "indicator--c7afb8fc-697c-4b24-a7eb-125c5888c39e", "indicator--83e08be0-27e9-415b-b1e8-626704ff418b", "indicator--1fb464b7-a4d8-4ab3-8487-844ae5509409", "indicator--4a38a112-bcd1-4638-8183-b71c01999e37", "indicator--0233652d-aa7e-463b-9d42-6569ee9dda91", "indicator--be1003b0-a981-4489-9199-54e45e22cfaf", "indicator--689270ca-2b74-4be8-a88d-dcd83ef62132", "indicator--b9b4e84f-0376-4c7a-bace-3505e6cbc286", "indicator--ffc9788c-f905-4381-a44b-9523b1da9bc2", "indicator--bea89d49-26b0-49f0-b91a-3e3f32b22f9f", "indicator--588ccf9e-870b-4f05-9e0b-de27e89872f7", "indicator--8b57bc68-9f48-424e-bd30-2e92a3177a03", "indicator--e75254a0-bea6-4f90-a455-2ad19c9fde13", "indicator--27b9a89e-f17e-4831-be7e-60cc896c3de2", "indicator--fe453b23-5227-46ef-a26e-a44a97501e16", "indicator--71b68b08-e96c-4b35-96ae-30340f397b71", "indicator--2235e283-a306-46c9-9bdb-1301414c7dc0", "indicator--95a1b6be-25c4-401f-b304-8c1cf68128a3", "indicator--fd30a93d-2873-441b-aa77-c5b9f8c69184", "indicator--98a770d1-0b4f-436e-a6a3-885be1d30ff7", "indicator--9a0ab37e-06a5-41c9-a38d-359afcd0e69f", "indicator--196df5e4-0659-4d30-81ef-c1dbfec362d3", "indicator--a2918b3f-5afc-4446-8e0a-0f0dafd8aa5d", "indicator--86324dff-c242-43a9-b485-92bd1e8d1f70", "indicator--f7ad088b-0ecd-47a1-abcc-94cb8467a36a", "indicator--aedb33ef-9f58-4106-a51d-00fca5767939", "indicator--da68f9a4-ac66-467c-8943-8952055544bc", "indicator--8aecea66-54a0-4a92-bd1e-9d28fa92b87d", "indicator--1bba4aab-5fe3-4904-8a8a-6749206e7bb3", "indicator--f9de85a4-fc9a-455b-9a0e-1c628ab0ee2c", "indicator--036371cd-bd78-4c56-ac5a-d68c4a0c27f3", "indicator--f05c8a2d-6099-4555-9b1b-cde241d7341c", "indicator--0e677753-e37b-47a9-94cb-f95734701512", "indicator--6781359b-e1f9-4b5f-ad31-29ceb193f0d5", "indicator--132add8f-7481-4226-b2ce-3fa68db4bb18", "indicator--5db9f0a6-ba0a-4643-9381-c965da05f49a", "indicator--070c4975-d3d4-475c-9eb8-3cd047957550", "indicator--6b2a8074-22b0-46fe-8a1c-a97a170be11e", "indicator--556beeaf-ecdd-4852-a3e6-79e023481de6", "indicator--1a547cd0-f689-4348-82d9-8150779f2367", "indicator--d2f05a9b-d81b-4274-9d20-006101da6e7a", "indicator--77b2a838-fb4e-4e5e-8266-991a6e7653ef", "indicator--dd0655ae-68ef-481d-a0af-0aea8a575f26", "indicator--49dafbf2-f066-4bef-ba10-9bcbd2443d95", "indicator--3fd9dcc0-8895-4b5c-a376-f5feb731644f", "indicator--3e8e9096-90c7-494e-9582-477cbf335647", "indicator--e347603d-3639-4fe3-ae0d-52f54b83e8b2", "indicator--69605fa4-17df-4841-a25a-9bdc0e4dfdfa", "indicator--6e7f8b0b-5fed-4284-ba5f-f48c3669dd55", "indicator--ad45fdc1-7a9b-4479-98c5-7e7e7656cac7", "indicator--bf5df756-e2dc-4c19-86f1-230290c8584b", "indicator--09840db0-a7ea-4d7e-a388-441307d03b41", "indicator--1289df66-333d-4d7e-ba58-27d35ca0ab27", "indicator--fc7d5e54-ff74-48a6-aba2-e3f03ba3177f", "indicator--e9c8bf16-a2b8-4683-b49a-47b4459b1288", "indicator--ec8f9b42-20a9-4ef2-af23-aaaec5f61fce", "indicator--4c98168e-a8ed-4f6d-9343-fb50556ed8cc", "indicator--0577a888-e5b9-48bb-b331-e42cb3b36e2d", "indicator--ad50c435-b835-4a93-8477-cdbcc536a4ca", "indicator--362dcdd9-f64f-42d1-951f-0fb133d9e4af", "indicator--f6dfaf88-5f57-427a-bc62-5a38ceea3c7a", "indicator--f6d48b2e-4759-42f1-87fe-5bedc10ef918", "indicator--ba4bea35-b322-4520-b0ab-4d5836f850e4", "indicator--0ccf7b31-029f-4c27-b552-582026df35a5", "indicator--2a836870-c8f9-41b8-a231-4267846d3ef7", "indicator--8a19fc39-ff55-41c1-bca2-36efc919fc8b", "indicator--dfb235e6-5b5e-4591-9a81-3e6864b4a8c1", "indicator--a6f91886-ea61-4e0f-b5f6-d7a9bb22b537", "indicator--3b10349c-5f11-4a9b-b0cd-6728192b5a22", "indicator--c8b480f8-e3fb-4757-bfba-64b319f03282", "indicator--cf3588f0-86cb-49cc-ad74-6291d4ac24fe", "indicator--76ecbbf0-05b9-4478-99d0-aa8483c03519", "indicator--0ff5619c-efbc-4497-b343-12d3e5cfcaa1", "indicator--7931c32e-6b4b-40e7-a15f-ce1c8a75f0f1", "indicator--6d051595-8b45-41b3-b04c-2cde4e978aa7", "indicator--aa10e820-7cf7-410b-baa1-d462828b516d", "indicator--5ddc1ca9-d4fa-43de-bc89-6ee11fe236b0", "indicator--a379a137-d967-428d-b1c8-f1abc687febc", "indicator--fbc7ae73-ee70-4bf4-906b-18cf8bf58353", "indicator--50243b8b-efb3-4437-9515-f1767582154e", "indicator--6a64e5de-71c9-4a25-bd15-551ff74505b0", "indicator--f28ebb98-efb6-468a-86a3-f29412168f8b", "indicator--6978900d-4969-47dd-bed3-db5f33f85682", "indicator--55c41745-6ef9-48b2-ac7f-60ab1d07b54f", "indicator--55896067-b595-41a1-a8d5-600d5a4e9ef7", "indicator--cef29111-f9b3-4aae-aa4b-c2a0fba4fb69", "indicator--d3651e3f-1661-4955-80dd-08234d008ea7", "relationship--3d1c5425-3293-41ab-a9d0-4a0015a675b3", "relationship--eeed3d18-1dcb-4309-b550-d4690f298ef1", "relationship--8ac4a12d-a150-4ace-a90a-9d581c997962", "indicator--241bd2f0-19f1-40de-8868-f90a5f12bd85", "indicator--43e6e422-c07e-45fa-9abe-333c44a2eaf5", "indicator--f8a9f1b8-786b-4c99-bce9-91527ec79c68", "indicator--592a7c45-012e-484d-8181-2090cb2b4571", "indicator--9ccaf7b9-deb3-4a6c-91c3-a886f9676a30", "indicator--72269330-f486-446b-bd4f-b5ca26ecd728", "indicator--e9a071a5-e6ed-4305-b877-142d4629a368", "indicator--46f0e63f-d518-48b5-99eb-5c38af7361c9", "indicator--7725a22b-18d0-4cb3-a139-5044d74ef0e4", "indicator--f0d7e007-0029-46cc-b38c-ebc0e14e49dc", "indicator--c8dc4329-caff-4a8c-8dbc-f2bbccc238e6", "indicator--775592db-d4a9-4566-a738-5c4183b4d729", "indicator--ce7d8043-4e2f-4707-97ee-625612e43654", "indicator--b25b891d-327a-4d38-9f05-56e678494d40", "indicator--d52f018a-9256-47cd-b449-7ffd6b859a04", "indicator--5347748a-36e8-4f6b-a659-049d0e3ed854", "indicator--6e9058a2-4110-4c49-97ae-c9665bc11255", "indicator--b25b9046-372f-4450-aec0-8aa48f7a2247", "indicator--8628ba93-d71d-464a-b712-ebbe893c1fac", "indicator--e7f00316-4dbd-49a2-9625-aa9a8878898d", "indicator--1cf48efa-a3d7-492d-8aba-9b38b9c9c174", "indicator--ee1b8901-ac0d-4381-bdd5-d1e0ff6085e5", "indicator--be670b2c-d2f5-4346-8b47-b0ab808ff745", "indicator--3a28d2f7-5113-46f5-b110-e5cc7235115a", "indicator--333adab7-39f3-4cb9-90cb-6b8f2af998b3", "indicator--02b8c6ad-e424-4782-957c-0ee163690501", "indicator--96c09acb-a86a-4d99-9748-2b595e9ae2cb", "indicator--8320d9bf-9da5-4e81-8da2-5228f475ff4f", "indicator--c4afdfc5-ca3c-4040-a701-f5b9669bafae", "indicator--b8a65e4f-ba62-4d9b-a522-eaeac8df0fcc", "indicator--d2b383f1-d945-4e8f-8670-5c80544fdaf8", "indicator--d24f479f-2f7a-4d80-8316-bbc21c2d79df", "indicator--e52268b4-a5cb-4815-9ba6-026e7b6fc92c", "indicator--e7923df0-3bd7-4ce3-8955-817240538127", "indicator--b9be7de5-3b6a-401e-aef0-9f49ab1f1252", "indicator--405b9292-ae87-4dda-9c7e-f7cb9e4c3b65", "indicator--81cddd4a-61d9-411a-8403-c62705f00671", "indicator--aabd2fd6-1726-4a44-acf9-e216e79a2ff1", "indicator--17b5364b-4bed-4783-bbfb-c58667d45819", "indicator--402361dd-5a96-4030-8c61-1fba85ea2280", "indicator--ff7945c7-2b6d-461c-b6e5-127eb723816f", "indicator--3d4067af-09ab-4170-b146-9d2f974a21fb", "indicator--2f8d6b8a-f7ae-4c89-abbb-076b93bb1393", "indicator--569d7ec3-2fe3-4070-b0e7-851314c51486", "indicator--d8f6203b-e92f-4023-8d4f-31168e99067d", "indicator--a65bafd7-8cf2-420f-89fa-9057286325e4", "indicator--f43970b9-7c27-4e43-ae07-43a680283e3d", "indicator--d7905b76-cd35-4fe2-8660-bf2fe5d7b6c4", "indicator--150f2b43-4b8e-450c-97e3-89931fde8ba8", "indicator--d85df998-894e-4d44-8714-aa1557f6547d", "indicator--696a6f3e-80c4-4970-b31d-62094af8a2bd", "indicator--eafa162b-fdb4-4d46-9f63-165d02799213", "indicator--bd83068d-f570-46d1-b14d-7303cac4ad8c", "indicator--6bc8dcb0-cc14-46f0-9aea-ec1e274a8bb1", "indicator--eb2fa0c0-1963-46e6-b0c2-c853ddd27c2f", "indicator--5117aab3-6900-481f-9ac8-30f547566b7e", "indicator--f45e9d5a-5272-42df-ae05-81532c99500d", "indicator--48d28347-4ebf-4c3f-ae7c-1491288cbf21", "indicator--12f62c29-6b9a-4ff3-a9dd-fb405d856634", "indicator--566b7e67-80b6-44b0-bb67-5da43e0a9c3a", "indicator--48f05e18-2864-4703-9683-99758b79eaeb", "indicator--7b23f97d-1360-418f-9eb8-d936b885e7da", "indicator--4539341f-4008-4cea-8183-cd35768f3ec9", "indicator--695f41ad-c9b1-436e-b54f-4d6b0b95c722", "indicator--bc59c3a0-c6b3-4e10-a1bc-e682d2461f62", "indicator--37b67ded-8c24-48cf-aa9f-c8510a61415a", "indicator--45d19646-b061-4039-af3b-de41143e7c3e", "indicator--74128397-baff-4e6e-a1b0-c7db95b1ea14", "indicator--c9249ae1-8780-4902-bbdc-660312dc432c", "indicator--6ecd6cc5-1c39-4c28-8fa4-13ab515f929b", "indicator--c800f106-798b-40a3-8a97-7e3f0b45134c", "indicator--5df309bb-ac61-4b6f-9d21-10f18d3b3d0e", "indicator--437b8a3f-f65b-4c8a-ae0f-1866de85259f", "indicator--d56ada49-62f7-49a3-bd60-2ec9dec9c4a3", "indicator--3adada06-cbfa-4154-a0d3-6dc38fb94373", "indicator--ffc360f8-2972-4b2c-834d-9ca1f328bb74", "indicator--78ed3c62-88a4-4bf2-9335-430f47c08923", "indicator--b59072d3-527d-4f56-94b6-a78472f09df7", "indicator--a3e1961e-9c41-4a64-b046-818d15a4f992", "indicator--d84e8e4c-1bca-4fff-b36e-999b02b708c5", "indicator--7dbdec3f-6c58-4821-b080-724af7db3d0d", "indicator--fc872e02-95de-4550-b642-50bf930d5239", "indicator--61563cec-58f3-4c1c-bfd5-9070158af2d8", "indicator--135f26f1-b937-4ab4-a94d-2d86ac99e284", "indicator--9d987bdd-e3fe-4b74-932b-6c7ee7174f4c", "indicator--c0566ef8-9064-43a1-af40-74317485f56f", "indicator--c3d3b040-7b1c-4cec-9318-b5ad3e550f5a", "indicator--000466e1-a5c4-4f25-904f-7e6d551f600d", "indicator--3f8e31e3-10b2-4b9f-a800-2c029d6838e3", "indicator--f53e1d61-1cfe-4397-995b-462b0717ef29", "indicator--b7bfc9a3-c903-4f06-87b9-9c77b0a4984a", "indicator--2bb87cb9-ebc0-425e-9d89-18dbf2d9f4af", "indicator--69e38a92-660a-4ced-897b-932dad50bc1f", "indicator--66121eb3-070f-4273-b804-2e2807f71ae7", "indicator--d6208b46-6629-41fa-9c3f-7cc5448bc72c", "indicator--937e206b-2ee5-4962-8e52-8769590fb7e9", "indicator--83bc83f8-da85-4424-96ef-8524ebd806d4", "indicator--75a3d58d-10d5-433f-92f5-570b8a524d86", "indicator--1f4fcd31-4628-4d12-a5b2-3ed7f9642f67", "indicator--4d319dfc-a6bc-4284-bca6-92b60b01c326", "indicator--2cb8c17d-1f7d-42bb-8c2c-5bb25bf36362", "indicator--096f453c-6c7c-413e-8199-7e0c1b33ea0a", "indicator--077a0f2f-edbf-4d43-a168-177e4db5da0d", "indicator--ddcbbbd8-531d-4c25-aab4-8bcd965ec378", "indicator--652c0b59-a2c7-45e0-82a3-e13bfd02f894", "indicator--3f0465f6-e331-4173-9721-40b61fec93aa", "indicator--18c0723d-b80a-4c9e-ba5c-b19feffc5e73", "indicator--60aa4336-aa33-4752-a7d2-a1b101ed397d", "indicator--346caa0f-7c32-444b-ac8b-8e31399d4f15", "indicator--5980cd51-e2eb-470f-80cd-229f8a5c4ec0", "indicator--a8152cd8-50f1-4f24-a9c2-4ab31f776dd2", "indicator--07c5b501-a268-40d6-ac5a-d7858ba6e390", "indicator--fa822f36-be5f-4396-a823-9cf800117426", "indicator--8458870d-008a-4333-bd1a-9bcf988148d1", "indicator--be67ba99-7166-479d-a99a-34d64044b399", "indicator--4395e89b-780a-4b09-a4b8-2e5a9f6f5933", "indicator--1f232b9f-311d-4dbd-87f3-6a49978ff7e7", "indicator--b6786c1b-f614-49b3-a0fe-b21f15dcdd1f", "indicator--fc429167-bcd9-4bb9-9a54-013ab6415d9f", "indicator--2e1ac5d3-9e99-4a77-8397-b91b07ad1e34", "indicator--ee1cbdbd-a7c2-459d-a9e8-9874112548d7", "indicator--a2d6c6c7-a9f4-44b7-94cd-c43c8c88d74c", "indicator--d9e193d0-746a-448d-bcb1-b9ad4f3c9966", "indicator--610d954c-400c-403e-b615-3cc5b5b4c9bf", "indicator--3fd77571-cbf4-496c-b2a0-b9447b5ed22b", "indicator--08494728-6f8f-4f9b-99c5-b7003975838f", "indicator--a1ec4e17-57a9-4914-a37c-d50722e2516b", "indicator--e367af1e-178f-4a5d-804b-5e9e2d326bad", "indicator--a7993491-d48d-454e-8ffa-aaa677ef09ac", "indicator--3dcf01f4-ffde-4dea-87bf-824b9d1cb77f", "indicator--0c810f8e-457e-4ff4-8888-ccdc2d3f543a", "indicator--0fe4dff3-5dd3-49e5-804e-a5868242a5f9", "indicator--4392abc2-2eb7-4588-8a0b-ae3cb50d20cd", "indicator--d87900ca-5e1b-4236-a7bd-0f9480b42872", "indicator--be00fd80-7324-47a7-9e10-cba7f7f2dce5", "indicator--712c541d-9301-4cee-8388-130142d19d28", "indicator--158d380a-bf18-4a40-99be-5c2b887a9052", "indicator--8524e0e7-c212-46a8-853b-441293a88aa4", "indicator--27de9ca7-b8aa-400c-b18d-2c07d6229bcf", "indicator--352ddcfb-214a-454a-a1a3-e660520d5450", "indicator--cc205f5b-eaa9-4ee3-b8f9-658f178179b5", "indicator--11dfc7e3-63ea-4fa2-857b-7a231e907a68", "indicator--aad7921c-31f1-4e02-84fc-c05fa217ba6b", "indicator--b02530cc-e8a0-4789-8b5a-b5db6c1f7741", "indicator--5aebb127-701f-4884-bd1f-ea37157bdf3c", "indicator--3c106d5a-c4ee-4633-9a43-594f1df26deb", "indicator--dc30834e-3603-4523-a72c-0c958c4f8bec", "indicator--3abd7302-d379-4088-8bcb-caf221d3a159", "indicator--a5d76304-d4ee-4ccf-87be-eee4e97bfa12", "indicator--f6eb6506-6137-48a9-9a87-c498f1b88c5c", "indicator--8559e979-350a-416c-919a-e86740e211fc", "indicator--d51e1e60-744f-46b2-8998-94f6da005c68", "indicator--43202f77-4585-44d9-8dfb-934b946f3a8d", "indicator--11e1bd2a-eeab-4c79-84ab-bb770f5e9f45", "indicator--f328c08a-ddcf-4dac-bc08-be8d8ac21716", "indicator--1ea49f7b-5c79-4c05-ab01-935c08ef5ec1", "indicator--5b2a72e3-567d-4017-8a96-b719c64caf62", "indicator--a5b9720e-5516-42f9-b997-4d354ee9c40c", "indicator--55cd62a2-8e13-4b12-a193-209ffafbce6c", "indicator--f18ce07d-5c73-4773-b9d2-04b58db80a83", "indicator--09d44711-2506-4207-ad49-bcf39f3161ce", "indicator--f2f10ff2-4251-4a06-ada5-dfdd409ab472", "indicator--b2f5de81-f298-4b78-a5d2-760afdbf9658", "indicator--52873fe0-bfbc-4761-b8b6-03708de2203e", "indicator--80049654-8f51-4126-82e8-2a9525786651", "indicator--62a37be2-0f9d-450b-9053-323693f03d83", "indicator--fa3a6e46-b77b-4914-8fcd-1d2bb520ed39", "indicator--70d89305-a33a-4a91-985f-9790657bb319", "indicator--404770a3-44f1-4694-99ca-8c81072f92e0", "indicator--8c310359-4eb4-46d6-9a4d-dfa8c6713c99", "indicator--0738c15a-efb1-416b-b767-f9c2088cf9a2", "indicator--eabf210d-d6e9-462d-8a6f-54360ebe3e62", "indicator--42dc1f85-f71a-4d76-b2f6-ca7e0486ac51", "indicator--5c84fdc2-6b13-43a2-bb27-56009733bff1", "indicator--1868c36a-32c0-4bc3-97d8-f231418b905a", "indicator--44acb2e7-7288-48c1-b730-de62fd285687", "indicator--df1cd918-438b-4ad8-9870-f44205474a57", "indicator--821fc874-f236-4de6-83a4-af33cfcb1daa", "indicator--cc5adac2-3995-4aec-9068-2ba2a039d608", "indicator--8d44c957-c798-4031-8517-3863d3efb304", "indicator--7241126f-1f77-4401-959b-a86b0f60c1b1", "indicator--cb961a9a-8d29-4e30-b5e5-7b8dcf801acf", "indicator--d3c4c9a6-1f91-4bc2-892c-1ffe98077734", "indicator--ca2d772e-e206-49b3-ba3a-ba66c2e19493", "indicator--97b0d87a-42ff-41eb-8615-4a94bcaa70e3", "indicator--d99d6d0f-6f91-4d85-bae4-7b8ad091263b", "indicator--c691ebae-32ad-48d4-8afe-a99453aed770", "indicator--4ae6b1d6-21d4-4243-954f-de243df4ebc2", "indicator--91993c53-cfdc-493e-8e07-dd84b389856c", "indicator--02d2890b-2dc4-495d-ace9-2aff6d3240bb", "indicator--4fda000b-db5c-4339-a87c-5c2db7b9c5f7", "indicator--4d216095-9733-4a63-aa63-19dbc1f19b55", "indicator--22756f0b-b7f4-409e-92ce-a6eb5677e46d", "indicator--8793ec80-a17f-4f21-9dc7-c41450d4e346", "indicator--f8e2cbd1-a032-4d1d-9fe6-df2ef25566bb", "indicator--c505bb09-93f7-49dc-8f5e-ed48d871478b", "indicator--e2dce913-5f30-4dd4-a888-643d86953a67", "indicator--55e10fac-ec47-41b9-a383-bab79b55c560", "indicator--feb8f3ec-2216-42b5-93e3-a47b8c7259a6", "indicator--46c2d908-2448-490c-834b-0e6f6b67851b", "indicator--fe5e847b-a88a-46bd-a28f-c05e3d04dbc0", "indicator--f3c531c2-1fdb-4656-a259-2107f8165a40", "indicator--0c225363-f38d-444a-8b56-348f87341df8", "indicator--1c4791c2-4423-4a72-8e66-2545a4a6c0ce", "indicator--7a60e251-4ada-4de4-b50d-b170f9868cf7", "indicator--d05d0777-3a8a-490d-94d4-f016bf86760a", "indicator--b140d410-c721-4c2d-befe-a999f1e61794", "indicator--5acf75d6-c384-4ae1-8648-a757ceec3d78", "indicator--b99795a9-320b-4eba-a312-106f58343081", "indicator--934d46cd-4b87-4ed3-bcc0-060d1ac97fdf", "indicator--4e314f84-654d-4a24-8d0e-287d511dfdcb", "indicator--338b6f9e-790a-43db-bdbb-0ce19c91172f", "indicator--79ce9dcc-e206-45d9-81bc-6cc78ef8d458", "indicator--ebb15b8b-c5ba-4821-9671-228ac89b251c", "indicator--84574a3e-1409-410f-9c85-e9b8e44a5161", "indicator--7469dcc3-20a4-41dd-a96a-aa9d3212e0bb", "indicator--24bf0cb6-34aa-4013-bf66-bbebb6801046", "indicator--a9e18642-60f9-4132-861d-021727e2ca4e", "indicator--522b3bb9-5358-463a-8195-122ca5400de8", "indicator--658cab3d-0e99-4535-ae2d-3a9ef9d3f000", "indicator--251f3d72-6579-45fc-921e-a39f5cc61b05", "indicator--a35818eb-5c3e-42bd-b5c5-1d244e641f25", "indicator--480e10bc-0bb9-462f-89d0-02e3a2a6c961", "indicator--7b475dc5-f707-40fc-9809-3e136041acc0", "indicator--a768826a-303d-47a3-b899-2fb5361f777a", "indicator--4f5d57d5-d321-487f-9314-bf6d509ca8a5", "indicator--c10b3a07-c8ed-4951-a554-f688c842017d", "indicator--d0eddfee-6ac0-49ee-8ad7-20b102a0d088", "indicator--181cb0a8-a4e1-451b-bd71-044273d0d485", "indicator--d4c2cc81-f572-4b10-a352-2bd824c7f1c6", "indicator--284d0506-d475-497e-8ca0-631c4889d1c1", "indicator--d24fac5b-69ef-4e6d-b9ca-0a6c6b493a57", "indicator--4ea3e965-627e-4290-a66b-2b9e6631cebe", "indicator--2fdf0ef4-6095-40a3-ad65-a03586ceb261", "indicator--12fe1479-a313-4d95-91db-f07d0884963c", "indicator--acb4da2a-0b90-45f4-94d7-e966fae722fa", "indicator--8b47deeb-8462-4f76-8419-9f8c3c4fda6f", "indicator--ac26182b-0c43-4815-95f0-69784a7eb224", "indicator--1235aeb5-0380-4ad1-9312-d15d673c2673", "indicator--9fefa713-8899-4f12-b046-05bff3bbaa84", "indicator--211546e7-a569-4878-a8bd-2d01d035acc1", "indicator--a539f100-76ee-4749-bc66-543774742423", "indicator--d29a64c9-5594-42ea-b8a7-fe32f3062933", "indicator--efab19e6-9d3f-4b3a-8ff3-c10cd326ce7f", "indicator--e04e565d-c986-4b46-b322-a99cd6cfa23a", "indicator--375ae3b0-209b-45aa-846e-ff478189811b", "indicator--28a6cf57-79cc-4c49-bdb9-1c5c31eedd02", "indicator--5523ae5b-39ac-42f4-8f7f-53dd6cd18e76", "indicator--a2b3209b-9747-4824-bb91-a3bc3df1cbcc", "indicator--48cff71c-e3e4-4a62-8853-ba7abde32dbf", "indicator--22b82c46-f121-4ff2-b0de-a15cb8c04aae", "indicator--2f068bd2-4d33-4610-8930-01c1224f44a8", "indicator--917d3955-474a-44ac-b5e6-421b7ba4b098", "indicator--7fb67544-8180-441b-ae15-c6e6d5895fa4", "indicator--401ff588-60ed-4b58-a10c-18dd72b14c03", "indicator--1b864635-0572-447d-8d0f-9d1f554c28b3", "indicator--2dc0b2e9-d1ca-4035-a67b-3756187ea37b", "indicator--a991b70b-ab59-4537-93b7-97c14f39b477", "indicator--069189f9-dbf3-4684-844f-f249d376157d", "indicator--842b94a0-35f8-411c-a54c-ede64c8ebe5b", "indicator--a59d7134-e14d-4e85-bdd6-66a6c0bfb7a7", "indicator--9add19dd-34f1-4801-b8ca-5dcfc4b360c6", "indicator--b003d3e8-c8d8-4aac-9df2-aaee5e44cb46", "indicator--337f77ce-3c90-4be5-8a43-1c612b902e62", "indicator--3f9e12c6-57e2-47da-bb63-900d54d0f5c8", "indicator--1d219bf5-758a-4ebd-b880-87b5976cc508", "indicator--b0c7c813-318a-432f-9815-80b76844cb77", "indicator--7f29a5b3-a5ad-42cd-b653-76615b4324f2", "indicator--17d86a80-69b0-4724-9783-fee6b232d34a", "indicator--04262f71-8d69-4264-8ba1-9ce4b6661f96", "indicator--cf6f241d-72c0-40eb-bed2-5bde7c0cb338", "indicator--463873d2-b8df-4db6-a23a-6aefbae8c3b0", "indicator--e9a19729-b1fe-495c-a127-378e511154cc", "indicator--c7a16ef1-37fe-483e-8d05-8cc1f3e25fd6", "indicator--9ae660d8-8516-46f5-a3fa-92b3f4cf0a17", "indicator--6a0c93b9-2157-4b7d-92ef-b95de8212c3b", "indicator--e232679e-6911-40c0-9293-24580d824fb4", "indicator--966bceb6-596f-4645-9d7a-ffb63e402a71", "indicator--0ec75c9d-1ba5-4555-b85b-976bf22a218f", "indicator--587f290b-eb93-436e-b3ed-df0434f35cbd", "indicator--d3306979-c0d4-47f7-93bd-3f5103777420", "indicator--d006f8cf-aa8b-4082-98f5-b257586db392", "indicator--28679ce9-e959-455f-bf90-ab6a3829e7eb", "indicator--294e2015-4a65-45a5-9300-fa111ff9f7b9", "indicator--255e0b16-412b-4d5a-bb45-1394155d7e53", "indicator--5595e3b6-9672-498f-9015-2f72037a264a", "indicator--634579fc-2b73-458a-a228-2436273a9916", "indicator--1fc29782-9987-40fb-8162-0d9624031cfd", "indicator--06ffcf98-b68f-4464-a626-a0b3de87ee19", "indicator--04865615-0066-4bab-8f82-153ba65d6160", "indicator--43e8f6d4-4a9e-4a61-a00f-f08683260126", "indicator--bf8d7508-0de0-46bf-b58a-089be3866d5b", "indicator--e8454a48-2dba-4016-bffc-7ad6a9666c4c", "indicator--a649d19f-60b4-49df-b8aa-5b4628c093de", "indicator--da239fb6-8154-49d1-9841-e7aee27dd13c", "indicator--06bd1646-d882-4a7b-8e53-1f438592f6ce", "indicator--d06c4c52-ada1-4d3b-a1b1-e77e42e14ec9", "indicator--673ca833-f425-41ae-b90a-dc5d2498086a", "indicator--2b227fd2-4394-443d-ad70-27a7f62c0330", "indicator--453bd9dd-26ce-4845-81ed-dcc4edcc6ed6", "indicator--2b15df7d-876d-4d55-9b26-6a5479ad047a", "indicator--dbfbc0bb-0622-406f-858b-594284032417", "indicator--0da7be3e-849f-49ac-b07d-10e77c101e13", "indicator--1971cadd-cb24-40a9-94c2-9aac9c8fb4d4", "indicator--c81f99f8-c3c3-4ebb-a85c-d6030a856eb5", "indicator--6c1a0f21-c213-4fea-a4b1-514477a58819", "indicator--78ea1f0f-42bd-4380-a809-bc60e24086af", "indicator--8f92324c-82c8-4414-9d76-1081c8c5a4c5", "indicator--98d4a894-188b-4048-88fb-98e171e1819e", "indicator--75d902c4-5749-472d-9c2f-0b03faba0717", "indicator--9c78bdb1-cd4f-4b99-975b-50e3caf5f5d2", "indicator--1b12f417-b7ef-4e93-90e4-a57f6985640c", "indicator--84f819d7-7c22-46bc-9c70-1835d58978e5", "indicator--f5794cb0-ffe3-42c1-921b-0a16d01b61c5", "indicator--e1b8d131-e8b9-42ed-bda4-54954280a065", "indicator--6766fcbc-ef08-4348-bd57-aad4471618cb", "indicator--5d930635-6a99-4ad8-99ac-88443619f182", "indicator--ff1cf20f-a6ef-430a-8073-acca017aff35", "indicator--3e3d24a6-6b19-4724-b079-ce6970cdc1db", "indicator--9bae42ee-f07e-4787-b640-dd5f30e9c161", "indicator--183c5ed6-0f86-4252-9ba0-26ee32303fef", "indicator--f2e6afcb-6bb0-48b6-9dc2-44e6aee3b8b9", "indicator--16d4f729-7c5c-407e-94aa-bb2658b22ed7", "indicator--5c22c5b5-175e-41ba-b863-75e374db84f8", "indicator--ba09577a-1455-4a46-8f87-63849bb190c4", "indicator--7f1667a9-4a21-429a-8cc8-9be463a8cdd3", "indicator--7b68e4da-9309-4e3c-9629-0a80a012547e", "indicator--979bd571-55eb-4394-baf7-aeb74e146614", "indicator--c9ac4f6e-9711-426e-bdff-5b4837d6b12d", "indicator--044c820e-a71a-40d1-af82-432672b2aa9c", "indicator--c9eec4ec-7ca9-44a6-958a-032bc6cb5495", "indicator--4056aca0-3aaf-4826-a45a-80325e419d6d", "indicator--7f6bb389-a7a3-40d4-85aa-2b58b2af568c", "indicator--cb978e32-cfcc-40e2-8fa0-5a799a2eff9b", "indicator--d96493c0-13e6-4213-9322-6f5c05a3365b", "indicator--ff67e7ac-bfe6-4ff1-b441-839c429a1684", "indicator--c866ceb0-f85c-42db-a773-c14f0d5d3f67", "indicator--1bddbc28-15cb-4087-a82b-961810e883df", "relationship--ddc8c1aa-734b-4566-92fb-0763fb761e42", "indicator--3ee2ab1e-2dc1-4caa-9639-dac64d324a02", "indicator--6fb948dc-290e-4aa1-bd85-492dba95656e", "indicator--f78544af-3933-4c8d-9a4c-cb82a95277a3", "indicator--6719b5fd-66ba-418f-a225-e594d9f9f30e", "indicator--9ea0dc1d-8414-4b10-8794-cb558db711a2", "indicator--e810f6ae-58c7-4b73-bd53-f8764db09b42", "indicator--05573665-85db-40e1-b1a2-e1f1218798c7", "indicator--23842c3b-7e18-45da-aa3a-0350b15d22c0", "indicator--3bbe5e62-ea48-4357-ba6f-868007a946b5", "indicator--b28098a8-b58b-450c-abb1-db1f1bfba170", "indicator--709c0944-91af-479b-bee4-57c705464cdb", "indicator--0277b747-0972-48ca-8db1-b0fc2551360b", "indicator--43761156-573d-49bb-883b-f679b16d8422", "indicator--b81c69c0-81ec-4e25-926e-73cb6dfae57e", "indicator--4da01ff4-b0d3-43a8-a7c2-5d5cb7031111", "indicator--c310ec97-cde4-4254-9fdc-40fc07109523", "indicator--9434e076-1ef2-4c30-87bc-7c9bca299c5e", "indicator--40fa8d73-d324-4ba5-971c-0ae4bfe45ba9", "indicator--bfc4ad70-1b87-4c28-a307-7668c4e801d9", "indicator--ddfe86fd-1013-415a-8c5c-bfc4f3c1bb2d", "indicator--58e98a96-9adb-4a18-90cc-8860aefca030", "indicator--f7fda4f3-4d8b-4fd7-a5ea-31104e9af338", "indicator--fb2d9cb3-1227-4a3a-a057-701b8a91aecf", "indicator--760f7560-3f10-4720-873d-7375b1d2f1e0", "indicator--b18500e6-b7e1-4ab9-b88b-050a5d115cb8", "indicator--79a88dbd-f773-4e69-9402-f6fa8e60a778", "indicator--c5d36f68-fd1d-46d3-9284-20064f4e82ae", "indicator--ae683181-ced0-4f4b-89ce-8ac7764dd247", "indicator--98f9881c-0f10-4cd8-ab7d-0d31f8f310a1", "indicator--2f89ef14-3918-46c9-b076-c08633bcca7f", "indicator--cfe69641-fb8c-4168-8ed0-63c736a471be", "indicator--6acd51e2-a7aa-4f6d-9d1b-418953b40add", "indicator--7e111533-c238-4434-bf59-e60705dcb07b", "indicator--8cec5fd9-068c-4c63-8e7f-41ec7dad5877", "indicator--4d976e1b-fc68-43be-beaf-6c503ffda1be", "indicator--103e4440-f8b0-4526-9e79-08b6a9f76734", "indicator--2ab83f90-9a3d-475f-ae56-baeee19da2ad", "indicator--70c8f362-4d16-4109-bbf9-91062053b79e", "indicator--a874ef68-3916-4a4a-9644-fa35fc234d56", "indicator--2986f97c-0049-4920-90be-8e00bbb19091", "indicator--a0c5354f-aa04-4186-8ebc-7b8826093744", "indicator--2edf83b2-2ff3-4d2b-b7ec-0ce8ecbaeeba", "indicator--a86b29ed-289a-4e25-bf32-e0cb323850d6", "indicator--c53d08bf-51f3-4747-8257-30b96dc2fffc", "indicator--db65d5a7-6f22-463d-81e0-b1cf997640fa", "indicator--79b92b92-7afc-4a36-b6e9-903991459b75", "indicator--8e266fd1-ce1a-4389-88d6-b935f7d7f937", "indicator--0cd0e933-1182-4ff0-994b-14d50f816491", "indicator--1504c1aa-9b17-4359-9340-ee6f0aa9983c", "indicator--94618d36-9269-4090-98d5-9146c928fa85", "indicator--5bb30af5-57bf-48d4-8a01-ba1e8917ec39", "indicator--82e8fc69-db76-4a8a-8fcc-a7af56c03ec6", "indicator--6c99def7-5db0-4fb0-80a8-72ab9b6d1fea", "indicator--245944b0-6111-4d4d-9a84-edf1228627b6", "indicator--971a21c2-22b6-4f91-b974-f6495efac27f", "indicator--620afabb-c8c1-4bd4-8ce7-a706df8cfb2d", "indicator--efd060ef-0a00-45c6-a1d8-5cca91c42b0c", "indicator--3229ac7a-6e7a-4256-9b9e-2ecdcce98b0e", "indicator--d8962e05-ff70-4e87-9a22-da4564d0409b", "indicator--d7393cfa-b51e-41d8-bdcf-845b47de47ba", "indicator--5fd98af7-f988-4546-ad56-ad75570a15ba", "indicator--1e3ab67a-9935-42d6-a2d8-796f44dce974", "indicator--1d3a6697-fb99-40d4-b32f-6e0147a25bc5", "indicator--e2d5a1dc-426a-4987-bbc1-aceb7080d890", "indicator--4a5b556c-9f27-4260-af18-b5a03696d81b", "indicator--2715c8d9-eda1-4d89-b34d-6a4b0f70c745", "indicator--3ea4b047-f24f-45c4-87b6-227e028e18b8", "indicator--ae26ba75-df45-4752-b5c3-eb6f4762a843", "indicator--48b66eba-c1ad-4994-a9c0-9a4a84d7dba8", "indicator--89889f86-5fcc-4168-8fc0-ffddf9d3314d", "indicator--8701eed8-79fd-4fe4-9dfe-5553fc7434df", "indicator--73eaf92a-68a4-409e-98ff-dcf1da22faae", "indicator--518e5f48-a8aa-4768-95db-849fcb83545c", "indicator--c681be4e-df78-4d6c-8722-dc4d3eb051e1", "indicator--15e7ee3e-8de8-4e4f-a2a2-4292ac272712", "indicator--98f00782-9145-44cc-85ae-4b7a7578e39d", "indicator--3a1f7391-98c5-44dc-93fb-ddc56acbaf0d", "indicator--cfc90960-9d38-4619-bde5-3bb927d9a89f", "indicator--a130bbc0-514c-4be1-a6f0-b8f76062760f", "indicator--41af14d7-a0cd-4be2-a28b-756bdd650903", "indicator--e8a72644-726c-4717-8695-d56908b757b8", "indicator--0f235658-1169-4403-a9d4-946aa326c95c", "indicator--272bc549-2f49-47c2-91af-05fb1a81ee18", "indicator--206421d9-7c17-4c3b-9b27-7700c59ebc35", "indicator--8d590d68-afd3-4fc0-bd41-cd0796fc0d5f", "indicator--16676130-bee0-42c8-a03c-ce843696408f", "indicator--889cf647-c4a9-4e0c-a71b-b11593e424f8", "indicator--324bbc87-2218-4d6a-92f9-fbaf1f95d43f", "indicator--971e2589-3b50-4d4f-bae0-7a32c575261b", "indicator--335f7447-e208-4380-b583-7c5b614b7e6a", "indicator--ca080a7b-590a-4d05-a683-a7dfbb60ac13", "indicator--c279b2f0-93d3-4ae5-b179-b72ab0fa390d", "indicator--0d8adb7a-bdce-40ed-9037-bc85cdc854e6", "indicator--9e88fe2a-02db-4831-983c-8274f3e3bed2", "indicator--2f0f8ffa-8f4a-4b42-8b5f-6a6f14c7620f", "indicator--b086064f-0b14-44b7-a910-f498cc90e10b", "indicator--9221b4c5-c303-43c3-8d7f-013088f17023", "indicator--f4f43282-a2f9-48e4-ab87-45022a9bbab3", "indicator--801dea86-f19f-43ae-af50-c37d4a61ef9f", "indicator--49b8d0b5-d2be-4f88-9ec4-90f0d7e0a0be", "indicator--fc34d846-6366-46a8-8aee-b20bd00f2156", "indicator--88d27356-3813-49b2-bf57-1b16a6e3989a", "indicator--80ccc7a0-dd5f-4d1a-ac10-c4a4f628a756", "indicator--e7575fc6-63df-45cc-83d1-509bb2fe816e", "indicator--312009aa-2bb2-4212-87d9-1a2bfb6878e9", "indicator--7e9fecc3-b3ac-4289-84b3-49146e3f52d1", "indicator--848c4a07-d5b1-4c29-bfe8-7690613ef3ff", "indicator--001991e1-6fba-4a5a-af6e-d73a21dc6e02", "indicator--3e34420b-dfc7-47ca-8c96-f69936f758f3", "indicator--84ad448e-f104-4d22-9b3c-ae5db90b4faf", "indicator--3cf35a13-32d8-452a-aa02-26d51562e90f", "indicator--24185779-a8cf-47c7-a81d-255a063c09c9", "indicator--55493676-43dc-4df8-9a79-817fe349ac05", "indicator--7e1abf40-7ea6-4fd3-a5eb-68b1c8ed0159", "indicator--c59f0632-3430-473b-9370-affc02c08f26", "indicator--97bf426b-71e1-4577-ab08-c43612a48ffd", "indicator--20cb1016-4805-4182-a36c-ec80071938b9", "indicator--522c0f00-3e86-4a38-8d64-ce9254bda75c", "indicator--6504c15f-b612-4edc-ac5c-f34818aebbd2", "indicator--2d7a7a27-7f34-494b-b56e-aaab2a543e05", "indicator--2e19b9ff-429c-4dbb-9f75-1dc28f8a38cc", "indicator--3aca70be-5901-4713-9afe-9928ff6239e3", "indicator--9c5963b6-1dfb-4bef-b252-a37da4a2d84c", "indicator--292076ad-5b58-47aa-85fe-d1e038f30a91", "indicator--0f5e6ee8-62ac-4778-95da-9ea902c6db8f", "indicator--917bf2b6-bc45-4add-a889-3af1ff64529c", "indicator--6c58a387-ff3a-41c8-88ba-8462ff537304", "indicator--27d44628-6f64-4f45-8255-37c17bf90976", "indicator--804dcbaa-e91a-4cb5-a357-a0765554e094", "indicator--29b5cb6b-4557-4ffe-8e2f-dc0326b6c54d", "indicator--db722c2a-bc09-4446-8311-4ce643ca3d8f", "indicator--bb20752d-9210-41ee-9694-69ffa334cd04", "indicator--84f9cdad-b74a-4a49-9753-2ef158a88a7f", "indicator--5d361a39-5cb0-409d-a828-ffe820c48b43", "indicator--1afcdc27-aa75-4b8c-a174-430772f0a069", "indicator--b78da358-91ea-4400-a968-34607290ca8c", "indicator--9f40488b-3024-4667-b9a3-15a0b5dee186", "indicator--43c61778-daac-4a28-9d0e-9112037eea6a", "indicator--d9ea134a-0ff5-4286-8319-3dd1d69ac339", "indicator--ff4e6c69-bd52-4374-b784-c22e296853ac", "indicator--9d3e012f-34b5-48bb-aa57-8d545bd9c7f1", "indicator--7bcb06ba-15b8-4fde-8830-7e48077cef9d", "indicator--d02f95db-8b05-404a-92a6-99c44823439c", "indicator--dec44098-1d76-4cf2-aad0-950885bcf4f3", "indicator--51b4c330-c954-420b-b32b-6f8496c2e5e0", "indicator--e7dc9829-ed92-48aa-819e-fa5a90c4eaad", "indicator--a2ac17e8-f5c7-4c07-8fe4-a4902a560a99", "indicator--b4e7115a-02c5-4c6b-a869-c996d4ca662e", "indicator--1b35ecec-1242-43a9-a209-32dcf228a956", "indicator--90d98c6b-4fc1-4586-bfc6-35535b83f45e", "indicator--83fc67cc-420d-4cf7-88c7-a1ac171e4290", "indicator--c37e2e4e-a8fd-42a7-80e6-af6a48104b2f", "indicator--9fb03934-1c92-4e3f-b6b5-2f6ac374d71a", "indicator--9e46bc33-cc7e-4a62-ab54-beae7b7d8799", "indicator--3e748377-25ab-4fd8-bb98-f40d71e61a74", "indicator--3eb11472-b253-45ac-95e5-3dd6277a9462", "indicator--272e9695-cd2f-4f82-bf0b-eb69abc14913", "indicator--25ba7447-464a-4e2b-984f-f62ea83c4ba4", "indicator--839ca857-1b83-4692-b593-5c8f329071aa", "indicator--09f62192-f985-465d-b7c1-9864c367258c", "indicator--99ac56a0-962a-47b2-8c13-11957fcc44c3", "indicator--5b6246d6-65f7-44f0-a5c5-0adf02915b43", "indicator--24591b68-eecf-446f-87e7-ac5511a017f4", "indicator--76094446-aea4-4c2a-85ce-9b40b382ee0f", "indicator--acc43a7c-c439-4649-aa51-e5fa3bcf39d7", "indicator--86fd8b47-c772-441f-8d54-5427e52c0ac6", "indicator--1449529c-e2e1-4c89-bb6a-021dc20aad3b", "indicator--408d2d9e-c94e-4173-903c-b5e5a5cc8378", "indicator--cf6fd92d-67f6-4c4a-93c9-9ae0ffb12aea", "indicator--b97d7f0d-af94-4055-9e7b-6869f1c7553f", "indicator--400481c7-c78e-4d06-b48a-cc1eac325d0a", "indicator--4dbe1f35-357d-4497-a145-c05433ca4564", "indicator--e6ce8cbe-9b5f-486e-9a63-6f96260c32b6", "indicator--04099053-d224-4e82-ae6d-cce1481bc009", "indicator--8a9cf5c0-b76c-4563-8a16-fea10da85425", "indicator--0b4c48a8-8c95-4dc2-9681-e4653cf897f4", "indicator--9676b9a2-bc68-4603-a351-1d71db4c3dc7", "indicator--3e0911e9-8132-4f78-b87e-a02b61b2f691", "indicator--97e1c901-9eeb-4726-a01f-378c740ca0e7", "indicator--d7ca70b9-7984-489c-a3d6-1121f36f300f", "indicator--d6f12f2f-5f1f-4c91-9313-f38e0d1b6b9d", "indicator--940e7ea3-a69b-43d3-a841-516881497825", "indicator--fcd658d8-3119-4842-b63b-31d6e27c7440", "indicator--05efb68f-eb36-41f2-87f7-220f0dca56b2", "indicator--049881bb-4ccd-4c68-98a1-2f5847925259", "indicator--fe5b40fd-2c8d-4d56-8a80-ab61ef2783bc", "indicator--dc630fbf-7707-4c79-8266-c716aa8e66d9", "indicator--7ad3094b-5994-4478-a470-409ddff72dbf", "indicator--a797de00-3873-47eb-84be-c28be39b9028", "indicator--97aa0b61-0a2b-41d8-a2f3-5c2fda1f5594", "indicator--6b0ba3e1-87c9-4e68-863e-ca8a5f1f39b1", "indicator--7eb20154-b6b1-4e56-8dad-4316fac46292", "indicator--da71cc46-4f72-4452-a440-85a51fd3593d", "indicator--80a8aaa3-a565-485e-b7f1-4409ff495693", "indicator--ed3bad98-fc04-40bf-aca9-eac5ac43dffa", "indicator--d732d5bd-69a7-4b27-97ac-29cb957967be", "indicator--9b40ba23-80ee-4a15-ab47-7aba9f56a6f2", "indicator--b4f70be1-3d2b-4464-a453-809525ca4ac5", "indicator--54dc224b-9b26-48ef-8c8c-3dd0dc8fa997", "indicator--dc4f11f5-31a1-4965-a172-e16ebe82eb0b", "indicator--c8c765ac-d440-4cb3-a2a9-0b702647952b", "indicator--4a462849-7614-4cc0-a990-3ecfbf2e50fc", "indicator--306c0fc3-1135-46bc-a73f-f984863ea1f3", "indicator--97826d84-f1ca-4b61-bdbf-4304eda4747a", "indicator--c86b61f2-8989-4e9c-9305-8c692fae7ca6", "indicator--00db7fce-e261-4e28-8aa5-6635f9df7686", "indicator--5066969b-bd7c-46df-b532-83300f38057d", "indicator--a7144319-1e6c-4571-9311-c82ec29d5534", "indicator--3cedc013-b4c0-493f-bf5a-35626acf4622", "indicator--e5513a4f-9860-420a-931a-d43bf7355280", "indicator--bf12fbe0-bcbf-4e58-bb01-c324f23bfcad", "indicator--bfc589ea-3bb6-4ed9-b8f3-b80c49c5855d", "indicator--c0b87272-eb57-4871-b791-81edbe122fa8", "indicator--3e0f64d9-0776-494d-b297-2d7069ad02ba", "indicator--ae80253d-210a-4b79-b06f-7ae0155b5b37", "indicator--9b3b95e9-12d1-4e07-8867-770e0f4c5967", "indicator--d26e63e3-7e85-4249-aa03-f36b004a775a", "indicator--b139a72a-cbc2-4d90-9541-84a242abc4a5", "indicator--7ccdd18d-444d-4e9e-9536-200fdc266a34", "indicator--7696a76a-4887-4a7a-9062-0178e26f6381", "indicator--794cd62a-de52-47e8-a8d9-be8b8b0e9f91", "indicator--f64bb949-3048-4ce7-ba9f-5dc93de948c7", "indicator--03706380-da23-4c4b-882d-4d6f7185fc00", "indicator--4da4a4c5-ad02-4c42-8444-cdc5ff356c07", "indicator--6bae9fec-8990-4abe-8273-038abe8776e3", "indicator--aa17aece-5e51-4b53-8a21-f43e2349cd6c", "indicator--2170be56-ae89-4155-acae-39e31c535cb0", "indicator--8b04e4af-0cba-4e89-ae73-735d3cc0a995", "indicator--8a5883e1-9acf-4e1f-8675-d540b4be7942", "indicator--820a2230-2451-4c20-8242-7f2d19a94835", "indicator--da82bb07-2d5d-43ab-88d0-e50d8bed561f", "indicator--5418db7c-1d5b-4ec1-a286-28e73161f8d1", "indicator--2b53baa5-9348-48df-a160-6a83c997b10c", "indicator--fb3208c2-5618-4b2d-8857-3aaf2589294f", "indicator--363730fd-499b-46f1-af4d-3df1f07c42b5", "indicator--bec4f257-5936-4abf-8918-4eccc19e8df0", "indicator--964e26f5-968a-48b0-9b52-1c4d278715ef", "indicator--cfd3c863-dded-4101-875b-b5ffabd91fca", "indicator--5b80e5e1-c1ec-4adb-9c9a-047447189e5f", "indicator--8dc44154-3caa-41aa-a016-3d26ca24b370", "indicator--a1267ef6-6700-47ae-9a66-2f3770d32157", "indicator--fe50a16f-8275-4439-98a8-d702ea963b60", "indicator--4e60cb86-c77f-4945-829a-ef348d39b72a", "indicator--e7618e32-8979-4751-90d3-0c739de94b25", "indicator--714f9b17-3969-4746-b1f8-1ed58e94ee6e", "indicator--36b41cb0-0518-4907-838d-c6eeeb7d86ec", "indicator--d221bc42-04d4-4b51-8c03-527ba1a24869", "indicator--5cab207d-b5d8-428b-a95f-f56f2912dc84", "indicator--fdf00d95-fbc6-4c4c-889c-fdcce61c7c78", "indicator--f3e06b41-5e5c-497d-aac5-76b05edf7537", "indicator--865bbdee-f048-42fd-84cd-81d0a6551a04", "indicator--c3b25436-ec1a-4762-9fa4-50ec2bef2e40", "indicator--5053c585-fdc6-4a9b-b1bf-f6e53b3672a6", "indicator--41987e36-0834-4d9d-a029-0358e05aff37", "indicator--b710698d-32cd-4393-9df3-0c421f262a16", "indicator--639ec4ae-14b1-46e0-880d-b94431f0e57a", "indicator--0f9f5344-6697-4330-8de1-671d75661f62", "indicator--9bc2dca5-0b92-43b6-a0bf-41fe9fb9dbf1", "indicator--393e3d6e-2f03-4a47-b110-98a4946f0d1d", "indicator--99165af7-af72-4914-8d83-37f9b5f0480d", "indicator--c9d70f74-a173-431c-a14f-7d0ea9a4e7cb", "indicator--dcafa0be-0dbd-4df3-a331-5b75aea006fb", "indicator--d15c6456-b19a-46ed-bdee-fa954ef0bef1", "indicator--08e0053b-d029-497d-ac6c-b42e8e0d18fa", "indicator--5b227b7d-3e7c-4ca6-a619-9fa8989ee88f", "indicator--f219abcb-e922-492a-a410-991bcae37967", "indicator--bcd7e112-4d29-4ff8-a4da-9af341f921ba", "indicator--931185f7-d37b-481c-94a9-e44951e7d1a8", "indicator--c0173d6c-4117-4566-8ac9-0172fe099e76", "indicator--07fb72d7-8c37-493b-a699-d6f636c20789", "indicator--45be5dc8-ee92-4e31-9958-548ea6c27943", "indicator--c3ed19de-d08d-4dd4-a7b7-87a3f8c7c96a", "indicator--744836a4-fe15-4d38-8ed4-b7c9ea1c2f44", "indicator--fcb5be02-24a6-4d4d-8b9e-df60c09f3906", "indicator--3c95682d-f44d-4f4c-9b1f-1795fa3ddd3e", "indicator--e34e02a7-9fd5-45bf-a4ed-77bef6ae541a", "indicator--a34c3866-c2a2-42ea-9a49-b35bcacd28d4", "indicator--79cd0371-5e26-49a5-add6-1b562b484cdf", "indicator--2a276d29-7b46-4e84-bdd0-f4b517e5c5b1", "indicator--f249afbc-859d-407e-9593-75619d42922b", "indicator--060b7309-a17f-4ac7-a2df-c5fcce489a8c", "indicator--f04cca8d-f38f-4564-9026-432ddccd2e6d", "indicator--13f831c7-06cf-4b55-bcc7-385da9c72fc4", "indicator--df16a742-9fde-43ef-b9a9-0ca164d52653", "indicator--3d8f5f9d-b54f-4624-bee2-154097c63b59", "indicator--447ba7ad-0145-45c5-8b1e-4999cbc0a68b", "indicator--466bc088-5cc5-40e6-8e42-573ffce7f048", "indicator--1ba27afc-82b0-47b3-bef7-98c972ee6826", "indicator--300bd553-cb57-4f3a-8a9f-0f8066aa8c5f", "indicator--ea8425c5-50dc-45fe-997e-4e74a5862f6b", "indicator--5961b1b2-9f19-4de9-878d-263b743f901c", "indicator--97ffbc64-4249-424c-9005-616b97b09955", "indicator--979d5c19-213f-4f5f-a920-7a061b446b7e", "indicator--63fd065f-6245-4d1d-bb98-01e8ed334f73", "indicator--bbdec7e7-f0f6-4cbe-8732-81640ff9a931", "indicator--028b843b-d908-4e29-85d3-b4bb187fe899", "indicator--a236ad93-8db0-4626-9b90-e2ddcad43674", "indicator--0945e2ce-ec22-4b9e-94db-a48219e124fc", "indicator--aee8c8d1-8806-4fcc-9d5a-577be5e3f5de", "indicator--d43a3ad5-7693-47dd-94d1-ce85d0368e8e", "indicator--66a2aacb-3fe9-4f41-94c6-623dd5817b1d", "indicator--a6083501-87df-424d-a24b-7194969ab1c1", "indicator--7290c8e6-b1d1-4aef-bf37-32f49bd8d529", "indicator--2820490f-ef87-4872-a1f0-d024296d046d", "indicator--24e3d0f8-b147-434a-a798-df8b13b1841e", "indicator--b2d4aaed-13d1-407f-b9b1-dd2bad85e87a", "indicator--f8bb8b4a-efd1-4881-a77e-6131be79e409", "indicator--077030b9-5c5b-4404-adb6-990242b7f28e", "indicator--2cf67910-9c69-438a-87c5-48869aed580f", "indicator--e674ab9a-a5b2-4ca3-88c5-e7c8845c22d0", "indicator--34a12702-580c-4a58-a0de-c3b42fff4cf3", "indicator--09090174-2036-4480-93df-ec687ca4faa4", "indicator--015642ee-1a2e-4500-a2ef-486e4df55166", "indicator--6e4253b1-4121-493a-ac7e-665f312da0da", "indicator--a1c6faf2-c7ab-4f8e-8ebc-d89e5bd85769", "indicator--f2a53fae-3cd4-4843-8a93-492ae85650a4", "indicator--cec171f8-7bec-4031-9ebe-115abcb0639c", "indicator--3f01de06-8ab9-4c01-ac58-4a4e4e679ab1", "indicator--01eac2b7-2cde-4931-b6a1-970aa44503e0", "indicator--248bd467-f34e-431a-a4a7-f112a85608fb", "indicator--bbb844ce-0477-4787-975c-d3ea342c9548", "indicator--5641ef76-845a-425c-9cc6-d25c40d6a87c", "indicator--39c65749-044c-48b8-8b30-b4cd41746c25", "indicator--3125054c-76dc-42c2-b116-3d7ce8a267bc", "indicator--e1fd79a1-5e8c-4c03-a723-d55a4795ce64", "indicator--f5b9ea47-8af5-4bd9-85a3-4cb4da353635", "indicator--ac03a612-ab6a-4727-a59a-f4837ca8fa6d", "indicator--9bb965d3-1a05-4f59-b1cf-d8130594ebfc", "indicator--50d81d89-9f0c-4ba3-9626-f8f94b282c02", "indicator--36a3f250-805f-4391-875e-37831efcaee5", "indicator--e4d90527-4be3-4310-8eff-f894e5b16416", "indicator--3db2b2de-b06e-4875-92f2-422e8596f87a", "indicator--9247939c-28de-4d81-a9cc-0c400e6eb5bf", "indicator--5dcd4ac6-c309-4391-945a-3b8fe0314a25", "indicator--668a4143-60a9-40ed-82d6-c82e9d5c3861", "indicator--a793d7d0-4ceb-4dd9-9640-a4089226bcb8", "indicator--3a6e32d7-0d6d-4ff9-b6c0-bbd3d5945502", "indicator--094c8e14-79e5-4490-b9da-f7e896e57640", "indicator--60116f5f-8c9d-423a-9ef2-f0c70f2fb10b", "indicator--a65dc1c3-c000-4b6c-8f07-bef23b781b0d", "indicator--2f8acf41-541a-4cc5-b189-12fac48770c6", "indicator--fc9d52ca-b68c-4941-883f-f944df1e739a", "indicator--fb258e2e-f17a-4bec-b7ea-5f0625530af6", "indicator--835538d3-a88e-4d55-8174-f8cfaa037526", "indicator--3240fcfc-d713-4e77-95ef-72b3fc4ac3d3", "indicator--7d5f9199-84c3-4c36-9f29-754b9378760a", "indicator--36d2c69e-9e7d-40bf-a1e3-236aa6c3187f", "indicator--6f6de34a-7102-4488-b763-e392715ea3e5", "indicator--790a7bec-5176-4b0c-a43f-8cc1a7310e79", "indicator--247dd55a-2b51-4873-9d79-07197b840c29", "indicator--399e89f6-60b5-40eb-9607-e4a5aaa8eb58", "indicator--8eb3979d-306e-4b47-b106-fc07b290c285", "indicator--29818d49-c1e8-4b1b-b435-33851b1e443c", "indicator--7f04f17a-61d1-49e4-b791-9c95d9bf9eb9", "indicator--6e047b4f-fb9d-4280-9687-39564e55958e", "indicator--cd9944d1-bad4-447d-a25e-9ea569387ad3", "indicator--37c547cd-11e5-4cb1-818a-b27749727b49", "indicator--1f888a37-a9ef-4bf1-89d7-6ac62bd3f039", "indicator--528b615e-d0ef-4c04-b387-08d71874fce6", "indicator--1b9f95e1-60fb-4482-9f71-8c58f2d6d782", "indicator--c9ed8978-9f7f-4b5d-ab1a-8d375d55e9e3", "indicator--4fbedc42-cd76-498b-a9e5-3c45f6be93d6", "indicator--644f66aa-8b09-43e8-8e8a-39459dbd34a4", "indicator--e32b1adf-f7cf-4637-b8b4-8462520fcde8", "indicator--a5f1d468-e003-4627-82af-0ed053ba34b0", "indicator--9c5bcc55-fc60-44cf-a248-1cc823a1ecf4", "indicator--06ddee43-99b4-4d5f-9b17-8018cb5a64d3", "indicator--decd28f2-8903-4533-9eba-e95964006944", "indicator--9667fa3a-9ba6-41f8-b4f8-14c5152e9d18", "indicator--80d54549-c6e0-4e90-8d9d-a4f908838d19", "indicator--ada7c36e-6113-4051-99a9-8d39eac226f1", "indicator--7c46da21-bf99-4ba7-b5fb-031f0ec7faf1", "indicator--eca342be-2e37-4dad-99a2-72f6e0f66f19", "indicator--ec421865-8e20-41c4-9603-bc9f5c06c425", "indicator--cdf2c6bd-aae2-4cd5-857c-decf09ec29c0", "indicator--fbe258a9-5086-498f-8800-f8e8995b8282", "indicator--70cc86a4-b895-4869-a175-367cf5da0040", "indicator--1787a5d6-4fa8-4aff-8894-e57996413fa3", "indicator--7f00ecd1-d5b5-4157-bbe1-ced2c97a576f", "indicator--d080d739-cac3-48d1-bc58-045435b34c48", "indicator--6a20883e-8b45-4c11-adc4-d3b69747693d", "indicator--bb5ce354-1536-48d8-b490-38745677be2e", "indicator--b6b941b2-c359-4d17-8e41-63c75c8d32bf", "indicator--4bfb7892-f775-427c-aede-590297841297", "indicator--6696ea2d-9352-4f33-90b4-bcd4a0b4a92f", "indicator--733ec9de-954b-45de-bfc1-788aa2287ae4", "indicator--3b671221-ff2e-4538-b54c-f249fe3865b3", "indicator--84d8f09c-d48c-4cb0-8844-5fbfadffa4c6", "indicator--a0c47c3e-68d5-42f7-bcb9-f2ba150f01ff", "indicator--430dedef-9a80-4da4-8d3c-a5ee76489f05", "indicator--89ffd05c-f3ac-48dd-a300-8dde8206605f", "indicator--bf719c52-0fa0-4ff7-9c3b-9a5c8dee1760", "indicator--eadd91d3-6584-4702-9e4e-5176362a8a27", "indicator--53aeb319-0890-4f47-85d5-d3b3914136b8", "indicator--73ad2112-8ea7-4e0a-ae0e-5b1eebebc4f8", "indicator--6c802999-dca7-432e-8ce0-2a5794105627", "indicator--893861bb-68c9-4cbc-a9c0-7757e38217d3", "indicator--d2b35b2d-8b7a-4a16-9a82-ab8178e7f58c", "indicator--b40c0d2e-f7ce-4a52-b6cf-1a11109b736f", "indicator--abbcc4d1-849e-4a9d-b0de-cff39c905f34", "indicator--a8271b7f-6f5c-40b8-b898-577ab111870b", "indicator--dfbd7834-1e03-437f-ba3f-19314eeb8c9c", "indicator--efca0bb2-f3c8-4bbc-981f-5954070fdf21", "indicator--9a7c01d4-f89b-424e-9af4-91450d8258dc", "indicator--a718eb93-40d1-45df-902c-1301c9d7c33c", "indicator--2129ab87-37ee-468b-b538-ea3f041103cf", "indicator--7bf0188e-f871-41bd-9ecd-19210a9822c4", "indicator--dea8677a-a56b-4b36-91f3-e01b152230d8", "indicator--70824bca-8eed-4b91-b6f7-d214706e9b60", "indicator--003a7a9f-0906-46a7-9231-376752d03e12", "indicator--d9dc3073-315a-4a66-aa31-b49b39ff2245", "indicator--880bee32-546f-40b1-bdeb-989b6dc85df6", "indicator--15ef89d4-1de7-4a23-82ae-cfcc16372ae8", "indicator--5a731106-84f9-40b8-adac-b2d2beeffbba", "indicator--bcb25982-078c-402a-9e10-aee4e6e4488b", "indicator--b2d2c472-3c39-47f9-8ba9-079d5afb1e8b", "indicator--4e5556eb-5191-49fc-886e-ebcc7af8fc9c", "indicator--6d2bba35-6e86-484a-a1e0-1668c6d6d210", "indicator--01663580-20bd-4f83-ac88-c0479cf80b51", "indicator--17431b29-0a6d-453e-95a9-8a200dc1a917", "indicator--0228c9b9-2aca-4589-b55a-dd8a88ac3a9e", "indicator--2c1d12b2-3931-4298-b61c-99afbdd6eac8", "indicator--dcf33511-bae4-4b89-94fb-55f65944185f", "indicator--6dd6125f-18bb-4c6f-8a43-1c9aeb040511", "indicator--29297255-dddb-4894-ab00-651b27cf1afc", "indicator--71f34acd-fc41-4417-bf5e-256704e1c609", "indicator--b1b6eb18-1e2b-4f86-b734-f9aa9b15e648", "indicator--0868fa23-e0ac-4ad8-b948-85e403bc5019", "indicator--53a2a5ed-ff06-4e24-b97b-2e9c0fefef32", "indicator--8a2c95d9-b70f-4ea2-802d-334b632ec45a", "indicator--cb5f2d46-690f-4ea1-a48c-f2fbd7a1cc97", "indicator--57e38e34-1514-481e-9afe-0d88d8d3e65b", "indicator--902729b4-4609-4c31-a3fc-2c635184e1d2", "indicator--56bccafa-846f-4c6e-87f1-276f6c6c6e45", "indicator--8925952a-3b08-4690-b3fb-6bb2f95a7ee7", "indicator--5e9c06cb-78b0-4179-9c24-ec6ae76840e2", "indicator--a387aea1-6313-40e0-aded-c92433d25700", "indicator--fe0f8281-3af8-4808-b1a7-ca019864cba4", "indicator--58bab415-554c-46c9-80b8-2c45b1794528", "indicator--ac88db50-effc-4ba4-b354-c6a200b6f7f0", "indicator--a938a5fe-77da-4e36-a7d1-0f8f65373d9d", "indicator--87d71602-2594-4919-980c-314ccd1d2fdc", "indicator--a5dcb93d-c6f7-45c8-baed-9e525786dc4b", "indicator--1bd399cf-c048-4cf2-b250-7630b49fe7d4", "indicator--ab6f3919-1430-4d6b-abc9-bb2716ea5f9f", "indicator--8b5b0ca0-a9f2-4c59-ae32-7076f3c42256", "indicator--8081411d-ab4e-4257-970d-3d3b55ee3f48", "indicator--5a51d69c-ded4-4df9-837b-021ea719e58e", "indicator--62fae663-f340-4f53-a7ca-c7d6152d60de", "indicator--b644069e-4283-41c1-bdca-ed9092af5a75", "indicator--eb5fbd68-3439-4f64-bcb1-62404b9bf92a", "indicator--988e251a-651a-41d7-94b8-076ed9ceb87d", "indicator--5ca94ffc-850a-43cc-990c-72e46b5fd176", "indicator--321733bc-8b0e-41b6-9c53-3c814162ca92", "indicator--3b1625d5-c447-4c8f-af4c-bbc9f843f27f", "indicator--02461366-af86-485e-bd6c-c7912cc8e5bb", "indicator--47a3258c-f124-40ad-8a6a-5b43159a02f9", "indicator--f9e0214c-c83e-4683-adb6-c64f79cac94f", "indicator--f484a692-9adf-4887-a5b8-5caafb76e3ab", "indicator--4afe13c3-12f5-47e6-b91b-ace2011b7de0", "indicator--3921b2d2-cd76-4fa2-8183-409d7649cf36", "indicator--982111d6-0353-408c-a834-056f11a6cbc0", "indicator--1e76c8bd-45ab-4fc2-ba96-f80746844b95", "indicator--c577f1ab-8f1b-47c5-a055-8408f522e03a", "indicator--c08a1d32-b664-4a7e-b8fb-7e330b9f925f", "indicator--a51973bc-7032-4efd-bfe5-aa7fbe6360d7", "indicator--7c058b8e-e356-4cfc-8db3-97334216d326", "indicator--9e5d488d-6675-4365-adbe-fdf45a7360b8", "indicator--e86dddd0-5b52-4d26-bf9d-f8f934db3f48", "indicator--f9255669-036f-4726-b099-d91b6c4a3d90", "indicator--732d2b6d-1f40-4523-ad7f-3c372fa76445", "indicator--14ea3c88-c975-4185-8014-d4eac6e89305", "indicator--d848b838-9bc0-40ed-9746-c36ae20cdebe", "indicator--8cc98f69-3d2e-499a-9e78-05cfb87d98de", "indicator--0ca3be7f-f2a0-4fc1-90c2-b7bcb0523237", "indicator--380bd870-8d53-4b4b-a452-580a7abb8a02", "indicator--72755b74-af52-45ee-af0c-7d5e68ae1f0d", "indicator--0b7ec5a9-6a72-4a87-8114-730d0c6f7664", "indicator--3181c357-1fbd-4d9a-b8ee-fd3d2f8a1d07", "indicator--6a458220-71a0-49bc-b569-692e802bc125", "indicator--0cb8c4ec-3406-411f-a513-1425d7f2ce18", "indicator--02ad9d81-8f98-4600-b7d2-86b84d0998bd", "indicator--ada7c51e-afcb-4d9d-ad79-4b3adaf7eb28", "indicator--9bb7762a-5aa3-4d31-a6b1-e2c191a5eb45", "indicator--613399d4-0949-48a5-845f-a1394869af82", "indicator--4fce968f-752d-4f2f-94b1-05fd098e00fa", "indicator--8c488d24-69f2-4ca6-bc01-ad89b09459d8", "indicator--b822ce15-4fb1-4eb3-a969-1a3bc0d8b7ac", "indicator--0d252b21-3fb7-4964-96fb-73e08f189d64", "indicator--da8689f3-82b8-4a3d-afaa-ea355505151e", "indicator--bcac426a-04f7-471f-af3f-a617c04a8404", "indicator--213da627-540c-4e65-b61c-52918f3ec4c8", "indicator--a0a79257-a4be-4778-8a51-0473faaaa045", "indicator--75154c19-3c91-4654-8144-df8e89d0dda0", "indicator--34442a48-23ad-4200-acc7-faaacb249517", "indicator--7de7223b-0560-4cdd-b48e-2db0c4849b3b", "indicator--0be4428b-01a3-41a6-9b49-839ebac94007", "indicator--7538173e-c3ce-4b33-929e-9581df93a4cd", "indicator--37b1efed-eb42-4b27-84f0-7b67b882756e", "indicator--df64a59f-b2f3-4dc2-852f-4314acbcd8d2", "indicator--24c0bbd3-40e2-4a8a-82a6-3808d8b06f09", "indicator--a6f637c2-0a43-4096-965b-69be4300fd3d", "indicator--07083c49-9078-4a49-879e-6fbeff8966d5", "indicator--4819a69b-ea5c-4bed-a954-c4d518d67284", "indicator--97249c42-5710-4235-ad5d-69bc6433c575", "indicator--15fc9074-2c5c-49db-b13a-996b766d8500", "indicator--379e8d95-4228-43cf-979a-22bca7c45083", "indicator--1d726d8a-5d4d-47d1-bbe3-f5c9c157d4ac", "indicator--cc862b60-949e-4a58-9d1c-c370643b2ae2", "indicator--a9773736-2f12-4877-9db9-0375e8136186", "indicator--e5f07cba-9578-4a3f-a7e7-88e3dae87bba", "indicator--8c8f5217-f9e7-45d9-a4bd-fde79eea09d4", "indicator--5311d16f-2465-4658-8fe7-733d09d3bab2", "indicator--1320d6a1-9d2d-467e-b662-1398ded6fc8b", "indicator--0ef38dc0-05e1-42ab-afb7-5e5e1593327d", "indicator--a65b3383-00e1-44ed-b622-8a975a1cfa9a", "indicator--b8c309c9-6673-4194-874d-2f17165edee9", "indicator--4e4df957-3030-4835-a45f-10198bd55655", "indicator--3819b731-0c7b-4032-97fa-71c218b73dae", "indicator--a9ca7a60-a7e6-4d21-beb8-c9e03fe8e1c4", "indicator--49f5bd93-9e36-4619-aab8-cc756ff7e140", "indicator--b0b30ddd-cf42-43a2-b3a2-28f01e1192b7", "indicator--6350e2f8-8d77-4b07-9375-527e3055e2c6", "indicator--35d2d525-f785-4be2-a3ff-dd82746fa9ee", "indicator--cda2433d-1b2c-4986-a7ce-a3384f78fa23", "indicator--cbae73e5-6d2d-49f1-92f7-d8400b9f893b", "indicator--170474da-7806-4bfa-8afb-b274f07eee16", "indicator--88e26a55-dda9-4238-b4b2-df6af742d306", "indicator--33aee222-5883-4ed9-bcea-b9df58eb8d76", "indicator--9f698abb-39ec-4438-b6c5-2723a5bf47cf", "indicator--2599c5af-b3d7-41aa-b1f1-3e293dd8f183", "indicator--90aec8b4-e452-49c8-a5ff-74d4521337cf", "indicator--41ee1890-e185-480b-8b6d-d8531e3c711e", "indicator--93b4eba3-59c6-4dac-85e4-047b675838f2", "indicator--8523dfd2-846e-46c5-8b02-4f49c6527034", "indicator--c071ea4e-74ad-4762-aa3c-06592c261c85", "indicator--5401b91d-ce18-4acc-a509-d42de5ecd7db", "indicator--a49966cc-33bb-4c02-b77a-7d6af7b43220", "indicator--6e6a233c-bc9f-4807-9ae1-2d117a110b2a", "indicator--495dcf5c-1efd-4035-b6b6-5ba2f6c0fc79", "indicator--b8ae6c3d-e770-4ecf-afa5-dfe29f3c9836", "indicator--3c851161-b07f-4fdf-b259-997761cc5502", "indicator--96f9bbd2-40b6-4557-81d6-95fa3f29e478", "indicator--255dd24d-a011-4e57-b232-ec801d5ed724", "indicator--e22e40c1-a348-4e53-b2cb-5d9a0bd7a2db", "indicator--30cfc6d0-4e78-4d08-9ff4-0a2d70fcda48", "indicator--799255dd-eee6-4ef0-878f-c2caa7122bab", "indicator--cf4f7097-a375-4be2-8540-d710778e09a0", "indicator--0c2ce51b-003d-45e0-85ae-c12519a1ea78", "indicator--69711826-fc22-4ad0-b649-c6376c0bafda", "indicator--781638dc-1f24-4528-8b92-14326b8f7c5e", "indicator--6639d58f-61ef-4d3b-9cce-5e2ef85264d1", "indicator--4534ef58-aebb-4cbd-b58b-b0eeac4462f4", "indicator--891408f8-d880-4d50-b1f0-c8e35e84ef25", "indicator--66da4137-c2d2-48d9-bedb-dc8cf9b31665", "indicator--b4d34b51-c650-4a46-a647-e6ae8b045903", "indicator--eac592c9-3e17-48d7-a4b4-27d8bcffd8e7", "indicator--9c0daf0e-72eb-4e37-ae32-fd17a5c09dc8", "indicator--7b4d7c1e-17f0-4a24-b929-94f34e300f08", "indicator--2692f80e-6722-42b8-b2b2-4203734ecc58", "indicator--5f68eda2-8ebf-4089-91ab-0aea820e9b92", "indicator--8318ac8a-5da4-403e-b1bf-c12d3eaed04f", "indicator--37905bae-fc72-40fa-bb26-d3eb82f1c963", "indicator--cbcb2aaa-a2d0-4188-8b00-41998e696ea8", "indicator--dca93610-c20e-4c5b-a20d-a3f62e2bca3e", "indicator--cc918832-f0ea-4b8e-9e4a-b624c852a77e", "indicator--4eb65ec7-3923-4544-9575-b89e07010253", "indicator--b934a848-f0f7-431c-8fd7-d0aa4833a435", "indicator--6ce66e6b-5d36-47a5-83b6-718f67b1356b", "indicator--b1e7b4fc-b531-4545-8d21-7159fb9cb62f", "indicator--a9c9c569-ab21-4606-9dd8-bd91663b96c6", "indicator--ee50723f-759e-4ad5-a4ba-ce2df34bad6e", "indicator--417ddaac-71cf-419a-b3db-48264620d27e", "indicator--830ab7b5-b3e7-45f5-a2ea-425bc232697c", "indicator--7989b8c8-d071-4b24-b123-6b3079268479", "indicator--65252558-7f2e-468e-9a94-32111510a17a", "indicator--f399abb8-2b7e-4271-9fbd-806bda2a0597", "indicator--11fe94cf-8bd1-4a02-8582-512f13a09745", "indicator--1b9a8c1f-8a04-4fc6-9e9e-ab035bfcdab0", "indicator--b1f6f4e7-b270-4efa-b458-4c22d4a76b0e", "indicator--4a50e44b-28d5-4af0-a045-621bcf52300f", "indicator--dda32fc7-5b8e-41b9-9352-66ee47403369", "indicator--39a7092a-6675-428c-a077-42c3216f13b0", "indicator--840f3568-e91d-42ec-821f-e8413d33a89d", "indicator--83ee47d3-5ea2-4daa-b0a1-b778e2ad3cad", "indicator--ff5c1c30-5bc9-4887-9267-1dcf3c92f7ef", "indicator--1c472af6-bb90-40f7-8e69-53ed3625ca2c", "indicator--fe517ac1-1515-449b-9270-55e98baa2e68", "indicator--f93c61f2-2c16-461f-b163-1e39cd0b561e", "indicator--07b818ef-36e0-48ac-a3b5-45921546d413", "indicator--5c3c4108-5921-43e2-b5a9-6cf911e667db", "indicator--09bc52c8-c1ba-47c4-a8e8-4c37bbf733fe", "indicator--d538df83-b9af-469f-a506-c2a29701a4aa", "indicator--c34e538f-b0da-47d5-9de1-c36d8c7b9636", "indicator--cfaea58f-807a-4a38-a4c9-d1b73c845376", "indicator--88bcd1e6-fe60-4e4d-9856-729e47450bca", "indicator--d2961423-68c2-4413-9449-c9a4b81634ea", "indicator--aac4c24b-07dc-41ec-90f4-feed94edc051", "indicator--3c685263-dbd3-4f6a-a158-625c72d1ce43", "indicator--dbc47c4b-b625-471d-8752-7abfb3d5c508", "indicator--0f3717bb-73db-4dfc-a78b-39af0f76f1fe", "indicator--300133b4-126e-4460-913d-f243fd61df71", "indicator--54e9fbf9-024e-4275-ad44-46711e0f36d0", "indicator--f78a42b8-25d3-401b-a9e7-33532091b5cb", "indicator--993da817-854f-4996-9d71-263a2ba05f79", "indicator--aef54eb1-4aab-43ed-bafb-bcab83730b18", "indicator--581462a8-efa7-4280-be88-ec2318d8b5cc", "indicator--7690e716-2eeb-4134-8d15-d23da7a8b17e", "indicator--6566af6b-923e-444a-bb86-15d2b6418b33", "indicator--4b8d24e0-eb4f-430f-81aa-6fe319760024", "indicator--8bddeefb-e79f-44f3-be89-e5cafdb5dbb6", "indicator--a7a6bda6-e869-4d93-84dc-80cae834a162", "indicator--2bda3fe2-8a12-466d-b9c2-556bde36ca8c", "indicator--40e0a082-48d7-4ca7-9e11-b4c32903059c", "indicator--931ca838-311e-4bbd-b2bc-778961931dc3", "indicator--0f477515-cfff-4200-bce0-217ae9d80fc9", "indicator--a0a90ccc-780a-4f68-a7f8-03e43b281252", "indicator--b2cd012d-af73-4c4c-95a5-5b004c184428", "indicator--57006c9b-1302-4bd9-9782-c08109da748a", "indicator--9b1e1897-901c-4025-bdd7-cff5bb3c459c", "indicator--e7d5381e-b176-4922-bfe3-280cb1ee91f4", "indicator--19367fa1-dce5-4381-8055-e474a1d448f2", "indicator--d9f61bae-743d-48d7-9b9e-742ec8736611", "indicator--16ba7d36-95cd-4d94-a67f-5418dd782a75", "indicator--c1d1e9eb-3ec0-4219-aad8-3ed7b0597e99", "indicator--de908e28-eb77-485e-b851-1a3208d6a5f0", "indicator--f74ea23e-6fe0-42e4-bb49-1fe07db395fa", "indicator--d8cc25ed-b5d4-449a-b76c-2d9a950cd735", "indicator--37510b56-b3b8-449f-8d60-bd04e2e717ed", "indicator--db298a9f-c775-4d28-a4ee-0c74735964b2", "indicator--51041f18-ab50-4466-bd2e-4869bcdffb70", "indicator--b8f60551-29c8-4174-80cf-6aa8ce9ad252", "indicator--959a6d71-24ff-40d6-ac97-0b1dfaeb8f34", "indicator--54488d2d-98ac-4b82-8107-72809d574c7c", "indicator--ae780e66-8478-4f88-ad81-8b902921d134", "indicator--d1b21e92-5242-4328-ac1b-95d03ef8d421", "indicator--35370196-dd63-4095-82b7-8fc4f6ac55dc", "indicator--f6ff1845-1528-46b0-a7dc-6f782967f563", "indicator--f2b6ea11-9349-4e9f-90f1-cc123c676124", "indicator--d0f6c115-cd63-413b-8605-45741d015998", "indicator--9948d3b0-3a9d-4eeb-97d3-8daa38a442df", "indicator--669e9b4e-8357-45fb-b5fd-dc91fe703b5e", "indicator--40bbe8de-974c-4b67-a766-f96d862d1ba2", "indicator--373d53dc-4bb9-4df1-aa0a-71703e05483a", "indicator--70b450c5-87a8-4b9f-aa25-f138e9408539", "indicator--c7c0cd05-0936-4f1b-b594-515bf91b43c5", "indicator--87ac2843-8fc1-4a4c-ab79-cf89224041fd", "indicator--d4b4f3bd-b5da-41a7-95b9-3e5f0eedb0e8", "indicator--582555bf-4897-48b1-89d1-c42aff021613", "indicator--c28c03d0-b34b-42c2-8f8e-83c60236504e", "indicator--d9e0924d-2c91-4639-bc5f-b12c7eaba6b8", "indicator--5e3d3cbe-0837-40e9-bafa-86715cac529c", "indicator--cf43c755-ef2e-40f2-a36e-aa63d69f9948", "indicator--949ec033-02d5-4142-ab7d-83861fae94af", "indicator--706c181b-6aef-4d23-9c3b-cabfd3f10a18", "indicator--d737e089-7fbb-44b6-a05b-43386dcceefe", "indicator--0ec06eba-4a49-4653-aeaf-de0ee46009d1", "indicator--afd93ee7-c66d-466b-8b5c-be8a82b32e57", "indicator--a4758bd9-7c73-4947-ba0c-fa377ae18f48", "indicator--10f856ca-0822-4181-a859-9732cf488790", "indicator--544d10dd-db71-4522-a306-03f23abd5a28", "indicator--69098948-442f-4741-9c65-0d7a73383830", "indicator--2abae270-8063-4933-9007-6c6ec5f67e0e", "indicator--939d672b-6dde-4fcb-8260-47d910870ad0", "indicator--ad9b119d-6e80-48d4-8019-b43f7b6f26e7", "indicator--6f777d24-f911-4884-b821-a2d17e44280d", "indicator--87337483-8182-4fa8-96d8-e4b30d628e83", "indicator--e132be01-a94a-428a-b758-77dfe06c09df", "indicator--0370f641-1124-4f8e-a0d5-ebb43a28194a", "indicator--09a6e47b-e764-402d-be98-35004d8a22ad", "indicator--b9e09bbe-de17-4dc3-8cf5-b734e1b1c26f", "indicator--1b9b57fd-39b5-4506-8285-3f761493f44f", "indicator--ec8597cc-38b3-42cf-bf03-19a57230d752", "indicator--889d5ebd-0406-4c27-9493-580276ee9917", "indicator--c529e074-aeb1-458d-8b2b-01ffd34b37b3", "indicator--f4970755-7df4-4d7b-b8df-3f02e036572b", "indicator--93b8663a-fc50-4958-a9bc-5c62f1a3b103", "indicator--e84fceea-265b-4e2b-8b33-f3b4a1349ee7", "indicator--1d1886a2-be1d-4fa1-aa87-dd4fe579a8cb", "indicator--4f55a36b-f475-4ad9-b042-6bdcb05e9ec3", "indicator--b68118df-95e2-4ae9-80b1-8cbb86bd56f1", "indicator--d0a54dbd-5a9c-4191-9416-10a4eaf5748e", "indicator--53a98623-9321-45fa-8a9c-27e226f8c00d", "indicator--7244d053-b5ec-4041-b20e-272bc2ceb0eb", "indicator--0e8bb870-67b3-4ec3-8855-f5b1cb2cd094", "indicator--b9bc3343-5b78-46a6-8e0c-45aea2eb3eb9", "indicator--361e5344-ad83-4ca5-97b6-7d291dd0e22f", "indicator--d544ae84-7781-411c-b9e1-4512d51d59ec", "indicator--12a01595-6dce-430c-b088-b0ccbe53889f", "indicator--c81b2ba1-6869-4fb2-b512-131014de60de", "indicator--27e18a62-3730-4da8-989e-a99b7357a292", "indicator--d6b4df0f-eb4f-4800-acac-3b0e1b831024", "indicator--7aab58e0-0dac-410b-8469-9793495b9689", "indicator--fd994d34-ea43-4d46-a5f6-0b75ced10549", "indicator--263006a2-850a-4507-a1e5-0e25b2e9db7e", "indicator--0e23f551-f4e4-49bf-85dc-d6765705c272", "indicator--d36860ec-fde1-4ed2-bea3-35560d062ba7", "indicator--7403ec09-4b98-41bd-8775-e1f051f87caf", "indicator--a73248d0-72d4-43d1-bd11-ecce432457a8", "indicator--bf430403-c078-44dc-8bde-31eba185b946", "indicator--fe52725e-d875-43dd-84cc-813c628d205f", "indicator--40bcfd48-c5b3-4988-a1e0-31cc7fdf71d3", "indicator--d149427f-a7c4-47c0-ae2e-8aa419f67acc", "indicator--d1af568a-c68d-4e23-8549-45ad0b93db28", "indicator--08ffa461-5488-4332-9297-9253c0f8baae", "indicator--58fd52ae-9a88-4ea2-ae01-c1ae227a7b2d", "indicator--c37b970b-2bd7-474c-b18a-1797d04bc321", "indicator--2421b2e5-1f29-4e7f-8776-6b569b26f117", "indicator--b372cdc0-cd8e-41c8-8d5e-da33d4c147e5", "indicator--cb1925bb-3f0d-410d-8ce8-f412fc67005c", "indicator--0e9479e0-0603-46d3-ad75-06e78c5be061", "indicator--93089bf0-9b9b-44dd-aae3-8b35aecf0913", "indicator--d9180778-cb47-49d0-990f-20bb19417ea7", "indicator--7630d1ac-8d6b-482f-9427-df9bd66d28bb", "indicator--0a48ad8a-f4ef-428b-8cbc-943d7e5badb5", "indicator--5175db5e-8ed3-4105-b2a1-e261053251e3", "indicator--a47f8b83-bbcf-4f67-861f-9069efe73f93", "indicator--95ab32fc-a085-4c59-9453-e077960c799d", "indicator--41af8f66-5774-445a-b08b-d7182b72435f", "indicator--2519328d-9075-49f6-8087-24b47082f46e", "indicator--e0d93a96-c3d0-4b4f-a93e-6b4a0de390c6", "indicator--5bc86f17-a471-4b2e-b911-83b410b19ff8", "indicator--7d0d1ccd-9107-425c-8d47-3c3852756b35", "indicator--bdbd9765-edd1-4ea7-a216-a44bd70dac72", "indicator--93fa9c54-71b0-40b7-a55c-0d2c75319f66", "indicator--039828b8-ba78-4cfe-97b2-879a63499191", "indicator--e9d56114-e0e3-47a7-97f7-5ac44f5dce80", "indicator--9c6fec8e-a916-45b5-9f65-69d0f4e4df8e", "indicator--139a783a-0522-44f9-8df7-146660133ffe", "indicator--8d657f6b-d1e3-403e-a7da-4daa3d0cd66a", "indicator--948dd267-9fe7-4877-bf92-c5426edc2400", "indicator--0c858e94-4529-42bf-87be-00d4dbd0e2db", "indicator--ca6c7bf0-257e-4c7b-a71d-f4bca26ca4e5", "indicator--5ab8b9b5-003a-483f-9c07-cd4d2ea7e17d", "indicator--c0484327-fef1-413c-96cd-083702c7233e", "indicator--d3fb1025-3f74-45d4-9383-d99fcdb6a4ed", "indicator--096a381e-fc6d-4a6e-8f84-f770ced74ea6", "indicator--8e80b386-431f-4e07-8840-92b76bab5ad1", "indicator--6264c6bf-4a5d-4fe9-acf8-e241fc454469", "indicator--c04ec391-c37a-4f74-8984-ab13f282de47", "indicator--9e15148b-dc9b-40cf-bdf3-1a380cdaaf34", "indicator--7f79c157-085e-4ab4-b97b-99af0583a000", "indicator--4304cadf-bb1b-4834-a60d-bc51c88390b8", "indicator--6b589dc2-e678-43fc-a40b-6bb1c4b85566", "indicator--ee8228e7-02e9-4467-b095-439653c229e6", "indicator--00310917-97e3-4063-a471-bfc3d6181320", "indicator--4403bbe2-3ec4-48b5-aca8-bcc34dfbc55f", "indicator--7730eaf2-109e-4e0c-b804-5f2f8c72a66b", "indicator--3aaf1c04-ac14-48aa-a9d2-20fac5e0d0c3", "indicator--0512b846-83a2-44d8-958b-2f1c09850654", "indicator--f9f65157-d6a2-4d65-bc69-ab13eee3b13d", "indicator--ecf4887c-1d27-4396-bb67-c7da01d84daf", "indicator--0b3365b2-29b3-41ff-9266-a2af1fef623b", "indicator--bbfcf97f-5d44-4fcf-b2a0-343bd984e2db", "indicator--0197a51d-b001-4430-a81a-aed27987ca3a", "indicator--7a76b4b7-e951-48c4-ac6d-e6852bf432f5", "indicator--be8bf2e3-f318-4fc0-9d18-ba4b2aa9e660", "indicator--cbd16e6b-7429-4034-aa8d-c2fe0c9faafe", "indicator--ce8fc4e4-4141-4cb5-9718-532d48416a4a", "indicator--bf6e59d9-8e44-494d-aad8-24dc2ebabfb2", "indicator--d7b859cd-e74c-42d8-9efc-12ee0d8b2293", "indicator--8291f469-5d9f-4b00-a567-d3657422fd43", "indicator--33015ed5-b4e8-480f-9ec3-9275b2135eea", "indicator--5bbc63ab-740c-4964-84d0-532f855d28e7", "indicator--de317a01-4e79-4268-a6c9-21350930d3c1", "indicator--e9b1379c-85ef-4693-a56d-49f1a128bf70", "indicator--b0353993-9e46-4f86-8319-06e8c91baa7a", "indicator--b63d139c-461e-435d-be33-1d771fdcbdd3", "indicator--3fd54a71-ef74-4098-9e2d-56f2b8e006d5", "indicator--1bc07f81-3dd0-4d72-a469-8e97c81cbedc", "indicator--ad27e793-7e75-403a-b321-239733273bcc", "indicator--5a113eda-2d53-48d7-84b1-51f4b7b4a39e", "indicator--2fddb289-faf1-4798-abae-8ba242dfe7c3", "indicator--5fcb5cb0-7ae4-49e0-b7de-816f1504e487", "indicator--de59546f-77cb-4834-8f2d-e04fdbafe97d", "indicator--2e1b4f25-1f92-462e-98e7-201687e8be65", "indicator--54edbb7a-19e2-4833-a1ce-3048a7e87578", "indicator--9ecb830c-aa27-46a5-9086-2c97273d4ced", "indicator--4d8515c6-87c4-4c4a-9426-b89d5a4a3bf3", "indicator--cf8d99e7-c597-41cf-9148-88a26f297f66", "indicator--0904454f-9b67-4039-8dc9-ca874a5d3a9a", "indicator--1e1e9bab-449c-455d-8fb7-cbd981ebad43", "indicator--5b15cece-15ad-4077-a77a-16abffa8b575", "indicator--cabdf815-d366-4418-a56e-8f6daaad03e1", "indicator--48413a95-3270-4be8-ac9f-a32bdd1701a0", "indicator--e4a73c0a-9c86-46f7-95d9-ad7c259fe6da", "indicator--9e0654c2-f4bb-45db-9fa0-60bba86ad4c1", "indicator--bc39563c-7472-46b9-ac34-7e844e83001c", "indicator--38af326a-e064-4798-869d-e75c9eb0a135", "indicator--c3cc1ea5-9a1f-4778-9c56-8613195ec4a4", "indicator--50650e08-2bd1-4d32-a1a1-7368e55aadcc", "indicator--a6a18122-c9a1-4478-a57c-616554c82cca", "indicator--64593ae6-ccbc-4713-8188-9dd4a0cd9d37", "indicator--f9db2dd0-07c3-4526-8e55-cbb5c329a11c", "indicator--cd1ef137-53c1-4e24-ad87-16e4dc235482", "indicator--ea2c1292-0c23-4d3b-bcc0-0274540f9074", "indicator--9ee20e89-029a-4597-a799-7838b7c73e4b", "indicator--3f8ceb64-3414-477a-a5bb-b40aaa6d368b", "indicator--3fcc7dde-329a-459c-8cbe-de669c4b8057", "indicator--9ecd7cc9-dd45-4ddc-8ba4-944d7254eea1", "indicator--1f8893e9-d20f-4848-8d9e-56619b3137f8", "indicator--62f2ecbb-2111-4581-844d-38d5ef751160", "indicator--11c3bd96-7ed0-4817-a6fa-0ffcfaa67272", "indicator--bba157c7-9a1d-42d2-a7a9-2a32e58cd750", "indicator--9ae17028-0bf8-4972-a359-853d65495249", "indicator--16d3f5d8-ca92-40f9-8c41-9de5d570c5e7", "indicator--6ad3e483-c9e8-4573-9c5a-633d2945fd9a", "indicator--6c45e9ff-2aad-4bfe-8be5-6bd0472a51a6", "indicator--701b513a-03a4-46c1-be1e-bfbb7353b56a", "indicator--e9204090-06df-4eef-9e65-373067f452d4", "indicator--ee05233d-1f89-40b8-8c97-b263805e8c16", "indicator--bd8ccdbb-ca4b-4092-a871-0f357d241098", "indicator--1d986f58-0a4a-4041-93fa-58c7c2a46a40", "indicator--5b05cbda-6151-4e10-93b1-c32cee2f500d", "indicator--dfa900a4-0014-4bee-a8d4-9b9694aa980f", "indicator--f9eaec65-de62-4f5d-8bed-9d8648c5aa61", "indicator--9c5ab003-f002-471f-8999-3a0eaa5aa873", "indicator--5384b34d-d331-46d7-9b36-dcbc904eb4f6", "indicator--68153409-a6a4-4feb-868e-afa13328a360", "indicator--a3f74e0d-18cb-4a32-b637-e9a07d2ebbfa", "indicator--5517a8fb-c202-476e-ba2e-a12543ba1c48", "indicator--00c796f1-9573-4af9-98ed-f7412a864898", "indicator--1b38645d-4f7c-464b-86ba-d9d2266e17a2", "indicator--e90fd0a9-129d-4d57-b472-5a879356ea9f", "indicator--70873a00-7e28-4878-a0a8-a28667ebc408", "indicator--36a9ce0b-2fdc-4c8f-af5a-3d3e0ca8d4b5", "indicator--29943c39-b996-49c8-a932-67ba831d3576", "indicator--41c5bd27-753e-4ed4-84bb-a9f3f970ddc6", "indicator--76957aab-574b-4ce9-87af-b3e7690e1da6", "indicator--fb5b3453-3cc3-44b6-8775-ce5f70afcd4e", "indicator--d4903a96-558a-4ab8-b593-94536f193878", "indicator--d068ce37-92ee-4e79-abd3-3031c1148256", "indicator--4cc1aa6a-9e01-4264-ab0e-24b816566db7", "indicator--d904abee-6d4c-4d57-b2fe-cc72cc6be605", "indicator--598cab08-0140-4e60-bb9b-8f82b0af7bfe", "indicator--9129f7d9-2d05-4301-be50-09b4019c895e", "indicator--7806e909-292b-4df9-8c1c-43e0b1ad666d", "indicator--0ac46403-099a-4190-9c1f-2d72e06f9a62", "indicator--2e23bd19-a793-4602-8b64-bdb8826d1690", "indicator--edb42335-2c50-4ca9-a745-b2dec6c74194", "indicator--70988426-73df-4c38-84d8-6f5111a6310d", "indicator--3f4dbf1c-eea5-49d6-ba2d-f287edf4a736", "indicator--9557f1f4-cd8c-4c64-8797-0e4a1b9a081a", "indicator--cdd3e4c4-fc6c-43a4-a9e6-65b0672f51f0", "indicator--a93b5ae3-c4b2-4f1b-8060-f0d35f8d0947", "indicator--bd927eda-32a0-48e8-8e45-26b05bb37d09", "indicator--8c4f8f93-2647-42c2-93a3-c13da8346e0b", "indicator--0f8edc7a-3efe-4cc6-b1cf-c25e1bda40b9", "indicator--9680f239-220b-44f5-a271-0493265d4407", "indicator--716923da-30f3-4be6-9b25-79cfaccfa8e7", "indicator--c780b06b-42f8-45ca-8167-d00cc3bbf6bf", "indicator--cbf4900a-92be-4a84-a3b2-a1e571383d24", "indicator--4544007e-9128-4885-ba93-ff1d13fe2af9", "indicator--2030ca0b-f8e0-42ea-a861-9d53ac4d240f", "indicator--9e53210b-3c1d-4904-a99b-9019eb601216", "indicator--e19140d3-decc-4061-9155-5df15d721723", "indicator--12eb0c67-e49e-47cb-8286-14be024ed3f3", "indicator--e40ed959-d6de-40c5-9d6e-fd506ed30ea1", "indicator--41bbbe75-510d-4162-8d51-99ba9042eea2", "indicator--9887a4d6-ab8c-4ab9-9b23-c268b5e92414", "indicator--0f454124-6b21-4a06-b688-4c1aae59369d", "indicator--48402995-c464-4952-b711-8876fe35bc20", "indicator--c6f8bf44-e9dd-40aa-a6b8-3a58c5d150dd", "indicator--c3b8c0f5-82b3-4fc5-bb31-0e66ad263cd5", "indicator--65145536-a0c1-4e38-b216-90156e3d58e5", "indicator--f332e0c1-ef40-4a82-9ab5-790fc4dfe816", "indicator--f7369fcd-6b4a-4643-b150-276d1145b8c0", "indicator--9dc45f5a-80c6-4aba-aaac-9c8179fca978", "indicator--3baa125d-ea8c-41fd-89bb-a6911e49ef28", "indicator--a1587c9a-fe6c-4d4a-8b50-c9ea23a4e631", "indicator--33374c55-4391-45e9-85c7-33d2477394b4", "indicator--8dc28ce2-d27a-41a8-a76e-69d7a9bd439f", "indicator--b3a12450-ffcc-4062-89cb-b721430f119e", "indicator--edd49e26-95fe-4283-9884-05e6b33a874d", "indicator--6f5152a9-7d32-40f5-8cea-555c3e693756", "indicator--e07f1aef-2c39-4f68-96cf-3673684b218c", "indicator--396be34f-8af3-4f3b-9e12-c1b4a6ec2018", "indicator--05d3d365-7f71-408b-a149-9d1d82812b01", "indicator--dc37d2b3-7e46-4339-9df1-459a11bc7e33", "indicator--7978ca96-99f7-4d28-bdd1-9f34550b8910", "indicator--232158a0-6c7f-4d2b-97f5-87a3357f7b8e", "indicator--0a574bbf-69d1-4e9c-b963-cdbe6eceee10", "indicator--4bf784ba-dfba-4216-95a1-76ee8e1c28d4", "indicator--7e3c8517-9959-468d-affc-2f9b95820c14", "indicator--97eb35ec-f233-490c-8d43-f5f992f70550", "indicator--e0d7b110-0d8b-48d6-85dc-99ca730fc182", "indicator--fc8e0723-9937-46d6-b469-5b944c257e21", "indicator--956415d1-6c84-4150-b055-314152116207", "indicator--fd699378-86c0-4e99-adb6-48d03f693b05", "indicator--47d514b8-91e3-47c4-bd76-40d89a120563", "indicator--b9cfeb83-b413-425f-a34d-bb60e81ae6e1", "indicator--beed8687-3597-4122-9748-b694d725c777", "indicator--195e843c-f21f-48c9-a897-d22ac3889cb6", "indicator--5a5c65db-9637-4f67-a263-7d59e73fb73e", "indicator--2cc0d225-07c2-4b70-8e34-e2a4731201ac", "indicator--4e1cd528-a535-4e0a-997f-265e5b6a0d53", "indicator--597dfff2-6bfd-4f9a-a3cf-a46f5b618619", "indicator--236d3858-d7cb-434a-9f0b-44ac92b6fdf6", "indicator--c62bd270-afa3-4ccb-862c-e60b75e4b90e", "indicator--7c523ce2-da85-408e-8187-2ed0a139fa61", "indicator--0d5becd7-b1a4-420d-a677-bf40daf0cf43", "indicator--72d38167-bc40-4e68-8492-b7ea0d69de26", "indicator--27bed0fd-6377-4f85-9a33-870168517768", "indicator--33c0a5a7-e4a9-47c9-be1e-a786fa529401", "indicator--2ab3a02e-b567-4b02-839e-1b7cdd361478", "indicator--9e6f5218-9d31-4c30-a770-42fb1edf6ed8", "indicator--40252571-c32d-44c4-aa0c-be60d4551a1a", "indicator--f92d646f-9bba-40e8-8527-8a1b2afeb80e", "indicator--57aac07a-ee01-41b7-98c0-220867f93fca", "indicator--978bd4d8-8224-445a-93f3-3609afe876b9", "indicator--ca45de56-248d-4b16-b03d-cfbecae1c24d", "indicator--711f079e-fd0c-4767-8aa9-8832b009f032", "indicator--8de66ecf-43f2-43cc-a813-05faba21a98a", "indicator--d9b9871b-85b7-438b-a456-7b0beb20465f", "indicator--d8801b1e-9ef2-4208-ba3a-09d1e90eeeb0", "indicator--42e33aeb-285c-413a-a617-5cbef67e67d3", "indicator--33d84e7d-e02b-4fe1-9d7d-5393720782a6", "indicator--7a8338b2-5d9a-4fda-870f-1bf880279a1f", "indicator--84e12fcf-4157-413e-96b3-b336233d4e88", "indicator--64535738-7ba4-4f12-80d6-2ea751964176", "indicator--7523ad83-863d-4964-925f-4c3070291f28", "indicator--d6f3ef85-8e52-47e4-b2b0-7c0d72a2b7b4", "indicator--00b35f80-2ac4-44f9-96e8-948d1fa87c17", "indicator--bbe046c7-2bba-47e6-943e-a1c26d76edf3", "indicator--a683759e-e398-4fcc-a0b1-39694df16aaf", "indicator--933b36e7-112f-4b0e-9935-2937d1446c84", "indicator--7644486e-4f75-4e56-8e78-77f71c51233c", "indicator--0aed2ad5-1b70-4252-8b36-59d593e0e641", "indicator--3b5e5f3a-5437-4b7d-a700-dc78084c7bee", "indicator--2a6af2e7-65ab-4463-9a63-ff330268d6f4", "indicator--1dea0ceb-48ad-40a1-bc36-bbf86ca223ba", "indicator--9e2b96e1-2af1-470f-b94f-33d615f46d3b", "indicator--d642ab81-e5f1-454c-bffd-203970ce605a", "indicator--bf3737ee-69e5-43fe-b4b7-4b384ee7e00d", "indicator--53faf3fd-16a5-49f3-91e2-d9cde30a3ad1", "indicator--f2b8604a-a7ea-404a-a2c4-c38e5556be5c", "indicator--a6ae508c-a994-4942-b4d0-779414d685d9", "indicator--458b6fa3-9c1e-4c81-9125-f4be2f2d06a7", "indicator--9a389515-68cf-48f0-a862-89ce1b58cf27", "indicator--2f42b456-b414-4f23-a5b2-e1ad5ec05656", "indicator--bb2783be-fd21-4d75-9658-c881ead9ce74", "indicator--4b6e8f1c-0f50-439c-a8be-b12af97097ba", "indicator--c60a7efb-458d-482f-ae42-fb55eda7c649", "indicator--f5afb6a3-bfdc-4fef-8e65-ffd0fcaf257c", "indicator--256d7ac7-8bde-4605-9a2c-c07a56ab393f", "indicator--10601806-8da4-4159-be6a-fa4e3cf88922", "indicator--aae835a5-b979-4c49-91c7-6e9b1bb1b8a9", "indicator--b7368c34-9415-4ff6-ab51-e1c09b9369f0", "indicator--8b088189-5a2d-406e-ba3a-8cb5285b7059", "indicator--2d70844d-a5d9-4499-a67e-5b85a142bd95", "indicator--f5632767-e0a5-4e12-9d98-2b123c4c8833", "indicator--8c1a26dc-619d-4b03-8254-1fb3638840ac", "indicator--97845c59-4748-4d6f-915d-c40e8cf1cf7f", "indicator--75078f9d-494f-4361-9e15-79431e73608c", "indicator--336d575e-44e9-4aca-a101-fa8bf0efe8a2", "indicator--6de1625f-ee42-4034-b673-b274cdc81f79", "indicator--a09cedf2-da40-4b89-b8e7-62820f3d9c7b", "indicator--c96d8ad9-f832-4616-91d8-35025001cc6d", "indicator--c22fa35d-6dd3-4d1e-9395-cc54a4543adf", "indicator--fc876911-f216-41f0-b299-cc02cf9d1765", "indicator--fdc55da4-b03f-4235-8859-407b1a483d1e", "indicator--9abcb393-845f-4fb8-b923-8c59480c5170", "indicator--06b132ab-68ff-42d8-9b5a-141cdc3817e6", "indicator--9f5d8f94-b033-4d26-bce0-64fc65d59e3c", "indicator--bc58a059-b1b9-49f9-9b18-50b83882229b", "indicator--547594b4-469c-4a97-bea2-c69d214f2873", "indicator--67442015-0fe6-40c3-98fb-c84a2e1d7700", "indicator--26e9fad8-ca47-4937-9743-fc20de07f737", "indicator--885d2604-b6d3-48b7-b97f-69c8c649d9fc", "indicator--f7f9e8c5-9a7e-4b6a-9ef8-6e343d6aee38", "indicator--a1054bc0-6ca4-4593-83c4-84db397a6524", "indicator--ee70c785-fae6-43dd-9474-94db9bc5fa7d", "indicator--c1ffed92-cbe0-470e-b6d5-ad9f9f1b0e69", "indicator--f8cf1e6e-4c11-41d7-97dd-97b0ff7a3104", "indicator--8e97617c-0f40-42ba-9e9e-aff748643592", "indicator--0ac581fc-4d4c-4cc8-a0f6-2a5a70c02f81", "indicator--1b3f0214-926d-4113-8f02-92e5c3797f09", "indicator--17aec5fb-c07a-40d8-9bee-c0dd3f9e90e5", "indicator--d5ec938e-b32e-4452-98a1-83a105f70e77", "indicator--b710b5d9-cf46-48b5-b5fa-ef9b64195f33", "indicator--f2e2d6da-d082-4840-82ec-f47a52c05122", "indicator--21b090ce-bbcf-44e7-8a58-21ccd434a4ce", "indicator--b96cb0bb-058b-4283-94e5-0313d43f3365", "indicator--f9cea918-25de-4810-9551-911478192826", "indicator--b5316115-f095-4fe0-ae94-18f853ce6e75", "indicator--38dddb19-8c73-4785-83d9-33ef7a8b43a8", "indicator--b9127c99-90ad-4666-8b00-14131698780c", "indicator--8e9d9d09-87a4-4c01-b244-24e535845cd0", "indicator--c196116f-501c-4690-a708-c3afacdd7f36", "indicator--dbc47fa8-2bc8-4a66-b524-577ac6a52832", "indicator--05fee406-23c1-425e-bfa6-4dcb263a561c", "indicator--f3ed9897-bdc2-4769-ade9-3418fcc777be", "indicator--8618bc19-ce42-4c44-a1a4-87a284ccaba5", "indicator--61ecce48-3aff-47b8-8f81-35f9bc5dc0c2", "indicator--843a14cd-a3d4-4486-99fe-98b2c5d6d1fb", "indicator--80319e02-506c-48fb-add3-06f428bb8947", "indicator--b50b7cc0-8f66-495e-a4cd-ee915fda3e10", "indicator--cb0cdeb8-d05d-45e3-93cd-dae9487e6ad7", "indicator--4d026760-9c50-4962-a04d-b44f904ef56e", "indicator--88fd8def-77a5-49bd-8eab-deb103b1a13a", "indicator--8c2bf038-9629-44c7-a577-6ab6fe2964c2", "indicator--9218773a-0af2-4f9e-bab8-4d609ff064b0", "indicator--c8dc9d35-7f9a-4b64-a6a7-d7891903abe0", "indicator--8789ec9e-ff1a-4a86-ba18-8c3bd6f08e61", "indicator--ac5f0069-1f7a-4b05-af5d-34a5bc55bdc2", "indicator--17d375d5-46ae-4c15-9b90-fc9075168210", "indicator--9524c6b7-81b5-4397-814f-7376b362bcb4", "indicator--83068b10-4468-40d1-9623-75c887d937d8", "indicator--9036a613-7095-4b52-b1b4-e8749515dc4b", "indicator--f14ccc64-ff6d-41b1-8bd7-cfebd59d13d0", "indicator--47970702-22d9-47f8-8f3f-0a53096d30aa", "indicator--abcc144d-755c-4565-afd3-f0fc4d1074a3", "indicator--c5f26080-b6e3-4e5b-ad1a-7e617875559d", "indicator--18794678-6461-4121-bbd5-f719b4881ce0", "indicator--4ef3504c-6b0e-4857-be27-7cb74fac9571", "indicator--f2b5c1c4-3bb3-478f-bdc9-5956169b198f", "indicator--8a39e3b1-b3a4-4e8d-b16d-ffd35c956de6", "indicator--74219ab6-52b1-412f-96c4-d426fad66fa6", "indicator--2a2aa242-7149-4baa-b29d-fbea97ebc5fd", "indicator--afcb969d-8bdc-4262-a082-e69a245899e5", "indicator--d0da8869-ef70-4095-bebb-8e2670cacb18", "indicator--0613c588-5a11-4c5a-ab17-a5494b70f79a", "indicator--71872aec-d69a-40f1-b85c-06456c2eda5f", "indicator--cf7b469d-f783-40ca-b76d-4972a497f2ef", "indicator--3859f83c-7175-4582-8fb9-d16a90d051ba", "indicator--958d2319-a8f6-4fd8-80ea-0d1ee6850774", "indicator--b9883251-e780-4624-802d-b97716809245", "indicator--6a71a91e-9558-4c27-b5f3-b61f6471f871", "indicator--c4844906-171d-4f1c-94a9-34748369369b", "indicator--ccac920d-37cc-4fbd-bfbc-84debb5d17dd", "indicator--fa8e57b6-feff-41d6-b2f9-76cf20e719e2", "indicator--74468478-0378-4097-86d0-3b55ac5b4c10", "indicator--2be29b25-b602-4607-83ff-91026631ee16", "indicator--94428743-b654-4b9e-b4b2-fffa6f3b62f1", "indicator--ca8ea65b-020d-476f-8e6f-59f99e08a8b2", "indicator--ce6d3fcc-de39-43bd-9ae0-0f19d2efca94", "indicator--f7609165-42c7-4e1b-968f-dcac81dd3ec2", "indicator--2da51f89-b0b9-4171-b3d8-4ce96d647b9d", "indicator--26d2fc58-9905-47f8-a761-577b341873f2", "indicator--2a2fd933-c1a1-45dc-9e02-51f62815b580", "indicator--a9e64044-362c-4c88-941c-722f78f4918c", "indicator--d5f507cb-fe67-42df-8218-8a77afffe195", "indicator--e48aec0b-68f3-4075-8e16-7acd308fce65", "indicator--d9dc179d-5d9f-4c7e-b01b-5d448602f23e", "indicator--babfda81-4a1c-4dab-ba39-9364d019ba66", "indicator--242d6a68-d2da-4162-8af3-293a0900e34a", "indicator--e2e01445-4440-410c-b5dd-112eaa28aa94", "indicator--0b99dd6a-8ef1-4673-bf73-b94177f4c554", "indicator--3dea72c8-4ba6-4640-a748-50e446c5961d", "indicator--1586dad4-0428-485e-8597-0e3c5a1d1610", "indicator--7657983e-a1d0-4e3a-90fa-3d7b914a8554", "indicator--0f05361b-69f5-4c17-ab0d-136de7c533a7", "indicator--d29888b6-377d-475e-8c6b-a19b76dabf97", "indicator--43ec8ffa-0bea-4bc8-9149-dc1bc5e55d52", "indicator--2aecca34-c479-447d-8f5b-4896c9a9767a", "indicator--7dbdb07c-12e2-4f31-b57f-151f02aa8d98", "indicator--bc3d55d1-e614-4f44-b9cf-8326524b64d8", "indicator--54917d2e-a5d9-479d-a11e-803dec5fc7ef", "indicator--9e050189-fb5b-44ef-b537-5108485bb833", "indicator--8edcfb87-95e0-47fd-ba25-09e5d0a45aaf", "indicator--c0174727-c164-45a7-af8b-e2ebd3cd6aaa", "indicator--3e181e36-1a4b-44eb-8e99-208e41bdeed2", "indicator--cc764ba1-3f64-4b65-a1f5-12e2c4290e6c", "indicator--b1dcf34e-3ea6-426e-8f4e-197d3fb70f2a", "indicator--966199f4-c60f-46eb-ae9f-4b89b3d5808d", "indicator--3339c3a1-ed86-4111-977d-0aa0e11fb6ff", "indicator--a80c4d95-1858-45cb-a24f-92ee5af73b0e", "indicator--289176a6-8efa-4ddd-b2d8-db93b6a6d7aa", "indicator--6220ea6e-7fdd-4601-8ada-8026e89e0ebf", "indicator--6bc54bca-af13-4350-b192-1e591e73c6ab", "indicator--3f946cce-d112-4a54-ab6b-00763852f8e1", "indicator--db2e595e-429e-46c3-b4da-cd2fab05bb97", "indicator--dd51ac65-09eb-4d7b-afb1-37460d32a479", "indicator--ec656477-7a4d-4dc7-8a39-6ecf436eefc7", "indicator--329505a9-fcfb-4576-985c-15bd594b3f97", "indicator--08e75ed8-7369-49e1-8660-7a312301b8ca", "indicator--4a28c524-e684-404f-9182-64dd07577e59", "indicator--75a937b1-80a3-4d2d-870d-bd4d2ed9b53b", "indicator--71c8b956-27f4-4d77-a76b-c123e941a1cb", "indicator--e0207232-1ee3-42fd-a2ea-dd4a2f8293a8", "indicator--8884d4e1-ba9e-475d-81c5-740357ef7b52", "indicator--7aab6d69-43d7-4efa-a632-b4a3e39f5cb7", "indicator--f7588109-7759-4cb3-8a35-6bf1d53b689e", "indicator--79589484-6729-4e2e-b02b-8c5e0f0c9796", "indicator--c77f6349-d5d4-4b97-b689-39f3bf44482b", "indicator--c8c4d356-cb50-4305-b1aa-1536ef72aab7", "indicator--a48fb924-dddd-4c3e-8ea6-c477d3cdea35", "indicator--0c417626-5b60-4882-bd1b-f116d296b100", "indicator--8a3d3adc-cd99-4289-87d0-e391266a2328", "indicator--f6bfca96-b28f-4064-b009-d35a4bcbad62", "indicator--d3997656-5c6e-4822-85e0-54123607a5d2", "indicator--16e40653-d295-4d91-82b4-1acd281d340a", "indicator--aa5c0c08-76b1-4cbb-ae11-43a641e6bcee", "indicator--fe369787-011a-4c17-813b-694f1993e8ff", "indicator--fda0cb27-2732-4a19-a3f6-b1db1166d253", "indicator--7b93e84f-6c39-4c53-92af-52e76f5647a1", "indicator--b539b1d1-ca02-43ba-a4ab-9fbe45d019d3", "indicator--aa349588-3416-4391-8768-eb2782552b0f", "indicator--3015ca9b-f811-42b2-98cc-9b880e7fdb12", "indicator--ddb067ff-a1ec-40db-a06b-ec784dc6676b", "indicator--347c7e21-95cf-4291-a678-f1d8feb66c85", "indicator--6aa49978-b45d-4fcc-844f-f4e393311ea4", "indicator--0138721d-fc96-46af-90e0-bfbd9251faa3", "indicator--831bd159-f17d-4cff-8204-ff03f60b04af", "indicator--c40e96f5-1aea-4511-b356-939a8d4d92fd", "indicator--74fc6a6f-3eaf-4daf-ba12-5b8a08156d0d", "indicator--e970cf25-ba29-4b3a-bfd9-58c564c9fe18", "indicator--8b77c1b9-5c0d-4d64-b3ae-aae6d29ce8a4", "indicator--05ae831a-1346-4877-8bcb-6067f532926d", "indicator--096e75f3-c45c-4d20-ad33-9c85aff7fafb", "indicator--62fd8ef5-df31-4028-8383-7428e05f257e", "indicator--d1fe6be4-46c4-44c0-bc73-c416d10a15d4", "indicator--8b4271dd-2002-4ee7-ba51-67e4d74cba84", "indicator--a9bdffd2-8d77-47b3-82db-0430bd4d266d", "indicator--22d98ba1-ff30-45fd-a02c-680e41024df8", "indicator--439d52bc-684a-4038-999d-037c8de8aebe", "indicator--e8f528cc-8789-4363-9c81-43123bd2ba03", "indicator--8e200930-45e5-47d7-a7bd-54e7cf7e6234", "indicator--18c21359-a774-441f-b0ef-b3122aa023f3", "indicator--c7cf320e-4fa5-4db7-b6dc-9aadd93a8271", "indicator--73b3c910-0f9b-4415-b2b1-5a2d3ecb64e1", "indicator--f1cc5fb9-21ab-4d64-995c-da176f6c8012", "indicator--9d74ff65-fabd-429f-96e6-8b3821a0f869", "indicator--64af81ca-c5c4-407a-8dd7-c42a61b6db50", "indicator--c9d62d3e-cd79-4234-8c1d-0743cbc945bb", "indicator--b0f6a68a-5ca9-4893-8261-3ffbd7e8a77b", "indicator--26f581de-a5bb-4f9c-9193-f74fa8798491", "indicator--bb136ed7-794e-43c7-bd0c-ba08365f7c0f", "indicator--4c5ed5f7-9686-4bc1-8f80-d48f4ca1d106", "indicator--d5c027cf-63f8-4b02-a841-02e282fd2e82", "indicator--1d8e1242-bb0c-426e-8088-67e83c7fa721", "indicator--4427c843-4527-4b65-b0dd-702b6c0b2476", "indicator--2d0ef468-0568-4bd7-b9aa-936ba92a8591", "indicator--bc7e1dbe-9355-4810-a8f5-227c3d728a90", "indicator--4154934e-809e-4cbf-83cf-da997ccd2770", "indicator--af97d52a-ef7d-40a5-8d85-134536339225", "indicator--e5a0e1e0-9de4-47fe-bbc1-21dc98059c41", "indicator--1a139d65-a0c6-47ea-8539-86d21047d9d4", "indicator--baca811f-5b42-4ada-b862-8ce17d5c1e70", "indicator--66ccf9b5-46bd-4e58-85f3-5b6368f1de87", "indicator--9f8ddd20-c0e4-47f9-8474-b9f3f9825550", "indicator--cc68fffb-52a7-4be7-a05d-651b55cdc1d8", "indicator--52816d00-efa6-411e-aeaa-9ba8ade68f58", "indicator--5409a5f5-2b31-474f-8d25-ee0e526a0863", "indicator--233f9c33-0b15-429b-b4db-22ae22ecb865", "indicator--1cb0845e-028e-4ddc-8361-bc34e0c16451", "indicator--cc1de0b9-0cce-4f6e-b592-2d04e3484b71", "indicator--9690ca04-8812-49ca-aebc-c4cd4b2266f8", "indicator--7ea4cf1c-d407-4c2b-8fc8-74d50c40b931", "indicator--44cdddf1-f0b7-4af8-8962-cfe8d5b9cc7c", "indicator--3482499f-b39e-41ca-bf31-507495dc58e5", "indicator--da7bb1f2-00ee-4a31-9448-2df51747ce62", "indicator--574f0f5e-e8aa-4538-9616-17646f447fab", "indicator--45884b7b-da9d-4e6b-b8aa-f35b6d394a76", "indicator--37db0ab7-237d-404e-a718-89f396fbc7db", "indicator--8e1f09a7-d693-40ea-bf25-9849c7a1c5ae", "indicator--75d2e633-6e2c-448e-b7a7-93f6d3e9036a", "indicator--64b65b3d-74fe-494b-9142-36476240bce2", "indicator--6eb73138-2681-4d78-b23d-1ac1ef7ae994", "indicator--b5121610-83ad-40b2-ae4c-c9f43e06b7c3", "indicator--7782317d-4d70-4437-a8fe-2278b83f255a", "indicator--6a40ac19-ce1d-4372-8cb4-1c3c666b9b95", "indicator--b54a71c4-0b74-4899-bbb3-9f09da44695a", "indicator--562a11a2-f6af-4811-a92d-bf0ba1ecb8bb", "indicator--994a4732-eabe-4a88-96c3-7d9c256f3af0", "indicator--9c89a4d0-5729-438c-b002-b291febae04d", "indicator--ea462e46-dc46-4a90-a575-084fbb1409a5", "indicator--36d5a218-3d58-44ac-835c-00986b3cf94a", "indicator--05d78d9c-8765-445c-9056-9d436be0635b", "indicator--f6b06cd3-a02e-4166-a665-854af4544dcd", "indicator--f55a3eca-1ceb-4393-93e1-5421fc4fe34a", "indicator--698ed9a2-abad-4b5a-bff3-b263925660c5", "indicator--4b04f097-7535-42f5-8c07-f3954ca0f07f", "indicator--aa3762fd-02dd-405f-b942-091bf91cf45a", "indicator--51bad35e-1d1a-4fc8-8fb5-266bb0a75893", "indicator--22763b62-671a-46e9-8797-66a702089d58", "indicator--b27c2cb6-7ae9-4a0c-a38a-65264f7be669", "indicator--c9903755-6de6-434d-a9cc-c7b5e5ceb5a7", "indicator--529338a6-7d94-4c8a-9634-f43c7f99a84b", "indicator--c5775059-2104-41a2-97f0-282c3e921705", "indicator--9094c854-e542-480f-be9c-e4d2d0b25f45", "indicator--d07b1a1d-fe5e-4ab0-87c8-a60bbff7b9db", "indicator--8e6051bc-7582-4666-a613-07dd6d51dcd7", "indicator--fd9ad8e6-cf5e-4c05-b8e4-cd6c06feb2df", "indicator--b227539f-a953-4ec9-a28e-c113ab3337cf", "indicator--1a25b6c8-6beb-44cf-ae11-561fe9423956", "indicator--620b1878-5cef-4e55-94e8-6892bc8cb87f", "indicator--7ce2dc6b-00b3-42aa-b737-d9d51fa99ff5", "indicator--b0363a40-7aeb-44ff-8912-78bee2a07827", "indicator--e92eabf2-7f65-4362-bc84-1272f86b7271", "indicator--aa4bd56f-b6d4-4a20-98de-bb953117d5d8", "indicator--9e541e05-11fd-40c2-963b-45fcf535b4b4", "indicator--631eb18e-1727-42e3-9be6-5ac53542aa81", "indicator--5bd62a04-63ed-4f56-8cb0-30506a76c292", "indicator--640a3488-076f-4fef-b16e-cb371f638dcf", "indicator--04af6d57-e966-4115-a031-c68aeea8561c", "indicator--6e9ae3d7-a502-4ab3-8267-7c5ec4de5f8b", "indicator--0aa0b516-adbd-4580-a06b-0318cc26c6cf", "indicator--d6e463c5-120c-4567-9578-cb4a7e3caf85", "indicator--05703e61-8a64-4214-818e-a8ef2e74c169", "indicator--0c1d4af5-b56b-451a-a637-dbe1f9f07976", "indicator--24cfb5d3-7b76-4e7c-8bda-4e8b74180b35", "indicator--6111077e-2519-4bec-bfda-b91a5ffd1e49", "indicator--cf4993de-f792-4659-b00e-2772bbded0bc", "indicator--2f21b288-b969-4a37-8a8d-b9967155c7e8", "indicator--fe08349b-3e21-455e-abdd-be4eecc669ba", "indicator--dc341cbe-7da4-4c85-bc60-ff78ff1f63ec", "indicator--49704f33-27a7-405f-ba9e-1e0456764d9a", "indicator--6e5522b9-a3ac-457c-8124-24262eeb664e", "indicator--e53340cf-de0f-403c-bc0a-8cb41f4d536f", "indicator--48487a93-5b91-4da9-91ec-e1632f943975", "indicator--df2446f6-5dcd-4ffa-9f49-3753c21f93a8", "indicator--4afa062e-e2c9-47fd-88c9-13927cb546c4", "indicator--7941630b-1e3b-4df6-8441-f757f65656de", "indicator--b2d7b4d3-9f26-455b-8cd4-4ab731c6ea44", "indicator--c4a051c1-ddc3-4e1e-bf2f-c6b089c4a7e6", "indicator--0a587baf-f1a5-47de-a426-3f181f6c15d1", "indicator--43596a90-3ced-4a18-8004-e58ffb174147", "indicator--fd0d03dd-7227-47c6-bc58-7985f4703e21", "indicator--77a85fa9-a043-469e-b9b2-a42654c342fe", "indicator--36cc7607-0624-40e8-8e56-685f503da77d", "indicator--ae36c9e1-c64b-48f2-b7f7-99056fad4750", "indicator--58ed860b-4dd0-42ce-855f-26aa2dca82e0", "indicator--6c26c35b-b9b7-434e-9e82-9545381e09db", "indicator--4f135c17-1e38-4b00-b59e-1b4fbe65dd4d", "indicator--38ad4aad-7adc-4477-9240-b8eb7ed431ca", "indicator--2cc68a81-e59e-41e9-9100-fe7a96a50139", "indicator--ef11a67f-18e1-4fff-93cd-778cc565e9fd", "indicator--200eb8b0-61f5-4d30-8068-2d2b7c040493", "indicator--99e7697d-8165-4a2a-8254-a3648b835ac7", "indicator--c5e05a34-5d13-4bde-ba80-2dc8ab2868cb", "indicator--3a458527-a363-4b68-9feb-2c5b5f4a40b9", "indicator--51bf5a08-aa39-4f7c-80c1-5bc6aff331da", "indicator--951c9867-1042-4b92-b08c-919b78b3e18f", "indicator--2968bff5-6ce3-4acd-9894-389c9bb21822", "indicator--dbdc14de-1f90-491b-9c9e-31606215d1e6", "indicator--be37b5c9-cd27-48f1-b643-17d2b73ec6d2", "indicator--69e17bd6-9421-421b-8932-91663bcfdee6", "indicator--89443634-af8c-407c-9c01-23eaa4e9b71e", "indicator--85ba3181-b246-4c67-a486-6e3e28496445", "indicator--de649af6-e749-4a39-927c-70701b01d3b7", "indicator--0b24ae39-f32c-4240-838d-4d9cf2216d17", "indicator--23c6a4e9-dafe-4641-a140-7e73c22b95dc", "indicator--eaefddf7-c310-493f-be29-0d75c2269dd8", "indicator--d6fb7537-59b3-4700-933e-7f734b825679", "indicator--c10e7a1a-a19b-4180-bdd6-24a9b4fbffca", "indicator--5b4d0cf8-0acd-44a7-a2a1-70fbf9a645ba", "indicator--d60c93cc-f3f9-40fd-9b33-bb4f3737106e", "indicator--3bd6cb95-8d11-406e-b87f-03e614f9d5e5", "indicator--e6092337-05d6-45df-b873-513c76424b70", "indicator--c6eb2e7c-8a4e-4f11-ac19-24430ce3072b", "indicator--c1731bc8-1906-4a4f-ae33-dde74e2acd2b", "indicator--d826a5e9-7f70-4d81-b69b-7a0d19e32196", "indicator--f028e850-86cf-4ffc-91a8-ab1477d59b10", "indicator--25ad191f-87f9-4460-92e4-75a43014d2a3", "indicator--84464288-37a7-42bd-8a11-c7a191b3b7d3", "indicator--db4e1a11-4d16-458a-8ffe-01778966dec3", "indicator--f95ce9e2-6b30-4c1f-a7f9-50e4e5726848", "indicator--adfdbf2f-4d9c-4ffc-a852-923e96f5b1fe", "indicator--24ea2cfb-409e-46e6-842e-e3731e9bf536", "indicator--c8fd084a-288b-442c-b3b8-f707d083fb2a", "indicator--04d1c880-ca0a-43c1-8180-ab31240c4ae7", "indicator--d7cf30e4-1188-4592-b8a1-06909cd7e384", "indicator--ba84efd4-b4b2-499e-9cf7-ad05c3574af3", "indicator--1ce4d548-0509-42da-83ed-8debc9dcaf33", "indicator--0c7accaa-374b-4492-a7a9-87834e14a6ca", "indicator--229e2794-4547-49fc-a96e-63df5d80d6af", "indicator--af1ab3dc-d734-4527-9fca-150ae138b37b", "indicator--422f4ffb-a911-4a77-aa33-600abc97e3f0", "indicator--74bb5982-237d-4606-9ef3-0a1daa622703", "indicator--dffb0d6f-0fd5-419d-8b12-0d48100bb261", "indicator--d880be2b-9492-4ec9-8485-4fb61aa2bd34", "indicator--b04d6025-2475-4789-8597-01584483f21a", "indicator--0165df94-087e-4826-b394-6de62eb429a3", "indicator--81e0d39e-4bd7-4457-8104-e7bc2f8f46d4", "indicator--a1e06478-ea7b-4a7e-8317-65bfe1122677", "indicator--eaf5829a-fc8b-49cd-9945-37c8dd2492a7", "indicator--66476962-a7be-4baa-a3fa-d3b10a1d4b8e", "indicator--5863ecee-2748-4f1e-bf1c-329f971f6ec0", "indicator--7f5cd42c-21fb-4e8b-ac9c-fc50768d3bfd", "indicator--71b5ede9-7f25-48b5-b807-076781ff32e2", "indicator--70a51581-fc7b-48b3-a9d0-1aadb1097f45", "indicator--41644278-f5cb-4615-b201-0ce8dbf7edbc", "indicator--ef6c3e86-e096-43c6-b1d9-d61727ec715e", "indicator--fa0b1761-9054-4d93-bcc6-0a173487c178", "indicator--6bb57977-d8c4-4abc-bc88-ee4b1f738922", "indicator--e577632e-a0ca-46a7-b37f-c29e9bc490c2", "indicator--d62f5aec-5664-4da2-9397-25faa61c2d97", "indicator--96074fe0-b6c8-4f77-93b1-94e86a52c707", "indicator--381678e0-e1bc-48b9-b463-ec695f35fbc8", "indicator--54741ab2-829d-41dc-b6fd-9b4ae8802fa3", "indicator--c1a32544-8cad-4914-b656-373e7d1cafb4", "indicator--c6e24df2-9fe0-4569-b4c5-dacd1edb8b98", "indicator--84c17487-0779-4e00-ad19-d4246f97ed1b", "indicator--7e243b97-21a5-402c-82ce-2f72162ce7bd", "indicator--d20bf572-355f-4daf-bb22-f8816740c594", "indicator--fc232606-247f-4673-bccd-113659a8aa4b", "indicator--0c22ebac-d4ae-47d2-8962-548d1922ea35", "indicator--ffc03372-788e-4f43-8e9f-684740d6a2c8", "indicator--c42023ea-5e8c-44e9-a3ca-728f5ff58723", "indicator--472ddd6b-8182-4622-aeb7-2e54aac8cd73", "indicator--12537615-7969-4964-9d2a-36682aa7ea64", "indicator--5566cbe8-f1bc-4d34-8fdb-027f952e8d82", "indicator--905b4ae2-db80-43ae-9028-47e46053b3b5", "indicator--3f198d69-cee2-4d03-88f6-cbdc7c466947", "indicator--67822ccc-8964-4e3d-a725-f95bb95c5d36", "indicator--6e5e153b-ccef-468d-a532-d01b3108c339", "indicator--32451dfa-22d0-4e84-b0b0-eef6bc45bc8f", "indicator--d1b7d213-fc35-4df0-b4ad-c9220eefd787", "indicator--860c2a0e-5982-43d2-8ab0-c1280ac403cb", "indicator--9f0289e3-bf20-44aa-8adc-35c3a5fe3602", "indicator--14e053a6-e427-494c-a556-5944473a8358", "indicator--6347e2c3-fb42-4690-b6ba-5e8c2747b45f", "indicator--3205e84d-2a6a-414a-a4a8-a51c99b3feae", "indicator--1c63b552-4a99-409b-8d6e-c0c8b3985e33", "indicator--83b64a97-f1f6-4973-b10a-135aaa40bf86", "indicator--9ce097f9-5d3f-41c5-b131-45c6d04aabe7", "indicator--0dcce111-35f2-4b14-8e1a-511a0ce688f4", "indicator--7712bff1-77c4-448d-8877-0166e009ec86", "indicator--6442e94b-7a82-4d3b-a360-f305cc48d18f", "indicator--9baf9ffe-b80f-4061-b524-ee422fc33772", "indicator--531cbf81-5168-4010-8f48-62977f189a0b", "indicator--c843af73-88d8-4269-b1e8-b4520e4e90b5", "indicator--58156f4b-1fe9-435d-b332-94d741a8533e", "indicator--6d29cb01-edae-48e9-9068-06e7da798ff8", "indicator--b53916eb-fa1b-46ff-869b-7968724aa27e", "indicator--b359ff0e-2f01-4277-af40-6d8827608652", "indicator--74fc167e-a303-4578-b9c4-a9e157017ba7", "indicator--1364002a-7251-41be-a217-8d6aac6831ec", "indicator--54611e6f-bd14-4503-a664-3e2960ce7f32", "indicator--f8e79b8f-ecfa-4fcd-ab84-331d11038fce", "indicator--5c87503b-7778-457a-8b9e-47da127c571a", "indicator--8b59800f-b612-49f6-8ad4-e14e17c4ec52", "indicator--0d23f202-10c0-47c9-b67b-bc78369cba47", "indicator--aceed2e9-8635-4aa2-9e16-22818d97203e", "indicator--d1303883-bc9b-4a9c-ad0b-ddd5025e0274", "indicator--d2a6c9d9-09eb-4660-9965-f0dc521476ec", "indicator--37b6b4cb-77e5-49fe-b4bf-cd78937d20ab", "indicator--33d1a944-5c40-41b9-b6a1-1cb5b36d2639", "indicator--432f2960-109b-453b-9595-6de7d3112ade", "indicator--367c9d96-4f0b-4db4-a2f3-d9430ae6164d", "indicator--fb1be201-037e-40d0-90d2-b66e13ffd88c", "indicator--d944ee9a-58d9-4007-8983-20e4608cd4de", "indicator--b41cf743-acee-480c-9590-10cce591ec9b", "indicator--b9e28542-d5bb-42f9-8b07-d1c7f6b2435d", "indicator--f8b507b9-608c-4814-a1b6-ba871f8b3324", "indicator--4972d1ee-d24d-425f-9444-efb23f541088", "indicator--1f986909-00eb-4159-81bf-7b99af51e992", "indicator--8d8a2768-d9a3-4050-9ac9-ebc4cc3335c6", "indicator--1ada995c-a515-41e6-8bd7-ff8cc7631576", "indicator--54f3d267-ceb0-498c-bef4-f2c46a3db849", "indicator--6f2364f7-12e5-4c5c-ad48-2a3ae520c852", "indicator--915b1874-de6f-4a6b-b8bc-7d073fe6eeef", "indicator--9a939c91-cf8c-4947-bb51-dec04c288761", "indicator--cab9a6fa-dd7a-4425-958a-cca61df09d61", "indicator--73e5b938-6914-4c0a-bbe0-c1058f920eb1", "indicator--8fc22ab5-8efd-4df8-89a9-09773c892560", "indicator--716d58d7-7419-47a1-939f-21959f36d401", "indicator--5a13ddfb-34fd-449e-ad51-b54cae721481", "indicator--ad220490-a2dd-4308-8692-220e444c500d", "indicator--de2e5487-bb45-41d1-9cc4-eb897b8db7a7", "indicator--12f9c97c-e880-4609-bbdb-b59255b43b92", "indicator--5d6f6516-fbc5-4444-9409-f0a513177921", "indicator--0928fa69-3518-4305-9a74-ef202c313ac0", "indicator--cc7de6b2-69fa-4c16-847a-84d510d48541", "indicator--fc2b74a2-7d87-40f9-ba19-9d4aeebe32fe", "indicator--eeffe137-c2c9-4273-8ee7-10272ecaae4c", "indicator--5ff622e3-8bd6-481a-ace2-bb8f49594361", "indicator--2a37f5c0-b386-41c5-84da-6dbda70ce996", "indicator--6346f765-4a12-490f-ba83-8ace99fa8408", "indicator--67dcf56f-5844-48d7-aa24-a75265a7cd4c", "indicator--f299dabb-3ab4-4f4e-916a-f55ce8b829ec", "indicator--2937a066-7911-485e-9fa3-11a9f20b22ba", "indicator--f5e091d0-b008-475e-a1f5-61ec25c45438", "indicator--f1f96421-b3f4-45e8-b950-a329161fec90", "indicator--4c59a2c7-6d4e-4a1a-b817-9fed815088cb", "indicator--319a70be-21dd-4164-8d52-6ef8c169d773", "indicator--fa56a7fe-a27c-4792-9005-a51ba619d2d5", "indicator--5c3f0a70-4a7c-4417-a72d-841ad8e91f07", "indicator--53aee0d2-3314-4c00-af74-854d4fa193ec", "indicator--ed81984b-42ea-4b0b-b0f7-0b7114952f3b", "indicator--fbd13f43-0a99-4973-a8f9-9a4797224cb9", "indicator--c7329e0d-e937-43f6-8fe6-a20b8d12081b", "indicator--654153d7-ef85-4fdd-968d-d57a27f16d5c", "indicator--c8f8184e-d63a-4996-9a64-04cd6c03e712", "indicator--a6f27bfa-bcc7-4404-9dc7-4f27b3b13851", "indicator--7097b9f7-e678-4708-abd6-f55bc4573d0c", "indicator--6f6f1b99-3181-4611-8d89-148c6464d028", "indicator--0cd41cdc-6752-4175-a792-9c1688d44c08", "indicator--fe162d43-3d53-41aa-9572-61fa7b23606b", "indicator--cc7d0804-2c48-43df-b2b6-3c80ac49781f", "indicator--6b58de5d-15bf-4146-bd6c-c16ae9c9922b", "indicator--9c95e904-400d-43f8-a890-bf0933d323a9", "indicator--923eb370-87cc-44f5-9a6f-4e87f1247272", "indicator--f5816787-b47a-4436-b820-bda662ab49c7", "indicator--fc133451-3ebb-4eaa-8c27-aff5137ecaed", "indicator--8270cda2-58e8-42cb-8df8-959056e0a6a3", "indicator--c3fd246a-269a-4fa9-bb70-1bc9e286106b", "indicator--75ebd4d6-130d-4621-aee7-bf9cdd41e14e", "indicator--80b5d3e8-18d3-4f53-be96-781a367e5667", "indicator--e69622d5-39a7-4570-900c-9dc9958d2f3f", "indicator--ffe1e808-5ba1-4b2a-bf08-a5f176144284", "indicator--bd955c7b-7269-43f1-b69f-8251620c3802", "indicator--92597058-853e-48aa-b94b-21b2567aae2a", "indicator--aaf9df32-d5e2-4874-bcc4-97474d8ad46a", "indicator--197b47d6-6689-4c33-b234-93f4a8469ffc", "indicator--e62ea37c-9d1e-49b2-a949-85577a9a9a64", "indicator--80d90c43-417b-4d45-b0eb-28fc81fca1cc", "indicator--2c0182e5-4dfb-4ca0-92da-314e4bad4060", "indicator--2d6d082c-7d08-4b06-bf4e-58fb8e270732", "indicator--f8979a1b-4270-43b4-b18a-67677b8b1432", "indicator--48316761-c603-4681-ada9-d0d13df7e77a", "indicator--f71f1a5d-ce79-4506-896a-172e8b274b06", "indicator--cf54e990-4408-41eb-a161-0fe938598652", "indicator--31191a28-769e-4413-8a39-91c22fdf1b12", "indicator--178cecd3-48e6-4b2d-8b6f-2f43e76262bb", "indicator--4ec6e624-a489-4841-842b-a3c1b14dff61", "indicator--df39a0f9-c8f0-4cb7-9fa7-2bfca7234dc7", "indicator--39559547-9fbf-4106-8931-0e6c28784dad", "indicator--98b87b32-561c-4d14-8c4e-7b97447ac002", "indicator--a8f39f36-cc9a-42e2-ace6-a8605796888d", "indicator--14dcf0a5-7cf4-48e4-b36d-0b61334b7fba", "indicator--d19ae2d0-1039-468d-a676-a51ac08cff78", "indicator--ed52667a-8dfd-4db8-91a2-54248ddf4c32", "indicator--259109d9-ae44-4f78-a3dc-d05eca06f487", "indicator--5807ccec-b3e1-4cf0-a5d4-31403b49525e", "indicator--fbca1406-8a35-4da7-9384-d4711c9575e9", "indicator--9f984875-0feb-403c-bc0f-64c35d2e29c2", "indicator--5223f008-a8ab-4720-839d-ab998bf54678", "indicator--3ea9fa92-4e71-4a8e-9d3e-20172d46951a", "indicator--785242df-f989-4f01-8bab-a125a6cf1c1f", "indicator--aef52dd5-6af1-4e43-9000-df66876cbf63", "indicator--51c941fa-8ee0-4eb1-a214-443364b22448", "indicator--1ee0e0a1-a1b5-4127-8820-37a0773221b5", "indicator--dfdda16e-ae3f-4d5f-8835-8c8ee84e1b70", "indicator--90710c83-ed74-41f6-9fb2-af287e7e07b4", "indicator--d2b6185d-f3d8-4796-b3f1-9983a8ffbaaf", "indicator--226713e4-2a80-4721-bc96-4e019915b132", "indicator--b1c80200-09a9-4885-a138-2e5e79cd7a16", "indicator--cc36242a-5dbb-4e36-89f3-5f9768b58cfe", "indicator--36a49666-14fa-4529-9094-dca46ff81d31", "indicator--4cdb3a23-21a3-473b-a3e5-914bdd8b266b", "indicator--dc6ca416-21f2-4f4b-ba82-d349d9739b4a", "indicator--1feb94e9-e9ae-47dd-84ee-240e7439b344", "indicator--421b124f-bfc5-4477-a34c-81fde513b4bc", "indicator--653cc1ec-58d0-4609-ad0f-04b11dc2667c", "indicator--375649a4-3a86-44f4-bc22-22b403fbe0bb", "indicator--1af21b14-a528-44bc-a5bf-6a5ea2a43c66", "indicator--7dbefe67-935a-44c4-b0fc-527094a2bd0f", "indicator--98135e94-b9de-4c5a-b345-82fd4cf31fdb", "indicator--a35ab67c-4fc3-4b7c-b717-535f6806d951", "indicator--ee208b1b-a1cf-4f2c-809b-1802a274f7cf", "indicator--2ee10d6e-f58b-4ad7-a15b-a7b25ba2313e", "indicator--9b9b4ad6-76f0-4dfc-8f5f-6cc40e11362c", "indicator--df625732-0435-4519-875d-5c70eff0b0f6", "indicator--0a97ddf1-6191-478f-8bd7-80ff326c96df", "indicator--a7d19fba-8d90-46be-ac09-6e037c541b7f", "indicator--dc13005b-d856-49a1-9312-d4ab92e8e6bb", "indicator--97354aa1-1c57-4b18-8ed3-45c3c0d26c56", "indicator--53026f85-a49a-4764-ba3b-5d4674bf4192", "indicator--2551b3d6-83b9-4f91-b265-fc4767758a97", "indicator--e845bbc0-fab3-4ce2-89af-160a57208434", "indicator--77b658a4-f969-4a3d-9d25-726663e5ec55", "indicator--3bd07ae6-0755-4e9d-b854-3216feaa3951", "indicator--f04d98e1-cfda-4c25-9331-8b12345def00", "indicator--36e040a5-8333-4a79-9631-a43a81614a90", "indicator--221cc97b-9267-4410-bbba-4a7e25697510", "indicator--b583192b-da32-44eb-a591-8000a86cda44", "indicator--d2fe1b62-4532-494e-8e86-08185c60935b", "indicator--c1b439fb-818d-4f1a-b215-da7d1dbcb943", "relationship--71b1774e-3e17-4dff-8a47-d551dbb612eb", "relationship--b7780145-137f-4859-a220-eac525903e4f", "relationship--a4d90402-2f6c-47b8-ba24-0ebc4cde6991", "indicator--7fea1e71-ed6d-497c-92f4-deb187f5f794", "indicator--00578f7f-e0f7-4375-81e0-a71988c02c66", "indicator--63e65b71-ed49-424a-986a-4338fa8c9cec", "indicator--fb9517d7-93bd-4811-a35c-59317eff5a40", "indicator--7ef1bc7b-50ac-4f9d-8756-777edc05b9aa", "indicator--74a493dc-c6bb-483a-a079-5ecc8a518dd3", "indicator--feafaca2-c455-4cdc-b5d2-fd888d1fb92e", "indicator--c0d62134-291c-4933-bcde-9d53ee3a6046", "indicator--480a6c85-1f28-4fc2-a54f-6265ba94271e", "indicator--a434aa42-9276-434c-8eed-426459386cd9", "indicator--864663bc-faff-4ee6-9122-071ea753d1d7", "indicator--63f48b57-9a63-4a77-8695-c7d8a337c27d", "indicator--3d8afae3-dbe3-4bea-baee-5c6e7fb6b4e1", "indicator--7d992651-edab-4956-9024-2c61a62ed181", "indicator--70a50283-909b-433b-8653-b2604e2e4711", "indicator--797ae620-38d0-4d62-a472-2666ab7f72b0", "indicator--8dcac3cc-7763-4264-becc-cf500a3d943e", "indicator--aac3c024-1c74-4bb5-9faa-1676a3427772", "indicator--2b6d4a94-0237-43e1-909e-2a304519c9d0", "indicator--a4342acc-c9ec-453b-88d4-d2e84b2a65b1", "indicator--5869db00-5c54-435c-8470-db02c6e35fd6", "indicator--0b0676d9-c1d8-47a6-9f67-93a509db18a3", "indicator--0c74123d-ac07-4b0f-b49c-f07c030a7c3b", "indicator--929c8118-eb2d-4f31-a4c4-4a0b04cf730d", "indicator--ebd2eb69-d0a8-4e51-932a-8915edca4dde", "indicator--6bc3ba18-d641-4e7d-9bae-71b48ebdf3b0", "indicator--26737de8-1614-4dbe-8a35-3036b5f30ae4", "indicator--49486ca6-44f0-432e-b03b-5d6b1495c9bc", "indicator--16ddeaa0-ea45-4ae2-8fa7-f8bed79510d9", "indicator--ea334893-21b6-4e93-a7a0-716fe1c7b907", "indicator--1a4a6176-65e9-4123-96bc-0c64b9bd56a6", "indicator--691abac2-a8be-4da7-a041-0667a7bce10f", "indicator--adeb64eb-2838-4955-a1e3-d5e7537e2f30", "indicator--26c884e4-6fcb-40b4-ba2a-30d82a4ebe1b", "indicator--92e49f56-9d1d-4d50-9d76-730d71798b65", "indicator--6f71bdc7-237f-43e0-8e50-87aac6e2ece2", "indicator--5552ddf8-120c-41bf-b34d-086e7d875257", "indicator--b5c94061-22ab-4327-81ed-6e83675c4619", "indicator--e3834818-18a0-488a-aaf9-94e1e16dcb33", "indicator--badcc8da-7bb5-4c83-b4e4-69f7ab5df725", "indicator--7d639cec-3ff0-46d4-9985-cdaf7eb72757", "indicator--ae600758-0b65-474c-a0a0-4066d1f1cd7e", "indicator--babf3675-2566-4299-b7f1-1c8787091132", "indicator--f5116f29-cd5a-47a2-ae41-dc8b1f7c8325", "indicator--565890b2-1858-423d-96da-e44b1091a6e2", "indicator--4b4d86e5-7c7b-4bbf-841f-18bb8d298b4a", "indicator--e44f9ca8-4c0e-4a0f-a960-f13d466e2543", "indicator--781da9bf-0e37-49f9-a075-455fc8a5fe3c", "indicator--ee06e85b-22b0-4d8b-a904-dfb121180f41", "indicator--12d736cd-ae54-4033-8cfe-10cb7c87d75a", "indicator--0c4f7c26-4feb-43d2-b7ef-9f39a408f41e", "indicator--80ebaa7e-a473-4c98-9cd8-795bc2d333af", "indicator--2fe0cdd8-d4ba-420b-93b6-0b4016d293a3", "indicator--4ecf9125-d02f-435a-abd3-f215bc415d37", "indicator--b4a93738-f49f-4672-939a-5e829a814e7e", "indicator--b6e23a19-0a5e-4af1-84a3-4ed12fed8f0d", "indicator--d0d3b1f6-074d-4bd5-ad73-c28766d378bd", "indicator--063d4729-8ebd-4568-a241-0404fbce9cfa", "indicator--544b23f6-7e04-4e19-a675-c4536a2fa54c", "indicator--21ab77fb-7d6b-4aad-837a-685e09e104a9", "indicator--ed97f1a1-c616-4ef9-ad4e-efe5b9935509", "indicator--18625768-c776-4694-9ad0-7245385b9049", "indicator--ceb48974-c72d-46ed-b76d-dd185ea90f8e", "indicator--b7ac08d6-17cb-4bbb-a409-d92f1977fbde", "indicator--57a84a65-fbf3-483b-ae63-9983f77bc043", "indicator--0ca39cf7-bab3-44f9-8f8f-68d928a5408e", "indicator--90a1465f-91e6-47fb-8cbc-d909a1367833", "indicator--98707a8b-9ca5-4acd-8e1a-f79272edd3f5", "indicator--e161247c-fa2c-486d-bb39-389d2c330942", "indicator--52e31be3-94f7-4b48-9656-76153e056c19", "indicator--6fecf643-66c8-458f-8553-6962b1091f4e", "indicator--af101437-52a2-4f6e-b8ed-9c02083f24ef", "indicator--b3ba5e99-ac4d-4d9b-8f8e-dee035f7ba98", "indicator--da102919-7130-4b38-a711-4c827d5f79f6", "indicator--176bf817-b34f-4cab-a21e-25dfb762dccd", "indicator--dd9a731a-8693-494b-a747-bacf8b25895b", "indicator--16a9c32b-775d-4aa2-9955-07f6d890aef2", "indicator--809cb0cb-f0e0-4d54-8b55-b51cb6198389", "indicator--61bf1d28-f49f-40dc-92c8-baa0be101876", "indicator--68868786-e598-4611-bbfc-be1b69233dd9", "indicator--f3bf9d87-376d-4d2f-90d7-bac141601b82", "indicator--386d57be-0b70-494c-8973-1ff0b7dd06e7", "indicator--82c917b0-8cf7-4957-bd15-d1da93c90287", "indicator--08f519f2-4a3a-4bbf-8161-886283f2737d", "indicator--15f1a295-5d26-4cd6-8e59-92af8c003ce2", "indicator--92add7bb-39fe-4920-897e-465fc3dfaf2b", "indicator--c1588387-1ce8-44ef-abc4-f4508d061f90", "indicator--88ef1968-959c-4db0-9215-5cdf7fba9a3c", "indicator--7a331c4a-6ffb-4d71-ae20-67a84404dba7", "indicator--b6f8e1d9-9fb7-4f0d-8f53-c65425d80452", "indicator--40c45afd-0c7b-429b-a024-9df26c844736", "indicator--b15ed679-f269-4f65-a60c-647b4b9f4463", "indicator--3c78f584-ca6a-48fa-80ea-4ec633a98220", "indicator--351c4877-5fcd-451c-9812-ab133e43c17b", "indicator--d4341e97-7240-4980-999b-ac96244d2f42", "indicator--99b678f1-9679-4728-a8a6-dd9c3fae8b33", "indicator--a8c503b6-dd66-4acd-a85f-af4a69b461e1", "indicator--544c5d0d-5382-4e91-b96d-4ac0703a753b", "indicator--e65a15bc-a76b-4b7d-8a75-0c606250516f", "indicator--92a8d88a-8607-4cec-894f-f562c9ec019d", "indicator--319955bb-c547-443b-80d3-b04debd4969a", "indicator--2e19b58b-e90b-4e16-bfd0-f096741433d2", "indicator--2ee06cb0-aefe-4eb7-8474-103027646f5e", "indicator--6d9efd56-e391-4c55-a935-e2647dc78076", "indicator--3682d14f-7836-40c5-9e40-5388cb049f7b", "indicator--9653ccae-2ee4-4408-9acd-24e6bcd52295", "indicator--b760cf7d-0494-4ddd-9c88-eb2ec918b9a2", "indicator--d4e7d9a3-62c2-4507-90f2-721d1a027355", "indicator--4f7cee85-fdb7-4d0e-aa96-0f24abb2efec", "indicator--d366a1bc-0043-4319-afa0-614bc936251d", "indicator--5b24ea79-e6f3-4ddd-b59c-0e83e9fca92d", "indicator--074b84a9-b20d-4143-bae2-923b5ff623b5", "indicator--6b41cf19-35e5-45c8-9161-19f360685e29", "indicator--8af5e44d-8eba-4400-98ae-ab7506e41139", "indicator--d1ca9357-e9ef-461e-92b6-09b985ff8184", "indicator--357820d2-e9ee-49eb-b095-04f72b59f878", "indicator--2aa10d53-36af-4ad4-a142-d2d0ba4c7ad2", "indicator--6005a780-8d39-45c7-a394-4a618e3c74fc", "indicator--859d2f6b-d9ce-4910-a264-4adf0d2cf888", "indicator--d977f0ce-0011-47f7-93f9-adb787764fba", "indicator--d84465ea-df08-4914-b3c1-10dd2e9fbf68", "indicator--9600620f-9b7d-4b2e-a7df-faafe8f4689b", "indicator--2916e83b-f6cc-4142-bfc0-b67879a33ac6", "indicator--66d6e488-a812-4790-9371-88d4569b10fe", "indicator--3aba7965-ad9c-43ad-b157-18ec49285015", "indicator--56aed349-a61b-4e6d-9ea2-4c8958f26805", "indicator--89275616-f129-4815-8f05-2db1c0cb08f9", "indicator--0fab9f13-8982-4136-9a3c-d0d00f94eaef", "indicator--62f48877-0b79-48d7-a63a-ba17666dc4c8", "indicator--4245e7a2-46ec-496b-b775-bfa3063bcd05", "indicator--d1b307ca-2cfe-4972-8727-8c5f11c4cf41", "indicator--5d289c20-87b6-422d-8151-9524fc352778", "indicator--0eb77f0b-f846-46b3-a09f-e0416fd054de", "indicator--d774952d-d409-4e21-a354-900fad536ce5", "indicator--fe9e5347-056c-4b61-a191-43c40a79857a", "indicator--a85acef9-7672-452b-9fc0-6742432aaec4", "indicator--43909e1f-56c8-43b5-bf8e-d51f24550543", "indicator--682b44df-37ca-4c90-a740-14686e2c18c7", "indicator--77a79d3a-f4b7-4d01-bb5d-9be035b888cf", "indicator--fed57d08-ad90-476b-a2cc-4bf69d3c7742", "indicator--143d0ace-0354-48b7-9340-75fcf6b69186", "indicator--ae21641d-8feb-4110-97e5-129a9e684362", "indicator--57e722f9-4e7a-4bd1-ba30-4dcbb9d14b7b", "indicator--fd9dc0b5-4ab6-4f4d-b6da-98dd1db89141", "indicator--3deebb2a-c207-4bfd-913d-52ba4d099fdf", "indicator--8902358e-a7da-4606-8343-9cca6fa7becf", "indicator--aa94b808-f7de-4818-960d-2d721843d8a6", "indicator--d400adff-0559-4d79-87ae-35804c1c836d", "indicator--5784cc9c-89c2-4d1c-8a6c-9126e872ce7e", "indicator--c8b15c60-f2eb-49f7-8f1e-c8acd30545e2", "indicator--2b4fc76e-6c06-45be-a830-6755e29c1c54", "indicator--31f4f9b8-1efc-4912-adf0-b8a730416679", "indicator--b0b740d8-4dac-43bd-b1c8-0c5244f30b55", "indicator--eccca7c7-05fd-4f18-998b-a91c9e6bc528", "indicator--ab40f057-1269-46d9-bbed-4969c1fd4196", "indicator--ce649840-b5d3-463d-9599-2f489a5dd392", "indicator--74d8590e-bb99-4651-9846-9d413fec8f03", "indicator--8591c4c7-f046-4f93-8461-e6fdaf5d831e", "indicator--9c968271-0464-4c36-b6bf-644ef9067cdd", "indicator--6e0b4419-54b2-441c-97c3-97c7d179fe55", "indicator--56a6eba0-24ec-453d-bb8a-965408570d40", "indicator--37deecef-d3f3-4a5b-9bee-6b55a663f183", "indicator--4ef66434-1f0b-486c-a509-07e732b23696", "indicator--e69b4bab-3340-4c67-98f1-725c5074d65b", "indicator--90725c8c-fbd6-4bc3-8540-5bd0c83a658a", "indicator--f543e91b-9039-4d97-b5b4-2dba8d25f6b6", "indicator--5eacf8be-846c-469a-9a69-5f1e52ecd20c", "indicator--e76a6f4f-dcc2-40a3-bad3-95420a810b91", "indicator--38160adc-ac04-43ea-b42f-9afb1098222f", "indicator--88738b74-c8f5-4fd7-9369-0a7b4173cdc2", "indicator--73c7576f-24c7-4414-9403-7181fe52ed4d", "indicator--3126348b-21df-4937-9b3b-49853bb05ae6", "indicator--b373b76a-2940-432e-a79c-1e68bbbffc7b", "indicator--2e7831ab-a3fe-4c20-8375-6952395e362f", "indicator--d6275513-4a93-4a0a-868e-a6faf38e664a", "indicator--400faeec-7644-4990-9afc-bf70e5bacf41", "indicator--0b1a6512-b7fc-492d-b997-b750bde40d0f", "indicator--fef0c1e5-cbcb-4492-bd0d-9dc66624c37f", "indicator--1f3bbfc8-f2e3-45d5-b606-6f44fab2570c", "indicator--1104b4d9-1bd2-42da-a1d5-dbe6c5080e81", "indicator--bff69dd5-82da-4310-aed0-27d569190a66", "indicator--0a73d917-5c93-404c-a5f2-1d482c599d01", "indicator--f1a61ce1-3a44-44c0-8209-91594ae88bff", "indicator--14a88bd5-a323-495f-9a0a-de64e582766d", "indicator--f2570875-360f-4b80-a8f6-f7422022b5d6", "indicator--051e3552-d8b3-417b-ab33-f536733cc557", "indicator--d2a9dccf-4618-4953-af93-2bad9f5d41ec", "indicator--03b4cd20-5eb9-43e7-8b0b-4baeda085c84", "indicator--bec52714-8cab-414c-a837-d1a08e753045", "indicator--ae53387c-29ac-4bdb-b5e4-e451354c4634", "indicator--0a442593-d100-4c87-9a6c-f549c4d2d11e", "indicator--164cc23d-cf9f-44ec-b7ea-08d1b28e6846", "indicator--76b49de8-93d5-4223-a9d4-562947724b32", "indicator--63dec4b1-7776-46cd-9970-2b0f1aec91a3", "indicator--159d1453-e1cc-428e-96bc-045da18ac9c6", "indicator--a35437b7-8a12-4f7b-8fcc-54d223d18fdd", "indicator--4811973c-e0f4-49fd-a1ba-dc570a773897", "indicator--6cbb2aea-5d3a-4cbf-a7a7-6459225936d5", "indicator--e62780a1-dc78-41f4-8e0f-eb6ac1d1abfa", "indicator--a8672da5-9e83-41a9-9f15-82e84c19af36", "indicator--ed8c5c4c-c3c0-420c-a233-d8c6bb2cfa5b", "indicator--6f7f5212-bbc0-4841-830a-cffb9903f5d9", "indicator--4abd2b03-8867-4bae-b55a-1eac2b4a9bb5", "indicator--096710cc-2b6e-45c7-a824-f4e43d9c8a39", "indicator--8ecc1159-2f0d-48ec-8c60-12419d42cb84", "indicator--8422dd3e-70c0-4572-8c1e-3a29241999b4", "indicator--18714160-258e-4870-b9a9-c6e7c0454385", "indicator--f65480be-c85a-42dc-863c-41a406afd42e", "indicator--d8d6afd2-9c1e-440e-abe2-422a571e9000", "indicator--98d92fa5-4d0c-427e-8974-091f3bbfc948", "indicator--e6feb1f4-540e-490b-be04-f9cfd67f1796", "indicator--cebed303-abaf-49d9-8af2-08c4ec78a96c", "indicator--2fde473a-2f17-47fb-8d99-72ee3bfcd279", "indicator--60bd84cb-be90-4a4c-bbe7-0f8a8513f0c7", "indicator--8a2e396e-d7bd-442b-9e70-a0d763b424ce", "indicator--a1af0602-b9e9-4b2a-b5dd-926986e64f8c", "indicator--74ab0f34-aaaa-4649-b0af-069182ed75ef", "indicator--d369efdf-9811-4af7-8705-222c301fcbe9", "indicator--2dfe367d-7ae8-4345-b755-5b4f8795ceff", "indicator--7209c10d-b128-46a8-919b-072cda5b22bb", "indicator--402d9d76-da6c-47b7-8460-4ed81352d76b", "indicator--373287f5-1f84-4c8b-85e6-45d200670741", "indicator--3b1b7881-a612-4d34-80e1-c33c35d5d972", "indicator--bbfa6a32-f594-4cf3-86b0-418b21a4211c", "indicator--e426d657-86f3-4f98-8c5f-9e17aa46eef3", "indicator--afdf2643-db44-43e2-b6f5-e651a814ac96", "indicator--63234d63-bc39-44c0-b38e-cc7a0c65eb6c", "indicator--04f63ad3-052a-44e1-ada7-8f1fdd6a1c54", "indicator--13490b17-3e25-4b32-8010-55c9fc4454c3", "indicator--38aee62b-151b-48d8-b26e-75d7ad3ab6f1", "indicator--9b87bc41-02a5-452e-9ac4-430cfac7bfba", "indicator--b1135b52-c811-488f-b662-0e671020e83e", "indicator--509503da-4590-4f26-8666-d902082a99f7", "indicator--d32207f9-1847-49d7-a105-8fba3afcc1bc", "indicator--4369457e-d335-4a43-b1c5-80ba8ddaed71", "indicator--f1a38e51-6a87-4e1c-ac04-d3755731d996", "indicator--55874dad-e666-41d5-b418-57acac791079", "indicator--cba55328-b3d0-47d7-9129-1ca056eec903", "indicator--1b4020a5-f03d-4603-a111-106cf9b9fc34", "indicator--9db6d812-9440-4bfb-b801-dc3686418f80", "indicator--8f3f0626-2ce2-4e4e-a025-97930b1f5cac", "indicator--448ac299-3afb-435c-b887-188004646365", "indicator--a147602d-27c7-4f25-a0a5-fa005aa5c80f", "indicator--8e2c45c5-2443-4428-8d76-b67aa9aa257a", "indicator--bdf9b300-f524-41f9-b78c-7a1e9a7dcbe8", "indicator--300802d5-0ee9-4b48-bbf3-681de9cfde9e", "indicator--ef528597-f4a4-4e3f-9973-a38d14b86c07", "indicator--39b470ab-07ff-4028-a6e4-e20457ce30d3", "indicator--193fc9fa-8703-484f-b008-371e3a8b02b2", "indicator--ec2ec842-d376-46ca-a16a-22ef108fe3e3", "indicator--de20c532-4080-481e-830d-1b1470605542", "indicator--231e1e9a-3612-41de-94af-295fe6f46e95", "indicator--74af9068-a450-4712-a5c5-dfd5b534b0a0", "indicator--f9920f6e-a7bc-4b03-b661-a9414c4ece35", "indicator--bd4bdc6b-e6f5-4131-ac57-29b98e85fd92", "indicator--dc76afce-2146-437e-8fa6-57e9cf146efc", "indicator--5e2fc9ff-965f-4f48-81a0-85ad82b76b07", "indicator--c7382118-d580-40f1-b19b-8a73cda64b0b", "indicator--53c8fae7-d336-475b-b23c-5549426f9f7e", "indicator--fa6c47f3-6ff1-421c-900d-f4785a8453a4", "indicator--b3e88297-3e6d-415a-8957-778f06522787", "indicator--8c11e116-b539-4285-934e-a0a0bc3a0ca7", "indicator--2e8f8fda-6c32-4e55-bd1b-5cf34a345c6c", "indicator--0d7929b5-3a15-4cd9-a58d-dafde5b1238a", "indicator--36fb6ce6-442b-41cd-8c69-d0208e07856a", "indicator--ff92fd3b-c942-4514-8471-d0cc1992db2b", "indicator--a151261d-dea7-4bf4-868f-34556af69fdc", "indicator--ecbfb0ee-d095-4374-8cb9-75ba83f4de6e", "indicator--59b7b11a-d1b1-4a4f-b7cf-78cd77ae7498", "indicator--7736764e-3b17-4de8-95a3-ef9c2fdd1ebf", "indicator--b8c0e64c-dfb8-44ca-a2ce-d3e75bdb60d4", "indicator--2a620d5c-3c18-4624-b3ff-3d2664915033", "indicator--9dcf2458-6907-453d-a553-6b45ebe2f944", "indicator--32f561f6-639e-4b15-b195-92f2038c8135", "indicator--6bdecb04-4c5e-40fd-8207-be23831fbc6d", "indicator--1c25de0d-d2e4-4ac1-a875-bcab857f8700", "indicator--8f36dc1a-f2fc-4708-b37d-e7d3636f05a5", "indicator--d8fa0254-733e-4145-a1a9-1e5345cfc7b0", "indicator--2979b585-3c3a-4d85-b5c6-0b0997ad8e64", "indicator--e03a4b53-0a99-46bd-85a8-1f98bad3dbfa", "indicator--5d554d67-569c-4f95-8416-09e97272044b", "indicator--4e9a37ad-2cc1-4bc1-b9be-02c78d175f2a", "indicator--0f33eee2-b043-4d59-a725-0fe857168349", "indicator--1802234d-8ced-4cec-8d7f-af4716ddbb8e", "indicator--07a3c35b-e46e-4e87-b6b7-0010e25785d2", "indicator--4dbbe632-a128-4a89-a793-f06510a08945", "indicator--e4c7cdef-bdc4-4db3-8b39-770c3460c77b", "indicator--ca43c869-2438-4e96-8c7e-2d0bf63122de", "indicator--5adc8c49-04dc-4db5-887d-a1564822bc97", "indicator--3ec67fd9-92bd-4e46-bcfd-6efc896146a3", "indicator--a57fb07d-0c7f-46b7-bf52-9e19e85e6358", "indicator--d59a9a9e-a13e-4a26-9315-dfbb9b1a9457", "indicator--5cc4ed50-0bed-4601-bffa-190e07cc3fbf", "indicator--88c061ae-0b7c-4854-9a6e-3d03f2b6932c", "indicator--0ca0dc2d-fd4f-4a03-bf99-3abf1a1946c7", "indicator--7df67912-a1ae-49cd-8e1c-e0b595084a83", "indicator--9ee5c6c1-623d-43d8-8cc2-0c19864859d0", "indicator--12228c41-f869-4157-8070-b4c8448cfd55", "indicator--0205b2b8-c0ca-4864-bcdd-223b70504d68", "indicator--ea6cddd6-dd4e-4c0a-8a4c-dea23dfb58a7", "indicator--a5351e0c-6b94-4402-9620-6cbb468cad19", "indicator--f85cd872-28eb-44d5-bb21-de2730899839", "indicator--b2da646d-7e3f-4ff9-9df7-2e991bb9c1ec", "indicator--0f259d2c-9558-4f26-8e71-f7ed805fb990", "indicator--9250bd5a-a7dd-4f60-bf20-06cd8094fb3b", "indicator--662cd35b-fddb-41cd-958e-94f113111f07", "indicator--d9cf2dd6-bff2-4698-882a-2aea33331f9b", "indicator--9608d33c-05e8-4bb4-b00a-679bc354ef5e", "indicator--a2f779cf-b19a-4910-80da-0ad55322f856", "indicator--84a32351-b335-43df-ad09-77597a5bd6a2", "indicator--23fb2cd5-d868-4eb9-b655-d8538e01527d", "indicator--febbc43c-86a5-4e94-8945-8bb4629077ae", "indicator--11bebd4c-5579-49ea-90db-79d911994baf", "indicator--9d335f7c-4fc4-4c08-8faa-59ad7c9b8f64", "indicator--952a5cc4-8471-44a7-be37-6b9d687f168a", "indicator--a0e611b7-66fe-4015-b219-769fc49e5f60", "indicator--83109ad8-e058-4df9-88e0-61e0684098ce", "indicator--f68ef847-1572-4afd-b581-7977a0841b2a", "indicator--579d76cb-8cc0-4b0f-b68a-29b508b442f2", "indicator--c42016dd-6171-49bf-839c-539708631747", "indicator--9d012390-86f6-41b2-a2c7-706bf3476ae0", "indicator--7633848e-4746-44a9-8929-e5c43b3c2af4", "indicator--d5659622-f678-4965-9966-d1e5f123e04d", "indicator--d355e3a3-784c-42e5-b8a9-f49542f2a92b", "indicator--853eb714-cf5a-45c1-951e-711e5bfb61e8", "indicator--9ba5ab60-4099-4aea-b1bc-d8a5bdd1b300", "indicator--b9299052-046a-4e97-9cab-b745402f8960", "indicator--f1924738-5b50-4aa1-82ba-5ee7d9e61a7d", "indicator--bb729f7d-8376-4c01-a082-172ab81ecdb6", "indicator--37e063c8-d027-41df-b6b6-9b42eab4d2d5", "indicator--df8fd927-9dd7-4f98-a802-c2d02f4623e0", "indicator--2895443c-8a47-43e6-b212-3f37473bc308", "indicator--35bed620-b1a0-4151-aab5-f3920a556747", "indicator--47393822-b72c-4bd4-80e7-3b9e4fc1a895", "indicator--4a57ba00-be8b-4e57-b797-ca3f7ac23ce4", "indicator--60c37a98-2d2e-4436-8b98-3308995a01a4", "indicator--6db9ed72-067f-4dd9-8cb9-efe383ba56d4", "indicator--9b47e1d6-9d37-4d09-8153-b853cbbc9543", "indicator--650565cb-c32d-4903-a62b-08ccad5239c6", "indicator--3dd8ed4d-5d7f-4c5b-ac49-af9fb9747db5", "indicator--d55afa86-0d1a-427b-ae0d-4c9808dde618", "indicator--dccc914d-4605-4b40-a635-62a8a1d259a2", "indicator--4e7e9ac3-5985-4422-9076-25dc0da70ceb", "indicator--693e4c8c-2dc4-4bf1-87a6-26fc875f3c3a", "indicator--7f595619-4281-44e7-a8c2-8b5f0b3d6b11", "indicator--a3467bf6-a25f-41ff-8b2f-20237ea17822", "indicator--8fef26b2-2424-4597-af4e-620348624141", "indicator--cfc4bc68-5d64-4f69-899c-cd08cdf9856e", "indicator--a45e3525-739e-4dc3-9388-88f3d0fa1427", "indicator--29bb3df5-3ff4-4e26-a510-8c41a8f2cd79", "indicator--3bedb58b-01d0-4639-8c05-5415ec7b1fda", "indicator--7520716b-769f-42ae-962e-30711a218cf5", "indicator--07df3b50-52da-450c-9507-a2c7f950ffae", "indicator--8a3f8ba6-8dc9-4d65-ac88-260cdc18036e", "indicator--35e4f3c8-3a11-47e9-b782-873875048b34", "indicator--a518fa25-e45a-47f5-979a-057f6d8d98ee", "indicator--fdc31931-1821-4ded-a678-a3f6cdc9e3b7", "indicator--4bd71aa0-a192-49b6-85c4-65938d42e7af", "indicator--3f0d42e6-7556-42d0-b980-8a4448403e11", "indicator--29961752-7fe3-4479-8aa4-fa5042488d0a", "indicator--45e21a34-54b3-4be8-97c9-2250d7557cbc", "indicator--c6f83a7c-fb49-4d35-b1d7-36b3b6023ef8", "indicator--bb56a043-f610-4ead-9f56-7c8b2f264a0e", "indicator--4800eb7d-51a1-4c72-ab3c-b38e28beb3ef", "indicator--e131a44a-2346-4cc5-8d63-26e0403eb142", "indicator--c86cc140-0762-4d6b-9353-c05b0fdf6f43", "indicator--6e8c91af-3f8e-4db7-b550-8de271edbad4", "indicator--93cf18a0-ba6e-4f06-b5d1-926796b56a05", "indicator--ee0d0a82-89ea-4b07-b34b-4537cfaed086", "indicator--627e84c4-02a1-469a-8b57-fa2622be7d19", "indicator--a1bad320-c4dd-4eef-b7ae-170311b8a9d3", "indicator--ff418068-76cf-4a82-a81f-ba2fac26d223", "indicator--72e3c225-1acd-4891-8b29-7fdf076e53be", "indicator--b8e089dd-9db8-4f3f-831d-d2179c6a6de8", "indicator--c8a0c8ee-ce91-4173-a101-cdc6313143d6", "indicator--46cc33cc-ee24-479c-88ca-3d8510df40de", "indicator--a8aebaf6-d184-4407-a92e-29066592248b", "indicator--3a38ee9c-3604-4f6b-81c8-f217ba8ce3cf", "indicator--8bd6a328-19fc-4ea1-b8d2-c7907309b9df", "indicator--678863cb-d8fc-4993-aa30-f304a1a81f83", "indicator--65fc7e8b-db08-4346-9ede-73126c6b7ce1", "indicator--f6dc3c2f-b4ad-4a17-91de-de0a5dca2dbe", "indicator--8630db0e-4e1d-4058-ae44-079bbdd9f6d8", "indicator--47431278-c8f2-49ce-9e75-2371c21f3175", "indicator--e375bbb8-ba65-4cb7-813a-814a58098440", "indicator--0e4e8838-cf9d-4987-8e96-1dbd7ab3b8dd", "indicator--52a1c9b5-a99d-463b-802d-060eeafc9ddc", "indicator--8021a868-da6c-4c1b-a19c-82e7c236aeed", "indicator--3b559907-47bd-425f-a86c-f367a5546a60", "indicator--7c34d733-4b7e-481f-9f34-00f53c3dab97", "indicator--0bc74b90-29ae-4b7a-b0ab-70296c3d3176", "indicator--97c7bde4-ecc0-4060-b244-35b4aa2979a3", "indicator--3eaaff5b-2235-4be1-900b-669021a91a35", "indicator--9f859eb6-d164-4f30-b8a1-dc6521654690", "indicator--b0ab3417-70dd-49ed-a9a4-8983dbd87a8b", "indicator--5f3fa684-2688-43ed-8946-71016b6711bf", "indicator--3acee2a5-b2df-422e-9e2c-a520a496ee23", "indicator--de99ef3f-17a9-4e9d-8424-776603b07dfa", "indicator--9db82e18-6f36-4061-b04b-48bff5050bb2", "indicator--6933e64d-d6c2-4767-9459-44020199b497", "indicator--e311222c-8c07-498c-94a8-13284cc53045", "indicator--7f832316-83d2-4836-a1e6-77a10c13cae5", "indicator--0a4aa48e-d073-48ca-9342-1d9291377afa", "indicator--c0eaba1c-7459-4710-9dd7-70f6a99cc331", "indicator--6ccda35c-516e-4eb4-b900-f5723c20a123", "indicator--8a794ab5-4fa3-4fca-8721-7bf4635da790", "indicator--00f87caf-7412-4a5a-a8b6-28fc359ae015", "indicator--1e44e851-2503-45c2-b20f-ef8e7a7ab34b", "indicator--082ab41b-c393-4f5c-a33f-e89bd01be9e0", "indicator--8b62fa44-570c-4031-9613-d2027f26ccb0", "indicator--7de2b8dd-e3b9-4054-bd8a-98f8dc6e207e", "indicator--b77022ca-766f-4cf4-99a5-b477f94e7084", "indicator--c967775b-4195-4e3f-87b5-c0901c2e6ae2", "indicator--90e6b6e5-6e7c-47fd-8244-c52c9f863721", "indicator--24eee34c-2f99-40fb-9c3d-ad5d4212af86", "indicator--22c6555c-4ec7-457d-b408-d8b63e4a101f", "indicator--82adbaeb-f337-4d96-9ae5-af43eb78a80b", "indicator--e73012de-ca2c-4568-aa7d-d3c5d1d26778", "indicator--dca2f0ba-92fe-4cd0-af10-8448d2c9c867", "indicator--88d0ba26-1ac1-4c1f-870c-f43a66d9c8ae", "indicator--f527cc13-768d-46bf-97c2-1675bfcaa498", "indicator--21c56723-0f1a-49cb-9456-08fa61ecba27", "indicator--4cf485da-4343-4cb8-ada4-c1db54761d5b", "indicator--79c05f69-411d-4409-8421-3044bcc71569", "indicator--a0a92c1a-8db6-4e26-b0b7-38d14fca1c17", "indicator--3993d619-7000-4969-a73a-f50b016faed7", "indicator--8d2b8234-3b22-4f63-bdb5-7a43d6a71fd8", "indicator--d2cfe7c5-d84c-4236-a042-1c27b13d87b7", "indicator--bcc89ae1-36ca-4529-aad7-7a3267612546", "indicator--42e08bf3-3d3e-4e3a-af0d-62839e719b5b", "indicator--1aed0556-5580-4f0a-9a85-0c0442060e6a", "indicator--163bbb59-3e47-467c-a175-1755f717cac1", "indicator--9105628b-eb8b-494c-bef8-0e81be435442", "indicator--f3e9552b-2d15-4367-b78b-106b97d1403c", "indicator--62c5e91c-cf68-44b3-a9ec-3d09138e4e8e", "indicator--8650ac32-5f6a-4738-8105-270d630bf164", "indicator--37a9a026-5fc4-431e-9fcc-7d00d25cf800", "indicator--f4c95b77-4a6d-4d2b-8de8-c8c659e4175a", "indicator--5d62f8b5-f1c1-4e74-9d48-0146a220d0a7", "indicator--f5d4b133-197c-4420-82aa-239747a767eb", "indicator--1f469ceb-1cd9-44a7-8323-72bafffe6ab9", "indicator--6a1404cb-7257-4f2a-92eb-35b2f18f12ef", "indicator--edd5a52e-e70f-4b07-a475-5dec9568fb3a", "indicator--2fc4f133-2235-44c5-8449-fb1af79c62b8", "indicator--be70854a-5a50-470b-97c9-1952152bbb95", "indicator--a15275f8-3331-4f18-8667-4eaf175065c4", "indicator--0040e48f-1fb3-415d-b353-449b4735938e", "indicator--6bb63c38-74bf-4b2f-b1d5-cebe42e8f082", "indicator--3422ad2d-d9fa-40f8-af70-18f1cdb2dad4", "indicator--2d537ba9-4ac4-460e-99c3-7d0b6f85c6df", "indicator--cba13bf8-fa80-4e01-af18-d1e618d21666", "indicator--91f9d577-9498-4fa1-a89e-37f8d2a2fb47", "indicator--3f925e8b-12a2-4078-8808-d8f874b86908", "indicator--1278d604-29b0-4de8-9feb-a9a94a563759", "indicator--bd732342-1684-49c7-b767-fa06ded522d9", "indicator--9677a762-b66e-48d1-be00-8572fd90bdfc", "indicator--15c0645c-7643-41e5-b9ea-9ba5a76adabc", "indicator--62bb1804-bd92-4083-bafd-32d7259dba65", "indicator--8a19e50a-a40a-4b63-b5db-fa4370c8af2a", "indicator--669df48c-af41-48e0-a204-8679d34dd782", "indicator--1e22df14-a07f-4dd3-b8e4-d532d52f530c", "indicator--cf202556-aac3-405d-b3e2-32b23d081a1e", "indicator--1988181b-4f94-490a-8712-aa94e532a3f0", "indicator--a51d1ef9-bd48-4aa1-8a46-8f9d543f2d36", "indicator--45199a66-50f2-4d21-990a-c192e4a5e786", "indicator--d8fa521f-940d-404b-8827-c88218877997", "indicator--f40affc4-91a9-4a24-a130-1eb59da73146", "indicator--1f2875c5-2d7d-4ac1-b019-32e42cb89b73", "indicator--992b3c7e-7849-4aed-8ebf-36da37f3a0d3", "indicator--ebeaf625-2bb4-4671-92f4-a48f733c2b4f", "indicator--b757ee68-b358-4539-9bfb-55de97b37871", "indicator--ca233219-a1f4-428c-af99-7a4bcc0e52e6", "indicator--e2f43bfd-7a1b-47db-8f55-19e8d2eee3d9", "indicator--f28bdda8-312d-45ef-a896-cb6ac36d9b9a", "indicator--2bba5338-ed1b-4c8c-bb6b-f750234e4442", "indicator--246c84e4-1367-46b3-aecc-5e81fdd70af5", "indicator--24326efa-9dac-4eb9-8e6f-03cbdeb0e349", "indicator--7349b62d-b018-4c1c-92e6-d6da140303ff", "indicator--1830889d-4834-42c0-ab9f-6978ea1a3c72", "indicator--8d21d960-f2e4-41c9-a085-d10a45f4c1cd", "indicator--f71e70e5-c5e6-4508-ae6d-bf436842bbad", "indicator--b3b1159c-5408-470c-8ad4-dfcb138c0f3f", "indicator--2e89f5c6-020b-4cc9-a0a6-cb725bb7e61a", "indicator--ba2496cf-8509-44f6-a323-09531f1eade7", "indicator--ac7f8530-0e52-488a-bc51-3815deb7645a", "indicator--af7768d6-0951-4a13-a2f9-a0457ae72a5b", "indicator--72d0652e-368e-4aae-b01b-ae38cd6b778f", "indicator--b1197b67-6838-4014-9ba1-53ee1a3c62f4", "indicator--ad625dbd-3006-4ad9-b817-baa24ef90be3", "indicator--a33cdd2c-97a8-403f-848a-31ed54e5bfd1", "indicator--ae49bf1d-9054-410e-9df4-07a47a3358a9", "indicator--fc39fbe3-6f47-4f4d-8217-592c49e8a10a", "indicator--b829454c-d17a-4a61-b78e-386ae8ce7067", "indicator--5d554967-012d-476b-bf1e-a90c4749e0e3", "indicator--a274d0c9-3411-4d9f-8121-942bd6dccb94", "indicator--efe9d936-4d6d-455f-8870-aa9bfcc07f71", "indicator--cfe1e779-ad78-4f97-ad32-fc2bffb36b57", "indicator--e9412dda-562a-4523-b04d-90c0a2c0b406", "indicator--71d9da27-a2f9-4e94-ba3f-5f8208d63d58", "indicator--dc7ee14f-f5c6-49fb-a926-46eb9d60932a", "indicator--bfa12c0e-d784-44fe-b55b-c7b336957ce2", "indicator--21cd4dd8-73e8-47f5-88f0-600d94f1c726", "indicator--eab225fb-6df9-4faf-ae5c-ddd9eded968b", "indicator--073f8caf-654b-44ac-bb45-e09f1bd52f84", "indicator--cf96ad10-b8c1-4342-9ad0-3a34004da087", "indicator--8b59b8cc-b3f5-404f-a32a-c4f0d4486c52", "indicator--c01a3298-a80a-41a0-811e-821d23e723bf", "indicator--fdf246bc-3fdd-4759-aeb0-29e4e97c037d", "indicator--cb2ec340-8bf5-4329-9974-757d60792f51", "indicator--6e421ba6-c2ba-43c2-973d-23211f2f4596", "indicator--46debd9a-5f30-4122-9adc-251664ae4d51", "indicator--0ab7a490-a580-4902-8ca0-e057dc43de3e", "indicator--d94013cb-dc4d-44f9-916d-ab2d3f49c573", "indicator--6e4beda1-4c3f-4306-99d4-76d65b8bd5a0", "indicator--304c77ac-50ef-4f44-91af-dccce11925e8", "indicator--0e840d07-25b9-492d-89fc-1affa936d28c", "indicator--c3e27ef7-af20-4b07-9c4b-a9c522112161", "indicator--0a9fb1f4-3791-4d17-a904-8627efb333c9", "indicator--e78c779e-61a4-4990-8e69-dfe736bbaad6", "indicator--78cdec96-fdf6-400f-bd10-d022ab5dd10f", "indicator--c36f287d-1009-4a3e-86a2-6a2a26d49e7c", "indicator--c23c231c-8370-4ae9-b5b7-3895dbaaa123", "indicator--95317ff4-f6f5-414c-8ce9-8a2d2d05cab1", "indicator--5b4f3328-7922-41ee-be5f-9a76df9dcfa7", "indicator--19a0b6da-9573-44dd-a3dc-aa46299a2bdd", "indicator--274ae59a-9e54-4ec4-a478-22804a8c54ed", "indicator--1b8a5ec5-8fbc-4c5f-a353-786c575f04b9", "indicator--2d230ac7-3e6b-474a-b39d-ab6013287361", "indicator--31d521df-c26e-4c83-8959-eba39423d824", "indicator--5d60b38c-3012-401b-ac25-819f914e462f", "indicator--592e8250-58df-43b9-ac2f-ae3f9c00ded6", "indicator--310f5b21-c305-4ab7-8c64-83a66c67bf72", "indicator--4fe56207-e863-4d0e-9cb4-10d10e5e85d5", "indicator--0f230920-2e5f-4408-ae0c-94988044ba20", "indicator--fbe5858e-4509-4a85-9f57-51a8de87e98e", "indicator--b37ed827-b081-4f50-85ea-2104dad64743", "indicator--7156f26a-dfc5-4716-8c7d-6522ba90b770", "indicator--8de42e64-45f6-4b10-a26d-e8c3e1a779d0", "indicator--f318d5d4-513f-464f-8045-7cfae609b429", "indicator--ad3f494c-8f49-4b69-8867-987b54abd05b", "indicator--8a9c5e98-d3ee-47f9-b13f-c8e0a14e42bf", "indicator--1b71b82e-947b-4bab-b347-78386a74053a", "indicator--f658e3a2-ebf5-4697-9f2e-99780a5e6501", "indicator--11974864-dfeb-4f0a-ac19-ca36b1d70fe6", "indicator--9f2639ef-5f6d-413a-a41c-67d65cd3b127", "indicator--455a25fb-e47c-420a-8413-7b048fcd5516", "indicator--34a198a1-50c5-4fa9-a693-c2d38b6023f8", "indicator--6c93e48b-408b-4446-bd10-e8f46a8c9bb7", "indicator--fc686a2c-1221-467e-b025-efe9d05589c7", "indicator--97560031-bcb1-418a-933b-c1e6f6bc52bd", "indicator--658ad960-51e7-4b9b-b6f5-298c8741c931", "indicator--fc6c45b8-45a2-4d29-b111-5875980b84f1", "indicator--e277f854-34e8-4064-a07f-38d82894c3d3", "indicator--4bba219f-1781-4bd5-9feb-f0d9778d26d3", "indicator--7da6d0c5-9b6b-40f8-b13e-36e5aa8eea65", "indicator--b317ad98-0aa0-46f9-a8c7-10e060e5836a", "indicator--65cbed10-42b0-4c8e-ac05-b0c330baa198", "indicator--8b7861c5-2026-4a88-94d5-a7330939916f", "indicator--40aa8fb4-8b61-4e05-b204-c8521112556c", "indicator--ed17c0c3-a128-4cf1-89c9-33e6c0778f44", "indicator--85c6625e-2178-4a10-ac28-1c606a9310b5", "indicator--3c78659e-ab91-4a7a-90e2-c08e498e28f6", "indicator--9bbb3ab7-261e-4cb7-9489-1038aea38967", "indicator--613ff42d-cd46-4c2a-81bb-3eef6ba87818", "indicator--15527bda-2f3d-4e69-a5f1-adb1a050f3f4", "indicator--a6aa8b69-11e1-44b3-b142-e07ab34268ae", "indicator--306ea342-3edb-436c-9f9d-01b9403931b5", "indicator--357011eb-79d6-470c-a3c4-3a313ac100e2", "indicator--aa04a3ab-6b54-4ee1-98b6-ddf196663bd5", "indicator--7ba39ecb-5b8e-4c64-85f5-1e77796c240a", "indicator--30c4444e-f999-44a9-9af3-e0a8098d4ffb", "indicator--fabd0274-e5fe-4677-a945-b414fcb2fd10", "indicator--84d5c22a-e3e3-4269-b696-2d78635ce646", "indicator--e291c43e-39d3-40d4-a668-acbccbd576d7", "indicator--8ab2eabd-4f00-4add-9544-4ad4a4a7d924", "indicator--8a308591-a6f0-4960-93e9-76ad60fe3dc7", "indicator--d460369f-7d11-49a7-ac5e-7ec68ff7283a", "indicator--13bff298-b9d7-4ad8-8fd5-5227bb4d9288", "indicator--a8be75f1-b9b7-4368-b06c-fe1c64865a50", "indicator--8a62fdcf-22e8-47a8-91d7-2d10b6ed1be4", "indicator--211fbee1-adbb-4643-b75c-6275405f27f0", "indicator--d4f24bbb-80b0-4382-9a7f-1672399c5e4a", "indicator--d112b29f-b94d-4df9-9ba0-d38292a67358", "indicator--233a14e9-2646-4ea3-8ecb-3d34502c862d", "indicator--b58c7116-fafe-418c-9b16-209705a5ef07", "indicator--a038c6f4-255f-47a3-b8e0-e1683d5333e3", "indicator--4a3d369b-abad-4633-8802-bd1b59a93da5", "indicator--a529bd17-8945-4e0e-a653-c80c7ddbf0a7", "indicator--0ab8ae7d-3cf0-4434-8261-96784a1fc552", "indicator--a180987a-b1ba-4877-9ac8-bbf4551a81c6", "indicator--2ad6edd3-58ad-44cc-a7fb-c7f3fed667d1", "indicator--8aacedae-8bee-4ce1-b58d-529e62574dfc", "indicator--9bcb2b0a-dc55-40c0-b6ab-f97df558215a", "indicator--41d19aed-a9e8-44cf-b987-282b2d66f2d3", "indicator--8e202c81-949d-4b9e-9f2f-31fe2ef8ce54", "indicator--bebe61c3-b40c-4cd9-9f59-6aa0f133f63f", "indicator--7e8e4870-f620-4292-abf4-28489b916754", "indicator--4a0a7763-4fc8-4084-9ec1-de7476342131", "indicator--b76772f8-f15e-4a30-8bcd-d862eea94c37", "indicator--f9cc8a9f-ac8e-46f2-ae1c-1b8bbc6d61ac", "indicator--f9c73e38-e64a-459a-8207-f53111ab6e94", "indicator--045ecdb9-189f-4b8e-9e45-85367bf61113", "indicator--189126ad-399f-4f03-beb9-eefbf878d4be", "indicator--e8e0e1b8-0e27-4f9e-9d88-53b41ad251e4", "indicator--bf35fdaa-1390-4046-b247-fe92e060d812", "indicator--3cd98863-aaf1-486a-baa3-796e6554805b", "indicator--4962baa7-749c-4091-ab35-fa385ee8d102", "indicator--80f654a9-717b-4da2-8367-e40e2f153ad2", "indicator--704df5fa-b88b-47da-b4eb-5fb01cd0fe43", "indicator--16899180-9e5e-4cee-ab93-c7389eb37849", "indicator--244576ac-9976-427e-8175-bb766554316c", "indicator--dc9287c1-a3f1-42af-9781-49bfe964b15d", "indicator--04ea6ae6-21b6-4b45-b17f-f1863364c79c", "indicator--b80c953b-2e72-442e-be56-e5ff8dee9333", "indicator--065ec5bf-2d96-4c39-b701-fcb2e33ace8b", "indicator--5841591b-e676-4509-a808-ab16e662059c", "indicator--614b1969-76a1-4a9a-af6d-c14c6d228b14", "indicator--1b266502-bebc-49da-a1f0-bb42b13c040b", "indicator--8817dd6b-c801-4df1-a8d5-13a5d3056dd5", "indicator--d319169c-891c-47e4-bc95-48d54d45ca3e", "indicator--4cd76153-dd48-4ecf-8fda-63e17322699f", "indicator--202b5215-e319-4400-af61-c58b80960795", "indicator--0890347d-7ecd-492e-9aab-4bad67916c7a", "indicator--2edf895d-8e5e-4f49-9fe8-993f12f63595", "indicator--0f2ac46e-c51e-4f8a-bcaf-eda99931f547", "indicator--374d05b4-bcbd-44ca-89de-ed3ddcb3329d", "indicator--8511f2cb-3a1e-45eb-a6c8-463a3e75d808", "indicator--3364d6a8-e642-4092-9307-5a45a7e9de5d", "indicator--b8ef8628-eaf0-4df6-b22d-11ed0d16c35f", "indicator--5f1e5983-a249-4f6a-89a9-8ccb159b51f0", "indicator--505d89f9-6369-4447-b9da-968c1095fa34", "indicator--0ef5b9c5-e6dc-49c7-8ea4-5fbd0b3f4e64", "indicator--3829cee2-94d7-4480-8330-a2f79767cf48", "indicator--7e4e5398-8324-47e8-92da-e2098844736f", "indicator--0b0caceb-1984-4f9a-8dee-56e9d4ec009b", "indicator--0b2c3630-80de-4ff8-b3c0-e474c9f7b56b", "indicator--c36ce3b4-bbbe-43d8-b1e2-2410d1dadb73", "indicator--4f0fcde1-e686-432a-972d-d3364e661b10", "indicator--08ae5be9-ba86-4fa3-aefb-e5f801fe5a21", "indicator--4cc1ea54-b194-4ebd-89d0-e838e8569dd4", "indicator--58bc52e9-6f5a-4dc6-9918-cd53305e10e7", "indicator--83e6d517-3508-4432-a9f0-a4f392efa0f5", "indicator--cff7a358-4e27-49c8-b06e-a7db9f12e2d0", "indicator--8e0f30ab-73fe-4b95-8fcc-b6fdbeefb3fb", "indicator--a339a8fe-8a11-43db-8197-24af0814871e", "indicator--f7b50090-dd1d-48c2-8071-7bdef228ecc6", "indicator--d96c31aa-2b8f-4de0-ac5e-07fc2ee2806e", "indicator--1ff4d81a-5c32-4479-9f69-85d2ce8f9926", "indicator--079c6872-acfc-40af-a2ba-2f0be0356959", "indicator--92dd1b30-88d8-4d73-9253-90c0a2807d3b", "indicator--4fcbc88d-23c1-4642-8702-2f32a656876d", "indicator--2d646ac9-6398-4dc1-8c05-1505ba3b3d54", "indicator--01e2bea3-1911-47c6-b41f-5d6d54854fe4", "indicator--fe29fbea-2f51-469e-a397-bc93ebce0814", "indicator--d2cc511b-357c-4351-ae7f-d1eb5cfda2df", "indicator--8bb25f70-8e20-426f-978d-f13c2530fa3a", "indicator--6a4a691a-d251-44ee-8f57-aca1df699d1b", "indicator--be58e0c6-bba1-43e3-9773-11fbfd79e7fd", "indicator--0d0ffcf7-a3b1-4a4a-881d-513e178ee2ce", "indicator--c2e42e12-9f05-4a9d-a8fc-55c238746fb0", "indicator--a92e866b-694d-49ab-9fde-65b7db923251", "indicator--ac5800ed-2ed6-4edc-acdd-87374a07ff66", "indicator--2cbc0fc1-9d10-4167-b653-74cb5e53ec93", "indicator--39a0a7ab-1dcc-46c0-a389-c62627ca44ae", "indicator--774b086c-0b0e-4439-bc1f-13ad9b20dfb4", "indicator--7da6b985-ff8e-4cee-8534-d0b7f258c40c", "indicator--4243e20d-9ff9-413b-bf91-b9549f772f17", "indicator--c7211482-7bdf-4226-adde-5c19e1952edf", "indicator--cd2241fc-fe52-45ca-bdce-bec082210e03", "indicator--e6ada425-d400-4bf0-bf2a-ab119210dc08", "indicator--6c34f89f-e48f-439f-bde4-b233b4cefc5f", "indicator--c5b3c412-bdb3-4686-a838-a89e65444ea5", "indicator--70f65dd6-e468-455b-bb5e-5b897cc6e534", "indicator--2a27f075-43d2-4bc5-be0b-8690a1effa47", "indicator--184a0f8d-438c-4ad6-8774-4575d0e36239", "indicator--1c6ad8b2-0d48-42ba-9d73-832525d1d5aa", "indicator--62f64ac0-9a1c-4e5c-a05b-de1e502e95e5", "indicator--68bb475e-251a-41b4-b503-d4abe161ec4a", "indicator--049987a6-2112-4e3a-b17a-d5755aac8933", "indicator--756366c9-72ee-4886-9385-65809724ac6a", "indicator--f0b5ce8c-f62c-4961-b12c-3f275ebde18b", "indicator--af5f512c-a0de-435b-a6e0-038fe0511162", "indicator--4e0d7847-c76e-4bf0-acac-15939e9cc1fc", "indicator--ac3c11e7-1812-4b73-af4d-54bdac7b32c6", "indicator--88bd3495-e739-4df1-a35e-d0cd49eefe4a", "indicator--7e3c618e-8bb9-4a67-a9a0-851b28b384fd", "indicator--508cd30d-c045-4443-bffd-a752238eae4b", "indicator--241df064-95e1-44e8-aafd-5a859978155c", "indicator--fcf07b32-5570-4b3f-a594-0316f1ab38b0", "indicator--32858619-cf85-4ee6-9a7d-0d57cd426df1", "indicator--1e0506d1-95ec-4109-be49-da884b0c61fd", "indicator--b5afa7c7-93b3-40e0-870d-05f7052c0f83", "indicator--f91f07f0-311e-44db-b36c-d93513370c8e", "indicator--03cfce4f-a008-44c4-98e3-a6e7d26dae91", "indicator--4f125f0b-7880-4dd5-8640-e0e83ae1f452", "indicator--f249d9fe-6ccc-4993-b166-387f1ab14a2d", "indicator--726b000e-d517-430e-96b6-c2ff7632d714", "indicator--9cfd4ae4-977b-4af8-8728-dec3a6f9a1f2", "indicator--a5997465-ea01-4a87-ae2b-885eecf16649", "indicator--aa0185af-a20d-40f7-b8b9-9dcb9cd42d54", "indicator--e54ccd6b-a6dd-4650-8ce8-8722a8e5ecd7", "indicator--52a08a52-884e-4e9d-810e-136deeff2598", "indicator--cf5a1bb9-569c-43ff-ba6b-108a6e813229", "indicator--6c2e5448-59ce-4089-a32c-c061aaf2c414", "indicator--cc236925-55f7-44ff-8fe8-adb8d29b416a", "indicator--1939af4d-635c-4b22-a663-d98955857244", "indicator--5c01a893-f873-4913-8292-12d41b554888", "indicator--032c94d9-94fc-481b-8493-c448294676d5", "indicator--6f243eba-3dbf-45ef-80ce-8836fd94ec62", "indicator--45d5d2a9-57fe-4271-a0f8-047912b057c6", "indicator--9df02819-da51-4b42-814a-1511cb24fa2c", "indicator--e51db585-4a26-4673-b237-ab56596daa3a", "indicator--fdc9b28f-3fff-40b1-9548-c3adc2da8029", "indicator--2a96200f-04b6-4257-bdf3-dadb7433862d", "indicator--b4a7340e-b5aa-4c2e-81d1-cce0b8538076", "indicator--e60e7a53-1f1e-47c8-aa3c-b3805a2cbae4", "indicator--f933279a-505b-458d-9611-c7f8ae50d198", "indicator--00b7a14d-8a50-4001-ac16-af0223266dc0", "indicator--4c2dacf1-94b0-4acf-bc46-e7c7a32c3dc7", "indicator--6a03bdc5-2a8d-4839-b633-368fdca9a378", "indicator--3c04164c-312c-4fc6-a1d8-5dd65338800c", "indicator--050a57e3-2e5c-48ff-a0fc-519084d4f13f", "indicator--339d9c99-1e01-42d7-8f9c-3cec840e8c9a", "indicator--99617fbc-f406-4c63-bc32-53c4a1b7d2f4", "indicator--91f638d0-a8ab-400f-ba1c-e23ffad3e204", "indicator--f2ac94d4-061c-4bdf-8f44-3060d677550e", "indicator--556d506b-7843-44c8-b44f-b3c85dd06f40", "indicator--e9c504cc-a79f-4e76-a162-5ac7d0d07268", "indicator--9afa93e5-842e-457b-a39a-d2e33bfc9eec", "indicator--521cdeaf-0c3f-41cc-9382-bad3a8fb38b6", "indicator--e0e94fb3-b6fc-4b61-80fd-7de41fa413e2", "indicator--659f12d8-7b9d-4d7f-ab2b-a48e52557006", "indicator--63d11014-82ef-421d-b790-1fd36323e11f", "indicator--2f3ee403-bc44-416c-8d97-b533d9694c47", "indicator--a4bee672-f3d7-4878-b4c1-f925cf99cae4", "indicator--11372505-1a23-459a-9ed6-5d4b3f85c39c", "indicator--5214e4e6-4e31-442b-83f3-6e45d2be34dd", "indicator--bfabb8a1-39d5-4320-9fd4-37b7b5dac6eb", "indicator--ac22f0e9-c76f-4b2b-868a-5dcd2ee0d805", "indicator--c059fcc7-5819-4365-9629-9ac22bc784e6", "indicator--7395578d-0bbf-4eec-94a8-8ec804317d2b", "indicator--82eba9c1-c2d4-4396-b217-cf8fdfd1c8b5", "indicator--d0cd6df9-1a6e-4dda-a3bf-94760dd38d39", "indicator--419daa43-dab4-4efd-97b8-efe77093370d", "indicator--8e286026-fda4-47d3-b445-1b0ddf01bb8b", "indicator--f51f0fa8-e2fb-47c6-9631-cb962d17860a", "indicator--9b12a527-e0b9-4299-9489-d09357e73939", "indicator--40f80b18-e2c4-4565-a1ed-12741f2b3a74", "indicator--1a5e5a53-4f60-4882-80ec-88807a151449", "indicator--06a5600b-45fa-4885-8ac4-f8310b23c245", "indicator--ab666223-c35f-4276-9593-8548b69e5c4e", "indicator--406df173-d353-4b04-90e4-9977e2d6daf1", "indicator--52ac3e51-7a86-4073-a5cc-06aba8ac7858", "indicator--7840da7c-66bb-4c3b-b226-2fe1ea08505d", "indicator--adbd52cf-82d4-46b9-842b-d272125ed023", "indicator--21eddd09-7959-4d08-8769-754165bb7e8b", "indicator--3ba22ac3-c732-448d-b216-577edd6d7142", "indicator--f18ea134-c9cc-4e3f-84fb-86a3a4553714", "indicator--3c1747a7-c108-4942-bab5-634de10605ad", "indicator--61a3a0aa-9db3-4967-8625-a86af682bc84", "indicator--3af143d9-f656-47df-b2e3-126cec17f1b7", "indicator--84363fc8-cbe9-4b7c-a821-402fc7de49b1", "indicator--941b3a40-c32b-4b52-8cdb-c45b1f457566", "indicator--bc7d76ec-6aff-4c9c-a4b7-b7b64eb435a7", "indicator--73daa501-8bdc-4f0e-952c-5907680b4578", "indicator--29f09787-3782-4e00-8a31-e6efbaee0064", "indicator--9329bc4e-8330-4fc5-852c-59d8e6ceccc1", "indicator--1db22765-55df-453e-ac28-c56ca5c43b5f", "indicator--dcde7f99-d77f-41cf-a1d9-72664474d059", "indicator--6e584a29-439d-4cbe-80cc-1cbe6cdc6c5e", "indicator--245f7565-a957-4361-92a8-90aff6ef29fe", "indicator--d43c2eca-2d8f-4977-a21b-4a13d65faf9c", "indicator--40318002-630f-4258-a1df-3387663f2328", "indicator--1d71ce4b-965f-44e4-8982-b81b0203b523", "indicator--9f880f31-0f73-421b-be8d-2220a517f684", "indicator--d2803e09-8e1c-4e3f-9588-44275df14e61", "indicator--04db9670-fe50-4f31-96d1-09cf0ff12bc1", "indicator--357d2455-3c19-4347-a398-c5d69db72b7e", "indicator--e9b27552-522b-4ae2-8138-d4c747e86b56", "indicator--9777acb0-71ce-470e-a664-27df04b0c0a2", "indicator--55e408a3-064f-4fc5-89ae-e3f5759b1046", "indicator--2f0b1874-e67e-47f1-b7e0-96619a9bd80d", "indicator--d66dc4e0-794c-4e0f-86b0-cc494bf4b92c", "indicator--7567a4e3-2a8b-44d6-8509-df4a73410b68", "indicator--1ee77d90-ad2a-410f-a732-8f8b09692720", "indicator--299b4822-3470-4f15-9d1c-cf6e468defa4", "indicator--2b92c448-7d23-41dc-af65-7d0448598d7b", "indicator--813729bc-a00a-45b3-a1c6-0179f6142cbc", "indicator--bd380f43-325c-44b7-be12-ae88e8d08e42", "indicator--fada1b57-be07-47da-b82f-3f41abf839ee", "indicator--e38c20cd-3887-4943-9d85-b4f85314c222", "indicator--e937ee69-2885-41ed-a9d0-6c7ee04e73e1", "indicator--19d2fa8f-2bc0-44ad-b5cb-81816e861cb8", "indicator--0966d5c6-58f1-45a2-8ed8-ebdd47a7505a", "indicator--ccaa62c9-72c7-4004-8472-a6dedfb68fd3", "indicator--df467f84-50a6-493c-b466-8150dfd9778e", "indicator--b262b266-c030-460b-bb0d-a1acb06810d1", "indicator--75dd6e52-38c9-474b-bd26-715f973aa902", "relationship--07a1694b-b07b-4c31-bdd3-2cb3502a202a", "indicator--50b8ad44-4115-4f95-a656-f8603d4f2dae", "indicator--c9d1d2a2-5ec3-41c7-9caf-8f441828e7c8", "indicator--81e4f317-c5d9-42d8-a98a-d0740960476e", "indicator--87042da8-afe1-4b33-99a2-7ae111a9d86c", "indicator--74c7349a-1332-4cc4-a4fa-bf11d688919f", "indicator--8e74ee26-d319-435c-9b30-25bf3af59378", "indicator--8b760dfc-4c92-4e5e-a31b-14bad13ad8d3", "indicator--17f5252e-23c0-4613-8cdd-ca10db4bd4ab", "indicator--d4383462-f803-44aa-98b6-2cec84ae62fa", "indicator--d3e5faaf-d079-4147-bb2f-318aec19a283", "indicator--32aacaeb-9ba1-4f40-b181-c3b6203dc544", "indicator--5f6a29d8-a71e-4f67-a37a-5c82cfd5da31", "indicator--65281fc1-8957-4f84-8f3f-c955fe98de86", "indicator--6393e2f4-980e-45f1-b238-74f5f31f8299", "indicator--3945b67a-20af-40da-b7a2-11c337e41c6b", "indicator--0b37a2c7-d0cd-45bf-a3cd-eaeb85634aac", "indicator--702db246-2fde-4671-a4e2-7f300e9f605e", "indicator--3754e413-dd80-4c5b-9347-e8ee11ca8e33", "indicator--6f47b29d-e487-480b-8540-d8c3cc459114", "indicator--a2217993-1dcd-43d3-839f-b46dfa9265d3", "indicator--f31da699-0d6e-46a0-980d-6aef7fcad60c", "indicator--54ccf55c-8a5c-4163-b29a-421d01762964", "indicator--04812bf9-bb03-4a43-b60c-6bcf1141a355", "indicator--822c8c86-e194-47d6-aed3-701976db4053", "indicator--da5828fc-08f4-4957-a015-34d9c8a07398", "indicator--80383755-0981-46f7-a88b-e17083ec2284", "indicator--d52e6571-9324-4e86-97fc-d41a214ea3a1", "indicator--b105af1b-0c7b-4b3a-b299-02909e98fd85", "indicator--d0fee9d3-407a-4584-b72a-4a3de5b07564", "indicator--c13abe30-a5f6-44c1-952f-73e7f34fdd4a", "indicator--919dbaca-7733-4625-ad4b-043465b14f54", "indicator--644c98bc-afd9-4070-a7e1-d2e78a1670f8", "indicator--cccd81fc-15ff-48fd-9ba0-981e7ae36c4b", "indicator--4b66233a-0fba-4699-bd43-190f496bd64d", "indicator--71404c79-d695-4bbc-bed9-2f330c885fe7", "indicator--c53eed08-5f7c-4a57-a038-3a658b7d84a7", "indicator--00da8e3c-07e7-4ead-889d-31f792c3f569", "indicator--e7e4b09a-f1a4-48df-bfc9-45a4af579e81", "indicator--3acaf8a5-e0ac-4c8f-9143-a03fb3d6b0d3", "indicator--62b4d6d1-576e-4e5a-b86a-d708c5432d47", "indicator--7e66dd43-4aeb-4021-aabb-8783d194a803", "indicator--04550948-8965-4ed2-b031-8f074b102413", "indicator--34a375d0-1d8e-4b8b-a851-8d2891b93d1a", "indicator--fa142b40-31f0-4b47-9b81-a36058d4aaa6", "indicator--5d303d90-0156-4e65-8d6a-6a1f89e03532", "indicator--dbfb1d77-61b4-4159-8722-f21980013ece", "indicator--585547df-b4a5-4606-8b94-80a0d1ee0e44", "indicator--62ad4f48-210f-4114-a69c-c81f24882675", "indicator--9d9a6dab-73b9-409e-bc04-322ecf86ed5f", "indicator--8cac56d3-f573-4b02-a085-03a9ec7f6e7e", "indicator--3340760f-e87f-4d52-9541-85d6b16aaa1b", "indicator--202b32c0-5bdc-443b-aaf8-b5bb5b61d544", "indicator--a37adacd-31c9-4036-ad01-35a36f03fca5", "indicator--ad6c856e-7a3b-4cde-a6df-fba622267831", "indicator--0366ca19-0396-46e4-89a8-9dd38a509b48", "indicator--494ecaf4-175a-458c-8d94-53517bc86861", "indicator--a6b36981-4f7c-43dc-944f-ac58eec51f89", "indicator--513f30d4-a7d0-4caf-8515-c649d23e7322", "indicator--14b70830-0687-4a09-a577-55004f380171", "indicator--1067cfec-dd11-41a2-bbb9-ebe5b4084ecb", "indicator--49d330d8-0669-444c-a117-d29412598bbd", "indicator--24ecd80f-9c8d-44d1-8fa0-2e37f8110500", "indicator--afbd32a1-ce98-49cd-9655-99f2310a6747", "indicator--09e2e097-ed3e-4ba1-b462-a8271b98177b", "indicator--ef4984f9-001e-432c-9593-a8c9eb261af1", "indicator--470f014d-e215-4772-a956-8cfcbcd513f2", "indicator--c8281676-4e0d-4da7-8b60-e823a09509a2", "indicator--d6f807a0-1e87-428d-9ca0-ede61fee97e3", "indicator--6fcdc639-14ac-4341-93b9-caba8742eb45", "indicator--43d1aa9b-fcb5-4f9e-8153-c9c3bcdb1af8", "indicator--ca84fccd-f7bf-4c41-bb24-80119d0ef6db", "indicator--4f9deb9a-4ad2-4047-8f9c-2144a9d95da3", "indicator--2fb63db3-6105-4f94-aca6-f27dbd9a3380", "indicator--50914cb3-7faa-4c82-938f-c6e35de11bf1", "indicator--f38f8fa1-30a3-428d-a1e5-739e3af31fbd", "indicator--f0840a1b-afc4-4c60-b231-bc9c96f863d9", "indicator--5413c849-3a9f-48f5-9eac-4bed592e19be", "indicator--a2ef6ae1-9b49-49bd-b661-80bd648226b6", "indicator--1d80342e-d823-4c75-9d67-28990fcb3057", "indicator--a8ba7a37-23ed-43f3-b9aa-a687d6ff5767", "indicator--5cda0bba-306a-4b67-80d0-03b09793c4e4", "indicator--725fd8cd-a2bc-4a4a-8d92-b6a9dcd96509", "indicator--112b9e04-9f30-441d-8bc1-5c3fae09af19", "indicator--6c10f25c-71d5-4392-a05a-13ea4cf61e7f", "indicator--6559f13a-617e-4af2-91f3-42d20f5304d0", "indicator--20515c37-bb74-413f-8d3e-08756e3cfe4a", "indicator--5c5b7950-66e2-4246-b0cb-1092c05ed69c", "indicator--a001d885-5030-4cf2-b38e-54e619ca7581", "indicator--7046a577-f3c5-499d-8d8e-9fb26b2eb38c", "indicator--8e2317b5-f38a-41c9-9396-2922bf3be758", "indicator--26d8fa8f-b79e-4223-8db9-2782e901ccad", "indicator--4a099263-c330-47d1-bb56-2511bef83ecc", "indicator--a73c38e6-6d2b-4986-897e-03011328d717", "indicator--0e46aaba-05bb-49e3-87b9-7d0bba8c55aa", "indicator--2735ac00-944d-40a9-a1fd-264160b2a3a8", "indicator--60214860-7691-4e91-b603-47982350064f", "indicator--bfd7b8f7-47ab-41d5-94ca-44d62dbc4fe2", "indicator--08e5f866-9d4a-458f-8b9d-c4da139f489a", "indicator--a16afbd2-9a61-483f-8f94-b1e663a766ab", "indicator--6361a56c-dd81-45b3-becb-338b7589c71a", "indicator--20c8dab6-3641-40f2-9366-140a7669f594", "indicator--c43d96ec-988a-4434-8a3d-193df1ceef2b", "indicator--a13c65b2-2eb9-4aca-847a-1c66a5b05ef0", "indicator--75eee39e-2330-49dc-81ad-de74c229d551", "indicator--ae02cbbc-de07-43e4-b954-cdc7fa766121", "indicator--486f4110-5c2e-4267-aa72-2f60d9098511", "indicator--4301c6e4-b231-448d-8c84-e6530f36784d", "indicator--467e5b09-f580-4eb2-9b10-6b98ca391b33", "indicator--f99b847b-8a38-424c-9979-cb8c23fc9e39", "indicator--03d2eb31-4c78-45bc-87de-615029cfbfe7", "indicator--fdc89fff-eb4c-4822-a2a7-8caea5fd5eba", "indicator--cd10dd92-f258-4272-92e3-e476cfee2296", "indicator--ec9b97ab-4887-4ecf-909d-a8014ccb82ba", "indicator--e00b7c55-406a-4b49-985c-b632cc03b91a", "indicator--6ff796bb-afc0-4486-9b9d-c8f87d5b5cdb", "indicator--857d5931-59af-4a44-9df4-2c0e7159ec5d", "indicator--0c288027-5049-4731-a2ee-1d935bb4c812", "indicator--19bc857d-4790-4146-adb0-16108e91593e", "indicator--468e77c4-1e33-4b71-95c0-95da0a8c0af3", "indicator--1af1238c-3d70-4ade-a894-35c08b576c23", "indicator--7afc76d3-8ea9-429f-b694-a9cb6c3dfe7a", "indicator--146acd15-89aa-45a1-b0c5-f19e73c862fc", "indicator--f48149ae-2de4-4f04-9cf4-50fe0daa7966", "indicator--4e41da31-b97b-449d-9d6e-4141437f424c", "indicator--03a99001-43b3-4fe6-94d8-ee8e5bf10ac7", "indicator--b2c2e742-8340-425c-9a04-69e794936c38", "indicator--257bf0ba-8bd1-4d69-b3ef-fc4217ac7ffc", "indicator--bd5e6965-2eae-4b16-8864-4852766e7eef", "indicator--4056dc9f-4e24-4912-986a-26701be52bf1", "indicator--9783c903-36ee-4c44-8ac1-d74f72334501", "indicator--4424e173-f6fd-49fa-888f-20cb205cd2fb", "indicator--02262ece-5d39-472c-b00b-f96b46be1228", "indicator--7d7e236c-4691-427a-b710-b3ea5da5ba82", "indicator--8f2f31a8-179f-4678-88bb-f2b7319521fa", "indicator--b04e8fee-8d85-417d-a895-b897b5b1629c", "indicator--3510cc09-0f80-482f-881f-1bb5f7bc8afb", "indicator--2b921446-c4fd-4a35-922c-67ccd4cab1c7", "indicator--76c8b704-7889-4305-bfc5-9b7f285a3c82", "indicator--b35a16c9-0f6f-433c-a468-aa34c1fbdb60", "indicator--a2ad04d3-cc3e-46e1-b27d-70ae7de64509", "indicator--8294c289-c1d8-49ab-827b-22c570dc1375", "indicator--e6b790ab-415d-43ce-933f-764ebff477f5", "indicator--4d3ee006-35e6-494a-ad81-8bc44c158a61", "indicator--609ec9c7-92e8-41c4-83bb-ebb3cd3d2ce1", "indicator--fe9d0794-d27a-4779-ac90-eab3e5c52ad9", "indicator--07364e6d-3cbe-4ea6-af91-6a51accc1d42", "indicator--845c4836-4dda-48a8-a36f-21e9ba26ebb6", "indicator--b07b92da-372e-43c2-b646-858e78e4cb03", "indicator--c17b4536-7a44-4eb3-9e00-4d5614197fdc", "indicator--8c95f8e9-b09b-4e6d-83c3-0c28e6be4170", "indicator--a3722d0b-0590-4dbc-b8be-9f8143220017", "indicator--03c9bb02-8339-4951-bc3d-988833ff0fee", "indicator--28884e16-e097-4b49-9ef9-972295fae1ac", "indicator--d7be5ace-704e-4017-bc04-6be3f8f48db9", "indicator--8e099dd5-e5dc-43ac-a2af-03bd6c4d9681", "indicator--232d4114-4706-4f5f-9398-ba9e172edb75", "indicator--e288ba6a-e697-4b73-baf8-0cc3beced35e", "indicator--c9089103-6ee6-4612-a906-aeb42dd06d04", "indicator--0da77186-ea50-44b7-84b7-f1e1b4ff7fd9", "indicator--08f8506e-6226-4302-8989-5b49934a8aa3", "indicator--b05d7213-63b4-42c4-8d8f-538f6d8e14d6", "indicator--be3e5d56-35a5-46d6-83ff-8b11efb3b533", "indicator--566ecc4b-3dce-4e98-a255-c6abea16ae14", "indicator--97b3e8fd-e364-4aa2-821f-10ce809a6a47", "indicator--3ec24efe-29f2-4f93-9cac-22daa6b27deb", "indicator--09606946-4def-4c63-98b5-c065fa80df43", "indicator--2689a3ef-902e-471c-92bc-b5954887930c", "indicator--b79ca117-53b7-42ae-8f9c-41ad0b5034a6", "indicator--33e8c0a4-2d14-433c-926d-acbfb4749566", "indicator--27e25b76-df3a-4ace-8de3-6b0285b40d62", "indicator--862a4e68-96e5-474d-9757-2f3754b35d03", "indicator--2620b675-75df-4c98-a301-d2666c8a2d31", "indicator--cad146e0-c842-422e-8929-b7d2c125d611", "indicator--3285fbb2-3a87-4c93-8670-e2d3bbacc79d", "indicator--4238c410-92b4-4ff0-afb4-7042eb8d239d", "indicator--cc9dc58b-220d-4bba-84ea-14671594f07a", "indicator--aee1c29f-89f2-4a2a-852b-c8c2377c3478", "indicator--5ce66e31-94d5-49fe-943c-dcd4d84c8d04", "indicator--63f0f5a4-a8ad-448f-8297-42ce0b6ebd7f", "indicator--8bf5e762-71dd-42e0-9907-740f4aff5979", "indicator--49765ee6-ec44-4758-9fe4-52244aeb4274", "indicator--ae97eeb4-447a-46c4-8cb3-7762b88e83cf", "indicator--85c8e4dd-8879-4e33-839d-2cc415e14536", "indicator--8bf63da1-7e47-4f3a-92ee-a6afea97354a", "indicator--c046b759-23ba-446e-8a8e-c89701fd719d", "indicator--fac541d0-c59d-4b52-8ffc-3243ed84bf3b", "indicator--8db9d700-b1a3-4593-b095-272ba5d6f5e9", "indicator--0fdbcf02-2a56-4063-95ff-4d8cd14ab44c", "indicator--77410d55-143f-49c7-b42e-40c843a65bab", "indicator--641923ac-e7ac-4935-8cca-99c5e84325b5", "indicator--d56d394c-23c6-483d-a423-c4864cdee6bf", "indicator--c5808a34-6310-4346-94d2-33e5a0dca6b0", "indicator--e3600977-52f0-4cba-ad2e-726d084fa452", "indicator--915df3ea-98fb-48c6-a150-a18fced57b4c", "indicator--257aa6dc-c7d4-4494-8040-35436b0c2a15", "indicator--9e959da8-8946-46eb-be75-5e0119eab6be", "indicator--766cb58f-7d98-4c95-8379-c313ef4337d7", "indicator--6d4f2d00-bddf-444e-85cb-2af2a1ece610", "indicator--b8020ecb-b244-4c93-9318-7c5fc632b387", "indicator--42b253cc-2823-400b-a6b4-f4f45b39da4c", "indicator--5c38c71f-28f6-4dd3-889c-34ddac38bdb2", "indicator--2df8f54c-341e-44e9-b8cf-1c48f5a6ede7", "indicator--e734f3e8-d3cf-43d8-b67e-b183f9e14171", "indicator--1e4d8dbf-33a2-4a47-a91b-b2291b45bbfd", "indicator--82beb0eb-6f39-4ad7-98d5-2ed402961721", "indicator--7760bb90-fbbf-4f22-8a8d-52592a8e4617", "indicator--dbd20c55-158a-4eda-a80b-8e54ac5beeb5", "indicator--2ea3a6c9-3ff1-495b-9cde-506f2600c68d", "indicator--301b5bde-a322-489d-aad1-08595469affd", "indicator--fa7b59c7-4d1e-406c-98a8-04ef2193e236", "indicator--1819af10-11bd-4310-8fc6-6867afd8db68", "indicator--dfbe4f84-cef2-450d-8da1-8a418b73d1f4", "indicator--afbbafb4-39d6-461a-a937-d21b973167e1", "indicator--e3d7d396-e248-45c6-9db7-0a8b5f5e2b4b", "indicator--5fd26c21-98b4-4f30-9ae3-2bf9790f67b0", "indicator--8d2b4b4e-e6c9-4161-a53f-f28b953d851e", "indicator--2c3ada1e-8130-4fbf-929b-e61a57ba6814", "indicator--2361ecee-fd0b-48a3-a88d-24ded485d934", "indicator--8ac30786-f716-4654-aac1-293552a8b616", "indicator--732c88cb-7208-4ef4-a658-056a59ea1790", "indicator--1cf4eefb-ac89-4b85-b8a9-7ab14d48c70f", "indicator--7ccd91dc-6c1b-43c0-9a60-4840e3566295", "indicator--62532721-20b5-4743-a27a-a63d978f79a7", "indicator--c69950f7-14cc-4ea0-ad90-a482fe843a5f", "indicator--03427839-0349-4e5b-92b8-266c3e7f313f", "indicator--b46afa9c-bde7-4ef7-b769-d14634854b0a", "indicator--5b009d28-0704-444d-b3b0-9174dd028267", "indicator--be50602b-03df-4803-9e0a-c183d3a8dc23", "indicator--06a4858f-daa9-4cd0-b104-3154b80633ab", "indicator--1cd3d597-a7c8-4c2f-929a-633cee1f2e12", "indicator--0b08c93f-0ac3-40e0-bb5b-3280d51281e3", "indicator--ec873861-e2d7-407d-abca-966a283761f5", "indicator--0d490363-f816-4e8f-89f0-2b0f6a6a09fa", "indicator--a76371f8-2e4d-42fb-96d5-e0589431b6d6", "indicator--1c1e379b-be6c-43f1-9d57-a663234c6e82", "indicator--331f3c28-b9af-449b-b18a-1922a3ba54ea", "indicator--86550229-4258-475c-bf02-9d79cc06f5aa", "indicator--b6eae5f6-1934-47e9-93e7-5eeef7c56d68", "indicator--d874eba4-6ee0-478e-9802-659a8cacdc82", "indicator--e4af017e-898e-4cc6-a6fa-c79d20d7773d", "indicator--348a0549-6d29-4e75-b70d-0b6cb8dd90c3", "indicator--48761b90-3602-441c-b176-12f41c9bbace", "indicator--e4ab8b75-b07f-4761-a685-a3d7357794ed", "indicator--45d7bd2a-d58a-48c7-bd32-3eea5d8ff306", "indicator--b254d7e2-c46a-4a46-bd46-ee83151b0188", "indicator--2cca90ac-f625-4eab-b8cd-29a128ae5a9b", "indicator--5c6eee07-a146-4840-852e-e23620798aec", "indicator--4eaedb35-b348-451e-8239-01cb51762686", "indicator--923ce99a-d147-4d3e-b27c-23a50f311545", "indicator--96f0f184-04e5-415c-bf75-282f950ab000", "indicator--8f009222-f2da-40a0-929e-eaa0b0467447", "indicator--dc377382-231d-4c7d-8a8e-4d07412732c7", "indicator--9df4ef31-a9b6-48cd-aab6-6e85b087ea6a", "indicator--17cd26cf-a9bd-4c88-99e9-784c37a64d84", "indicator--59cafa14-d3cf-4e11-abd9-fa1505c0adf6", "indicator--f4c76f38-a398-437a-9749-32a033ef5f13", "indicator--a5d0b50d-93e9-433d-a4d2-86adc4cbdc45", "indicator--0436ad9a-281f-480a-8d96-37fef2bf1257", "indicator--d44ebf97-7e45-4460-a638-2d9a95d21494", "indicator--be26f654-3931-40b9-9b53-b71179ec8421", "indicator--5d6df28f-6c7a-4327-8491-87fe1b2a2ca2", "indicator--204faaad-6a51-415b-970f-2ce086ee5b4d", "indicator--d65b6d57-0add-4575-b7e2-a070800a3d4e", "indicator--ef1a7637-9655-40e0-a519-24e9d1f8183c", "indicator--1789636b-595f-4923-97f8-cb057ab6bd67", "indicator--ed8c48fe-0b5a-4664-886d-ac3eee5ac622", "indicator--e66d9b7c-1147-4123-acd1-adbafc87faaa", "indicator--01184a4e-b555-4d84-aedd-2dced2e8c7ac", "indicator--d4196839-3321-46fd-8ef3-4a1230666040", "indicator--4637d7c2-d516-4d75-b094-5ccf5c992ed0", "indicator--8171ac4b-1b72-4121-aa04-bd4dae29c39b", "indicator--28282223-d5ae-42c4-b2f4-8b063719ed26", "indicator--adaf91e9-6527-47f6-a531-1dda241e84f5", "indicator--d64b7195-2ea6-43bf-9d15-93adac621273", "indicator--37384d44-5e03-4064-8f0c-6708024cb7b8", "indicator--8fc5abbd-616a-4c98-958f-925a5ea9d87a", "indicator--6879d332-b890-4847-9f4b-87ad6bdf0ff5", "indicator--7dc780ca-2863-4074-b977-0909f7f386bd", "indicator--8a3fd475-dff9-4d91-ac9a-0f42c5579c42", "indicator--118f998a-02da-43ae-92dd-73565f084bfd", "indicator--6ae07856-0b84-4ab5-bd63-852a2e44a87f", "indicator--967d156a-69ac-43e3-85d5-79d94fb5827c", "indicator--8519e095-7ef9-44fa-b8ec-899e4f20e8eb", "indicator--b56d4887-27c8-46c2-9e58-fe150ea5ea40", "indicator--ad7713c6-8bc3-4e8a-b6e5-e2d99679f96e", "indicator--c5502528-d5e5-434e-9b01-ed3e7c01728c", "indicator--f2ca5732-37e3-4d97-8d6f-ac9f5e2633de", "indicator--6ea9ba2f-24ed-4447-bba0-ce6fe28e702b", "indicator--5c985368-21ab-4f0f-9b56-56a93d12a25e", "indicator--bb835b61-543f-4b7a-8c0a-ffc943dfb8f2", "indicator--4143b787-d685-472f-a6e5-990b7dfd6c4f", "indicator--d448bbb5-6aba-44f5-9dbc-24dd8b022410", "indicator--dde2c164-c2be-41b3-9448-30706af9bbc2", "indicator--e730a8c1-9d10-46d7-bb35-d8796030bd0d", "indicator--0f4b0ebd-0b76-4a03-b193-c62c24e2202a", "indicator--92823c84-1a7b-4c13-ae1f-7751e7368453", "indicator--a1acb17d-2e15-490d-b26d-c925e9617538", "indicator--9e9644bf-6daf-4be8-819e-422ba46f45d6", "indicator--7d0dd3f3-8dd4-4dd6-984f-83c286ff2a9c", "indicator--2c2b2681-8462-48c3-97ed-2bc3f7f276d2", "indicator--6abc5a3f-9367-427c-9621-7e0235e25cf8", "indicator--016c2839-6e71-4cef-9bdb-9d0bdcfffc6b", "indicator--3572b860-be37-4ebf-a686-167de2287b81", "indicator--d94b4f45-ab25-435e-a999-c595eb676356", "indicator--48f2fa30-80a3-47e1-bb93-4a1f68463d5f", "indicator--dcb688e5-c22f-4dd4-99a4-17f3ac2a414f", "indicator--602f6491-c757-4766-b104-9c10b84cc6fc", "indicator--8d66a80f-94be-4cfc-88e2-b048ba694a53", "indicator--349b00d1-81ee-4c60-be34-f6d55ad32de8", "indicator--e7ff8b2e-492f-4e98-8e3d-e144191d8dec", "indicator--2f6847ea-101d-4ca6-b871-963c4f44f41e", "indicator--b0bd31f6-b42a-4d58-9976-67ae90ac4c47", "indicator--0f3e2e8c-acc3-4dce-9fe4-05cfae47bdad", "indicator--a91efe8f-e859-4fcd-90cf-f8b74a4d86f6", "indicator--dae5d481-fbdb-41d4-8294-b13afd3e18ec", "indicator--db02a0c1-6922-40c1-b6f5-2606745e5f60", "indicator--69808de6-8895-4bd3-b8e8-2712968c9b97", "indicator--0ef67667-a535-45d7-b306-6d908f6fa1fe", "indicator--741225b7-e528-4d15-b4c3-5fb352b60dd7", "indicator--947783d4-7926-484a-9624-58c5d109dc9e", "indicator--0f5da7a8-06ee-4964-a742-3bcdccccd6c7", "indicator--81b3fbec-8552-4f18-82da-400ee44fd15e", "indicator--1f5e761f-f636-477e-b75b-24342c4df6a4", "indicator--7f901ecc-454c-4869-a20c-7644deab1b23", "indicator--53b32499-6474-418a-ab15-e229c29f60fd", "indicator--acfb406c-d832-4dbc-955b-4b9f54c74ef1", "indicator--ea7c6541-58f2-4816-a415-c8382927ae2a", "indicator--1b6d1b93-182d-47be-b278-9181e8a5a418", "indicator--a6ba97ce-0e09-411d-9005-1b4e6e5c6d92", "indicator--ed22aa7d-31da-4859-a023-f7fa38346439", "indicator--4aaed409-4024-4147-a922-427ec3bea8f2", "indicator--a95579ac-0620-449f-8114-d445f8934584", "indicator--7e75bb63-3586-43af-828d-21a0e087b06b", "indicator--b3e33681-60b1-4b6e-966f-30900e30981b", "indicator--35413995-64d4-4b7e-aaa9-69e47c54a7c8", "indicator--8a625cc2-1d7e-4089-901d-afd0163e9e04", "indicator--4637c282-4fab-491d-b95d-6c804c2a2c0d", "indicator--57d997cb-86bd-4b1b-b634-f11d67e0f95f", "indicator--dec3fa88-f103-461a-ad49-f08114002b18", "indicator--73e1965a-4562-4051-b18e-bdc2623ae7cb", "indicator--2d5c0a14-36ae-42c1-9b01-c7ce6cd69be1", "indicator--56434590-c3ab-4157-8709-6e2d85da6904", "indicator--b09ae166-8d43-44ed-875f-535d3309fa8b", "indicator--bb2390f6-c521-4d74-9ca1-728d71a47de4", "indicator--3d3312c4-dc6b-4215-a46f-c460cf960199", "indicator--922fb066-adf5-4267-8ddd-26507f63ebe9", "indicator--c1300649-ca73-4d0f-aa94-e750ce4b5926", "indicator--0422bd09-e166-4261-be73-aaa009ba089e", "indicator--1da62bbb-0285-4c1b-a3cc-026c575dd0e7", "indicator--81800dfc-9eea-422c-b432-8109579a1ea0", "indicator--ee4e9a23-d708-4b19-b454-899832b38b23", "indicator--0ecac70a-e105-467c-b758-01c73fb78b10", "indicator--be32565c-9de2-4315-a560-9d4fb640cc5a", "indicator--aeac94d3-ba0f-419a-ac9d-6ebb1a26f56b", "indicator--f79b0f00-23ce-4e68-9aac-a2db5ac5aec0", "indicator--3ad5a0e0-c355-45dc-8858-b00793e79ee5", "indicator--cdf2043f-62c2-4f6e-92d8-1aa700e0e6bc", "indicator--3a8b73d6-8035-4143-8e01-d014a6c65697", "indicator--d1f63527-4753-431d-8b35-5121d4213bc9", "indicator--75958dc2-5349-42f4-b6ed-e5288839a363", "indicator--24ac7533-2797-42ff-a39a-a3e6fb14d7a5", "indicator--f493a1e5-f7ee-4e55-90e1-c333dfbc403c", "indicator--b3286684-798d-49ab-a04a-d894a67e82ff", "indicator--ca7d07ff-af2f-42d6-90db-b91a2416aa39", "indicator--580de9ef-a3cf-4456-ad6d-02ccbe07b904", "indicator--ec52bd4d-29e5-4832-ab8e-b8d1970bdde0", "indicator--0e6c4ec7-2a68-4a5d-983e-b83e33b86681", "indicator--a3ea312a-f2ba-4f68-8f22-087bf3dd6b34", "indicator--cd37e99b-df18-44ba-bb60-049a9a485120", "indicator--aa50b5f2-30c0-49ee-a6da-aa3fe203107b", "indicator--15c41d71-49df-4d1a-af8f-b861f12b8f9a", "indicator--55430398-d4bb-491f-88b5-3c63f4fdba26", "indicator--b9f24f47-5c48-44ca-8ba8-ed938bfdb538", "indicator--806c2f8f-afbb-4cba-a48e-8b103a05121f", "indicator--e13a3049-3b96-462e-8272-2c6a197fed07", "indicator--9d1fc710-f5eb-45a6-acce-24ec51a5b3ec", "indicator--1069a9e1-4c04-456e-b295-d0cf6bdf8892", "indicator--9f09872a-a2df-4c92-9cc0-e8389a2af667", "indicator--923583e0-8553-4043-86e7-712ec536868b", "indicator--a5ea860a-f00f-47bd-9a46-e689ef52fedf", "indicator--242ecfed-9249-42a5-8ef1-a901ba9fb808", "indicator--86620ba8-6f52-4731-aecc-01feb8e007ea", "indicator--81daf84b-eea4-4a71-b325-e263930360b6", "indicator--3d7f0314-f3c8-474f-a92d-2bc8575c5165", "indicator--0ec022dd-1cf3-43f9-8200-e625e9ec9114", "indicator--b4c1c3c9-c48d-4030-a0c3-a016d706935e", "indicator--7348de80-9026-443f-b7f5-91676c67f53f", "indicator--fe1b2f0c-11f5-4580-a69e-345850f9fa22", "indicator--095a5db5-fd0f-4cf2-8940-f270cf25bea7", "indicator--bb6a29fd-1646-45a7-973c-ee39c361a397", "indicator--f42b3c48-e427-4cc5-9018-729fa9989ffa", "indicator--0604ca1e-6748-4690-9834-40bd818eae80", "indicator--0e182b0a-6b55-4ba4-972b-47d11e359e10", "indicator--18b26d24-d7c1-4d73-a514-c09a23554519", "indicator--50cc8364-d9b3-49a9-8974-8ccea612bea3", "indicator--1959fc5c-79e1-475b-988d-471ffbdb485b", "indicator--aaef45f6-5870-4c95-a716-07018c89058b", "indicator--6b888dda-0065-4000-8dc7-703ddbfda014", "indicator--bcbb1971-bfb0-44a3-af4c-16b81443330c", "indicator--c6f9673a-70bb-41d2-ba6f-e084a63b4ce7", "indicator--548dc879-0c42-4d8c-84b2-c0d8c2e30fa9", "indicator--dadf9f04-1520-4a7d-9a6d-34de05bc681e", "indicator--04cdbb81-64df-44d8-a9ea-598afa5098ac", "indicator--29f8d2ec-50fa-4d2a-8588-44ca1b20cfd7", "indicator--230d0959-f445-4501-8795-a6b382c01d72", "indicator--cc66231e-fdb2-477b-9613-bc6e88f5f649", "indicator--a1020421-a158-4ecc-9000-be5da0fce0b0", "indicator--81b35ed2-4659-4222-a0ef-d52599f3fff2", "indicator--f2e9064e-6bb8-4e7f-b599-73255938fce5", "indicator--40bf74d7-8212-4037-9a05-bc429a520056", "indicator--39228704-4f13-4991-822b-3fc3b7616afc", "indicator--a9e09795-6141-4f33-b091-50228fe70833", "indicator--5117bd0e-f606-490a-a18c-624f0b0e2c79", "indicator--ca786c9a-33d1-41cb-b0cd-ae1db6ead485", "indicator--04b70594-c0c0-4ed2-9471-391ba0e649c8", "indicator--45c03506-cbf4-4c88-ba3c-182a7feb9255", "indicator--291b2eee-4b8f-4fb8-b819-31a8b1ab6eff", "indicator--87ede58c-b6a6-4442-bd1d-8b6aa6ee5026", "indicator--ed938423-4aa7-4bac-880a-362753387878", "indicator--acec3aa7-79e0-4d07-90cc-a53d93b9830d", "indicator--7a261572-9eaa-4685-8964-f15ac8bd6a56", "indicator--fe6132dc-9321-4c94-ac1d-9a1f0192b8a5", "indicator--82e4bbb5-25e4-4d0a-a290-6166e100d31c", "indicator--dfd85b6f-e02f-4663-9caa-ade4fe39bb0f", "indicator--b7f08e6d-efc2-4c47-b2fa-d89e467087e6", "indicator--8c737785-ca58-418a-9e0a-35ba266c413b", "indicator--3bf8c05f-8c65-4eeb-b0c9-82f0315fbb6f", "indicator--cfc50c74-7a2e-4529-b8b9-3f03c94d2e33", "indicator--f1621a8e-a6fe-42b6-bc1c-c46dcc316527", "indicator--105e838c-5cb2-43d2-8926-b6673f60efd7", "indicator--1832813c-6a58-4282-aef0-e9397ffde843", "indicator--cfbca6ea-4141-4b51-9ac8-3816d69bb98d", "indicator--f3896851-9351-41dd-bbcf-3ff49430e1c4", "indicator--ffd1a8b7-6d85-4440-8ad0-2371f87a6b7c", "indicator--f55ed3d2-e4e0-429d-9188-5b96e91b2c27", "indicator--52201ea4-2e12-4630-b39d-a24171c9827c", "indicator--6001a58c-6bcc-4e3a-b419-a0fde8043a02", "indicator--92823463-4972-47a7-930c-80e051cce60e", "indicator--4d711969-3aa4-4347-8f96-b3f5fa9fe934", "indicator--1d474c34-ccfd-4540-8054-fe6c9db481da", "indicator--bc4d8ba9-9aa5-426e-8f89-3529f47b9f77", "indicator--dfea2438-1743-48a9-b3b6-e3598d7c552f", "indicator--1c4d18c4-b21f-4b27-8126-032cf14a2aed", "indicator--a9bd3fb5-a9a3-4633-bae2-f8b2b188541a", "indicator--3f256c80-11a0-46d1-b4a5-e5d3205f57e3", "indicator--0175bcf0-e84e-4451-b3f5-fe2256e1d8fa", "indicator--35072686-b6b4-47cb-9b7b-f38ae1cb4825", "indicator--6b8760b2-83e5-43a8-a4b1-88aba6b826c2", "indicator--614f5be0-a2be-4526-992c-ae867fda9f07", "indicator--5a7aa5d0-a9bf-48fd-86f0-c0649aba0123", "indicator--0b646779-f779-4b75-8bc7-17096fc9cdc2", "indicator--0228adce-986b-46fb-a894-40519f6e827e", "indicator--06868e95-378d-4ec0-b546-af945b703191", "indicator--0d470acc-6e4b-408b-8dfb-bb636d7347fe", "indicator--0a7b13f0-9797-4e82-b09b-d9b58b5cef43", "indicator--1974a9f3-8883-48fb-a198-8b9daf1eb179", "indicator--a515c68c-f501-4844-9114-2579aec0109d", "indicator--e59004ad-2080-4ad2-9a78-aaadf658dff4", "indicator--c8d8d7a9-2d58-4439-9c03-d4cb9fa6fc90", "indicator--453d7116-37cb-47e9-ae31-8ff168556c5e", "indicator--e4bd4dc1-b1b1-4de5-807d-ac598566388f", "indicator--eba4fced-fddb-4505-8627-4e6475af842f", "indicator--f7d1d961-d256-4a2b-9fc8-5cba0efe165f", "indicator--9d5544e9-903c-489a-bba1-fde152c1778f", "indicator--0e255624-e3bd-4e65-ba6d-53dc19469e86", "indicator--79bf1579-1a38-441d-b00c-eeacee739140", "indicator--b961d25f-0e64-4824-b6e7-bc9eec382a3e", "indicator--bda56bed-6515-4227-9ba6-692193215275", "indicator--b3e6d724-f03c-48bb-90a9-722e51d338c5", "indicator--82b0cb70-870e-4588-994f-87008f11305f", "indicator--e280e20b-cd1f-4ba8-9244-79303de60435", "indicator--acbabeb9-f347-4951-aafc-3be801bea778", "indicator--6f847846-34b9-4609-af09-5aaacc61dcf5", "indicator--6dd3da01-71c4-454d-9110-49ebca4649e2", "indicator--07448ab1-ec15-4424-925a-ea916d1eb92e", "indicator--8d110d8c-0f7a-4a70-8d78-66f188154b9b", "indicator--aa56c8e8-8169-426a-8aa6-957eecc23411", "indicator--0a13c6ba-e89f-44ce-9020-3438f58a5f08", "indicator--3c4007b2-2ad5-41bd-a0cd-0ad56fa271f1", "indicator--aec99c45-0438-4a06-9e60-f5cdc0caa508", "indicator--18ae42cd-a637-48dc-a210-19fa105a52b9", "indicator--8edcab34-1f05-4113-b162-d4f967ffd220", "indicator--9387df10-0917-4025-82be-83b1df7f4493", "indicator--30cbffbe-8dd7-42b8-9be5-6cd98ec53853", "indicator--7f8058c1-50bc-4d0d-8846-644556947930", "indicator--f120aab6-2923-427e-ad7e-6afb2feda62a", "indicator--65d0a24e-4a9b-4a38-be47-bb3a2e61bb43", "indicator--cd2938e1-1f33-40a4-b612-d7c3b8c4a70a", "indicator--533b8ec3-dc75-4d69-98a3-46413a0654d7", "indicator--67a321d2-122d-4b55-956e-e5bd13311a6d", "indicator--fc1c561b-502a-42d0-9dbf-67028d12ded2", "indicator--96247b4c-6b43-4aec-a4c2-349c9a083ae9", "indicator--ef70ecbb-cc01-4f3c-9b5f-29dffd3eef5b", "indicator--59238123-a58f-46af-8a5b-ee6c8271c52c", "indicator--d6a8185f-fd5e-4d01-8f4c-a29e2e357b61", "indicator--ec146c17-28d5-49ab-bd51-237dc4fc372a", "indicator--ccbfc80b-0d4c-4247-8206-0e7476ee6b17", "indicator--0a22c2b8-5da6-4c61-bdca-60192206d739", "indicator--4beccb5c-9b71-4a2f-8669-4e569d4343f1", "indicator--f2d2387e-1d61-4490-92ae-919402a05255", "indicator--0efde455-a611-410d-9484-56f3ddfabad8", "indicator--639be143-5d6c-4f46-8a92-f0b2e2adb2c3", "indicator--54ef9eb7-9523-4c53-8ca9-c490c29df3dd", "indicator--24f02362-9c54-47c4-b509-939cf0fabeca", "indicator--58ebe476-a41a-449c-9025-b537758613ff", "indicator--2acdc84c-9793-4fc5-a811-62bb5a611af7", "indicator--7d6c3129-d560-41b3-a24a-0a67688592f7", "indicator--f995f219-e58a-43e2-bff1-9c17ee23b224", "indicator--8ac4e5ca-f46e-47da-9ee6-65ac90049809", "indicator--6c62fd13-b847-43ef-b3d3-79faccce7cc6", "indicator--c1b38271-b641-4b8e-b73a-0e4bb33b1406", "indicator--977ff6cf-dd58-4a61-a426-15787631ab22", "indicator--4926b451-1982-47f6-89fb-2591d3e19d4b", "indicator--bdc0c84f-ec00-40cb-918a-704d82dfcd38", "indicator--805a2409-5a08-433e-9c95-087304309b8b", "indicator--3b12993e-c4d0-499b-b753-11115c2e7bb3", "indicator--2d6f2465-0b28-47d2-8e2e-29c5d708da8a", "indicator--3a71d90b-ace8-4f7d-b26a-5a95a8989783", "indicator--fdf3a7d5-71ad-4988-af0a-2741ae3c077e", "indicator--c8f3dfa1-38ae-47b0-9db3-6614c008ba50", "indicator--8561c984-ca64-4c6f-a872-d7b1b369d571", "indicator--2dc4d802-5c32-44c8-a6ca-53f252165ef1", "indicator--777233af-09c0-4263-9311-1fbfd6cb1449", "indicator--22e836f6-291e-4e2c-bc95-e84339b3d33b", "indicator--f1f894c9-7171-4800-bb6e-5646206509e1", "indicator--b72498d7-3c92-4d4a-bacf-372a6baeae92", "indicator--d2b6936d-0afa-4fda-9d57-23f939836f7f", "indicator--fc76f3a9-b08c-415e-8405-5c5a898ae01c", "indicator--9008023f-afb6-4dd4-b7a3-dc62a578b0ce", "indicator--5eb8bb97-de70-4446-880d-93212481d3a6", "indicator--b3ce51a0-0b1d-40f7-80b5-09eb515ac50b", "indicator--7727a173-a724-4505-afcf-e7e80384c3c2", "indicator--806869e2-17fd-44d9-913b-dc866d2960dd", "indicator--aff65072-f045-4e40-8494-98b0560d4d46", "indicator--60e94b9c-cbe8-42b3-b4b4-e162b9714982", "indicator--f8682f5c-4f22-4710-874f-eabc63f1fc19", "indicator--866bbab5-e5e4-474a-99cf-fb0b36d8a7c9", "indicator--bf2d753d-3c36-41ff-a010-cf0c7d3f4232", "indicator--ad3fefbf-0fe0-4efd-b673-f4bcd3cffdfa", "indicator--412169ab-6020-41d2-afcd-e3e5c3b377b0", "indicator--f9ae29d3-ea64-4184-95fe-57e1f14fb382", "indicator--02024ffd-63ee-4170-9e57-1863038504e6", "indicator--4e325683-ecc1-4787-9ef1-2063fc73f343", "indicator--af2dca5a-7b9a-42de-8b26-be9d5097d41a", "indicator--3359c327-eaeb-4239-9ffb-4a7887ef56eb", "indicator--7d5e671b-a163-4177-b632-7e3589015257", "indicator--3bc1d1d7-fc0c-4f29-b474-c252a51858c3", "indicator--4b9b10e9-deb4-4aa0-b84e-ab45e889d963", "indicator--baf1ebe1-203a-467d-bbe2-5d73fcbe6ef4", "indicator--e9f8af9e-e851-45a2-a36d-3539139f8154", "indicator--58b61d42-885f-42d6-a0f8-2918af1d2dfd", "indicator--c134a55d-928a-4056-bfbc-4410d92ee0be", "indicator--88097a03-af61-441e-804a-2d1c8257b8f3", "indicator--683861be-124a-4ed6-a0ad-c1e8e5019cdd", "indicator--e3b27ed7-87fe-4c4c-b99b-d3dfc61c1a01", "indicator--a41cc000-02de-446b-816a-9a27743ccaa7", "indicator--55c794cb-113e-4871-94ac-fbca0ac672ea", "indicator--f4bd58eb-b3a0-46cb-9161-78532db0df8e", "indicator--c3253782-4cb7-44ad-9148-ee4ca0c59347", "indicator--00bfa6bc-47f9-4f43-a7fa-f373755b7046", "indicator--ca1b1930-b9f8-44a3-8287-c4c84c3fe978", "indicator--18906fe7-cffe-444f-bdf6-4fa21473a762", "indicator--8154ba11-1cf0-445b-9df0-e6d0f4af9442", "indicator--f84121c8-7469-458e-8611-f7a6f8b0f90f", "indicator--609d8cb1-c71d-4c08-aba2-10d4435631c3", "indicator--7c7bf47a-bd0f-4a78-88aa-7658cb78fefe", "indicator--f53410cf-d339-4c75-bb79-f1a6255630a3", "indicator--65818e55-1c56-464b-9544-a7aae9e8faec", "indicator--fcd68535-bd7a-4dd0-a3a5-e48c41f14db7", "indicator--91beb75b-f09e-4811-b6df-7866bf9648db", "indicator--976c1734-5b7b-4c5d-bf50-7fecb7d6f5f2", "indicator--5e429429-999e-43a4-9b9e-6569e121e874", "indicator--88bfb353-4796-4845-a168-88cfd5353d4a", "indicator--1aacb90d-4ef0-48cd-bea3-842fe4e4a9cc", "indicator--c464faf7-ead6-4aa4-8373-45fa322bd4e3", "indicator--2a593384-c94a-4632-ab5b-d86ee4644837", "indicator--1becdcf5-efc1-4b59-854e-fb678c027cc0", "indicator--b4683bc3-7c48-4fb4-b605-1b2cff2d7b7e", "indicator--7f8a6cb7-3244-4bb5-bdfe-418b00ce1b4c", "indicator--89b37a84-d6da-45c4-b3fc-0172aefd3642", "indicator--e6cbcaab-48b6-4a53-a1c7-a6259cb90ba1", "indicator--0aea1f9f-9c3a-47f3-bc74-74da59149205", "indicator--ccde69d7-338a-4137-b1b4-e26eba258af9", "indicator--d5999c26-043f-4419-810e-dd5e5c86fe5b", "indicator--2478d309-eb5d-4234-87d9-4dbd3acbd113", "indicator--4ea286db-77ce-4d87-bb5e-118a4985b945", "indicator--6087ef25-d733-4516-8a80-e8a80b5e32b9", "indicator--1e285514-4aba-41fb-ba6a-2cc9d6ae57c8", "indicator--d1f0fd70-43f7-45b9-857c-68bc3e92cbd2", "indicator--d06c15e6-aa9e-4f9c-bfa7-4c1df71610bc", "indicator--267739f8-5180-4000-8699-868c63ce98a3", "indicator--27d20fb7-8de1-47cf-84cc-d90049ab8784", "indicator--c9063eea-a0d9-47f5-b831-67f6e8ddd8a2", "indicator--e15c92e7-fc6a-4071-b77e-cdae2435b6ee", "indicator--4e0bd14c-ca63-4410-a31f-f064c47f7654", "indicator--08aa0275-01ec-4511-9aea-522c6666c324", "indicator--6433ae58-1f7e-4101-a2c9-0bcfc4b62881", "indicator--d952c943-5e9b-4bdb-8754-33b6d496411b", "indicator--3f77e2ec-9ae7-4cdc-8512-55ee5dfccf83", "indicator--f69f3c8f-4614-463a-bbe7-d27899e59dae", "indicator--0ca34c84-df3f-4297-af82-339a96eaebb8", "indicator--588d8345-0c16-4ed7-91fa-89de3c01db01", "indicator--a3d1091d-931c-4bf7-b3fe-80327c84e7e6", "indicator--5d4c4594-70e9-41fa-a900-4210de876696", "indicator--7f587f5d-f800-4322-973e-973d87ea0ebd", "indicator--067192c2-4969-41d3-9dff-3260dda49afe", "indicator--a65912c9-aa2b-4b00-aa01-c9e4de9689bc", "indicator--7ebc52ce-9be2-4a9e-b64c-9b1c4670e47d", "indicator--cceaffab-00ef-4760-878a-2253ea88e05e", "indicator--e62ad298-721e-40dd-a96f-c0a886d71c64", "indicator--c85f1ac0-4863-445c-8873-ca4f055a1686", "indicator--80229fa5-a76f-44b2-9152-9c1c4bcbc4ee", "indicator--fc9372f7-0a82-443e-b88d-513362dff3ed", "indicator--fb8cac90-a0fe-4539-98ef-7d452cd24f69", "indicator--39f2253c-4cb2-4867-8b2e-fe7eee180aee", "indicator--e4e3639b-57dd-4411-b2f7-a003ecdc229f", "indicator--42f9ad67-7e3d-400c-b66d-022eb4ecfa69", "indicator--8725eda7-7433-41ed-aa9a-60b88e7cbeb4", "indicator--4150afa6-3c7c-4ace-a36e-d716815f0d02", "indicator--0e0a747e-347e-4b3d-8afc-aa68022185d7", "indicator--2f6a063e-05fc-4530-8f8e-94a31fc87d27", "indicator--9e13c181-eee1-4525-a552-c2cfbdc1f398", "indicator--2783fa99-c8cb-4d4d-ae43-b83957534b5a", "indicator--fa67f1ec-7c8f-4aab-99aa-f25e3889cc11", "indicator--15178175-1d6b-422e-a42c-bc6c63f341bb", "indicator--2cfae1e3-1773-4aa6-9cfc-603958561849", "indicator--abfa6547-d9fd-419c-97cd-ef73d0b2f878", "indicator--2d07ea09-e20f-440a-93f3-6a61bd698ffe", "indicator--cc8f3489-c00b-4236-84a6-57aff6fa65b1", "indicator--87df72d8-a0c0-4256-9265-b3922d89ec1b", "indicator--e26ebfa9-9a5a-4dbe-81cd-d66cb759f033", "indicator--618a59b3-90e3-4140-bff7-ade8cbf11d7c", "indicator--98c697ee-7d24-4284-9696-c8e92c91e5fc", "indicator--6527df7d-347c-406a-937a-a3b1e9d146bb", "indicator--84a1c035-b6d4-4ce7-b00f-1d4f64c29623", "indicator--f5565866-63d2-4fc8-9012-728d112f2e7a", "indicator--8cc5329a-b2db-49f7-b13a-7e9dff7b84ec", "indicator--e30b71db-3570-446b-ab82-57c8200068fe", "indicator--1591e7fc-a762-4fdc-a81a-716cffe42030", "indicator--5874b65c-f123-4232-abad-66e647b37713", "indicator--749c6c99-3eca-4704-b531-2ed34d006ae2", "indicator--dcecc83e-3157-4e3e-9c44-d9d9ebb78833", "indicator--fafd7416-261d-4515-b252-10a4ce850835", "indicator--2869256c-66b8-4446-a5db-9c6b21538b9a", "indicator--99f62adb-f567-45a7-beeb-56c360f99f5f", "indicator--26fa2729-1187-4d5d-9291-baf5e3a882a2", "indicator--d0cb40f0-5cd7-4c89-ab81-2cbd8d0aedb5", "indicator--69295b00-0421-4ad8-bce7-23fc4cd0c442", "indicator--7eb2922f-47f0-4aa0-8af6-5e4d98e77be2", "indicator--af875c69-4ce1-4415-a6e7-05f2c9c0de8e", "indicator--2fc73b35-09e4-48aa-ae43-076b77517c6d", "indicator--58f7aff9-0f75-4538-abdd-af09807d46c6", "indicator--426442f5-8162-438a-8a81-de266ffe0832", "indicator--f52d97fd-f841-4fa6-a286-fe0b4c39840b", "indicator--7fec7352-2816-4c13-83df-334599379e1e", "indicator--2e374320-eecc-4d58-9372-95ef728a2fe7", "indicator--a3521810-a68c-4170-a409-7d68aacea879", "indicator--956d289a-9f44-4277-9680-1cf504cbc2f0", "indicator--e2443299-c391-4526-9e0b-099e345f4aa4", "indicator--81227801-5c45-4bb3-8ee2-d27fb6034fbe", "indicator--32d7fdec-e29b-4f01-9874-acec2b2849a9", "indicator--a72b6da2-3161-4684-aa3e-ad644c1a0702", "indicator--2d286ee6-861b-4b72-8121-43ccce6a1e43", "indicator--d5db6ac3-1a56-44eb-b6eb-fd13b4c82626", "indicator--4560ceea-1f35-44a6-9dcb-707ed02fbe90", "indicator--81d1bf0d-8be7-4408-9716-81c002dfb69a", "indicator--ba98cee2-9d72-41d1-b05c-24216646cf33", "indicator--ce636256-798c-43b7-bf34-16a7e7742f77", "indicator--4dd11908-f1e0-47a5-a2c0-375693e7cddf", "indicator--18cea52d-3066-488a-a0d2-cc719d7aa2ce", "indicator--2f0a48e6-0ed0-474b-b70e-2778995d1445", "indicator--e6033664-8b46-4fc6-b4f1-a6a9877f9574", "indicator--8650e726-e8ed-465d-a9f0-d9814083abc2", "indicator--376672ca-130e-4c42-9b5a-8d0f458d3dbd", "indicator--3634c979-366b-41d8-a205-6fbbb35fab9c", "indicator--12837213-9cd4-48f6-a05c-9725345cd6ec", "indicator--00407c1c-2d61-4be6-8041-7aae4ad44577", "indicator--1a945435-20de-4943-a49e-5a2903ac3a41", "indicator--4c56c54a-0c7f-4916-b49b-ec919d8250d6", "indicator--c9f5d64c-1356-49a0-a507-382563a27223", "indicator--4c2fc158-62c8-43ed-8e6d-9a706b7f527f", "indicator--9a9e7e82-ac7d-48d4-926c-68a07c6943c3", "indicator--41998133-bcb9-464d-9761-39d0dc7a9885", "indicator--ed086b54-19b4-433a-84bc-dd57000a5456", "indicator--a4cd777f-1dd4-4537-8d15-4243d2fa37e2", "indicator--ec9ff81d-a1e2-4d56-9cd4-005459a0be7a", "indicator--59af59f8-4505-45d8-897c-6526529f3cb0", "indicator--8ca73b8f-d114-47e5-b90d-335d5e961828", "indicator--b6690f9d-198d-4717-ac79-4fb0ac07186a", "indicator--c63891e7-8dac-495b-9bec-6b6f52c7212b", "indicator--29f7e213-d2eb-4ad9-8fd8-df7c55c122b9", "indicator--540aaa2f-d8ca-4880-bc73-5157d3b544cb", "indicator--7041b105-0d8d-46f4-8c2c-528c45e82400", "indicator--b03f74f4-447f-494b-bfe4-f75d36e135d1", "indicator--df6c2d50-0570-41b4-a29c-68f1d46582b4", "indicator--f7928894-47b3-4387-8c62-6f11b0ee11e0", "indicator--1597400c-d4af-4afb-adf3-3950bf39b9f2", "indicator--6318f931-77c3-4ec8-bf9c-3fdd30487152", "indicator--808fe83d-3209-4057-805f-98596333c6b2", "indicator--783d1ad0-e4d7-4962-b471-e8adabe79160", "indicator--6dc2afc9-1ace-4eef-804c-5717adeda13e", "indicator--c21d1eaf-d2fa-4d59-ade5-de36aaebbf18", "indicator--8be3c4d0-f1a6-4934-86c7-8c9e34995bf1", "indicator--3f67b110-0523-488f-9db1-f289b341afdf", "indicator--20687ea4-e4b8-4c68-b95d-5e7afc694bb3", "indicator--67a2deab-1fd7-4231-a6fe-59f43e1f9999", "indicator--d39dab53-1539-424c-997d-e99e58c9c606", "indicator--a2d44cd1-0da9-4fa2-84d9-77372f423d2b", "indicator--efc509ce-353b-4b01-a453-75141b75454e", "indicator--22cdb2bd-113e-4aa7-ae77-7d2f230f2746", "indicator--b570974d-de49-4045-b431-bdc566b20b4a", "indicator--03f257ea-55a2-4d7c-93f5-16af59ff4ba5", "indicator--763e56ed-f113-40cd-800f-7fdbcc9bb85a", "indicator--f1f8bc6e-a82e-4b9b-bb7b-1b7dc67f85a1", "indicator--0cdf15b9-07b6-46e3-8053-458cedc626b9", "indicator--8c6096f7-7247-46fb-a16b-a79e93f873c2", "indicator--1fdad914-a77f-48fe-a2d5-1d0ee92d587e", "indicator--fe1379af-04a4-4f69-9d86-3144e996f69b", "indicator--acdf2e2b-7305-41f1-b576-da44af7719c6", "indicator--8c919559-5511-4d71-8899-4bcd553e9469", "indicator--e922198e-d810-4434-a186-0d2b27ca8292", "indicator--1679b49b-1199-4e76-9562-8adca3fee397", "indicator--590fbc08-6318-458f-8795-db4a1947586f", "indicator--132d4bcd-2b88-4cf6-a4a8-0acdb07498d3", "indicator--4ac26851-704b-4d1c-8deb-9f78a24565aa", "indicator--b9f0d474-a16b-4554-bd43-45e40f8a3f73", "indicator--d7ed7ad3-d555-4e94-a024-208f62375efe", "indicator--f855a461-cd35-4996-92c8-702cb6018817", "indicator--ecea46f7-49c4-412e-b4d2-7a74f82ef687", "indicator--1bbe4c0f-3ff9-4417-acf9-3aa8f944899d", "indicator--18d6ee3c-5113-4043-a26f-af84f45c738a", "indicator--a925f9fe-290e-42f7-ae9f-f143ccb4a62d", "indicator--47a43838-bfd4-4c60-94a0-76c7627a84da", "indicator--41186829-5fb9-49f7-bbf1-c0f5ced34bdf", "indicator--28ecdb2a-8d88-4ef7-af66-699de41db64e", "indicator--78dc3177-e9ab-451a-bc45-cae35f9d5f2c", "indicator--f79a1b2c-c87f-4194-9c3b-fb943537e76d", "indicator--b658d7de-94ad-4930-a152-5839a266834a", "indicator--3ab9c8aa-54c0-4c5c-8246-8f5bf14d06c9", "indicator--580d1cf0-27f7-4e2f-b167-29863c935f03", "indicator--200edc96-c8d6-41a5-ad18-449816927a97", "indicator--aab22a90-961f-49d7-a84b-8716331ecfea", "indicator--e8fed85e-e706-40c5-b807-fae1e61c0beb", "indicator--e4611a6b-ab48-4633-a86f-96587b4624a5", "indicator--c6e5da53-fbbc-4c92-a8c7-87143c03e14b", "indicator--3e7be8f1-a33e-41d5-9727-1f5e22b6126b", "indicator--951f2b15-21f7-45e4-9bee-f75b92cb00c7", "indicator--75be8c0e-3684-49bb-902b-a66ef00e33b8", "indicator--41b594fd-b24c-42c9-b6fd-693dd75ec3a7", "indicator--4f45236e-6733-45f2-b9d2-fd8fa26a92a2", "indicator--1d4ba6a5-f4d4-4f22-9a51-a5b72b87d7b0", "indicator--954d827d-91e2-4ee1-b358-f7f788a07408", "indicator--4f06f601-205e-424c-a8b1-2be10473df74", "indicator--da19c803-7a36-45f5-972d-eb4a699524e3", "indicator--4a1b4209-d03f-47a2-90a5-5129dc1486d3", "indicator--d53533a1-5ee8-4cb6-815a-cd2470280c5e", "indicator--6de45824-b408-4961-b596-fc934193d85f", "indicator--9144fc46-e8b2-41ae-8f13-e052667f5b74", "indicator--861a8098-3fbe-42a8-b3b6-e7aca9791002", "indicator--e3e7ae97-6a03-4082-b202-cb527ee86fc1", "indicator--3b042583-eee7-4eeb-a59d-6af0ec60b1b8", "indicator--fe337789-ffa5-47f3-bd66-77269ba165a7", "indicator--d855f945-c190-40e0-8d53-c1194142a9ff", "indicator--07cdbfc4-e452-4614-b262-061d0cdfef24", "indicator--4d542c44-009b-469a-83a8-c173a68a10ba", "indicator--fe8dba79-368d-4507-87db-df273399aecd", "indicator--31daa919-a692-4cae-8a9b-473acad0cb1f", "indicator--db77400b-6501-4c0f-a6c9-464e862c5564", "indicator--ad57a591-2858-41a1-899a-0649b3614057", "indicator--9e9a0d90-65a0-4dc4-bfbc-198458770f5c", "indicator--6f7b86f4-dab8-4fa2-a492-56a07fa11bd9", "indicator--7f848ebc-cb7c-4e52-aeec-cf4105def5a8", "indicator--85b1b365-7267-49ab-b8a8-0076b0c106c2", "indicator--3cc5b111-86f8-4d73-a6b8-288a8954726f", "indicator--d19ed502-3fc4-4246-ae24-9c54fb950eca", "relationship--f0213bc0-6402-4295-9bc3-f400253f66f5", "indicator--87bb87e7-04e4-4fe4-a273-5d1c60588d72", "indicator--90ce620d-aa02-40d2-add0-fe381cdd18d9", "indicator--d5238987-8f0c-4ffe-ab5c-df6add440278", "indicator--86e856ce-a5d9-4e05-ac3a-05ea16e9b98d", "indicator--fdd72b1e-0b17-49e8-adfc-7069eeeadabe", "indicator--35552bda-5832-494f-b5a1-56a56dded8d9", "indicator--fbfee9fd-5167-4574-a3b5-9bd11b0d0fca", "indicator--68f41cc6-2fe9-42cd-b8e2-59f9c2582525", "indicator--83788a89-0a02-4ea1-91f5-b7a9b3b128a0", "indicator--be6dc82c-67b1-4e42-9b62-9aa3d84a5f47", "indicator--4089bbf5-8b81-462e-ab90-ea0929e1caa6", "indicator--e781d0b7-52ec-4447-ad15-7a46a685e518", "indicator--0189a6ce-45a0-4402-badd-112bb644371a", "indicator--10402ce2-e8ce-482d-b6c7-0971b479b255", "indicator--567efb68-90cf-42fc-8629-7c96585c31af", "indicator--8082be4b-b6ac-4e8a-ab59-5bc2f580d54a", "indicator--8ae216ed-d07a-46d9-a4a6-628d5e7f5fe7", "indicator--1cbfb447-40fd-4699-b83f-cf4b30749d56", "indicator--6f8c6491-f69f-4709-8518-2c57441e51bd", "indicator--7e566e8b-ec7f-4aa0-b0f3-dae67bdc0c2f", "indicator--2c831580-af20-473c-a2d3-4a2fc353a475", "indicator--855b4760-d170-4c6f-ba13-8523205d885c", "indicator--df0b093d-ea16-487e-9131-a58ee487850a", "indicator--953f4580-f4ca-4aba-968c-93bb5c527d88", "indicator--377a4088-e311-42de-a3a5-740578cb668f", "indicator--5ec24c72-0502-4797-843f-4450af707a08", "indicator--1aaf4d8a-6f87-4b87-894a-33ffd5b36034", "indicator--334861a6-6f3b-4045-b667-ee31f6734315", "indicator--58153103-1176-48cf-9c95-1bbd31da76b5", "indicator--3443ba9b-39ab-4af9-afe9-95e251943d3b", "indicator--592dbb6d-7cb6-4867-aacb-859f6cb77c99", "indicator--c2280399-ee21-43d7-aa6f-06bdf1e372a1", "indicator--4a794882-9eee-4824-bee1-9f28ad2fc2bf", "indicator--4c6cd30d-28f7-446d-91d9-df25b17432d5", "indicator--b91d0ffd-0a14-42c2-aa1a-9fba77e41f98", "indicator--1a5ef293-cf2d-4649-ab36-9254575216fd", "indicator--435a06f4-4745-4bd9-988a-dea35ce55499", "indicator--09de8543-52c8-4d0d-b4a4-90c9d26bc1b7", "indicator--e2439229-85d4-4c91-b090-5f5607beae15", "indicator--f0c78f4c-a62c-4d2f-b465-cc69271e8439", "indicator--d3dcde10-398e-4a28-a6d3-d1a4a3caa297", "indicator--ccecccb5-6f8d-4b18-80e2-04dd8870c5a7", "indicator--09da5f29-54b3-4333-ba31-f6e88320238a", "indicator--32f6152e-b158-4295-96a3-0762580b7158", "indicator--4e210cc2-1963-4b73-9827-5a6979fc3b23", "indicator--c3913f32-eef7-4948-9845-984a99ba714c", "indicator--05613873-8ec2-43a7-b45c-8efdcada3e9e", "indicator--b09b2e14-9a79-42d4-815f-a52e286b673b", "indicator--e8346064-c856-40f3-8e4f-6da61637c05c", "indicator--c9de496d-0ab0-4aa6-82aa-7b5fad40e6bc", "indicator--5b452314-e4f9-4f7f-b18e-9fdbd5038b89", "indicator--6f6503d8-2c82-49f8-9b20-f8e3e9c44771", "indicator--79491d6e-9c8e-4344-a916-092e6e3ce793", "indicator--8e9ecd03-c0eb-43b8-85a2-d6aa08ad58f5", "indicator--5856f56f-ee80-415b-bb8b-46373a16e9eb", "indicator--fe5b4346-eda2-4287-b0c5-66a9f8b944a6", "indicator--5a0381df-187b-478d-93ac-8181de8c27c7", "indicator--70a763fe-02ff-4cba-a093-991a26fa9b74", "indicator--7789da55-59ad-48f2-9ab4-7ca64e69edb7", "indicator--e499fe3b-647b-41eb-8f64-29608067baf6", "indicator--d9d3efaf-188a-4586-805b-eeb095921cc5", "indicator--40d0065e-4c80-48ef-a3dc-bf40ea2ba118", "indicator--6b97ced1-121e-4431-89b9-446a7fa13826", "indicator--ec7558c0-44a3-436f-9efb-6a6db6b1d3e0", "indicator--b0426b9c-e005-4848-924d-bd0f26ab240f", "indicator--9839ca83-a0e3-4c54-8028-fbbfd4a4b04a", "indicator--8af605e0-f461-4ac5-ac66-05645a1ca89d", "indicator--379751ee-7198-44e3-b614-d6b00f5f0465", "indicator--48d20f5e-7ddb-45ae-a462-4ae7c00b1103", "indicator--21b29b32-dee5-4417-8a3b-948ff9a3db14", "indicator--ed4cda72-3353-4b0b-952d-cccd4773753d", "indicator--44bfea6e-d4ad-48f9-a3c6-10e2c3efe618", "indicator--220ea8d9-f0af-4304-aac7-94669d6eca61", "indicator--a92b0dad-f1f9-4a1c-be2f-fd432d7c15fe", "indicator--07204e61-597d-4f0c-a26b-b813f2417579", "indicator--70548ecd-8458-40c0-90f0-aeaa123df816", "indicator--a3ea794e-7cd2-4917-84ea-48dbfb2cb6b5", "indicator--3648a027-9ea6-4cdc-a1bc-654c98153621", "indicator--7c82cf78-6caa-4ec9-917f-6ce31c4c9ed6", "indicator--3749aa6d-8362-497d-81cc-c62ecadc3894", "indicator--3bf75b55-4af7-49ad-921a-c1d90a8be21f", "indicator--b0ca8ecb-f1cc-405b-a861-ca725b64be8d", "indicator--117e3338-c80a-40aa-b6a7-b44163d57938", "indicator--fff541e7-f976-4783-8678-37f66c9d45c4", "indicator--394ddbb6-daec-4937-afd7-565ecd8f9de6", "indicator--d3224863-d61f-48bc-8f9d-a2a44a3c6826", "indicator--84008c16-01d0-4019-b3fb-c886f0f84987", "indicator--55b09f5c-97bd-4b0f-8841-17b7cc880d3b", "indicator--a70420ce-94fd-46c2-b9c5-b2af6ea9d9ce", "indicator--8d0c233a-9223-45bf-8926-511aaf04c82c", "indicator--f56f48c2-1b6d-4805-af87-44919d97a2a8", "indicator--ccd53b5b-f329-4326-9d70-7fed3e1d0ddb", "indicator--6eea4267-c32a-4662-90c9-d54699468eaa", "indicator--c7584eea-13ab-4328-b8ce-3b92bae3faf7", "indicator--99777308-e17e-476e-bca1-35cff4238fc3", "indicator--de2a3d37-0c8e-4ae8-bb5e-07eccbd652a7", "indicator--206d93f1-2614-49cb-971e-7217e3fee66e", "indicator--e322caba-4cc1-422d-91d0-b377bbab157d", "indicator--fc3da4e1-be69-4c41-b040-e2758904d3ee", "indicator--cd7c22b1-a06b-4641-873e-58752ee839a7", "indicator--0c7e82aa-d072-4e54-9790-4bdc901776a8", "indicator--b85c54a5-8c7a-4eda-89c5-c353f8c75550", "indicator--d408d0f6-0b02-4bc3-bc08-3bf9f99ebc21", "indicator--664f49cd-e37c-43f7-a9f5-71422ea38bee", "indicator--5c122bed-835c-4cb0-a98a-6241e10f21bc", "indicator--23ef2c6f-6867-44ea-a989-2197671e15b7", "indicator--dc5ec15b-8ee6-48f7-8b60-f8895fe4b402", "indicator--7ae99dd8-5356-4b78-ab20-c3694210d9a1", "indicator--75217cc9-200f-4871-a531-dd2e40b51838", "indicator--05365a04-4be5-4d2f-b2b9-c7401d409a84", "indicator--82ea9a07-73b9-418b-83c4-4fdffe610d26", "indicator--c18f0ce8-90f1-4db7-b7f2-7d68662d7507", "indicator--f853123b-9797-4d31-877f-7f18fc1ae992", "indicator--f842f376-1451-485a-9fab-706be6dce98b", "indicator--fffa2b1c-d8d4-4525-9fe0-cc6f6cbba217", "indicator--ad3bac28-99b1-4dc9-9d1e-f1e7939d0d79", "indicator--bd4ab394-8bb1-42b6-9067-df92f67d1fb4", "indicator--b2161177-70e8-4594-b2c2-7a76d5e8ab31", "indicator--da3bca3a-c7ea-4bf0-98d0-b385cddd5f20", "indicator--bdf40be5-3992-4b35-885e-61058bf934b9", "indicator--fc29086f-7bea-4d1b-abbd-2ee925a79a11", "indicator--89bb415b-937a-4e62-b11f-9649b51ea4ce", "indicator--94ae44a8-f3b8-4efb-84f3-3af635ac83b8", "indicator--bb26031f-84c1-4c4f-adad-265b945da3f0", "indicator--65d3fcf4-c6ee-40c9-aa0e-d91e22b89025", "indicator--7b42630a-6a92-417f-b1d7-d902f321e983", "indicator--e7aec91a-da0d-458e-bf4b-9da6c030ca21", "indicator--a4f6dee5-c8d5-430d-92e5-5d72a89de47a", "indicator--17cdcd5f-ce88-4a86-803f-9d7d77d0c545", "indicator--367c64a4-26d6-42a8-88c9-1c6456dc19fd", "indicator--9ff0721e-22ef-483e-a879-881dc0aa4fe9", "indicator--8bc5e98b-aa05-4fb8-87e9-9f435dae9884", "indicator--13b0fa9b-620a-49b1-97ef-65970b6c2eef", "indicator--f67e8940-c2f0-4c6c-8eff-5666a69a18cb", "indicator--a0e5a47f-b500-4141-bf00-2e08651354e3", "indicator--c155b1c4-cdbc-4da1-ad14-5b49ce5adaa5", "indicator--c97a64fd-eb28-400c-bb3c-a83b3517eae6", "indicator--b3e0b180-483f-4576-a8d4-7d14443ee4bb", "indicator--d8b2e6cf-04b4-4af6-8bf4-d341f8bf09aa", "indicator--747287e5-c018-4676-8e94-de5543c3ccf4", "indicator--aa1e391b-2fa3-4622-bbcf-d1e5c6d164fa", "indicator--33fd6c0c-19c6-49ea-8f2f-407655392761", "indicator--9cec9cf1-ad08-46a5-8ff1-dc0b2770d47c", "indicator--18295d88-58fb-42b9-ab19-63e8036b6554", "indicator--de717013-99f4-4d77-beb2-fc7a62ce0be3", "indicator--ef786ef2-e121-4e21-8569-d40498b91cd7", "indicator--8466f75a-629f-4883-abbd-d17970ae2f06", "indicator--6d940195-b049-4ca6-b36b-a7223adb8f36", "indicator--2b074c2f-862e-4954-9721-e22a3b5d2ac6", "indicator--1697d35c-9a34-4c07-8e2f-d40fdcc1e03e", "indicator--d1df5b7f-2794-4241-a26c-ae7afd3c02eb", "indicator--67949279-c9f1-4326-9d48-d07390a01e57", "indicator--1e943177-c767-4a66-9a3b-cf82d22c4861", "indicator--f9d2c825-49f2-40e1-8949-28fbdaf08275", "indicator--3a157b34-f3b7-40d4-9ab5-b3e257e4dec0", "indicator--66fbbeb8-6ddc-4ecd-80d5-36ea3bc7b8be", "indicator--a15601ad-027f-43a9-879a-a99b97aace92", "indicator--c2101901-6f09-4719-890a-deb004ec88a3", "indicator--1be1e937-2979-4f12-9734-44158a3409c6", "indicator--0fdaa2fe-4491-460d-bd38-256fb182525e", "indicator--c26e3517-5e9a-4f6a-a5a0-a611593c3db0", "indicator--19ed9ee5-b2bc-4363-84fe-af60e4dd9b84", "indicator--471170d7-7072-4d98-9a5b-160f7fb35f17", "indicator--aaf1b502-9b22-423a-a434-f40beaab0357", "indicator--4d22ca44-5892-4388-bdd3-565363bc1805", "indicator--00c9d49c-7f23-421a-8250-111e205e4646", "indicator--6e35d3ac-0b1f-4127-99a8-c949bbb41511", "indicator--aa92a675-530a-46c2-a965-1765f6111b92", "indicator--9894e6ff-6107-45ef-a0d3-69df79a75f04", "indicator--a3ab5e39-a33d-4076-923b-352fb188b486", "indicator--47cb3073-7dc9-4548-9946-2d0987ba9213", "indicator--0787b0c8-2d01-436c-a9e3-60a7b55c5482", "indicator--32c41cb5-9af4-4bfc-b7b0-a4defd392870", "indicator--4630a25c-7e5c-4025-b17a-d3f6dc0f8d21", "indicator--da254da5-dc53-4013-aac6-1edca7cb601e", "indicator--cb598e24-d476-4eb9-ab58-4c2bb6a296e0", "indicator--9c6a5936-e463-4089-8afa-c260aa37823a", "indicator--cfab3920-c927-40ac-99bf-70a3a6c8051c", "indicator--fc15459a-d868-470e-9be5-98ee612d1750", "indicator--1909b77b-9b82-47ee-9099-afa30eb413c4", "indicator--b2381ea4-36b1-415c-990c-3ca02be550d6", "indicator--6294c917-823f-437e-a28b-b8a88c7fccb7", "indicator--a1e558d6-4343-4cfd-be5c-f8d18c612f63", "indicator--e560bccf-f08b-4d66-b292-7bb0742418ff", "indicator--73dfb859-c342-433d-acda-72ac0233a961", "indicator--7d430e8c-5a8f-4f9a-aba9-09e1fef778c7", "indicator--8ceb92fb-47c1-4935-8b55-d03dc73313c2", "indicator--11956bc6-3fa2-4d0a-89eb-d6ebc85d81f1", "indicator--b5e55d8d-812c-4d46-bc1d-ec876754f751", "indicator--e42069f4-8e85-44da-a3b7-90533040eefa", "indicator--89ce5df3-bc8b-4011-be5a-c585c33d1061", "indicator--19ed5754-82ba-453a-80cf-42744c1a6424", "indicator--100bb8ef-f54e-4629-9a28-b7a61de1512c", "indicator--bec1668d-ffcd-41c6-aef1-aeb03a155fa4", "indicator--323d39a5-3737-4757-92b8-ddb54a25f7fb", "indicator--6bd8a66a-65d9-490e-93e0-1511e1b1531a", "indicator--7840ef4a-36cb-4f01-bdb8-bd314cfa7de6", "indicator--94cf91ea-3934-44c6-a49c-e4c65802352f", "indicator--2cd7dca5-6ccf-488e-8ec5-774f8056a44a", "indicator--fc1cdf08-cec6-40eb-9fa3-ca62bc8bc7ec", "indicator--f0e587f2-8104-4632-acb6-8c9f82d559b9", "indicator--9f95da91-44f6-4d74-af0f-af5e4fb6e981", "indicator--f14adf61-c605-45e6-a57c-c6ca959b4121", "indicator--c2b5c86a-d93c-41aa-b220-db035e778ba4", "indicator--584e878b-2e93-4220-a4e7-b2d33b5c8c04", "indicator--aea3daec-5f83-40d7-ac7f-3dc2b527d3a5", "indicator--69e51710-b142-4c6d-b97d-3f2aa3cce586", "indicator--1332ab9f-85bc-4b29-948f-53c76deb34ea", "indicator--abdd3d1c-8c6a-4251-825f-de8a0a0f26d3", "indicator--d4481083-f821-4dda-8e3d-7165083943f0", "indicator--ac67f338-299f-41c0-bfbc-abcdc38bc3ab", "indicator--0545a68f-ccf2-4e00-b68e-b6ba4f477cc3", "indicator--142244b9-c489-4b3b-afa0-590285cf2c2a", "indicator--0708fda4-4beb-4a0e-80b6-30ab68ba4bc2", "indicator--c3ac6708-d6db-4de5-9ec6-7ddf7392c9c2", "indicator--2718ac22-00ad-4f5a-85d3-8e3e016ce6f1", "indicator--fe63f890-9716-475f-9b8f-6cdb000c4a16", "indicator--1c0bd385-29c5-463e-8161-4d58d1f048c9", "indicator--f7ea53df-3277-498c-a5cb-4fb06ea9ee5b", "indicator--67814ea9-9e7f-4064-a5a9-d8acc64d128b", "indicator--e69dd95d-5601-4130-b2dd-19b7148325ff", "indicator--8b5c3451-c7af-4ca8-8ab4-7fbbea94dbc5", "indicator--24a80cb0-ea15-43f4-a085-bb40314ed3f9", "indicator--99a9ba8c-abe5-4a8e-b45c-f00b807de9fe", "indicator--3d3d4ffc-f92d-4632-8989-890f914a7293", "indicator--a140e7a4-c302-476f-8f66-d6e93566a80a", "indicator--7505f513-3efa-4bab-a2db-508bd5e6fd89", "indicator--379c468c-7fd1-4ea2-962c-c945f5a88b3d", "indicator--b4dd9a9f-92b3-4f33-a24b-7acb7bf909e0", "indicator--a8afffd8-1b73-4448-998c-fea9a7fe0f93", "indicator--1beaab51-7413-4ce8-a2c8-20639ac0305c", "indicator--60f942ce-c147-4741-ae3d-994d30e706be", "indicator--1b59a753-8e49-4559-9594-2a6310f58a4e", "indicator--4c0755c6-9007-4890-9e9f-726a03535d4b", "indicator--1b8e4091-2229-4670-a268-e0e30c2be447", "indicator--12658f81-e809-4503-8e93-bba0d17ed760", "indicator--61469166-b87a-411c-a489-f5ec66ec4329", "indicator--e53de8e2-6afa-4947-8642-dbf4213e6e66", "indicator--48ce7a97-4b51-41a1-b685-1ab3023d81df", "indicator--de3a05ba-b4bc-4937-ac1d-d77db2a2c261", "indicator--8d2b61aa-75b0-46db-8bd6-c42dc71fe0de", "indicator--e465bc71-fdd6-4d53-921a-4a4139fa7e2c", "indicator--94381c7d-0058-4b6b-a9a5-dc356f075395", "indicator--1091889c-9308-4565-a141-497cbe7f8047", "indicator--201546da-3f07-4137-8ad2-51db1b9012eb", "indicator--45e52823-ee35-456e-ae17-aa15f927675c", "indicator--dbf220d2-f13a-4326-83c6-dfe59978e685", "indicator--fb2711a9-403a-4f73-9a85-c37c09cf6994", "indicator--21d4a558-17c4-408d-bf1b-f0048394da58", "indicator--45af8b3a-0f9a-4674-858e-eae42d84f272", "indicator--2d97f4db-20dd-478a-9bd0-e85801136fbd", "indicator--f0a75480-c642-4faf-b0ca-4b1b82df0b49", "indicator--f995865b-a557-4362-9e9b-d9c3a073f47c", "indicator--bdbd84a1-fd50-4a0e-9aab-9c7527b87226", "indicator--cdd21cd6-c3b0-487a-8a0c-e5d02520e572", "indicator--a4eb61aa-258b-4593-af11-53d0dbdb7c21", "indicator--8716152d-5733-4ecb-9537-3751722dc704", "indicator--47dba901-25a2-4a9c-a552-356173f021aa", "indicator--329f23a6-94d8-4a66-99e3-117223d1ea72", "indicator--f8ce966c-c32a-4a6f-80f9-4fbb81df361c", "indicator--989663f4-6182-4a9c-a1cc-b99bf22ee31c", "indicator--c224462c-a5a3-4292-986a-a1e75ed3c693", "indicator--c913b425-1f66-4cb9-ad7f-af6b09164a1b", "indicator--a8cbe645-5587-482b-9f67-b4d7e79134fa", "indicator--81e4c53d-737f-4e17-b81d-95b9bdadc967", "indicator--a075b2f1-7ebe-460c-bf29-997d19032260", "indicator--1c5963cf-9b49-4684-a438-2e3fee6412fe", "indicator--4a6e8f40-6f56-47c3-9dbc-f690b64bbc45", "indicator--f91b3e03-b9b4-4780-9952-c1a9e2546aba", "indicator--4e868cc3-ce0b-4f04-a57c-0d6703df069e", "indicator--fa715e51-bf8f-4199-8540-7b484cbb4b85", "indicator--b0668161-1ba4-4333-b467-1cc9b57e262b", "indicator--c33a175f-66af-40bd-9ab2-0e3714585cec", "indicator--88fa4a4e-7c9d-4b95-9573-f6b80e960d1d", "indicator--771d3c5d-61ff-4739-90c6-816c3e79dffc", "indicator--e4bd80c7-f887-4c0c-bc65-57e16db0e97d", "indicator--fc8d3b35-8961-4f3d-b2d4-c6801bf63cdb", "indicator--92f44dd7-1c88-467c-b38b-13efc8c6e69e", "indicator--23bea262-d01e-483b-925d-0ed4a4d18220", "indicator--85880524-b584-4401-bf45-d930ce9bee20", "indicator--85e301f5-c3bc-4fa3-aafe-1e06f2822701", "indicator--578a4163-5f7c-4cc2-acdd-bcae44c2d377", "indicator--ed1cca42-9484-4290-8716-977012fa0dd6", "indicator--c51e222d-8988-4fb4-b143-7cef2e0a3f9c", "indicator--35df8a0d-c6dd-429a-bf98-7ddb699a5df1", "indicator--ac3e4281-044c-4662-8680-0df5efb36c2c", "indicator--d8480cdc-40f7-49a8-ade3-8ffa709409e7", "indicator--f648a047-5c3f-4df3-9271-8fe566d9bf3a", "indicator--7f51c1b4-6432-42e4-bb59-baf0126fe0f9", "indicator--4911809c-d7eb-4d51-8c50-a402639bf523", "indicator--d1e9053d-3e3e-44a9-b0e6-fcaf5231485a", "indicator--8164a26d-81a0-402a-a4ef-26a35b8b5ea6", "indicator--6f43ca37-6fa3-4951-a865-a90d296ee177", "indicator--3ff1230a-f133-4a42-85ef-0e3129d3bacc", "indicator--851a490e-b89b-4bb0-830b-aa6ad1e083f8", "indicator--4bc48cad-6f92-42a4-adb4-cba13fbb7b94", "indicator--8955cb88-dd5a-402b-9da4-6f1221935717", "indicator--d6868b65-9a48-4641-8b79-4dccebefbeda", "indicator--ba4b1d53-0a9c-4266-8529-7cd00500ee44", "indicator--7b1a73bd-fa20-4db8-903f-ffad41d94c31", "indicator--a78fd867-e45e-4527-b150-4887bc4c14b6", "indicator--e9c74af5-d05a-4886-8580-df6f5a5c0dfe", "indicator--84de17b4-3538-4725-bd9b-c44c582e9fc6", "indicator--e44c17d2-0f68-423d-b3e3-086368372681", "indicator--9716c44f-85cc-450b-9dd4-70acfa271dc9", "indicator--41a0c794-f486-4fb5-a96f-1a497d243c0e", "indicator--df515447-9a8a-4902-b535-c9db697eb192", "indicator--b73c27a3-3902-46f9-ab8e-db6b419f9374", "indicator--5b1321ff-88ca-4198-8d0b-fd9052e8b2a2", "indicator--e263a8fe-aac8-4420-a4cc-c00f0ac322e7", "indicator--5ab498df-90ac-4e03-82ff-c3da51b1a0de", "indicator--66a70666-d347-48cb-8958-0e03aca1b873", "indicator--d047692c-3bf4-4320-8184-8805df8bbc17", "indicator--ccabf13c-a8f5-4cb5-bba0-cdfa4abda7b4", "indicator--f17647a1-f7c3-48d0-b2e2-56663fbb3e35", "indicator--7deef4b0-421b-46a5-97bd-d4903354606d", "indicator--666b8f6a-4bfb-473b-afa0-91c87fcf9a66", "indicator--17821192-464b-4399-9117-09f50725d724", "indicator--1ae05476-9ef7-47f9-a7dc-5f9ff008441a", "indicator--0b5246b3-b73f-43f0-ac8f-cd2692da6207", "indicator--db86bdee-347b-402a-b564-f8b100b1ed2d", "indicator--21697c96-47bb-4bc2-b5da-bdc0f42d46b1", "indicator--12744a63-1d84-4bf7-95b3-fdfa63c237ae", "indicator--7d576e0b-c85c-4d73-812b-dd9a65b4c5aa", "indicator--5004983d-2a0e-45cc-8149-044a85d431e9", "indicator--10fda3d7-f9e7-44ca-9f8b-da72465bc64c", "indicator--da0688d6-1a1c-4793-bbd6-d27410f08596", "indicator--e30bc07d-ff31-4bbd-a654-30e70e69a2d7", "indicator--8eacf7b8-3c1e-4745-87ee-e09e3764b59b", "indicator--2ecea5c7-cd01-49ca-99b5-87fc6c80ed67", "indicator--dd62e6dd-b4fd-4372-85f4-8717b9934b09", "indicator--82adb59c-c60a-495a-a4a8-a7b236396715", "indicator--ab771a07-9345-4770-bbb3-b1a9200fa10a", "indicator--62f0458b-e48a-4261-99e2-ca0b1aecfb85", "indicator--5c2f4831-3e1e-47ad-8c11-82bb6123bd83", "indicator--63e3d992-436d-4dda-8be9-68fa282531b5", "indicator--0fada936-bc01-4777-80e6-822447d67dec", "indicator--9765de97-eb0b-42e1-9aa4-236e0ae16841", "indicator--0093514b-4819-418e-a0d1-e129ad699b40", "indicator--9d8a695c-73c0-46bf-b748-14337430ce51", "indicator--60854921-6548-480c-a0fd-78bb6d581e8d", "indicator--dfac1140-9a2b-409a-8bb0-411b14f20f5e", "indicator--fa1ca206-9bb1-4315-9f42-769b956968e5", "indicator--751b0d44-c886-4343-ab56-507a9707e3ce", "indicator--8f57216e-1067-4c81-8286-635f462dc48b", "indicator--d22b505a-f971-4133-934b-fcfb9dc456bd", "indicator--ff2992ad-8980-4f53-81e0-47f573d01a78", "indicator--d0a89a86-25c5-4f8c-a442-6d239d9996fe", "indicator--1b11eb8a-8ebb-4eda-b0e7-d5a8a31484ef", "indicator--89d8f5cf-f471-4aa2-9730-66a736d3daa4", "indicator--52379669-9450-43b8-b334-bf458bf4d7a4", "indicator--00428173-c695-4734-a1de-e29131590daf", "indicator--18a95b8d-7867-4e59-ae13-b399ceffa3be", "indicator--ff43e404-4939-46ca-81ed-4b92e834fb33", "indicator--f4efc3fc-ae92-49bc-bd41-5528fc97a6b2", "indicator--37e7c31a-5a61-455d-beb6-1d47300b35b4", "indicator--805fd6bf-d536-4af8-be48-d8b35399ed4b", "indicator--33665541-868a-4b4b-b443-aa000b1864fb", "indicator--60aabc7a-3855-4ea7-93a0-279594f379d0", "indicator--75e455b4-d8e5-44af-8e17-f33ade767573", "indicator--288e8c11-2c66-4f38-b2d1-418b9b9226a3", "indicator--ce45eb50-fdd9-431a-8c62-1c0fb803f80e", "indicator--0af52f64-00a3-4dd0-b96b-c5b4bf713804", "indicator--f30e171e-a18d-459f-8ae0-96214e4070f7", "indicator--8c51a070-e841-4262-8db9-d1d186fba1c0", "indicator--bf763b29-bdd9-43a4-a6c2-dad86460be64", "indicator--5fe6b1d7-0294-4f1b-92ea-adf6cf118101", "indicator--a4b44752-5eab-49db-b852-2fe15f8c22f4", "indicator--973760d9-9650-4984-8072-0dc5e2764c9b", "indicator--bc14f4f5-5f2d-4023-9cfd-2cd63e9620d0", "indicator--0e4fda26-7081-48aa-b604-4c6ed01aa7a6", "indicator--9de0927c-8171-4d30-a701-c37088193321", "indicator--9465537b-2644-4727-8616-577777c734be", "indicator--b5e58ae1-d488-407b-a3de-ad468dbe369e", "indicator--b8ea4a99-08df-4882-91d9-dba3ab839de9", "indicator--af5f20a7-4df0-46fd-956b-2d61815049c8", "indicator--25c73c99-2751-44aa-9a27-952ca0d7c8b3", "indicator--32a0360b-01f5-4b2e-aba1-8044f46a1d40", "indicator--d7009828-26aa-4377-9ce9-c92ffe6d3953", "indicator--69e83a1b-8fe2-47b3-b8df-2d66d4d51c43", "indicator--44c3f615-f0b2-4a01-ac82-b740ff368356", "indicator--7b861562-ccfe-4521-8ce7-375952f144a3", "indicator--d4f7b858-61d0-469f-82e5-7cbdaac14f36", "indicator--8911c8f4-c5aa-48bd-9cfc-e1b3e01dc097", "indicator--f3e13c37-fb47-4f13-88c2-ca66093123a3", "indicator--0b529f5b-1b83-4d5f-9bbc-48aa39e23806", "indicator--729c0216-db20-411b-a01c-167e1b9534d7", "indicator--6a5c4d1c-5d64-4ec2-a6d6-b01d9aaa2cb6", "indicator--4bb7426b-126c-42bd-9004-4554c0bb65ef", "indicator--091a0635-3e18-45ed-9c2b-23552145f705", "indicator--d51d40a7-eeea-4f36-96a8-25bdf10bd712", "indicator--ec70c627-d4db-456d-967b-c16b2d8dd3e6", "indicator--50246b23-9cc7-4b78-9542-db94fabf7df9", "indicator--b75886db-2a5d-4251-bd5b-437bf328f7de", "indicator--020797c1-aa63-4f1a-96aa-35427cbc4a53", "indicator--85757fad-7670-4a0a-9bab-f5d5805b4b43", "indicator--f4499356-794e-4cb1-ba31-4b3e533cd391", "indicator--4dd635fc-bf3e-47e2-b931-d409390c7548", "indicator--f2f30dea-6396-42dc-af27-1d7ae7d7c596", "indicator--fc220077-d3a8-4002-9a40-caa69269da59", "indicator--027f9376-bc93-4871-b6d2-92baff24c17a", "indicator--93005b5c-ecfc-4553-b0a5-4c2d314db40e", "indicator--7cfff605-5374-4d81-a83e-ab7ff0ec887e", "indicator--33282d3e-7775-41cf-9757-47a51fe6916a", "indicator--d24e9357-cf33-4810-a4d3-9f049ebfbb08", "indicator--0cd3544e-d66a-4c78-a12e-1527de8ae286", "indicator--f89d24f4-e6bd-4ebd-94f5-9fef4af367e7", "indicator--ddfb4771-ca07-4702-92dd-246c07846ba7", "indicator--12dbf542-1dbb-4dc2-a6dc-0fca86f86ef7", "indicator--23d86eb8-42cd-42f4-ad1a-d3fa1899595c", "indicator--aeeeac8b-8207-4f00-93c1-60a5eb0c7f44", "indicator--aa8a033f-5cd2-48cb-b79d-eb9a28262f95", "indicator--97e46630-3380-4bdf-a90c-1c7d68c419a4", "indicator--1b33a90e-6e24-4576-9401-dc784d667e6c", "indicator--a6bda900-1138-496d-8d0c-fb06c014d40e", "indicator--d5e06d4c-61dc-4c5f-a8d4-5d83253cdbfc", "indicator--e9981489-ab03-4232-b287-ee5a6d3679a2", "indicator--45441c9d-5121-46d8-8a8c-bf0c8d11dcf8", "indicator--e8989596-0f4b-440b-bc1b-820a5afa16e2", "indicator--c0e13e46-cd46-4fa6-8eb9-87cca31fb9b9", "indicator--b6fa2e63-0ff4-4780-bfdb-3d77745ef840", "indicator--90b5ce87-c577-4a4d-8c89-fa742ac6a6bc", "indicator--b3c0dc7e-2ed1-4340-89bb-3166342138c0", "indicator--ee902492-7d6b-416b-8ea4-98a3e85b8ec5", "indicator--1cea1f52-3f03-46bf-9caf-eebf42fa3d90", "indicator--5f6ba4a6-7d5f-43ea-b7e9-08b238288d1d", "indicator--851383e8-308f-4834-9209-1da6832a869d", "indicator--7d82fa5d-c04c-4681-a89c-5fb301da61eb", "indicator--9e6c509e-7a3c-4ac6-b82b-936457ba5d7c", "indicator--53f69169-e59f-4447-b871-ce891ef1eb0d", "indicator--8362e46c-c50b-44b1-b471-1dd1920d7082", "indicator--1ccc554c-8344-4975-b462-a0fb08eb1bd0", "indicator--4d2a81d7-6336-4de3-bc8f-6dcbb18d0f62", "indicator--ccef2e49-7590-4978-8b08-486e6eb78356", "indicator--d9ce1e69-e492-4fb8-bf6a-a91a0f77dcca", "indicator--420ae7d8-bf44-47c1-8928-c164ba4b396c", "indicator--7b30f666-a77b-4a37-b339-a5a0d979bc08", "indicator--de3bbe7b-14e0-488b-a019-1b583c2daa19", "indicator--d32eca3f-15f7-4b78-9d28-1446ace43c24", "indicator--60357839-3a97-4ac4-9355-30afddada14d", "indicator--28cb7e1d-9135-4dcf-bcf4-4cabe8785694", "indicator--7f71e6fd-cb0d-4adb-b544-3f9b7d3d4db8", "indicator--0f20d36c-18f1-4cfa-8bb0-ec23f3cce560", "indicator--407064cb-77ae-4847-9470-f14a417a5657", "indicator--39f51e32-7897-430d-bd83-50a17848e767", "indicator--ffc8f1e5-8a2d-489f-b402-91661a4077f1", "indicator--2e85ad7a-42ae-41fa-9b15-d63d79f49021", "indicator--ec7011a2-f5fa-4650-b664-2753581a7037", "indicator--91367411-fc19-47f2-addc-98fe3e6a5e99", "indicator--086262c0-8ac5-4623-803a-c9c6a72d967d", "indicator--1b6491c0-5d2c-47f1-a0ca-b66a98493260", "indicator--d188cbd8-d79d-496c-8a92-7b05a648d251", "indicator--3e37b283-9ecb-4040-8868-d441da64897d", "indicator--e3208299-3b15-4ea6-a8a0-d02ba23f0ef8", "indicator--319a91cb-a2c7-4a3b-ac91-63d288844833", "indicator--cd036e20-ad04-47dc-bbc5-b599a9ac87a5", "indicator--482ad0e3-7a87-46d7-9c6e-9d38df21f5e6", "indicator--ffe2099d-0d90-4609-8c5e-2b6b7c9cffd4", "indicator--c05a99f4-a31d-4e7d-a670-1c34a1542f95", "indicator--d12eaf85-19df-4f15-822e-9c2331867361", "indicator--bda2b630-def9-49ca-b697-15e810afa18a", "indicator--68f8cb7e-e749-4689-bae7-c783f782a3cc", "indicator--f96770cd-0436-44c7-8f05-b50446990125", "indicator--770202cb-da41-44aa-9b85-83634613e7e3", "indicator--d128a6b0-5f22-48aa-bce6-44bab2f9ea53", "indicator--3dbb815f-9b3e-478a-944a-07275777b7ce", "indicator--05e85200-d11b-41e6-a6dc-82a495fc6ffa", "indicator--758e3ae2-b95c-464a-b97a-9dec6924f41b", "indicator--d61e3c15-04b2-41af-a196-ab8723412eea", "indicator--33ba11ea-9f41-4b07-bc93-60077dbf641a", "indicator--ee5913dd-e199-4d2b-ba0c-1c032a3b44a7", "indicator--007df997-f8fd-4c6f-8fc6-7588b6376282", "indicator--fc3c17a6-764a-45f6-9834-97a44703da07", "indicator--fc5d347f-a014-4a28-ae7a-ec6b0ccd1e35", "indicator--0220e664-fba2-4348-a7d7-f786af5cdcce", "indicator--5783b3f2-746c-4ca5-a194-2ca2054a2c99", "indicator--1271c4e2-ba0e-4cc2-a3c6-60b5362f5125", "indicator--bb03bb31-3a2f-4751-baa9-c681e8f61fcc", "indicator--b521ec39-64cd-487f-9d3e-b519157bdcee", "indicator--716441ad-71ce-4762-87e0-a029bd937eea", "indicator--fd1894b9-9481-4554-824b-c96c8fc9cd0d", "indicator--d1c51ecf-5a08-4d98-8425-5bec2184c502", "indicator--ca224f06-21b4-447f-b477-2041bebc6ea5", "indicator--831a601c-75d8-4c70-8126-b2cee02af786", "indicator--877645ac-a92c-4672-89f3-503bbab00bd8", "indicator--f3efe72b-0447-45da-bb32-e87ed8c5baab", "indicator--8b11a5f3-3153-4876-bbc5-61093bd09473", "indicator--c644101b-b963-45bd-a9ed-84ff80974cc9", "indicator--c01365df-08f3-4524-aa75-25a214d8a47d", "indicator--f8534b0d-b17f-4c1d-8e1f-4a08365ee233", "indicator--ed7e70c5-01a7-423d-bd9c-21e6a7e6fb3f", "indicator--3491b782-fee1-431b-a84d-da090bdd11a3", "indicator--2aba944d-ffd3-4e62-b9dc-223bba0e3ae7", "indicator--4d2b8d48-0e60-4e47-8218-9656057405e3", "indicator--8766320d-1e96-46e6-b2d9-46e7d2611a6b", "indicator--e679bd7e-facf-411b-bf84-e1b92ef3ec50", "indicator--cca8f48f-ad5c-4856-b1be-e118ccfe5ba2", "indicator--0f236a82-53bd-4eb6-8b94-e879ddb5d818", "indicator--334c3b07-6c9f-4a9d-af84-42af45382e22", "indicator--9e2f0af2-1866-48ee-8bf8-b8f667d81ede", "indicator--f378e17e-c68c-4cfa-ac6b-dc02c114b988", "indicator--bd84e14b-1c29-4319-ab47-cbdd93c9d068", "indicator--a957eed8-97c4-4ef6-9c0e-eef9f17c4e22", "indicator--93dc8aff-9d2d-49e8-a606-c64b7bdc4a14", "indicator--4206870e-8bd7-4302-b0f4-c37d058a2b64", "indicator--c65edff9-da55-4eb8-bbc9-7c62ffba6423", "indicator--1e38cc46-a62a-489e-9a11-69b041793cc9", "indicator--ca22a8f5-d6ce-43c0-b867-fdb487f59bb1", "indicator--b2adeb32-33ec-4c93-8a0a-fd6c8847002a", "indicator--6ca67806-c995-4c8d-82a4-0ad54688f78c", "indicator--c11da2ad-58af-4cdf-8dcb-cee81d701c94", "indicator--9c9d9f5e-a12f-48e5-9872-ff3b21a2ba33", "indicator--4cdf4aec-8150-4086-99a7-4aa3af889bb9", "indicator--eb74ab4e-db9e-4d6c-b1e0-002d7938013b", "indicator--bf8cf325-45be-47fc-91e1-db64018b55b9", "indicator--176c2adb-a7d0-48c5-87ec-d87319a9c3d5", "indicator--c8394c2f-4869-4f31-8888-78c48b701051", "indicator--e1eaa31c-2260-43fe-be04-56b5ea8bc70b", "indicator--49d47c46-022f-42ff-b7a9-441cc3a7ba63", "indicator--6baf0f17-ecf7-43d8-acfc-e07a0083e4f3", "indicator--5bd96629-952d-44fc-b230-cf878964abd8", "indicator--179ac0a0-f795-4b0a-9cdf-b22a5bc06b81", "indicator--60122c75-f509-4469-9a16-c32ab48ea7d0", "indicator--97f21bfb-cad8-44cf-a291-313bc188c6b6", "indicator--7810c0a3-d026-4b54-aa66-765747a68ab0", "indicator--7d4a4086-b50b-4a79-be85-4e4cea31c0f1", "indicator--e25441b2-631f-4eca-886f-e232859e0955", "indicator--497af48c-2c9a-47ef-9c17-018e187b959b", "indicator--1890e738-3c4e-4b38-8694-7b1ab104bda0", "indicator--f08e2976-a41c-4ef8-b55b-f6724c2009e3", "indicator--5fb1bf78-13f4-4fce-80da-76c3ecb9a9ec", "indicator--d482053c-6099-4a31-85f9-4b32821304da", "indicator--06cf3fcb-c7a3-4a51-958a-3b3602fe859e", "indicator--f3a6ba28-eed9-4fe2-aeb2-d2b9302c3adf", "indicator--d2e44338-713d-47da-969a-97e0a0ee7f19", "indicator--4b6c729a-934b-40e5-b59a-a7460a59a4bf", "indicator--2cd1b820-fe9f-47b8-8ece-146dafd0bc79", "indicator--330ed1ba-61a0-467d-b4c5-f3e9e936fd55", "indicator--f88023d4-c494-4813-9cf3-3c862c1a6988", "indicator--aef391f9-f15f-4ed2-8c0d-eff73d85331a", "indicator--421ea4f0-0a7b-4c9e-848f-7bd30fee5f85", "indicator--a6fecdfe-4839-454d-9d35-cfa15b082888", "indicator--02f2fa65-2d50-4739-8293-caa4ce43c1c0", "indicator--3cb9dfb5-a7be-40fb-b4fb-4427b9398054", "indicator--d49a95f2-4639-40aa-83fa-e926be9d81de", "indicator--ea261200-d351-4974-b3b4-6efc64fd7fcc", "indicator--b434ccc3-661d-454b-ba94-7513c1903a36", "indicator--18e25369-b250-40ab-ad6f-9ae81593abcd", "indicator--1879f5ab-dbfd-4e2f-bc3a-0716b215aeba", "indicator--1d3de552-aea4-4582-830e-9a0e65e0e8b9", "indicator--9c372d23-42fc-4c2d-b496-d7cbddfce2aa", "indicator--5107f474-87d2-4c74-b008-4107b189899e", "indicator--e646ba50-a39b-45df-80d2-f59cd2b6bd4d", "indicator--77aac6ed-e03a-43c6-be0d-da04bc3dc558", "indicator--940a1ef3-abb9-49c0-8dd1-913874a7448f", "indicator--8d9efa4f-89dc-4949-a4c3-f3a794da8861", "indicator--5b10f366-e44c-4957-85bf-779aa7541c3b", "indicator--0252cb3a-9377-4938-b725-e0c31bcdf922", "indicator--0511df19-5016-45f5-bdef-eac25f939db9", "indicator--d0659e04-e586-45d7-aa5b-ddbcb325a484", "indicator--dbdb899d-c4ac-4f95-bf05-478977ffdd3e", "indicator--9419883f-b2e9-400e-b048-131aa476aa44", "indicator--2fb7258a-08e6-409d-a471-f9906df2e530", "indicator--9c06bfb4-593f-40ad-a993-8aea64e1524b", "indicator--9ad7d41e-2234-49f4-bfca-f48e7b9882fa", "indicator--ff2de8c5-00f8-45fb-b8be-ec745f6f2a18", "indicator--6dab2933-f94a-469e-a9f7-45b251408bf3", "indicator--618b14da-ed20-41cf-835b-4c36ddeafe11", "indicator--3635ea30-0715-4a83-a938-2542240544c8", "indicator--a3b1cdb0-77f5-480c-a1c7-fddcda18f201", "indicator--b921c7b4-737a-4390-a52f-1da9551a3250", "indicator--67244aff-17d1-4cfa-8fe9-552e7171a706", "indicator--7cf0e983-8c09-4e67-8f6b-8e8334005faa", "indicator--eb45a5a4-591a-45f8-863a-3b41fbe62672", "indicator--9e4d5a54-f516-4343-b528-6bdaf0bc2362", "indicator--b795b7d5-a100-4730-ab44-bd54fb9b13ee", "indicator--59e7c818-2283-44d2-8783-57a2c53d6498", "indicator--d4dd6226-f2b1-4384-bfad-3d6e97166c76", "indicator--f1c8505e-c8a8-45ad-8ce5-e5c8d09062b7", "indicator--5e60a791-79b5-411a-ab96-fdd3142773c6", "indicator--2ca9dbe3-371d-4d8b-8f43-c247c47a6afe", "indicator--853dff32-538c-44e8-a9f1-d0e5a284107f", "indicator--0f17b7e1-6505-4f50-bc1c-b6efa6362f24", "indicator--f86e50bf-2893-44a2-834b-6e49d8f1b190", "indicator--d7b4a2d4-aba8-45fa-9d00-ec9cdb0d1cbe", "indicator--1b7c97c8-2ff7-4d32-83ed-9da030f6c239", "indicator--9dd0406b-ff5a-4e41-95d7-4e8cf02fe75f", "indicator--92771302-442e-4b09-932d-9d5d8979ab24", "indicator--0be2c10f-2d50-42c3-9c7f-03d6d661f976", "indicator--3a995d76-dcf2-4fd2-b7d4-3ed6a7ca8bc9", "indicator--10da5274-64bd-41e2-bbd0-396ecb6aae3a", "indicator--4d737726-1517-4e48-b8b4-d7e48e50b020", "indicator--0a5eb3a7-e9ec-4932-906b-775843830e20", "indicator--040dc496-affc-4d7f-a940-9cf4aa903b03", "indicator--984b5221-8ac4-4fc0-9113-39bb022e171f", "indicator--cbfc4b14-ff49-4055-a047-5c3c7b50c139", "indicator--04b87d94-141e-4994-8ce4-53ae3f63cbb9", "indicator--cb58d674-1645-4475-bfcc-ec564306863c", "indicator--15595b81-c763-48b4-ac2a-b0d1bae8725c", "indicator--0b830f65-3d38-4ac4-affa-7fe9fdd69459", "indicator--42d4edb8-2534-40cd-b099-6b9b90aedd0a", "indicator--8d6ebdb9-c809-45c6-b265-16f689355930", "indicator--90537b56-c7d5-473c-b9bf-7fda288c1e56", "indicator--4fbafad7-cb56-4cdc-894c-90ea9270ebdb", "indicator--cd20414a-15bd-4467-aa6c-e95751678290", "indicator--be3b5a5a-c7ea-4b12-aa3f-7f929bb7e775", "indicator--85761858-1510-4744-8021-f4297d92e399", "indicator--4cc49c97-99f9-4f5e-a91c-baf8f8cb8737", "indicator--a5b84b76-f861-4687-a375-10f59d79baef", "indicator--2fdd8b7b-c751-4c16-9519-302491ca5146", "indicator--93d4841a-5400-4b49-882c-e472bb4e1305", "indicator--6af8ef66-3a04-44ac-a200-bd62c41fdf55", "indicator--a6d840a3-0328-4f6e-b27c-abfb145a0211", "indicator--45524316-2f3d-4011-bfc6-59b94eb7fbfe", "indicator--0e86b72a-0a31-40c2-80cd-9f868eda731d", "indicator--8cab606a-3eaf-4f38-b9a0-82e9c9807c68", "indicator--59c49d97-d620-4ffc-a7c3-2891237690d9", "indicator--50bc2c40-5056-43f4-85e7-fbd96963a1b5", "indicator--885196ba-88e0-446d-8c9c-38df23f00c2f", "indicator--7499be78-5ce9-4a7f-9b0b-112fb477bc8e", "indicator--158eea5d-9073-4b6f-97ed-34acb9ab2dfd", "indicator--9f10d52b-4de2-4e76-978f-705d9ae40533", "indicator--05335b95-41ac-43b6-8390-9752635da4e1", "indicator--472ee7a6-1f70-479d-a550-ab37ebb45f6c", "indicator--00b64bee-d794-4965-b146-37c7b1ffa734", "indicator--dddb78b3-8cc8-4802-bd82-f505b01466f8", "indicator--3777ab9a-6da7-484a-941d-e7d14ce4c0c6", "indicator--da401994-4c87-48b4-a834-e0598ff1a620", "indicator--99ef3744-cd33-468c-ac01-dd10ac4f59e1", "indicator--4f5f0f3f-7159-4cdf-8bd4-6972c65a2098", "indicator--3cab4b01-a6de-4aa5-98d4-3cb6f99f13f3", "indicator--a6373a8c-716c-431b-a8e4-567f259af75b", "indicator--931da62c-67d4-41fb-8389-622eb8e90e46", "indicator--da0e6ea3-bad5-45dc-a675-729795c1f6ed", "indicator--c2e83948-3a7e-4ea7-8716-29e3af9b4da6", "indicator--6855f864-fed7-483e-ab9e-4ea0f83f1801", "indicator--bc5a48ac-5b63-4d1b-83d1-e69dbe6d306e", "indicator--1dffadd5-44a8-4cf5-8df4-f35a7cb55243", "indicator--f8e24662-e1cd-4ac6-a6bc-fd279081a42e", "indicator--7463a4cc-b765-4dae-b771-b581932468de", "indicator--81e7d4d1-ef3d-4d3e-8dfe-3c6276312202", "indicator--3f03c56f-5dbb-4fc8-8bb4-a90f6dcfc45b", "indicator--69d0c53f-82c6-4f07-b180-44cb285a0e88", "indicator--4c7b0118-fe80-4c57-bb6f-b0748932a20d", "indicator--3079a548-1f13-445a-b8a5-e54642b3d412", "indicator--4d300109-a965-48b5-8033-f968de06543c", "indicator--fbb9f58d-c2b5-4be7-91ff-be768fc0baff", "indicator--83552995-59b1-48f0-a7b1-8cf5881b4690", "indicator--821b3ed2-d876-437f-8920-3edc0bb5fc0c", "indicator--315a6b57-3b80-4976-9a29-2e42b94cc97d", "indicator--7cb2d9f5-4167-43a2-9225-6c5ab533e910", "indicator--208d0027-7d84-4778-9bc4-074331a758a0", "indicator--1d4da2cd-27a8-43bf-ada1-77d25c79cd94", "indicator--2dede9c8-ba25-4059-9efe-31c661283259", "indicator--fb407b1d-f04b-4e11-906e-21c032cae6c3", "indicator--72c089fd-1f9f-4ee9-8a50-bd4dcc92c9ef", "indicator--b6dbd5fd-be16-4250-bc09-1d9431cb6525", "indicator--b77f7121-5321-4c68-8e0a-eaff6f95095e", "indicator--fe59f859-2dac-46d6-9f94-e2ea2240de21", "indicator--28a734e2-65af-4329-b5e5-7489aa0f8955", "indicator--c0b6b870-222e-4179-bc35-2bd158c155ab", "indicator--ad69de4c-c78c-4ca9-ba9f-b447b16541bb", "indicator--4d61f122-2f50-41c9-bbf8-b8ac562e7c3f", "indicator--92299319-05bb-41a7-9737-2f26d43bdd27", "indicator--4947dd5b-91ca-44df-a58f-b0fc9f56f451", "indicator--b2cdb053-fbaf-4698-b061-cb792c4d8c28", "indicator--5837b6dd-b330-48b2-872f-46ad597713ee", "indicator--a8f8c12d-99c4-406f-bd8d-52a00aea2be0", "indicator--bd6013c9-a739-4103-9c94-bda816ab0ea7", "indicator--63504bf3-58a2-4f0c-97b2-5b9472c29a1d", "indicator--f060e3ff-d847-4bb4-b260-b9322d06350a", "indicator--47486e91-d0f9-46a8-aab5-1ef290033c3d", "indicator--471af187-9e85-45dc-b621-ccff0a92b0d5", "indicator--5cdd7877-c5d9-4cbb-8798-14e7cad2ae97", "indicator--35a8149e-816c-47df-a6e7-17ccc0a8002b", "indicator--61c19b6d-d13a-4ea9-aced-0fc742749144", "indicator--32974b91-e2fd-4c31-81c4-23670aa282db", "indicator--00580a82-8d92-4763-b1df-8ec9f641aee0", "indicator--89c46504-8a70-4454-8adb-a72c9b6b8435", "indicator--5785922e-7241-4cec-841f-16cbd0d6cc48", "indicator--b2cd11a1-1885-4614-9a70-c62d9775a5d8", "indicator--3383a90c-6637-4ca4-9e5c-1862eb6a9a52", "indicator--6ce6332b-07b6-4467-bb6d-64c35527e978", "indicator--3f3379d0-dec1-4270-ab6c-d5cfe0863480", "indicator--991fd376-d819-4ac2-be60-3e9e059df3ce", "indicator--f9100f2e-ce87-4d3b-a7bd-4bae19877c50", "indicator--8a2294e0-f3f6-4f81-8d64-628183c83858", "indicator--622b5c4a-4a21-4444-830b-c54939c5a554", "indicator--fa454b38-4253-4dd6-9a45-bd3aead2d8d5", "indicator--12d2598e-1405-41dc-99a2-d43d2c2e7f32", "indicator--aa1610da-1605-44e1-b0ef-f41de783cc9e", "indicator--408da772-2563-458c-96ab-2f1cf01fdb7f", "indicator--c048fb05-4c7a-41ec-9cef-ca2bd33dbe74", "indicator--a1521387-da98-4f6b-a532-87023b52e0f1", "indicator--277b4c90-b72d-4754-853c-7866123ff9f5", "indicator--eba37c5a-9543-49eb-8774-a4ca7250ffa0", "indicator--544a42fa-c2df-4b09-a16b-f5ff7f1841b5", "indicator--70456fc0-6b24-4e33-a427-ffff4199e3c6", "indicator--44f753b0-5d7e-4410-baae-b07bc50b150d", "indicator--90f1a757-6063-4db6-a9d7-7df9a0eea906", "indicator--4cfbae51-cf62-4148-abdc-c9e5cc35c0e7", "indicator--9eda05d7-ab20-44e7-a318-66d0b80d6730", "indicator--68298daa-0633-48e4-b06d-c534cf232746", "indicator--1ad8312c-5780-4839-8992-3355b84984a2", "indicator--2dce9cf8-2295-4d43-94ca-bf4aa3ed60ae", "indicator--505710e1-d2ad-4605-85db-166c889c5be3", "indicator--2694db28-ef9c-49d3-8f71-3b19905b6a56", "indicator--c1049eea-cfed-4986-9a58-6e1a5ae75373", "indicator--a910611b-7ecf-4e1c-97a9-d40d7f1c7933", "indicator--f0047835-77d3-4c75-aefe-cd3d5905120c", "indicator--9fafbd3f-9312-4fac-b21a-3d633c318062", "indicator--52be97ec-23a0-4380-bbb2-8c2ea6beb31f", "indicator--2d23f257-cf6e-4aa5-925c-6f4e66cef084", "indicator--1b732605-61a4-4b7a-955f-bcc656fac7b9", "indicator--f45fc1d6-90bd-47a1-a614-27194c3aac88", "indicator--e19b025f-0a44-480a-87be-cebae4875912", "indicator--d20596f6-238b-420c-b526-4c5e5616eab0", "indicator--010ac752-44fb-4d82-b2a5-79d7be5a40b5", "indicator--a31a2854-bded-41b1-858f-99cbfe355402", "indicator--46648ad4-bd56-4b81-a444-5ac5d90e45a4", "indicator--c183b9cc-2de8-4339-b3e0-6d95072ad6d4", "indicator--54f92fa9-e172-40dc-a1c1-118859bd667e", "indicator--c52bbbc8-c926-4bae-bd48-2f84d8609dad", "indicator--5f1cc8d7-673d-41ff-a564-5132bfbd2e23", "indicator--11ce1f53-b093-430e-9a1f-d67c7c74b837", "indicator--75337d9c-b87f-4861-a776-46978f1cfd9d", "indicator--b92447bf-e20b-4e8f-b1d9-090ac03616be", "indicator--b680cc49-84a5-4036-a5d8-fe8e991111e5", "indicator--d4a2cc12-a2fb-475e-9f81-cf4ee2ee989b", "indicator--fa9341b5-5509-4d95-b46b-212e9b94be45", "indicator--2e3f63b2-4758-45d6-9def-27b08a22d223", "indicator--3ee18de7-9cd2-4f31-a8ac-181553df952b", "indicator--8b4b1e87-878a-4374-bf8b-85e718a194c9", "indicator--8ba8c4fb-d955-4eb5-bf08-a403c2e74891", "indicator--47d6b3c9-fdfa-4fae-881e-7755213e0408", "indicator--29042d65-72f6-4a81-baae-0ff3dbf1a7e3", "indicator--b8636592-9d11-4853-835e-13ca16dee4d3", "indicator--6ba98ede-9eef-4d3c-8d9b-7acd8d9cda62", "indicator--5a6d7eb5-e12f-49b3-8090-74be8ee4df27", "indicator--e5fbb9c0-8161-4d85-a7a4-3da679a20baf", "indicator--021cfa18-19a2-40a1-875c-7346ee031077", "indicator--b9694de8-ad39-4fdd-8119-1ad536d68a3b", "indicator--a57e0204-1b9a-4314-a814-55e6c476b2bc", "indicator--bc577ea7-8638-4b02-a123-194a907f654a", "indicator--dce28e7d-386d-402d-beac-8a4c993fc6d1", "indicator--3ec2c996-89c5-47c7-b099-a716268dad88", "indicator--d9b2254c-c90e-4e57-b8aa-e14108427a4e", "indicator--7bbfeb79-bebc-44d7-bf41-7155c2947ff8", "indicator--c160d6dd-e992-4a84-83c8-fc39863382e6", "indicator--a3cf1793-e85b-4a15-bc76-90e526fd8297", "indicator--324f2f00-4ff2-40cb-8b3a-be6beba65014", "indicator--0e7c1bed-5e1f-4204-90ce-6dd603bbd536", "indicator--d20e5a33-1635-4870-b9de-4634ca77feba", "indicator--546a5bd8-de35-42fa-b4fb-ed7db79c10e8", "indicator--8a51598d-5e33-4540-9052-c09ca733bf72", "indicator--85078012-a207-4f6f-a846-2b13f9aeec48", "indicator--b2251cd6-1ff6-4080-ac31-005085ac9dac", "indicator--a1c5bc72-2a3f-48e2-bea8-830af9fed7a0", "indicator--46afadf8-6553-4400-8eb3-c8fd42145a5f", "indicator--347d29ef-06bc-4f30-86be-a999bf6f9e99", "indicator--06668e31-3714-484b-9229-85890706f477", "indicator--addd09ee-2da0-496f-97b5-e1e73809d9be", "indicator--81df274f-a133-4068-99d3-d4b30c2a849d", "indicator--5557854c-d43f-4785-8ff9-992a3d40954a", "indicator--07361a7a-3cbf-4ac5-aba6-175b298cfc5a", "indicator--b6a31e3b-d865-4793-88a6-24e1ff80446b", "indicator--9a016ea4-7e01-4221-bff3-d27389586d48", "indicator--90912754-cc8c-4788-a919-1dfdeaae61fa", "indicator--bf3c210a-0548-457f-a3bf-b33661f0c7aa", "indicator--2740c68b-d241-479a-b8b7-b270897fe7f8", "indicator--964a479b-7f74-4e97-9092-033b03bcce74", "indicator--43b1fccf-584a-4aa8-93a6-04b7e9f18391", "indicator--df577e2e-e91c-47fd-b5f7-d3953748fdc8", "indicator--005378de-b0c8-4a22-b34e-061dab196952", "indicator--3ab1c69d-09a5-454b-b964-11e53c77d710", "indicator--aee32547-cc59-4f69-a06a-754e625d1055", "indicator--c7563715-2850-493a-9664-57008210b6ac", "indicator--624dd778-45b7-4e7c-a3d6-b3b7709408ff", "indicator--82f47b2b-5ebf-475a-b373-a1c207562f61", "indicator--148bba2d-bd31-428d-9d58-a0ac28021d25", "indicator--024f616b-60d5-473f-9595-6f3b04b4c76e", "indicator--c1d109e2-96b6-455a-b816-bd9fd43282d4", "indicator--bbc55b13-505f-4d63-96b6-5cea6449ce6f", "indicator--f27692e6-54dd-4449-a407-d284d0707ab5", "indicator--565a7e5b-4034-44b1-892d-bb25edf1a523", "indicator--5d8f3628-fd70-42a2-807d-1f488348b044", "indicator--46fd697a-1cd5-4829-99bb-5fc1f9999445", "indicator--9d82b570-cce1-49ba-8c80-37e0ae9a8a54", "indicator--5c95d1a6-93e3-454d-9fe8-c950373c15af", "indicator--3dfe5a82-9645-4932-8143-c707db4687cf", "indicator--2ec28046-85d9-4ba9-afe8-3602e9e7f624", "indicator--b3cc25e0-e78f-446e-8735-cfa1300127b6", "indicator--b4510f0d-ff2b-4fbe-9b51-9b31f149a260", "indicator--b51fa48f-0d5b-4255-9236-e9cf068cfcf4", "indicator--b3d3d370-8715-4a7b-93a1-3071ba6c78d6", "indicator--d8be0cd5-343b-45c3-8f42-aed8ea7bb5ad", "indicator--747370ce-3e48-405e-8349-6a03431c7cbf", "indicator--602c990f-5d7c-4a2c-8f48-88bd51211f68", "indicator--72b55641-9fbe-4358-bbc6-8e7bad15ac1d", "indicator--90dab538-f0b3-4cee-8893-b8d8ae8a8bf9", "indicator--de19c0d2-d301-4980-b8db-113a2a83ef88", "indicator--ed0f2e1d-ae2a-4de3-be87-d0670d3c8493", "indicator--60ef52ce-b1ce-4935-bafc-2acbe19e96f3", "indicator--323e5ec3-1002-4ec1-aec7-c11131e96e2a", "indicator--e096b2d9-d3f5-4476-918a-9c05acff46cc", "indicator--33aaf03c-b5e9-4e33-97b8-41b891d7ebdc", "indicator--083b6c88-e221-4fe5-a19b-1f998ce9d05e", "indicator--1a94b59f-a711-45a7-834f-1b9467ea985c", "indicator--8f5b4064-fb6d-4f6b-afcc-fcac959495a8", "indicator--91b49911-bd5b-4325-9f9b-cb2748571a9f", "indicator--cdef99f5-ee21-4514-b0fb-f3c4338ae20c", "indicator--316bfe7c-244a-493b-9de0-6141949b69a7", "indicator--f6d8bfb6-80fc-4ae3-8704-f759b8985549", "indicator--7d3ec9d8-2c96-456b-b9af-8704fe1b7c6b", "indicator--68bbbb6f-2022-4a5d-ae87-8bd08d1e767e", "indicator--edd173a2-ec2d-4816-8f0b-9812816ab491", "indicator--ee82f504-8ac9-4197-9df7-404d4c52d245", "indicator--116c53e8-3507-43e4-8742-0852df1dfd1f", "indicator--682c6908-d12d-44b4-b810-99f3b3b6a916", "indicator--f340ac0b-80d4-4dec-b910-ea607eb49303", "indicator--700cc31e-9ab5-45f6-87dc-12151426465a", "indicator--1e8b18ed-c294-482d-b414-e560c01bd0b0", "indicator--b06daae7-c4ca-4e99-bc2d-cfff7b767101", "indicator--49ef05d2-0959-41b0-a3ac-21bd036de785", "indicator--406c9965-79e0-4dce-b39c-6af647995f4c", "indicator--31713a79-49a5-434d-8866-e6edb7ebd533", "indicator--d11fbac7-4f18-4377-a71c-84d128f65f63", "indicator--6d6427ee-d853-4283-9fa4-5471ebdcc77b", "indicator--21c992a5-551d-458b-a2ac-202b069d9942", "indicator--415d56a3-d259-4a8f-943e-fbb9796cc014", "indicator--5e1e2566-9816-45c3-a3c3-f8bbc2226bf7", "indicator--44450793-676d-4174-bc8c-ed9889b4396e", "indicator--e9542e0b-413b-4ca9-9106-bc7cdf462d38", "indicator--055d3149-a4a2-46d9-a1ff-db9fd329b680", "indicator--7e869107-769f-411f-aa62-744165881293", "indicator--629bdabd-a988-4a5b-a1b3-39600a1b1307", "indicator--5b097e60-a5ab-436a-bf7d-8e8405a1b0a1", "indicator--669242e8-0102-42b0-954d-e09d79f82954", "indicator--8285c2ae-d671-49cd-94cc-768fc3fc6591", "indicator--2776e4c0-8bf3-42ac-87a3-85a5758cc675", "indicator--2bfcdf67-c5e6-4fc8-b45d-4e8df4228dcf", "indicator--8a684b99-8425-4be9-ac37-f71370df797d", "indicator--c362dfa9-5747-4db7-aec4-7b033638caea", "indicator--16c105ea-7420-4349-97e7-1d5d10556e4a", "indicator--f987568c-34b4-47ef-bec7-06250d92624d", "indicator--073af6f3-2243-4679-96dd-2b5b637e39be", "indicator--3407d781-f158-45d0-ba4e-12fbd1c5af95", "indicator--11aab9cf-3445-47fc-a0c5-938c87ccd8ca", "indicator--443d263e-b208-44ab-87a4-fc03bbcf32e1", "indicator--4c3ec6c7-425b-452f-a286-b861bb6c3137", "indicator--cdc3d856-36ca-442c-bbcb-da101cc85c8d", "indicator--620ce47d-de15-4a6b-86e1-4b7f887b6df0", "indicator--147c7391-9dde-46cc-99fe-7088ff5e4375", "indicator--a19931c1-5552-4c84-98b0-f2e3f795f248", "indicator--13c847a6-5828-42f0-aaf4-279952f537b6", "indicator--ffeb8a8e-252a-4db2-a26b-f295ee1a9d8d", "indicator--f386e58e-d853-4fc3-8f5c-549a969b06d5", "indicator--c47ce06e-b792-48d8-a466-4888af82a0f9", "indicator--44900aa4-b28d-4385-b31d-43b4ee825dc7", "indicator--f4c39874-578d-4d34-aef7-d7a73fcdd74e", "indicator--dabc9bc7-e2fa-4771-94a0-6e3db27a8963", "indicator--87287416-8668-4d5c-908e-14fa7b46e5df", "indicator--2f487111-2087-474e-b630-019c2910257e", "indicator--4ba73ee4-5739-4cac-8d55-dba0ce309b67", "indicator--c5e05d79-f267-4689-a07c-f669720758f3", "indicator--de2ebe3f-45e9-40c2-b5c0-6611b02750ba", "indicator--c206ba86-3230-41d8-9cb9-4523f062d43d", "indicator--564a9397-ea7c-4833-bb48-de1bb7fe6882", "indicator--ce9343e2-1132-4f65-b3c3-1f9c611e6900", "indicator--b0c71c74-6d9f-480a-91a8-a603a2c626c6", "indicator--66cc0f75-0573-49f1-a8eb-faa5652cc4da", "indicator--690d1177-612a-4beb-a370-89b8d4dd7c85", "indicator--861ab439-6cbe-4b89-81b6-4165552651ec", "indicator--8903aaf0-1894-4fea-b9ec-a1602b18c789", "indicator--b19cea19-83a2-4fe0-81d5-334f10ed00d2", "indicator--2b59ac6f-3273-44b8-8aa7-d7c1a27c8d80", "indicator--a0f0bb3f-9057-4077-8b5e-9e2573b740bd", "indicator--abca9c84-c18f-4e4f-b646-1f7fd50b487b", "indicator--15d19170-a9ea-4d3f-bbcb-6b7e1deb80f0", "indicator--29f1324c-b5c5-41f7-99cc-52997d92b694", "indicator--c703a63c-784c-4258-b76b-73f66ead9064", "indicator--e5dd78ea-17f9-4613-9ce9-98b83fdcbda7", "indicator--65fa3d48-e6b2-4590-ac9c-a3fb39424a43", "indicator--f2510c0b-6776-48e9-ad29-3c66cb57642a", "indicator--54037ece-659b-4d68-9ab6-98c83335d45f", "indicator--91213522-a2c0-4694-ac73-fab947222230", "indicator--808e3d11-0b34-469f-89c1-b22cdb74757b", "indicator--07dfb651-353c-4fd7-be9d-adaf820b4191", "indicator--1145ebc2-9f76-4514-a42a-5bc923d6efd1", "indicator--d3b73200-da50-442e-b349-e15fca0ad544", "indicator--2a379001-176f-4536-b5f7-5537978b8ef9", "indicator--a06347f6-c3a6-44d5-98a6-a0a65b55691a", "indicator--d0d38b9d-1137-4b86-9b31-588604c355b4", "indicator--1e4c61c1-df26-4527-b77c-2ed7ce2408ca", "indicator--94ea9623-c5cb-4b8b-98d7-80e322269d6a", "indicator--b842b30d-3e56-41c6-9a3c-ccebcfb7ed3d", "indicator--1fe5486a-af46-4f30-a44a-545e11e397de", "indicator--d991eccd-3c8a-44a5-bfe0-7e968ebc8e66", "indicator--2cd216fa-217c-4ec2-8b80-b74f3987d669", "indicator--2ceb8696-36f6-4666-9761-960d1752caa6", "indicator--1fe4eb8b-aee7-4382-a526-d4156060c936", "indicator--7b8e534c-2cc5-4d91-9f7a-8107e5f32ea4", "indicator--585695f2-6e7c-4cdd-97b5-3ddcd9e4df90", "indicator--043c11a1-2891-4132-b297-09f422832aee", "indicator--27352a30-67a4-41d5-85a0-65b66e3631a4", "indicator--6bb5c191-8db4-485d-8a1a-686418bc4ea7", "indicator--289064b7-db5a-4c5d-99d0-ed75db548dc2", "indicator--49709711-c534-4a21-bd49-4523656da4c8", "indicator--ef462865-d383-4366-b007-786779569aeb", "indicator--a474de56-739f-45dc-9c67-3c69d43ff6d7", "indicator--2683ee5c-6a11-476a-be13-5d0da9102e87", "indicator--513992b6-2cf3-4861-a383-eebbd302b60c", "indicator--2909db11-2a64-4605-a287-08271ed86e3d", "indicator--2a6cc565-ce04-4463-9991-4189a16fbf25", "indicator--5395ed8f-40d6-4f08-8c8c-40cb0a83bf65", "indicator--2b06a764-1a3b-4a92-bae6-e1886677dd2f", "indicator--0624271c-73c9-49d7-95fa-32cc89d25f15", "indicator--35b4c592-0ffc-4f82-bb32-4699580c6c12", "indicator--869b75e7-e012-4510-9e8f-9ea0c79b792a", "indicator--a34158ad-86de-477d-b0ec-d8e52c21bb9d", "indicator--95bbd91a-2ec1-49f3-95db-f82b2b20780a", "indicator--be407116-bac7-4aaa-8469-72fad75cc24f", "indicator--ef84ca49-ce6a-4b88-9db1-8b50bcf9b2a2", "indicator--1dc9b1ee-565a-44ac-9d71-20dec3d93421", "indicator--bc90f272-51ab-4b55-8be6-b64ff8a7b551", "indicator--1273ec16-9859-4d3e-b8cd-76afaa41167b", "indicator--f0db9c5a-a11f-45ee-8d7b-3dcf16d7e97c", "indicator--18b43a73-8e9d-42a4-89b8-140cbb1de054", "indicator--a06e9f97-6511-4fc3-9799-3220db217506", "indicator--01a35ad3-eb7b-4341-a676-1b0cb502f276", "indicator--29fca26f-3be5-4c18-8ba1-b203ae088d6b", "indicator--f9ab75de-385b-4f99-98bf-79bdcde9c67e", "indicator--764ee37a-edfa-4ea1-be31-37a1726c4d3c", "indicator--d7e6df9a-6f7d-4056-8c5a-957864a9139f", "indicator--29bd29f9-c6b9-4541-a752-6371193d0f29", "indicator--f520268c-91ac-4841-b4c2-7ec6043febc2", "indicator--7209ebb9-6ea6-493a-b742-17adddcb04f4", "indicator--c8fd3da1-0f25-4113-ad4f-6428dd958d7e", "indicator--556b8d48-88c6-4ec2-bb61-a9286790dfc1", "indicator--a9e1227a-ca75-4277-b522-43a9459aa638", "indicator--cefdffb9-0da3-4df7-906b-45324e6f444e", "indicator--7fd00388-2ccc-4a8c-a39f-4f78cf5d0e3b", "indicator--78c6a905-c43c-4395-8445-ba894adb25d3", "indicator--96693ba3-c2c5-4e4c-9deb-66f66ab8363c", "indicator--1a25b53c-8113-45fe-a2cd-37d1c04febf9", "indicator--1296730a-a941-4c7b-83de-8509b4c96867", "indicator--7097cebd-e38a-4371-88f0-71f653f64400", "indicator--1d181233-2b0b-4640-9c98-fc81cd7c1edc", "indicator--aad0bca2-0762-4304-a249-f2a59398758a", "indicator--d4c7e75f-e92d-4a93-bc6e-32ac5e8d9431", "indicator--ac32a678-942a-49bf-baaf-10b0e6c21021", "indicator--8ab9ca13-84bc-451f-8b0e-cdd2adef8be1", "indicator--aae5a643-b161-4524-bed8-8185e14bfd0e", "indicator--e4bc5739-2696-4c51-985e-bf368216b64e", "indicator--e7d61460-28ed-4179-a803-4222aae946e8", "indicator--92d5791c-51d9-4c8a-bf39-2b1c72a65e0e", "indicator--4918ee9f-d095-4bfc-83f9-f22d07deb39a", "indicator--10b74cef-98da-4061-b478-aae9c0ce85b2", "indicator--73c41de5-1f75-4055-a77e-59592c15b3b5", "indicator--96656b93-f5d4-4d19-897b-6f38c26127bc", "indicator--e5d14a01-b0b7-4a1a-883c-5f204fb20f49", "indicator--9e179df8-2219-4fa6-b545-7ddae4dcb834", "indicator--069a40f2-a928-46d8-91c3-17905fb218b4", "indicator--3c4ece06-7492-4bcd-8645-5bc7188662aa", "indicator--6cc41de0-07ca-4d32-9a8e-13d8dbfc0ccb", "indicator--5aca4d6a-898a-4e71-b2f3-1504ff6daa31", "indicator--a7ad7635-94b0-4ecd-8070-1c8603fd32a2", "indicator--89a5746b-6d00-43ac-abb8-904241195609", "indicator--1a3823e3-d4a8-4740-866b-f0b331b18d5e", "indicator--b3a23adc-a26b-45ec-a75a-fd11375a2cde", "indicator--77ac778c-a214-4251-bd90-8e99c36ed206", "indicator--49f563df-e369-4ce8-9eaa-f080a1005798", "indicator--19aa8154-c3d5-4955-940a-d7a36161cf45", "indicator--350ffab4-4108-4e04-8de3-478d85c46ca2", "indicator--dac7d8ba-a13b-45c9-9786-0e5bd2026d00", "indicator--1f60e388-c2bf-488b-9b4d-90e07660842c", "indicator--5c150db9-a512-4397-bbf9-35e6947745b4", "indicator--1b818dbf-9743-4829-928d-9d7db28cfd0c", "indicator--6b161cbd-9456-4875-9af0-8edc6f659e57", "indicator--bdd0dcab-3058-43a3-b62e-536e06edf6ae", "indicator--9d4388db-a45c-441d-baf5-885918c02cb0", "indicator--d358b5fc-c624-4fc8-89ec-7f49d6cbe264", "indicator--37574a66-c700-426e-811f-655276359d83", "indicator--585510b1-5f68-440b-bc03-d267c3c467c8", "indicator--335deed6-1b96-4ff0-8099-3860c47df143", "indicator--3a3ea096-688c-412d-9136-936485301605", "indicator--060824fb-6e68-427c-8198-83606ccbb564", "indicator--6463f6eb-3678-4a66-9474-a03e937865a9", "indicator--fdc345d9-edc7-4227-a356-fa2ff197a50b", "indicator--b2cf3d8c-09cb-4b67-a3ad-74e56384d10e", "indicator--5a593027-0359-4bc1-8989-1fb868e6f18b", "indicator--85487364-6642-41bf-b83e-3be0787288c2", "indicator--8df998ac-f693-4c4c-946a-f52764ae33c0", "indicator--fe5cac3f-4c67-4b8b-8042-051f41458f3c", "indicator--636f3175-8d42-4191-8812-18c555927d45", "indicator--973c26d6-ea6c-4235-90e7-b15c7636552c", "indicator--c99458d3-aea5-4451-850b-6ad33964eff3", "indicator--989af3b4-0ef4-4321-a15f-b93504b1135c", "indicator--12c83b26-f7ce-47f7-b2b0-ad264c4b1691", "indicator--3b34b36c-6d3d-4dbe-8eba-3d4b547585e1", "indicator--35df2d0a-0b45-4641-8677-6604bfcfd009", "indicator--1e544def-696f-45ea-9f81-0b91e9fe8360", "indicator--1ac28458-2b5d-4dea-986c-436e9572fd09", "indicator--aca3b6e7-3718-4c54-92b6-f4961a412740", "indicator--a2527a89-bb43-40a0-917e-52daa7a07f70", "indicator--9dda13dd-35c9-49f8-9c23-97e3e14b3e0b", "indicator--009d3891-a8c1-4a1c-b65f-b1a9dfd9a7e3", "indicator--615456f6-9aa2-444a-9460-d787102d766e", "indicator--56e897ef-f7a2-46a9-b75e-c683efbe14d2", "indicator--7383f699-c4c2-44be-8024-9e826033add0", "indicator--abd603b0-6b1a-487c-8219-c8bd247d311f", "indicator--b8ea1681-fcdc-4142-8ffb-9e1394c28ca9", "indicator--69e9431a-726a-4885-b76d-dcbe05fac564", "indicator--66a206a2-4c39-482f-b4f1-ed0462df5156", "indicator--dc85a96b-1785-4f8b-be75-6f8bfdbaf1c2", "indicator--27c2d67b-2d3f-4db0-9e03-675366429345", "indicator--c0bf0e5b-902d-4cbf-a223-bd2f416eeb3f", "indicator--56b2e15f-2445-4c8d-8e43-b80549120ec6", "indicator--a65d8abf-869f-4498-b970-11649588f978", "indicator--35d56986-5d2c-4407-a91d-00d3035c9bf4", "indicator--4048c5f2-56b8-4a9c-8c3c-e9b8162ce85f", "indicator--b747668c-ec56-4519-9f95-89b6a8502bb8", "indicator--93eb2898-3244-46d0-b526-4fe3bfba1a80", "indicator--bb143d8b-22ff-4273-b5b0-9b9c15e2dfa1", "indicator--3a403a08-bc91-4855-bf9b-d11ed797f523", "indicator--f9639819-fc23-4470-9d1e-38b429ddb312", "indicator--a8c48aa6-28fa-42c1-a89a-93c337a8c0b8", "indicator--f3713f38-f70d-4230-8e96-46a20a84e24a", "indicator--8a9765fa-b865-4be2-98fa-9171aab2fad7", "indicator--59fc9e0b-1ae1-4c96-a896-c707254ad7bc", "indicator--3298ccb0-386b-4f65-bb6f-2b90ea51712d", "indicator--96728191-e96f-4d4e-b917-7d98e5564ec0", "indicator--22159b02-0dee-4b37-933e-5ba0c5eacdbe", "indicator--d0619e5b-3bc8-4e3c-85ec-9d2f56da5010", "indicator--a8eefcb2-84b0-4b4c-b4e4-044939cf6ecf", "indicator--b7aca3d6-b0ba-4a90-b1e5-0819a7fdc4a4", "indicator--cd500494-1fcb-4dd2-b87a-30e27faa719f", "indicator--83bc3774-b6d4-4066-8993-298e5cd5eea8", "indicator--975ad6c0-c6c4-4622-a00b-6225b1b97d2f", "indicator--a34849e4-8aa3-4b03-8c51-490ce040294a", "indicator--f892b4e9-137b-480c-96f6-bb2dae23e21a", "indicator--d140241f-899d-4fbb-9ebb-d8e78488b7bb", "indicator--b2e76618-a402-41bc-bac6-ded8b77b86ae", "indicator--8920806f-f652-42d0-a63e-d7ce0cf2ff37", "indicator--7121f828-bde0-48ad-8d34-0adf380f2ed6", "indicator--b05bcb18-ebcc-4f24-bfd6-2716871f9a85", "indicator--0177b18f-5fd2-4d64-95c0-3c98b660b439", "indicator--faae3131-f7d8-40c5-92a8-1b9d164a8b76", "indicator--f7446bfd-cc68-40cf-aa10-7a52161dae8d", "indicator--7780825d-02dd-43fb-8492-b312ea86609e", "indicator--562d800e-dfdb-419d-8093-75ad9a72d48e", "indicator--ca68a600-d1b5-4f04-88af-5f24982f817c", "indicator--dfea8a65-12a6-42d5-8b5c-31926db80308", "indicator--04c18dd9-6cb3-4612-8280-03ac1fd27b09", "indicator--03d53245-d365-40ed-8fd9-04f27d6eb6c6", "indicator--39437a0f-4bfa-46a3-bd4e-9a1d2308d3dd", "indicator--b4a9ec6e-e2a2-4cfb-9bc4-001cc8c7b556", "indicator--b41a8a01-6db8-48c5-a4e9-fc3747e502c4", "indicator--673812cf-4290-452a-bce3-bb1340a919cf", "indicator--f18ae4e1-8fc5-4dc7-a426-f12643f0aa3b", "indicator--2621a2ff-32f3-4fb8-9d41-8e96be7b1ef9", "indicator--f88ca004-a4f8-46a9-8fb8-1f6b36c63609", "indicator--2a6738f2-a8bb-432b-802c-49a484ef761d", "indicator--3094ba60-4754-4fd9-9588-a416a5452a53", "indicator--62ac3329-d7e4-44c5-a0e2-9652a96cf7eb", "indicator--5bd0091b-c550-4d9b-8593-de994d61bf4a", "indicator--3878c619-26e4-42cb-b33c-9d3f4410b69c", "indicator--44ba1ed3-b4bf-4c55-8019-b97ab5d5bc09", "indicator--2398b25d-923c-470f-a88c-11598e7af01e", "indicator--2eae5df8-3276-42bf-979b-fa7f8c300f00", "indicator--da67702a-c870-45f3-add5-9f9ffe5e3cd0", "indicator--851a0461-f9eb-4ede-9dbe-c8692dff2fb9", "indicator--bf6da15b-884e-434d-8120-859d0840f7a6", "indicator--2c64261d-ea9d-4e2d-8b9f-83ec595e7d3c", "indicator--37c80830-e619-49d4-b097-bfed37f9036a", "indicator--78198b9d-b103-4b0c-8031-4d423e81e3f5", "indicator--301f3e40-28b5-4e20-9d00-6ec1712f8396", "indicator--782491e6-eebd-4338-8004-ec342e42bae0", "indicator--1a4ff531-6461-4dfc-b4a0-d9da1b207099", "indicator--0eb5f123-e0b1-4068-b1d5-ffc0e1a942e1", "indicator--cbfbcdac-378d-4fe8-aa48-86758e82e4eb", "indicator--bebbd45a-26e3-42d9-8885-197ad5ec4b59", "indicator--8e3a54d7-fc09-492e-9f77-44cfdd02f981", "indicator--a967d569-8527-4c8a-a7f6-d4549f47988c", "indicator--1410db00-ba13-4a6c-bdec-d0c99952368c", "indicator--c387f29f-b0a1-49f2-a066-218336c3b1ac", "indicator--c652b825-9d38-401c-8757-dc2acbe1dbda", "indicator--d4f974e7-3895-4deb-addc-bc71c1eb826d", "indicator--61773bd5-751f-4112-83fa-87e40840be76", "indicator--7484b35f-3364-4ff3-b684-2f5f2c0bde83", "indicator--c96ea897-9314-492a-887b-595fb9643329", "indicator--8f174b02-5b77-432c-b1e7-b0da8dfce249", "indicator--b01c13f3-8dce-44e5-8ab5-cbc14c634407", "indicator--d9bcbc70-e7e9-4908-9a27-3e70743b5177", "indicator--4d1b66c6-3756-4e9a-be21-228b345f0f64", "indicator--2aa3f108-e775-4f5c-aba2-d0502b4aa8b7", "indicator--de78bc24-f3f6-42f4-8950-214a11ff7e9b", "indicator--1d4d935e-0163-45a7-b5a3-26773689ebe2", "indicator--bf4684fa-b057-4b81-aac1-af8f656b8659", "indicator--be6cf402-e84d-4f74-ad89-51fb0b75cc49", "indicator--d3726871-3618-4e4e-b89a-d67fd8e916eb", "indicator--81c2851b-1d44-4107-8593-cc50248ee477", "indicator--20ee1e09-43f5-42b0-8781-9e7db0b25d4b", "indicator--745c6805-9ddc-4623-bff4-bffaf53bb42a", "indicator--ff74dc0d-b647-4198-b235-c191fd9122e2", "indicator--61f3af12-1d40-4b69-ac58-251932174b85", "indicator--f79d70d5-ce60-4102-833a-5f0e8d22652d", "indicator--e7fb3590-d7c6-4374-bf8e-802d624cf286", "indicator--367238f8-9eaf-41aa-88f6-165c3cd30514", "indicator--920153a7-5a39-49a7-9d08-ca3397a4977b", "indicator--7112fee6-ec60-4042-b61f-c8f744783898", "indicator--2e7f1e9a-e475-4a48-a9ec-b3f72601d87a", "indicator--82c24ea0-2b63-4f39-80c7-6f24b8c3274c", "indicator--ff9cde5f-6b98-4b5f-8374-41711f12f3d6", "indicator--40577b39-0a41-4eba-93b7-5431f086e4f8", "indicator--d761dd58-2eab-4094-98e3-f009b14b3b18", "indicator--a16744ad-b83a-4c9b-ba82-6ba49afdc347", "indicator--64adb819-6003-44ca-b590-f19e50d0e693", "indicator--9ed94721-824c-4b3e-a081-89558de5992b", "indicator--1fe7e1f8-3f02-46c0-bbce-ba5779e6fd34", "indicator--f1b8d07d-9324-4e7d-bdc6-2b98b8e39da3", "indicator--9330111e-4a54-41b7-b3c0-b6a50a10c9b2", "indicator--2eca315a-5f2d-4b85-a810-4551be8b0fc5", "indicator--a7611791-3fcc-4681-8552-3e942dd914ac", "indicator--a734a1bf-0e02-493f-99be-c9aaf3eea841", "indicator--da7ea756-94ed-4f7d-a97f-21b9e913a070", "indicator--51d0ac55-3476-4ee1-997a-59fd005d5456", "indicator--1a99bc8d-f862-4bc5-bf71-80dd20880093", "indicator--b1fafa46-15c6-449b-a344-e5e29b60a738", "indicator--9411b1e9-8f39-4298-ae0d-c2613d23b730", "indicator--f62cba57-dc3d-43a0-a4fc-bdec9cc00052", "indicator--b998745b-bd8b-4f07-b78c-93e98874fbf6", "indicator--f033d1c4-e2bd-49e8-8296-16472eabe304", "indicator--51782c58-b2ba-4e04-b926-e443145ed65c", "indicator--19856cec-c791-445b-a9c6-9a041d05844d", "indicator--9a4c6e83-35da-4054-ade7-dc08b0c6c670", "indicator--7bf51b69-3e81-4f8e-b304-63e79c7e087e", "indicator--32ec0cd2-3a32-41b2-af6a-fa347898ec66", "indicator--62ce0853-5f19-407b-9335-5cc655bde337", "indicator--49e90fe9-a38d-49bf-9708-56ccbcaa86a5", "indicator--7b44a644-aa91-4d21-ae52-21c54845f4b0", "indicator--834302af-e4e1-413f-83ba-ad3581af825d", "indicator--8fa60959-4f05-4c54-a8ec-27fae2b1724a", "indicator--a9c40bff-53f1-4536-938c-4a14fe8044b9", "indicator--4b2e3993-a643-4c13-bb63-7a2311d29fe9", "indicator--d9b80957-7a61-4a5e-a538-1257a061af1b", "indicator--5fbb8282-2c03-4b59-b2ce-35589728c25d", "indicator--ad521c9a-20b3-4cbf-811a-9b4d2a9f5942", "indicator--ba4531ad-0653-4202-b9a8-3d72c075261a", "indicator--2b76a280-ea30-4595-bd47-aaa5426c1f37", "indicator--b612eda6-0f57-4861-85a1-bb28103a6366", "indicator--81c0fe63-04c1-4a1d-9fcd-7da00b9bb5d3", "indicator--606256a6-8744-4428-9e95-16a6a892b065", "indicator--bb94bfe9-a10b-430d-ad07-fded5b7188c0", "indicator--a2fe6623-89c1-487d-9b9c-650331e8a649", "indicator--e69bdbb4-6871-44b3-a7f4-a8eb24771f33", "indicator--c0a98f45-a31d-45ad-b9bb-dfbd013c42d4", "indicator--a397d96d-6ed6-475a-9624-28d6f539bc6a", "indicator--fd4699c4-3cdb-4ace-942d-174da2ac2e68", "indicator--27b4a398-b900-4b1f-b507-e729788a211c", "indicator--1795e676-eb7d-4bff-9436-6b2805a2af4b", "indicator--01ac81dc-4bb6-4363-b825-da28685d8fff", "indicator--4c99b803-c6cd-44b8-bb4d-86af96f43d40", "indicator--5e97fc06-c93d-4637-8cc6-4cb408b19f44", "indicator--f3f1179c-f849-4911-959d-b544b0848071", "indicator--ef219c1d-391c-41fb-b877-577f1906a2bc", "indicator--ceb72e9c-5878-4ae1-aaf5-2b82fa6fb8f6", "indicator--bdf30bbd-df1c-4f5e-9325-c7aa55050536", "indicator--b17f6d8f-d193-4b86-82a1-6b5742daced9", "indicator--a3076408-6685-4238-bab6-fdcce669967e", "indicator--159a2230-03e5-49b4-815a-ba05c2bfb5c7", "indicator--a73361fd-6276-4ea0-ac2c-439bd42ac816", "indicator--0529d594-b678-4d55-a050-1c2fc127c289", "indicator--eaac01d1-695d-4b8f-a62d-80a8a1938339", "indicator--4744647e-d4bb-48f5-be28-33d2c8b89442", "indicator--176ebfa2-9528-484c-b2df-32af117e5b0f", "indicator--9e762fbd-c3bc-49f0-b638-50d30641481f", "indicator--b7bc25b5-7ed5-48e3-8b3c-ae9b7eb064de", "indicator--dafc8fa5-4d4e-4367-b05e-cde070e1eb84", "indicator--f806d9ad-dc90-48d7-a2f1-61fd5b8197d8", "indicator--d088b8d6-1358-4175-83c6-c2bedf26babc", "indicator--7331c9d4-5c1e-45a9-89c5-824c4463eff5", "indicator--0a9f99cf-c29b-403e-af52-260dd561d4ae", "indicator--f789cad7-eb49-4782-8272-8842d537807f", "indicator--61097642-6a30-474e-9e0e-2f9550d21755", "indicator--bce03801-d020-49d5-94dd-2f108cfded89", "indicator--6a9cf9bb-bb09-40e4-9ac1-0c1cbc364aa6", "indicator--fd2b8e0c-7363-4111-ba34-502bc3ab7e55", "indicator--fc4b9651-c2ea-4440-8462-da9210f9e570", "indicator--b3a53fd4-ecbb-435d-8c50-07f6e1772916", "indicator--d56b6a51-7ec7-4481-b113-886eb08cb48f", "indicator--4892f338-8ef6-49bb-b47a-c03ea00f39cd", "indicator--ef2ce202-85c1-4c28-b681-89c4327d5639", "indicator--fe7ae4e9-fa45-4642-b3ad-2f5110734cc6", "indicator--60af6ad9-101d-4e93-ad43-7fc31d794205", "indicator--7f79853d-7988-4bae-9f3d-a567a7da4ee1", "indicator--3686a9c8-42af-4991-9146-ebb149587549", "indicator--09a37923-9a41-466c-99fe-2cdab51ba0c2", "indicator--602ef954-8c8f-409b-babb-b1e832a571b3", "indicator--d8914b07-f57f-4251-b978-ea85066d96f9", "indicator--ea773d38-2a8d-4170-b64f-3dfdc4786b62", "indicator--c103fef3-4469-417e-9f69-293f499d62e2", "indicator--197d8f18-40a1-401f-9310-b97887f0345c", "indicator--7e3cfe10-ac88-4530-b05b-ee3c2083cc37", "indicator--0c2f818f-1c0b-41d6-bebc-93e39957eace", "indicator--aa46ce37-2fb5-4235-a7bd-5d182c782b76", "indicator--abf6e39e-a60b-4515-b995-e1ad91927417", "indicator--971d99dd-0baf-4b85-8f12-e8270778b5ed", "indicator--f8131f43-2b89-4f2a-9bf4-5d4206f02490", "indicator--bb9bf271-b8a0-4646-a258-a67c2787f483", "indicator--5d94e5f4-26d3-455e-8eea-31ffc468b85d", "indicator--8b475793-05c7-4d10-9430-044c826ffc62", "indicator--f7b46d14-88f7-47d9-80c5-264c804a4e21", "indicator--36a96897-ed4b-441b-8c33-1ef74312d00e", "indicator--fccd56a5-9aaf-4340-81d4-0c914cfe42d1", "indicator--248b6473-705d-41dc-9f11-a25bab41bd14", "indicator--7f999723-e025-4d21-8b53-4f5f4058ec80", "indicator--a013cd8f-8405-4f2d-986f-4f775e4e14d9", "indicator--3aa3a928-9b86-42dc-a88c-07b552a2a112", "indicator--d435f0df-b71c-40d1-bf27-030eb8829733", "indicator--bb319402-488f-4dfb-8fa8-158e1005daed", "indicator--4e8a0023-a945-4580-8311-cc471c1b6ad7", "indicator--6e6d6971-35da-4246-ad1d-536613c17f77", "indicator--c5012efe-0ddd-4f6b-8d2e-eb8e38025fb5", "indicator--6a45dd3a-73f6-4f2f-97db-b9b3e2c7e2af", "indicator--97654f91-2882-485e-87bb-466315201b79", "indicator--92fb5f7d-0318-4072-a32d-c7ade4f79b20", "indicator--239ea441-9bc3-4b87-9f10-f1bf5bd2009f", "indicator--5007c0a7-6500-4468-8f65-121ef2521d05", "indicator--d640aa7e-700f-4390-a18e-4bf288290dfa", "indicator--e795b47b-31ff-463f-a7ca-90bc4279e6a3", "indicator--8d204ec6-b713-4f53-baf7-7bbe4cacce98", "indicator--f1007b22-e533-495f-a4f0-fd143fc46dca", "indicator--ba09da5e-5512-4afa-b411-db82e0f995a3", "indicator--2a44ddc2-f02d-42be-8712-26a7bfbd068d", "indicator--11891df8-a935-4f4f-aa69-ab59f35ab128", "indicator--180c5685-b9e6-4ecb-8983-16547d48e7a1", "indicator--895995a4-e8e2-4bd0-ae4f-f76ca657d923", "indicator--1bacec27-87fe-4457-a9a1-6184288aff8f", "indicator--e9228893-6eda-4f35-bad8-aecdece09771", "indicator--f34f3224-e963-488b-9112-c11a5089f180", "indicator--dd3e54e8-2f05-42cf-b117-32619515cfd5", "indicator--ae044387-199a-4739-858e-d2347e4a3a06", "indicator--c5e1d54a-62f8-43bd-bf63-16c0537280a0", "indicator--8b2c2d71-db4b-41fb-bc8a-71741f3e2524", "indicator--17c8f4d5-0f0c-48da-8574-95bcfee42fc8", "indicator--d4789e75-c795-43cc-98f3-decd1a6dbefc", "indicator--356384c1-118b-4a6e-aad5-78cd9695ceb6", "indicator--4d5e0803-23e7-46ba-8f7e-00e9396d3a99", "indicator--e6e2f4ea-58bf-4d32-aa0d-e2ec2baa1366", "indicator--12d03b3e-1d17-41e7-a2e5-add8f97e9bdd", "indicator--9ad33198-5263-480b-81a7-8f681c79f314", "indicator--36ae83ac-635f-4688-8179-f06c2f464e76", "indicator--51136948-90ce-4869-9146-83d4365bd614", "indicator--55e11481-01c1-4f49-85ea-dabb69bda3bd", "indicator--ab3a7f4c-12db-4f89-be9b-8876898748b5", "indicator--b3b24d20-3653-41de-bdfe-d9a8fdd48e9b", "indicator--da998c93-b9f8-4305-9d86-78672a208dba", "indicator--c78c4bf1-b25b-4ae3-ada3-d58400eda66c", "indicator--bb883ecd-9277-4748-bedb-52195f782a12", "indicator--14c80dce-fa0b-49e2-b64d-1db594b63c1b", "indicator--634bd40d-5df9-4c52-ac46-27ab38249dc1", "indicator--9280aa64-edcb-472e-8df0-f38b305f9944", "indicator--41918145-2761-4a49-95ea-db51e5430477", "indicator--9c1f49a5-d5b0-47e7-b772-1cbdb1de46c9", "indicator--ad238fc1-aa2f-42ea-949a-84768a8cb179", "indicator--bbacdc36-7d72-4688-98b2-0b3838c7edd2", "indicator--e3eaa707-d5ba-47ef-baa4-abbd1096c4a8", "indicator--05f572c0-252d-4588-bfcd-28fe6ae2464d", "indicator--3aa0be9f-5ad7-40ab-87e3-addc84a03638", "indicator--ade0691f-6dc7-467b-987c-1c9df963d921", "indicator--289032b8-e48d-4c72-b386-32dddc248aa0", "indicator--b08e6ace-474a-4bb1-86e6-97675320511d", "indicator--0396e123-d54d-47ba-acfb-941183126217", "indicator--82ec8165-d21b-454b-acd6-e80b64e5882f", "indicator--7a82099f-2612-4cbb-ad6f-df561d93a7ed", "indicator--bc4ddfda-6564-4b79-a456-0f163263995d", "indicator--531a75b0-1cde-43c0-b6e8-784ab40c70d4", "indicator--c1fbb43b-bf03-4908-89ed-f5d580c8d14d", "indicator--d2da6e33-576b-40a5-a5f7-a98be04c433f", "indicator--73efa029-d9fc-4e74-8f49-a20f43743c9f", "indicator--ff1f1301-da3a-4bf4-9207-98d9b3a5938c", "indicator--8dc94938-f5c7-4e37-bd5d-0e4ef8f0201d", "indicator--5bff114a-b251-47eb-a18f-5265531aa5ad", "indicator--7a6fe328-e566-4fc5-98b9-ed421c5c47c8", "indicator--95380c82-a7d7-405f-a774-653ce55f3c90", "indicator--19b75d29-f506-4202-9e0a-477def37fbe8", "indicator--c8e2afd3-0c5c-4e2a-b5c2-c8e4706610bc", "indicator--f2e125d1-b2fa-4e22-b944-59089b82fb46", "indicator--4f8b5045-55bf-43af-9c08-0f0dadf64c26", "indicator--72068170-a7b5-49fc-a4d8-931b094a997b", "indicator--9e047960-7577-4fb4-81b9-0f432367c79f", "indicator--0089f6d7-f57d-459a-bca6-17584d779cb8", "indicator--695ffbd0-7828-443b-a833-195591591c1e", "indicator--27e440fe-db50-477b-b3ec-1be321b4267d", "indicator--dc621738-e7a5-4cf6-95b6-e7acead4c74a", "indicator--9a2a3704-fc77-4258-9cdc-a572309f0535", "indicator--9af237a8-71f9-4b04-b4f2-1609079c155e", "indicator--e033b7fe-42c9-4564-87da-2ff788efd4a9", "indicator--5b1d79dc-96fc-497b-b6ea-fe6bedaa72e1", "indicator--a32f740e-7f60-4a29-a4e4-222bd6ef0dcb", "indicator--3c900e0f-ca6c-4a3f-9480-f210d1638671", "indicator--26bb5f1b-cae9-495a-827c-04464b698b24", "indicator--fb42922b-98c8-49fd-9d54-751a242a7ad4", "indicator--73ea149e-001f-4905-a8bc-3212fc7240f9", "indicator--3cdeb99e-a9e7-4779-a6bf-50e8929f917c", "indicator--426511a8-6ad6-4f8f-bde2-7ea45510236a", "indicator--5399780b-b78d-491d-963e-06a1ab1fe216", "indicator--4bc487ee-2e10-4609-99e1-5124bc488264", "indicator--3e64ea36-127d-40f9-9fa9-78ba389ada11", "indicator--bbccaf29-7148-4dfa-be47-83f7ec8d4887", "indicator--fb9e9445-eec5-428e-8c05-3b594730a587", "indicator--1319026a-d877-426d-bd35-cbc4202012cb", "indicator--70e47f07-dd81-408d-87a1-7694a4a8e479", "indicator--577b5562-ea21-4025-a741-3e7d8ed66cac", "indicator--e2c6b1cb-1ec2-453b-ba32-71952269e0ac", "indicator--b6b2a00c-4f4d-4660-98dd-9e33ee272244", "indicator--15bfab4e-7d3f-4206-9609-edb9e22071e4", "indicator--de6e2a49-9ae4-4e78-91ab-49219a9dd67c", "indicator--243e45c4-d172-4a98-aa27-e70f5558d98f", "indicator--dd8f5ce1-b60b-47cb-b0f4-620bb20e695c", "indicator--b81a10ca-dbaa-4f9d-910d-cba345156cb6", "indicator--b2dbf2c8-f919-4fcc-9d44-5c38f56e68dd", "indicator--941b143e-eef3-4e0e-83df-b0bc9b7c6c9b", "indicator--777d1687-ea0a-4970-9b62-8f71a81f7b04", "indicator--7ed9246d-dbc1-4fb9-ae61-08c325100a03", "indicator--d7c7f936-6c97-486e-8b8f-ed2e49293af6", "indicator--d7d9bf40-e725-4bf4-b78e-b16f304ad344", "indicator--ea864fbf-10f3-4c4d-89a5-d9e58a3e5a5c", "indicator--2d7c5ea8-97fb-4553-affc-7f203c04ff51", "indicator--edeae91e-d035-445a-93dd-50e2c56320ec", "indicator--d4fc157e-4578-43ed-b194-3c2381a09596", "indicator--e611fde6-a62f-4f8c-8f5e-8c7dbdc9d9aa", "indicator--e60453f5-c8c1-444c-b7de-4b609edc00be", "indicator--26a49964-a93e-48a9-911d-0e1d7ff8c54b", "indicator--bb8f7f96-f5f7-4eb6-b6a8-4cdf76872c31", "indicator--64fb8868-f48f-43c3-a230-3c4e3d2a8266", "indicator--3eb9fd47-5e21-4162-8d06-ba381875d6f3", "indicator--74dc4c3a-1d84-46a2-88cf-f3403cebabde", "indicator--d6f9ce92-5045-4659-a314-4ddc2275e35c", "indicator--a3b0b605-2ad0-4c2e-b322-d4efbf33d83e", "indicator--21e3696b-59b9-49b7-bd4b-246d6eb38c69", "indicator--9fb02ff9-7275-473f-853e-6eed39a92952", "indicator--b12612f0-e46f-4110-b7e7-543b4fd82d18", "indicator--939db87a-e9fb-4599-9a67-3c707955f083", "indicator--57132cc1-3797-42c0-8500-579bde0e0f5b", "indicator--9960e289-7d66-4b8d-8485-a15116ef74b7", "indicator--eff5668e-bf25-4762-a943-09e6d56fe68d", "indicator--0b1705b8-38b6-42c0-8a67-7f2dbf56b404", "indicator--9c316c99-9305-4602-80d1-5ced2162996f", "indicator--e8908e63-d27e-47b5-b4f0-da2caafb506f", "indicator--f3b7ffc4-1dc4-4f0a-beb9-75aa187e7440", "indicator--18e32665-d130-46b9-993e-c2874d362ff0", "indicator--e9af0f2d-c5d4-436e-9b50-9ff9f55ee374", "indicator--a0607c41-10d4-453a-a65f-0d2b2d6fe29b", "indicator--608ab9b6-d7b3-4478-81ce-6a068212da1e", "indicator--5fd18a8c-4411-4c99-a76a-8d9d9f3ac9af", "indicator--11a2376f-d30d-4ee6-aad4-59331a87e57f", "indicator--8abce160-e4a0-4091-a490-04f56202b88d", "indicator--e93d6050-5ac8-44ea-9b4a-3d40c907823a", "indicator--4d137f8e-edfc-45eb-8d60-527e54ad8734", "indicator--49867d30-ac66-4aa9-8b85-a13e2e4a9735", "indicator--643e34f5-1edb-4926-8911-e37beff4a072", "indicator--8cf114f4-9b9c-436b-ab17-e77076f3105d", "indicator--f2a82d6e-eb34-42ca-bc29-781a08d01f37", "indicator--466b12a8-ae7f-4078-8eb5-d0969cf6335f", "indicator--da43d0b8-b5dc-49bf-95ce-7be87d48bb8e", "indicator--c32ac847-d2d2-4a4c-a634-a8d5d518dd56", "indicator--364efcf0-8416-412c-8e3a-febbd7018f53", "indicator--0d8f2e08-122b-4968-a6d3-4166ae231208", "indicator--be600848-2c3a-41bc-bbbb-8bea529309f6", "indicator--da83ea0a-d769-4efc-b46d-3c4d590c3f27", "indicator--9f89acd7-b7fd-4d6d-9658-b76c5abc16ed", "indicator--6c07b255-d850-4a0c-858a-9735001a04f9", "indicator--495f23bb-da4b-4ea0-8b8c-87e5e7614c79", "indicator--72efb95f-ddd1-4044-a875-cdb9124bcb29", "indicator--51ca208c-0ad7-4692-9ea3-000360ea7fcb", "indicator--25b1650e-bc9e-4904-9be3-1378feb8fc80", "indicator--43e125a7-09bf-41ea-b231-09034080c68a", "indicator--1939244a-50a3-4112-b953-373d8eb5ebcf", "indicator--7bc652e8-5659-4c53-8390-ae03b474dded", "indicator--3a5f0b0c-752b-49b4-afc3-ed5a7939535b", "indicator--c247fcf6-b7d8-4638-95cb-a837af9551db", "indicator--ed044506-e48e-4e4b-a286-cafcb312fe69", "indicator--b7a74389-7551-4e4d-b574-52a31d66ae55", "indicator--9e7c8be0-8a1b-4118-a6f9-93b0c32e81ad", "indicator--1ea6f2e0-b006-48b8-98f5-29533032d773", "indicator--4e04c73b-6462-4469-b500-e39a5875418a", "indicator--10f43449-8166-4537-8dda-0e971beddd29", "indicator--e401fa95-8b6f-47ff-97de-7627797ef4f4", "indicator--01645fb2-a0d7-4285-b318-a1095a27f0b1", "indicator--2267dcdf-e657-4bca-a218-351422eb9bb7", "indicator--417ab5b9-0e0a-4639-a049-c6f481ad486a", "indicator--30629df5-c195-45ec-845c-44ebd85a1509", "indicator--859acaef-cff0-4289-acbe-9954ac224ad2", "indicator--83f09367-ed7b-417a-bbd8-48f2b0543af9", "indicator--47b63ced-9e92-4e3f-8563-097c780446f5", "indicator--534b6b01-5e57-4940-8808-23c4be7f1e7c", "indicator--cee14d97-da82-45bb-8168-d7fd332c076a", "indicator--9acee02e-d199-432c-a192-47c2d3b1d693", "indicator--ae1261f6-0408-4117-99cb-59025cbd2392", "indicator--3702ad6b-845a-4737-b20f-6f99dd05e552", "indicator--56a2071e-51dd-4ca9-bc34-b94b4b29589c", "indicator--ba2c248b-744a-450f-924b-7315753eea3a", "indicator--48380bf1-53b8-46cb-aa31-971b4fdec087", "indicator--d348843b-01d3-4332-8ac4-7e98fd4f3453", "indicator--93f0fefd-9836-4313-9ef7-40e39e1e28e9", "indicator--56b99d14-cc57-4d15-a9ca-0e689a4b83b7", "indicator--f4c5c80f-b8c5-4b70-806e-c4f9c27d4660", "indicator--46c01914-bd5a-4128-a415-df65e0ad1c9c", "indicator--ca6a7168-0aef-4db6-b877-0a1713b08459", "indicator--d2cd4fd3-f5fa-4a51-96b3-02c2e575d11b", "indicator--3398154e-bfd6-4a3b-a544-1fbe3b429d9f", "indicator--513ab4a1-e4fb-4667-8715-e922163cdae7", "indicator--1a0a75b6-e53f-4897-9240-d0b7d4c8b3d7", "indicator--d1692665-57a2-43c5-b717-319ad4591922", "indicator--41e4da87-d9b7-4431-b8e7-2787014ff474", "indicator--f17abcbd-834a-4508-85f9-01f6361bf573", "indicator--16138f65-4eba-4e56-a64f-de8cc75ff861", "indicator--0b337e98-7d24-469d-b830-dd4f6cfdd6a5", "indicator--8b3a99ff-9192-4e69-a801-8bdfe6407354", "indicator--c620ac1c-9e0b-436d-aa52-97656cf7843d", "indicator--5f5f9ef3-2792-4b46-b047-f319ab0ffdb5", "indicator--deb9904d-8553-4445-876e-195028c096f2", "indicator--6d500f53-5e0a-4d65-8434-7096f17f9c05", "indicator--d2b865ca-71d6-41d4-a862-896451d8b2d9", "indicator--e2e1dc9a-c6c4-4efc-96e6-075f11137943", "indicator--0b08b7e4-44d8-4b08-8476-82b92495bef8", "indicator--1bfc7b44-ed7f-49e7-87ed-f115f39d67f0", "indicator--3f142fc4-1cf3-4d62-b2b9-c9c400b75292", "indicator--ebcaf236-5137-46f5-9c8f-f4d4fcd9abe1", "indicator--2c3ca0d9-ebf9-4025-a263-343113b97c70", "indicator--19e61592-9a65-40a7-a3d3-6170d2698fa5", "indicator--76b872aa-4342-4d24-abf4-632d424d4363", "indicator--ddd0835e-632f-4aac-9854-3d5ad0fc20fc", "indicator--fc72d633-14e8-484e-9f85-e26e872ab157", "indicator--b1090a11-8e1d-492a-9dc7-452564b6096e", "indicator--1a871df3-d0e7-41c6-81af-4bcd495d2cb0", "indicator--403e9332-fd2c-4bed-92bc-d3764444f2c1", "indicator--e0fb4a09-0920-4819-ad82-b42123462e3b", "indicator--0f584fae-151b-489c-b371-ac1eb295aaab", "indicator--12581c9c-8f94-4ba5-aa56-e6bc37d95368", "indicator--43b99f82-fe3b-49d6-8c95-d7082aa06ff5", "indicator--134b1c45-a029-4107-9b6a-b65ab4c1671f", "indicator--1028cd78-32fe-4cd3-a0de-51ab5df58c23", "indicator--3c244e4d-a1ee-40c3-9aed-d69b0964a841", "indicator--45344fe4-1805-4041-a389-81a1e4fbecca", "indicator--a9ad5296-0a6e-4683-b306-48d327a6f6a3", "indicator--a5bb5871-5a8d-4b84-b669-9f67aaf070a9", "indicator--dc6a394f-a6a1-45bf-9e2e-ee78ca8d5128", "indicator--4499238c-ee81-435e-93f2-eb0cf293de6a", "indicator--2327814e-d60b-42be-bfb1-667f54fc7072", "indicator--d2766be7-6eff-45b3-8400-07f0cd490ca1", "indicator--09f8630e-ae8e-4ca0-9928-50e9ef98ed53", "indicator--7b8ae977-15c7-4517-a9a9-4635769397ba", "indicator--41b1e295-cfa2-4a4b-b928-3161433ce735", "indicator--00866d26-76f5-4932-a330-9d0a3677426c", "indicator--14c7d883-3428-4a29-a002-5ada4a6db4b4", "indicator--c0331afa-a140-436b-bf8f-50c5ad201dcc", "indicator--705dfb8f-54f7-44f9-9355-31214b76c19c", "indicator--8546a133-7247-403a-b63a-e46335610327", "indicator--7cf315f6-9b71-4274-a937-518b7641d853", "indicator--d75c3f86-1d51-4079-b3f1-a404bbee905f", "indicator--cd300370-4b9b-45e5-94d6-4441e2cbd4d1", "indicator--a4eb5d98-713e-441b-a924-aa91ca8414d8", "indicator--1c49f034-2151-4e10-9439-fd713ccfa4a6", "indicator--5d15214a-e6f4-4dfe-8d50-3747081b3b46", "indicator--73e2b2f0-497c-4a10-9084-6bdff212955f", "indicator--5f9dd25f-f28e-4b25-abea-4b83cc021c7d", "indicator--a789b5f2-f961-4299-b6f4-47788772ba93", "indicator--d460e927-0e0a-488a-a06d-b0ecafd171c6", "indicator--1b0a04df-0a0a-4e92-a1f1-ae996015c652", "indicator--58922d68-d3be-460b-8f88-1bc0f0ce04f2", "indicator--97a21e71-fe62-4514-9c0b-b2f19f3ee4bb", "indicator--7e8208a1-72f3-4a78-8361-54d76c0fbad7", "indicator--4140965b-12c4-4751-aa5e-af498bba459d", "indicator--64a2deab-43bf-4efb-9091-2fd8fbe7b0a8", "indicator--f926ff73-3799-49d1-b2c2-78b2aa831bbd", "indicator--924dcb45-a379-4dc6-82b5-60de5244ea9a", "indicator--77f53419-3c8e-412e-960a-d58722a37a4b", "indicator--a320ce7d-c268-4bc0-83a7-12ef87e83f54", "indicator--c5c8277c-9aa3-4bb7-92a9-0107a1ca8320", "indicator--b386d60e-f107-489b-83fa-3586e0122439", "indicator--1aee269e-9ff4-4610-8381-6d9132b01b95", "indicator--fdf2214a-33ad-4aa8-a72a-1858d34469fb", "indicator--08868d54-9f12-46bf-8263-3c0506de4f38", "indicator--bcdceae4-5b68-4048-88e3-1f536471f8f7", "indicator--36a5979d-436b-4ae2-a825-a7a3e026a4d7", "indicator--20f970e8-53ad-4c9a-ab08-619c1872d188", "indicator--e244468b-9415-4108-8bb5-5ef0ba322657", "indicator--e867de3c-d61a-4240-9a3a-8c4ad210a81a", "indicator--e731dca7-a27f-4bef-9cdb-b66edcefb536", "indicator--216362b7-b993-4322-823e-ff1384bf6876", "indicator--be5f41de-29e9-40ee-a436-268420198b38", "indicator--e47b7c99-ebb1-4e04-825b-21fad4cae0be", "indicator--1c9ccc90-ba99-4893-a2c8-cb551629fa1a", "indicator--6b83adbc-4b0d-4c45-8e69-369fd262fc76", "indicator--67c17987-c085-4549-95a0-9ac549c5bb01", "indicator--f8e10172-96c5-4e18-9313-064dc0fc10c2", "indicator--4e0d5f37-a104-4930-b6a3-c8c64a302e4a", "indicator--54f61ca4-e932-4f7e-ae88-dc7f4c198060", "indicator--2bc54561-8b9e-48ec-8186-4a1218a71997", "indicator--1d522811-8d88-418c-8158-98ceae631eeb", "indicator--eeaf4ba7-1694-436d-80fd-3cb97a0a1500", "indicator--7737fcfa-1830-4919-9667-7ec6085f2af5", "indicator--80dde970-9077-468c-b9dd-68b810d6ac52", "indicator--0e096148-fc4f-4e01-8e9a-4d2a69a822f8", "indicator--6dbbd8ae-61c2-46d4-904c-6b6dce379ed0", "indicator--6e4e7b18-a4b4-441a-86b8-6c27461e286f", "indicator--500f25a5-c975-4c71-8120-9da3ca2da6c8", "indicator--59312b7c-b944-4ed9-bd25-8903a6c01786", "indicator--48591730-22a8-46c6-8730-d8b33e2b8635", "indicator--80664e18-59ba-417c-99f5-c81ac88df2a7", "indicator--754ff1f6-eb49-4630-b013-b9bc4147c618", "indicator--10539c89-6f52-401e-9f17-55b2e673fede", "indicator--366aef0b-6c47-447a-bcb7-34d2c31c5f69", "indicator--3238d12e-5432-42aa-9329-2b71ab310c6a", "indicator--bc059937-7a91-4626-9b70-5f8870f890ce", "indicator--de27c254-b613-471d-ae38-7e390bfba3cd", "indicator--0c18575d-a0bb-4221-90de-e18b60d1edbd", "indicator--9d23b8fb-6274-4767-bca9-ae8e1a42274f", "indicator--59164ea3-fc4d-43ee-96c7-31b73c709df8", "indicator--4b4e82d0-ef37-42c4-99d3-dfef0b9cf6a4", "indicator--14681f8f-799b-480e-9a5c-b4d98acb0f77", "indicator--21db3c47-1c1b-465f-8cea-b9963ede8bc5", "indicator--80f8d515-ebf1-46ec-b6ea-c8924145565a", "indicator--ee40db0d-7c32-4e4c-a65b-e2d693061839", "indicator--55a111dd-b1c6-4e53-84a5-5572e93c92c4", "indicator--c3e114fb-2c01-4e1d-bb26-6dce92b1a627", "indicator--6b4962cc-c79e-4e5e-b53d-e34c5d63cefd", "indicator--52031cec-49a5-4236-b772-fe82f1303f2a", "indicator--a4b49a46-63be-4013-98e2-8b249519f0b2", "indicator--f8cdc332-3ab7-44a7-8309-e8ce681fb3d3", "indicator--8cea29f3-55ae-48f5-a661-4859563887c7", "indicator--4d87bfa6-c960-4870-82d5-9675a3233e87", "indicator--5cf6207d-50f8-4070-9edb-791b69f7688d", "indicator--6e3b9c82-e0c0-41ed-8d56-4d3dc6fad25a", "indicator--adef8bcb-a4af-4bbb-a040-0b1f6b2e28d7", "indicator--1e522ed6-d72c-44ff-afb1-a6c5fd5d1faa", "indicator--68c019f4-c611-451d-8a43-6f0a52b2662c", "indicator--5928a6a2-b035-4293-8b1c-5334f30a467f", "indicator--7f6eca43-10b3-4a6f-9ea1-45b1edcc7c48", "indicator--ec7fa9be-dfba-47c3-9732-b006b9db831c", "indicator--c7666fd2-6882-4654-b0ad-d07c85fc3d66", "indicator--d9c37d03-a933-4c11-bdf0-fb558bb0f300", "indicator--576e7249-c940-4f1a-ba64-e20d46ae7fd0", "indicator--e5543332-928a-481d-86db-549e57dd1f62", "indicator--8cfe6c5a-ced3-4816-abf8-93d1f2d2b547", "indicator--4bd8b1cc-3776-496f-be96-d948f9449b8b", "indicator--9d006eae-fb89-41bd-9a72-397d3ed9a763", "indicator--275700af-1f8d-4fe7-ad26-945d70a38138", "indicator--05b88e06-fd65-4273-a19e-ba54e741fae2", "indicator--8d7852a9-0e91-48ed-9af3-ba2db97e45d1", "indicator--4cd3f28d-6b7c-4efc-b66c-68b6928fb491", "indicator--3a785a46-437d-46d6-91c3-cf3719d35c04", "indicator--b8be2cbc-7427-4244-9568-592ad1c944ce", "indicator--181e617d-c6a3-47f9-a2c7-ffb1bcb5b5e7", "indicator--7a80c9b8-7f2d-4a08-aeaf-d51c2d7a1eb5", "indicator--af81e412-3a37-4ad1-8da4-a06ab43b1a15", "indicator--2e56d846-db93-4738-86ab-29ac7325268a", "indicator--e1e49a01-d8bd-4815-87d7-8f74e097603e", "indicator--d4e6a0d8-a351-40ad-ad58-2307bcddde59", "indicator--556088dc-d00d-4544-8ab7-c9ac7bb295a5", "indicator--252c5081-8d92-4de6-84d1-90735074f0b5", "indicator--ea03e2e9-db19-4e1f-9dec-aa627798e6ce", "indicator--a0386f0e-c83a-48c2-8e3b-3c0b4ce6cb94", "indicator--000fa58f-1321-4390-b272-8649c354a2f8", "indicator--360ab7e6-5d20-43be-b680-ae5ce43a5250", "indicator--1581ed86-919e-4638-9514-821f923bbe27", "indicator--04b0ee11-420a-4deb-9dcf-f2f28ad108f5", "indicator--c913c6c0-1f39-4e65-a0cd-12c6283ae53d", "indicator--2c2e097a-112a-4a7d-963d-8d45cb459b39", "indicator--19b761ec-8c99-4f98-8744-58031fe4560c", "indicator--c119875b-f1c4-4b0a-8d4b-a4e62acd6286", "indicator--cd146718-5732-47af-8dcc-59cb6993b452", "indicator--4bc2d2bb-8266-45e7-a318-9deb19adb977", "indicator--17c0ec16-3461-421b-861d-3ef65add9905", "indicator--53e5cd32-825d-4323-9599-79480b763e16", "indicator--3395c854-a937-4ef3-b021-98ed505519df", "indicator--517c2c1e-9738-45e2-95af-9ef587508bc4", "indicator--40cffe55-3b26-4a4d-901c-02fc5216e929", "indicator--0cf5d049-d687-4dee-9851-640f02e56c07", "indicator--0b650200-4cf1-4407-be31-052503f50cfe", "indicator--30c00536-4c81-4d06-b906-718bf019a0cf", "indicator--af5e928a-c791-4f23-bd61-c4093e8197be", "indicator--54fd8839-75cb-429a-82c2-ed9a0a81cff8", "indicator--936eef9e-7486-4ce8-94b8-0734ed3de111", "indicator--4ffe2ae6-4059-47c2-a3b4-3db1adf09f77", "indicator--09055c76-5588-4c3f-8ccb-9f0a5b12bd46", "indicator--55a9742a-ee77-4f65-bf5f-60117aad8b6d", "indicator--bc1d48dc-0be3-4036-b7da-0752848808c5", "indicator--84c81598-67ae-48ee-851f-1f2b8daddba0", "indicator--5fd03cba-d3ea-44e1-98c3-9a36c85bd1f1", "indicator--63753485-0aa3-49a6-a491-1ebdf1708ef9", "indicator--782a42c6-1132-4e04-b70b-c60a461e9361", "indicator--4d18adf3-0a56-49ff-abcb-9ef3347472d2", "indicator--5bdb5a8a-3b80-4c5a-8d85-53519cb55363", "indicator--f52280b2-6670-4268-9750-480dd9cf976c", "indicator--c682605c-ca14-4572-8efe-cb3faae2a6ea", "indicator--c6799728-552d-4467-834a-703e89559199", "indicator--f4f2123a-256f-4db2-90c7-44afa728658f", "indicator--128a5e2c-8da5-4335-a9dc-1e134e09bd24", "indicator--603a273a-3232-4a6f-b9ec-297cde5fd817", "indicator--c4dd3af5-404d-4135-ba41-8d445b4e19f9", "indicator--51fb204d-946e-46a3-ad56-d570497a522f", "indicator--11f230cb-b0f4-45cf-939b-2d32c5427e14", "indicator--1b9c4bab-baf6-43c6-8229-b8d50ef1b113", "indicator--e41d78d6-9020-424e-b439-812add6b13bf", "indicator--5f45dd05-0a9a-4eb8-962d-29776da6223d", "indicator--ba1b5b82-8bee-425d-8323-6bb63a8e2697", "indicator--d175ca56-db52-41ea-a7eb-f097c38bd7d5", "indicator--fa0f667d-7137-4a5c-b13c-d97be8a2f94c", "indicator--2c8825c7-50a0-4274-8596-0c452c922ad9", "indicator--6d5c08e5-ecaf-43ca-92a7-b293e16ecc59", "indicator--d7dddcc2-19ab-4719-89f9-e89ff067e302", "indicator--d7b58ec9-5753-42ae-933a-f2600088bd3f", "indicator--0706b6c8-9eff-4315-8599-4b65bf443ecb", "indicator--a85ece13-f1ec-461e-bf3a-509b2faac4f5", "indicator--57651e38-a76e-448f-ad6b-0c393ef753f6", "indicator--07106a3b-73a1-41d7-86b7-c81287e85135", "indicator--da009c62-8196-4d40-b477-8c2e0f57b043", "indicator--24eb843a-cf47-44cb-a50a-834eeadf1fa8", "indicator--8a2de1dd-80f2-4f84-b05e-d8f351bab54b", "indicator--63757dbc-ca23-47fe-acde-ed63e7f8755d", "indicator--1d780eb4-348a-41e5-8bf0-5b97d6fef5b2", "indicator--80868262-6dcb-460c-8071-ad1624a687a8", "indicator--d32dd108-8272-4c26-ab6e-c45cbdac7357", "indicator--c513b5da-a5df-405d-a160-134c3a530236", "indicator--cd79d66b-1003-4e79-87f6-f27ed4ade3b6", "indicator--f1ce9b7b-2fc6-4bfe-966f-4bfde0be5a4c", "indicator--4e1df772-a077-4a8a-b365-4ad61a9c3c89", "indicator--c710c042-4bd8-4f5a-a83d-661f7936c4b1", "indicator--3e59703a-2f12-4b23-af28-92fb72eb59ba", "indicator--bd6d39e0-3a35-4900-a727-598dfb6b7af3", "indicator--8a7a45be-bfbe-4bfb-ac65-acdfa56769c9", "indicator--ac3a5741-8d4e-4636-bd7d-1eab023e1725", "indicator--56ed94cf-5675-4c64-adc8-2e9300cf0c52", "indicator--e8eaca52-0a90-40d7-b185-8b62914f818e", "indicator--a21e207c-a79c-461f-a271-5138e3602f11", "indicator--1409d5f5-9427-4115-9efc-39b7221c13f5", "indicator--1038f92f-362f-4342-a333-1d2e810c5cc7", "indicator--43b41f65-99e7-4151-8578-ca8ae50af805", "indicator--09bd544f-3cf2-4142-a926-aad87a91829b", "indicator--bc26f1f3-e3e8-4453-88d0-db85b5b52d21", "indicator--86b7bcd1-d898-4f0e-acdb-703fe537b89b", "indicator--2d3fa54e-38d9-48f4-806c-8c9fff444fb9", "indicator--06e0bb59-5fa0-4aed-820c-d6296900a3f9", "indicator--95719420-03ca-4d1a-8944-a2f86383bc31", "indicator--43f11e41-59d0-46a7-bf4a-3b736e572644", "indicator--0f962d45-8be5-47d8-8468-e37a34961b12", "indicator--6098a5fb-13d9-4865-bb10-570ef94d4503", "indicator--fa23ed50-7bfe-47ad-aa25-e7220b1a577e", "indicator--0a9fafe5-db0a-40ff-9f9d-074223f802a4", "indicator--22b603a3-44c0-4ad6-9d74-04c5d2d4a52b", "indicator--6a18a86d-e0a1-4bc2-9bd8-fe4198fbf3ba", "indicator--562ade2b-4351-428c-a528-9200e6a42583", "indicator--d1d60378-0cae-4491-b942-79022c71774b", "indicator--2dc346e9-1824-49d4-aa7e-ce915f1a9c29", "indicator--85ed2f3b-227b-4315-932a-2b8292703d43", "indicator--5ce112dc-cfed-4282-bc52-5a121f527c00", "indicator--e9328a05-9fd3-448c-9b78-522ba75674da", "indicator--77230934-0012-4e43-a38d-f6c2aee6c234", "indicator--ce02b62e-1997-47b7-ace2-962a03de2be9", "indicator--c0c299ea-1858-4d91-9c6c-4863aa71be86", "indicator--ee014d2e-00d4-45bb-8c6e-2a9d214a8b6c", "indicator--d82849d0-a166-4ffd-a283-d9b0f38de730", "indicator--c2bdb937-aa6f-4c85-8fce-54dd23f0e6d1", "indicator--724f09a9-5e5f-41ef-ab30-33b951ed48cc", "indicator--7dbc8cb8-b06a-4927-874b-dbbdad046363", "indicator--3a5b6b0b-aaf8-4cde-b389-34cd17e0b6bd", "indicator--65bab37e-7702-42bb-a572-eb5f371a70a0", "indicator--08abf442-2776-462d-ad33-308a5228997a", "indicator--a347fe87-ba82-47d8-8d68-d0e5098fb6f3", "indicator--927def19-4a54-40c7-99a9-7ba6ff0cf4ee", "indicator--6e6282bb-e172-4498-898c-29811b59993a", "indicator--2d990895-4d23-4005-8fa4-da6f6cdd8dbd", "indicator--8a5b5b34-ea25-413b-9949-d4239088b21b", "indicator--eefc1e7c-fc07-41a3-8c59-5de864f2cfc4", "indicator--12a753d7-5f79-4a37-95f3-dad3a1e3c683", "indicator--89dd5dec-e3b8-4786-ad0e-c48ab76a4573", "indicator--a19e58f2-08a8-40da-ad5c-8988bd44d611", "indicator--9abb5007-77f1-4189-848e-0e4272bc1c6a", "indicator--11621ada-ec32-44d4-988d-375f44464acc", "indicator--23b31088-0b35-4e3c-ab6c-2376e9ef8c8f", "indicator--317d2e25-4769-4ad3-bc65-0bb78002703c", "indicator--66295eca-ebc8-48ea-adc8-b9c343d35521", "indicator--b9f13a39-1443-4fe6-9ced-b19ae076d5d0", "indicator--30aa95e7-74d3-4046-a165-bb4c9eebc296", "indicator--42d0dbff-5e75-4b03-b434-7556a46f575c", "indicator--1886f58a-2830-4f5d-8249-45b440c677a3", "indicator--36ed2cc8-972c-4180-bb81-1f5c439e9ace", "indicator--c231b502-1302-4349-a694-33c61daf6b9f", "indicator--8e21365b-be2b-4588-aabc-9ffd2076ebac", "indicator--6362bbd6-8828-4f67-9742-1cc82dd632da", "indicator--8eaf6c4c-9f4f-4331-842b-c02e0242292f", "indicator--407ad484-cfaf-4ce4-ba86-be969e5641d8", "indicator--afaa558b-2ad0-4cea-a16e-420b20374169", "indicator--e05495c8-cf33-4988-8a8f-1367ec0e0982", "indicator--25e23fee-0ef6-4333-b20b-59d93514eb15", "indicator--4fa5f17b-03f2-49f7-a425-e73bb3f6aae3", "indicator--1ecd968c-39dc-4ee2-a5e6-acab721252c4", "indicator--69ddd623-58d6-4bcb-95b5-082cb77e9162", "indicator--82bc1c57-a418-4b08-8bfa-77d18ea81453", "indicator--ed2f3b5a-e4f3-4942-ab74-4a0c902fb535", "indicator--808a51a6-e227-43f5-a9f8-cced71b90e6b", "indicator--fa33c6c1-6750-45f9-a862-6f0781128bd9", "indicator--6cb77f2a-60b2-4e8a-8094-61824a40af08", "indicator--79718804-34e5-415f-bc07-141a8caf6d14", "indicator--d22537b6-a47c-4c9c-b647-816555bac8d6", "indicator--e0e4c21d-be0e-4680-97a9-0c6fa8021ff3", "indicator--ba95ea7e-253c-412d-a915-7a06bea77e34", "indicator--c8953f11-878a-408c-8347-9033a558a4cc", "indicator--ab12df4a-43b3-45ed-8bcb-900581f2128e", "indicator--cb85442e-33f7-4c4f-922b-7201fc02c0eb", "indicator--9c09437a-7a72-431f-9436-41f20cdb3cc1", "indicator--b9e61659-8400-4f9f-8701-e55971d46c14", "indicator--3f07cf53-c904-4ceb-883e-3d8ecd5f48da", "indicator--c965c3b8-0650-4070-8757-e27539fbd32a", "indicator--6d575c45-96ad-410d-8f03-32ca28a477fe", "indicator--8d7a5045-c9bb-4bf1-80bd-f626fa483e04", "indicator--1b6a87de-145e-4585-aa47-3226453d0321", "indicator--aa90deb3-1434-424d-b15e-66e0970bb600", "indicator--f95caa8e-d8de-4e86-9fba-df0dccb82b11", "indicator--5501aae5-e78d-4e9f-88e5-12918b4005eb", "indicator--a52ff817-744f-47f2-9b4e-ff25e89f1784", "indicator--3c2947d5-467a-47bc-bc38-92101c494f38", "indicator--8905270f-5f9e-4371-bb38-b35976dacf1d", "indicator--ccc22006-753e-4fde-9d18-4705fc20ccb6", "indicator--04645319-2b10-46f5-b398-4c14167d11f8", "indicator--b581cde5-c883-4b09-b4b2-5f4ae688e4d4", "indicator--4603cd30-c32e-4534-ba20-282815f6ab41", "indicator--0a61a237-6ff4-4012-9f0d-cb90858ed132", "indicator--03047051-da23-4e3c-a56f-22912f0b4d65", "indicator--162cb0e9-f32c-4dfc-95e3-83a8ca3aec66", "indicator--5c037bde-27c3-48eb-8c11-817ee7c2c0ad", "indicator--96a3ab8f-67b0-48ce-978b-4ada7c66b3ed", "indicator--52c0eef4-5cac-4a7b-bcf2-5fbf02cc30e0", "indicator--d1bce066-7268-4ee7-9fc4-acec194ff242", "indicator--dae4f489-b1a2-4ca3-82b6-310869b5d51d", "indicator--65057013-f667-4b1b-988a-2c94aa64e8cf", "indicator--6b8e035a-afbb-4d4d-a3b8-25205001c9de", "indicator--2978b2ce-6f2c-4687-a209-8c0838370852", "indicator--28d1e437-454c-4f4d-b0b4-34b83568d29d", "indicator--fa6562cd-8805-41bf-98fe-1c6734d17f6a", "indicator--2a666af8-7e68-4bd8-9103-5d8a0dfe1ed2", "indicator--e7ad7212-1c1f-4302-bba2-b12b39e4b8ed", "indicator--2791b92d-7876-4ff4-91f1-63d9359dc9ac", "indicator--2b8fb1c6-6976-4c20-81ba-c32af13451c0", "indicator--574cfe7f-8994-484d-a21e-c5c005d01b33", "indicator--dafd1d22-26bd-4208-83ba-c53bb28bc052", "indicator--4091489f-a6f5-4e85-8a28-bd03aa7d35a7", "indicator--96a08339-1e30-4549-89c6-bf26131dd11e", "indicator--23742c9b-a0e2-4306-a96f-648396d27fdf", "indicator--395b14cf-aa0a-4078-9033-76d8e4cc2ec6", "indicator--611efd6d-a6dd-46d9-9e5e-58b23fefc0cc", "indicator--82a3b73e-058b-42d7-a4ff-95e3da5badde", "indicator--c9eeec93-d3a9-4c32-86a5-090fbcb53162", "indicator--81a8aa2e-0a99-47e8-aa19-381d026d87c9", "indicator--9d0b88cc-f9c7-40a6-b160-b544246727ff", "indicator--4d5f9b14-431f-46fd-95e3-6cd1981ae5d5", "indicator--078ab124-81a8-4bbf-8d03-295fb496accd", "indicator--c8b5f091-4b12-43cd-beab-4d8897e43cb4", "indicator--42ddfe8b-420d-4f50-a562-ffc79fc0c6b0", "indicator--39192ba3-0d4f-417c-b18d-3156c257bd35", "indicator--a20b2302-025c-41a7-a96b-8b2942aab94e", "indicator--20ab1d21-fd66-4818-80d1-8e1ae30cd901", "indicator--1866880a-d436-45f2-9876-618cd4f9a67a", "indicator--947dd977-b48c-4795-9bc2-61239d3039cf", "indicator--0d7fed2f-d110-4076-8e00-2ca3598fd1ca", "indicator--b02f9ce4-e566-49e0-a054-7dbbf31819a8", "indicator--aaa09992-d4c5-400b-b060-d349cc39b800", "indicator--4db8ede2-44b5-4be4-b459-c98af2cd1a86", "indicator--e001d6ab-1ed2-45a5-af45-798572db66e6", "indicator--f98d2e3c-c2fd-4638-8c91-b082599b861e", "indicator--4e67631e-670d-4d0a-92c7-8b02a3f91ad7", "indicator--8f2ff234-20a3-4964-a1da-0e3460a78ed8", "indicator--98ccd551-b1ba-455e-98aa-41bc3221a046", "indicator--e1224a40-cd93-4ea8-8aa9-35d3a193f145", "indicator--e4c4f8d4-1d38-442b-a245-12350c20cf29", "indicator--9333c8b6-ec3c-48e0-8375-8503ef20f30b", "indicator--5b4021a8-c0c5-49a3-bf86-835ce2758cc3", "indicator--b80e8647-98ff-4790-9d0f-e1308821fc5e", "indicator--7eb52d1d-4af8-41a3-8179-dafecad56d54", "indicator--f7510493-f360-465d-af60-7f931ec021be", "indicator--62174e27-eaec-4db7-a329-ab8225c332d1", "indicator--6f14b461-d6d4-46d5-be32-6faa1f6facd1", "indicator--476c1d61-21e9-498d-be99-55ef3f985b35", "indicator--b71c3bc4-2f62-4e05-9c0f-0ff7b407568f", "indicator--f6c05575-fbcd-4d67-8a87-ccb193770705", "indicator--251d6303-15fc-4c77-a18c-c958098c0692", "indicator--e629edde-c560-40d6-b5e4-6ac17468f9f1", "indicator--6d69c475-caa9-4857-941b-634c6feff456", "indicator--ae7414dc-cba6-4d3c-a10a-20e0e368a14a", "indicator--3f03f126-56e2-4685-a82f-8028e5c4d612", "indicator--3a1dcbc8-59dd-4da2-aab1-97cbe9dd8594", "indicator--70d60624-437c-4f61-a45e-ffffac9e4395", "indicator--102bea0e-0b75-4f31-808b-d770dcf7af55", "indicator--2d1f9066-4260-4bcb-8d6a-5e0ec4a25337", "indicator--c301ce5c-85a0-452d-ac8c-56e4afc9ed55", "indicator--848ed1c6-9f55-46e7-942b-ae5fe2997cc7", "indicator--e28ef36f-cf2c-4835-b3e2-9a79822461f3", "indicator--fc767070-28e2-4ccc-a216-6a627437841c", "indicator--9cd5223c-1d87-4830-b6ac-e9a9f84fb645", "indicator--fc0cb892-3dd5-43ed-af63-8937a0e8d076", "indicator--7fa9d647-82cb-446e-afd6-abd939617e21", "indicator--3dca8208-de0f-4e51-bf2b-e49ef2e57d3e", "indicator--fff7c801-9c71-4f66-b59b-efa60ede0c47", "indicator--fbea94f1-ccc0-4f0e-aa5c-6da9994ac9f5", "indicator--de68a36a-5acd-4f7e-b196-964c26762b21", "indicator--cbe6ed19-b9ab-4e4d-8030-c5f8cc58e438", "indicator--c7a504d8-427b-42f8-9bb4-a33ef64061a9", "indicator--7e878a75-61ab-4a54-a7d3-31603055488e", "indicator--7e87ea80-8795-43ef-ab17-4dc2c64d41c3", "indicator--acb1bedc-5ef4-40ea-87bf-38cb29bb97d5", "indicator--3d63f25f-3268-466e-88b9-b4427c2b4816", "indicator--6d66c390-3568-410b-9916-8b0199950b0b", "indicator--5b1f2ca1-ac0e-432e-8994-f9396e1546fc", "indicator--bcdd161f-7102-4a1a-8c2c-a2906d5c1c85", "indicator--b423fdbf-a853-4899-9bd2-384f75376eda", "indicator--b92fddf6-ce67-4e55-930a-ddb90e7b8249", "indicator--475629c1-f311-4d6a-b0f8-efff6f0ed7db", "indicator--de2b0e5a-03a8-4d87-92d3-f3ca9af74cc4", "indicator--767711ff-7574-43b8-8411-b66dd0a06630", "indicator--ec3ca9b9-3c3a-47b4-b69e-2b311414083d", "indicator--83fe0cf7-9d9e-41df-93f9-fba9930054de", "indicator--00d5f5cc-894b-476f-8ae7-8d256f5544c1", "indicator--1ca20f72-87a0-4b84-ab4d-c56d556e87f1", "indicator--b55bd76f-76c3-462f-8850-0057ee0ffc53", "indicator--65db4cbf-fb75-44c3-9ebd-c2ba3f1e2750", "indicator--b38533d9-3720-4d45-9800-814566260903", "indicator--397814ef-05d7-47f7-9f52-5a0172fdcee6", "indicator--28cace55-8087-43bf-8509-1fb2b58391d3", "indicator--a2700e5d-d680-42aa-b537-16bbbf035141", "indicator--406ae0b5-409f-4250-bf01-738c52c37808", "indicator--03381275-057d-4be6-aa52-315ef6ba97bb", "indicator--5bb0c5cb-e52a-45e8-9f5a-0d68ea8d9085", "indicator--c81ab053-efbe-459d-b030-376fccea964d", "indicator--7df785d1-fa39-44d7-b973-edf87e6e423d", "indicator--6b359a6b-2c6c-4c61-9cf9-f6486830b48a", "indicator--49994c39-f343-4951-9f77-6fb764d2b537", "indicator--d47c0cb0-51a8-4d04-9255-f51ddb991f1e", "indicator--07e99561-37fb-4868-b9f4-5446567228d8", "indicator--8dd7fae5-2ea3-420d-8f9b-757e1ca7772d", "indicator--4214a38f-e88b-4c90-9ff3-19670a9985ee", "indicator--0c402589-f607-4d9f-bfe1-c586dbadce06", "indicator--069dc322-739e-48cd-8512-8b65dce45fab", "indicator--0740b534-697d-40e5-b508-14d2e2a8d2cb", "indicator--7e328ff3-785e-4697-bb7c-a1dec6451776", "indicator--fe291691-378f-4b6d-a345-eaeafaaee369", "indicator--8b684551-44b8-4328-b0f6-ef0e67c7735c", "indicator--33eac343-fb3a-4171-8904-f652b93f8761", "indicator--0e2f1bb4-d03b-44c7-8820-514542612f52", "indicator--62a2e553-1d5e-4d8d-93ee-4efc0c78e216", "indicator--d96ac398-8a62-4ff5-bf70-6b56588a1c4b", "indicator--798b2842-0f70-407d-be58-8a2d512980a5", "indicator--847f971c-af4b-4565-a122-5c3196cfc7cb", "indicator--c1bdefb7-261f-405f-9df5-84ed83550af9", "indicator--d0bd7f16-fd1b-4ec0-aadd-4b4c4d20b8bf", "indicator--ffd27836-cbf8-4c18-80ef-ceaa3915a1a8", "indicator--a7d3f4e1-f1bb-49b4-a318-9e9e89fc187e", "indicator--72a058fd-6e3c-46e1-9eaa-127c1d89b28c", "indicator--6964196d-4048-455d-915e-143dee078218", "indicator--a082e173-8ef8-4ff5-bad0-3de10f9795aa", "indicator--1bc8352e-26f8-42b9-bcef-5700b3eea424", "indicator--7005f7bb-0a5c-4536-aab8-7f334986b04a", "indicator--bb41debc-263e-4187-9445-fa33c6b181a1", "indicator--1a210618-1e66-43a1-922e-991abb8cf9c3", "indicator--08679b28-6f8a-43bf-b5e0-135978458322", "indicator--b37e4bc0-af46-4381-894d-dda04f4ca6d9", "indicator--2b7cf9df-f200-4369-a79f-fa46405c5220", "indicator--fc8d422a-2378-49ea-8483-b58bd3636cda", "indicator--9ddc2e24-62e8-4765-8e82-6e33bba1349f", "indicator--d9b64d5c-718e-4d44-9ceb-f7e0fb8c641a", "indicator--6d01155d-8dc7-4141-9817-f43366d11741", "indicator--94e90692-36c7-49ba-97ed-0f77f9592cd7", "indicator--7248b8be-9c82-41a7-924c-639349745124", "indicator--f90a8aba-f842-43fa-b231-66fec2068386", "indicator--f7e4affe-b3df-4153-a2c5-e16b886058ef", "indicator--93df5c4f-00d0-4f63-ae2b-3a4ceb8323b4", "indicator--dc39832e-a49c-4b2c-b8b9-6076e5a7577d", "indicator--2e0390d1-8389-4224-81fc-a93e5fb78e9f", "indicator--1730f71d-26dd-48fc-bc51-cb34eeae9796", "indicator--9e37c916-8037-4f9b-9d32-2b46250a3000", "indicator--f837739a-d272-494b-b226-245116358d45", "indicator--13914a26-76e8-4549-8d04-dda03323972c", "indicator--f528b0cb-a261-4b9f-8350-790be942de2d", "indicator--a8b7c825-3993-412c-99cc-690ea0f85d24", "indicator--1c6ae334-e8f0-4feb-ad30-a5691df7ff2d", "indicator--4fcf1cda-4394-4da7-ad55-c6c787243b40", "indicator--466868b5-866b-42ec-94f1-56f2afdf133b", "indicator--cf5c2b5d-c503-49a4-a0b9-c6efb47c0e6d", "indicator--7ef62dcb-ab2d-4505-a963-fd33a3d0a906", "indicator--2c0692b4-9bb4-4766-b31f-377084f9a481", "indicator--93ed1d89-fcae-4afb-99a4-58bd38da681d", "indicator--f85d54ec-19bd-4726-935b-336827f272fd", "indicator--b462dda6-db33-440e-aaea-0aa9001ada3d", "indicator--53f92668-bd2a-44a6-a132-854d67c8e513", "indicator--88264aef-fc06-4e98-b076-999b76fcbdac", "indicator--6f6f6770-2ca5-4a06-9b1d-b1ad84d9b5e8", "indicator--3f0f26f1-9e2a-470f-bb37-b90b81fcaf2b", "indicator--d7403db1-6d58-4c6c-8cbb-6898c8cad556", "indicator--3847933e-210f-436e-99b2-dd9558169119", "indicator--085f7baa-785a-4db1-a8b9-9375208e573e", "indicator--03755e40-dc86-4c15-9a27-5abdd8d14c54", "indicator--19e3a835-dd01-4b79-a1f3-f8b6ba67cc34", "indicator--632b045f-ba2f-4183-a657-b2eddedae2a1", "indicator--842cd4fa-8f2c-4ce0-971a-3059a983f347", "indicator--34143475-ac4d-4281-96a0-847b09469464", "indicator--a41ee46e-d4b6-4efb-9867-7c2c9c9d666c", "indicator--f0e4a678-f733-47d6-b07f-36516d3acafe", "indicator--68629866-9c8b-493a-873a-29bda0dafbfb", "indicator--fc9f0629-ee16-46fc-9b0e-70da0e318ac5", "indicator--62e23d46-d704-4b0b-ae14-2d5175a41b03", "indicator--1797c97c-ccbe-44a9-b2db-d39406ad59a4", "indicator--e40a667b-d936-4306-989e-d1792715282c", "indicator--9f52ccb2-d6d9-472c-ab08-83b2e88e2f61", "indicator--cfac4d92-85f3-4eda-85ae-7cea23e14a59", "indicator--17a40c0f-5e2c-4ccf-b5b4-0bb2cf230500", "indicator--10e39b12-a0bf-416e-b5ba-e810dfd5f620", "indicator--ff078080-a6d5-4cce-b4a2-53bcd512d5de", "indicator--dc5a61eb-802a-4e56-819f-f5af0535f8d0", "indicator--c6633008-52a9-44f6-805a-8ba68633bd95", "indicator--4a8afcdc-6a42-4eb6-88d6-85271628e8e4", "indicator--667aa5c4-2881-4f74-b9a7-ec05739964d6", "indicator--94e3b8fc-af4f-441e-9447-5fea23794941", "indicator--a241f0a6-c8a0-49da-9442-06c0a9a8e6fb", "indicator--98b6d935-d56d-47b4-8a9f-6f7e04f10660", "indicator--415fa32a-51b7-4f5f-9259-3a4fa4918706", "indicator--a3c2ef05-cdcd-49e0-9df6-975d4ae6055f", "indicator--30370742-194a-40f0-b466-39e56585ba21", "indicator--50938c7c-8b8c-4c4e-8c5b-befeb1a29cce", "indicator--6cefe3ae-0e30-4529-9027-68a55e87aeeb", "indicator--638b0607-7af7-48af-8563-8620ac2f7c88", "indicator--9c2591b7-2625-4a69-9c89-e38082354e2c", "indicator--5f0b10f4-11b6-424d-bbc1-ded6e84e7231", "indicator--ad1c74ea-3f15-4660-bdd3-f06ef7ee3e56", "indicator--d971f93b-0655-4839-b07f-0f5974da2e1a", "indicator--6b1100c1-e85a-47f1-8ee5-b5d02f7abf02", "indicator--c71bd72c-2b16-417f-9185-6a763a52fd96", "indicator--efdb305b-9063-4e79-a806-eebfd6493916", "indicator--6fed8106-c09e-4b30-92fc-265ae659feb3", "indicator--eb672eb8-80a5-4360-a75b-81a672280326", "indicator--97cf4b09-c343-4092-85dd-002ef13f8e31", "indicator--c9cb51e0-f047-47ba-aec6-087fc4b078bf", "indicator--5b310f42-33aa-4eb7-a9d0-d45057f73c84", "indicator--149d8751-3dbb-4cf0-9089-adc7eec5aea7", "indicator--7030bfe0-650a-4a21-868b-8b41221c39d0", "indicator--5771d590-32d2-4cd0-bc0c-60e09907b642", "indicator--dc604106-0bdf-44b9-b210-53a419ff1b77", "indicator--de540ccd-7c7f-4f2a-accf-2b4a54cb50e4", "indicator--a5e41bc3-ed3e-46f2-8f2d-ee96b7f6a306", "indicator--597e4c6a-6a4f-4f55-919e-a484850872f8", "indicator--63f326b4-bbc9-4467-bad0-59dfac5ad908", "indicator--8f0054e1-7a1d-40a9-a064-41d7a004db23", "indicator--8a22fc05-3098-443a-8e79-38bf9c3b89f8", "indicator--972aceb8-45f9-440c-8f74-f02e5a38f8cc", "indicator--f0dfdd0f-9e2a-4cbf-bbb4-1c96c7c21280", "indicator--ecac8b19-0e2c-476d-9860-d61631383af5", "indicator--2a7a346d-10d9-4366-9231-8738ab0435c8", "indicator--9d2571dd-abca-48c9-987a-ec1c2567f80a", "indicator--4ec83a16-9641-4b95-9e8c-f91f3dd79778", "indicator--134c5a24-82ee-4d88-9960-2ec2a81e5fb5", "indicator--48898e04-0e3a-4994-93f3-6c60b7f4e347", "indicator--fe34875b-aa90-4a9c-a93f-ad1db8e9fcab", "indicator--8da91c72-1479-4fc0-a9a4-1541a1b1a405", "indicator--3c38ef24-37b0-41d0-ae82-be049e8a1236", "indicator--c780179e-c1be-4d69-93a3-ef0208239094", "indicator--59898a0c-61f1-4984-9eae-d069f102f77a", "indicator--3026c9d3-a37a-4b90-802a-feba99da752a", "indicator--58dc5047-0278-4167-8587-a0323c880cae", "indicator--ca7b79f0-f29e-4e60-9102-23ee3aadb42c", "indicator--5b02ac67-287f-483a-9515-1639a210f037", "indicator--7eeb2ce6-6560-4d5e-88f3-29822c6aa026", "indicator--df40c7da-e284-4cc8-b420-b4d542d112bd", "indicator--cb2e617b-3602-40bc-a6cb-8599a50bf0c4", "indicator--186a25d4-0f0d-4d4c-a57d-3f9e4dc3d82b", "indicator--d7dfaa85-fa0d-483c-b052-c89de00d2ee1", "indicator--1b04f41d-0bcf-4154-81d4-7af7ae0bcaa6", "indicator--d19d4e10-e9fc-4c13-aa23-9d4349edad51", "indicator--f3fa2d9d-79ee-4f5f-9f09-89bce3134a2e", "indicator--c327a745-b512-45e2-8886-77b47a997085", "indicator--a0e9dee0-008c-4eaf-9759-0bff76fac544", "indicator--39007eb8-e760-415f-a343-43e0b19f85a8", "indicator--e432629b-965f-492b-8b79-daab4ba5f070", "indicator--0c9addba-da57-4a2b-a361-0283ec276261", "indicator--c4c1bf30-7d73-4dd8-bf9a-b5683d88cf3d", "indicator--653dc545-b9f9-45c0-a2c5-3ef3d9b54113", "indicator--2ac32f48-bca0-4fbc-8879-ac6cbeff50af", "indicator--3948c0fd-1ed2-4253-b6ef-bfe9a0498993", "indicator--b6205144-b559-42fa-844a-c30b7b73cbaa", "indicator--e66f7ae4-3ccc-4d1a-95fb-7dd01b24b098", "indicator--cde74d69-77b7-4ea1-acc5-62f52603fe46", "indicator--ef55eb46-cd31-43f6-a843-da491d010e73", "indicator--4ac9cf8e-aa62-4f42-a535-5c860d8eeb52", "indicator--3429ec1b-81cb-47f8-ae88-29db6c23e884", "indicator--1299258f-24e0-4122-86ff-a9db2f42e5ba", "indicator--22364fdb-4140-485e-bb29-f008412aefb1", "indicator--8d36abcc-2b94-4319-9e9c-e3f6b0e2cf8a", "indicator--dc7815d5-1d9f-4bf9-a248-48dc33b76cea", "indicator--efcbff6e-ed22-4777-9c22-40537d406127", "indicator--a876497a-9f0e-4ac0-b51c-8d9235b5bb21", "indicator--92195eb9-b8b4-4eee-acc5-e28cfcb0bda8", "indicator--d44496d9-7574-41e8-9201-a936704e413b", "indicator--50f84cda-11a1-4ffc-8c1a-551f02b03cff", "indicator--ed6d956e-687e-42e3-8f52-cac4983e45f8", "indicator--ca313af3-246c-49dd-b0ad-446fa3c8d9b3", "indicator--2b827b14-7cdc-48c9-a51e-c85725a36fac", "indicator--7a7f0081-e46c-4946-a155-968793661687", "indicator--06df281c-9885-4419-a6a2-8c523cbfcbf4", "indicator--a3a3ea4c-34eb-4fd4-a5cd-1342c55dd2cd", "indicator--755fefb9-81ae-4f0e-875c-0783251203ce", "indicator--94c6aa7c-79e7-447d-8934-875146a8aeba", "indicator--a034174b-7854-45fe-8088-5b19a17aee87", "indicator--0b5f1918-6fbf-42f8-895a-3d42073e877c", "indicator--7ed17a97-91df-4482-bfc3-5ce9f3f2d79b", "indicator--11fd59cb-41a9-4a8f-9613-bdea516422e3", "indicator--d6fbbb62-32d0-4ec1-b866-55f6d691fdec", "indicator--369ad0d1-c737-4b61-ac73-ae2604756cf7", "indicator--fe97437b-e56a-487e-88f1-ff691b9ee55f", "indicator--faa155a7-ceff-426e-919c-a9bf48224a92", "indicator--6a5a6199-c2f5-4d87-9b3d-d560d82c0b0a", "indicator--bb06d03a-5e84-4cab-bc4a-7aa91913e29a", "indicator--ce9d3ccb-b1f9-4ab4-a558-ca45bb77edb9", "indicator--6684ddd5-7341-443c-b77f-fc6c2334a58d", "indicator--2d36c6f4-4edd-41a6-907e-39f5271548e2", "indicator--5a5ef3d6-bd06-44d8-97d7-6677af80ac6b", "indicator--1a1554e4-c672-4cf5-ab16-75d0782fd409", "indicator--22144947-166e-4712-88b8-402da1805b65", "indicator--c7a71f26-6a74-48f5-8a50-58f85adec051", "indicator--006b0a31-05c2-4610-9068-9b8c8c769a0d", "indicator--7c0cdd00-6080-4247-861c-9a34b6405b6c", "indicator--f9638c48-f77f-40f2-8cdc-05d054114de8", "indicator--2f8e5826-6958-4490-8a20-e307bfe2ed53", "indicator--2bd47087-4f45-4146-a145-ed8541e1aa9d", "indicator--04587c9e-ab4b-4ad3-addd-5b0f06f019a8", "indicator--98fc801d-e567-4759-93e3-a9223fc3f958", "indicator--9ca8da38-b783-4f80-a136-fdddba4e04d0", "indicator--00c41efd-4b91-4d3a-95cf-576f7b6ed87c", "indicator--71153609-93c2-4ae8-8f65-8d719b67c763", "indicator--91d09e8d-1217-4b12-b3b1-889f1f3c174d", "indicator--8a7458d1-d738-4373-8d20-628af0fd293f", "indicator--b00fe72c-733a-4b13-bf1e-febaeb980978", "indicator--987812d5-92bb-4776-82a4-2a5f422d883b", "indicator--64fcdc86-6fdb-4de5-bf83-55c966c9fb70", "indicator--1e9c74e9-0808-4343-a962-9a59e1266b4c", "indicator--293c9fc5-3e93-4f9d-9a0e-81a5d9a1cef4", "indicator--90502417-c813-4741-9f6e-6b39b49318f6", "indicator--fba2dfa3-5f47-4cc2-9f1f-ca03a5daeae1", "indicator--c0b6ad8c-9a8a-492a-a586-1b289e8b438e", "indicator--ad768c04-242c-4405-b898-2d4537a8d4ba", "indicator--1e3d8327-828a-4bb1-bc22-f626f20c40c3", "indicator--04f75fbc-b17b-41b0-ab83-5453b3576127", "indicator--66290f9a-c760-407a-8524-2ff9ac361742", "indicator--8a619f14-edac-48f7-af91-26e97ff78bc9", "indicator--f89b77d2-7b76-4c3d-9872-c20b919dc505", "indicator--79b4706b-17b4-413b-aa9c-f8d71f3f1ac5", "indicator--fc740518-4585-48b2-873f-2aa2e13c4dea", "indicator--c062d8dd-dc84-44e7-b7f3-f74eb7905f29", "indicator--8c8416b8-bf27-4613-a0da-d76569be7da7", "indicator--0ee6a998-f56e-4d44-8529-590e8930610a", "indicator--0c4976b4-0351-4ce4-ba37-142887e3c794", "indicator--c4435537-b8be-47db-b895-5f64bd964ee4", "indicator--e33ffbb6-b504-497f-a314-c62ad318324e", "indicator--041778df-ebc1-4e95-be37-44df546fe157", "indicator--20588b89-b96f-4f51-89f4-4f4a34341025", "indicator--4c803be3-f600-4ee3-b880-c53797154996", "indicator--7dac4063-44aa-4592-8c87-b0899da072e7", "indicator--d61b3b41-1757-4e13-b755-0e7e0c273f16", "indicator--62c1bc31-2c06-479b-90f7-3523c396ba2c", "indicator--e55190f7-49f4-4557-8648-da2104331e6a", "indicator--01a729a6-06f9-4f62-a445-68a56365d6fb", "indicator--5cff7bfb-271c-4c05-ab84-37696d0d55d8", "indicator--fc05cd8f-f40e-439b-8d6d-212724fa7716", "indicator--8ca949e1-95db-49c7-a61b-9490b4396fb7", "indicator--3e255138-6db7-4003-b9c8-46668ed5054f", "indicator--46e0602f-9391-4801-b459-fa365dff1898", "indicator--768d203c-8988-431a-b4ca-f664595ddd92", "indicator--9fb4f978-ad6b-4429-a3c1-3460dcb2cd43", "indicator--8cecf1bc-9727-4285-b1e4-2782045563b7", "indicator--91af08ad-b29c-4333-af41-b9621ffd2b89", "indicator--4f8c7c67-3a8f-4f5a-8507-5c8dce29f91e", "indicator--9928953d-d3ac-4023-ba3c-780c6de4faf9", "indicator--81c1287c-e966-4802-9539-42f804ba3e99", "indicator--84213708-a14f-412b-81d1-50f5cb631412", "indicator--6576aed1-a57d-498b-9ebb-de6548f95ce3", "indicator--b71df779-b472-41e4-93f8-63413d14130f", "indicator--32543b57-f78e-4d58-b6fc-71b54f3fb9f9", "indicator--b084bf30-701d-4d82-9980-d9108c181fe0", "indicator--87c5431b-d025-4195-8fc4-b2f5647ad4f4", "indicator--4ab53e8a-888e-4d51-b2d5-2ef4e8547022", "indicator--7e9651ea-d7ad-4ddc-a8d0-51ff08c37ce3", "indicator--97d882a1-a31e-4901-b4fb-42d26de66311", "indicator--96550439-dcc1-4098-96f6-f3a6d0129096", "indicator--80759c45-2b74-4a2e-b3a2-1bceeb9bbbae", "indicator--876da4c1-9f9e-4f61-902a-fe5f77adca89", "indicator--224e077f-3614-44ea-ae06-baad9baec6e6", "indicator--01e170f0-3c30-4a83-8a7d-8253a7247a45", "indicator--ffa695ee-ebee-4f86-9f5d-5d878c1661a5", "indicator--672b42fd-3cad-4c63-9ec1-cc830e8f8832", "indicator--6a03e943-1b52-4d5b-bdbd-61ec013e82aa", "indicator--a1398072-6e1c-4196-9d34-6bc9a13a1318", "indicator--ff501cda-43b0-45a6-b09c-7e4c6ee3b81d", "indicator--144ab893-cb11-48fe-9123-e0f8374264d9", "indicator--860d4297-4dcf-49c7-a652-8e74a2426ae7", "indicator--afc40197-ed14-43ff-a9dc-16c49c6db427", "indicator--24e91c60-c4a2-4614-8727-8383cc1b88ae", "indicator--2d6d4bbd-9b34-454d-ae40-3af11f82e19c", "indicator--549f2e18-3ad8-46b8-8ae5-7ff158bb8afd", "indicator--de172b1e-35d6-4238-8e72-a716637a6cfd", "indicator--9bad716f-ade2-46ff-941f-71303efb1c3c", "indicator--fd51b78e-10b1-4b7a-9046-92aa0771440d", "indicator--d167f4b3-947f-46f3-bb41-56c381b684c2", "indicator--86bb0881-f571-4b13-b07a-85cd9274fc4c", "indicator--0365f8e7-a477-4c5f-84c4-283c1b32b113", "indicator--f9b78de9-3d82-4b34-acf8-9182717abb6c", "indicator--ccb32849-5a48-4b0c-9b0f-3c63482e7c69", "indicator--36df8350-cc95-4d96-af9f-c0d2589130be", "indicator--ac6d9c6c-c438-40a3-9e95-a7f291587fea", "indicator--7ebb3817-7e12-45e4-a020-dd2e594ad0fe", "indicator--443c0e0c-3b0a-4c5c-a155-e02a9f8be6d9", "indicator--64b7bec6-df7c-4b76-906a-5d2be840961a", "indicator--6b4dc817-a3fa-451c-b076-461076e0fc7d", "indicator--89c17230-d794-4d8b-8361-49928035629c", "indicator--da6bb922-65fd-47e5-9102-51267b4148c1", "indicator--72d49a1a-5c91-45c5-b051-5aeb54154d47", "indicator--b23e7e9d-021b-4da7-9088-5b1f3d5a100e", "indicator--86b4cc63-759a-4877-920f-a59b94869897", "indicator--9f7b282a-e8f0-4175-bbf1-618c7389ffd3", "indicator--41b6fbd6-1409-4855-b4d0-54e3272025b9", "indicator--bfe087d7-e44e-4500-9393-f7c46d4fc1fd", "indicator--b300eb47-c2d0-48ef-9f6a-d174245512b1", "indicator--3166590d-dd7f-42a5-82f7-e07e187ac13c", "indicator--2b190f88-443b-4c68-8b66-0c51449219c1", "indicator--aed517ee-254a-49be-a776-d35775ee1da6", "indicator--a1edeb58-c118-4d21-bf67-c12947a78be6", "indicator--920bbbe1-8104-4bff-ab6f-a7a5488dabeb", "indicator--f42d7c62-99dd-4860-abe5-0cfc4c8f6d53", "indicator--7827a32e-b8cd-4994-b35a-8c43a5b0eb62", "indicator--dca1b878-d166-4583-8f78-8a41952bac25", "indicator--ffea58da-8a92-4e3a-819d-1288cd2141df", "indicator--b9f5e6b7-9bf2-4b24-b804-2781b62ab420", "indicator--a446b549-6ea0-43d7-b89f-2684976c66fe", "indicator--aedc6234-86fc-4d40-9f95-2014a4e40179", "indicator--84e77403-9c97-495a-9e5d-d67c2b151f1c", "indicator--28b5e396-50bc-43c7-8e2a-bdb2852e9add", "indicator--9e5189f2-55a2-4a96-ad87-9af4cfd39a15", "indicator--aec3fab6-0f8b-4b58-ac82-8ed57a34db8a", "indicator--2d89fdf0-5bb8-4e5c-bf84-8bd7d32541cb", "indicator--33660b3a-04f0-4e0d-a3c8-20639941c4e5", "indicator--e72ffef1-c307-44c8-ba32-d5a89c807a38", "indicator--1e9a5bfc-b227-486f-aa25-0f1cb670a966", "indicator--ea4af11f-7d82-46d9-88cf-4ff705e81644", "indicator--5550f0d9-1f7c-4b9a-97a4-0d0d3af58695", "indicator--de6a931b-9605-4143-ae3a-fcf14b9f9871", "indicator--1e1f1261-fb37-4661-a0c8-6e56b2728273", "indicator--71edfcf9-8ddf-46b0-a26c-d6a7c055da09", "indicator--45fe864c-89ad-4db5-a7df-e11cefe8aeff", "indicator--a0c93792-7fe1-4393-b590-a9ef7c859c75", "indicator--5c1c2141-616a-4aec-8f69-483140ed9c3a", "indicator--2fb767db-f17c-4de7-9050-4e72ce15f8a6", "indicator--55de0dd1-cec8-4ded-a661-e9cceba46d5d", "indicator--d7513c8f-3707-4b4e-b434-e83905c24f00", "indicator--354a5414-ce88-479f-ba48-a4515260255d", "indicator--a55070b7-06b4-4c2f-b501-b06534702e05", "indicator--fec6c79f-ac1f-4f4c-a395-0ef7f4316e9c", "indicator--47b58745-f059-4fd0-a40e-01b01578a51c", "indicator--6b5e5ebe-1f30-439b-a0db-2366450a008b", "indicator--e845262d-5dd2-48b3-a0c0-2af3f0836e80", "indicator--6070786a-12a8-4e43-b3f6-20ecd59303ad", "indicator--f95e00a3-5558-4bf4-92ff-d002720b75ff", "indicator--e5ba242b-d67a-488a-825b-8a42bcaea1c0", "indicator--fc892f0d-330b-4ffd-acbe-b20420160935", "indicator--9c08e854-fb65-41ac-b16b-e0e2160fbe32", "indicator--2b346bdf-a8f5-4d94-bfad-e41574023fe6", "indicator--b2afeaa2-9a5e-41a0-822e-4cc81c6ae9aa", "indicator--203b07eb-41bd-4534-82ff-46b6d936760c", "indicator--2b437b90-d556-4229-a7ba-17d71d01515d", "indicator--1632c1dd-1505-4014-baf7-48cea0970505", "indicator--1d0c13b4-7ea7-4315-ae45-9bce3bd63a28", "indicator--7488552d-187b-46d0-8557-70dcf0d17016", "indicator--e58b0fc0-c42f-42e0-962c-58017a5d1d2a", "indicator--77396c72-4d01-4245-8372-2d640aad045b", "indicator--8fb8ac82-4634-4756-b2c0-ae4f55d12ba8", "indicator--99640029-01ed-44cd-984d-1730c256f606", "indicator--0992a510-3f6c-44ba-b624-49f89caf3178", "indicator--a78f5f2e-99b2-4b45-a62e-680d2a1316ac", "indicator--5219b611-d963-4c08-a2d6-5a2c3a246a22", "indicator--5a807570-07c3-4fe9-b7e9-76ab93508069", "indicator--fc780eec-bfcf-4ac8-95fe-87cd0827dcfe", "indicator--270d0448-e4ee-4d77-ab2f-7f66007bc9a6", "indicator--df71697a-6206-493c-8543-46643912aebd", "indicator--0678f9ef-6bca-4760-845c-2eeedfcae7de", "indicator--5d8f27fe-dddd-41a4-a1c4-496db571242e", "indicator--90feb06b-b4de-4a93-a93a-f78b3261f4eb", "indicator--c9d93d87-38b9-4788-b17c-dcffdb21583b", "indicator--605ee876-9bca-4f18-b4f7-4757161e25fe", "indicator--d51b6109-abe5-46ed-b7cf-88bbe40446ec", "indicator--73f16adf-872c-4750-9c10-5efdcc8dfa0b", "indicator--3cb10ff4-3adf-4dd0-9d16-f6170096428c", "indicator--ceb7563a-86dd-4d28-9d76-9f1e574e34bb", "indicator--f3e2ae3e-fcb6-418c-8149-cd94a8c646f4", "indicator--b164b2d4-cd59-4faa-bca3-268053d90e41", "indicator--4c6936c6-d07e-42a5-8c0c-dfe747893c95", "indicator--4691d1d4-96a0-4d89-9b6c-cabe21d4f24d", "indicator--0f19aecc-022d-4c09-841d-a52d2578a92f", "indicator--d8418d23-9f2f-4969-9773-9c6682c01128", "indicator--a22b618d-a5c1-4f39-a496-af273ebfac02", "indicator--685f6148-1a5f-4fb1-b10f-433ed354e07f", "indicator--0f994acf-cd54-4419-9db4-083afffe2647", "indicator--5d1832c4-2efa-42f3-864e-d4b86582d67f", "indicator--3c719ddb-3265-4a55-92f4-e8249435e330", "indicator--81c7746c-16a6-45fc-9134-b815f634920f", "indicator--6cd0c284-ca00-44b7-9f0a-d3a7fe7bfa78", "indicator--92a69255-39ed-4739-8b40-1eae93921242", "indicator--606dfe11-395e-43a9-a56a-db77b3d24a5f", "indicator--a130b695-dae1-4c41-8277-3d7c48971962", "indicator--3e455d21-015e-4385-96c4-ae56ec6fbfae", "indicator--928b2bee-2fb5-47b3-9519-c89444e1abcf", "indicator--2abd8f53-0258-4afd-8da5-35ad8dcabb0a", "indicator--e981d3b1-a686-4be1-9752-385cd5aa2a4e", "indicator--b72017bb-92d5-4ea4-819a-83e1b3a89eca", "indicator--16ce2038-a2ea-411a-bc6f-47f21e8fed27", "indicator--dd251424-c58f-4ab4-8ebe-c744e28e81eb", "indicator--289af231-8b51-40e5-9158-f98cef223011", "indicator--d63d5e34-17e1-4123-88db-29b44d6cae9a", "indicator--d1c5d0e8-8ed6-4a88-9c91-a2b9d08b1096", "indicator--8891dc54-2765-4812-9ca1-ff4e80ee7695", "indicator--6feb4f78-f6b5-46a4-9d5f-a18a09573c66", "indicator--bf0914bd-abf3-4644-af30-55a996a8fba8", "indicator--8687c979-0c25-4dac-af4c-734382cb0ef6", "indicator--ed11cf20-7f74-42f0-aee4-519932d1d397", "indicator--76e6e41f-0d86-444e-b59d-5aab510d27ad", "indicator--9999c703-d190-4f9b-87be-bdd43798fb76", "indicator--f0bf10c5-29dc-416d-a5b3-76f176a9d801", "indicator--7617158c-63d9-46d9-a8e1-fc2ba8ad7756", "indicator--11226b38-dc07-473c-b7ef-ffef112c0523", "indicator--dda78be5-0f18-4ac7-b714-8dd4562310e2", "indicator--2d0c9aa4-6e08-491d-8b63-3ce45578e759", "indicator--735b4b75-cfd9-4be3-acfb-3c6e19e8efd3", "indicator--a05c4078-2612-4214-90c2-64913bfd9b5e", "indicator--ea91950d-3649-44b3-b9f7-c9025e06a709", "indicator--183fe362-743c-4268-a1d5-d4ca01751914", "indicator--881f2df1-e439-49d0-a2e7-0f5fc64a4ae0", "indicator--a5d0fef6-adfa-4100-9664-a76a6dee4354", "indicator--e1f09db8-3f2d-41ce-ac6a-bcdf3b123760", "indicator--7db392ed-ca16-437f-a228-534b56714756", "indicator--8b933fd0-17ab-418d-bc88-3554d35730f2", "indicator--e8aef339-d95e-48f9-a742-8fb86f087407", "indicator--a82585e6-8311-4ae6-9b5c-2fd30f3ff603", "indicator--e9922ee9-a109-43fa-89e6-7d525e81663e", "indicator--917ad552-b686-4328-9b5c-59b737ba8335", "indicator--b76e734b-d04f-4ea3-b3e5-3d823c80cc6b", "indicator--270decff-e1bb-40d1-9760-b8e8121ac5ce", "indicator--0a60db9c-f270-4091-88fa-6c540ca62517", "indicator--c81af74e-e321-43ff-88cc-322689c124c7", "indicator--131c1bec-844f-4497-b381-5579621d6529", "indicator--9cd16f8e-13bb-4da4-8ee8-d541eb4c5f33", "indicator--25c928d3-bbd3-4ab4-80c9-ec6a4cc48414", "indicator--e4f70536-7875-4df3-ad65-9fce12a64068", "indicator--0fe3b8c9-14c3-4173-80e7-9f1154019b04", "indicator--2ef333f9-e816-43d4-bf8d-639258b0a1ab", "indicator--7d27d70a-563d-45da-8978-6bc686e7d72a", "indicator--391ede98-120b-4842-806a-1d77fd85a5f6", "indicator--97824876-37af-417d-9a47-996371fabd7d", "indicator--4c99263b-8db2-456f-a2c5-d8770f71acdd", "indicator--a51d24c5-1a37-4e7c-bf57-c06e5414e3a6", "indicator--84763868-0a45-4c1f-885b-128e68831ac7", "indicator--14cf97aa-df52-4856-9873-c73c05013164", "indicator--808d7974-307f-4935-bbe4-1e0010068918", "indicator--bb465d7a-f39c-423a-a99b-21f70689e702", "indicator--a360c1d5-21aa-4327-baa2-2b9ca7293fa8", "indicator--a84e6ee8-60d2-4ac5-99b1-bbb7f7bdf954", "indicator--8d9c7ead-a584-44a2-a9e9-b3e73b3ef43d", "indicator--494a7048-55ab-4292-b194-d66ef1fc9a87", "indicator--3b27bd69-9bfb-498c-a9f9-dc605429c211", "indicator--9872791d-9c10-44d0-beee-be2d1aeb5fce", "indicator--0f44d146-b2ac-4524-b224-a6d40ae85756", "indicator--9a325bd1-7936-47f9-9c6c-49827a96a76c", "indicator--d2c32eed-a9c1-465c-bf0c-9855c5091009", "indicator--d9505632-057e-4385-8f94-0811c2d75c88", "indicator--52771fb8-e9a0-4a8f-95ff-4de164bcbf29", "indicator--89b36ac0-cda2-41ff-b994-9e97ae656a40", "indicator--67373c02-8177-4bf0-9b6d-92f78fceaa14", "indicator--4691ac09-4b84-49ac-bc26-24cf2dfc9aea", "indicator--e246e1d0-baa2-4414-b412-80a730e0d84a", "indicator--2596142d-ff57-4d8b-8d06-df946ee1aeda", "indicator--70a5a7b6-de12-4a63-a525-58efc53928f3", "indicator--46f46fa6-8ec8-43cb-bbe3-775e5c4de177", "indicator--358de9c2-75ff-4376-a0b2-7dae40872ea1", "indicator--cacb8e35-f177-403b-8158-569304b68517", "indicator--26538f71-2a71-4d61-9d9c-3d6458d4c672", "indicator--c195e056-5423-4f29-937a-70f440b7cfdf", "indicator--20f0a16e-52ec-4a81-bf57-9483a77f590e", "indicator--e60f5e96-11b4-4c63-80c2-7692e04e5a7d", "indicator--d870c7eb-6f45-4ec6-9513-68d000fae981", "indicator--771a40b6-debd-4430-a5d2-f1084fe97dca", "indicator--dfff1d15-1869-4bcb-971e-9a23244cd534", "indicator--10d04c8d-3510-45ce-877c-25291f3eb503", "indicator--a7a774bb-c1ae-4b44-a4da-14060a3782b9", "indicator--2216e3da-d190-4f17-bd8d-bb0765d1d38e", "indicator--b608d425-eaf0-4ab1-8677-1a20b74c54eb", "indicator--5f9882c6-2628-4ebe-a6ee-4bf0d67dd070", "indicator--b01ec483-0806-4b18-b235-1d9bc6ace1cb", "indicator--4178a03b-d3bb-4196-921b-5fcf5e8e839c", "indicator--5bbacca5-3d0c-49eb-8c4c-1a45120a2bc3", "indicator--70fc8096-949b-48f4-b048-1bc30b1c58f4", "indicator--d7449322-d315-44d6-945e-5fbb596216e5", "indicator--e99a81dd-cf23-4277-a375-1cec3ee5fb17", "indicator--0dc4fc92-de8d-4d5d-9095-9007387412d7", "indicator--b08bbc15-ae33-42e7-8445-bef9a90b214e", "indicator--bb4339ed-7d9e-42a4-9577-2b8a5f1ad8be", "indicator--ccfbb156-2ae0-417e-8deb-58aae6ffa66f", "indicator--94ecf943-abaa-425e-a4d0-9140ed5568ee", "indicator--5afe1158-233c-4dc8-a461-e833990e2b96", "indicator--06597fbd-0d42-4e15-9f7d-98b2d6a63a82", "indicator--4f3c93f1-db65-42fe-a193-cb098e619b07", "indicator--2ee5ef82-7f45-4e2a-8c0d-02828ce1c49a", "indicator--66d4530c-bec7-4bf4-937f-0db0a084a72f", "indicator--d4d72b7d-2d25-48dc-bef1-1c2042a22d76", "indicator--470479f2-7b8c-4385-92b0-1c57398176ec", "indicator--7cc9e077-7669-407e-9479-5e51c73fbd39", "indicator--828a504e-e8ee-41cb-ae34-72424b7ab620", "indicator--1f5b173c-2555-42ad-a92c-0c1db414e7c2", "indicator--a608e3bb-a05a-41d5-864a-890966c8b3bf", "indicator--efc5af70-930e-4405-9909-551bfcbc2d1d", "indicator--3d6ede95-d7b2-4ede-9d08-f10b259b0d60", "indicator--0cc8e7c5-fe5a-46b1-b9a3-4bb9d5e23b4b", "indicator--bba18550-b469-4afc-bb25-e8e531d8856b", "indicator--4f9b15f1-4d59-4324-a006-75b569c2ca9c", "indicator--670e9194-1812-4b69-967d-750cec4b9a4f", "indicator--3fe1f263-9514-4c92-9e8e-e4133c8830b2", "indicator--4e475c0d-225e-4f43-a031-adf444c81db9", "indicator--50528314-322f-4458-97a4-4a56f6af1f0b", "indicator--2afdc66f-19ff-4764-b42a-e4ba878e4075", "indicator--5771384e-53ed-4f69-803f-f71800c08ab7", "indicator--dc73ff52-58bc-4dfa-96c7-3ee7f12ce9ee", "indicator--15e224e1-f1aa-4ce3-afbd-7636e0817c0f", "indicator--aaea91b6-4ac9-4d19-923f-31191bf35f09", "indicator--5fa92f3a-40a9-4102-9523-f88ab20f5ad0", "indicator--a8bc7ed8-ca39-4a24-919a-8aa09a915405", "indicator--bea964b7-3729-47ae-bdc3-b90f654ecd5a", "indicator--2e52656f-0d82-4291-a39f-39c8d4ea02f3", "indicator--b90d35ba-4ab8-46c8-b4c4-f7ece7dd4a99", "indicator--5504cffd-8252-4b4a-a935-891e70422123", "indicator--20ce2535-4640-429f-9cc1-de2c3c481849", "indicator--abb46162-9717-4e1c-a7ba-d8ba1b8705d9", "indicator--8956761a-004c-4b29-ac3f-a97fab3ffb64", "indicator--c215517b-f4fa-4c02-9ba2-edefc2fe399e", "indicator--df30140a-fd67-43c3-a859-e199239008f6", "indicator--3b7ce2af-2962-4ee0-9a0f-62a357e33fa0", "indicator--77124c13-002e-435c-8611-118654818df4", "indicator--53dc220a-45d9-41a1-818e-2fdf60d9e79e", "indicator--cee55eb4-c3e3-41ba-8ba1-eb66ff31749c", "indicator--2a92dd32-235b-4363-b841-a4daca6013c0", "indicator--5ea1059c-259c-4590-9b11-d3b39aeda990", "indicator--43f7223e-8a9a-4f87-9997-44640e4d82fb", "indicator--6b54fc0c-efae-4b37-abd4-b5bd3c88c712", "indicator--bdbcbad9-cc1e-48f8-94ae-b8bef903ebb5", "indicator--ac0c8210-fa22-4239-9c1d-a89a6921c5df", "indicator--3a113ac2-ab90-4860-9e7b-de072d820c54", "indicator--41ad1c2c-6a29-4ae5-8d9e-8e9b0395c169", "indicator--7f26b7dc-9baf-44cf-acb8-166c97c65839", "indicator--66e3449e-843a-4f6c-bf11-414912ea7786", "indicator--1ee004f5-b5a8-4960-aaeb-936e9fb15edf", "indicator--594668e7-2c10-436a-83a2-a83a15b08258", "indicator--87ebdea0-d133-4f21-a0ae-1e72a60ec71d", "indicator--11adb8e9-5be8-4e6a-8a59-42b244556321", "indicator--d493f9f3-e70f-4208-a157-531cbea9b2ad", "indicator--da5fcc2e-36be-4192-b425-55367ac2ee3a", "indicator--eccdb246-0488-4a24-9ac4-c6535d9338c2", "indicator--70308908-a7e8-4cc9-8906-e92b59dc3c0d", "indicator--2e6de0ff-2c9c-4d99-b09e-d3d0ff5477e4", "indicator--d818fab0-d9b3-4580-bce3-8417fc460864", "indicator--c5d82069-84bd-46d1-92b7-d3ac1ec0d9bb", "indicator--9de1d028-d277-4f9f-bbdc-c36bddd82736", "indicator--98bd639f-508f-4571-8cf8-a8b163c43deb", "indicator--5834450c-2faf-4a67-bace-0ca308541c55", "indicator--18861f01-4c26-4d0e-8f96-d955ec732176", "indicator--44cc0a8b-7158-4e30-944c-73b51e6a8977", "indicator--dc386fad-e50b-4db5-8430-8b782b629e69", "indicator--6c47b607-ba77-446e-9e58-74b6567077aa", "indicator--f4186baa-7e58-4570-ae0e-e0e7233bb896", "indicator--6d7df2fb-b9ca-462e-a59e-113736028671", "indicator--7e638bb6-0b9c-4b07-bd5b-b308cf00199d", "indicator--2e10a11b-ec4b-405d-a779-a243cce71d04", "indicator--bc09a59b-6b26-49cb-bd7b-3dddc41dfa32", "indicator--7f4ca2af-5c0a-4ea8-81b8-d7eed48ebd4e", "indicator--43bdc928-6d02-429e-85a8-d111a02a65e8", "indicator--d2a933b1-ec0e-481e-bb00-d1e0717d1c33", "indicator--4f1205fb-aa47-42b7-8f9d-36bce1924c0a", "indicator--a9fe4a55-514f-4c50-ac7a-1abbded4696f", "indicator--cb641a66-a733-4679-9937-891ecb802f5d", "indicator--cc3474d8-caa7-44a7-970e-8d30f676d5ed", "indicator--588831ec-364d-4944-b7f3-ba0b1dd39228", "indicator--f4b3a2b2-8531-4a11-ae3e-6e10feb04894", "indicator--14a7af11-50b9-4c57-9033-9188c42ca31c", "indicator--74e320b0-71a0-4730-95c4-bd799a8de88c", "indicator--ba9630cc-3ec3-4e2d-8223-d3faecd81275", "indicator--d9b983e8-2513-4e14-b765-92ce1f136af7", "indicator--ca587392-1ccb-4834-b55f-70cae187469b", "indicator--67fa4af4-9704-4e7c-92e5-9b1a14fea400", "indicator--7528aa19-9793-4843-8b25-b3624c1db0dc", "indicator--e9eadb42-b12c-4fca-93db-092148c1521c", "indicator--173bf19c-4ad7-4168-b5ae-9b008a806876", "indicator--6e3c215f-c9c2-41fc-a2b8-cfcd1a3cca8d", "indicator--b3f6702c-6580-4388-8c32-e252817fa710", "indicator--cf87c516-3048-4a05-a909-2850cbdac7e2", "indicator--6d85a1f5-4809-4c20-adb8-0dbcadc393f5", "indicator--b22fccdc-fb79-4bca-ba55-546b2eb6a045", "indicator--cf885901-7669-4488-bc1c-41bb18abe011", "indicator--87d10b2f-6749-4630-93f8-6f15186f64b7", "indicator--67f7d8e1-3134-4ed5-9c2d-7b7396eb1ddf", "indicator--40fa156e-3efe-4026-95fe-1a7a16d93f81", "indicator--d80861aa-5387-4c47-9dd2-a728b63993db", "indicator--149c8075-4e5b-41c8-a4db-c297d2760e19", "indicator--6ebb8c9e-d7ad-41b3-93ad-0af84bff4853", "indicator--bd1c8a16-79c0-4d49-8272-aeec3dc5edbc", "indicator--3b62a72b-38d1-48d2-811f-690735b797b5", "indicator--a5ae4a5d-f776-4d6a-9c5f-2f05d75cf711", "indicator--04ddaf5d-142b-4512-9a3d-c47a11bb3edf", "indicator--e028e9b8-b689-4081-b8b3-d72a47b5f6eb", "indicator--c904a97e-b46d-45de-b89f-65bc0045f1bc", "indicator--5cf0fd00-7312-4e39-90a0-262810e01c1e", "indicator--c7956f71-bd2c-459a-9b2a-c4ce96d02de5", "indicator--cbfbdce5-b18a-444f-a3a6-d8ee3f9fe7c7", "indicator--e8903083-654b-4a75-9d4b-672ad0a0e46a", "indicator--19e1a8c0-db66-45f9-b3b3-aae55e005805", "indicator--4fe3136a-fc7b-4219-8d61-0a479dfbe2f9", "indicator--91f61407-d2e5-4b30-94a1-670a5c239b88", "indicator--18e7ab79-0e1d-4441-808e-a4d9417d3946", "indicator--07b1dd7e-74fb-42a5-9c77-422689f95942", "indicator--2432056d-293d-4caa-90c0-c2a89ba6f2ce", "indicator--2e7e5c45-d7fb-4619-9ed8-b47947cc4b6d", "indicator--7c1de551-7256-4889-8f5c-24a7c02b1805", "indicator--a8e7e380-7dc9-4845-9a54-45f17e4fa4a6", "indicator--a7dac4ba-5077-4084-a23a-f66821958548", "indicator--132c6253-cbe8-4d00-a3b6-0afdb77ed422", "indicator--c9cca49a-cdca-42d1-8f01-f69ac00350fb", "indicator--c4635a0e-fbcf-4687-a665-66a5f90cb7b6", "indicator--b169c231-007d-4c7a-9e75-03998dafeada", "indicator--3bd6c704-e733-4ee0-a54b-6718b86ca7fb", "indicator--37d29da3-7e23-4b6e-a8ed-f657471cdba3", "indicator--ac6eec4e-8a88-4b7c-ab10-a4cbc7cada1d", "indicator--d48b9526-cac4-4684-952d-96a36c28164f", "indicator--4b137230-338d-43ac-8157-1bbe0a3f98ff", "indicator--e590f500-d829-4b83-ad43-cb230a96c8c2", "indicator--39ca690b-72bc-4102-ab7b-3754d5ee727b", "indicator--cd802c57-a4ba-447f-96ba-07b557cf5721", "indicator--d15e4233-c58e-4192-8368-ca7d82cd0932", "indicator--97268f60-2991-46cc-b568-42f5d53c4c54", "indicator--467e385f-8459-48a0-bce7-2f36cee77878", "indicator--d7588938-893a-4e2c-aa80-17e4b4e62b8e", "indicator--dd34d943-81d2-499f-9fc9-26c0953f147b", "indicator--5f78c414-9305-4f19-b637-ba6c8b6d0184", "indicator--8bda9b3d-1fa6-4f4d-acde-4920b6d8e1da", "indicator--a185cb70-42b4-4694-ab6e-186785add6e0", "indicator--2bf5b9b8-419c-4666-bb4c-8632ac87c038", "indicator--70bd8730-3d81-47c4-ba86-b59d3670c2b0", "indicator--c3a2095c-1d63-4bc4-b6cd-0586751b6135", "indicator--075aeafa-2dff-4705-8c5c-b057fa6c2452", "indicator--3cd41cca-0493-4e9a-9f62-d9089166e0a9", "indicator--4df1b781-2346-4ab9-9525-119e3136cb08", "indicator--ed4a3800-6cac-4357-9715-893119b7e981", "indicator--5f3634f8-b22c-44b5-bcf7-6aa1080eebce", "sighting--aa9db475-686a-44c6-8b95-8cf8fca0a70f", "sighting--ca53b97c-5d1c-46ad-9dd0-9b50e3234d4e", "sighting--44511a8c-d496-4ee7-bcf3-9bc0462fcb79", "sighting--6076ffa6-b2e1-456f-a06f-3afeda4c7b18", "sighting--e333e74c-5884-4482-b419-70b13fd8c3b3", "sighting--0bdc137a-f581-4f21-a76c-0871762babb1", "sighting--577dd914-21d7-4a99-93ef-9c1fada18102", "sighting--bc533124-a664-4c29-b803-3a5840c872b8", "sighting--5a354bca-8db1-422a-9c7d-806a9ebbef38", "sighting--28207956-6bfe-4763-b52c-ec1c9ef7c1e5", "sighting--9d6db17d-652e-4af2-8615-69e7baca21b5", "sighting--4b7ff33e-31e8-4e5a-adef-e65e32ec976f", "sighting--a7f1f4ef-a37a-4dc5-93a6-8c1d71f4b019", "sighting--978e36b8-1903-4bc5-8852-902385c7c4b2", "sighting--f64cc2b6-24e0-4a83-aade-ce647a300b73", "sighting--53709c74-8b2c-4b05-96e2-f946f9e8fd60", "sighting--1fb58373-c1bc-42a1-b036-f664e6d9ddfa", "sighting--35e5e11b-342d-44c1-8358-c9a357a7ece1", "sighting--e4e1dc1d-9375-4b1b-9e7c-17c4003e5074", "sighting--49b459d9-67fd-4d41-8bfd-f8bbfe69a249", "sighting--9845ef2f-84a2-43b4-a978-51b00a2c146e", "sighting--1a52da64-5ab4-4ed7-b896-f053650156db", "sighting--b774da59-a229-4ded-ad51-dc47310d62bd", "sighting--be09185a-b67c-4442-b5c1-7152bd9f5533", "sighting--aceb4ce0-77cb-4c51-a061-b9c5ed56bfa0", "sighting--0cfad347-b272-4f01-b787-ac6416c05129", "sighting--9203f79b-a914-4c21-8d37-7751d648b672", "sighting--e6c246b8-66dd-47c2-a9a3-4894a46ba361", "sighting--b26b16ed-adc0-417f-95ec-8914bc7f72ef", "sighting--8f227639-3df7-450a-b031-656d7f2a7ecd", "sighting--4b7581e1-07ef-466d-b6c9-7202736f1405", "sighting--88e6e2e5-5270-491e-9e6a-4681bfa6e19f", "sighting--4c878398-7734-4ed5-96d1-8c6326076656", "sighting--a00315de-d408-4caa-bef7-8ee2b542c4e0", "sighting--482f5e32-3a98-428c-bdb6-896a5eab2bbf", "sighting--808fbc21-2f9f-4d4a-aa00-eeecb98dd7c4", "sighting--b9c28274-f75b-4bf5-b2be-8cc6443a7250", "sighting--3b890168-9978-499c-a1b8-867e80eccdbb", "sighting--1a83ff44-943d-44be-bffc-5ed178122937", "sighting--36e0431c-2247-44cb-b3c1-0a30997e7da3", "sighting--e0bd7b37-833d-4e5d-aa27-472e721ce400", "sighting--712452bc-90b2-4ae9-8c26-91a72881f6bf", "sighting--56ce4831-2756-4984-86df-11655d2ed8f9", "sighting--fcf5f5b3-c791-421a-8a86-2f14af112856", "sighting--cb72fd74-50ea-41a6-9e70-0aa74d101e00", "sighting--9dc61a88-a7b7-46e7-b3e4-c374a49ce858", "sighting--8b025170-e08b-4699-86a8-328c4518ea2f", "sighting--7107c804-9d6c-45a5-b698-18fbfd64f140", "sighting--fe8b038f-3f27-4e12-a11a-fe98620b71d8", "sighting--0c2d82b4-e94e-40e6-8d38-9e7fee414cfd", "sighting--614f697d-95fc-40f7-b790-eab645be8b4e", "sighting--a25edb09-61e0-493e-97ad-5a48f98bc248", "sighting--84856dcd-084e-4470-a018-fd2df365cfbd", "sighting--0f816665-5169-43f3-a112-8587ab51aeb0", "sighting--a135d5ab-6213-46c8-81ca-558fa6cc5486", "sighting--36a823b6-1acf-4588-91d7-e1b3940d64ee", "sighting--47f88bf3-5545-4035-9f66-49c91af79090", "sighting--831b4db9-cb28-481b-a409-0f2b38c2ef54", "sighting--76ac992d-e812-4ba0-bb7a-0d1791997895", "sighting--fd299cdf-a1d6-451d-aed1-a262d6a0058f", "sighting--3e615ee7-9c06-445c-90b8-cc1876c2c792", "sighting--bedb8785-77aa-47aa-8ab1-0acb87ac6b7c", "sighting--63e34922-173a-48f0-be18-94b3b1cd6ae5", "sighting--08d3dc3c-28a6-4159-8421-e3f7cfeab572", "sighting--48c73bc9-8889-40a1-9aaf-22dd7744dfb8", "sighting--4662259f-ea3a-474a-8b29-2086a12ca4de", "sighting--04b29177-becc-41b1-921b-e9c9c1143976", "sighting--cd953fb8-f730-46d1-ac7a-5469664d2220", "sighting--ae055925-ce5b-4ccf-9354-710ac1366c6c", "sighting--d7ff138c-5e8d-4e75-959a-a7a1c179f007", "sighting--a9736a12-57fb-4b35-b12e-6c17e6e58be4", "sighting--c2b7547a-3e0d-4757-9e1b-e35c5c0ae9be", "sighting--60783b48-439a-4c0a-aab4-c98e6bbb8303", "sighting--9f08bd6d-d105-45b2-8780-640b4108ca19", "sighting--64a3a84e-99df-4771-b4a9-ece2865b12d7", "sighting--5f8c1e77-9559-44cb-b7fe-1646502ffb67", "sighting--2fc87ca6-fc1a-4ac6-95ee-2e611d879b65", "sighting--f8b5ef50-a959-4108-8935-72ff3b774046", "sighting--50abf67a-3bfa-4bb3-954e-f0665e16e4be", "sighting--d7f0f895-a078-489f-b78f-96699b618397", "sighting--98f98120-6cc9-4aee-afe2-2a15d316a6f5", "sighting--1de2c36b-f7c6-43ae-b68e-fce0de810794", "sighting--08915c36-c62b-4792-8cdb-78dde7a0d0ad", "sighting--29070e88-bbe5-4b89-a9f7-2c4039322dc7", "sighting--7a6f718b-7a68-4fd0-9014-52674b6f7637", "sighting--e69e1499-d145-419c-a925-ae27f5f369e9", "sighting--d1235918-c345-43da-8e8c-26e42c7a03db", "sighting--aa797adb-ec3d-4605-a08d-1146061899a4", "sighting--de0de934-e929-4670-89f7-f856505660ec", "sighting--682704a5-4ebf-46a1-8653-49690a8566f4", "sighting--0d56c50c-6bdd-4eec-98ad-6cb06da76f36", "sighting--b1a47ee0-95ba-46cc-80c6-7a186bf5661e", "sighting--a768dc1f-1c64-4058-b2e6-d496f9071147", "sighting--2bce741e-543b-4aaf-9cd4-68c1841ac435", "sighting--ebf83056-c8e9-47f7-b0b3-4548588be3a9", "sighting--a5e20a00-c642-4745-8389-1bef515e57eb", "sighting--70b0ce5b-ec2d-485a-8d45-49f475ff2dac", "sighting--902f497c-1cc9-4604-8482-053d2d0a5327", "sighting--7cb72e7c-df48-42db-9a0c-48c77a111843", "sighting--c24f311e-0f39-4ab0-b893-e1a2c1f0afd5", "sighting--069bd837-2cc3-4c81-844c-6aa1a4bd6eae", "sighting--3e6534ea-498d-440e-87cc-09609498bd3b", "sighting--fdf7b65f-39c2-4460-afa1-a16d6b57fa9f", "sighting--e96f51e2-ad1e-4d62-b1fe-db66d90fc077", "sighting--35835a8b-5f16-431b-b27a-25355d56bbbd", "sighting--edb0b891-b6e8-4b49-8b6c-7177cce30a5b", "sighting--5874049b-ab33-4113-a395-4780f0a12134", "sighting--ff8a49b4-a0b9-405a-8742-2ecf54220f40", "sighting--76e0ab78-1ea6-4cb9-b8d3-25739e0a67b0", "sighting--33e3ac5f-a1b8-4021-a4bb-1e91f06b1779", "sighting--e7940253-2af1-4611-b296-7f64cd799c64", "sighting--69c1d7f8-e3db-4130-bfd4-3a41907c1fe1", "sighting--372fb471-02e0-45f1-a000-51673fa31aec", "sighting--0ba813da-71ba-4722-a461-f3c9a969c207", "sighting--6a425e0e-f778-4348-9bf7-b8a1aff4f495", "sighting--85b8474f-3e4e-4f1e-b3a6-2924b27b51ca", "sighting--6c17bb59-53a4-4f4e-a9fe-5c160880352f", "sighting--cbef2510-04fd-42f6-a7a9-4f47f99403d5", "sighting--200c9629-4712-4cdb-8848-9841a04d71fe", "sighting--e4c844ff-8d6e-4688-8173-aeafd4862018", "sighting--b24cb39a-6bd8-4636-bb0a-c2b0ada49734", "sighting--86e86694-8ccf-4e99-920b-c31da5fb80d0", "sighting--5951a032-6a8e-49a8-b245-d5192dcdce56", "sighting--e43c38b2-c07d-4dd9-8e45-fbcd7c2f25bc", "sighting--6ca0ff4e-a01e-4abe-84ee-de0f34546b21", "sighting--61e862b5-6564-4401-a837-efc233181ba5", "sighting--d01796de-ae39-4aea-8930-8fdcc65e76e7", "sighting--701910dc-97c0-4eb5-9750-f436b5abe95a", "sighting--870b9b10-e3c8-4615-8bc6-78a69efe9214", "sighting--b1778b49-2c02-46c6-8ac8-5e476ac77e0a", "sighting--7d1f7ed0-e70c-4bb4-baca-bca0d6244ac8", "sighting--336e145d-6ff7-4886-a09c-092620024d20", "sighting--eb77fe97-ca19-42be-8790-57b5c004f5bc", "sighting--37f6f9b6-0ef8-4b68-af63-998d4085050d", "sighting--50a3af2b-8317-419c-87a5-0ae5d9820399", "sighting--2922c993-aa13-448d-8ec7-45633f506b3c", "sighting--3009d224-6679-4736-8a24-44f252456e72", "sighting--18da4a9f-0d2e-44ff-b99d-0f1d88c58344", "sighting--317480d9-e521-4504-9a40-fda1fa17565e", "sighting--c4d91d82-20d3-49e1-93c3-44ef4ab47e9a", "sighting--000a54fd-7a92-40f6-80f2-2e92f12bdd29", "sighting--969ff4fa-3ca7-4b43-ad04-e105fe15bebb", "sighting--2247e28e-42f0-4a89-8953-c9b8d8ce4527", "sighting--a029d295-a752-4cfb-8f68-63eddfcc3420", "sighting--a92be174-a719-4801-a1a3-ced343924b97", "sighting--11b92ec7-3d49-4460-a047-981de659d3a3", "sighting--2c3d47ed-3dcc-4a14-880d-4dcc228504fc", "sighting--50e6b4d4-5b22-40cf-80de-44429046002e", "sighting--73527b20-3a2b-43cd-930a-7a83d8f61755", "sighting--13d2cd32-0ed4-45d0-b678-6a11d538c311", "sighting--b1fd7499-0988-4a91-a90f-964c0d72d6e0", "sighting--41adac69-b19d-463e-bdbd-07ddea926b36", "sighting--2f359fe9-bffe-4a3f-8337-93f9210dbcd3", "sighting--c263ac89-9536-4075-82c7-01dbfff342bb", "sighting--fd39199b-f668-4763-9ce9-47e66de1571d", "sighting--55d09568-8967-4fda-b9d8-0750ae3ce6a3", "sighting--bb75208e-5855-482b-906f-aee28a603ee9", "sighting--d1244b8b-01e4-4db1-8887-da0d56bb03cc", "sighting--489c1922-a1e6-408a-a315-21d75a19d7db", "sighting--8a8ee91a-cdfc-417a-bd2b-a62b56c610c8", "sighting--8925347f-5783-4472-abd5-75fa95241569", "sighting--df6c4b80-9ae2-4561-88c2-7d0308b5daee", "sighting--e4d223bb-4faf-4193-ae53-b8bd51f6cb87", "sighting--7287cdfd-6bf8-4210-a348-87259d963d0f", "sighting--56ea6037-c591-41f2-a3c0-10a9574db2ea", "sighting--3d90f20d-41df-47d0-acbe-e4428b23bede", "sighting--a299838f-53f0-4c2b-b248-a0c1b7cbadcd", "sighting--60cbc12e-69d1-4eb5-b100-9bcf9721824f", "sighting--5dedaa53-083c-41eb-87a9-70c9c3f38745", "sighting--e230de04-4b23-4713-ae57-026c860a5c99", "sighting--fcfd7759-7c6b-473e-8b2d-e1ab0b74535b", "sighting--6ca2cbda-a558-464b-ab5c-3e51ac3921a1", "sighting--4b54c9f5-7483-4b36-a661-923b6119c6ba", "sighting--8807e134-1845-447a-8bb7-607d034a87e0", "sighting--2d49d54a-5df1-4e93-8690-936c8987c462", "sighting--f22a70d0-0386-46e7-8724-b45821d6ee3b", "sighting--8a5e1fc2-247f-48b9-b23d-17c06c6d742c", "sighting--f2dd2ee8-7092-482f-b2bb-8326efc7c332", "sighting--ff441376-b6ee-4915-9084-5ea659edb819", "sighting--60eda0a7-efc7-4c12-b87d-3ed44c91f6c4", "sighting--9ef6e0f9-a86c-44ed-8648-c2351541dcb7", "sighting--bdf1cb1a-c227-4da9-9694-a9108b0f7fa7", "sighting--dbc31275-3c88-4024-9d9a-044312a6110d", "sighting--d5812fd0-5244-4aa4-a10f-4d3130fdeb9a", "sighting--dd64231b-c580-4057-b496-caf515f53872", "sighting--947697e4-d0fb-41b5-b036-c0ca38049d8a", "sighting--14bab6b8-8fd3-4d55-b7f7-b068d1bc3ae2", "sighting--07bc08b0-5449-4fac-b4b9-0406305b0da6", "sighting--2d3e0d76-e7c4-4ecf-b701-7d437c8a7d11", "sighting--bd38bab4-4152-4bf7-b453-4611f0a6c219", "sighting--24bf7060-0b4c-44fa-bb65-ef937a8cdb98", "sighting--49b2ce0e-146a-4b6b-a65b-237d66669252", "sighting--cdc4ff68-0169-4e6a-a050-a5595e6e551e", "sighting--c53b66f8-0378-4cee-ba1f-368feb352dbf", "sighting--77bb2f3e-11c2-4340-b786-e9c096466277", "sighting--eb8093af-f71d-4cb3-bad3-b5f6c573423f", "sighting--71bb1c13-a162-4198-9079-417665674e51", "sighting--98e7fcf8-8ef9-44e2-8478-140538ea7628", "sighting--084a7a64-8f1e-44e9-bea8-78a1d5d78df4", "sighting--ffcc8040-b59b-4130-93ec-1a5d637dd03e", "sighting--fdb71ef0-4460-47f7-ac70-20db3393d919", "sighting--d8250481-cea1-463a-9747-a6d8e4759b33", "sighting--548ab422-b50e-4854-99e7-c5eb75cbd1eb", "sighting--9fcdc77e-c27d-4444-9b3d-2997b0d63c03", "sighting--4e10aaf3-8c3d-400b-b903-f6130bbf1aeb", "sighting--5f552a9b-7ee2-4bd4-9d63-043d9ec2122b", "sighting--8c7e27e6-fc21-4a0f-a32f-76ed0c92ef69", "sighting--aa9c046a-7934-4b2f-94ce-20a4ecac545f", "sighting--1317d624-e209-4729-83f0-140b7ad68a42", "sighting--cbdb1c66-53ad-4765-a480-3085cc70ff22", "sighting--45e9ddc8-3e95-47a0-8857-d036eb6a5825", "sighting--d2c6ea25-93ae-4700-ab76-4d7e761c66db", "sighting--43c62b5a-1f82-4d58-893b-7a7f812454de", "sighting--09ed1b75-1788-4cc5-8d70-83de91eff3a1", "sighting--9fd81a00-3027-4e58-95c5-436b7d1aa4b8", "sighting--f99eef7c-c8d6-469b-b81c-456c05354d64", "sighting--224a6de0-6381-471e-97eb-6d87a7ae9d39", "sighting--f7981d70-d995-4220-961b-9cbc9aabc8b7", "sighting--b1f3951f-4790-4380-ac6e-793f01215eb2", "sighting--c0f1048f-6175-4f29-8ec1-9e6ee5e30f96", "sighting--052b81c5-56dd-4a29-ae4b-2a26477a854d", "sighting--ab22642b-fa9d-4d95-8866-b79e073f2eb7", "sighting--060d2dc7-2f86-4b9f-880a-14ff9b772c71", "sighting--50ebd72e-d90b-444f-904f-40a758a26cdb", "sighting--447ccbc8-4921-4c78-af46-2139f9c4983c", "sighting--f31b12cf-6d06-40f0-bde0-d8cde50e9e26", "sighting--5d9a9f55-7f20-433d-a668-6274af4a6f5c", "sighting--464982da-e572-44f7-8057-f4b9f5df2db3", "sighting--3d883f39-e76f-4c74-8738-c52a87a4fe72", "sighting--34ae71b9-7f61-4ed3-b054-6f11b42f1f8d", "sighting--a64c96ee-eefe-441b-ad14-0c13ba65aeee", "sighting--280c9ef3-7475-4d1f-b3ab-7a0e6a2087ba", "sighting--b35c3e24-bc43-4147-a76c-0fc94a4fb1e2", "sighting--f118fa3a-78da-4091-aa6d-9204e9c8223b", "sighting--369df448-ddec-4902-9490-473b20e2ebe0", "sighting--322e393e-9c54-442e-9303-3f93668afbc1", "sighting--39e04e1d-e8d1-40be-9724-2ca1e6434c40", "sighting--1af251e1-a187-4343-8ca1-dc7135779bae", "sighting--d2ce5044-c01b-42f8-8e5d-d102c7cb2504", "sighting--2f115cf1-656b-4b08-926b-61a209fd8cd1", "sighting--b096497d-18c8-44d6-a356-5f0a12d31627", "sighting--8865fd1c-bf65-432b-8765-d13ce3b13c3c", "sighting--b49d26fb-1b13-4e1d-bd90-2cb53df4dcda", "sighting--a0a5b13f-7d10-4667-8566-05bc0f00e3d3", "sighting--d8d25945-2023-4ddf-9ba5-1c2b9dab7093", "sighting--d5143a84-42f1-46f2-818d-7f246720dcff", "sighting--a194224b-83ba-451c-8794-752a50546b49", "sighting--c61ff56c-b5ce-4044-8ba2-6a457aca9104", "sighting--b0845ae8-b073-4009-a6b8-7a7fad5d5e89", "sighting--b367bfda-8074-456c-b8a2-7e6e5a1bf86c", "sighting--7fb49a76-c5b3-460c-931c-b6a19fdec6d9", "sighting--dcaceb62-c41d-409b-9fce-d878a35593b7", "sighting--16e087ba-cfdf-4f4b-aa1d-e8cfb9d65a61", "sighting--c498f77f-6fa0-4545-a170-7c1dc8a3a790", "sighting--14e3a8b2-a4a6-4546-b5c1-1f5e2020a485", "sighting--6f5b1988-ffc9-4db6-b5d5-fe7ac66f048c", "sighting--c6bfbb49-a6a5-4531-8af4-1cb61fc3b29e", "sighting--15fe2c32-9006-4ca0-9352-9661b97273df", "sighting--0646430b-9584-44e3-8cad-d87fd4c9ce3a", "sighting--ea56d9d0-5b8f-43c5-8962-e79646f9007a", "sighting--c26cf56b-c65d-4249-b20b-45d21450fb95", "sighting--0bf1072e-677b-4304-b489-cc5768f35243", "sighting--ed779118-181e-40b0-a087-17aa4f0b515f", "sighting--d0d49f3e-b301-4884-91d5-6478a5ddbb77", "sighting--a6e6cd14-3525-4ae9-a74a-c71bfb9826a3", "sighting--06d23414-ce38-4dbf-b12c-bbe3aa5bf16d", "sighting--be2ca139-2030-4dcc-9189-1c03b355d8ec", "sighting--95b8edf7-733b-45f4-b1ba-7d132920aed7", "sighting--8e23d7ba-70c0-49bb-a7c9-76bc7c800632", "sighting--c1bd8698-d3a3-43d9-852b-798e0c5075be", "sighting--4b97833d-2c90-4f4c-9100-602ef31c9bb5", "sighting--20b74f44-6fef-476c-9cfe-32c37cf6642a", "sighting--25523683-9653-415e-bc5f-1133c16ed8bc", "sighting--1e26572f-b20b-4025-b19e-2d83c8d467f5", "sighting--85462f51-db22-490f-bce7-bd7839daa4d1", "sighting--fd7e6a11-cae6-479a-9c62-c64594bddf89", "sighting--dbf66dd8-dbd3-4255-9cdb-7f3d95b7fb4a", "sighting--c7088d84-3ec0-487a-9fad-1ff4f0f293e7", "sighting--4787679d-78ef-4557-8d5b-27b25659d9ef", "sighting--d2ee755e-29fc-470e-bec2-e6553877d285", "sighting--c60e5f86-8cf3-473a-b9ac-322c0839a2a5", "sighting--aaefd270-3099-4667-b950-ad688d569735", "sighting--9e52ea2c-91ff-4808-87fb-c1e78f190c0d", "sighting--bc8790fe-b79e-469d-9966-6bb63871e2d7", "sighting--ec6ee480-de95-4b28-a9b8-8670d1e048cd", "sighting--2b4d2f63-f950-48a5-a293-44942238fd4c", "sighting--f35170d5-5f15-429a-b484-d2c6b2ac7eb8", "sighting--fce1d81d-57ed-47d4-99ec-3a6133ef0850", "sighting--af43b64b-4d8f-4832-b160-8b0bdd26fe3d", "sighting--ce05de3f-7912-4ac4-9b6d-4e3298569240", "sighting--067039a8-26a4-48cf-8e78-9aafab819b18", "sighting--ad9ba499-1e94-43eb-b3c8-8a08586937b4", "sighting--79907fb1-6d04-4ae6-9830-14a67ea9a669", "sighting--d4acec25-1f67-4a86-9a76-a68a062a68ea", "sighting--67d7b156-ca1a-4e43-8a3a-775c293effa3", "sighting--0e3a010e-3dd0-44e1-bd92-0bee6a484566", "sighting--a17ec541-7b86-4620-97c9-9454f51600a5", "sighting--cba85eed-84b8-49dd-98d1-f816bd6a314b", "sighting--f04a0141-00f3-4bcc-912a-29cee4105d11", "sighting--4385010c-daef-4fc2-a30e-97fcc5ef3b1e", "sighting--b1eb3faa-063c-44bf-b0a1-8a0737e11af7", "sighting--6d7d8d2d-db20-4e5e-b104-81a57e2338f0", "sighting--f976204c-9608-482c-a2e2-6329356e6b5a", "sighting--7489a9d7-05e6-46dd-924e-8a4600f79c5f", "sighting--7e454cb8-ebb1-40f7-9224-53501e9b76ea", "sighting--9cd8ee10-28df-4c78-857f-ecfeffd771ba", "sighting--254f4dd8-0961-43e3-a126-f046d35e1586", "sighting--c6c98948-1ddd-4ec4-b1b2-d6ae442c3b2a", "sighting--b1c1ce94-01b2-4479-81d7-5103e71bc453", "sighting--ef66f8d5-a97c-40c3-b395-f6d16e8c8caa", "sighting--34b0d62b-a128-4ac1-ab69-53ea7a28948a", "sighting--a17555b0-90a0-4c5c-a488-d9a723d0eadd", "sighting--43aaf515-3bbe-4c46-9fa3-e69885f1ee28", "sighting--6c1f9cd4-d9dd-4e70-80b5-33b40784fb3e", "sighting--cc579a46-d837-4bca-afa8-c767fd0a1dac", "sighting--2516d522-7ae9-4963-a562-4a3157199e35", "sighting--0710f1d6-7649-4f53-bfda-b872ec892af1", "sighting--a4a440b0-bdf6-4591-9b78-abf6fcb2267a", "sighting--35b42cfa-12fe-4b59-a116-355868a23a3f", "sighting--d7db6172-04f9-466d-ace1-a8908124be73", "sighting--88bb3ace-9b3e-40f9-9646-f2ac1ce901d5", "sighting--a084f883-f442-4f0d-bacb-cc750f29d536", "sighting--b44ca16f-2361-42cd-ad6c-9c6b668661d2", "sighting--4662a6a6-3922-4992-8b4c-f3ddaa49de18", "sighting--5bb1a555-31f9-4b60-9c42-ad03a5722362", "sighting--88a24f7b-b615-47e8-b770-7216c4c02aa5", "sighting--0693e34f-0798-489f-998d-f7a49b0f50fd", "sighting--c2d83bae-fd9f-4573-8155-a183d47b3257", "sighting--3e00f198-3649-459b-9f5b-6a44509ac9a3", "sighting--73d132bc-8978-43c5-b1af-0fef5b6f177a", "sighting--2638b9a3-c724-49bc-a2a9-a37e02ee968b", "sighting--8479d4a7-1200-4b97-9027-bedbbc26e0ab", "sighting--7683ac61-ccd0-4b4b-9a37-c315c315e837", "sighting--450d00ba-f559-417d-b3b7-719af2f88626", "sighting--85310fa2-910e-41a0-9603-cdac6bb9ae8a", "sighting--49a1a9f3-8899-4362-807f-1112ea59e085", "sighting--b5e02f3d-7750-490d-b152-1c9af0b011c3", "sighting--503e9e64-7706-4269-9d9e-a9e623ac59da", "sighting--1383ed30-c6a1-4e62-a8ef-001d726418b3", "sighting--2e5c4a37-9ef4-484a-b717-24621a242b56", "sighting--88ccbcaa-bb1e-49d4-bc28-e740819c148b", "sighting--3d04d2a6-a478-42af-a8ec-d94dd66395c1", "sighting--61867ee0-8bf9-4bd9-8c0a-c2f9e277760f", "sighting--dad05b57-36bf-4117-a816-112b1b8d8770", "sighting--8584de6d-1d03-4324-a741-4d14c2791e69", "sighting--3903a4ec-39ad-466a-8659-80a6989c2c93", "sighting--fbe397b8-bfe7-488d-9bf0-0b0fa622f923", "sighting--39f50f1b-c906-45a9-bcd4-697ceee6fe03", "sighting--b80d9201-76a4-49c8-a6f0-a02a025f5940", "sighting--1888515e-1a56-4f24-9e68-7b14e10bd89f", "sighting--35efec51-4fef-418c-b82f-2972fa72f3ba", "sighting--cd8e9252-7d68-48b0-9b7e-2abd03a11e3c", "sighting--71277b38-a780-41f2-b40b-96fd7e16d210", "sighting--d586e90a-194d-4ed3-ac59-b4db3caa2828", "sighting--28b8b651-18ad-44d1-9c6d-d0ab84e6f622", "sighting--cd0e5e18-8d14-4d17-ad3b-2421641a3966", "sighting--6b08bf08-a62b-4e8f-9ce5-6d4404d7df82", "sighting--51793756-fbf7-4e26-93bd-aa20ceb6daf0", "sighting--4a111fb3-f6a0-48ad-bfaf-c4d4c94d2c8d", "sighting--07442ae5-3985-468b-b6e8-491f5603aae0", "sighting--275d555a-2d42-4859-bf4b-1df0f789e1c4", "sighting--6ebed59e-af29-4965-aaab-e9e1177f398f", "sighting--3ae63ecb-234c-41cc-8f43-203758e2a104", "sighting--78810800-92e5-4dd6-84d0-adc8e11cd828", "sighting--0d271798-ab55-4eb3-b20b-6e4b1b91705e", "sighting--73633d1f-6009-4e51-a738-3ee37588a81a", "sighting--cc949ada-60b5-4b91-96b9-df20cde3702f", "sighting--b8ada8c8-33dc-471d-a811-4d25871d3217", "sighting--9a7757be-be57-422e-9823-4642426c8163", "sighting--e663f518-9ffb-449f-8211-0ec5fec899ea", "sighting--4012899d-4f6b-4626-b3a7-1039243deb90", "sighting--46389462-360c-4625-834e-f2cd9df8cafc", "sighting--eb9211cd-d04c-44a2-8dec-1d3b2d90ebc0", "sighting--8a81ff5b-a8db-43e2-93d4-28caa7f4156a", "sighting--1c72201d-7485-47e4-9bae-b52c87ce5e56", "sighting--7bfe9bb1-ed58-4099-8f07-c767c7e32d36", "sighting--bf9439ff-9295-483c-b41a-ab4c11e3787a", "sighting--4a1d5fc9-b505-4f7b-ab51-13924f4a92b2", "sighting--28355429-e9ed-4f10-9231-1a2a84291c7a", "sighting--e89ac650-9f29-486a-91fe-d2b348b13557", "sighting--2a21e993-1b1e-4c07-8857-de95a76b305c", "sighting--e0e0a6f8-acba-4c8f-9f7b-278e8ac0ca83", "sighting--cdc8ce81-98c0-4d32-8900-c2fcf6f91f3c", "sighting--2f5ab277-0f31-413b-86e2-259dd6c3240a", "sighting--74acc2ce-5545-445c-9b12-cfc7e6cf6ddd", "sighting--a32b1cb4-2510-4985-9704-e48acc4b40e2", "sighting--cb1531d3-c0b6-4ae5-bb81-29baf62ef552", "sighting--a87d829a-58df-4292-a5ee-896b733feebf", "sighting--0204fecc-28c4-4496-a714-8e5757235001", "sighting--e08293c7-bdbc-4e49-8c67-52d4b67c986a", "sighting--396fc3d7-fbdf-40c3-a9d2-74f4187f515a", "sighting--9a553f5b-e5e9-4cf9-b892-3f291dbbac2c", "sighting--2fc5e2ea-5f81-468b-b411-91f1f3fdbc53", "sighting--f3be9e47-dd9d-4206-bb79-a3f06666cb7a", "sighting--ac2ee202-7295-44c9-a2b2-c11a9b893b36", "sighting--29a8e4f1-ce98-49be-8452-fd603dbba367", "sighting--f9876c4e-4064-4900-9931-9c7e5a3a6ff3", "sighting--f6c76453-ab6c-4698-914e-7a2a9c550226", "sighting--47308337-5284-4777-9b97-9f983d37c52a", "sighting--64b59cc9-c28d-4add-a5a5-8a5d20433546", "sighting--0158843b-72eb-459d-934c-2584fa4de12f", "sighting--598b44fe-8eeb-423c-86cd-53c1e47ced1c", "sighting--123c7798-28f3-46f9-b2f7-c6011c58e5bd", "sighting--5515e599-7f7b-4291-8372-5bfac37bfc7e", "sighting--fda8183f-052c-4cc5-93a7-392e2a38403a", "sighting--9dddb2d1-a552-4698-843f-271d205b48ea", "sighting--7107414c-f2e1-4757-b2b5-4a94f9ddc043", "sighting--4aebff2b-3696-439b-af9f-06b36820d19b", "sighting--f3147033-210d-4f63-aad5-5de735be7d2e", "sighting--cf8c8974-5b61-4d30-8ae6-81b60a166919", "sighting--58443712-341b-45e8-8a56-cbb193c41018", "sighting--6014c8db-9140-4ab3-a1c0-4be46f916e7f", "sighting--296b87dd-bdae-47b8-a573-b8315ccb98f0", "sighting--b3f3c7fd-80f5-4e28-b73b-a3495a81c213", "sighting--c33da3c3-1a15-4bd7-b69b-8a721a928952", "sighting--3ac4e906-7255-48e6-a8b3-98ab26e22977", "sighting--54eaa2ae-5d04-42be-a91c-d65733f1d1fc", "sighting--6b5203fe-2fde-4d67-b0e8-a6732899d355", "sighting--3a1603c8-a8da-4420-9f38-2ea9bdb2e49c", "sighting--bf0b74a8-c705-468b-9392-ac76706a0593", "sighting--6b65d4bc-32d6-4910-9dcc-91e6f42a442b", "sighting--7eca91eb-cdba-4220-8853-50eb86b3821f", "sighting--fb317f72-4ebf-4b8b-abfe-aeafccd1ee42", "sighting--fcd3fb4b-0497-40dc-8044-8d1378ccacea", "sighting--0c1d92ba-eccb-49c2-b907-447aefd90db0", "sighting--961427aa-db1a-4ee6-801a-4a5035f83808", "sighting--42d946ca-a16b-496a-bc85-e8f115a98204", "sighting--7289a923-f034-44c4-b8be-8eaee2268551", "sighting--1682257e-73f3-4c3c-a0cb-9713021504fd", "sighting--c10d9679-ecb4-4ebd-b61a-7d7bbd9c24f9", "sighting--332e2319-e436-48e2-91e2-87c31a86ba20", "sighting--e8e36ae4-4009-4078-80ca-4719661d9e46", "sighting--0c2c184a-a293-4075-b600-cadb9199eadf", "sighting--32751197-9970-426b-a583-27c02f732c5a", "sighting--7a740e1f-9746-445a-a6bb-f250e06cf2e3", "sighting--7072ea4c-cc68-4b8e-a1f8-0a54164b7bb4", "sighting--220fcec4-1ef6-430e-927a-1c28d4f9d2e0", "sighting--5e7a7979-de3e-4ff0-aef4-9b4fd03a9d37", "sighting--c482e598-f9c1-45f1-849d-20ff74cb1e8f", "sighting--758a9cfd-3457-4fa2-878d-c3fc878b4ecb", "sighting--35316dd6-9ddf-4cf0-8f0f-f3266f16fa48", "sighting--bfd95c81-2ff2-4ef2-8920-2bb1a0e7bd03", "sighting--3fd63d9c-b980-401b-a671-a753fe640ac3", "sighting--95d9c702-99b1-4814-86e9-2da932203cf5", "sighting--52a4ca38-b709-4cae-a26c-a8006dee6b60", "sighting--3d710873-a919-4d51-a920-f42cb261acc9", "sighting--b78b860b-c9a2-46fd-813d-fc9a0fbe6978", "sighting--cdf38b77-5b94-4ccd-8254-fe30055bee05", "sighting--9552cb20-8912-469f-a28c-7df73b9f85b7", "sighting--cb93616c-a640-4e24-bfe7-a9780144b8bc", "sighting--451d4bf7-33d2-43d2-bed7-d8f75357dacd", "sighting--ce479868-3d3e-423e-9fe6-ca87dbf86a64", "sighting--9d59f744-5865-42cd-87a7-201a0c06e0cb", "sighting--5b6811fc-e0f7-4c87-aa43-37973bcfbf08", "sighting--93289f22-d9ce-475d-8701-17e54a311a60", "sighting--900d4054-8a02-44b9-913b-2914ff402a10", "sighting--7dbb142c-0e75-49b4-b686-912fefb7294b", "sighting--130716bf-e001-42d5-9b8f-7e01991cf73d", "sighting--18ddf622-9de7-4d0f-928e-379d1d7663c6", "sighting--9bfd7378-2f5c-4a57-89c4-59a259f60164", "sighting--e377319d-90c8-44c4-b3a1-8eca448d1800", "sighting--35bc2907-d554-4257-980a-7aaf65804544", "sighting--247da9a7-7e79-444a-9e31-9bb2a329fa84", "sighting--a5a927c7-046c-4f02-a8d9-2b83f4a5411a", "sighting--17fa9059-b37e-476c-9bdd-2c3cc863e53a", "sighting--1af2e17d-caad-4d66-a65e-9831d3a3555b", "sighting--652e8ad5-e57b-4452-a53c-00fafa383def", "sighting--a5708ad8-e8ff-4350-aa58-59a79bdc85ed", "sighting--8f7eb8b7-c0ce-4c7b-999f-01ac955c3586", "sighting--2a444750-2e16-467b-b0c6-99d6a69367a3", "sighting--8fa5082a-0df3-4935-8622-0b4ef154cd1a", "sighting--e8c82bad-0cc2-4f22-9127-e1c03966bc40", "sighting--a48f3970-dd86-4388-bbbc-dc9b00b9032c", "sighting--cec50343-62e1-4394-9f0b-bcc994066c20", "sighting--40489b34-f378-465b-8aa7-3442eacc98fe", "sighting--5740eaa8-4862-4c50-bae8-a64ba1a07db4", "sighting--e31ef220-c996-4045-8b4e-358a7f473109", "sighting--e0eafc90-648c-4fea-acaa-4081aff57a9a", "sighting--643c5c42-c15a-4fa9-bc52-3ee51f82e75b", "sighting--995b7984-0e00-4428-a32d-a20f78ebcd94", "sighting--ff1deca9-49be-4482-b070-90ed98da09ac", "sighting--ada45b7c-3f07-4527-aa1e-922eb90a5c01", "sighting--f73eaca8-b515-4786-83d3-0345d9b432a3", "sighting--e782149b-c9cc-4ed0-86c9-2aa847adfd2a", "sighting--75d7e7c8-2468-4855-93ec-c5b88ff225ff", "sighting--892bbd38-a2dd-422c-9798-a0d0469bed10", "sighting--fc6aa253-72ae-43de-980b-3676d4657874", "sighting--fb6a55de-66d4-49fe-b23b-ef02afd3b6c8", "sighting--9a45725d-8a64-4fdc-bfd0-1c2d830fef7b", "sighting--14c1afcc-67ac-464c-b983-9f933a9b639c", "sighting--23cc1519-5ce2-45a4-a665-41e85c2b1152", "sighting--033a169a-60aa-4ee8-9023-7707cd1810b6", "sighting--201ecc40-30d7-4ade-9817-b0a0507c24be", "sighting--12339a0f-bf28-4fa7-954f-acf53c7cd2a6", "sighting--eaf95f03-7528-4f65-892b-40985946b9b1", "sighting--64b35b44-1386-4e6e-acf3-28ea6b86f1bb", "sighting--4e6ffd5f-863b-4244-aec7-b65555301ce8", "sighting--0639b33b-adcd-416d-a937-3ee78ab47068", "sighting--dd5830cf-3962-47fb-a6ba-c7eee6fd60d6", "sighting--61d62335-0f38-4ae6-9d8e-58ca6d7413ab", "sighting--dbdb0551-4acc-46e1-a8c8-c4730054366b", "sighting--28726147-98b4-478b-9a21-c0dc2a4f542a", "sighting--c8919131-f950-48cc-83cc-ad9616acd8e0", "sighting--a5d67fee-c7ed-454f-a092-f14156d4261b", "sighting--8874fda6-e58d-472c-bac0-a1efbd7fdc5e", "sighting--100a7099-b85f-40fa-a593-ff94e013a38b", "sighting--58127776-6b2a-497f-9b96-39cc5c91c1c9", "sighting--4cc59e47-da34-444f-90ea-e44c530d5e87", "sighting--b1f6dd40-4894-48e9-9a97-ef7ee5b9ce0f", "sighting--b63cb055-6e60-4d91-ae49-2bd216677aba", "sighting--ad3fb339-0d36-48dc-abaf-02a13301971f", "sighting--e4250cba-a56c-432d-b8cd-62c616f6c452", "sighting--d3a01009-fbf4-4df0-a460-04aea4d7ed17", "sighting--6cd590e7-cbdf-4fa2-85af-fac946770f20", "sighting--542e0e02-c9eb-4898-9414-5dfbd5f320f5", "sighting--9e103a19-150f-4e04-ae39-5c81237f426e", "sighting--04af5b1e-5da8-46b9-a252-50eac59e381e", "sighting--aea5ad2f-91d3-4c4b-859d-b0cedf2cb05c", "sighting--dc636441-e512-421d-8b43-95696029733b", "sighting--cd82d50d-fd1e-425f-aaed-e18909bcb63f", "sighting--6859ca31-1f49-4138-8084-5a8b4d8cde32", "sighting--e990ffba-bec1-4136-8027-35b37a10ae55", "sighting--4d278d12-b60d-4ddc-8247-89d76933e268", "sighting--201fc8d0-1e1b-42f5-88d3-4c49209e6cee", "sighting--67435399-d354-46f9-b0cd-3c35715a9a09", "sighting--03129c47-2bd0-45a2-8bb6-ccf68ef96137", "sighting--75c6374f-7d01-45cb-8097-4a7413e154e7", "sighting--909419af-74aa-4960-a93a-3f4cbf5cab25", "sighting--210b6432-bded-4819-87c5-d693f3452548", "sighting--c491e928-b0ee-4b2a-abdb-d3e6e6cffc10", "sighting--dc454f02-da13-4ace-a663-bc359b7a96d7", "sighting--44707844-a2ac-468c-b281-f528167ef8b3", "sighting--e4858dfc-145a-4383-a023-7edf074c753e", "sighting--e12c88da-55d9-40d9-9d24-0a8519f0fd6f", "sighting--867b0811-af78-4dd6-a355-5231fe474ece", "sighting--d152bb15-e3e4-42d8-b1a7-690967f4b489", "sighting--c251bcfb-2aa0-422f-9839-e74de3a881d3", "sighting--7dee9447-2e57-44b8-bd3e-5f13ada1ae5b", "sighting--ca3dba5e-d6ef-4f37-92b6-52a060183cd4", "sighting--8ca7c7da-0fd8-41d5-86db-ecd6ac2e12fe", "sighting--b1e907a9-3f20-4dff-86c4-be706a105cb4", "sighting--813007ea-a1dc-4428-8f89-894060e3ab20", "sighting--626c5c13-0e62-40f0-b089-b99691e95c80", "sighting--f3334619-4965-466a-9726-71ed6aa3ef65", "sighting--46e093dc-9368-4267-8b3c-6bba033e4722", "sighting--b18c2672-212c-4469-8afe-034907966ea2", "sighting--c227699c-c5ba-4fba-ac42-84e0ad52dcc7", "sighting--a7049219-874c-4112-8996-32c82005634c", "sighting--0527cf1f-79bb-4ffe-a2e1-4e3e8a8724ab", "sighting--767a71ca-4339-4075-9322-8db717e985c5", "sighting--a0e1916e-762f-4c21-90fa-b1d7b950b344", "sighting--11d10e3f-a4fb-40d6-81bd-fdc525ec5459", "sighting--7d6d7c02-6ad1-401e-8532-73f5644b8be6", "sighting--0e8f1546-0ea1-41e8-ac73-e601e05218d5", "sighting--e3f7db37-f975-4c32-b405-06430c1b55eb", "sighting--ad01d80d-c07a-441d-9be2-2ca0b336583b", "sighting--808b8c3f-aefe-412f-b727-57432cf2cb92", "sighting--0adc20c9-6f43-4b9a-8c41-53c39cd0a242", "sighting--2edf4866-dbc1-4853-9e5b-28362b77a1f9", "sighting--fcb11932-52a6-4c08-b1a7-745926f0f745", "sighting--c4488242-9813-4633-8391-793b207f261a", "sighting--c7b4df97-d4ed-4731-8dc7-6e3012773164", "sighting--66881a44-0333-4857-bca4-3c8b7ae933b1", "sighting--4651d14f-4c3a-4013-9c5b-29792f975855", "sighting--43fe2885-b7ba-475c-8c3e-d8baa17a506a", "sighting--35c445d9-72ef-4022-8ee9-bc20811294ec", "sighting--58a13c90-310c-4b90-9702-0ef0c12a93be", "sighting--0a2a02d1-adb5-4372-bf3e-1a1245c729fe", "sighting--74a4cc3c-2df8-4a5c-b757-02aa987de2ff", "sighting--0f7d5acd-4ffb-47d5-85d8-e25e08101e9e", "sighting--37fe9f5c-19e1-47ca-9e5e-f77bf3f66b3d", "sighting--81b3f437-9793-443a-bcd8-2206894a7c29", "sighting--73805381-e22c-4004-8a56-d46d2dcd40da", "sighting--7f240496-fb96-4abe-aa35-169f7dd5635c", "sighting--cf227a35-fa3e-4f22-a50d-1b17123188c7", "sighting--5aa05080-442d-4a12-8e1a-22aa889895f2", "sighting--7231d9d8-58d8-481b-98aa-a5ec6f1a5e3c", "sighting--09326748-465f-4e2d-ad9f-0daaf5215a23", "sighting--a798219d-1e3b-4cbd-a65a-a45848d5884d", "sighting--4d96d016-67b6-4fec-9282-97edba8772c6", "sighting--13244b44-b3a2-496d-b7b8-15711a821e0d", "sighting--da1b4a90-c8a7-4b9b-98bf-286cd14a985f", "sighting--13ecdde5-9631-434f-bd56-a5bdcf72f0a5", "sighting--9f4ede9b-0541-4d27-afe4-81a9900ed0cb", "sighting--c0161fe8-b123-412c-891d-9efbf1739434", "sighting--e0b3fd45-acf7-42bd-a28a-f16f7289e2a6", "sighting--5c17c79c-e753-428f-ab55-602631cab687", "sighting--9dcff150-a703-4b7b-ba1d-c0324f04f8b8", "sighting--7b863aa7-ff7f-4122-89de-86dc1cd3d26b", "sighting--30043089-867e-4d89-8367-43396d3e2062", "sighting--61ec0885-f339-4785-bff5-ffe2e4c3d3ea", "sighting--a18f19a2-7a51-475b-a3c0-8e5df61d5bab", "sighting--38020298-8f65-43a9-b128-c83733029ac1", "sighting--02ee8cea-48c1-4393-9da9-70ae1b4531e6", "sighting--4112ee31-4cd0-495b-81f0-234c65bfce78", "sighting--8387428d-b58a-4c96-b66e-d2e84a939475", "sighting--fd00ee2c-ac22-4183-8eda-56930ff52069", "sighting--cf2774e9-b796-4131-b9bc-2e2ee91293d5", "sighting--17a4178d-9bc1-4f01-aa95-d39599b502ee", "sighting--89f2750f-65ed-4e7f-bae1-33c1cdb6db93", "sighting--aeb89cfa-1eab-47f8-a4f4-68c196833c54", "sighting--51a3f490-bdcf-4ad6-b7f5-c750eb3347d5", "sighting--4d7f53e3-00d6-4c71-83e1-59b1e8c92fb3", "sighting--7f4dbe34-9076-4174-8fd2-aedc07351820", "sighting--052fd063-6cb3-4da3-8dc3-0b23af9f24b5", "sighting--c44e77cb-f459-4b55-80b9-9ad1d1848e1a", "sighting--90a698ff-c26b-41c9-b4d4-f25771b30e5a", "sighting--dd63ae07-daa0-40c6-9b1a-2251416a7754", "sighting--894487a3-1280-4d7a-9029-4e3994d408ca", "sighting--02fe832b-f41a-42a9-b2ec-06779517fb4f", "sighting--fd1e70cb-6d01-42d9-8e29-43c9af6e6bb6", "sighting--fe158bb8-c353-4e32-ad0c-517498099f77", "sighting--24564b34-a9df-4222-be03-1f219e389b5c", "sighting--23604ce6-4448-46b6-87d7-116ea7099038", "sighting--4b1a5cb3-accb-4973-92b0-8671f195b307", "sighting--ff21338d-ac16-4bd4-a0b5-8e16bf2a7f48", "sighting--cf454a1f-0d27-4a64-bb5c-696a8591a48e", "sighting--92042598-53b3-4b9b-8789-b985bbad135c", "sighting--76fa772e-ef25-4292-9332-ca80b18d7291", "sighting--513f79f6-d0c9-43a2-a130-29423bdf595b", "sighting--9b1028cf-09cc-48a6-9a2f-d2395d542883", "sighting--03f5b034-b4ba-4ca7-9482-a877ea07d448", "sighting--bd4b707a-d691-45db-9591-546ad2c3b947", "sighting--2df1a565-4861-4128-a87b-9a2f3e6f6f05", "sighting--64aaeaf7-4dcc-4cf9-b0e0-dba71f93ce42", "sighting--7bb5950c-0ef7-4b64-8b51-0686eebd59b9", "sighting--f8fa1a04-b717-4e1d-93c2-7eeeacd95bf4", "sighting--267be35b-ff8e-4d88-9e26-a4c4333f9056", "sighting--e65326d8-a6b1-4840-9b7a-74182649d17f", "sighting--de302e49-ebdc-4c87-9dcf-beb96440d0ab", "sighting--3dc9c7af-0eae-4c81-bcb1-32eb0377e269", "sighting--5d8bd734-2490-4b9b-a2c7-5820106c7d9c", "sighting--f38fdb2f-d78c-4b21-a799-4bfe6aeda0b5", "sighting--af63e2bf-ff40-48a2-874e-ce6d258ea59e", "sighting--eb6390f2-2548-438d-a52e-c0a70eb0f797", "sighting--2c531650-a5d7-474e-9485-9c8e988d4825", "sighting--f49df6c2-7cd2-40ba-b2da-e3360e8cef5d", "sighting--c5dbcc99-eabb-4fcd-95b5-f3e1fe3b47de", "sighting--9ef448aa-a23e-4275-8854-96a858a99146", "sighting--51c249f6-030d-4d49-9b82-770f91d29dc6", "sighting--6fb78835-cbe0-4fe5-8288-d7241b02eaf4", "sighting--ec8b753d-221c-438f-8448-8076811e690d", "sighting--f02e5c15-ca17-44dc-9f17-64a1135601cf", "sighting--39124f55-52a0-42fc-8691-c29a36b11348", "sighting--25d3c41a-0d38-45e3-a395-a7531c6426d5", "sighting--9e13c877-aad8-4245-b6c4-bc60dcf1254d", "sighting--31ddef3b-11c8-480e-9989-0b074f47a350", "sighting--cf6686f1-bf0f-49c2-b5b2-ca20629cc136", "sighting--0f34ea13-de1b-48a7-aeeb-b7500ba1e069", "sighting--92227045-24c0-4ced-bf90-4ca8ec600008", "sighting--7bc94de1-188f-4ea6-b7cb-df259f6ea12b", "sighting--67408580-d95e-4cff-b793-7f5c5207929d", "sighting--eadfa6ab-144b-48ff-a830-cd56f6d6c006", "sighting--5550e0a4-39aa-44dd-b19c-5bc4074427c0", "sighting--0b10f2a3-5838-4dd1-af90-44de6e9c9706", "sighting--394ba1f7-9243-43ea-aa31-10c4aee90bc3", "sighting--60d1c10d-381e-4239-9710-958723c8cec2", "sighting--930b7da9-a54d-4d55-87a0-f728b7bc8738", "sighting--c7342e09-2c41-4953-b01d-97085bebcb83", "sighting--e08f3e83-b47d-408b-89c5-9732872f23ee", "sighting--275f811e-cdc9-44d1-91da-be295ad709b7", "sighting--d904ca26-5a4b-44a8-a718-a8afe1d282ff", "sighting--08f2de17-2349-41f2-a9e9-d03354166520", "sighting--26aa3fe9-13af-482d-b754-59eff26d5ad7", "sighting--67bd504b-d10f-426e-bfe7-4af0afb9f3ce", "sighting--2e123fe8-5311-4784-a27d-c9c179cfe225", "sighting--1cdd4796-0e97-47f7-8631-cf6697a960e6", "sighting--a9df3db9-dc02-4411-9b5f-05ec6fa9fb95", "sighting--e704050d-6526-4736-90a8-0e262814f2b6", "sighting--0d252feb-725f-4316-9f9f-3ee0275e5bad", "sighting--237da268-8dd0-4ae6-aa74-5811aa19961e", "sighting--c7888dd6-4bbf-4ace-8614-19aa95d8c7c5", "sighting--32a92e8c-b6e8-4364-b94f-9d82446410b4", "sighting--7462b72e-f961-4c54-b534-228936e79812", "sighting--29c3f67c-f2ed-4ae6-ad1c-1ae851d4529b", "sighting--c7120800-8e29-4e93-bd5f-d46df6859750", "sighting--ccd1977c-1636-4887-8122-9ca7f5fb3c57", "sighting--0efba317-64d4-482b-b269-3745a05b0e11", "sighting--7ac6a0aa-f08f-410a-a688-c6790ea988be", "sighting--e0bd8d94-8a3f-4042-9818-e0d69343a1fc", "sighting--338a040b-97eb-4352-932e-8b4ed4bb9c75", "sighting--4e4877dc-ec06-4688-9fdf-ef55b4a78864", "sighting--3fce1167-bfa1-468d-9e5d-852515610583", "sighting--8c7c4ce3-e2d1-4523-a3b3-ecf713d56ad6", "sighting--e95dec56-bb78-4d8d-9f9b-bd4b1137f59e", "sighting--491224a6-e0dc-4b75-bd86-e456caf1cbf1", "sighting--6c11f29f-4e96-44fe-aef2-c9d0d1a7d418", "sighting--2d8ca10e-1836-4458-b890-a0080a6858ca", "sighting--625fc1f2-749a-42fe-8910-0acab6ab0405", "sighting--0e09bfe6-2fa3-43ef-b50d-919f38f1daf9", "sighting--97fe0f1d-e92c-4f4d-acf6-132fd5c79df4", "sighting--ac66a5f4-b7e0-42cd-8937-d7c1820afb08", "sighting--b0509fa8-4c2d-4c4a-b9b3-1a6e0e08f59b", "sighting--c103b927-c4d7-48a8-aaae-4d805c69c54a", "sighting--b3555854-bfac-4e16-9e22-c28a4f1cd2d9", "sighting--43d0b625-ddf0-4f16-b9a7-c8276791caab", "sighting--ca35ea20-21d0-442b-804c-01ae010ffbb7", "sighting--8b29143d-7c6d-42f5-9f34-26d3dc133e2a", "sighting--af394be7-53c6-482d-ba05-d226b789546b", "sighting--36cf7f6d-c998-4c6a-b8ee-e7c859ed8218", "sighting--0be198f3-e831-4159-8518-72788093e218", "sighting--bed46175-7521-4630-a21a-ad9da73018d4", "sighting--345046ed-d6f7-47ff-80b0-efdee272fd7c", "sighting--2a867535-f70b-45b3-85fa-e446a91eac45", "sighting--6fd9dc0b-4e35-45c2-bd01-be7933a069a9", "sighting--c00e3ced-348b-4579-9242-9f2ed681941d", "sighting--366dfad2-3a0d-4ab6-b3f9-0a9612904319", "sighting--f6aa0871-da8c-4862-bc5b-2f529cd865d0", "sighting--e77b8449-56e7-4052-9ab1-9fecad532545", "sighting--ca3c44b2-5e3a-418b-95dc-708a5e316cee", "sighting--8a6bc3c4-9ff7-4e75-9ab3-7a915fa896fe", "sighting--d6c9d7d4-226c-4c0b-b9c9-385563aff170", "sighting--07c8475e-ae1d-4a59-a565-aeeb6d096fa0", "sighting--fbea70c5-eabd-48ad-a086-c8decc7c2455", "sighting--c3c85bf7-de14-4faa-978b-ebd0cc46380d", "sighting--5c477157-01b3-48e5-949b-ef222cca0d4d", "sighting--2e3fccca-10df-468e-b135-516050b9acc8", "sighting--7a37bd2f-5d8e-40f8-8bcc-9fe48f9ee2b6", "sighting--3285ab2f-83f0-4203-b99c-ebfffba8e139", "sighting--7398129f-1b2a-428f-b592-42360ba7d4ed", "sighting--f02fa6c4-3830-4138-b169-49edff6b55ba", "sighting--30157035-eebf-4adf-9c3b-6cc82b0b36bb", "sighting--903d82f2-bb57-4fcb-8712-395ef1a3b447", "sighting--087ba4a5-df50-487d-8c0e-c907c90a38f4", "sighting--8b397b01-5f04-430e-9972-e483126ff426", "sighting--d8f1a3fd-2d89-4274-b5cc-36e9fe15c178", "sighting--c2265422-27fd-47d7-ba0d-a72e2e1f153e", "sighting--da2bc9f8-19dc-4559-97e5-4387b9e87f6f", "sighting--f7a65266-1e1f-453a-baf6-e333f4fc8cd4", "sighting--dbf90fcc-3710-47f7-ae3b-5a457c44e7fb", "sighting--282b958a-00fb-475a-b531-b33d4907968b", "sighting--9a14655d-4d24-43a9-b820-a2ec8cc5ee90", "sighting--022cf542-14cf-40f2-b40c-f21ba67359a2", "sighting--bad6b49a-7064-46cc-afdf-b15f2760faa1", "sighting--d7b35dc3-0a13-4e5f-a007-382cfd362fef", "sighting--f905d7a7-143b-40f8-8c9a-6904b3520588", "sighting--604a7d7f-5c16-40c5-8920-b6ab9e0a7140", "sighting--6cdb6034-31b4-4677-ba11-7d4092fd3368", "sighting--d72d443d-dd67-4ac8-af28-2e9d1cd5b053", "sighting--9db35624-4c11-4544-b36e-58acc7fd2c2c", "sighting--482fd560-b170-45d6-bf4b-3fd1abef0b36", "sighting--3ca341c1-eded-4524-b908-fcd8847e0146", "sighting--aafb383f-c047-48e1-9181-20c519104c0c", "sighting--1ea3b349-2b12-47a8-8ba6-946287d8c07c", "sighting--24af0512-7b88-47ae-ac4b-85a1bc9289c2", "sighting--fe23dcf9-a586-43f0-9ddd-de026c835aa7", "sighting--517f3fda-c415-4975-a87e-4caa5b50603d", "sighting--238e59d1-0518-46d9-b3f9-5f7a7dd1c655", "sighting--42028461-c86b-4288-bb24-831c5fa74f4b", "sighting--d2ee123d-6d43-4d64-948c-476203e94dcf", "sighting--baddd8f9-a25a-4420-bb6d-d46c023a4745", "sighting--6f6a526e-fc65-4439-9f9c-52bd7b439461", "sighting--66bef6c4-f268-4478-8426-6189ba2b0514", "sighting--0bcdb04b-366b-4314-abad-13bac59eb27f", "sighting--66382a90-47b2-4f05-a491-feecde82889f", "sighting--76009bce-1e2c-45d3-a01d-ca89f5929ee6", "sighting--55610be6-3302-4169-bf2d-032788d5469b", "sighting--6feee22f-554b-41f4-84b6-8d0296b04642", "sighting--5c38669c-d671-41b1-b20f-cb33816d2c63", "sighting--bd15cc80-f0cd-421f-9305-b224df0ae099", "sighting--8f6c16bd-3c38-4533-9e0b-3926ec3ae54d", "sighting--0a4f6683-bee1-45af-9d9e-fc0deacfcff9", "sighting--74dbe45f-1536-4549-b455-c50f7ae7a0bd", "sighting--3bdac4ac-114c-4c1c-9262-11e233ef8f1d", "sighting--2598ae21-8275-4f89-ba1f-9c779fbd160f", "sighting--31917fb1-1128-4fb7-818d-236a3c0746b6", "sighting--c6e341d8-cc3e-44df-98d2-d3988109bdb8", "sighting--6d5cb2ed-1d53-4da6-bb1b-62f94b2ecfb2", "sighting--13d1771b-0114-4f23-a1a8-59b36fa2dc3f", "sighting--c3777af7-4344-4cc8-a975-8d802e817b1a", "sighting--0e7e6a3c-488e-49ed-90f7-99ec8fb0eafb", "sighting--66ab9af5-0dd7-4a34-a8ad-966e2070897a", "sighting--661973f3-fa87-49a8-8b59-d442a5c2d8c0", "sighting--4960e143-5ee4-47c6-b7b8-e65bded03ad3", "sighting--00dbd1ca-ee95-4079-be0b-794c851ebe52", "sighting--53f4c953-6c73-468c-8c4d-effc1485c6ae", "sighting--473c3629-85ed-425e-8446-7dac4c3584aa", "sighting--644d67e1-b871-40c2-a579-11b6d3ea66a1", "sighting--3021b22f-91c6-4538-a649-617d46f91274", "sighting--68e39cb5-ac50-4ca3-9adf-7c064d7e5b40", "sighting--7f04e171-816b-4f5c-954e-d6ca02d3058b", "sighting--90d5d7bd-c8cc-45ff-a61c-1726ce18ea87", "sighting--9c8b16b7-4b5c-43eb-aaa9-e977cbe55a93", "sighting--e682578a-8e51-429a-b38f-73340ca864fa", "sighting--f2445a2d-19b5-40d9-85ac-35d613a082ed", "sighting--f7c5e46e-a311-4976-aa4c-838178a4cc02", "sighting--f31b8bbe-e025-431c-89e1-6e6e4b2a6a84", "sighting--06ad537c-b8f7-4057-af39-b94fe809cc0c", "sighting--8175f97f-798e-4993-b14d-6102bc96a594", "sighting--aeaaa301-d668-4074-8143-12dbfa49d57d", "sighting--954fe157-5459-4e3a-8516-8c53782fb9ea", "sighting--2e50d8aa-284b-474b-b408-4aeeceac0cf4", "sighting--f2f56164-126d-4e4c-a2f0-ed0dc5db5df9", "sighting--1a689b09-0011-4f5a-a199-fa003938fe63", "sighting--a8a50cf9-6ebc-4257-a015-946b96c7b270", "sighting--4d53ebbd-8b0f-4324-a617-b77f9df12899", "sighting--2f563edb-f1f9-4b70-a2f2-86be4be3e959", "sighting--fdb2c06d-cf0d-4e8d-9a23-d503d4d7ee73", "sighting--7eae59ea-55dc-4229-80a7-edd1ed67d7e1", "sighting--73f0808f-ef80-465d-a79f-a85cc0f54707", "sighting--42fd4ea4-a07c-4dc7-8021-397bbb829c7b", "sighting--48fae5a8-8364-4712-a25c-85fb57074dd9", "sighting--123a6ef6-38cd-446a-b38c-879be117bd96", "sighting--8bd8d99c-11f0-4df1-b13e-6b6399da2447", "sighting--539772c8-8c96-44b7-8535-c7c16e4d421a", "sighting--e1a3edb2-ca96-4710-9216-d6843c622c9e", "sighting--a4e40d95-9f5c-458b-9da4-9ea9c0e74f2c", "sighting--a936e232-1d69-4433-a1a1-031d4f8fc935", "sighting--c8ad8a5c-bc80-4200-aedc-509395c85eb0", "sighting--e8165954-23d4-43f8-b01a-7162ba723e3d", "sighting--04d55e49-8ed2-4a1c-9283-5c10225373bb", "sighting--f1c29b4b-6128-4e7d-9266-2fc78987dace", "sighting--40cc3143-15c2-4088-bac9-337aa9ab78d9", "sighting--95e9d0d6-1a2a-46c1-a005-94161dbdad63", "sighting--707cf90a-aa26-47de-9129-51068e73b9a6", "sighting--ec33f00b-4e5f-4815-b0aa-70d5b2e5411b", "sighting--64ca422a-ce5d-4267-9ffd-e3ea7296bff3", "sighting--e76c7b5d-2fe8-4ac3-94a4-f4c0b33d6c47", "sighting--379cdd61-c932-45e0-a7fc-7aa69100ec3a", "sighting--77f9a835-af3d-4990-94aa-2301f999f517", "sighting--f905a45c-6ddd-4222-b62e-f033d604e4b6", "sighting--bcb527eb-60cc-4e90-a4f9-da7e004696c3", "sighting--a8a660d0-829b-4fc5-a365-3df696567636", "sighting--f6355afa-cd65-408c-b6b8-8a9bf6e19cad", "sighting--24b390a7-5c15-4020-9327-9d16eafc103d", "sighting--900e20a9-80f2-4655-91fa-cf40e113a95e", "sighting--5d6570be-68e8-408d-8b2a-db1dad4dedbf", "sighting--a8fb1307-d0a7-4627-8815-b6891947b289", "sighting--e102f5ae-8ddd-4d5a-84d4-88abd76cf7bd", "sighting--251db804-1eb3-48d0-b758-686a863b2af5", "sighting--7ee34e7f-f5fc-44ff-bc98-3f15f056304b", "sighting--a35087c1-2353-4ee1-82c8-3ab2694940b0", "sighting--426e99f0-6b64-44de-9d26-8efb6919936c", "sighting--7bb8af1e-dff8-43a0-a8c1-8041dcde745e", "sighting--b1af4976-4b0b-4e2e-9f20-d4e61c5ca3a0", "sighting--787ab6ba-02db-47e3-b3e9-d99e17cfd4a0", "sighting--7c778e49-c5fc-4f65-abfe-add99db2e79d", "sighting--89019e76-eef5-4fc3-9fa9-4a6af6e915c4", "sighting--0a4cf0f6-dc28-4289-b34c-3235b2915c3b", "sighting--29b85655-95c4-4a8a-80ae-a7f7bd1ea044", "sighting--9e092571-7a5b-4f99-abd6-c74edc5d9bcf", "sighting--a5713c47-b0d8-4dc7-b58e-f5a9d199afe0", "sighting--768961b7-164c-475e-a57f-710391dc6254", "sighting--a8fd2b26-1d89-48fa-b5d6-b73371ef4729", "sighting--8f061714-601f-4335-a4d7-f50a9921f359", "sighting--9ec89469-d336-4607-829d-9277ce3ac006", "sighting--58f9198b-ce3d-4084-ac60-7c48fc816dc2", "sighting--1aaf8916-cfd2-4b68-a5de-e3161c81e268", "sighting--175d448f-6901-4f6c-9412-abe00528f36c", "sighting--b7d8cf38-5923-40f9-b587-9aea9c58f40a", "sighting--9951198a-18ef-41e4-8c0f-0376603510b9", "sighting--3d342035-8044-4574-9412-7daba35af6ab", "sighting--d7496ca8-304e-447c-97bf-26b350769a27", "sighting--d7574a0b-e44e-4fc0-a634-88bbb22167f6", "sighting--c37ea942-5903-4ac5-91e6-b3c335e4b340", "sighting--56bb3ead-589e-4aa6-9c68-314d1636a12c", "sighting--2927321b-c919-4f74-9172-acfe3cb69250", "sighting--3d0dd033-891c-4366-af8e-1723339b3527", "sighting--6a857267-428b-43f6-a421-756f277914f0", "sighting--d2fde83f-473a-434f-9fbb-0ae9872b57b8", "sighting--ddff1edc-8a2d-4571-8cf0-91377daec4ab", "sighting--d9c4fb82-116b-4cf4-80d7-45453a9334d5", "sighting--593a5df0-7d00-416b-9306-e7947f37d346", "sighting--76395e01-4a8d-429e-b9f9-e548fc5168e3", "sighting--71bb5d20-861b-4211-afd5-a9829a6b5df5", "sighting--8f23372d-1076-424d-9a1b-84f9579f9a08", "sighting--eca51207-0766-441c-ad07-1791e3667695", "sighting--4d10b26a-9e55-42fe-a3be-845937e196e0", "sighting--4aac5756-f2f0-41bc-8f78-d6efbe2b6a50", "sighting--36992bb9-6c4c-4c9a-afaa-cf5a96b4012d", "sighting--c3ad7c0e-49f6-4e6b-b2e6-193022102cbc", "sighting--29aefc7c-426c-4e7c-9b01-c1bc6c4aa0fb", "sighting--98f1aba9-58f8-4fc8-9577-4dfbd2b54bc0", "sighting--2bde65ff-70d6-43a2-a31d-ab664d64b20a", "sighting--bf609ffe-022d-4aef-a59b-d1e844198199", "sighting--61d84e36-9818-484a-8e4c-1f69836bd833", "sighting--24b8d420-ae3c-47aa-bb0b-a94bd08c3d1c", "sighting--650a3108-1451-4369-a641-6716f1b61dea", "sighting--0a9685fc-a624-49a8-ac40-3dbf50695a27", "sighting--c4290d8c-07db-4636-9c2a-06868ae7861c", "sighting--1b641090-d08b-4d19-8f67-dd07f2d07f2f", "sighting--5592ae44-95cb-4a12-b665-0ec0042ce09a", "sighting--6055de7a-ed01-4e86-836b-7142359a3f0e", "sighting--82a31787-05d5-43a0-bec7-81077954f1eb", "sighting--f46b8b94-f5e8-4229-b39a-b70521d67eca", "sighting--4facde55-008b-4e2b-b2f0-c2744eec3632", "sighting--cbabbde8-ca3a-4e5e-b750-03fbde4aec2b", "sighting--d7dc73c3-8303-4b65-aabb-bb9143b90b56", "sighting--f8496839-f0af-4ca1-8eb4-fe030f94d0d1", "sighting--120fb8ab-6d8e-48bc-9914-5e37f9b45f64", "sighting--e30fc2dc-1ecd-4700-a56e-5a5cf1e7bf90", "sighting--5e1586ee-8301-4256-a0c0-d321b64a5fff", "sighting--5f8246bd-b8bc-45c9-930d-2727d50326b0", "sighting--53991f8e-389b-4515-95ce-5e32ee61d12b", "sighting--9c3cf64c-0684-437b-826d-66042f8086a3", "sighting--b76a7ce1-8a3f-4c18-aefc-b0d524a427c2", "sighting--662fd0e4-5082-4f6e-bb2a-3e5da300d8e5", "sighting--efbc71d3-7b7e-432b-a1a1-f67c926d6e33", "sighting--5b6615b6-87ee-4dfa-b3a1-0c176ce870ce", "sighting--d0efb453-d589-4dc3-9f8a-aa69052f871d", "sighting--c2efe5a4-971f-4031-bcd4-7765bbd4ec9d", "sighting--7078d6f9-b34b-4f43-ba3d-e9ddc7493108", "sighting--8412d54c-3ea9-41cc-8312-a310c87d2326", "sighting--2df9fdc3-9cfa-47cc-b523-daee4ed9d04c", "sighting--ffb8bdd2-cd36-4351-8d11-2ef182071a0d", "sighting--4d6c3183-55e3-4b6e-aece-b7207221f6ae", "sighting--738a14ca-1f83-4ee6-aa1a-006c77729a1f", "sighting--207ab574-fcbc-4ebd-aaf6-dd1b98774d64", "sighting--492d9f57-6dc6-4ad9-843c-25f8b80c16cf", "sighting--5746e335-00b6-459d-b68c-ba22971f2cd1", "sighting--e4bb08b7-8a3f-4bea-a4b9-001d6dc811b3", "sighting--c0451322-6008-4b6c-9d59-dc601e714ceb", "sighting--3e28a43b-a1e8-4532-84ca-19bbae6e30d7", "sighting--e19630e6-e7c7-4324-930e-91db578103ab", "sighting--b5f4b998-e257-4afa-9078-12fe0dc7661d", "sighting--caa50e4d-0fcb-48f9-a775-f078e3165558", "sighting--bbaa2b6f-e183-4a1b-ab90-d1bf92abc80f", "sighting--03e8bb84-71a9-4bbc-b8e3-febcce6093bd", "sighting--6dea7c34-55e9-4be8-80f3-1da296b4b89d", "sighting--0bd5e4f2-bea0-4000-89e2-ac4bc8daac83", "sighting--124327b2-fb6b-4b9b-8390-bb57e2989d6b", "sighting--1274836a-c78d-4a44-b533-ab7288c0e598", "sighting--c69147d8-3bbf-4e53-b92f-9eef9dee9123", "sighting--3f2809f9-5bf2-42fb-a174-ab1c9c6d6d28", "sighting--de7c13b5-abfe-4437-8311-3ed2c854fc1b", "sighting--9a7f0aa3-9534-4999-928c-243a5a44bd09", "sighting--8c721bba-c94b-4521-a6e8-e7ec50a4a756", "sighting--9737e0df-f38b-4306-a1be-93b29e42d3bc", "sighting--b7c6a5a5-eee3-45ec-b4c9-ffc964fa925c", "sighting--795d607f-6252-4761-a29e-bd9951d0ad5c", "sighting--2505c8ac-34e9-4e3f-bdd0-6aabd290c1d3", "sighting--69784c60-3840-4a52-a2dc-898b079f3c68", "sighting--f8f257cc-dc28-47b7-9a0e-e5d52530cdcd", "sighting--45f1396a-e660-4096-bcf2-1747c6924a3a", "sighting--a8ba5de4-f5d9-4ad5-8cca-47ee216a3d99", "sighting--14e1da4b-2139-4915-b8ff-1c0f4d741699", "sighting--ff52f71f-2cfc-46df-94d4-06334c7ca20e", "sighting--3b5e1700-6fae-4fde-9aca-6f95a509839a", "sighting--b7da8749-6179-4c49-8c1a-634bc7506587", "sighting--864efdcc-46a0-47eb-aa42-47a424ecfbd0", "sighting--fa786cd4-bfc1-40c9-a61c-258be172c093", "sighting--530aee18-4cc8-4edb-ab73-0d756b8aa2fa", "sighting--7307309e-0f28-4b69-b828-9fe409f1cc47", "sighting--d7bfef28-4ba2-4290-bba8-f1959e7f8e53", "sighting--3d1ba2bf-e16f-4553-8b78-32a22e766c0f", "sighting--7f80c3b2-3a58-4b82-b8af-30df55f98114", "sighting--e1e043b2-ff6b-430f-ba30-af8d349a1ea2", "sighting--523d3b1a-9e86-418e-a258-6fcb57d2c610", "sighting--9d3034e9-8fb2-4489-aafa-939a5d3fb8d3", "sighting--f0125e6e-670f-44e9-bb45-70c37edf006c", "sighting--453f5ed9-c4ad-4a7d-afe0-53c1f98cec80", "sighting--ccf5d09b-2a5d-4187-af0a-24eca0b02248", "sighting--70492942-784e-4674-80ba-77d4dacaf54e", "sighting--e3c9cefd-73bb-4b8c-bbeb-e081e3a01ea3", "sighting--f924ea71-e1a8-40a2-ad35-aa2bbe3d50d2", "sighting--af57882b-9248-412d-a7b2-76f1d06ede24", "sighting--01b0b680-b4fd-4943-9db5-51677cb9737a", "sighting--649246f9-3ce2-44eb-8b94-fc78898b4763", "sighting--343bcb2e-4f1a-439b-a815-8fc4b68a7f36", "sighting--1b9bd848-9fe6-4775-b8d6-19d87c6ae82d", "sighting--34e08098-8d99-4808-82bd-53dd0a48b342", "sighting--7a770972-eb6c-48e2-9f06-d40771414662", "sighting--5e8427fa-2b37-4724-a912-adfa3471f406", "sighting--3dc67307-1046-4a48-9be5-d16c9c4ffcc3", "sighting--0d6bbdc7-cb67-4694-8eb6-d4db744663e7", "sighting--4719ff7b-1c15-49d5-a9ae-a4f0562cf756", "sighting--75f04365-23ba-45ea-aa58-fcf13347ff57", "sighting--d953a06d-d82c-4229-af1d-4027f913c688", "sighting--9b795584-cc67-44c2-b3e4-91febec5d106", "sighting--de9b48e5-caee-48c8-a691-6e4382736419", "sighting--7b33eace-dd56-48eb-b111-0a66d9743f9b", "sighting--f202e238-d4d9-4315-9d56-938ab74bf14c", "sighting--3cb52301-e2ef-44f2-8a75-51aa0594b5a6", "sighting--5f166c5d-2154-4399-ad07-c0a07400a0b7", "sighting--56b1e883-0a08-47b7-af86-19bab897b7ab", "sighting--990c8549-e498-4333-9d69-8be1d7c01b33", "sighting--297bbc56-3851-4d15-a989-7e6dd390c059", "sighting--b12b6185-46f7-45df-9fb2-e41585b1d06a", "sighting--a5c0a6ed-0632-4cfb-b3ed-a1b1e6d74a43", "sighting--174b7e49-70c7-4343-a8a4-49d6e89ede82", "sighting--be8782ac-1e08-44f5-9e3c-a07965e5a2d1", "sighting--d0a94c62-284d-4908-a9d0-37659330ba81", "sighting--7483fe4a-d99f-4afa-9e77-053fa60fdce8", "sighting--9f26c488-cf45-4529-8e17-776fc59a8cb4", "sighting--d06e3fb4-4844-476f-b3b8-50d843ffd72c", "sighting--df66fcbf-8d20-465e-a5ca-33756090efbc", "sighting--f79bf7ed-29de-445d-a141-fccd26f5328d", "sighting--69d8d6bc-6366-401d-8b5c-bcbb11236c49", "sighting--72059b85-2f64-4ed0-a35e-3f4ea676228c", "sighting--8b82a1e1-8f48-4b23-b1a1-5a87a1eb6558", "sighting--000268b3-6846-49b2-bcf6-9abc289a5165", "sighting--c01f9dd2-1116-4db5-8407-7cb524c33376", "sighting--f9480367-7e08-4a8a-9ad2-b1f9b8906342", "sighting--20657214-ff06-4e28-a22e-e3faaac584f3", "sighting--676a01be-7d78-4db9-8c69-a760a22ef51c", "sighting--0dd92e2e-d85e-4602-be06-5104b84d8874", "sighting--cac3cf15-c4c8-4e0d-a8ac-da9336528e1f", "sighting--5806a3cf-7f27-447a-8c45-defe0381dcca", "sighting--8ba47a24-d400-4522-ba4b-6440b920ee9b", "sighting--887ffd92-32d9-48f3-9c3b-afe67578df5c", "sighting--27e1f89d-a47b-4375-bdde-feba1792c2c9", "sighting--bbaee257-bcd8-4e4d-a83f-636a470a4f32", "sighting--8ace91b2-8ba1-4c0c-b248-5412a44d3105", "sighting--59ee1a81-e6c8-448a-8e8b-fe9765ca0a8f", "sighting--0a1daed3-3628-4cdb-b7da-440ec29feea9", "sighting--7ef2137a-c2ca-4748-9e34-3f5d440abac7", "sighting--8326e5d1-0305-4d71-87fa-057cb1f70610", "sighting--a6621ad6-e492-4bc4-b3a7-d0210cba6d1e", "sighting--087e08b7-d8b4-462a-aa08-26549fb1878a", "sighting--2c600ad0-602c-4682-8563-26b73d5eaba6", "sighting--fa886a77-7c57-4315-91c6-d6e4eadc6206", "sighting--cdf5af0f-2948-4942-9320-fba7ab3c366b", "sighting--613ab75d-a884-4207-8a5a-a4d46d493c3f", "sighting--58a4ab82-9750-42ec-b9bc-b5eade1bb612", "sighting--f7cf7153-7068-408c-bfca-c9b67455c2f4", "sighting--4a7c0e8c-a67b-4a6a-a854-cf705ffdfc21", "sighting--0f6b7a82-480f-419f-9360-c9bf9cd66689", "sighting--97620e4b-a320-4101-8ad4-695d3c67abc6", "sighting--134bab5c-dfac-4d72-b430-fcc0784ed25e", "sighting--381308d1-a4c5-4a57-bbb7-cb7cbd09f44b", "sighting--3f862be8-bd1f-422e-a8b4-69ca413dcafe", "sighting--7f7567e9-54dc-41f4-accf-ae22c9fbcfcd", "sighting--1baf910d-7d1e-4414-a0f1-e4753a4756b6", "sighting--0f00c259-969a-4630-bf92-1e70d7d27ab7", "sighting--966a328d-118c-4547-b3cb-a16508158fd4", "sighting--a9a537bf-175e-4d22-a4c1-1f9351c6d63b", "sighting--acbceaf7-6e25-408e-8176-d24c962cd11f", "sighting--250bf370-3fa8-46d1-9d5f-4493367dd032", "sighting--1ba23433-7e01-45c8-8b5b-8daae0c4ffd7", "sighting--fd9aaee2-0f05-47b7-9138-34b17aed809e", "sighting--c3f1b04f-d104-4ba6-b9c1-3554daa0feaa", "sighting--fa8f9522-6bc6-42c3-8cf3-28a03f9b13dc", "sighting--884cdac8-6a49-434d-bb7e-a477bb85f193", "sighting--161cedb2-bc86-45d0-9fff-e85ba6a0139e", "sighting--6275b129-010d-49f5-9a78-95bce1396a70", "sighting--c08240e7-9578-41f9-8ea2-3a6af50bd704", "sighting--93b5022f-61c8-4acf-bc91-0c32b0041795", "sighting--f1eee6fc-1e0a-4681-b1ce-43614888bc3f", "sighting--5f81d2f3-61b4-48c0-b128-3b4f44524447", "sighting--1496f039-d1be-4423-9826-5dd0714093f2", "sighting--c7ec691b-ae46-4f6c-a268-4c2d5f618656", "sighting--8965333b-1019-4165-b6f9-b41c77a42171", "sighting--0ac5547a-762d-4d8c-aa8e-a86d595286cf", "sighting--d9936159-d3a7-4263-bd49-2a80321fc200", "sighting--9d1bc1db-fa4f-4c03-8695-bc33ff56b801", "sighting--604279d2-1490-44f5-8967-38b4bf5d04cd", "sighting--6aac7874-5de1-4a68-8b38-5b93f55192a5", "sighting--ce0fee3b-4c97-4c4e-9f73-055761e48dff", "sighting--7233760e-cd04-4cac-a03e-e1c560c79be9", "sighting--a7fe9e71-f86b-49ee-afb9-449d56e12679", "sighting--45f2c969-d3c1-4b2a-a8cf-31494905abca", "sighting--8600c1b8-a9b7-4d4b-ae69-0b8e9103f07d", "sighting--8a3775ff-c63d-49d0-aaf2-b978bfe0e8fc", "sighting--cbca848f-95eb-4339-811c-554ca928fda4", "sighting--a170a3fc-ca25-4d1a-ae87-dddde2da32f6", "sighting--6100244f-10fc-4c93-9b8b-3ead3c3ef368", "sighting--15165b2c-5c9b-49c1-8e1f-c397242a9fe4", "sighting--bd82b164-1767-4fe3-ae14-8fe623545a6c", "sighting--f5dfaf51-897f-4201-b2be-94b52b38eea5", "sighting--6fbe0aa9-fb00-48d3-99a3-e24557549df6", "sighting--3d388daf-8ac3-4899-abbc-4f126881e5d5", "sighting--7b8f577f-9dc3-4c81-9b88-7cb42eeece52", "sighting--1f896e08-f754-4ce9-aba3-c2c795832cd7", "sighting--ec4e2f65-5e8e-4912-8b0e-998155380677", "sighting--cef57e22-9f5c-4e8a-b81b-fc4b31573f08", "sighting--5aed4db1-c8e8-4653-928d-b0264b5b2ddf", "sighting--28d438fd-922a-4d54-84ed-46464fbadbae", "sighting--dba19716-7629-4f43-9de6-2c4dcf93454f", "sighting--4b284815-e212-44af-8e7b-9b6cae21ab23", "sighting--f3bf6540-7572-4777-a193-8097c9807e12", "sighting--fb2a3cfd-67b4-414e-89f8-1e8ef75d7aea", "sighting--006644e1-87b7-4074-a519-11d3060a6686", "sighting--992f340d-e7eb-449a-8f11-524aae6563f9", "sighting--ec734aa7-3cd3-4dd8-8a5d-9fc1c36416f1", "sighting--78330702-cb84-424e-b9e2-ba7f8be25851", "sighting--85642fbd-d545-42ef-ad1c-491c21a9c982", "sighting--e153f051-0a5a-48fe-8bf6-90a2f8fe2445", "sighting--d1527712-7dc3-4d52-a4fa-7ca17d57a65b", "sighting--bb71581a-b987-453a-8fd9-b93fb7ea1c8b", "sighting--41d5cc31-3404-43fb-a6aa-7fbb5fa1befd", "sighting--aafbe3d1-b500-4ff3-a4e3-53eb1d5d29f2", "sighting--2617217a-6155-4567-8945-6e0b26ee4c6c", "sighting--4ab56941-cdaf-4d58-94cb-6ddfeeab15b1", "sighting--ce5393ef-875d-4ac1-8947-4852dcb4ae70", "sighting--bf989ea0-0962-4b11-86a5-f504af3d4518", "sighting--3ac59a62-dc6d-4d9a-8083-21681497c02d", "sighting--e616b8b0-a41b-4e91-b0f0-5ce927ebc8ff", "sighting--2720c8b3-efb5-4e7b-bd04-8980c6b25f12", "sighting--c812050e-ba36-4a78-abd8-065c4b6b26e6", "sighting--03728771-f829-4cd5-850e-c7f3dec206de", "sighting--d0286b4d-a5ae-4e6f-a0c4-d50896a2573e", "sighting--0f551559-7bf1-47a1-aced-1dae2ae0d1ea", "sighting--620c9c6c-1e40-4a09-9ba9-87e245f3a94b", "sighting--cb686c94-6c92-4fea-b992-c206bc70459d", "sighting--84d918e9-1069-4695-a371-d67638dd8780", "sighting--df2f6500-4e20-4e8b-a8f2-337bf23024bb", "sighting--c8668fec-81ef-4e29-8406-5922a048b26e", "sighting--43a5152e-25f5-45a6-a36f-74316c6bdeb6", "sighting--f015305d-1328-4650-bc6d-5f6c2ce734fd", "sighting--d8f27449-863b-489a-bda8-e366079ac37a", "sighting--2efbae20-5b67-44d6-85d0-f4cd654f030d", "sighting--5da24045-d591-4b20-b0f9-4e71764f370a", "sighting--1db0e656-020b-4306-9edf-50e31b4f9a0f", "sighting--ce2fbd5e-4a26-4a9a-ab38-4cb11057a9ad", "sighting--dc0c4bb9-b367-4f0a-b682-3b9e75dd6b73", "sighting--85c66d89-1e2c-445f-87c3-ffc5cb2b5fd6", "sighting--83e00c5e-6f3f-4a85-a85f-f0bb55abe7cd", "sighting--5e2f93a2-11e7-4abc-8d39-b3be9b23b360", "sighting--4f1b5187-4737-42f4-9b1e-3f88c16139f4", "sighting--4a43c7a1-9fae-4a3a-a4ea-4174666d6bf4", "sighting--d31c501f-49f6-4a8a-9d14-e5728c122c42", "sighting--504fc052-735c-45ed-b0ff-22f13bacce8f", "sighting--a202f6d6-5f1b-448b-a389-70bfd166d309", "sighting--15f98260-f7c4-4b93-9a6e-b7cb6d67d6a4", "sighting--b00bea95-778f-4b75-8d7d-68d0145f6197", "sighting--57da2d4e-9b48-4f45-8cc9-02bedbfb2669", "sighting--20eb3b8e-46ee-41aa-8d3b-984dbd1e3751", "sighting--e2d91ab3-817a-4885-89e8-1283410241b8", "sighting--d5e6982f-100e-4358-b9c2-128185ea8d6c", "sighting--885c4ff5-ac8b-4463-9c99-3bb4d6e920f5", "sighting--2fb7de3f-2da7-49c3-a1c9-858143fb6b8e", "sighting--8ddf23d1-a93a-4719-8596-adaddbbc90e5", "sighting--155419dc-e9af-49d2-80c9-74a547948dad", "sighting--3b027c87-4018-4bdd-b8b6-19d6f3f5510d", "sighting--85eeaa0b-ae5b-4930-8df6-2498cb15a7ec", "sighting--5ab20d5f-8bc1-4b09-b2b0-085dfd783019", "sighting--f348c4e1-897b-4454-988a-8eec486a2936", "sighting--3194694a-4ae4-4e26-a9f7-e4aad95beb98", "sighting--8cdc0c13-792c-44e5-85de-e67703c69bcd", "sighting--4f5537a0-4b90-4744-a7e2-85a1a30e70de", "sighting--213428ef-47c8-4508-b9bd-9519599d3fc5", "sighting--e0f0b659-f0b6-4b28-b97e-aa7de3e01942", "sighting--aaf3fe57-2acf-4650-8c53-44e933301579", "sighting--db002d4a-6955-4486-a345-516bd4b273ab", "sighting--3af0350e-6528-470e-90f4-06ce3d530f5b", "sighting--738d2b62-608c-458a-9d62-3e4ba2024e47", "sighting--3179ea6b-4140-4948-92b4-1741ab099d6f", "sighting--888d3f4d-11d0-4232-a567-3e91035b1094", "sighting--e866bf84-d1a2-4263-a952-ba3e41ff3c2f", "sighting--0bab2ceb-03d7-4628-b6ce-ba8e1ee1a6a3", "sighting--595116a9-31bf-4d49-b31f-f0d2d45b79e8", "sighting--c2738cc4-8680-42af-8789-2e8b3232b69e", "sighting--7455c437-b9d8-4d10-b77f-c973686784df", "sighting--74a8150d-a5d2-4907-bb16-95acac24e6b5", "sighting--7528adf0-e754-47e1-8fa8-e6139f1d5713", "sighting--c3059976-bdcd-44f6-be17-7712d8e740d5", "sighting--c42c8fad-a14d-4ec0-9854-6d644e2c14ec", "sighting--946bdce5-9144-4f1d-a2b3-ab556435c068", "sighting--3eb7656e-1a3d-4390-b25c-91388a7ad533", "sighting--e522dce5-cbb2-4fc1-8bc1-738a57774dac", "sighting--fcf8e25e-8464-44fe-bfcd-a30beff0cdb7", "sighting--512848e3-6f0d-4487-97f2-06c6ffe7d5aa", "sighting--cf831e5e-1b0c-45c3-9a3b-aea7460e9271", "sighting--d0131e0a-9fc0-422a-a1e8-891d39382dbc", "sighting--aa7c7827-8a64-481b-90d2-7297df41427e", "sighting--577dbd1e-3e75-4974-b533-3ab706d50b22", "sighting--15f35e93-c297-4ce9-9011-069ee67390a8", "sighting--5a82a507-4c60-40df-8341-9d2ded7d4940", "sighting--d5068da0-8050-4419-8b3e-548760170fbe", "sighting--117d0a7a-3b84-43ce-a9f8-3534b68ec15b", "sighting--4fb624ff-9c71-460c-a115-39d4bc00c029", "sighting--93060559-975c-44c3-97ea-52dcd2062fca", "sighting--2252bc82-728d-4b36-9436-83dd991d9e3a", "sighting--1dde4972-1a5b-486a-a14a-bf0335c77b31", "sighting--fa4775c9-fc0d-4e1a-ae60-f8dd0ce35ba1", "sighting--6ad33f19-ce6a-4515-8ade-ee437dea05f5", "sighting--b493b891-554d-4ef7-9446-01fe93e88c41", "sighting--0502b1bd-1e57-42a8-8381-8de0a53c5623", "sighting--8a6c891a-59a8-4ccf-9018-349bd57ab68f", "sighting--fcc96b48-4c2e-4126-968b-7c4316662f14", "sighting--4ebdcb57-1a4c-4fa2-bf06-e3df0762070e", "sighting--3ef541d8-c1e2-48a5-bdad-bf4287903117", "sighting--fc23fb80-9182-44fa-a0f2-c5dfdfce0248", "sighting--21d961e4-be18-4806-a437-23f8fe84033e", "sighting--af646feb-113d-4113-ba6e-fc9fd781aee5", "sighting--fa64215d-7c10-49ed-afe1-60497a322f16", "sighting--561c8d6d-c87e-428a-8241-f78f8cd3ee7f", "sighting--ea674eff-321f-4b17-8a85-6f03a3ae55fd", "sighting--720b3378-d6d7-4132-9b79-3d4098a99ce3", "sighting--efff15f4-3583-4134-9410-20dd1ebdc7ac", "sighting--5de9b74f-0e9c-46c5-b1de-647afe9ec581", "sighting--5ef6e1cb-4a09-4046-ab4e-9ca041cec4cc", "sighting--e921c620-80af-4354-be58-cc0c82ce91ac", "sighting--0044432b-bfb3-4803-a193-dea6658cc757", "sighting--bbdbed13-f471-4bec-af61-d9dccd2ade1d", "sighting--e1d4870d-b2b6-4c20-99d9-830d84d1cce8", "sighting--ed0651e0-8e1c-4edb-9a5f-68dd91ec7d24", "sighting--45cb5c9c-2f9b-4757-b0f4-9622d95a3fc7", "sighting--b8664132-e8a5-4a45-9792-e16a5f8fc962", "sighting--e0899e19-32cc-42c8-81cd-d4a33222e3e9", "sighting--15e65476-2f57-422d-9f37-423c9f0cfaed", "sighting--2a6a7474-6f49-462d-aa7e-1cafc7c51bd7", "sighting--86d46774-e18f-4d9a-86a1-a86edbe0d85f", "sighting--cdae7a49-ec76-488c-80ad-311b57560a13", "sighting--c14cfd01-e12c-4ad1-b8eb-44c09db39aec", "sighting--10ccd1c0-6987-4f08-a23a-3369442d7003", "sighting--8f062a85-c020-4caf-8785-259db9c38fa0", "sighting--1c96b662-09e2-4c8e-9cf7-98f24bbb2d98", "sighting--9ec5c1a1-f1ed-4910-bef0-9c8390a0254f", "sighting--c936976d-816d-40c5-9e84-1ecc34dee240", "sighting--a98b1392-4f31-4eb2-b672-3a64e1b787bb", "sighting--bc2dd930-7177-4d1c-be57-04120736d225", "sighting--ec2361da-d3d9-49c4-a801-0ce96500094f", "sighting--aadced2d-71f6-4db7-90f5-d29a5f641324", "sighting--274b2c51-37a9-48e4-9339-ae7aee5004a5", "sighting--c5d1d545-5c18-49b9-a1b2-c2098520251f", "sighting--449e8239-5f89-4e1e-b1f5-6fb0bd3a988a", "sighting--01d49dd3-b66a-46f4-bc47-45f5c0fd241e", "sighting--2ac8da66-b498-4c9b-8ca6-4dfd2fb0530f", "sighting--543871da-bc7d-47fc-af44-287c1e8a5acf", "sighting--51cc7738-21fe-4409-81d7-4b5301c2d829", "sighting--7846af61-068d-41ba-93f4-73fe15c57ad5", "sighting--b36e8abb-2bca-475c-9d6d-791c5bf585e3", "sighting--aeb24f35-745c-41e8-a6ce-e88304803212", "sighting--91f90de7-8608-47af-b5dd-3f21cf12ceae", "sighting--7acd8849-0743-4219-9080-30f287a81a35", "sighting--cba692c4-e5ce-4ba9-a319-0e14e1715517", "sighting--06d83e52-d1f5-42d6-a522-63a882b2d4f1", "sighting--baf2a00a-a263-4800-bffb-0663903d178a", "sighting--59ace410-23c8-4a97-b8af-1eda0c24875d", "sighting--79e16585-1d2b-471a-bbc0-e1e2c74d178b", "sighting--487f4691-2d86-4a6b-999a-84031babbcdf", "sighting--faf469d9-0b8d-42ae-90c4-8931e84312f8", "sighting--5cf83850-1b89-4760-9bb1-3b85270db017", "sighting--bf4ab4ea-0a94-4551-838c-090e4342dd35", "sighting--db4d3398-cc2c-4c80-997d-7aab3f93b59d", "sighting--dde7d62f-44f1-4d5c-a98d-02ce846e4515", "sighting--9f37c44e-6760-4e46-8199-09ece4ef1eca", "sighting--3ccfe2e2-4d18-4131-9573-80611057cef8", "sighting--72a2dd01-97d2-4cd0-a72e-926226144d04", "sighting--6d7955da-56ac-4cae-a47e-0ea55b170427", "sighting--98cbb28b-20d7-4d90-ae1f-b8716d3dd8a1", "sighting--12a4c33d-5c32-4176-b881-a3bb1269c0c3", "sighting--3b714bfd-f74a-4367-ad59-b50f59808c0f", "sighting--27de572a-2640-4171-8404-a3a63e07f0f8", "sighting--f440d4d0-0891-4938-b1b5-9edd1142264e", "sighting--9f742f0c-8e63-44ce-bdaa-7f06d8c082cc", "sighting--94a40fac-e25f-4eb9-963a-9f24d83d04f2", "sighting--991b32f7-9161-4c27-9e56-6f9f8f267110", "sighting--f07ecf59-583f-4ed6-b379-4b6f5bdb0644", "sighting--ddc1c2d5-3a0d-4cd7-8ecc-a396d11d5cfe", "sighting--695032f4-bd5b-40af-9a57-a9abf3161cc7", "sighting--cb9b9639-e527-4106-8694-c731a96d762e", "sighting--385b1e60-c156-4294-bad2-2c023259afef", "sighting--91009d64-0e7d-4206-b8b2-8b073264bc3a", "sighting--adf61bbe-2b41-41c7-820e-41fc2d8fe58d", "sighting--05123a01-a2f6-4b22-a7ed-0347062b8eec", "sighting--a9ab3a93-e258-4880-b4d0-1ab3bdb92b3f", "sighting--4662b852-2fab-4b62-b6c9-901d7a3831d5", "sighting--589e3dd0-725a-4848-ae9a-58e7cb107eb0", "sighting--795b6a52-0b45-4ced-87ea-cb9d157ec139", "sighting--f222488a-b4b9-482c-82af-aebdbb206ab4", "sighting--c27fd129-bcb3-4e19-aef6-d45ea0bdb99c", "sighting--2e74d008-5c50-4173-8157-cced88f32914", "sighting--de5303ee-cf2a-4d30-bdfe-b15897bd2ea4", "sighting--f72832e7-1965-46fb-abce-064955c0fe87", "sighting--cb33e78b-8d04-48b4-9a5f-bb5a47a61e6e", "sighting--378baee9-316d-4ba2-b888-54ab4257f29a", "sighting--be2a6641-1aec-4b58-b245-fcfbf0626c9d", "sighting--dde63bf8-832c-463c-9b05-71633f2c7e71", "sighting--5c925e74-c015-4bac-bbf8-354a43810d76", "sighting--faa972d1-59aa-4db4-892b-6c4a5a8413ac", "sighting--05eb0166-70d3-4f23-969d-2fd3ee5c0a1a", "sighting--06caef3f-933b-47d3-b7e7-cc912b35acf5", "sighting--0ff9ac18-0d50-4c73-a664-d2834d295bca", "sighting--5bfa4174-ec2c-4c7f-8fd8-bafe711a9f1e", "sighting--f92fbd4b-63fe-436d-bd27-c257ebca59a9", "sighting--2ce10643-10c0-452c-a927-7b5144b875d8", "sighting--896df6f6-1501-4bbc-963c-2550d0c4c7c7", "sighting--80a1c29f-9e1e-48bf-a46f-72400800030c", "sighting--0c4f2fa2-759e-4923-93fe-13e89058ab50", "sighting--5def6e77-9646-4839-903d-4022e7947ec3", "sighting--2f4c1ba4-dc74-47e1-9a8c-4fc360ac5dc1", "sighting--4e45a58e-97fd-4fe0-b1f4-8cef05bdf399", "sighting--d355fd4e-cd5d-40b1-9e2d-0c32f49cf0eb", "sighting--52a18acd-374a-404a-9996-4b15be65e38e", "sighting--b4de3b46-ba7a-4f7b-b6e1-010ecdfab98d", "sighting--b062b928-e84d-4bb7-a900-e3c6ea471b91", "sighting--1dbd429e-541a-4e73-b319-9b03d84765f1", "sighting--4fa8c0a4-9b47-497a-8dee-8a63954a63d6", "sighting--fff4eba5-b75b-4152-a434-400d96a7ef05", "sighting--36bc9dda-cde9-4298-98af-90e2d6c756e8", "sighting--6c571f84-87a8-4f6d-b1c0-76608a59fc60", "sighting--18f7e443-ea4b-4141-83c0-373a36498ef3", "sighting--632b4faf-757a-4d89-83de-4cbcafc1f31b", "sighting--b8503529-ba21-4717-843a-a16bc7f1dc17", "sighting--28c60df4-88df-47a8-8277-91b595e89c97", "sighting--59d04902-4a12-45d8-a0f6-4d018c2fbeb1", "sighting--7b708bbb-4d5e-4c67-81b0-c788fd200d68", "sighting--e2c7836b-cbce-4e13-9e3d-5e90f3037cbc", "sighting--a10ff274-2689-4320-9838-db1b6c07a3dc", "sighting--e4c198c6-601d-475b-ae6a-b2c0be3637ee", "sighting--74e5c669-8074-47b8-b984-4de92a035edc", "sighting--be44d4b9-c240-46c9-a582-197dd69dd5b8", "sighting--ef17364d-03b6-4d68-ad5a-b6a32e65b605", "sighting--c08b08e3-afc2-445f-8dfa-0da32a7cccbb", "sighting--1e221d09-c438-471d-a284-82f777030628", "sighting--1a2af1f9-0283-4ff3-b98e-79488bf61fff", "sighting--9b1b5b28-f6a9-4032-9ec5-b4aa6162bf61", "sighting--214ea9ae-5936-43e0-a163-727a0f2b8de5", "sighting--a65f9403-9ced-48c2-8ed6-4cd922932b5b", "sighting--c30143dd-ebd2-4ad3-9b10-7da642ee7062", "sighting--fcb32799-f269-4910-bbf4-61661614f537", "sighting--1ac71088-82f7-410d-b783-776bb8b166b6", "sighting--0b3f7c1e-e939-4d10-9ac5-782586e5abd1", "sighting--0eb572c5-7472-4b57-8de5-813adfdfca50", "sighting--4626df9a-d740-497e-983c-69a2ef247d0a", "sighting--717dd3a8-bed2-4990-8d41-04ef534f5229", "sighting--29243b8b-cc3a-433f-bb35-b3ad9d7b0aa1", "sighting--24000a4e-d6ba-4586-8908-8dd5261f7aaf", "sighting--d07ddd26-f500-459d-88c8-4e31b2e5e06a", "sighting--7cc65bda-4bd4-459f-890f-f7d67c0c5fbb", "sighting--7d6453f7-395b-4943-94ee-44ef459dcb0d", "sighting--87983918-d788-4dc3-bbad-9a208ae12794", "sighting--554c0baf-36c0-4a48-b8ee-68dae86c7b88", "sighting--a62797b1-9d9d-46c9-958f-81d7e48a9fec", "sighting--53c11af8-176c-4f40-9cea-544edd179f4e", "sighting--ddbea0b5-b09b-4b71-aee9-f960b752acf1", "sighting--9e1d3af8-2c1b-4a7a-a1bc-32d9a6ca82ac", "sighting--892a4dfe-47c8-4b7d-8e5a-27affaf8452d", "sighting--23acc251-1d5e-4a6c-b359-294f805df944", "sighting--32e02682-ad95-4090-93d9-9d9fa984f54d", "sighting--acc57591-ae08-4e99-8277-be2da3196ae6", "sighting--5f68c44f-893f-4768-9c7e-58dbf7759f5d", "sighting--8e46a2c2-2b2e-419b-8f82-24a73d2b8a65", "sighting--17a23bc9-e15a-4fe9-9db8-b635185906c5", "sighting--44dbfcc8-5a6b-4faf-8484-5e0106e26bb7", "sighting--b4d844dd-7e0f-40b8-b714-1d2d9ed6954d", "sighting--a5e69d19-97fe-4caf-9c2c-969db2be1056", "sighting--28ebfb7e-6805-4420-be47-690a374eb54f", "sighting--ce55c120-c4df-4d29-b52a-a74a944d52f2", "sighting--df61ee84-3dd1-4893-bb93-16e455aae4d7", "sighting--0e90d939-8aed-476f-b6de-d839bbb73b36", "sighting--42bae9ef-bad6-4c02-ba3f-5fcb23e2d365", "sighting--4f92f4be-1fc7-4ce7-8fb5-25ac36ef5efe", "sighting--f298f40b-9b98-44c5-8213-d179799f4229", "sighting--c397d985-5dd5-4806-920a-320b2cbae785", "sighting--ca4faac9-b310-4d8f-b115-5ddacbb69a18", "sighting--9a2f30a5-3b3b-4f11-92ec-5652b64a4521", "sighting--b308c04d-90d6-41a1-98ff-c46a385e5ce8", "sighting--41ce18f4-f56a-4f8e-bfa1-f06c1d4ed1ca", "sighting--c82875f6-aca3-42a6-b0a0-07f471f432ea", "sighting--5622752a-e462-40be-936e-81208a11bc2e", "sighting--bc08dc8e-94f7-4134-a24b-e38f8845ef53", "sighting--5b58fe08-8aa1-4eb8-80eb-f597ca9f85fe", "sighting--875e83d0-527a-4999-964b-22f2f446919e", "sighting--911e52e9-bcaa-4b80-910d-ab12e2e0bd29", "sighting--da3b12ab-e4b0-4fc7-b0ae-35cc2f0124f1", "sighting--94d5ff6e-9270-44bf-bf7d-7d45413671fb", "sighting--65d51c4c-4e24-4d65-9b85-072b343ed22b", "sighting--a0241d4a-f94f-41e7-a3c6-fb91bfc112ef", "sighting--17a219d5-9f50-45c2-b2e7-26f924f0b701", "sighting--41180b9b-7841-417b-8ed7-e69419d50d39", "sighting--fad032e9-5b23-4bb5-87b8-fe545a0a68ef", "sighting--3e53e9dc-f42e-4251-a18d-32971b277b35", "sighting--d51d81eb-2aa4-4dc8-ad38-a5c00f549692", "sighting--19a9f190-ba8a-4abf-a8d5-99fe451be063", "sighting--c5987035-c8b6-4cb2-a09a-cef2fe8bcee0", "sighting--ef607cb1-c195-41c3-b763-07d982f788f4", "sighting--4c34abb1-8e4c-42da-9922-e06e7dec2847", "sighting--ee67ebfc-0d87-49cd-a73d-5c7f3afbec91", "sighting--a6977808-69cf-4dc2-932b-647b751d3a4c", "sighting--27919ca7-9320-4f66-ad1f-f0550ad30266", "sighting--051f9d25-44c5-4096-8843-3a1545e74620", "sighting--f4f8242a-db9e-437d-8326-fffa68f39097", "sighting--273d351f-76e4-48c5-b932-e7110e57fb81", "sighting--b9ed2fb1-7497-4ec9-b817-24c510cecd30", "sighting--9c865b3c-01a3-4079-98cc-ae0695363a9b", "sighting--25767771-45db-4a85-8486-b23c1004a41c", "sighting--c13389f5-0707-4a1c-8887-bc6d045ab0ba", "sighting--a69f51d3-eca3-46b5-b60b-07fe1ff1189e", "sighting--e4dd9e59-e0e0-40c5-953a-bc2f83f758c6", "sighting--0f8cea3b-8d56-40ab-9083-92ab729642c9", "sighting--59adfba3-a57d-426f-8ab9-65f63e89dbb1", "sighting--d06c8189-7688-4e87-adf1-3e9606b5229b", "sighting--3e378bd2-da63-4a1c-a036-c9397f82c2c7", "sighting--0af649c6-0d6e-4a2a-93bf-df505dd3c25d", "sighting--b89175ba-206d-4c1b-a7ad-aa8f9dfe9dbb", "sighting--efd694be-a964-40fa-b1ac-6ebee5d23aa9", "sighting--11d60745-4064-4ec0-b440-4efaa19c4904", "sighting--aeee32bf-3030-47da-90c1-5c3efc5a902c", "sighting--86a73062-607e-4738-a1b7-aee415d15707", "sighting--ecfeb4fd-e758-4225-92bb-08f7fbf994a3", "sighting--60d4e4d5-ce08-47af-82a8-311ffc412ab7", "sighting--4f1ce972-119d-40ee-9ae1-399b8b62a497", "sighting--b68ed17a-84a2-4001-b471-b94e1cc15049", "sighting--6a65a1b8-f435-416e-ba24-a8549274a0a9", "sighting--537a5642-fe61-467c-b5a9-0146ea4801f1", "sighting--ff90f7ad-ff3d-4edb-a204-b4a31ec847f7", "sighting--169c310b-6fb8-4153-854c-0ccc2a0da9cd", "sighting--5dfb9c4f-d796-42e2-b656-600ff376fbb9", "sighting--bb170c2c-3d69-4556-8327-2ba1efd5a86d", "sighting--6a47f7be-f7c8-4e04-a263-c80deb6e3bef", "sighting--dfcdc7a7-913a-4856-ac69-3b7236e96d34", "sighting--ab8dd3c1-f24f-424a-a5c0-d03b83f0c4f5", "sighting--5967ed8f-6977-414e-8556-9c052a2fb589", "sighting--fd53980e-1386-4d4d-a106-e2f0f4f58e4f", "sighting--4caccc82-dbc3-417e-8682-13a5d8b67c95", "sighting--6e38ec8e-6dd2-4861-b2d9-48ea05bff410", "sighting--90259f60-54c9-4225-842c-95d900017838", "sighting--a29b8f07-fdfd-4873-96a6-a64d4b5ae399", "sighting--6f2cf6c5-194c-43ff-9d51-f58c07df2305", "sighting--0441fe28-981b-4f9d-a1d1-a301b1591e94", "sighting--52f440b9-c6b8-4b77-b8e7-592966d63643", "sighting--e906c4d3-b84e-4201-bf2b-4918c6aeaaf3", "sighting--fda7c7a5-ec6b-46de-be67-5e1eb6243a1f", "sighting--eb1c2f5c-b855-4ae0-9ebd-45c9838df695", "sighting--5a4f5db3-5aae-4951-99b4-637a2b963269", "sighting--7e17a75a-a790-40bf-a8b0-8fde57079ed8", "sighting--a4a66e81-961b-49a5-aad9-2e85d0d23dd9", "sighting--9e1e323b-2672-42f9-a778-ff48285d89b1", "sighting--1246059c-e3e8-496d-90d0-1089293f2a97", "sighting--ed33bcc6-335f-4ac1-a18d-150c5a54053c", "sighting--dc0a59f3-3da3-420e-9159-528792b80e0c", "sighting--22c91c85-0eb7-40f6-87c4-ebc5d5bdcce3", "sighting--8e3cd028-2376-4bad-be4b-8979cc6a7d14", "sighting--21278709-a3dc-4502-afbc-6f868f0fd346", "sighting--9d833e54-7933-4fba-b968-ebcec632c128", "sighting--0106db86-4d83-4cb1-9ca2-9f8be0529207", "sighting--1347d995-1821-4dae-8a1c-903a4c4be882", "sighting--82ea5448-75be-4440-ae34-452c6600c978", "sighting--7c21d8b2-f115-48c2-b6fc-ca55879fe9b8", "sighting--8668ed74-b389-4eb4-bb91-01fdfedb28b2", "sighting--702ed00c-2d54-4a09-a77c-45137c87df7a", "sighting--4fde40b0-2286-48cb-b12a-4f42365df95e", "sighting--ec69bead-bf35-46c7-a7ef-19c3fce77fef", "sighting--26ad7ff8-5e39-4d0a-be75-e1ac5852481e", "sighting--d3ffd6e6-74ee-41ec-b714-ae01303cd0de", "sighting--8191237a-d19c-47aa-8b7d-dc7cfd273512", "sighting--9475321b-4cd9-4639-925f-06a25944f4c1", "sighting--781b5e57-5f3f-48cb-9c23-c79ccf7967ef", "sighting--cbfb315d-44dd-4d45-b097-48e4f009a945", "sighting--bbfb3282-5af3-49b1-898a-8882f697ffd4", "sighting--f03975be-d4a0-4c21-9926-384787d3518a", "sighting--907b24fc-c46b-4dc3-80bf-124a34a332c7", "sighting--9e8baa59-4275-423b-868f-93500ddf07b3", "sighting--f4e12b24-481c-4905-9439-02ee00da2df5", "sighting--691c2ae2-78ac-4242-8843-d266cfabbaf2", "sighting--8470f16b-3dcc-4a9b-8f38-a1eb31715af0", "sighting--1aed17d2-02ed-4158-8e57-a2a0af046280", "sighting--a26ef480-0491-4b48-a80c-7d4fcdb3a436", "sighting--b4d328d8-5944-4d7c-875d-5b78251603d7", "sighting--c242888c-dd0c-4623-89db-311a77af1eb4", "sighting--e91f105a-f1ca-45c2-8270-dd5556733c5d", "sighting--8550d9c9-4f7a-43b5-8674-c89d797d93ab", "sighting--8a53490c-89fc-414b-917f-9da2c59bf00d", "sighting--0ea92deb-f5c5-4bad-a60d-b3128025d3d0", "sighting--92827f5d-3ac0-4e58-b197-780b276285cb", "sighting--38f4a644-4c39-434c-bb0d-4da875ba9b38", "sighting--1de1daea-3d67-4118-b8d2-2dec26346c23", "sighting--89e1054d-0a1c-48c0-a076-e625598bcd6e", "sighting--e824768b-1135-407a-ad6a-f43f41beea0d", "sighting--a76633f8-a5c0-4ebe-aed1-34ed2dc86cbc", "sighting--6fcf3772-c178-477b-80c5-20aef58b5ecd", "sighting--c756b2bb-f0be-4222-9690-45fa6920df7a", "sighting--4c2c586c-ade6-4de7-8794-a54234d6d524", "sighting--3f2fd915-08ee-4c76-ad50-7b6c5e5aa724", "sighting--b1ac6c7c-3bc5-439b-9ce2-4c7a3ffda17c", "sighting--946f0bb6-b348-4802-b0be-7a95c71a6d3c", "sighting--182f6d4e-8078-42e3-9a74-4a249cf00e61", "sighting--43b70a19-6049-4997-bd2b-b074bb3d4035", "sighting--6dba1bf2-5247-47f1-9da2-013ba84ece45", "sighting--cc50bc4f-f6e1-4a83-9559-c796a0157fed", "sighting--e19f83ea-cbc0-47a2-92d5-7c7767a827ec", "sighting--2e5cc3e1-99dd-4fb8-bb2a-7b1f4f05de77", "sighting--250e6122-288c-4de8-971b-0675928ec6c8", "sighting--8af14ed9-49d1-49e6-ab18-8dc6034b7b0d", "sighting--909bcd2d-bc35-405d-804b-680f99ea42ae", "sighting--32763ff6-924c-4be5-9fac-7aa9dddd4e34", "sighting--52e163bf-7ee3-4def-b407-ce87ebfe16ad", "sighting--0add2fdf-d943-48f1-be3f-7a0798b7039e", "sighting--a1b3134c-4e56-49b1-946e-e9b7bce2c1ca", "sighting--1367202c-f5ff-4f9d-86e3-0e9a1c1b371b", "sighting--24a5577f-99ac-4e66-9fc9-70e73a0e2156", "sighting--fc5abbb5-7bfa-4f72-8463-00c14c07dd00", "sighting--78fee298-6bc9-4ebf-8966-6e85a4701ae5", "sighting--526adc14-62c8-4b46-ad9d-f72d3a806ab6", "sighting--6b924845-ffab-4bf4-952f-5ad1db4113e6", "sighting--baa29f2c-9e5f-4bad-9534-54109c698cf5", "sighting--8093b2c6-2a7f-419c-9bdb-4795548492df", "sighting--878c86a5-005f-4b24-adea-caff7596328c", "sighting--1b5099d9-0fb9-4f7c-8c37-b34f57c4a39f", "sighting--fdc6db08-44aa-4295-909b-f41ff5f3d55c", "sighting--1270761a-1d07-444a-a6a5-c005094bbb47", "sighting--a1deaffa-3c19-4e93-92c3-95a891ca5eb4", "sighting--1c0af3f6-2918-4d3f-8a6c-7fb91706db94", "sighting--daa6c7bb-1009-4c2a-914c-b7812b26ce5d", "sighting--e11d4dbf-00b4-400c-8bee-8b819fa836fb", "sighting--3f2a333d-7624-45a6-9d7a-aa237a6cea23", "sighting--2ca63068-a9d5-4abb-a89a-b2af7874593e", "sighting--9b6f2114-e5a0-4f11-8705-28e45a4a2179", "sighting--d750f0f5-bc58-4196-a51b-f8ca417a2626", "sighting--a939ad75-363e-49a1-bf23-b7d71cc7bdb1", "sighting--355d3129-cd57-484f-baf1-e728d80ab40b", "sighting--ca9434a6-a7dc-4d1a-a0c4-bc0c71d86a66", "sighting--7fa04a45-6191-4fd2-a8be-7d964541790f", "sighting--07dda257-f2f0-465d-b15c-f3fd89fcef55", "sighting--2d441110-f6f0-4e59-8ca3-c6d14b5bbb2d", "sighting--6fb3be27-f91b-4454-8f10-d2a520951b21", "sighting--ccec62b3-715d-4715-83ba-57e3d6f8dca4", "sighting--d1d55830-c127-4346-9d55-39d2d490b99c", "sighting--1d5a27ad-a54a-4561-8159-5815650b5a6a", "sighting--56dcb1b9-769b-4fe7-aee8-1c9b6a523e02", "sighting--07da9e3f-9bcd-45e0-9850-637f3083def4", "sighting--e9ae6c38-ba9f-4d74-aa0b-0bfaf807c6a3", "sighting--d0bee386-5844-4c96-9f7a-438f32537e9f", "sighting--979a74c9-70b7-47ad-a36c-1a6ba2ddd20f", "sighting--624736b4-ec5a-4f8b-99d2-5c434a748975", "sighting--2df7b70f-4cb6-4a7e-a1b1-ab00eea99cce", "sighting--93c19e7a-9df4-4b83-a384-e5c631050633", "sighting--73425a38-dde0-4d37-a363-40fb4b6d5864", "sighting--54ba89da-ba12-4bf6-ae20-2eeb78958097", "sighting--67056b65-e736-4431-bf31-fd95d1e81e27", "sighting--738d58fb-3046-4a9c-a780-599a0dd8ec56", "sighting--5594e1f4-fd44-4def-b4e2-3dc3fccab9c6", "sighting--2a7e5625-acc2-4a4d-a467-e90f830500a4", "sighting--5f90653d-e214-4b35-9cec-975d2126c4a4", "sighting--92ad4405-c2c8-44b1-ba32-6628573470d2", "sighting--f37d9fbb-e77d-4ec7-8e60-6e2cb8ed8a0d", "sighting--c634a7f0-2368-4940-b427-528fab1b7a3d", "sighting--28aa9af5-3be9-432b-ae5a-a9782c590891", "sighting--8726f23b-fae5-4687-a957-87e4edb0e1dc", "sighting--e7f67d2f-0945-49bc-878a-6337a6d43eae", "sighting--2e2e0691-f2c4-4d89-92a0-7dd265f85583", "sighting--d68d3ccc-4980-4281-96a3-b93d045aab11", "sighting--314a7fcb-7e11-4801-839b-0c6eda620dbe", "sighting--03c34b6b-8426-4764-9427-5cb3bd7ac071", "sighting--87d85d11-879a-4989-b898-45fcb2baeeb9", "sighting--0e6be41f-859f-40f4-8960-994cd1129af6", "sighting--fc574559-6c72-424e-a14c-48a1c7276ce1", "sighting--1fe01dbe-fdf8-4ffe-aef1-ca588c9dfb99", "sighting--21cfead7-c2d9-4593-b34c-f1c22274668d", "sighting--4ab0182e-76ff-4d4f-aebb-8dfdf3f3b98d", "sighting--6166ac6e-32bb-47f8-9a6e-0554988472cc", "sighting--3b0a1b56-436b-4646-82e3-c7e65c78ff85", "sighting--8f66555d-9fd1-4270-8a60-44fbe89b26b8", "sighting--69c6537a-edbe-4f64-9071-56ac9def20f9", "sighting--0d723f32-1245-4637-93cc-927a8300d888", "sighting--47285793-922a-4235-a454-78d0188b5645", "sighting--db543af0-39eb-45ab-9130-495bf0cf1272", "sighting--9912ba4d-61d9-4328-b81d-2b554017d095", "sighting--79700ad1-cf06-42f7-9c10-7441b9f0691c", "sighting--0119c5af-cfdd-49ed-b443-f9f9da253638", "sighting--e6b3a05b-294c-4c12-ba5d-5b4edc9b7d44", "sighting--8ee70300-c971-492e-b406-80e0d3c3e12f", "sighting--a663dc0f-479c-4e0c-90a7-6e262b411657", "sighting--54003ef6-a203-424d-965a-9223f75144aa", "sighting--1e3e68a1-5eaf-4627-a278-10a67b1b3572", "sighting--4481b0c4-aea4-45e2-ae3a-f815cd7225ea", "sighting--2f2e599c-3001-4b69-b0b1-9376151c57d9", "sighting--788a2282-ca83-449e-b73b-8bdbee643302", "sighting--6cca3ae7-1996-458c-96ef-b302cc18f620", "sighting--31f998f8-7d3e-4b65-b59b-e0d96d067210", "sighting--9b7bad4f-5008-4a8b-8d9f-afb694e7993d", "sighting--eecf6a92-a330-4a19-a210-94380fdd526c", "sighting--aab9d693-97f7-411b-881f-1e79b0ece014", "sighting--b7fef769-bf24-4de6-b710-97904ed7c0cf", "sighting--2cb1b14e-3b0d-4085-b102-2d8e2f946c18", "sighting--aa98cbe9-adc5-4e02-8d09-bff2b44afe2f", "sighting--f5a44dd0-9fce-4a96-864c-85e5d4ce569d", "sighting--a6668592-22cf-4d93-84e8-4bee764b9fdc", "sighting--ad5ee73a-4a0f-48c8-8941-0e547ccbec89", "sighting--337c8b28-0b9f-47ab-aa10-4fa07e4a40ed", "sighting--805ccb32-6986-4421-8f92-3e2ec8e9316c", "sighting--855cc29d-5127-4cf1-90fe-da678d320054", "sighting--7b431efc-4001-4f9a-a334-64268a715df2", "sighting--fa0ca5b4-49c3-4053-b268-7eb0f35f8f12", "sighting--ac12d747-a2f7-4fa3-a94d-de79b5a5c0cb", "sighting--0726f343-9522-42e9-aefb-59b495ca2651", "sighting--b8cf7c2b-f608-4b54-9a00-2ffb07b9ca8b", "sighting--6225a993-afc9-453d-b434-1285e0660655", "sighting--d816b340-c216-44a2-8991-c38a9ebc7fde", "sighting--301d8f87-5e30-4abd-bd4b-7edb0c0d08b7", "sighting--ef12ba76-1d2f-4889-94fb-03c7a229e5a3", "sighting--8d41498b-f612-4956-9903-9e07affaa76c", "sighting--9c5d4627-81e1-4092-8b1c-4ac0c2b14809", "sighting--a3ff49c2-2cc6-4ca0-ba97-2e7bffd469c5", "sighting--b41ad2e3-f7b6-404a-946e-2a89ac76eecc", "sighting--0558dbaa-6a7d-44c6-a248-7024b40e4944", "sighting--1f4e46ba-1c95-44aa-bd88-4f6b0967ae46", "sighting--51201530-e22e-46be-bccf-fd26855dda62", "sighting--92606bc8-dcc9-4f97-9d64-796b0a056edd", "sighting--197d71da-f730-4b3a-bae0-e35af05423f7", "sighting--4c1a3fcc-efcd-42df-8e12-90de51aeb78a", "sighting--4320cf33-937d-4cc6-8d5e-dbfae0f860bd", "sighting--131f9d41-14c3-4564-9ad8-e6ab87cbbb41", "sighting--cb0b71eb-8ca0-4fae-aae2-700ebd3e95b8", "sighting--5bd4dcb0-34cb-469f-ad3e-712c88f0047b", "sighting--3505a734-4539-4776-aade-d59245e71d92", "sighting--6275b7dc-2988-4782-9ca4-29684755e5f8", "sighting--70a7529f-e8c7-4c97-bccb-8c5c719041f2", "sighting--2ab90451-d826-47dc-92a0-7b525c61466b", "sighting--8ea1bb31-7964-4618-aba6-93b5c2822156", "sighting--83916380-2756-4d23-8ba2-187ba1c32903", "sighting--1bd599ec-4cdb-4527-b77c-5f6646f94dfe", "sighting--b6e143c5-3e03-4bce-997b-c14bca00928a", "sighting--99562f21-cc15-4b9c-849d-4c3f276cfe2c", "sighting--f90fd3ef-bd44-4fdd-b60b-970016e57a26", "sighting--351c7e24-9420-45fb-ad1d-19451229d592", "sighting--f7f6e8a7-5f2f-4f0e-b98a-56f2317289e3", "sighting--5fb5aead-c5c1-48e3-a01f-12c42ce5162f", "sighting--1b6274b2-f6ca-4e92-954a-815d0ac3ac94", "sighting--9b9149c1-7dcb-494b-ab10-c743017a5258", "sighting--8fcedafa-7692-402d-8fdc-d1de99e52bdc", "sighting--b9547c68-8788-4cd2-bcbf-55bdcaf476bd", "sighting--bf4e4a8f-835f-4a52-8902-d4d8c14aba72", "sighting--b3c14963-1833-43c2-a721-133c06c902e3", "sighting--80b1480c-121e-46c7-971c-92415ad92cf5", "sighting--40f6c975-1dce-44ed-bb67-c2d156f67235", "sighting--71719c2f-da0d-4ece-8d65-db78b8f1a54b", "sighting--37197ad3-d0d8-4e03-8cd9-011510c0ebc1", "sighting--8c2b9952-7399-4cfd-8970-1640ccab3095", "sighting--20c40272-82d4-42f8-a53f-daf042472f1f", "sighting--e41da3d7-43bb-4176-be5f-2bbde43e52e5", "sighting--4b23a04d-d531-4df5-90bc-46c220f02de5", "sighting--3bcc8559-5021-46ef-8367-a6f58cf9d7d6", "sighting--7aba9e37-7358-42ae-81fe-12021fc04a96", "sighting--fbd92e54-3635-4059-805b-aa2c3eff8c5b", "sighting--f3637228-9065-404e-ad81-a4322c555018", "sighting--08518391-fb60-43f0-b55d-a4e93ff65fe9", "sighting--98f3e5e9-5a9e-4ca8-a2df-bf1b811d7bb6", "sighting--30d191e3-5f1f-4c51-8626-c3b60749b7ee", "sighting--30e20a80-e523-4e5b-b3bd-50ddbd26bd06", "sighting--16e4fdf2-8b9e-4e14-b948-99ab06b47581", "sighting--0f5d0cdb-9da6-46cb-9207-5843d10beda0", "sighting--fb43f144-c66a-4db8-86eb-6511cd7166fa", "sighting--c79c4a18-473f-4357-af4e-d62cc39b3fbf", "sighting--cc80da49-aa23-4205-9374-5ce6f9382a89", "sighting--d5f29ca3-3497-4d1d-a373-18bef357c487", "sighting--23733675-9be7-434f-8d06-28cf1194dd0f", "sighting--80dc9df7-4b88-4f91-8d11-b88ba3bb25fb", "sighting--b61e0e24-adf6-4ef7-a0af-7822c40ccb57", "sighting--813207fc-5951-4f55-8601-9d3dc9cd724b", "sighting--e5c0eb45-d740-408c-8cb4-b14777b73228", "sighting--8db56754-08b5-45a9-8b4e-5896744e2c6a", "sighting--f6a47516-10ce-4306-9766-c68554ab4b91", "sighting--2c708ede-76b2-4164-abe0-78d4b8cd5ed2", "sighting--bcb6c957-4a5b-4b1e-86cf-a9bd98813ec9", "sighting--1df0731e-7935-421e-8653-c7f4c7e87800", "sighting--c1953272-98ed-44f1-a48e-789a2c0d9a53", "sighting--25cadc0a-34a0-48f4-87c9-6686535a948a", "sighting--60931b37-3294-48bb-86c5-7cacb251bc21", "sighting--bb3ebee2-786f-4cf2-a2dd-7eb66b7c4e6e", "sighting--aa09c71b-7a43-4fc3-b7ea-6ea6eceeec0a", "sighting--b9541df1-cdca-41dd-b9d3-a575aa79cd3c", "sighting--228a6fc8-e4bf-4ae9-bfd1-b0e46a1ee120", "sighting--9a0fbba2-584a-4cf5-87d6-f73fb842bf36", "sighting--d0fb489c-268e-4489-bffa-02537e151c47", "sighting--e00ef270-76d6-4dde-84ad-a1465d6b78cc", "sighting--b8f8ae03-ee43-4efe-8344-0fcaa8b8ad5b", "sighting--592af73f-4f3c-4a3b-92d1-ea4b2264e907", "sighting--b4da388b-fceb-491c-a7ff-dd24b7e418e4", "sighting--6312b9c4-4652-4bef-bed4-0ee9f9251c3b", "sighting--09e7fb66-fc3c-4227-87e9-b724277bb6dd", "sighting--cb2b65c6-02b9-4b8b-8043-948b80ff0a6d", "sighting--65cf60ff-5ed2-4351-99d7-ce93214faa83", "sighting--11f600ed-3acb-4fb0-9a19-4ba93fe249f5", "sighting--ee57df25-fee5-4342-a82c-425ff1615d2a", "sighting--82b071a4-8dae-4749-9aa8-07d34db87460", "sighting--7b011579-dbfe-4f0d-a5e5-02d1ad2f9e8f", "sighting--c11802bb-b5cd-4f31-a20e-e5d1fca1d332", "sighting--aed4456b-c12d-4115-a014-66a4b4f6a617", "sighting--4db8ad6b-54cd-40cd-9c61-7fa9df088f8f", "sighting--382112f4-5bbe-4922-a6cb-dd1b56dee39d", "sighting--ef8ec740-3788-49db-b8ac-1bdb9bf3a280", "sighting--e569c93a-24e9-40e1-80ce-d3f411543f86", "sighting--2b221039-437a-4caf-97c5-cf7fcb8324a1", "sighting--8fe20fb5-b248-44ba-9e74-87bea9814c0e", "sighting--afb4031f-72d9-4801-ac4f-7dbbdb48de15", "sighting--43e8cfbb-b51e-4a5f-bf5b-9193fda5fa5d", "sighting--fe5acb07-4ca9-4753-a5e2-b4484b5a4d60", "sighting--1a1ea6db-ac95-40ff-b1d0-428033b646b0", "sighting--5f625895-495b-4bc5-9f8a-99ab6e6d46d3", "sighting--48094c14-b10d-4f6a-b849-4fa66d22cc8e", "sighting--6dabe53f-dbd3-481c-9d98-12cb48a1f24a", "sighting--c5d50fa5-940e-4b57-9c5b-26d98f45350d", "sighting--5c19ebc6-efdb-4beb-927e-f53dc190a18d", "sighting--a5acecec-f3e2-42b6-bb8b-542b4800bbfa", "sighting--633b247b-c9f9-4ae8-9b88-e05d0f129507", "sighting--181fcb51-2681-4ca3-863c-9a13970b1466", "sighting--9d672ff8-c19f-4118-b675-c34186d86a11", "sighting--39c51129-4f4c-47c6-b3f0-0c087a733972", "sighting--057d690c-6fe5-41ea-aa1b-462b86adc2ce", "sighting--1390a857-5ed1-455e-bc13-942b1a92a5a5", "sighting--069bf75b-4f67-4fef-aa23-78f80ff4fd6b", "sighting--53582348-3973-4023-924a-50fa355247d6", "sighting--c529a50b-1f7c-49c1-8d77-38092f8a1340", "sighting--1bab0b54-0b90-4a60-bcd6-354b457c3e61", "sighting--08e00d0c-e236-4dfd-afd6-79cde4094c6a", "sighting--f7c9ec6c-d860-4df2-b4b1-eab9a8529a1e", "sighting--d67d8ec3-3c2b-4c0c-8104-32e337814bbf", "sighting--a788184d-2163-407c-9a8d-bbd79b54b258", "sighting--9581ee2e-3080-4896-b575-9e9661a7db11", "sighting--456dc087-3568-4ca7-a539-f5dccb07158f", "sighting--e0838cda-79d3-4319-9dc6-9c1e86bb8197", "sighting--da7c08fc-88fe-4aef-bdbc-b7617799c5fd", "sighting--292fd105-07a2-4223-b7fc-df14c819582b", "sighting--93735a75-86af-425f-ab21-2e15fd06f69b", "sighting--ccde0d45-b0d2-4154-bdd0-eb75aff2c3d1", "sighting--ebd9d41a-f926-40b3-a69d-771ad750760f", "sighting--285bdcd1-2dbb-4e2b-aeae-b79edb6b85e6", "sighting--c9987f4e-415e-499d-8ec2-1c5ea1708639", "sighting--4b23d839-9816-4e76-a82c-c3547f5f43c5", "sighting--d1e865ab-b338-44f3-bd80-a47c8ee4df3c", "sighting--6fd11e86-aa0b-41e1-8ffd-38bdcc041fa3", "sighting--8c7fbeb4-672f-427a-92ea-e30ad3cde2b2", "sighting--fe08e5af-530c-4fa9-8365-5b82a67dda22", "sighting--7b337be2-b3e7-438e-ac93-f648369e22e2", "sighting--3f0cd720-c1cd-4fac-9b29-23d7854b5437", "sighting--2fe2cbde-994e-4579-94d6-f5d5fe01e925", "sighting--6fd52ebe-fd7b-4e02-9e54-21b624c95512", "sighting--829b3b07-479b-4892-b0bc-2a8efc347287", "sighting--739c4ecf-7f0c-44fc-b8a3-6f8a957cb494", "sighting--9a9af921-dbb9-4c99-a469-18bc0b7b4154", "sighting--4963f26e-c60e-4e50-958b-784e6c3206fe", "sighting--6a3fc778-2c5a-4326-850f-b490ad951a83", "sighting--7ce68acb-efde-431f-91b8-88a793dd9714", "sighting--3ccc9b43-df75-4fe8-8baa-0d21d373528c", "sighting--8b2dcadd-ab7c-4518-93b0-b8a3f58eb877", "sighting--d8bedd3d-5128-46f3-bdd5-e1d3686f2b98", "sighting--91a220f5-fc07-4296-9142-4c3da4215d34", "sighting--b61df731-0766-4e71-856d-e71da4dc1669", "sighting--9347dffb-8d25-45ec-b83d-cfe57f770770", "sighting--931dcd38-c562-4668-93ec-c262da44e58c", "sighting--f4b46d5b-f70d-4d9b-abf6-63fe6110b2ea", "sighting--28411669-d8ec-4298-97fe-0cb94af83feb", "sighting--25689c96-7cf7-4e1b-9959-067685cae1b5", "sighting--358bb87d-7c7e-43ca-b2a0-819cfc33a10c", "sighting--d30aacd2-5da2-4300-8bbc-306b526c22f0", "sighting--4a44424d-323b-4bd6-a365-c3a47e060df3", "sighting--547f7e2d-f61b-4e05-bdb8-98a1bf877752", "sighting--92bdb6f2-0688-4498-bb32-ce3c357015f8", "sighting--d128c5f7-602c-4f9e-b07f-014ce65a881e", "sighting--018ae4af-5bc8-4ba6-bd2c-9e8f36cd75f3", "sighting--5ea07c55-b91d-4269-b9bc-cb1ecb7efcb4", "sighting--3c1aaf20-1708-4fd0-98ea-ba4435e6b38f", "sighting--128b1482-5394-40ad-afdc-c6e6f51b1c6a", "sighting--b45a86c3-912f-4c79-a352-e9b512950364", "sighting--2410fe23-7e26-4296-bfb6-b3c68101289f", "sighting--3bba34d3-1dee-4e58-ad64-07359d570a06", "sighting--2a5a932b-ff14-4084-b672-87124c92ab8b", "sighting--2850b340-3337-46e1-9699-2ce1b593b2f6", "sighting--efe03dbf-268d-4102-bede-7f4b26003f99", "sighting--d55f5e03-871c-4756-961c-c5e7523ea531", "sighting--781b8109-a6a4-496b-abec-434fa3f4db92", "sighting--ca1b8462-1902-4b28-a48c-06cdf57dc2c3", "sighting--3c81dd48-b355-4da4-b064-c7b05fe2fe9d", "sighting--c322c44a-4b19-45e7-a635-9482c54221bd", "sighting--e9caca1b-16fd-429e-8b57-529f0b22eba6", "sighting--d3bfc8a0-edcd-4659-bd67-bcccee5bbd49", "sighting--4403e3d2-f7fc-45bf-a3fa-6920b3a4c2dd", "sighting--9dcd4f35-e9cb-4d3c-aef5-49c05069fed6", "sighting--e06466fa-5bc3-43b8-9813-8cb8da2affc6", "sighting--e33ccb5e-4d2b-4069-a174-f6d502ba1c13", "sighting--245f5d73-11db-44e6-a74c-8b3135049660", "sighting--a6fe776e-9af2-4068-b5a0-df10c3c1ed27", "sighting--dfc586d9-347c-4ca1-816d-dc7e1003ebd8", "sighting--328dfd0f-45a7-4691-8b6a-19bbc9c7c6d8", "sighting--4b9d9d5d-5ced-4c60-85c4-8ac4f2f69ead", "sighting--9e5d1a11-4bff-4628-8f6e-ab56d5133a3c", "sighting--22a68fce-c400-4fa2-80a7-5dcc1bc03ab7", "sighting--28e33429-305c-4ff2-9b37-0c4865820a47", "sighting--ecf60c9d-4f55-4183-92de-5e60d1f8016d", "sighting--a630d8b7-7a95-41e4-9e6f-0cc7b24346eb", "sighting--89665d7d-71e1-4776-92f2-dff507f738c1", "sighting--beb17b8f-69f6-4502-b8e3-79759fb8538a", "sighting--27d93bdb-c90d-4c7d-a155-c8fdd0238ec5", "sighting--a392988f-efc4-4768-a099-63302f74661e", "sighting--d46ecc58-79f3-4d82-a434-30c9669a2a86", "sighting--f6c7da1c-76e0-4111-9c90-ebe4ffeff86c", "sighting--92499157-31d1-4845-8a16-172ab5c51a6c", "sighting--b649bb5d-8bf4-4f9b-b592-72a8ef081df5", "sighting--7a166435-f632-4424-b330-182c7d557fb1", "sighting--3e69558a-8843-41d9-b52d-3fd312f42f1e", "sighting--b74a7323-5c6e-4099-b2f4-178c52ddccc1", "sighting--90c58f12-ce32-4c27-8f80-8b7564c10aa5", "sighting--1f51661d-fa02-4db5-91e2-934808e6af4b", "sighting--97d19638-3272-4793-af7a-d5d749b6220f", "sighting--2a5f2626-9234-4128-bae2-33b34cdc99e6", "sighting--00fe9e72-5c7e-44fa-8305-0ba4982a6a85", "sighting--e6402caa-e64d-423a-823c-41ec431bafe2", "sighting--c742fed1-2acc-41d3-837b-b4e991254eb9", "sighting--92ea2c87-34d7-48b1-a4c9-fbed323a93a1", "sighting--86a80b5c-0a24-46f0-9133-08d2f39129de", "sighting--5e46ec49-991f-4e08-a954-deed9fbf0c90", "sighting--53722acc-3f60-421b-a1d2-af0fa255ca21", "sighting--884b0bf7-8849-4d5d-824f-70689f808210", "sighting--f5676eb1-64ae-45a4-85ab-3be51b1c6ef3", "sighting--69d8d0dc-1057-40e9-a12f-6ab3721e6c9b", "sighting--75ea698d-c072-45e6-940d-5393606fb7c0", "sighting--0d7ded9c-db90-4843-b8b9-8d9309f03286", "sighting--58e66ac5-0b42-483c-964f-d8f5020a7ae2", "sighting--15fc242c-32be-450f-864d-c5f746d86b88", "sighting--88d74b19-be0f-4369-b848-8bac1df06021", "sighting--ca084d5b-22cb-4659-965a-16ce72f0728f", "sighting--4f9fdd2e-c8f1-4cb2-b0be-b54c52d7a172", "sighting--1cd7d803-43b7-4cf3-87e5-ef3be091d204", "sighting--43a3c260-57de-467d-bc20-7f312349a650", "sighting--22ac8bc3-c288-40ad-b523-7ab3a87fc246", "sighting--306d5fa4-097b-4822-bd0a-cc418d13bbd7", "sighting--fec4f8e8-858b-444c-a890-054fadc5bc42", "sighting--0d97fc8f-af8f-4e1e-a5c1-d49b2bc774dc", "sighting--70fa7a63-0e9e-4c98-8bac-7766706c0b16", "sighting--34a5520a-2b76-4c59-a17f-4ac0b62482a7", "sighting--fc99a7e1-0a0e-4c97-a623-aa2540a1b4ae", "sighting--74074d12-2a79-40a5-8e03-e4552dd02ed1", "sighting--555d163a-a3eb-457d-ad71-2a32031f745b", "sighting--2001e368-09be-46f3-b0b3-e98208332336", "sighting--42fedd5c-435d-4275-8a09-796579543e25", "sighting--92558d0a-8efe-4e7d-bd45-f7414c59695b", "sighting--bb6d0617-edcc-4e38-913f-2eb8148c7a98", "sighting--2486506b-0dab-4cd9-bb68-15e8f63b8432", "sighting--6083b848-b22a-46ac-94a2-49554df54eff", "sighting--990d1c2a-9951-4bf8-ad2e-c80fe32c7cc0", "sighting--f9aa9f79-ff48-42fe-97ba-d0ec137b0453", "sighting--607c3923-d8b2-4b5c-83b4-38e44c48d1bc", "sighting--e570cde8-0486-4b07-b4b9-fbf370bd04cd", "sighting--e3c7537c-ab1c-483b-9494-849637cb3ca8", "sighting--7b950b1d-7f1a-4d3e-87cd-e4dd3967338b", "sighting--a9678a67-11ea-46a4-92d3-cedba8b550bc", "sighting--610f9aca-4731-4aa2-9b99-c4853814fb88", "sighting--9dafce31-3d77-4016-9e89-c9019168c052", "sighting--3772e2a7-54e1-427a-95cb-25529c1b9a4e", "sighting--bc40eb87-2826-4cde-a29d-33aaff2da401", "sighting--329e2cd7-2aca-4487-b752-731503084943", "sighting--90f35c29-972f-4021-9e8c-7b10b19e549e", "sighting--dc83d8b1-0a51-4bed-b86a-860aa5c55000", "sighting--614b5918-af32-4a48-a05b-0e01384c23ae", "sighting--25754ffc-0a0d-4a88-a48f-c6f2c03f62af", "sighting--b2c6919a-edf8-4949-afcb-21234ec68d94", "sighting--a1d851a6-a49f-4c2b-b92d-99f92b0959d9", "sighting--c7b2425b-c06f-48ac-be3f-e633b9040eca", "sighting--5fce988c-f041-474e-b834-4f222893ec0b", "sighting--5b27e6a7-9f6e-495d-88c7-effd1ac24a46", "sighting--56520526-178d-4f24-9385-87791096a744", "sighting--abcae3cc-f8b8-4bba-98f7-1149c0b6d724", "sighting--cab9c6b0-efb9-48db-b6be-a95faa324389", "sighting--ed55d76f-e389-4ce8-9981-6260fde623c9", "sighting--0358ebbb-7c5f-4af6-ae44-ff977e92e4ed", "sighting--618eb25f-13b1-4cb1-b7d9-89151cbc0de5", "sighting--01ab21a7-612e-4f36-b9e3-fed3eeebc347", "sighting--82ee8577-4bec-4277-a6d1-6ee86e060d87", "sighting--34d05a52-156c-426d-adeb-90b07f7abc0c", "sighting--75292e89-274d-4de3-b9c5-5ca217458cc2", "sighting--e093e7be-d9ee-489a-8549-c8531d97cd9e", "sighting--fa450bf2-b1b2-4fa1-8423-9ea6c8dea16d", "sighting--df0665b5-b82e-440d-a4e5-acc506d568e7", "sighting--71dd0244-920c-4bec-a618-5460c4f87dda", "sighting--62e5c2e3-cbab-4480-8b63-eeb92fa523ea", "sighting--859933e1-2280-48f2-959c-464c6648653f", "sighting--17653c29-efd8-42e4-b32e-b40f5fd9c918", "sighting--926f04c6-57c3-46e5-b5f2-1b820a105b95", "sighting--23c4db2a-91c1-4151-ab01-2e8db6f97f7d", "sighting--dabec13b-9ef6-447e-8753-a0f54a99725d", "sighting--aaf880da-40be-499e-adc0-0b18224ffb84", "sighting--21717c91-ca98-489c-82fc-9d9d23962967", "sighting--2c34f5bd-8838-4d42-929b-fc13437776e6", "sighting--a02411d4-0605-4ee9-a9b5-ee9e315ac736", "sighting--9e717d6f-a849-413e-beae-2d5b0892cdb6", "sighting--5a497216-fcea-493a-a58b-15afcc95fcf7", "sighting--81e7a22e-faa8-4491-b713-971f7318272d", "sighting--aa7f90ec-63e8-4107-a6c4-3cf51a28970b", "sighting--0e2c1035-fd93-4b67-8f3e-19349e4952dd", "sighting--1f0a8186-58a5-4cf5-a96b-a08d654b8612", "sighting--5657d3f0-f563-4622-8572-d05ea21da2a6", "sighting--a2ddbde4-0e79-4de6-ae19-2a3321033c86", "sighting--9cddad75-d31a-4792-8f4a-9e3402a49e45", "sighting--af8c654b-de50-491e-969d-03f72e26770f", "sighting--5e476a5d-875a-45c9-b443-7039f5af3fd8", "sighting--a4699411-412d-456d-ae15-819c825e46b6", "sighting--ee247862-506e-4da4-852f-2b51e135b27f", "sighting--b94ab27b-d261-4d79-98c8-709f35b060d0", "sighting--37f4717a-1e1e-49f4-9801-70dc16e595c9", "sighting--a252db63-0235-4b19-93dc-86e7531c1571", "sighting--234544c5-a668-4ffe-8eaa-caab958d10da", "sighting--bcca3403-af24-40c6-8d3f-f544ab3f771f", "sighting--30983f07-9f86-4743-b0f7-9a72720f94f0", "sighting--990ee31c-f836-4260-a031-3e9d89ad70d3", "sighting--608df020-1819-4136-bdf7-acce2c4a0a70", "sighting--03a016d1-0faf-402c-aeda-b1c917842ac1", "sighting--739a6869-fd7a-45c2-a883-4141714427b4", "sighting--e49f10e0-2ed1-4092-ab71-ca2fd7c18b44", "sighting--0a22ba9e-7b26-4c5c-a9de-74988d782e5e", "sighting--4a6669e6-1799-473b-a1f5-17a34bf9bd02", "sighting--9955a6df-d69b-4421-b5eb-24688cfd293e", "sighting--ae5ba79f-88fe-4a2c-a3a7-9a68e75c027d", "sighting--b3dec8a0-3b10-4d65-a697-afb5a53fe25e", "sighting--c683fe2c-b2a6-4d09-84ea-3b5e5ee5f1ba", "sighting--6140a26b-1275-4cee-9ea4-d7df9c74d45e", "sighting--660af4dc-26a0-4005-98ee-78d015a174ae", "sighting--2be0a1f3-ad48-4991-9a06-d7dd7b60b38b", "sighting--d52a6f96-74a7-43e8-a6ba-268c9ee89e09", "sighting--e4f746d8-49fd-4764-8a60-59a215b3c34f", "sighting--5c4ffb4b-1b77-4492-9926-45b50d01174a", "sighting--0c514161-581d-4a9a-bb2a-c4e2f0ba8886", "sighting--40fc2288-a993-4340-935a-9f2cd3d6ed63", "sighting--e4f15d28-b62f-4784-b142-e7daa9ad5b62", "sighting--ecbb6348-234a-4fb6-849c-161d7ab3a6e3", "sighting--232949a2-e3f3-4ebc-b07b-2237be53c26a", "sighting--bd1e03ce-15ac-4572-832e-a79e79504436", "sighting--043ae7c7-72c2-44b9-8450-d7f7b8b7264b", "sighting--f4421d10-2b76-4b89-b0c7-4538d93383d9", "sighting--9e4ec602-baed-4003-84a0-56c5a606f6b7", "sighting--01974981-3031-4bab-a745-73fcd18085bc", "sighting--e0af8326-d408-4186-969d-d5d26a13f04c", "sighting--8f2978ca-7000-47d2-9a90-b7404abe4233", "sighting--0e51417e-0fdf-4664-b31e-da8f9f0ac695", "sighting--c77ff480-f69f-46d8-80d9-2717111553e4", "sighting--19ec530f-111b-4886-9e9c-94a5fa6a9912", "sighting--38d3df79-a7b9-49be-ae1e-9619cfd5488d", "sighting--d84f3140-34e1-49a3-a454-abd72c92f939", "sighting--6ee5080c-bc91-479c-b2a1-59d735226af5", "sighting--d9896013-ac1f-4ba8-bba3-16d4171bb057", "sighting--8b23fb09-a97e-4788-91e2-d67c7387a5be", "sighting--45bbd783-068a-4e96-bc64-a9cc2b318a6b", "sighting--ed4e0ac9-3d37-45a6-b07c-cc2b6372c0b6", "sighting--c365995e-d20f-4f37-8e8c-6f0484f27921", "sighting--9cdaab7d-0962-4e11-94fe-f85451c83ca7", "sighting--cfafbb2f-0ecb-4388-b8a9-10d23b30ee31", "sighting--054443ea-f178-4da7-a078-83ea0e898209", "sighting--e9101480-5ad4-4397-97cd-1a88e8318a66", "sighting--da6eca6b-9cd3-4068-b7c4-9d3b37e9adea", "sighting--26610b24-b2a8-4415-bf1b-d79c64f0b875", "sighting--0117bf6b-38de-495c-985e-e8c03ccf801c", "sighting--fe92f76d-7e2f-47de-a785-e42992614db0", "sighting--f5bc4101-d4c8-4700-9692-aa61798d8c07", "sighting--c2c3f6cd-718b-4d23-8fd0-ed65c51f70c3", "sighting--05856738-9b8f-4134-b092-78ba87cd3b57", "sighting--49dfa99e-335b-450a-a47e-84c02fbbe843", "sighting--83dad739-cb31-4f3b-8417-ac030f6f5fa4", "sighting--49fa6472-07e0-4ed3-bf7b-c49b19554994", "sighting--c7bfa207-30dc-4ac7-b4c1-8c70c720ffd3", "sighting--b4a08df3-ae5e-4d0e-b555-cf6ee950f1ef", "sighting--90d257fe-03d1-421a-aa9e-dd47bb5ab77a", "sighting--916cadfa-5166-4f5a-9b2c-51a28a9e928e", "sighting--43ffb097-d4d5-4084-89a3-de721e6e5da0", "sighting--84b815aa-a974-4c7b-83b7-459c7c411f35", "sighting--72eb909c-71ca-412c-bb6c-dfc68c2e677c", "sighting--862d38fe-4552-4f9e-8914-1e60d01327d0", "sighting--3dd8d2c1-5d6b-43bc-9e3c-08fc2d7d167e", "sighting--0b6374a7-0796-448a-923d-772d2e7ed97e", "sighting--bc77f558-c618-4af8-b6c4-b7a887b6dda2", "sighting--87b09f8c-a995-4042-841e-d69570f7091a", "sighting--4168e83e-05a1-428c-9ab7-30344f4d6d30", "sighting--63a9b593-f4c9-408f-a55c-e1481e53c187", "sighting--5829b776-0c55-4ac3-be6f-96d5c9ade413", "sighting--a4af0820-0de0-4831-bc6c-5d1207ac6bec", "sighting--5b5ae305-4224-45f8-b10b-20cb1b49dbe0", "sighting--ac3b30de-769d-4c3c-81fb-6ca6c77c8c0b", "sighting--5ab50547-fa43-474c-a8a5-6ece2a03f38f", "sighting--2d68867f-dd86-4061-9cc5-d0c6a0a4c427", "sighting--7578d4b1-c9a1-4478-9a7d-786b90a786fb", "sighting--de2308b9-f303-4ce2-834d-1954b7d37026", "sighting--910d1dff-2631-485e-b89e-ebb423e5c634", "sighting--fbda8877-5139-4f5e-967e-8278c33babf5", "sighting--067010f6-6b30-4020-879b-539ccf5ace0a", "sighting--7821bbb2-1b8a-4d91-8802-0b699288488b", "sighting--c624574d-2d4e-4a59-9f3c-f3969caf6517", "sighting--f85295c4-6493-4d8c-90bd-974b1e647216", "sighting--675db8bb-bb26-439f-8fa1-d9280546fe5d", "sighting--af1d99f0-0ee3-4462-ae01-cde4884f3df5", "sighting--8009794a-351d-40db-97fd-b916c79492d2", "sighting--46904828-debd-4e2e-86ed-ad7b7dc8715c", "sighting--ada9e8c5-d12a-4523-a9ca-43a83e91f0f7", "sighting--01e63d8b-359d-4e0f-aa3e-a0441dfcff03", "sighting--3fecdc46-bda9-4624-bcc4-7758f4c6c607", "sighting--bfeeede5-82ad-4129-be5f-3f341846839e", "sighting--5940ad15-29ea-4ff2-a29e-5a16c8e90a43", "sighting--9d1b5c62-60c6-436e-bb5d-83f2ad1878d7", "sighting--5ce16dd5-8e08-4914-a555-9b0f6dcb6641", "sighting--db9dc7b3-15e5-43f5-9a68-ed7450f60f44", "sighting--c5fc2f10-3a12-4cb2-b57f-ee3ffafe43bd", "sighting--a53b1875-238d-4792-89c7-259ebb64adc0", "sighting--04e61506-42c2-4240-9c0f-496512258056", "sighting--0bffe438-0326-421c-a48d-f73fc0fbff15", "sighting--092763b8-90b9-405e-8a95-42464605e3db", "sighting--d91da421-09a2-437f-874a-deb978fdbbb0", "sighting--1f801953-bad6-4395-823c-778ac3b2dbef", "sighting--d46ea481-4a9a-444f-b98b-75a1c5953fc4", "sighting--bd03ed30-08c0-4d4e-b1da-c4ff90617a06", "sighting--1cad51b2-e0d3-4735-9e80-7ed1bdf72a46", "sighting--1007dde4-3f21-4f4e-85a9-f96570b49187", "sighting--f7af1a75-ae35-476b-be75-e052bf7d9aa7", "sighting--187d682d-162f-41fb-91b5-bc52933201b0", "sighting--c548a852-976c-424c-8e89-5b84ce417fa5", "sighting--13ba74dd-bc48-4643-8257-7d6f611fc1b0", "sighting--3df6c09c-a687-4880-9c36-25fbdacabbd2", "sighting--8a24f2f5-cf1b-45b0-960b-104f891e76b0", "sighting--335fc546-5342-4985-aeb6-c69abce4e65a", "sighting--6032f0bf-4452-4dbe-8cfb-67526f99daa7", "sighting--9d26b482-1ea3-49e2-b710-a71e031f3e41", "sighting--c3241153-8abf-4c21-aa13-d344cc4c7da3", "sighting--53205393-6e04-4bd8-9a67-5df407edd6f3", "sighting--d634525e-99c8-4d21-a9d4-cb822b21aec5", "sighting--cc105b16-6248-4bd4-9520-6d8f0a4aa4c9", "sighting--24a01ce9-cfcf-4570-9c24-a03eaa2d73dd", "sighting--e2b6a937-2a7e-4279-9f3f-5e5062414cb1", "sighting--99e08615-b833-40b1-b9c7-5b40e7387ba1", "sighting--f09f59db-e266-479f-a9a2-b4a58a001895", "sighting--92205832-74ee-481c-af75-cfc18b934a3c", "sighting--1ad1ad9c-f75c-4c8d-8261-ff408f2496ef", "sighting--ba3bacc7-64e9-4e5e-bca2-9f0c6483d4d2", "sighting--a71c4e7b-3695-4acd-b600-c22fda5a2669", "sighting--0498efbb-8529-4b3a-b40c-3b12682b3412", "sighting--3632999e-b0d9-4a4b-b1fc-51569af0cbbc", "sighting--ce40a0de-7617-43d8-971f-8503fa28c4b6", "sighting--2b36d77e-b178-4e85-852a-06e342224747", "sighting--3fd2e3f1-50e9-4677-9cac-38b69faf2144", "sighting--de683c26-6360-451c-ac2f-d48281faf964", "sighting--e59258a0-c30a-47ef-ad09-16223bb15983", "sighting--aaa7e1a5-24f7-4a6f-be8e-279b9813691c", "sighting--24973eb1-5274-4fb6-871d-4b45ba4273de", "sighting--e2d356e7-4c3d-4cfb-8747-adff1d084e2d", "sighting--2671af3b-8c1d-47bd-becc-314dffdc0222", "sighting--b2eaa4de-fcc5-475d-84c5-f538f02704fa", "sighting--c031efa5-0602-48f1-8c2a-ebc000eee5c5", "sighting--b12c2f28-eb0b-4a01-80ab-70fcef2a4628", "sighting--15e893dd-8b59-424e-8a38-4b5427b667c6", "sighting--51463e62-e312-46b2-a53f-e915edcba886", "sighting--8e48efb7-0279-4e04-bdee-4086b3f9a985", "sighting--3936f61d-f6c8-4f2e-be27-94e797360121", "sighting--43f04ac0-a189-4d40-bc6f-0340e7fda84b", "sighting--d06ae526-ada0-4c58-9008-c2d1afee8e0f", "sighting--88bb0ca4-0f4a-4185-8104-1331bfc2d70e", "sighting--5771ffb1-15fa-4810-8b95-da5986db8131", "sighting--f228cf25-7b94-46b8-b120-6ac4c5d5f8e6", "sighting--06b7e300-ef6f-41d0-8b57-e35a64b40390", "sighting--fa9c92ce-0e2b-4257-b067-ff0e21fa4206", "sighting--43a6dab0-bf06-4d5d-a616-9b8459e71bb8", "sighting--e0bb9984-ebef-424c-a00c-d735e64a6c20", "sighting--764eb53e-be23-4ad8-a449-e1074296174b", "sighting--3e4a31ec-5180-41d3-9f69-cefbe63862fa", "sighting--32487e5f-f9bf-45f7-bbbc-5ab364366985", "sighting--f53fb014-4a9a-4948-ae40-27480430657e", "sighting--2b2d600b-0cba-43be-85a5-9a6bc2119241", "sighting--a1e3d550-0387-4af1-955c-09c843297040", "sighting--bf2eebd3-4166-446b-9880-dc58b2c9087f", "sighting--5466d638-88df-4956-b0f0-520d6a8dc878", "sighting--48c66d7e-0703-42e3-80ac-9ae35f5d613a", "sighting--0faad041-b5ce-4c52-804b-bf3dfb584b32", "sighting--6600ed2e-f153-41e1-955c-fff9331131bd", "sighting--4802ff40-b81f-463d-8412-0f1af4aa39a9", "sighting--d9da1563-ded3-4ab3-a10b-46020b60fef5", "sighting--d28ed402-4d88-4dc2-9476-c9bb0102bb2e", "sighting--bcca5b62-2f34-43d5-b61e-44f220cdac03", "sighting--45686fc9-1465-44a1-8e8e-a04ac7451ea2", "sighting--510a0dad-eef8-4a49-99fe-2a86876256f3", "sighting--08577527-2881-45f8-a7bf-2b65f2335921", "sighting--3d1e4ed3-0c60-47dc-bc94-998b49bccefa", "sighting--7ac08e17-5e20-484c-911b-a4b045eda592", "sighting--228f90ce-638e-487d-b87f-8c2296c1be93", "sighting--7bc5a927-bfed-4a73-acd0-79bb7ea1c04c", "sighting--dddaa587-2437-4267-bd42-ddeff03afd0e", "sighting--b9052d31-b7d9-4ecb-844a-78f91bebeff8", "sighting--44a22219-fc82-4cd4-8bf1-53a666140576", "sighting--289766b5-b85e-4f1f-a732-9992e5170cdf", "sighting--df01acec-4a0c-49d3-b7fa-79d26155c96e", "sighting--17aaab2c-03be-4889-ae46-295a1151936d", "sighting--6ce2313a-b426-4f05-945e-c158d62fa2cb", "sighting--fa6961d5-136e-4a76-8633-c9a61c5a4e3c", "sighting--7389bbce-73d1-40bc-b49b-57dbb057af14", "sighting--a5a32bfc-2ac2-47b7-980b-8f501ff9fd47", "sighting--a34ad008-a01e-4197-a3c1-d93350dcdbc0", "sighting--2be04d2c-0a91-446a-b481-dcf32365c042", "sighting--e2d4ed29-7303-43a5-9b2e-df6b94b2ceaf", "sighting--6654206f-758d-4bfd-8069-eaf0247d4b83", "sighting--cb371bc1-52be-44b9-9fc3-c28946878248", "sighting--a5be2efd-fac1-4b9e-88ed-158f9a2b6f97", "sighting--b0df5c9c-9c7c-4eae-9a3c-3593b2e30cf9", "sighting--599ac628-470c-4347-91d9-d55454a93df7", "sighting--f7221faf-b9c1-4ae5-8d8e-44fb61aff8c8", "sighting--59f17e33-d691-4199-b602-097bd086a60c", "sighting--46380702-959a-4713-bdc7-2212d316e1ec", "sighting--77125d2d-4ea9-4303-8469-9d5b648970ec", "sighting--a334ed50-ca1e-4138-9b67-36cce61c6af2", "sighting--89a2cdcb-1b1e-40a5-b657-7cd41c507800", "sighting--33600454-1f9c-49f3-a900-59004990776a", "sighting--9fc21c50-457d-48d2-bc74-39da61c45f17", "sighting--d9d61499-0e35-449d-9d03-d163931dffd9", "sighting--eb841b5a-8ef2-450a-adfa-001ff57ad432", "sighting--d19d3273-acd3-4795-9425-bf4ac0f46f6e", "sighting--156cb14d-52c0-42b6-a837-122b87e0e106", "sighting--f7149ce5-0678-42fb-b9f6-2dc84db6d0b8", "sighting--c69980d7-c4cd-4da9-ab9c-1b0fdba3fa14", "sighting--fcc84802-d83c-4887-bbfd-007280a7a9bd", "sighting--91dde0eb-6798-46ad-ab01-cbac5ebdd41c", "sighting--01d39fea-2a26-4c10-a62b-c1ec601b07a7", "sighting--b78931d5-92b1-4e0d-94e3-504b88739a2f", "sighting--7e6c7673-ada7-453a-bce1-786ea47916fb", "sighting--beb8a02d-4edb-4cd6-81dc-a20e3dd93653", "sighting--de4551a7-225e-4ba0-b17e-a97afe9e075e", "sighting--e418125b-220b-4184-b521-5e647a06dffa", "sighting--00d53201-c0ce-4ba7-8d32-9b1447cd906e", "sighting--7fbf597f-832d-41ae-8541-b41804ee3e4b", "sighting--c6a5f737-907a-44fc-b3ad-9a0546e2b2de", "sighting--ae37b9ae-b154-4750-98a0-12a11c6d292c", "sighting--a002b449-a257-4ae5-bb70-00531d6659fe", "sighting--cb1c833a-cd8d-4312-854e-4ecc4abfd843", "sighting--d292b11e-ae82-4a6f-be03-a781c9105338", "sighting--ada24005-ef19-4029-a61c-d99d09e64049", "sighting--c7026607-71c5-41e7-a9e7-1406a519492e", "sighting--fc6a5d77-1f04-4a65-b9f0-6b2a667413fb", "sighting--0063d6ec-91b1-492a-a428-4083881c8304", "sighting--9e35d259-632b-4f58-9c44-052db0943d51", "sighting--205649df-9184-4443-ab1d-dc089dc50719", "sighting--145884f0-68c5-41f4-8538-9c2ba5d3766a", "sighting--6f210006-a461-4a4d-89b6-77f12c66fa89", "sighting--409b7258-28d7-476c-b3a9-8d0128be8037", "sighting--92c43ca4-6c99-4510-8006-885d817ff4fe", "sighting--9a253d4a-127d-45a8-8842-2e30d479e340", "sighting--ec8fe041-921e-4796-9bc1-064f4d28b791", "sighting--72f6e82c-26ce-4d69-b97b-0d96ebaa5f25", "sighting--b7576d8a-f6f9-444b-bc7a-1caefca6cec9", "sighting--acf961e4-6027-4fcf-a2fc-9678ea2d2390", "sighting--04b7360f-3aa1-46c7-846e-ad7a85af1053", "sighting--2f43a7d5-92bb-43bf-8e28-7577d168b021", "sighting--0db6a9b0-ae6f-427e-b02f-0b04215e2141", "sighting--52216347-b73d-4d55-b87f-d2f20940a4f2", "sighting--066532f1-31b5-4e0d-8042-adc87c9d9cf4", "sighting--ee71b29d-bc05-418f-8dd5-1be41104e221", "sighting--8d80f965-5a5c-4e7b-926f-20baa45a3b97", "sighting--8e18cd2d-99ca-403b-84f2-f49ed86dbb53", "sighting--1a1cec75-b0fa-4574-b888-3dc56caeabaf", "sighting--508c3b0b-844a-4553-87f0-e263e9dc580e", "sighting--2fe7fc1e-cead-44e1-a4b4-6f4fd88cb841", "sighting--d7fc2f8c-e2c0-46cc-85f8-4e16fc61081e", "sighting--f923eefa-dbe9-4175-b5c8-dbd77e52ca8a", "sighting--fc5801db-20b4-4e16-9969-d63143878d17", "sighting--edcd31bc-f634-4a78-8f59-480ed3f104f0", "sighting--8aceec6b-839a-4330-96b2-98b77f668444", "sighting--93502b3c-139e-4195-9145-4549e9b70d1d", "sighting--ae6ef82a-5a60-4b58-ae69-c22100263e21", "sighting--4e850931-5b12-436a-9bec-573bf81793a2", "sighting--e720cef0-196b-4fd2-a694-1148ab75583d", "sighting--1a3df5fe-482d-451b-bf47-4e1dcc61d5b0", "sighting--2d843f65-e2eb-4899-b14d-fc128bf07fed", "sighting--36d3d2a0-32f3-43e8-b834-47a2a6f7ffa5", "sighting--659ea66d-158d-43e1-a6d5-e9b23a4d2d97", "sighting--13510e7b-ebfe-40aa-be97-9557b5cd1e6a", "sighting--26bbc971-6a19-474d-a88a-544a549bd771", "sighting--298c726a-afbe-4afe-bed9-9c22a2fe316e", "sighting--76a38995-ed44-45e9-a6bc-ce586b0b6a6e", "sighting--61d04fd1-0fb2-40b8-9af6-339ebfb5975d", "sighting--2f404414-aa73-4137-867d-4cf12dd161b1", "sighting--25abe77f-525a-43a4-922e-1e6630a768ee", "sighting--9da6628e-82d1-4500-83a3-aa32bf7074aa", "sighting--96221313-891a-4c28-a24f-ce039a004376", "sighting--b66d8dea-94e1-4018-b106-736042f5df22", "sighting--449fe656-5203-425d-9f05-4819e21d22e1", "sighting--0f0bd827-886e-464e-9167-2877f9f89947", "sighting--ecca4d4b-098b-4424-98f3-15559f21ac41", "sighting--447bf60c-b9f0-4375-8a67-f1f4fd4435be", "sighting--99fb37ea-81cf-494a-9540-b5cc8085c8c9", "sighting--16801350-9c48-4d67-a402-bf6b7eb03851", "sighting--d69662eb-bca6-4561-911d-e42c83cc0652", "sighting--c5756929-3bfd-4bc6-a58e-eec7dda9366a", "sighting--c989e20e-e92d-4ec8-a6e0-28b7e2db8116", "sighting--abf1c0d6-2797-4190-a42d-7ece8fdc0913", "sighting--f361866f-53e5-495b-ae50-e361f4832c16", "sighting--0cfe626b-3ae9-4c9b-ac26-05514dab1073", "sighting--5c3d8f27-94ed-49d7-9ff9-8459ef4c9290", "sighting--9dc02dd5-9f4c-4198-a95c-8725f120eea9", "sighting--2d270c9d-b6f6-462e-8c6a-19ea09b16103", "sighting--1c739b08-f67c-4520-aa9e-49c1f0f41e5a", "sighting--eab6769b-7722-4f1c-881f-efb576cab01e", "sighting--dfd1721a-e222-425f-9a69-8d13f3cb8488", "sighting--85e650f2-f414-4c1f-94a7-6d002394aa05", "sighting--52573802-6fcc-451b-bcee-e9424cabf49c", "sighting--6eea235f-7221-4f0a-971b-aa3575761f62", "sighting--cf766c79-b142-4638-9018-4eff78bc51c2", "sighting--4e60582f-2d4f-4ecb-aa64-59db55e062be", "sighting--d83ad528-fcb3-4a6c-a7f7-86d9e0680fa6", "sighting--3fc0c8b6-2a59-4aaf-ac64-07e96cbdda53", "sighting--4aebbb6d-4bcd-484b-a545-bb312dd214a3", "sighting--ac80fb4a-bb9c-4c65-a533-8944924c2f2d", "sighting--4344143a-62f8-459c-a2b8-46543cb86811", "sighting--1511be49-2371-4e38-bef2-407b3fb5052e", "sighting--1b5dda77-5d09-4082-8424-0ddd497af3e8", "sighting--1ca8e612-f0c3-444d-94b1-f42984bb48f2", "sighting--3723ee94-2db4-43ff-a3e6-2442b8518fd0", "sighting--e1edfea7-b91e-4975-86ea-9f84432d9df8", "sighting--f61ca342-43ce-4c06-914c-953a86753728", "sighting--7a1dee3c-031d-4c8f-99af-43bd20ba644a", "sighting--991195b5-2727-4868-a54e-f3ff4ea6975c", "sighting--c9c73c07-4962-4af5-8715-259cc8f88213", "sighting--1b5af785-432e-4ec0-8ac8-fab70588d225", "sighting--b7f2af36-92a6-4cb4-9ec2-15ed1112c900", "sighting--17c13312-dd67-4d28-9645-595e24f5b78d", "sighting--62a1c721-f985-4bfc-8940-9aa4a8bef246", "sighting--14cd4b46-fdbb-44db-9002-85cc75ba6531", "sighting--c90758c6-2ccb-4ebe-a1ef-cd273c9c3712", "sighting--f08a9ccd-b3a2-4e0b-a64e-8f44bf232a43", "sighting--e6b66326-2673-4179-b7dc-23273bd6bae9", "sighting--085e243c-8267-40a1-bce7-b3c661bdc912", "sighting--7602bfd0-b72f-49f7-a204-63b1eb8c100a", "sighting--6b43db48-3108-4252-8670-1383b2454584", "sighting--e5e2b8a7-83d6-4b83-af9b-b39f28c30055", "sighting--875096b1-ad1b-45ff-aa3b-9aea09f3447e", "sighting--b5c43255-4854-4850-86d5-2afb9797c061", "sighting--aaeca994-4f86-4bf1-87fa-3dfd3718b11e", "sighting--e55be6eb-7895-486b-9d06-34137f307f72", "sighting--6b9e0ba2-1e8e-482d-97b3-20880e038588", "sighting--faa6b66f-d9de-4d8a-a6d1-9e1436bbdc16", "sighting--8fd2586c-a379-4810-879f-a1582988c915", "sighting--a4a70dda-4587-4a42-b8d9-0a607e26beb0", "sighting--5d7e277f-ea2a-489f-8a42-f8063299ec8a", "sighting--455a7401-e0b8-4c11-bb13-338fb7768b41", "sighting--c3563130-76a4-4bc4-a564-19a27fc288d2", "sighting--6cb66858-2da6-4630-b84e-82d7865ce775", "sighting--f916b7b5-1bc1-4166-b792-c9a32e2fef9c", "sighting--bbf54c86-1b56-4293-b6e2-357d3be1fffe", "sighting--8e25e12b-a637-4608-ba8d-5dc4f0bd9e58", "sighting--8f928585-9cbc-4acf-855b-00fdc3996b5e", "sighting--40073528-7847-4819-8d1d-aeb1e21c2445", "sighting--4c9df578-fafa-4468-8bd6-fe43bce809b0", "sighting--2eb2cfea-711b-481e-a2da-baf23bca011c", "sighting--7461da97-fd14-42ea-b4ce-8d4684dbfb5c", "sighting--a1191891-da75-4461-a8a1-bc7817aba485", "sighting--df4cc123-569f-49ea-bad4-2d167a9b2eb7", "sighting--c210dae4-f654-4fb4-b9bc-841b5077e142", "sighting--e78f6ba3-5c45-45a0-a572-c06da9e060f4", "sighting--734bc793-88ff-4298-a18a-7c4870038929", "sighting--2141fdc7-2d95-4891-a446-1d9691bfcc73", "sighting--14164da5-7467-447e-af47-87c8b0580e80", "sighting--e48607ae-3928-41b4-9c56-c22c344aa784", "sighting--a56ce52e-19c7-42d5-be01-1991db7f1d66", "sighting--f294d6a1-76f7-4b71-8ad2-434c6d6298f4", "sighting--c63eb6c9-8b14-4ab4-bb95-adafd664218a", "sighting--8f1b31fe-8dce-4415-bdaa-b92062cf4635", "sighting--dfece52e-cdc4-4d3a-935e-b5dd01549496", "sighting--3b10a34e-0ca6-4249-a42b-a00fe9132493", "sighting--47384f98-2d3b-4d6b-8ca7-5e45a7d44764", "sighting--a5c91c17-47ea-4253-8831-ae397ad6f0fe", "sighting--016d73a1-a051-498e-b71c-d05d9f1535ed", "sighting--8cdc2e58-bfa6-4ca0-b729-682ac21a3225", "sighting--c3a2b4d4-35fb-412b-841c-4146f74894fc", "sighting--80fd1de1-c227-4dd5-a303-6f9982cab030", "sighting--9a2c6366-4363-4671-a1d5-9be8b0a588cb", "sighting--cdab2c20-e5e1-4bd6-a774-ef4f6f0fbbfc", "sighting--4bebf90b-25cc-45f2-9efe-ef60750536e6", "sighting--b1023485-2fe2-45d0-ba83-1b266c07d061", "sighting--defb6eaf-c2b8-4006-a39b-b0a439b24757", "sighting--a703e4c5-883f-4474-a238-d3539a9a1355", "sighting--6ac953bc-b0a7-40c6-b838-9758041263cb", "sighting--0d17cc54-1ce7-4115-a16a-d92f32e72732", "sighting--f528f06f-5772-4103-a3fc-ecdc85647bee", "sighting--6819e4aa-dbfa-4abc-bd86-60ce15448c0c", "sighting--9fcf46e9-8ae3-4f77-90be-67e4f832c430", "sighting--7c2accf6-e5c5-4838-bccf-36c2cce90f93", "sighting--14328a42-92fa-44c0-bfea-2ede77d21da8", "sighting--2abd2321-7ebc-4afe-9ce5-f7b90cb37b9f", "sighting--e6a5977e-5b09-488d-a3ea-90f4d4e838ea", "sighting--348bd7f0-e9a5-41ae-bc66-b8bf5640b9b7", "sighting--07b9b905-c5d9-4253-a872-8770e2ac6fa8", "sighting--a743fa1d-5c78-4914-a52b-b4f8c571a17d", "sighting--ea7edfbf-5490-4f84-b7af-e588d65580f2", "sighting--170f9109-e3f7-47c5-ab71-ee4a034f180c", "sighting--8f2678ff-5301-4e4d-87d2-060e9a74c616", "sighting--94a32721-43eb-4f75-8f2e-ecc0f41e37ab", "sighting--c7976ff5-b4ac-4c45-aecd-98ff53ac8f5d", "sighting--cdc57381-4c53-446b-9c95-89fe2f1f9432", "sighting--f4b4f446-c5ae-4e31-ac3f-6aa842597311", "sighting--a8dc8a70-3313-483d-93a5-ca6d072d2d75", "sighting--4e6ba8a8-57b1-4729-876d-a9eefcdffa3d", "sighting--97882831-539d-460a-9114-ba607919b9ee", "sighting--bbdec34e-8103-4952-b601-75b490ef2ded", "sighting--731194d1-5424-425e-b5a9-2720ef1357eb", "sighting--156f2fc4-a882-4fff-b2b8-f65a139de027", "sighting--35565ec5-f096-4a34-a6b7-cc7ba3ed5118", "sighting--3ede434d-5f18-4094-8cf1-9e11dad82ce5", "sighting--a0d45559-0b17-4c4c-aafb-fa62d88ffd55", "sighting--447663af-01de-412b-962a-17cb2a9f1be5", "sighting--3b8a1c4d-e7b0-4cbd-8984-d314153bd182", "sighting--6c134aae-5c2d-4df7-92f1-6df96c125f88", "sighting--d6aaf307-89a9-4cef-b436-9ef4fb1dbdf3", "sighting--68574c85-9a1d-4b42-902c-2e494824ee99", "sighting--38914523-2b92-4c85-b384-f08502e976ca", "sighting--9198467b-4b47-4ded-9b38-866887d30a70", "sighting--637a6a7e-d2dc-4796-805f-35e60cc383c1", "sighting--e355f9a8-99bc-4b78-9f3a-d6b02a5c2f37", "sighting--39474595-8275-45a3-8f82-33e00a6a650b", "sighting--c403c650-97d5-4507-8fe9-34154d5265e3", "sighting--bc91bbfa-934d-42a6-bf66-5b3fda373f19", "sighting--a4500849-f91a-41f5-ba15-c7e2349e768b", "sighting--221266ec-f97a-4d1f-be1a-a93dc5e5549a", "sighting--bc1d63b4-89fa-45fb-9537-f7213a968d54", "sighting--67b29d75-17c0-41f7-90de-54fbe78892a5", "sighting--75b72950-37f5-49e5-831a-d32ee9013395", "sighting--8a7207da-c514-4a2e-8da5-bb4299b06eb8", "sighting--6e6089b0-b8dc-43a8-a034-87598391931f", "sighting--87dde0ea-3ad8-411f-bc2a-20674632bd45", "sighting--8b754307-f9dd-4c70-a295-cde4dfce721c", "sighting--b897f776-0840-4d79-812b-c94e75e8a614", "sighting--b1f4e130-e0d2-455a-9673-f9239f286273", "sighting--9928eb7a-4cb0-4286-9388-f2c59c7e403b", "sighting--ed2234b2-ff26-4f67-acdc-d91eab8a7750", "sighting--3905baf7-21df-4977-81ba-ac43338ea179", "sighting--cf77ef37-3fb6-45f3-8963-b5c76556b252", "sighting--fd95e6af-b1b5-4e04-9a76-d202932611b5", "sighting--e5688e5c-b4db-4bf8-80c3-865cc1a78a6d", "sighting--06aa69f0-4454-420d-8242-356554a3a1e5", "sighting--223d8ffa-4b8e-4aba-a3a9-fe13c4acc145", "sighting--cefd4288-b9aa-40cb-bbef-3e994e04788c", "sighting--700fb230-7c22-44d4-9f9f-876558a8d622", "sighting--b9819b6f-dd85-45e5-98fc-8a1189a5e75f", "sighting--b60d32a7-b438-4fe6-9b6f-ad6be8dac1ac", "sighting--415491d6-c0f3-48ac-93ec-7b2989f1b553", "sighting--ede36b0b-663c-4769-8cb1-993db9df3ea1", "sighting--9e61fd63-b6dc-4213-9d3a-a5c5765eea9f", "sighting--5db0f5c9-11ec-448a-aaff-3ecb34e32541", "sighting--dce35de8-565c-4e28-8382-76c23618cc61", "sighting--71987623-6584-4511-a898-345e00906027", "sighting--b0ea9c99-9c25-4675-940e-b7777007497a", "sighting--294af97c-048a-4f01-a612-cd7ef6b3c8b5", "sighting--a91b779d-96c9-40f0-9641-8be317355938", "sighting--a5055a21-091d-47d0-a7bf-349556505fdc", "sighting--193169ff-34cc-42e0-baa4-7dfef68c4490", "sighting--c77c8177-e53e-4550-b541-1d8359e63770", "sighting--8cf1b03a-79b6-454a-9726-35dea596d225", "sighting--f778f9ce-aba8-4c51-ba53-e458e7ff70d5", "sighting--c8f08a0d-6f9c-40fe-bbfd-21171a9955bd", "sighting--a6e0dcfa-3361-4a02-bc9a-2c353e90797c", "sighting--da7ab982-51a5-48d0-bc88-e0791aa80718", "sighting--cddb79e0-0797-4bd5-9578-97d10d8b4e58", "sighting--6065b32d-15ee-4765-a73a-ba6e50bce8ff", "sighting--20f9b69b-b796-4f76-8057-8f61df2d7968", "sighting--c13a3882-e576-4735-aab5-0f147f295680", "sighting--118fd5ed-7530-4b9d-94a1-ca6791d963b7", "sighting--965acf7d-ad28-4b82-a40f-93c6ce4b3770", "sighting--d54e3b89-072c-430e-8b23-b3f741ca3852", "sighting--4ba27431-6270-4a2e-81fe-302e1107f398", "sighting--fb4d190d-65ba-4835-bda2-c6769d9a5e2f", "sighting--986581f2-5bb6-4ea8-bbc2-d1a0583e7533", "sighting--c6f5841f-462a-457b-9be5-1cb0b7b17ca1", "sighting--c6d47aba-c1cf-44e1-a7b7-da3769fac9ae", "sighting--f8e5314b-cb69-4748-acac-4e84de0bc546", "sighting--2dac5856-4eaf-4ffd-96ed-5b868612455e", "sighting--bd1eb435-6747-4688-a897-b3006fc48df3", "sighting--4845d6e0-c3d4-463f-aaf7-57aa87107b33", "sighting--4aeb2549-eba2-4784-93ff-8eb3cd13c723", "sighting--f84d0d04-dc3f-4423-bed8-6bd09eb52ded", "sighting--37f0ba79-d785-4661-a2b9-f92ee05a2b19", "sighting--68c11a5c-387e-4df5-b147-e0dc482d3f6f", "sighting--3ced533d-27c0-4da4-b4b8-51e68faf1934", "sighting--c753bf26-4bbd-4fbc-8761-7e5a659baf11", "sighting--100a5961-50d0-4bdd-bab6-eed3095183b3", "sighting--8fce77a1-e922-4ad3-b3b4-b4427275cd32", "sighting--553782b1-8690-45f9-83d3-76d9a43b3afb", "sighting--e642b27d-c5eb-448f-96c0-98b5509ef7a0", "sighting--6fddde2d-8615-4401-9203-7ada24c36a83", "sighting--46bd34e5-91c1-4a16-97e6-62c924211357", "sighting--f3fdc8ec-fa1e-4562-a6ca-b81bf20c15f1", "sighting--7bc3fefa-cf5b-4f4c-a04b-b7fc15047063", "sighting--572b5ae6-5dc8-4d92-b78a-967e80835493", "sighting--8ddc55c9-57a0-4ab0-9d52-d5d3bfbf5501", "sighting--84cfe9ae-dfd8-41ef-84f3-db2ef2065d87", "sighting--728bc657-fb4c-4dcd-9704-c9eabbb2ed45", "sighting--e3d0ae7f-14f6-4f77-9d14-a9f18a13c44b", "sighting--e7ac25a7-4b32-4ee6-9a15-9c73e697fda5", "sighting--726ab6c3-3210-40c3-8960-8b6615dc2c92", "sighting--41bec673-1052-49ac-89e5-879a64ffc42f", "sighting--70b89a1f-8e02-4e8b-8dac-57bcdd9076d0", "sighting--d5085105-ea71-4202-8e40-fb980ea6c438", "sighting--84de0f05-dc04-4ac2-9cd5-18dc16b2d117", "sighting--9cee8c28-df7d-43ca-9a18-21755e43cbcb", "sighting--3eb22858-80dc-49d7-9c43-f34f546266af", "sighting--e4830a62-944d-4444-937b-fd9c1e02b1fc", "sighting--d78ff8a1-a47d-4e0c-b80d-1671e4591ae8", "sighting--2438d3dd-84d6-4227-acb7-d9c82c3dcd71", "sighting--4ffc1097-2265-4703-8931-81997a7d0769", "sighting--7af4b295-c6e8-4259-888a-afc37b5cd97c", "sighting--302d8a86-ee77-4b42-b31c-827f31374d64", "sighting--12e5cd5e-a089-4261-9fd1-2ae3b9951d4b", "sighting--1c70da30-445d-4f5a-a5c5-e242758d70d7", "sighting--28ee8d1d-29b8-48fb-b04a-bb16ed5097dc", "sighting--a47f1c8d-64de-4622-b2f7-ef93c65a1b6e", "sighting--2efcbf5e-412c-4844-9e87-89f48a13ede4", "sighting--f454f221-b675-46b9-8c37-c9be3bd5065a", "sighting--f30a1c78-f593-427e-b359-ef6f627c0024", "sighting--b0c5a9c7-0244-4ff9-8c96-3596f8488681", "sighting--02f9148f-d3b2-4155-8869-29673b668ddd", "sighting--176f4b25-7578-47e2-a2aa-3fea3d1635b4", "sighting--8ef8084c-066e-4ef3-916c-0bc642c71ffb", "sighting--0f5985d1-848e-4439-aeff-c7dc58c10710", "sighting--4f729522-2eac-482c-8679-6b2acfb10153", "sighting--4e3f040e-1f66-438c-8d26-017cdbe15c1d", "sighting--d9f3632b-f498-46a4-a750-22d419f3ec00", "sighting--91f74842-cf06-41cc-94c7-22590039a388", "sighting--542f1c96-8823-4326-b381-e6ad508887b7", "sighting--0cb58e03-e45d-4ea2-9474-df3d90ef3316", "sighting--dc3042cd-c7fd-43fc-b94a-c62159729283", "sighting--f786b5c7-4e40-4340-a258-189604631800", "sighting--25014bbc-bebe-4072-bd30-e45e83c51f3c", "sighting--66cbf217-3f4d-4a6d-9df8-5baedd112e6b", "sighting--d27fc733-75d1-4d9e-a0ae-8eb20f9c11b1", "sighting--c7c25141-9935-4c54-8125-a742d81277d1", "sighting--07488efe-8692-4724-938b-4f9018eaa340", "sighting--15e689c5-7931-4d5d-9b93-c540119d57c2", "sighting--a7f6aee3-302d-46b3-8077-f3df2454481d", "sighting--6c89e6b8-d598-4bb4-9f8b-df506313ec09", "sighting--5644ec21-fc86-4d8f-a57b-5709312dc4c8", "sighting--45172df4-bb50-4e51-8b47-4fa4d136a4bb", "sighting--6308fee6-67dc-4e5b-884a-e0dfd28a4dc6", "sighting--e9297874-7ea0-44d3-8c80-06b6f412d53d", "sighting--42543df4-f020-4c3f-84ae-ba45191b3a78", "sighting--a30a0cc3-2c40-4e62-8339-74e68dc9223e", "sighting--316f994b-391b-43a2-ba34-912222652c01", "sighting--32cfdae1-4933-486a-8283-73ae47b207d0", "sighting--8267e8fe-3d07-4927-8e69-e7afc31c1d22", "sighting--563eb219-5ad0-4d99-bb83-129a90384aaa", "sighting--c1de3a5d-97b7-4fb6-87a7-d09ecd1c2be0", "sighting--0b23825b-6f0e-4b9f-a310-54a7ee673cfd", "sighting--1fcbc870-cbae-4f91-922a-735f8f29e70a", "sighting--8179ac0f-9d84-4531-a89d-f324aa340682", "sighting--f31d9e80-b552-4438-839f-ae0c3247d5e0", "sighting--15c35728-d2ce-4d6b-bf43-be681f23f36a", "sighting--bf6f606f-d232-4412-9a60-ddbd3087ce27", "sighting--129b4c1c-5d8f-47d4-9bd1-82859ef02d98", "sighting--67687139-1a86-4b46-a5ce-f27fde3c33f9", "sighting--d5f5d645-8fb7-4806-ab05-5194d0a1f282", "sighting--ebf31cbd-e69f-4c00-ab8b-7ddd4230ff7f", "sighting--7fc70131-f15b-46d2-8f9c-b6af3686df45", "sighting--acd1385c-2fd6-4cce-a62e-28c4b9821863", "sighting--779ea0f8-70b8-4e11-b607-12f7dd3a732a", "sighting--64a7de3f-a32b-449e-bd90-f62b8c387505", "sighting--0a85f072-f784-471e-89fe-1c3714d34e55", "sighting--2b414ca6-47a5-425d-aef5-1ac422ef7de7", "sighting--57203f08-2a7f-4ef5-a366-9e9696e60ec0", "sighting--920711c6-3606-4c75-9c5b-3d4c90be9179", "sighting--8cc2f3d9-e4b3-4a1d-b3c4-c0c018ceeaa3", "sighting--b6380bc5-e1a4-46be-bd3f-1c31c92fa9c8", "sighting--71d81910-742a-45b9-9bae-1e7ffb23399c", "sighting--91e3d19d-237d-48b0-8ccb-7a8bba7fd16c", "sighting--459ff5b0-54e8-4cd4-ac4a-8fff6d026cdb", "sighting--d98b877a-3f96-49aa-b7e9-5d87500dc8c5", "sighting--b823050f-3993-414e-96f5-469fcf97eda0", "sighting--5fc102aa-88a1-4849-8c4c-6e7f92c935a1", "sighting--c8646f4b-840f-4148-b2fd-899c3b1464d4", "sighting--a42346c1-4981-4d29-acf6-2a08cd203e1c", "sighting--49ae0718-c883-48b2-90f1-ee2f9acae040", "sighting--102b68e7-1b00-430b-8c8f-1a41226a8615", "sighting--846760c8-82bc-48f7-93d6-543e6c2e6402", "sighting--7e0d823e-27dc-4f9c-8f24-cffb51e96130", "sighting--9e9296b6-011b-40b5-9f28-1fb3fdb8a9fd", "sighting--e5aa8cc4-cf30-4b0e-a0e4-364ba43c45ac", "sighting--69d6c2fe-e355-4254-ac9f-bbda6082247b", "sighting--51a9e8b0-e4b4-4ca6-a8dd-c299bc1d3962", "sighting--aaa66cf1-f083-4656-9ad3-9251adbaa706", "sighting--b2638a34-93c1-4c15-b7c6-64c7ec5147a9", "sighting--842adbad-9248-428b-b252-7b6b1075b9dc", "sighting--473e50c2-da7a-4b34-818a-a68405a3eb4d", "sighting--c44880b5-d206-4920-9bf7-a2c42aceeaa6", "sighting--5ce5741b-2918-4895-a9d1-334dab4cce0c", "sighting--dc885b43-6340-4306-a89b-50469c1a28a0", "sighting--96231e22-a3fc-4a3f-b117-7574eaa74313", "sighting--22b3c2a3-dc97-428f-9d2e-1f9e97f3802e", "sighting--0a255f17-d655-456a-a167-76a4b2733bc8", "sighting--f8ddea1c-3afd-4a35-b676-220435ce0186", "sighting--c3801e2c-7d52-491f-a629-54cf92a63425", "sighting--a5da514d-1380-440c-be03-389f0d0b4c84", "sighting--aa0c78ac-f856-40f3-8b35-ad615bf409e6", "sighting--af23e1ab-55d8-44c8-a80f-54b6c3921141", "sighting--728c1377-2a72-43d7-90d1-c0f55dec0ec3", "sighting--1d2dd0eb-0763-4494-a2b4-5740fc6d5bb9", "sighting--2ce046c8-7ba5-4a99-b04a-1f67ff3541d5", "sighting--9553e4a9-dde6-4494-821f-fad6d8c7314d", "sighting--90d43f2b-ecc6-4ead-9c47-523b0f9c44cf", "sighting--4797f7e8-532e-409b-a7f0-a4d35e7d41fd", "sighting--6be61a2b-2735-4624-ac0c-1c234919db78", "sighting--e5ea9af4-7c47-4c6e-9a37-a5240547cf94", "sighting--3b4d8e49-7c5e-4735-a7f9-a1c4b5ab3d36", "sighting--0b85cf16-4602-4fbb-99c0-2f84a486cfa5", "sighting--6c84a385-24a2-40b9-90dc-d8d55c748a9b", "sighting--dfad0d06-ae97-4788-96b3-53860c905d21", "sighting--19cf3cb4-4836-4203-8aaf-0cddfa2ee6b7", "sighting--045d9418-f76c-4cfb-bc62-6e0e9e650873", "sighting--52ca50c0-3521-468b-a234-c7f3686deb93", "sighting--8676a0da-477b-49bf-85e2-df49146a6b59", "sighting--10887024-e541-4435-a250-313e04f3bdbf", "sighting--d693577f-d33f-432b-ab08-bdd9eea57ab1", "sighting--f1a313bd-d5a9-4c49-9556-c7dc3fdddb9b", "sighting--665de5c3-071b-422c-9f68-b8cd2026c436", "sighting--01333935-a71c-4add-a754-80716dcd3287", "sighting--5639f536-e6f9-486f-a488-dcf233f1f8ad", "sighting--8d057bc6-6319-4eae-9276-e5758f172416", "sighting--21c9bf05-afd6-4197-bee5-ba61a2a0eaff", "sighting--776b431b-4490-4cef-b95c-deff68791478", "sighting--f2fb48b3-ab4b-4ffa-8814-2042096e5613", "sighting--c4815428-4707-43b5-9a15-e81206c36bda", "sighting--585fd0ef-b361-4196-be73-7f4aa45a9447", "sighting--b674ab46-00fe-4f66-b48e-2b2abd72f73c", "sighting--1d2a43f5-7540-4f1b-924b-6642f225caa5", "sighting--37a23bc6-f302-4abc-9be3-0d1b5a4fa30b", "sighting--be29e77c-2351-4ae5-9eed-48ad9ad9e346", "sighting--10bae10a-8a40-4095-9678-7c83702f11a4", "sighting--2257a033-b0cf-4fda-8b2f-b8817de24ee0", "sighting--334e4e0a-18e1-4e84-9fde-1053e603f12f", "sighting--77051876-855f-4e61-b98d-81a071906170", "sighting--3c83d59d-9556-4b64-b47b-b4ba04d3abbd", "sighting--fc3acfc2-89d6-41a5-8051-793637de9710", "sighting--85a21360-8001-4a16-971f-e9c42220a62b", "sighting--d3cb5a35-2935-4ff3-918c-85d5cadd364f", "sighting--e04ec3dd-56ac-4482-9d34-d00bce218727", "sighting--4c6616db-af52-4a76-8490-393aa29abfd7", "sighting--f413a554-ab42-4130-ae17-aa996e16a4de", "sighting--3c505c1e-98e9-40b3-b3f2-cbb51290f7a3", "sighting--ff77a603-d60b-4de0-9f26-40a4ed039367", "sighting--45ab31c4-e3b1-4477-955f-edc6d91d151c", "sighting--8b3ad1f1-8764-4091-aa5b-99a5a4b82bbd", "sighting--55685cf9-0724-4248-915d-90bc742fdf9c", "sighting--564ff64a-784d-40e5-99b4-b7849b09427b", "sighting--d5736f50-a93d-4634-9ca4-fd877b7afc8b", "sighting--31f3d9bc-68d4-4775-9910-1bac7692c74d", "sighting--b2fbe6bb-f7ad-47f2-a60e-5b52e6c0a0bc", "sighting--751b5210-22b6-404e-8ced-eef6351ba9e9", "sighting--138834a7-8d58-4de3-8a31-512b675901a4", "sighting--8cfc2b1f-75d0-440b-a5a6-7420fc82fed9", "sighting--477e487a-6e57-4c24-9a04-8c388d6c4919", "sighting--5186d80c-8776-4237-9dfc-7f10d71aa045", "sighting--9e3c41f4-c62a-4326-9703-c4b1974388a1", "sighting--c62924da-ef30-4c8c-a64b-f9faabcba343", "sighting--463aecc1-b6f3-4efb-aa1a-0e212015175d", "sighting--f7381d4b-f3bb-4b7f-9a2a-2afc0d34bc53", "sighting--a25e8c2a-4c34-4525-a9a7-9be96e38bd38", "sighting--c474655d-adb6-48cd-a0ba-b0001fd2f1ae", "sighting--e303cf5c-0f7b-4809-963b-023d7e7768b2", "sighting--a49fc84c-cbc2-4420-9a01-03b931ef6c4d", "sighting--48f6d8b2-8b5c-41a0-9b8b-b304609d30a4", "sighting--84086988-8f72-46ec-92a4-b6f0258c03f3", "sighting--1fd761a6-bd7d-420e-b644-f30c6c473580", "sighting--c83b78c9-6943-4219-8aef-04594eda2bd1", "sighting--ebb0c43b-3118-4da4-812b-32ac6128a42f", "sighting--b94208b2-a6a3-4f74-942d-f9ccf93e65eb", "sighting--bfc222c5-8c29-43d4-b6a0-b59cd2ee6816", "sighting--c251149c-418e-41f8-a125-baa4c63df6aa", "sighting--3e7278b6-a3e1-4c14-8183-18a6135c8778", "sighting--ddd70d25-810a-4609-a6db-9f406943bf44", "sighting--356690c0-020a-490d-8c0f-5af2421a7491", "sighting--d0b5d56d-95e4-44d9-b43f-e3d9e50c24f7", "sighting--e132e73d-e276-4611-906f-2ac8932601af", "sighting--2f8c3752-0b3a-4453-bf30-25ab3b6d8036", "sighting--b71405b0-c50d-49b9-92df-30b0373dccb6", "sighting--cf6025a9-3672-4978-a143-8ee79c86d43d", "sighting--a2c88b0b-4717-4a99-9f43-d47dddf325db", "sighting--c4b66cac-ef2f-4f28-99e8-411330df653d", "sighting--88f596d1-5158-4d78-a97b-418c6dc78bc1", "sighting--b9f1aa46-a3d9-4586-9abd-a1c647ed9800", "sighting--f3d21937-e8b5-4672-80ea-4d1ef85186ab", "sighting--b3680218-9cd8-4647-b801-4f8a890ed79a", "sighting--9f76908b-dad3-4ad2-8aea-58ec029e5c96", "sighting--69b8a21c-e3a5-4fc4-869e-66ed9769abef", "sighting--9447bdab-020c-4e13-ba58-d000b9dec297", "sighting--a4c06bd3-a7e8-4a38-a84b-729fe3fcd22d", "sighting--031d1d07-e7e7-4854-946a-127d6c67f5e5", "sighting--26dc26a6-3407-4a78-bfb3-ae4d816bb281", "sighting--9d00d5b4-ba97-4de5-a3e3-a3ca6ddf5fd9", "sighting--2f7cb6c5-1664-48bd-83c6-65cd247aa5ad", "sighting--0ce74c6f-d04d-4e7d-8acb-6f96beb2ea8c", "sighting--aa496f95-3191-4990-a1aa-78018beb5532", "sighting--1f46e227-6e12-4b26-a691-da2e3739c29d", "sighting--5022ca86-0cda-4177-b72e-d11ea80b2bef", "sighting--b91e9476-06eb-4665-9357-a7b560b1b7a3", "sighting--958ecddd-7c9e-4b7e-b9c4-1135837b9815", "sighting--8ba41b34-8405-446d-b4d2-e51e9042705d", "sighting--4a80e3ab-f7c4-4f0d-96d7-7d4a0c14d29b", "sighting--eb48188f-4204-444a-ab96-b6ab65faa0ee", "sighting--802094d4-12ad-4fd2-978b-13d3cdffd708", "sighting--7267b339-092c-4f27-93c9-a6433fc6e186", "sighting--81f5caa3-713a-4221-96fa-c4606986225b", "sighting--01f9df07-f03e-4424-ab2f-64074fe53770", "sighting--2a29e7a9-b36d-4484-a7f3-bf1096651c3e", "sighting--3666dd2c-f22c-47df-bb45-c58106d1c927", "sighting--d9b537d2-1cc8-4798-bd72-c3efeb5d5902", "sighting--1f72194a-fa19-4783-b995-6af4f135dfdb", "sighting--f7ee59b0-b8cf-4da0-b365-9cb4f5dd143e", "sighting--cea650e1-52ac-492d-84c6-15c1666d95af", "sighting--9c802617-c1a3-4413-afe7-cf32be5b8f50", "sighting--3e64f904-6ddf-42a6-bd52-477413c1022f", "sighting--580ba633-a9a1-4ac9-bcc4-2ac5a2ef9caf", "sighting--032792ae-5488-4806-b827-33f5477ec4d3", "sighting--17170467-0916-4254-a3ba-c7e44eb727cb", "sighting--c801dc1b-02e3-40d8-88e3-0cc9ee460f8c", "sighting--02bf1d96-bad3-4f5f-be7a-80c7233e5f9c", "sighting--c73bb325-9b26-4608-af85-c11701cfef7b", "sighting--e06a4a4b-a8d5-4787-b2a2-6aa9df93b5da", "sighting--8c609074-2039-4794-b050-649f4f7742f0", "sighting--ddc3e7b0-d21d-4b2a-9a93-ecf59118e586", "sighting--12f0c76c-2a55-4b32-8ced-bccda3e685fe", "sighting--f6fbe413-f722-4700-b7eb-2f18d89a9fdc", "sighting--c664d6ca-0133-48ea-81ca-d485754a2a3c", "sighting--fab39e3c-c729-424a-bca2-8bf72a806999", "sighting--9f843e0e-f235-445e-9113-d8f572aee485", "sighting--0907abd7-f8ce-431c-8513-3240d06fb756", "sighting--a1ddf31e-bda2-44cb-aa0d-0e43d606cd32", "sighting--17242365-486f-4cfd-a2d0-b673ca9bae54", "sighting--e10ec375-3a0f-4db1-aeff-066b59bdc9ec", "sighting--29217e9a-7f9e-4c17-a065-794cd2572b56", "sighting--f134cf6f-3624-499f-b295-9c42f5f73c7a", "sighting--91517499-7139-43a5-b66a-a0cd9d5c758e", "sighting--72afc103-034e-46ad-9012-6821b7e34bdc", "sighting--6a515457-4b9c-4b9b-a811-85243bbc7eb1", "sighting--300a8cbe-b69c-4eb5-acee-020b638e463c", "sighting--54e03d08-44a9-4af9-b801-81cb82b41d7b", "sighting--3c126207-dfc4-454e-8c18-f579f0052e91", "sighting--2bb96408-d431-4848-adda-6c47ba450f8a", "sighting--d25a164f-8b37-46e1-96d2-aa4fa87e06ad", "sighting--b4936b19-13ec-42c1-985f-8ca5889caf28", "sighting--1cf6c0b0-3631-4318-a7f3-12659b483c70", "sighting--5004c76f-512d-49d7-b03b-97a18326c6b3", "sighting--4c22aaf0-996e-4aa1-819c-2ab796b56b2f", "sighting--392e3b8a-29c2-4446-93d1-a51d221f5922", "sighting--f444d67d-515e-423b-97f8-581f31ea0ee3", "sighting--446291d8-5f15-4afd-b613-13de35ddd6bf", "sighting--5e3f262d-3fac-4409-a63d-538a5518c659", "sighting--fa828d45-4160-4753-81f4-af2aa32bda2b", "sighting--832c5213-4fa3-4f17-9b16-4758ebef9110", "sighting--1d59840a-6bc5-4a42-bf69-8184fcbceb01", "sighting--d844a94f-2f4a-4ee9-a58c-7b9d0762b6ab", "sighting--16ac69c0-34c9-4c18-b97a-c6b5faa17c71", "sighting--ca17899a-2a64-4bac-9f47-6347344ae62e", "sighting--63aaa43b-2a2a-4a40-b165-b33e118c7489", "sighting--94dac653-bb52-43de-b344-343529138913", "sighting--1d57e102-096c-4512-a77f-5c4039ceaf74", "sighting--05e9219f-defc-4abe-8cfe-acd3b73c53c6", "sighting--5a895c76-e738-475f-aeb4-7c3ce117c0e9", "sighting--0fe02991-71af-41fd-b707-eddaa69abbd0", "sighting--0487fa18-4c19-4514-a52c-878e44cf3d81", "sighting--21709fee-5833-4ea5-9ea8-57e673b7eaf7", "sighting--c4e52e42-5451-4a74-a479-41f74474ce08", "sighting--e1956f05-bc56-469d-902f-1fa33430dcf5", "sighting--2cc7ac52-6003-40e5-96a4-10a188d258e2", "sighting--d48a2347-4cfe-419a-b117-21a68078124f", "sighting--e3a81ebd-d18d-4db5-a1f3-90bcd8428ffd", "sighting--9e093a82-9c32-4b12-b371-bda6c816dfc4", "sighting--15a79b63-47fd-4f1e-96c0-8c5dceaf78f8", "sighting--bdc25b43-8f21-4f99-bae9-b7ed8365ee59", "sighting--983f9dbe-f6fd-4e8b-9838-27ce5de02d8c", "sighting--b5ba7c78-9a25-4c89-8ecd-98189852a869", "sighting--a4a48dc0-ed7a-4aef-ab2b-cf0f7736017a", "sighting--efc73a83-8808-482f-9434-32b872a032f0", "sighting--1f9d5384-328c-412c-8ff2-fabc0d957722", "sighting--57dcb52c-1045-4ea1-991c-dbda786b195a", "sighting--3b1c4271-f268-4cbc-9a59-f2b851fea6fe", "sighting--a667fdff-fe91-4609-a3d4-3d4101d9c110", "sighting--f41a3341-cd09-47c9-8038-b32a3a31d82c", "sighting--b26a5bb9-6c22-4e88-a688-f5c6f3045ecd", "sighting--c60a9bce-a722-4c11-9647-016e69422da3", "sighting--0c247fcf-8d28-4ad9-9fdf-7460e4cda795", "sighting--fd403f8d-f19e-4d3e-8427-851f7831108c", "sighting--9630aec1-0194-444b-aae2-f65d5bd6cb27", "sighting--36948576-f3bd-47d5-b721-aa6df5d518ec", "sighting--a6547994-f661-450a-9086-1eec74475738", "sighting--ada177c5-7a98-4ab4-9ba1-63fdd773315d", "sighting--42a2c96d-9c94-4cc3-92d2-362c69083ec9", "sighting--171701c1-0227-4b5f-8cf5-c105bf7d6e13", "sighting--2a8bfcca-54b4-46f7-ac5d-eb125d77740e", "sighting--10da1cf4-d559-4538-a313-a1597092a60d", "sighting--ea37c473-50aa-4335-ba1f-6b20c20dff43", "sighting--b5df9a5b-3516-41ba-a875-908cb70dc9b4", "sighting--5bc0300c-1ea3-41a7-aa90-cafb7410f4d7", "sighting--4c743a3f-93b1-4a8f-b89d-4838e4ffb7fd", "sighting--72eadf09-166e-43e3-b9fb-2786ecad4f3c", "sighting--260dad08-c5e2-441f-acd7-10ac2628192a", "sighting--7bdbb11a-3f71-40e6-ab0d-e5f238c65d46", "sighting--9ff89557-9595-42b4-966a-7b80888ffd92", "sighting--75e07903-b594-46e8-a6e6-1d08cf8bb79a", "sighting--ab266d8c-838d-46a3-af02-d30ebb630429", "sighting--2ddd77f0-c52f-4b42-99b6-79b20eeb609d", "sighting--7eabcaea-ce62-4226-8cd5-030c1bf8c856", "sighting--013dde95-eee3-45e4-9af9-1fa77942a898", "sighting--e50c516a-4e69-499e-a95b-a925b450ee18", "sighting--5bd8c2ad-05eb-4677-a9e4-e37482a134ca", "sighting--78dde900-5822-4de5-9395-69c53795f5c1", "sighting--8a3bd29e-c761-439d-ae61-281a5798bc21", "sighting--7e6ab6b9-f9cb-4330-9f0b-bfe785a34284", "sighting--a044f76a-c2f1-4491-8c8a-af69e50094aa", "sighting--9dd04941-ea67-4404-9720-7a9ed5554b84", "sighting--2028d19f-57ef-4514-b808-027a23d74f6e", "sighting--6754313a-f1fd-4a6b-ab88-1960aad4a0a4", "sighting--25bf09c4-deb1-4a1e-9d41-84e44beeb330", "sighting--4d4fd484-e867-407f-a858-7c967c127819", "sighting--d4c160e4-509a-436b-9914-59e70a4d54ab", "sighting--e52df29d-abcc-4751-bc31-56ac1c3d2f4d", "sighting--4acdec10-e4d0-4410-a643-105cc5456753", "sighting--ee66e1fb-6104-43db-9fd4-8b58ac09a989", "sighting--580c12a2-b0e2-4c93-ad49-59948806d4f7", "sighting--156b1dbf-af41-4b9e-b48d-c0284fbae166", "sighting--e927312c-21a8-46ad-9037-24e3d1e461d6", "sighting--e566f29a-72b5-40c8-845f-82ef7940a78d", "sighting--1ae02ebf-91b0-4aee-ba83-f7501083b9d5", "sighting--a025ad10-5bcf-4adf-b559-7b4431b9401d", "sighting--bcb5d628-1803-4313-81b2-ecb4121391c2", "sighting--7ca75d87-bd36-4db1-9024-36eb26a2dfe5", "sighting--7c9e5008-01e0-4240-bece-61e4a2f0305a", "sighting--11e39183-3af1-4c2e-be5f-9162d6367632", "sighting--4204e3e5-b6f3-49ee-a2ca-2be35f9b5127", "sighting--d17c2c43-a369-4c9c-9915-15fd31da32b7", "sighting--2925c8fd-dd9b-4d2a-bd44-df1b06c1740d", "sighting--d0c543e1-435d-4835-801b-bc41c3ff6167", "sighting--ff6a9691-8de4-4361-916d-49841127d813", "sighting--f665ccfc-177d-4c2c-93f6-2c3d259e798b", "sighting--81c88f72-ee95-4c60-a8f2-9c6c25746812", "sighting--72e1e955-6863-45ae-a8da-71a0685b0392", "sighting--02b71000-5259-48ae-b561-1fcc7ab46c6c", "sighting--5b1fa3fc-849b-41d3-978c-854c1c21baab", "sighting--f22421c2-48e9-4f5b-9803-c5c61634d98c", "sighting--92a9f16c-2457-4c7d-968c-3867aea422fd", "sighting--0fdfb7e4-870f-42b9-a9b1-c0e1349fe9f2", "sighting--fa3a2bb3-8292-4dc5-9ba0-6f2f309f2e90", "sighting--3977608d-777f-4453-9543-a7bf93b4eb3e", "sighting--1b28a297-ed16-4469-a574-4b28105c78db", "sighting--84a227e9-54b3-4980-9cff-5aeaa70ce18f", "sighting--3e7c2b2a-3682-4c6c-a38c-5a3f1a3e5dde", "sighting--76d30aa1-c163-466e-a536-97fbe92df471", "sighting--5dc5c530-76b3-4bc5-96a5-10f6136221f5", "sighting--2235134c-250f-48e2-b91c-0ef9cfc63d10", "sighting--670e2c71-3246-41f5-a2fa-a8779fe94c46", "sighting--36462686-535a-4ec4-9548-9feabf3b88b9", "sighting--9eb994be-291e-4b9b-b45c-336b199d4b55", "sighting--ce422d78-0ff6-4964-9f7a-63f4ba64a142", "sighting--a37b3803-0261-4824-99b5-3d7e7c28238c", "sighting--755b2ac8-4a77-4d13-8053-ba5a6b6df14f", "sighting--f0db4227-38b9-4c78-a2d6-61543a93e5c6", "sighting--3546f4af-6ce4-4d8e-9cae-44bb3c96d38f", "sighting--2f8b1ac9-46e7-4fb1-bed4-539ffb793c33", "sighting--d613f52b-bcbe-4d73-9857-8ad048736c77", "sighting--14d5f7ea-176c-4367-ad85-e50887bdaef4", "sighting--c32f54b3-df18-41e2-93bb-95cf6f6cd207", "sighting--2c25b622-6405-4acb-8bdd-61206dec9474", "sighting--3610d6b3-0371-413b-be9b-47668bd3d670", "sighting--0145d5fd-d8c1-423f-ae5c-1b9a2794534d", "sighting--583b34b1-5364-40fd-b90b-f4045f242fb2", "sighting--aaa803c0-a543-4fec-be88-3ef612f8238e", "sighting--11389164-c18b-4399-b472-1ac1b684e317", "sighting--ce356110-5dc6-4e8c-9cec-0c130de31be5", "sighting--12bd18e1-6a09-4043-a694-d003e2f85b00", "sighting--d8073c0e-8ac7-4239-b0df-1312f81d2ea2", "sighting--69728082-3b40-4b5c-bd6e-650fa157e523", "sighting--131bf392-99e1-48a9-b863-e31475b3227d", "sighting--1e36ce32-1f5e-47bb-b48a-9694a811c399", "sighting--9af47af0-148e-4262-96b6-367127d6fb29", "sighting--c785c4ab-2f97-45e5-afb2-0858b16d0569", "sighting--feb089e3-0825-460a-8491-0f6ac4416a7c", "sighting--fde7a1ed-30cd-4d86-a3e0-9f92a9a805bd", "sighting--47286fcf-e676-44b6-bc95-6df83abc5db3", "sighting--c3e3efaa-cd43-4fbb-a243-64f32835e90d", "sighting--47a65a01-817b-49d3-ae5f-565b8b09e130", "sighting--7ca8e2b7-8fcc-48eb-b672-5df4fcaed0fa", "sighting--63c3d476-daa2-4f28-bde4-bf5d39fa423a", "sighting--fd909e0b-fdde-4128-bdb5-30e8f07d0335", "sighting--a17ea5a4-2c53-476c-9da3-7f2f925a20ff", "sighting--4c1f4e24-5b27-4914-9c74-68f98e288ff2", "sighting--8103bf62-51ba-48f7-8371-3fdeeed769f9", "sighting--5a66b82a-acbf-4413-886b-50adfa30dbd2", "sighting--9d3aea7e-ac95-499e-9bd5-e66a98c3def5", "sighting--870cc7be-4563-40bd-87f8-1e822eff3f36", "sighting--e4eb3d88-64d9-49c0-8297-cb11389abf4f", "sighting--055205d6-8e51-4a9d-beb7-17131752fa2b", "sighting--0427bdb1-a8d4-4b88-945d-3d75ca2a8c04", "sighting--48b92e90-57e9-4125-957f-ab5c7ef38e8b", "sighting--58005c90-fef4-4c4e-851d-560b979bf005", "sighting--b1089b96-9b6f-46ef-a8c9-f943092cec6d", "sighting--97dc7426-74b0-4e75-8fb9-e3666634cfc5", "sighting--efbc8f13-e7df-466c-82d6-cefe97707dd8", "sighting--97789ef6-cfc0-4a27-951b-8088b8341dd3", "sighting--f7e76b5a-aa99-4e61-b0d7-87f818452767", "sighting--a19788d3-c99c-43e0-b0d3-fd21b0703ea2", "sighting--e74f5459-f92f-4934-93d0-87f0e566e436", "sighting--9a6ea9b7-5334-4e71-8c2e-36d72dcbbe70", "sighting--3657d5e3-ea83-4567-9b59-8c442930dc0c", "sighting--ad9f9aee-0443-4f01-8778-4202b99294b0", "sighting--4b3ded60-4730-4a35-9974-798d3d82c59b", "sighting--27df5fea-668f-44ec-9b6e-963871909e7a", "sighting--8022b36b-1ef3-415f-9ded-99acee45aa9a", "sighting--d587eb19-b0d8-4b42-9312-83090a7878f0", "sighting--3f5508d2-f177-4661-8d2b-0db7d3a98982", "sighting--949c198e-915f-4ba1-9fe7-f285b8fe35f8", "sighting--c27fed50-08b8-40ad-a461-5ad7e6789a4a", "sighting--e669d26d-48d1-433d-be19-46567065c10e", "sighting--c6eea914-eeb0-42f7-ac63-90986d01d802", "sighting--6b5fec8b-db28-411b-b700-6df0a6fd78af", "sighting--2dd94498-537f-4362-ad66-cbae99bd8b88", "sighting--1c009097-90cf-42e3-9430-7f74dd24bda5", "sighting--88cd2cc7-8288-4118-b6e4-5c6b9235b603", "sighting--f0188680-30b5-4b40-9875-4f69437c62ae", "sighting--1e6bfcb6-0c90-4f66-a7ef-f84e554432cd", "sighting--455f0b2d-9e46-4217-8aac-d28934b033bb", "sighting--d63b2f63-2a6b-47d6-9ac8-30eb9e50f6fe", "sighting--8ec862fd-3ba1-4c55-a8d3-5f4e8b28631c", "sighting--9a0aae9c-071b-432f-8e72-cf255dc525a0", "sighting--428c7d2a-3aa0-423f-877c-444a1cb934f9", "sighting--c35fb76d-b390-497b-a7de-6de8aaf72432", "sighting--834cc664-eea7-48a4-a81c-828c0334a2b4", "sighting--fb52b4aa-3939-4925-9187-18a3e7808894", "sighting--d0d54472-32d1-4d9f-8c61-4070d4b6f82e", "sighting--2d378a80-e084-42d4-8b6d-54d9bc0a4891", "sighting--5f332aca-fdf6-4a81-aed7-73a3d3500365", "sighting--8f4f83cd-f011-4dab-b551-a1553d66116d", "sighting--6bb52cf9-2c50-486c-96fb-bb0686ca79d3", "sighting--7dcbcfc0-6807-4846-b2d1-6e84ca1d4dd1", "sighting--adb9e3bc-dd8b-4064-afde-f459ee05e823", "sighting--01da953e-7a39-4251-8125-18441a13ed6d", "sighting--4f6770fc-fc75-4761-be74-cb0a4e5944c5", "sighting--4f253211-b941-4e03-8c85-db67bc5a9ef0", "sighting--e6509a6d-d291-4656-876f-d95488e29727", "sighting--255f01e4-dee9-41be-a987-abd62145c38c", "sighting--cd16d2a4-fd62-4624-88f9-5cba0bd3cbf5", "sighting--af884b0e-9856-44c2-a3d8-0ab584b5f155", "sighting--72d98bda-7e06-47c9-b02f-18f3ae6d1d32", "sighting--ef8ae9cf-5b01-4b33-a728-5215fe600a38", "sighting--47730c37-6ab8-431e-ad53-75b8f8552083", "sighting--1d7c6705-44db-4043-9b2f-93b0ee964993", "sighting--6e71318a-c7f7-4cf5-8ab4-8cfe0423d0db", "sighting--5181400c-6b03-482f-babb-07d85c7ecf1d", "sighting--725f2584-f8e0-40d5-8ab7-918c5aeefaf2", "sighting--0368864c-e98e-46d9-8a98-ab1eefdda81d", "sighting--489fe6b8-f929-475f-8079-e6d776cbe255", "sighting--84c76ff5-2865-4421-8bf4-b991833f75fe", "sighting--813c1741-7ce5-4524-a52c-cdec7697c06c", "sighting--06cd1f8e-5519-45f7-8ca0-05a0de40bf0f", "sighting--5d11bfa3-1fb5-4d7b-9c13-0cc56b5f3fd3", "sighting--766d3cc0-e2bf-4d6b-8b89-8736a43aa904", "sighting--6ff735ba-4e69-4d2e-8da7-2e4fee3b9564", "sighting--b554975b-ef91-4443-8e82-8e316c8aa28d", "sighting--9100eb62-071b-4710-9e21-d41323bef959", "sighting--89c3f515-288a-44a0-b1d6-abdef2dd59ec", "sighting--aa74748f-6f3f-4d70-b83a-fa5ab473e9b3", "sighting--2b663b2b-3543-4199-be12-f1ff214e5e04", "sighting--1a1a8730-12be-4dd9-a900-f12f18592f33", "sighting--a5cfc061-b726-45bb-9df8-63255dd86938", "sighting--23d4afe7-6495-405b-85fe-cb909fcf90f3", "sighting--8f965fe4-d5d8-439d-9b2e-68d115ae364e", "sighting--8cf2d2d9-a2a1-472d-b18e-09cf7b72353c", "sighting--7e5b7b11-f82f-4985-a176-f7ce52cd8bf2", "sighting--3a973162-6e00-4b9c-aa66-ed4e00048bf8", "sighting--4ad266a2-d33f-479b-8cf2-8fb2df9d31e0", "sighting--8ac04929-3a09-48d6-b908-256402a485ff", "sighting--d62e430b-2971-4d45-8833-39c591867ed8", "sighting--c63b3d35-716e-4753-99c9-08a7d3cd2376", "sighting--e2ba6309-c880-42b9-a872-4edb7880d50e", "sighting--8b4bda5b-4927-4af2-a038-450bdeac1c2d", "sighting--616a92b6-b648-427f-9aa9-aff94331ab46", "sighting--1781a5a2-66cc-4ca2-9fb6-70ff1f761974", "sighting--292887b4-34d2-48a9-9197-412124833b5b", "sighting--37e4f36b-18d7-4daa-bca2-c2e11b28a820", "sighting--451dbfeb-fe3e-4152-bfc1-7d368068f935", "sighting--c1d5bc9e-4318-47eb-bbf2-1c9aa0ac6960", "sighting--b371fc1c-a833-40a0-a48f-547e81f8bcb6", "sighting--8a0aa9b2-7e3c-45f8-8b15-d66286cd3775", "sighting--cc05773b-16eb-4ff7-abda-4c461c1c0974", "sighting--55f86f20-197b-4909-b8a2-1990744ce50b", "sighting--a196ef9d-ed56-4ceb-bff8-836126d816d8", "sighting--4fb56b9c-5049-4f25-8492-f57b6dbb0d5e", "sighting--00d827a5-c694-43df-828b-51acf5cc439d", "sighting--70a1e989-7cc2-42a8-aa1f-2bdccc85762e", "sighting--4cde43b3-d8e7-4508-a95f-ec2e1b6366e5", "sighting--8a2e4af8-93e2-4a50-836f-85a8bd0f75fd", "sighting--9ef13a22-36fa-462a-ac1c-b524911403f3", "sighting--8d8955db-2181-4f20-8b55-4791fe4f6665", "sighting--1b724e5e-b14b-4ebf-9f97-af24eced0942", "sighting--04018021-83d8-405e-9097-571244e9b093", "sighting--6e38a974-6194-4c0d-a18b-1a85dfe8d610", "sighting--982ee3d9-e328-4f9a-8de7-a3eb158e9713", "sighting--85ebfcee-393f-4c3a-b64b-2161b01c7eba", "sighting--04640b93-f2f2-4117-9e5d-656abce1668d", "sighting--9b73f6d3-6340-479c-b124-f8141c0c5f49", "sighting--2d0e6177-7e05-4625-9cd9-ebb0f0958109", "sighting--edf143cb-c794-4616-8f16-94677474d02f", "sighting--95589ae6-fdc0-4c7d-84e4-383f1f004995", "sighting--900fd3ae-5602-4c54-80df-0f27d9d11463", "sighting--cbacd808-210f-4cd9-be77-490f328c31d0", "sighting--17e317be-066b-4c2b-a5b9-26ff8c54b53e", "sighting--f7d918a2-9283-45c0-a00b-5557eb48d94c", "sighting--903bfa6c-fe8e-4b6e-b145-9ae6f42fb89c", "sighting--aec76349-1fec-4c91-855e-9744dc4a142a", "sighting--e2e2a2e8-83e4-4bd2-a41c-963a4b0b9ec9", "sighting--eeacf01b-d78c-48cb-a410-a439af104fc8", "sighting--21de6ed4-ca8e-4891-9a05-087e73746092", "sighting--ca55a439-64e0-4bdb-b347-003981e97206", "sighting--29d76afc-7929-41ce-83e4-41076220f751", "sighting--c7da2c33-6455-47ba-9523-03f6fe9a699d", "sighting--e77ba20f-2ee5-4481-b339-37f0522e7ea3", "sighting--0ad6a1fa-c1e5-4a7e-8a9f-7ee363c250bc", "sighting--57bbbab1-0af3-410b-b39d-5e42c8c96426", "sighting--b131b2b5-41d4-4756-97df-6fe684548a07", "sighting--b83811cc-241b-4d90-a9d7-2c40691a4a19", "sighting--0ba186c8-c1aa-4538-be9d-433db556f9c3", "sighting--9ce475af-306c-46fb-aba7-ac4d7d35a46a", "sighting--c789014e-c265-4160-a539-a56a9ded2de9", "sighting--2fd79f93-a682-4035-a19d-3ff7285ea550", "sighting--eebc91e5-51cf-4245-a1fa-c10978e2516f", "sighting--30e1b6dd-fa29-48e1-8272-f7e404267b05", "sighting--92570c68-8f10-4f8d-bf63-3ffdf29b0879", "sighting--01b013a8-4a9b-4373-9a5f-3882c1dc6388", "sighting--b50f4b19-ee72-4c96-9367-ab52f856409a", "sighting--2e97a28d-1133-4266-8f0c-679c763e0e6f", "sighting--fb6026ea-329b-44ea-a445-812decea7c37", "sighting--b9ffe2f2-2617-491b-96ef-422f156dc258", "sighting--e16837e3-47db-4386-bf09-0af11ac30156", "sighting--3c485933-c774-4d8c-be6a-c52519f6079c", "sighting--fa95ff5e-13d2-4b75-8f35-a6254a5d1ca9", "sighting--583bc025-b3ee-4acc-8810-9f7099104ba2", "sighting--af20bca1-69ff-4462-9fe4-2be95ec7fda1", "sighting--8bb31070-647e-4133-8d8b-0f5bf7f9d9a8", "sighting--bac27455-2687-443a-b724-06358fec7ceb", "sighting--1324894c-c52a-4521-b888-462302487b8c", "sighting--8eb97106-af24-4c88-9e84-790f9c52324a", "sighting--6ab21d43-0875-47b8-932e-69d7480d5bb4", "sighting--3b10bd27-c266-4505-ab3a-d5852b1e946a", "sighting--db503a4e-bc69-4c6d-af04-0b9e4dc6ff39", "sighting--5ab334c8-2be2-4b45-bdc5-d002dfe0ee7a", "sighting--ad4518e7-0ade-41eb-9177-c3611617e2cc", "sighting--6c1f7384-a287-4568-aff5-799caf202533", "sighting--a72d256c-a661-4629-bde8-f2e2eddc941f", "sighting--e77ebe07-af98-4f9f-87ec-da5586720d73", "sighting--0f6eb174-5674-49c1-bdc3-349cb8647976", "sighting--6b2b0b65-3514-43e7-aee0-72ab45d62761", "sighting--c3aa4b6b-6353-4a0e-90a0-28c80d99f841", "sighting--98a14908-9c24-45d0-bb63-37feaa7f5dcc", "sighting--8dedbfdb-ac8a-4d3d-8fec-980dce328e2a", "sighting--5ae7e66a-86ef-4028-8e80-46249d450f39", "sighting--54c5b11f-d8c9-45c4-80a6-f5fada1bf539", "sighting--a63ae7b6-aa2d-4fcf-9c90-cd9a6e45b562", "sighting--a43211c7-0eb9-48f0-945a-ac2c7bda3f1d", "sighting--909f14e8-4414-4f53-aa05-1ed16433ce9a", "sighting--610d8e1a-432e-4ce9-8b47-11bb89cfe166", "sighting--2f1602b6-1bbb-4eec-816e-a84c4b77bc98", "sighting--f8d6cebc-8499-4f05-857a-2316f2ffce95", "sighting--659651bc-b6db-41aa-8290-36d06a835f85", "sighting--adea9c59-3d95-43d4-8091-75b215166793", "sighting--1d64eb1a-fe50-467a-af3e-3aaa19bbc0a9", "sighting--ad4b7da0-91d0-409a-b9c7-23503b5b64e6", "sighting--bda31f82-2fa2-40bc-9bdc-061cfceaf5ae", "sighting--c1541cca-b3bb-4349-8df7-20bab12bb1f0", "sighting--5ea9fe4c-3ec8-4c8f-9b9a-af0af03e4566", "sighting--a275e428-e9db-407a-b944-83952c0d77e4", "sighting--9d4eb9df-b4be-4d11-bea6-db01c874821f", "sighting--0f45598a-b940-4d09-9531-58132abe3b40", "sighting--7882cf0f-7e34-473c-8ea5-a299ec9376e3", "sighting--944cc0b0-43b3-4e92-a3d9-09e739d1bf8f", "sighting--013a7b80-445e-4203-8c52-ce72ea747f98", "sighting--ed05fe16-d125-4b0d-af51-eedf3d803198", "sighting--d7ad41e6-c12e-43a0-b898-e82fda220112", "sighting--5f95fbe8-6f79-4561-bb7f-0e659e276ed6", "sighting--301663a4-6dfe-403a-960b-c24022d86c42", "sighting--357696e8-0426-43e0-8f68-243bc6ff3ea9", "sighting--32109580-5497-484a-8c9a-0b52d9db3a22", "sighting--641d046a-c053-4bb1-9b19-95ba772912c1", "sighting--852b70eb-b415-4c10-a5f9-41e1166ba3be", "sighting--2f6e18ae-8fb8-42f1-a0ea-829bb10c0248", "sighting--85a580d2-c742-4be3-a17b-cb08a66e84b9", "sighting--5d10f85e-6788-471b-9240-cb2c512cad0a", "sighting--695f642a-4e67-4e46-b551-f06c37720c76", "sighting--f119b5f1-738c-4f0e-bc9f-24f34c6e532a", "sighting--057f69b7-925f-4734-bc16-dc4564fc0c8a", "sighting--51ea3e72-1970-4115-8b7f-184e9d7a6f49", "sighting--c0834640-716c-4667-8c58-5ac4adadbcd5", "sighting--706a7d08-149b-4f4c-8161-35804a3667d9", "sighting--97a79b46-3e5d-4f8d-9aca-03f1a475c386", "sighting--abbd53b3-b03d-4b25-9567-6441268c3b19", "sighting--1efb44ef-f764-41db-ad68-2b9e80d7c2fd", "sighting--50f45037-576b-4066-987b-d11d9a180ce5", "sighting--21b861ef-cc5c-4866-b86a-a8230343f96b", "sighting--5d552b65-feb5-4840-a16c-d56d0664503d", "sighting--e754d756-3d32-4299-a94e-da8b4460f295", "sighting--1bb14f08-975b-4bf3-b9e1-78f6747ca293", "sighting--fd7b89bc-2e86-40f4-bab6-cd5b6a50463d", "sighting--688c3c2c-feb2-4c70-af78-fb41c6d4e0c0", "sighting--111f209c-5bef-419e-91b7-262dda68e572", "sighting--598cafb7-76ca-4ae8-b98e-356a7034a410", "sighting--431c57cd-2fcf-49b4-91da-4fb4dada3dd2", "sighting--0c01bc10-420b-4a98-8904-5d872f860094", "sighting--8cd4f408-d649-4b10-bbcb-dd187ceb83ce", "sighting--8d057114-5835-4ae7-942b-80483c57cde3", "sighting--ead4297a-437d-4b97-ab0d-d3e893a03b73", "sighting--32455ab7-609e-4ac2-ab0c-a6c653197cc3", "sighting--e15302fd-9ecd-4c53-9314-6971ef51b1ca", "sighting--05186998-a6fa-4b70-bb6b-4beecb8040fd", "sighting--262c546c-968d-42d8-af3c-3cfd30269bff", "sighting--0b8fb278-a026-4884-9095-96d12265f098", "sighting--ea7e1f28-bc03-459c-a0e6-dc98c80e332b", "sighting--fd6b5968-e5db-44db-a98a-2ad1aca3e5e0", "sighting--51c63327-7a34-425b-9a1a-8e3350d32f38", "sighting--f112b4ce-2048-4ec5-b728-fcc94d3b6c1a", "sighting--dd95d16e-932e-47b4-ad17-edb2c758c5b1", "sighting--fea1507f-84a6-4c32-a397-dd65376fecc7", "sighting--b8de8264-6cf7-49b5-a43b-c2a751762503", "sighting--9007fb83-3960-4480-92be-f2269257d35d", "sighting--e60fdaf5-9b32-4e6b-b6a0-ab87bb7c4cb5", "sighting--cb1f20b6-7963-4717-9b16-375687691a87", "sighting--86196df4-8761-4beb-a086-43720ebbe465", "sighting--25421db4-d6cb-4c42-9f2a-a494cf455541", "sighting--63debab6-460d-464d-bb13-baf84577c47d", "sighting--94180bfc-1411-4b82-8388-6c1865bd840b", "sighting--52cc3dbc-cc8f-4536-b29a-41547fcb203a", "sighting--5296778f-49d6-4f7d-8a45-d39ae0dc97f7", "sighting--24f62bd0-7c25-47a7-95f7-25b6a93c3e6a", "sighting--e44d4873-c070-436d-be09-09c0b393592c", "sighting--4bc6d4b9-f1a5-45b0-b011-e7650f99e89f", "sighting--f75a6376-6517-421e-bbf9-81e24a7cce0a", "sighting--0ef6c7a2-69a5-4ee7-a1e1-d17e4f5d0fae", "sighting--934bdb06-b3e5-4343-bfb9-9735a7d57108", "sighting--86a4bd70-81fc-4435-af2d-3af99367691a", "sighting--1304af87-5d5b-496f-98e4-f16f6411333e", "sighting--ff1c5a58-0c6a-4b81-a4b7-582113f9bd30", "sighting--3673a9bc-d8e0-4490-89bd-946e97269598", "sighting--f05598c7-46a3-424f-93d5-bd305c51aa70", "sighting--da2ed247-8e3a-43d1-9edb-efcd41e80d53", "sighting--2a1ecf10-42ee-4034-b8ce-8273b59d8896", "sighting--cf4df8ef-07f4-4632-b7d6-3a83ca25b26a", "sighting--3c0b0849-008e-476f-988d-84d14a828070", "sighting--7217a0ee-b822-41e6-8d8e-80465205c8b6", "sighting--a71c6eed-58f3-4645-9153-791df9b1b6a3", "sighting--db2b7fb0-c223-4665-8b8a-cb2ce21d652a", "sighting--3f000bfc-d423-4cfb-9d34-dfeb43067ace", "sighting--a5bbafac-fde6-43aa-ba0c-b096ca5b44d2", "sighting--57417fdd-b77c-4a4b-a96a-5ee31226fe69", "sighting--a94f0eba-90c6-4b22-b10d-9b37e1b74704", "sighting--e37f7201-51da-487e-97a7-7feee329b275", "sighting--139c6292-fe0f-4557-9de9-ad010ed589ef", "sighting--7860ada7-e7c6-4978-b0ad-4ec3d7ea8f83", "sighting--ce1fa84b-3e0c-4920-8185-46980c04dcde", "sighting--e823dc79-402c-49d3-a44b-2adb15dee8da", "sighting--8c5f2ef5-18c5-4c48-ae80-ca1da5c78709", "sighting--15548159-92e7-4ed6-880e-5e5d86d2d5d0", "sighting--979dbda2-6f9a-480c-83d7-f8642d569176", "sighting--b05796d8-0f15-4b31-b8ae-3532df2b06a2", "sighting--c9231390-4653-4ae3-bc51-31a538a42065", "sighting--7a5e2761-8f0e-44cb-96c8-cb7597fea683", "sighting--775d1b0d-4102-4bae-bd12-207e61ea1a0c", "sighting--d52ad3a6-097a-4f09-98e2-45928c9e57a6", "sighting--1928d0f9-4843-45c1-9005-d2d5bcc40666", "sighting--9218c78d-4bee-408a-afbc-37c75e50c4bd", "sighting--3f3ea95f-fe54-4816-b406-c1b5d178e3e2", "sighting--5668599a-a39d-4e15-9951-c556af546d9e", "sighting--01e4f0a2-67c6-43c9-be89-cad38adb4e91", "sighting--976b0cf8-dbc4-498f-bd6c-f271a9401c1e", "sighting--06189fd9-3247-4918-95cf-574a9e74f4a6", "sighting--8645524b-c2aa-4a03-a759-1d66065cb2db", "sighting--99221dea-d25b-45eb-8d2a-dfb675e8f9f6", "sighting--77f14747-7a27-4beb-8f0e-f009c497ad2b", "sighting--a77b6fa3-3d72-4103-9037-282065aa2ca0", "sighting--498fad4c-352e-4884-8f45-6ef4d5439ee4", "sighting--f3a0a435-5402-4e55-82c7-ac50e70f6a90", "sighting--26b89823-8f57-485d-bdf2-c2ff42f5a0d0", "sighting--3d5b5fec-7d5c-4150-b607-dfde2d6c95ae", "sighting--3880ba44-e6cf-40ec-9614-c01a2dcdfd2f", "sighting--e973620f-42c8-497c-b68a-badc74ba867f", "sighting--a15a654b-e346-473e-ad68-ee8fd84b0d91", "sighting--75b2e241-ed12-4470-8b6d-ef2ae8266b40", "sighting--84782798-b5ff-40ed-a5e3-2c12eff8afcb", "sighting--4647156b-b942-4b98-a6c9-e1e05ccb3a93", "sighting--70bd8d86-17f7-472f-a8c3-81992850b014", "sighting--5465dbcb-e85c-4113-ac9c-ae4addf1a600", "sighting--9370f710-1299-4ccb-a94b-b8d1e3883c80", "sighting--5eceb66d-b85b-44f2-8eb7-cdb4f668788b", "sighting--bc557002-cac2-46b9-bc43-e505fbe978c9", "sighting--beef3470-0d26-4b89-8097-2d636fb812a5", "sighting--727c2388-90b6-4e0f-baba-fce62f0a037d", "sighting--cde2b329-e6ee-40cc-a143-79717139579a", "sighting--baf5f30c-0032-4f24-b087-d89f05c236eb", "sighting--f2f0c73d-656e-4316-98b1-73ff59b19803", "sighting--80b6e384-72bf-4293-b34e-b8d06068edf5", "sighting--15848ecd-b7fa-4da9-afc6-96826a057e5a", "sighting--52bde9fb-4c25-4496-87f3-fc6f71154985", "sighting--ec0a138d-cdcc-4c38-834b-1a93f22c0edd", "sighting--d9ac7820-9b54-4403-8fe1-798dd3459e18", "sighting--1ea02791-5d4a-4ae9-888f-e2268172ce12", "sighting--fd6bcdcb-3ad1-47e9-a7c7-24bf23a2d683", "sighting--4aff041c-d5af-4b85-b4dd-7a78c1f7b2c6", "sighting--87409bee-f88c-425c-aac5-652c14f11a9a", "sighting--ea403857-f9d3-4917-bc7a-abcbd7e87af8", "sighting--4631697f-1c53-44d7-88c9-cd41aef8e649", "sighting--5fce205b-5200-4642-82a9-cf8f2d677a00", "sighting--1134ed8b-c5e4-46a3-8d5f-593c5dfe1382", "sighting--dd6211e7-a8af-421a-9d18-a68520509df6", "sighting--15f95e85-7b5e-4b24-a158-efe2799c54ef", "sighting--7cd34a5e-20ee-48aa-a7df-a314698fbcc1", "sighting--37083fbf-af9c-4532-9ff6-7eeb9b8fda62", "sighting--db5e0910-0c06-48d7-8697-d42c1e3cd55a", "sighting--e242adc8-1083-42eb-8dd7-9b329146e32b", "sighting--d38c2f03-daa3-4b77-bda8-f5cb3f5ce8d2", "sighting--00561640-4033-45e3-82b6-fc99be74ff03", "sighting--25fbcc4d-b81f-4f1f-812a-9745a04c34b2", "sighting--5479e736-bcdc-40d4-9490-e71d62ecb8c5", "sighting--11ba8594-957e-4c90-9971-31b63b59ed92", "sighting--4b993251-bb38-4262-a3dc-830ced9b9c99", "sighting--93b98646-59ff-4aae-b767-6c5dc5ff9c36", "sighting--46189b1d-0fe7-4fbc-b414-c1482cfba9a1", "sighting--ffe283c3-ebea-4e1f-a4c4-71aeda4053ee", "sighting--d78b28d2-814d-4ad5-a70b-629812f2225c", "sighting--8c7301ac-e046-4dff-b082-1febdfa46363", "sighting--3f9009ba-f960-477f-a835-ad4d4bc83da8", "sighting--92cb69a9-a818-48dc-84f2-54ec25494d47", "sighting--e6ea8455-360d-4d49-a99c-6b85f1bfaa62", "sighting--4b13b227-3c43-446f-9283-41c21c7fbd2f", "sighting--36e3b087-c179-4e99-a72a-9b9e3d01ad8f", "sighting--fa829f5f-a412-4a73-ab4f-a3d54cb7f842", "sighting--8e30ae00-a0f5-44d6-babb-4ebcab1c2ef3", "sighting--955a099d-0513-439c-b2db-6eb815e2acdc", "sighting--f8efe0b6-2193-40a9-a856-47494812cf81", "sighting--b6d23bd0-ee2d-4cd0-a1a2-451d0fbab732", "sighting--92ca885f-4cdd-4ab2-b54c-84cae82f45d9", "sighting--0ee56a06-3db7-41ab-bdb9-a173351caec3", "sighting--0f05792b-0374-4e90-b9af-4a24baeb685f", "sighting--085c7dfa-6024-4a0c-aadc-c1288aba3120", "sighting--d7ee5e53-87bb-460f-b04b-dd00577af896", "sighting--ded5c1f3-d783-41e4-91af-aaf007416287", "sighting--69f10e5c-f6ad-47b9-819e-c4dd0343192c", "sighting--4875367e-95b8-4950-96a9-f96eb0ef6cad", "sighting--4a84998f-ea36-4f13-a8df-d6572360eb76", "sighting--2fdc7fd0-0834-4041-b3c8-db84bccce2d6", "sighting--fd73adc5-8e18-4943-97d9-02ece485c1d6", "sighting--d20b88ab-b496-4abb-bbd8-e7eb190c9230", "sighting--86b3d26c-589f-4c94-84ae-777049ced24e", "sighting--ddb6106d-cefc-431f-b9ce-3ff81fe48073", "sighting--625c5661-e575-410e-b909-b2a72e1162e6", "sighting--240a3324-649f-40fd-9363-aadd1c447cac", "sighting--6036d8ce-057b-4576-b5b5-f2a71c36ba18", "sighting--e451bd96-dc51-4943-b381-12fb0476c28d", "sighting--510649ee-e37c-4704-8c78-467f3fd157a8", "sighting--c84c1071-63fd-4aa3-ba6d-088ee1865ed7", "sighting--fadc7ccb-642c-4d4b-8310-93ccd77073d5", "sighting--948722c5-3ada-4db1-b158-1dbde852f556", "sighting--8f6cac44-3df4-45ba-864c-d3389a767d67", "sighting--2dd6c3ef-8e9e-4da6-89be-38883b8cbc07", "sighting--bd58fedb-914b-4e98-bb98-7442a01da194", "sighting--9640e097-337c-4bbc-8941-1f1cf7a5a7b8", "sighting--a9b2b305-978a-4ff2-8751-b04ff05fbc9f", "sighting--c8bf6de7-86ca-4440-8e82-34cd24482104", "sighting--0b789486-881c-4ebd-9fde-76c80159cca6", "sighting--a8747c5c-e051-4e5c-881c-7d60190e99ad", "sighting--ffd05f19-f41e-44f9-bb63-ced6365d0f3b", "sighting--826d2653-8425-4a39-ac1b-2d550a88eca5", "sighting--2e54d073-26dc-485a-97cb-3f09496a20f0", "sighting--dd421733-fa59-4925-b0e3-94e83acbfe60", "sighting--bfb7302a-7a2f-4217-afb5-a6cccd538d12", "sighting--c410eb3a-dcac-4330-a7eb-971f63ea09d3", "sighting--3d370f37-23c8-4bd1-a95c-7c6b71c93860", "sighting--883d3e21-7bc0-49d8-a6b8-e0d98e2e740c", "sighting--44c5ff2d-77e6-49cc-821b-2b6358a8c388", "sighting--723efdac-be5e-45ca-9147-0c57c3748046", "sighting--75d6ed9d-5901-4780-a6b9-64aaea2e9333", "sighting--ab8a00ef-65ca-44b9-8701-adad6bd51ede", "sighting--d94d1779-660b-404a-b0e3-82e0bae73daa", "sighting--bd35660a-aab9-4356-abb4-71d1b098c622", "sighting--45967bbe-a19e-4472-85f5-da0d55b76b63", "sighting--5f9585ad-a629-487d-ad79-fb1e0e48a864", "sighting--adc5c2ba-b4dc-41b0-b5e6-5eac13e4544e", "sighting--df395357-9333-455d-9b17-96741a5f8b41", "sighting--c64c8ab6-54d1-4ffa-a7c1-69e203a2b21c", "sighting--6d6bad0b-1cdf-4825-baff-827970ad8eff", "sighting--a89b19f7-850f-48a5-abb4-4fec71ea1b9d", "sighting--b3f45a13-f24d-4b73-91ce-7339f1a5d303", "sighting--ac5d1098-32f5-4c1c-9cf3-2d379a4cc364", "sighting--24f48e72-5950-4eb6-8f2a-9e2c2fa62405", "sighting--a2fe5831-3e9c-4d5f-930e-57d3ed1a1b2b", "sighting--644692f7-3abb-47b9-a4bf-9a3085fe0d3e", "sighting--2639c20f-70f7-4751-a1a1-e239b1ec9ae8", "sighting--a4106995-cab7-4acc-a3d7-c0e3f78f999c", "sighting--db730869-18b3-448e-90ea-8c7683806a84", "sighting--96af4b4e-94d1-4803-a4fd-c09b5c265612", "sighting--d5c66e06-3dce-4822-b301-df7886d8115e", "sighting--59a7e2a9-6b55-4c50-aed6-67920063f13e", "sighting--2548d952-6890-42ae-afc3-ebcbb671ca5c", "sighting--f554842c-349f-4409-88ea-50a949fca374", "sighting--cc5ae447-0d88-48ee-89d1-54bfe8a26a04", "sighting--211ba457-c2ce-418e-9b50-563029e6cd8d", "sighting--37fc2046-7ae0-43f4-9cb6-bf6923fc294d", "sighting--167905a9-ee77-43e1-9dca-eb220042c564", "sighting--ad205641-5d94-44e1-81cc-138952026dc3", "sighting--9b5aa241-954c-44d1-837d-fecc03171fca", "sighting--5db63bdc-ee0c-4ea2-ba09-d601d9890e2a", "sighting--ceddab38-e441-41fd-a780-9f39dda36ac8", "sighting--80521cb3-dd0b-4389-9ad6-0502007c3543", "sighting--bd2c5f37-3aa8-4954-9236-568cc07b9bab", "sighting--cd08fcb1-3e9a-44ff-b08f-6b79618ab5e9", "sighting--549cb6e1-e0be-445f-9078-901a8cf108de", "sighting--31902b4d-6727-46df-8c3b-b3ae06039f9a", "sighting--40e8c919-1322-402b-b7d2-9c9a6f7373ab", "sighting--b40076c6-9359-460e-95e1-bb06100f0a7e", "sighting--981d46a3-d1e5-4063-87af-cb606a4e2c3c", "sighting--f00c2ccd-1834-4e58-b313-0d5b3622e2f2", "sighting--578ea566-34fd-4ade-b469-34ba5634e085", "sighting--e2339dbe-6436-4964-98e4-b65c666297f8", "sighting--862093df-8bc3-466f-9ff2-35f0f2752975", "sighting--ab4b5b7e-fafa-49ec-a3c5-5b2de7c477d0", "sighting--6b6600c1-bdbd-4fec-a2bd-0227ae820565", "sighting--f23b19ef-e786-4387-8ce8-91ed0614be3a", "sighting--f2b572d4-d203-40e1-8c22-3959dfb733e7", "sighting--c57b566c-b87a-43e1-a278-fa0d4d4e9a20", "sighting--b47522e9-21b7-4b56-8a31-c9fec5407c0e", "sighting--b579b877-a297-472a-b064-a6a295bf67d6", "sighting--93f00869-a303-48d5-af33-a49e18d1fdea", "sighting--d328d3b1-166d-42e9-bc69-5b8711e9ae5b", "sighting--0f54ee30-c2f1-4ea1-b70f-bcac9b462bda", "sighting--778d1bcf-fea7-4004-8051-993296ba9e26", "sighting--00b54809-b9d6-44a7-9e58-4c81f04c313b", "sighting--32dc4390-27fa-4d3a-81ee-3e3ff6d08aa7", "sighting--a72f0371-5419-4e8c-b758-2060acc40216", "sighting--7c83030c-127a-4b6b-a390-87cb92d6c3cc", "sighting--a46b1329-a61c-4dd4-937a-ee2fc5642778", "sighting--2b37486e-a941-473c-8f21-75b799c14e00", "sighting--8f32e1bf-c105-4fe7-ae4b-94ef068c0bae", "sighting--712ea549-c5d0-4bd6-b523-30320277ec1b", "sighting--25f1e973-2b80-4f75-894e-d98afa718181", "sighting--20620449-b534-4cfd-9261-637706dbcbdc", "sighting--82cce3ae-2165-4c19-90b1-8777d88c653c", "sighting--c041a1a5-e8e5-4c9a-9032-82bbafebea69", "sighting--63526fe5-6de5-4814-b5e0-a0d0e2ea44af", "sighting--b76d3acb-e246-4c5f-91fd-abad51c89e3c", "sighting--015fbf10-a9c6-4a39-a60f-28cea534dce8", "sighting--21b85456-6b84-4cd3-af77-e8516b4560ec", "sighting--6e1e91d2-de3c-40bb-8aed-8feaf9309bdf", "sighting--37f791f6-2051-45a1-b134-425459fc6ff4", "sighting--cbafe9af-a458-470d-b0bc-9b641f5b49e5", "sighting--d77f76e7-9f95-4600-a805-0ed4412e4fb8", "sighting--e875780a-3a20-4ec0-8804-a717fb3fd080", "sighting--950683b8-72d6-41ca-afd8-58538d2150a6", "sighting--dfac45f6-4d67-495f-8855-5a29ceafa00a", "sighting--f963009f-a675-457c-b760-8d74e8ec4cff", "sighting--0b668cc5-5969-4e2b-984b-aa9e2f291bc1", "sighting--a39fbad7-110e-43b6-a966-96fc1a51bcd7", "sighting--291f39d6-0522-4cca-acc3-9e965801d1dc", "sighting--2620c30e-d823-4784-adc4-818bbe89ee3b", "sighting--2bf86092-9a1b-4f50-a482-66ea58296692", "sighting--6931b0cf-2773-4949-a13e-df15ef41cac2", "sighting--bbf70c61-0e08-4945-a7c5-e854705d9e48", "sighting--614fff1a-9ada-440f-8e7a-9e22dc18a2be", "sighting--b8e0b38a-85bc-4298-ae39-ca2c26bf67d9", "sighting--017e40bc-ae2b-4c57-ba47-346f07c361c1", "sighting--46834e53-3a98-4eb1-b398-d41ec89cc453", "sighting--e1c8fed1-b2b7-4a96-9e59-ea2e57ca9da7", "sighting--9cd2dda4-e3bb-43ef-b803-a0e078f0247c", "sighting--786cb04a-07e6-4424-801f-351d3ab793dd", "sighting--9e43a9cd-aa8b-4f11-b732-84697dcf759a", "sighting--9d15d7a9-03b4-40a1-b9f0-c9a62197bd0c", "sighting--174cd6a3-ca0e-4a98-8131-10cd9844dce3", "sighting--9172c736-9ed0-4b45-92e8-1fe2b5a14e01", "sighting--6fce2617-0c0a-4602-bd48-0f50f428e5a6", "sighting--1622fd07-2feb-4c81-890d-47ba5558da2f", "sighting--1111aef0-6347-4493-b6cd-0ad6cf77d196", "sighting--8af3ce21-4484-44ee-aa97-0e333a35c42c", "sighting--e185d91a-9116-4f8e-bcd6-b431b8ac9193", "sighting--eff9122d-32bc-4668-9bf4-437f993a85cb", "sighting--e23737a8-cfaf-4858-9716-0986d8b82e9f", "sighting--6ea3cf5a-4998-4780-b31d-4ccd3f49bbd6", "sighting--e28f82f8-1a2a-430b-8132-18e239fb810b", "sighting--f6eeb7cb-82a0-417d-979a-ef9dcc2c6a1b", "sighting--c15ff074-afc6-47fa-934c-f6deb4e3a96c", "sighting--2f377aa6-f6d4-41bd-8263-f79f310b935b", "sighting--18398e6e-da87-445e-8d8c-abf47abfc8ed", "sighting--c72aa1f0-b1af-4b5f-b47f-16f29506caad", "sighting--a03cb324-e194-4676-9de1-66d520c6d9b8", "sighting--0695b772-31ae-4641-9d4e-25b1d52d08ae", "sighting--29431c19-edc9-44f2-979f-c897abcf3706", "sighting--08413615-74ce-4fd4-ad41-64d7570770bc", "sighting--50ba6410-c3d8-4133-9321-7739c2718a35", "sighting--d54a5ab3-c1ba-4fc4-a811-791ec92a530e", "sighting--9073c87f-3009-46e3-a588-5793c5796fc6", "sighting--bf947ec2-aaf4-4671-8f8d-51395cd7175f", "sighting--d8be63b9-57f9-4302-b54f-f5fd9b4827bc", "sighting--79e8aefa-48b9-46fd-88fd-775db46bb728", "sighting--7c054384-0623-42b9-b69b-e6f3a48792ea", "sighting--39aa4c49-2d97-43ba-b007-b95083ced4f0", "sighting--2f138ac7-3f2f-4c3b-9f15-96f70d4e159b", "sighting--85407cc9-0b41-4263-8c63-f8fa9cb9f4bc", "sighting--14cdcdb3-a575-4b46-9a6e-494d3f7ad0e5", "sighting--9ae90562-9187-437a-8b9b-670647943094", "sighting--55eddb98-7e0d-4824-957d-ba8512f56509", "sighting--97c894d1-cd74-4b0f-a3e3-61383eace09d", "sighting--f9da2703-8afd-4fa3-94d3-1a480f7fbeaa", "sighting--25f17775-6b7e-41da-824b-4c71dd2d5a6b", "sighting--eef1aac5-7436-4aea-8e48-42885dd01f8c", "sighting--be86551f-c5fd-41a5-b5c4-e89cd5377d68", "sighting--155e2bc0-356a-4c8d-9d1c-d9a6dcd76314", "sighting--2f6cecb5-1adb-4302-a6bd-b868f7fec968", "sighting--fe80d899-f082-4d27-92fe-6408a2393c9a", "sighting--ff5a4e27-b162-47d6-acf4-d50701738d2d", "sighting--cc1e9224-0439-4775-b439-b40572a8f631", "sighting--93194630-032b-4d6e-b0d4-ba5392731d13", "sighting--a8f2f9c2-f0c8-4c1c-865b-6e00f7585536", "sighting--fc5554c6-d6f1-4d03-918f-33dd8458878d", "sighting--4bb5a99e-582e-4da7-930d-91e95bf7b9b5", "sighting--09b3ee98-c6e5-4109-9915-512619748372", "sighting--07e32c2a-262d-4824-a2ce-ea4105598726", "sighting--0c94773b-68f4-4477-8063-f2e63f8b4c1c", "sighting--0c0af506-b55c-486b-91c1-076a0aedf798", "sighting--9da16966-abd9-4b7a-989f-19d305bd7faf", "sighting--78a2a3c6-3262-4b8a-b135-4e0f2c88669a", "sighting--c739b6a5-3b74-4e97-9612-7273c0eb57fa", "sighting--5488c1a4-e7da-441f-bf40-95f9cea7cf3a", "sighting--34ea27cd-c344-4d36-a30d-d73e28299e10", "sighting--98936f7a-3453-4bb5-8996-1429731a0d38", "sighting--3f24c20e-3209-4132-ac44-3af3dacee1d0", "sighting--84e3b56f-2580-4608-bb97-3122456a2674", "sighting--f737dd32-9f9b-4cab-b702-d789cbbaeb1e", "sighting--03abfc51-fe6f-41fb-8928-19fca45cd140", "sighting--76812f1a-aed5-43ec-b982-5ccd164ce6b4", "sighting--ccc7bd51-73ea-445e-9265-b1cd32046459", "sighting--49cf4f69-334d-4ba0-82a9-89f03f53e47c", "sighting--4ada5bc1-bcba-400a-8817-3b640c0fffd2", "sighting--73f7b8bb-257c-4986-95e9-c45999f92bd5", "sighting--708aff0e-6de6-46a1-8e36-39384833f1f1", "sighting--a14e9329-7757-4566-a16f-4f3842fd4e42", "sighting--f90b0ac9-44e6-448c-bb00-383fd36fdc2c", "sighting--ff35a05f-4720-4651-86bd-36fc79587bc2", "sighting--7a81f586-5db2-4943-a506-ec73d71399a9", "sighting--0a03d330-54bf-4600-aea0-23ce22e40401", "sighting--01cac1eb-d6b5-443b-bdd2-2147f7c31281", "sighting--b3ec6d06-6909-4b0d-9a0e-5538d5dfe4ac", "sighting--5d7f7eab-c4ec-4a5b-b9da-75f56b030862", "sighting--c39c08e8-ebc2-4e51-8b89-c93ecd8ef5b0", "sighting--24c1cb2a-24dc-410d-8955-e14225859ce0", "sighting--2c7dfc89-bb1f-4459-ba69-83b548ed7973", "sighting--313ff422-d351-469a-be5a-801d784ee5d0", "sighting--d32214a8-48d8-4ac7-898f-b956cecc21a3", "sighting--f59ec92d-131f-404a-b8a4-545297018adc", "sighting--9cb7f664-4ab7-45e1-b4b8-f50341c074ad", "sighting--a63b8c13-195c-4816-9e81-a286f45040fe", "sighting--77e8ac34-4071-4d5c-a0cb-9590e970e0db", "sighting--a525f4ba-171a-4888-b856-18e28edce3e8", "sighting--6eb1618e-ea20-4c95-9f9f-a7f51a881cf2", "sighting--1697522b-1bc3-4a1a-92ac-61ca4fc4f1ed", "sighting--33a10879-0069-4ae3-8dd2-777fc0ee0e79", "sighting--963028c5-1c8f-4f1d-82d0-73911c780d11", "sighting--e095d36f-7de9-4c96-94b9-84471dfadf11", "sighting--9a995617-5b2e-43e9-8253-7332d7f11c8c", "sighting--a9047c17-7622-4b91-9ea0-2cd0f6499e07", "sighting--491dd39e-6498-4409-9eae-fe8aa7cccf00", "sighting--d6f401ac-ace7-4d2f-bd90-cfe73bdcb517", "sighting--d0115d7f-ad1c-412d-98b4-e9dc81dcdca7", "sighting--6fc0eff4-5468-477d-b4d9-c4e848b7c8aa", "sighting--ca455467-bcbd-4887-b142-232817eac02b", "sighting--eb1d79b5-0814-4d84-8b1c-9dab0449154d", "sighting--d7d1c4c1-1e43-46fc-bc70-0c502d2ecb66", "sighting--b0a3c9ab-4acc-4b40-bdd4-7b28c28cea08", "sighting--3621ddff-dd9e-459e-94d4-745833a41c0d", "sighting--d1c5d610-876e-4369-ab37-cbab1c0ce568", "sighting--fa9ee74f-8e68-4952-8ebf-5f07095d8399", "sighting--41759ff4-cafb-4641-afd6-b46d689a0fc6", "sighting--c124b377-1377-4c8b-99e3-d8dd8e1dedb6", "sighting--7d4afb4b-1968-4f03-a5e1-81a955d286b1", "sighting--eea03f86-fe14-41fb-ae7c-28e78f5268ad", "sighting--ee75e397-bb6d-47be-a09a-dd26ecd6b45c", "sighting--4de2b09a-334a-4f30-b579-5730918e4f81", "sighting--4da16d4a-ef05-4fbf-acda-590a4fbe4405", "sighting--40475456-1871-4da9-bf9c-121c1ab1c9f9", "sighting--087c4c50-16f1-49ce-84e6-513a7a005254", "sighting--122440c9-8ac3-4a0f-be50-0a44232527db", "sighting--bb25bfb6-2261-4ef1-a70e-b267892a06ca", "sighting--39442ca9-5b5a-4bb1-96d0-abc17b0244e5", "sighting--5e0eee16-4a92-4b5b-baa2-89e9b0814ea2", "sighting--449fb339-129a-4218-af4f-5a0c8a2eb5be", "sighting--e28b7484-3f64-4533-8900-4886d993d2e9", "sighting--3e7c6a2f-cc30-42e5-b52c-1da05bed4b2f", "sighting--a1a3e35e-0759-4500-a33e-d87d9bdefdaa", "sighting--4066f144-9ae3-4c40-a70e-5a39a63862a9", "sighting--122392d9-1abc-42d5-93e9-fe6ee477ce98", "sighting--f2a04120-68dd-4fef-a8b5-b97294541136", "sighting--3749586a-5e9e-4484-8718-55739e626686", "sighting--b8d4279f-4a91-4b0f-baf5-2685d539b550", "sighting--344f4ab8-ec05-4bb6-9c9a-96dcd0812904", "sighting--dc625129-2f14-4b59-baa9-1d4296cc57ae", "sighting--71577e37-a5fa-4e4f-bf1d-1ec232daa410", "sighting--c55c707f-612d-4678-82df-cc168a5a800e", "sighting--fa1d0e26-5fdc-4b30-b3ab-52c68eb74ef9", "sighting--34c675d3-2936-46b3-874c-326281e2e012", "sighting--cae56fcc-c618-4d76-897f-c949c8bb39a9", "sighting--7dfd838c-3cd5-4e6c-a496-76737bb993bb", "sighting--26086595-54fb-4092-aeac-63bf0b2b8b54", "sighting--572d6ee9-66aa-4d49-b59b-92f5a9fd3ab5", "sighting--e8d521c6-4445-4d63-8ceb-b75e66fad750", "sighting--90d2135a-af82-4a0b-bb65-f04d0e2da18d", "sighting--2880e5c4-abb9-4e6b-aa43-61fbbf57f875", "sighting--3a97a038-068e-45a3-a431-240ddc3b7eab", "sighting--6707d056-8279-4a0e-9808-3e78b2639042", "sighting--ecedb59a-57d1-4914-af3c-64e59cc64464", "sighting--a19bd88c-3682-4c35-a98c-7202cd7be927", "sighting--dac54e1f-7417-4d6b-9dbb-01441f1a6f14", "sighting--0251b8b9-8292-46fe-ab8c-73925bcf707a", "sighting--dcf14983-0a2f-4270-92bb-7984ed67338b", "sighting--dc9525b2-6049-4b07-86e3-cc9f38625319", "sighting--937a8133-c372-4f81-aad5-a10064f2a4cf", "sighting--a41cb103-dd0d-4b12-94aa-b51f28b73837", "sighting--46bf16ce-990a-4bff-a3c8-34b651168764", "sighting--f950aa5f-5ade-4906-baaf-40273c67c6df", "sighting--635854a2-d469-406e-ae14-65eb626f81e4", "sighting--10f76d58-021e-413f-bf42-10a098e65921", "sighting--6a9acbab-88e7-4566-bf22-92d0d18f2fc4", "sighting--e6362834-778f-47c0-a243-aef3a4d8fb05", "sighting--9b7e4a05-53b1-4e9d-8c46-74eb14c47407", "sighting--ddda6847-2450-4e74-83f6-3428c2e1c6ea", "sighting--5e74c37a-f11e-49ae-be70-0fe1c5ae1ffe", "sighting--07ce10e5-3707-4c7a-ad60-9d100d909a17", "sighting--d104fc66-9a10-443f-878e-f26513b6202f", "sighting--6644d8e4-1cbc-4a88-81ca-107aebcf1e35", "sighting--4857dbb2-8249-4359-98e4-24e31595fb32", "sighting--b1c90a76-02f8-45a7-ae5b-c3fecb0137c1", "sighting--50a09678-f534-4777-80cb-f15bedad6bc5", "sighting--9d48f9a6-c1c8-4129-8a4b-c631f548d471", "sighting--f6b10ab6-b799-4bbc-9673-e4dfd8670e48", "sighting--49508aaf-f6a1-43ef-b823-8525ddfd2af7", "sighting--6c59e148-9164-4465-99af-4bbef5578391", "sighting--0ba3a04c-38d9-4b0a-beb8-9be158791379", "sighting--8ee2c7fb-4820-4829-93dd-aedd09173a93", "sighting--d5db4a5d-1c76-483d-8277-79b90e860236", "sighting--7fc46e0d-99e7-4983-abac-6e6ee33abad2", "sighting--eb6733c2-fee7-44f1-b2be-79bfc61dfefe", "sighting--9d31b3c6-d504-4bc5-92cc-e6d96a6eedd9", "sighting--06993763-2118-47f6-8970-720b68c3282f", "sighting--0894e348-b98e-4e17-822e-c67314da709b", "sighting--d3de043f-3d09-42fe-975b-2953512c7147", "sighting--0066e50b-4785-44c8-bede-c8e00a0e6bfd", "sighting--4836e2d1-961c-491d-a923-457622b0aa23", "sighting--7e591496-2327-4fd4-a52a-ba104ddd6dc6", "sighting--d32be8bc-6723-4411-8fd1-da001c64170e", "sighting--3c53ad93-46ad-401f-bf45-c4b57b67770d", "sighting--59c5b42c-6bec-4a22-bf03-75195dc9c579", "sighting--31fd57d7-089c-4a4c-9c17-9bc5eb1f1be1", "sighting--cca44fb8-fe32-4cb8-81d1-1d0edfb7c872", "sighting--cc1e8261-36a9-4965-b131-a78b6dad7afd", "sighting--778c797c-e511-44f0-a478-fed4a4e0c221", "sighting--a302972d-f471-48b1-9059-10e68186d8b5", "sighting--a86a0a16-0697-4a29-b3f5-e9451bf4787e", "sighting--bf8cac6d-abba-4b3e-98bb-d7d81246e6d4", "sighting--28bb4118-d288-478f-bd3e-c96ddadde0f6", "sighting--923f5a71-d335-4322-8141-5c579470d105", "sighting--cb8507a9-8e10-421f-82f6-fc7b7f6bad23", "sighting--917da9e1-6ca9-4aa7-bbc2-74bfd4e11ebb", "sighting--4abf4a13-bb73-4156-9c98-9ed69fee29b9", "sighting--06db7730-b7e7-4c5d-bdaa-0f882711f984", "sighting--f96a2578-aa77-4623-b192-f6f4d7e2e5ef", "sighting--da695ec6-2b41-4663-b0fd-3610fc78e087", "sighting--ab6f2090-fef3-4390-b2aa-163716bf6c3b", "sighting--73e04fb7-7e37-4acc-9719-5f04484f2565", "sighting--b3db6842-982b-4efd-94c3-b619172b81e1", "sighting--170bbe89-df79-4945-893a-75eb8fcb0997", "sighting--ddec3400-edc7-4141-8cd6-0bc8fa02002d", "sighting--93d3f13b-fe59-4132-ba28-c5387afa737a", "sighting--dd9978e8-dc17-492e-b3da-b046ad8444fc", "sighting--bed7c826-fb44-477f-a34a-fd4bb1b785ca", "sighting--ac52039f-f8c2-4075-83f7-11922866572a", "sighting--c793c0bc-c503-43a6-9b61-23568a102412", "sighting--8b5bd04d-c07c-4208-9cc5-580def751cfe", "sighting--a400302b-f1d2-474c-8b8f-f02f571be937", "sighting--0ad052ca-0893-4367-b522-e193de532ec6", "sighting--032eb8ee-8db0-42b7-ab7c-b542287b39ae", "sighting--64cef3c0-632d-4500-9cf1-f6f25001a5fd", "sighting--ac219248-dba6-4774-8c9f-a9ef7f78120b", "sighting--7a97a57e-fa99-4b8a-8857-b7a480dfe006", "sighting--6fbee66c-417d-4928-94b3-bb07e83b1b89", "sighting--b1160b16-a549-41ce-940b-08bf5b031992", "sighting--ca859832-f44e-4813-ae42-1263178462b3", "sighting--85a1c194-6c5d-4100-a2a3-b4d48b442775", "sighting--19765fe3-396b-413a-9732-d5549a0f1c23", "sighting--ffd95dee-fc75-4f7f-97d9-29882ea7a284", "sighting--a72565e6-27d5-4d1a-bb74-5de4ecce7059", "sighting--e60bc82d-f750-4f7c-9412-dabd74aa8900", "sighting--8f99e55b-2ece-48b6-a5c9-a39775d1b791", "sighting--9da7e0f0-759e-4592-bf63-48a796693db0", "sighting--505e48db-2c47-4a40-a3e1-0fc42864c9a6", "sighting--db3a6b1a-04d0-4b0a-b33b-ec36f9f54540", "sighting--d3eee755-250f-40b9-b398-23d20ea06104", "sighting--53685df6-c894-4382-9c1f-8234d4ab564f", "sighting--03769b3c-0808-4253-86ed-5717d57e8847", "sighting--b79add79-700f-4d01-a718-bab7a086220f", "sighting--86ac7f69-1c2a-4fb0-a581-36944d7a2723", "sighting--98f1cea4-6571-453d-a1a6-aa07a9ed2ce5", "sighting--6d1d4e0a-dffa-4264-b47a-247704313326", "sighting--10df0d77-1f59-4b09-a7f4-193bd4739450", "sighting--6262bc64-33a8-4e45-b1ca-0b139ca959b0", "sighting--13b22737-da55-4496-9f05-1e5ef89acd22", "sighting--87713b29-f5c6-4a01-9b5b-466b39888d38", "sighting--ea0e716a-2af0-4f11-9f88-f5f89caf84b9", "sighting--0f0e2aa9-9857-403b-b963-f84ceea279ca", "sighting--9052bfa1-da70-494c-bac5-29fdec9308ad", "sighting--36262718-5100-4073-b474-1f401c319f59", "sighting--f2b36e51-084f-4ba9-8a39-954d14e5409a", "sighting--4db2f454-5e81-434e-b915-09849647c644", "sighting--9c886891-709f-4e70-bb11-55838dd09e61", "sighting--3819f9d0-68bd-4c5f-99ac-9847b51f74ba", "sighting--2247e052-b3cf-4fdf-93c1-58128b309f5b", "sighting--570001d4-bcd5-4d8a-8e8b-14f13b454721", "sighting--a65e84fc-a42b-4105-9853-894e93db724a", "sighting--a61ec113-2ec4-4454-b611-f0a092ff90e4", "sighting--92b07e5b-b00e-435a-b22e-276e84b7f595", "sighting--d9561cff-deb9-477f-aee8-3dd58bc3d16d", "sighting--4fa7100c-b621-4481-bd3d-52341f067786", "sighting--322e8e8c-6a97-4d3a-92c0-b3ecf9278ea2", "sighting--38ffd59c-5a77-4248-9c24-0cca52d81867", "sighting--869d138c-4f54-4263-8537-aee10abc6f51", "sighting--7c0decde-a4b5-487c-a5ee-bfc919ae9854", "sighting--c73ed942-86cf-4ff3-a3ed-0cb26c9003fe", "sighting--a24efc64-e39d-4658-ba2c-c26ba9d9f69e", "sighting--afeba81b-fd00-4c14-bc4c-c2672a69ce22", "sighting--153afef6-0705-48d6-9410-e1575ac03b09", "sighting--dd60edea-e961-445e-8fe8-1e29dedf6d97", "sighting--be667026-c2ef-4295-8bb8-426dc15e7c87", "sighting--4212c39e-291b-4ae6-a6f8-4159fc85a899", "sighting--7d7b16d2-fcf3-4339-9329-22a4f697f719", "sighting--b8663e05-44a4-42fc-baec-f3322dc9f104", "sighting--9c8f70df-a4a2-47cd-b87b-ba04fb403696", "sighting--64194848-fbe8-45e0-b162-c4084b66ab88", "sighting--0bc53d97-b87e-4e1c-a2ea-d618190cfab8", "sighting--69fb79cb-7a51-4c0a-8fe2-d81546ec1f25", "sighting--27d8d67c-d669-4b62-924f-5023927c847c", "sighting--4bc99794-5bc0-4595-bf0f-a7d79befd881", "sighting--e06df995-9976-4bd2-9189-4d8862106cd9", "sighting--c4bd5aa0-c532-4361-ae51-2a71beda55e3", "sighting--9ae7bc0f-bf4b-480d-8475-813af5a9e971", "sighting--5d8d4a52-169d-4b41-98b9-081d6e881004", "sighting--117c782c-62e8-4759-962e-b6873121e272", "sighting--9408b169-6758-4fb1-b7c4-2b82607a5fbd", "sighting--4ce555cc-10c8-4567-a16a-8326390dc15d", "sighting--fde9a75c-8f11-407a-8849-08daca765b11", "sighting--9e9edc5b-b915-45eb-9881-992c618465f4", "sighting--64ac241c-d028-4f24-9705-84c85539e127", "sighting--1ede44d0-d570-4471-9ad5-536258808059", "sighting--b62867fc-7477-4fec-8ea0-c7254a6ffb4d", "sighting--b4948267-5650-42f1-8cea-db572d44754c", "sighting--f731f4ab-670b-4488-8822-a4c69c7426d8", "sighting--ed0132b4-3b5d-483c-b14d-362bb85ccc86", "sighting--1f613103-29f0-4236-89d3-e838a7a250de", "sighting--8ecb5358-291a-42ff-a6bb-3d2533280dbc", "sighting--fd607893-9b42-4bd8-b4ff-5781ad5f01d1", "sighting--a4409ddc-2637-4483-a884-5badf79f397a", "sighting--0a90b361-55c9-4f8c-a2da-690e52cadd72", "sighting--48cd0bca-8b87-4dd1-9424-af5ff9458c72", "sighting--fab11df1-796d-415b-b953-542bf31f3b0b", "sighting--a5789369-238a-492f-bff5-f04c26c3dd57", "sighting--b81763f1-0e9d-4344-8fbb-b63d3eba3090", "sighting--e1d5009a-5d94-4b80-a736-f1d014e82cdb", "sighting--f094680a-c16e-4538-ab60-90a178c7cdd9", "sighting--8eab84b9-9166-4040-a597-9c32490338e2", "sighting--eb2a6f19-fb86-42f8-9792-af6ac3db7044", "sighting--fc64abc9-9812-45ce-b676-1491a9fabd6d", "sighting--2b03a25a-585f-4e62-9f5c-efc28fd5b7eb", "sighting--d2bc59d0-4394-4aa2-ba81-66d9f71a12d0", "sighting--6a6abe5a-8fbe-4bd6-8da5-e660c1dcbc97", "sighting--5c1fa157-7e0d-4ae0-b9f7-0866dd72592f", "sighting--99cd5859-1264-458b-97d8-51b0f6aaac54", "sighting--78b79dcb-3645-44e9-a904-f20cd5318001", "sighting--f3b2ef1c-f5bf-476c-9ead-328bfb121b8c", "sighting--36664edd-7b26-4f03-9768-25bf1409eb2a", "sighting--116afcd5-7506-4b15-8d22-79394841ed58", "sighting--05325f71-ec6b-4018-8b9a-2be9e26fd591", "sighting--7a0db93b-1cdf-4d58-b997-cfc7a3d557d5", "sighting--32347743-5a70-4ee1-b036-cfaec534e0aa", "sighting--845f8f4f-1178-4614-9bbf-6e5b0b5212c2", "sighting--8c3cf228-2620-4071-974d-35c78ee51db8", "sighting--451f61fc-4158-4abf-81b3-b3ef7590d298", "sighting--5e7e3ad2-b713-4bae-9849-47a32fce1367", "sighting--b3b091c2-fa9d-4473-8813-5d673373f558", "sighting--74e5dde3-c9f9-4ae4-a2a9-01706dc0f66a", "sighting--d7fa76ae-c188-4a9e-9bfa-c566a10de87c", "sighting--d7f71fd1-4df0-44f7-8043-665f2f94a81d", "sighting--231c28ef-4080-4d1d-8d5c-ef3da108bc52", "sighting--b26cebd0-6a2c-4b2c-91f9-bd524c3b87eb", "sighting--c88f99c3-58d1-4393-9822-77e167f9c4d4", "sighting--cfa2dc48-cb0d-46cf-bb55-64f85b33f638", "sighting--e394e0e3-0e22-438a-a523-0481213bb8ec", "sighting--54e7aec6-78ce-4f29-b052-662015e2fcbf", "sighting--ce675839-fc01-4d4c-983d-45a8924dca30", "sighting--50a27784-b554-4394-84d5-c7e1cc1117ae", "sighting--6e499dcb-6bfd-48d1-9e26-4e9ce5306708", "sighting--5ad6296d-e939-40cf-840f-c7b04da550ad", "sighting--aad0385f-1ace-4372-a399-6133818bd868", "sighting--676896d9-94e2-431d-9536-84852c773c24", "sighting--f270f2f8-4aea-4bf2-af9d-9d44bd4f54ed", "sighting--0815997d-1f04-4983-bfc0-65766fc8ca04", "sighting--9666e604-90e0-4608-bee9-addd5c4db1d7", "sighting--ea3e825f-8fec-46d0-848c-323714c75ec4", "sighting--27eddeff-f5fa-46c0-95b3-5ab4cb2cddf3", "sighting--c77b1512-d809-464a-8659-d13b78a095dd", "sighting--9f3d7461-8b62-4843-9e77-d05f39399f4d", "sighting--1c69108d-b1cb-4b75-acfe-5410c95dcde6", "sighting--4f2e2ccd-7426-4a70-b812-19b244bac3b1", "sighting--d0709f45-a14b-4e31-8994-6af0fa12ff2e", "sighting--76ed91cd-bd84-47ca-9142-1de1c60f5777", "sighting--8f0f8b0d-28c3-411f-9200-99dbf7f79ab5", "sighting--2576d325-3b2c-4d61-adeb-3b0dd93dd664", "sighting--e462aba2-04c9-489e-b644-237cc3591cf6", "sighting--b867ecc5-b257-436b-b8ed-e1c26cd46e48", "sighting--c020dd33-0bd3-44d8-8515-fd3df8d536f9", "sighting--17fa0a93-79af-4689-9d4e-ed060b8f8a1c", "sighting--3048a779-ee6f-4316-9630-dc4a45d131b0", "sighting--fb1995c1-4b7a-4002-b734-a76014ed931a", "sighting--a20a13da-0ab9-400f-910b-cb80b5db0de5", "sighting--462c780e-ce1a-4be2-a7e6-c01b162ba901", "sighting--8d732f4b-50aa-4f00-a238-91a84745279a", "sighting--60402331-1a4e-4007-8ceb-4ddfc11744cb", "sighting--8bca1408-a70b-4e0b-a24f-e71c7c1de6f4", "sighting--63b82d99-314d-451a-a108-f77e3b5527bb", "sighting--85a504bd-2b51-4e19-ac0e-826445b7ed9a", "sighting--2c52db6b-3faf-4d45-a921-04882608511c", "sighting--ba4c0cce-e27e-46c3-b3dd-6dd688bc902e", "sighting--43bebec7-d39a-4c8b-8ea1-f90ae98a3d35", "sighting--bd0435e5-9e33-4465-9788-c096c887b8f6", "sighting--b4e1c1e6-fad7-45b1-95fd-a19d08f7cd31", "sighting--c13c9ffc-f0f0-43f6-bf6b-00c01b3a90b7", "sighting--02dad18d-ba9d-405a-af97-f74b165475a9", "sighting--898badbb-8a25-44b9-936e-4177302c4ed9", "sighting--e947fcf2-11a9-4ecc-b62a-93b91741534c", "sighting--582d9781-0697-402a-9c4e-9a7371580244", "sighting--a2038465-6eeb-4189-adcf-f5095c734691", "sighting--604c448a-0682-4df5-bc48-1d4e12006c19", "sighting--c9ea4ea8-1061-4528-8a5b-a00442602585", "sighting--b1ba0732-aeda-405a-8740-3ec0a2ebf125", "sighting--6d61de4f-4e17-4395-b625-d13bfec0f100", "sighting--89982337-5a90-432a-9d91-da1c06b6e295", "sighting--ef19dce8-893f-4df1-b5be-f9ffba8d55a7", "sighting--9e3e49c5-43ad-4e69-9b48-715a0488850d", "sighting--a26f3657-cf0a-4a5c-89f0-aff3efc8d92e", "sighting--801474dd-288b-4627-bb3a-9a61eeb31117", "sighting--e8ec1e1d-c9b7-43a0-95a2-4b0ad882d984", "sighting--5a66d65e-ab6b-4cd0-aeae-6986079102f5", "sighting--7108e037-e1fd-400c-9dcc-f9955170f223", "sighting--d7663cf9-0d55-4de5-8704-0a44c1e33be0", "sighting--77bea247-bb3e-4caa-aba0-cae734f5fbed", "sighting--d1b3baff-5368-402e-92ce-16d376f52ae1", "sighting--e410c7f0-0c84-4f48-88aa-c05390ce3376", "sighting--ea4a3e29-9a09-4594-b9c7-9588c5891a23", "sighting--23a08119-afcb-4fca-85a2-918543ae2212", "sighting--680e1269-944e-4a23-9663-86c87ac6ef79", "sighting--d29aeed8-c2ce-43b1-aba8-e025e3facff9", "sighting--c0835cbd-b4b5-4e92-b071-a86146b12423", "sighting--2dddb2a3-ee53-418a-8e62-883005348fed", "sighting--9d20e369-145e-487f-9972-bd3fdc415b1c", "sighting--c6bdd7e7-2629-4894-81bf-95f8e3f73716", "sighting--03372dfe-eb60-4755-8391-03fbc98c0ef9", "sighting--2a4cd5e7-83ee-4727-b2da-c3d8da09a3a6", "sighting--e952dc5d-14b5-4a31-a2f8-c953f8b72ce3", "sighting--742c829c-6998-40a3-b87a-477bb369128c", "sighting--cf989016-05a0-49c0-8a0a-bfd20a4043b6", "sighting--c8182274-579e-4384-9316-02285de27a26", "sighting--fe223086-3759-4438-bf48-38a784b049d3", "sighting--91d09838-8f1d-408d-bf49-2600b6885dc0", "sighting--819191b2-def7-46f1-8aa4-372b70ffa250", "sighting--230dfcc2-4449-4e51-9790-78f4b7161aba", "sighting--d9d448e3-134c-4fad-841c-4b17e85c3877", "sighting--6e92ddab-84d2-426f-9022-f4061a7b7d4b", "sighting--c034579b-b0ab-483e-8dac-0d362d9aa373", "sighting--9d19c8b1-d542-4e86-aaeb-66456638cb6c", "sighting--2fd57fa4-bb4e-4dc7-a8aa-8c1a2a1914e2", "sighting--c12be5fc-7aa9-4344-a318-0eae796103c0", "sighting--412aa013-245d-42d6-8031-1ef9122cc4bb", "sighting--c97fccd4-1377-4722-aaab-639b1afede6a", "sighting--f0addd63-6379-4b95-a422-3937c7a0ad81", "sighting--44571a94-0cba-4a13-afc5-cd2c9e739193", "sighting--8f91fcdb-6e05-4245-8ccd-6aeca36fe7dc", "sighting--7b67e572-3c0f-4dc7-b66f-8b9b82e614a0", "sighting--a9750086-a3e7-4c4e-bbdf-1217bb4a0ed4", "sighting--80f22f31-cb50-48b6-8a0f-f2303a3f3b64", "sighting--56f7369d-936e-44c1-848b-d4bf55b8ee10", "sighting--5c284311-7868-486f-a2e7-563d6d92bab7", "sighting--8017987e-004b-4d33-8ed9-5c2a6635059b", "sighting--e797c0c6-ddad-470d-b080-bc6c8aba792d", "sighting--a5ffdf01-cf41-4b21-a3d7-a8abe02be920", "sighting--cc8530c2-6ab9-4544-90bd-72147824c9bd", "sighting--cb77759a-3a34-431e-9a9c-089894b250c1", "sighting--3f9e575b-fa94-4ccf-9a3c-be94f3c83e55", "sighting--fce364a3-05f9-4ed1-b81f-be3a351e8b7c", "sighting--1fa52644-e619-4c00-9ba6-c98a76cfa824", "sighting--144f825b-ee98-4ab6-b29a-1cd82fef076b", "sighting--f024bc9c-9c13-4b58-9e46-b78a5ca6c78f", "sighting--9b0fbac5-1a7e-42e6-b57a-f789ee5391b8", "sighting--caa7648c-8cc8-4c9c-953b-2e327e3ad7c3", "sighting--29a34559-77bc-40ae-87f9-bd93f0c90028", "sighting--43b77b16-d827-414e-83ac-ff11ccd4897a", "sighting--700fb9ea-e5fd-4b3c-b5b3-20cf372e7cb6", "sighting--f4ae0c50-5dd1-4479-877a-ad41404f18b7", "sighting--f336d30b-88a1-411b-b291-03e378375ea5", "sighting--8d88abaa-417c-4c4a-898b-f95060f3899b", "sighting--31163c01-9db2-4b95-8c88-92bc81d1bad7", "sighting--8220c6b6-cd32-4f30-bc01-e2e0092f88a5", "sighting--74ae2302-8220-4245-9422-29148c67ba33", "sighting--3d4d6aa3-c716-48fa-9ddf-56713651239f", "sighting--010d8c14-57c2-42a0-8a38-41489b0680f2", "sighting--6ddc31a0-8e39-40ee-8925-729dd01d99f4", "sighting--a9d34da8-1bb8-4afc-bb04-d11c7de56549", "sighting--fdb8a407-5e2a-4c86-ab19-730bc085d3be", "sighting--8dadb101-df64-4883-911d-cf3a0bcad8b4", "sighting--2f94d70d-69a8-4ea9-a8fb-d0b0dbc66973", "sighting--4b6692bd-7246-4cd6-8875-9d7b927f5a73", "sighting--d13532b0-9914-481e-a3b2-4188d0fa6b69", "sighting--e259cecc-66f6-4152-982e-45e936307a39", "sighting--03e07ead-14ce-45c9-9ce3-122b28273e15", "sighting--204fd761-5ded-4d87-aad3-a1386c7f8065", "sighting--9dbe4892-4e74-46c4-ab74-eba94ba8de33", "sighting--a06cec31-79bb-4ee2-a42f-193d662fe5e6", "sighting--1d119d2b-c87b-4291-80be-cb8fe0dc6ea3", "sighting--92e4d614-6b62-4f8b-b798-4a3860ef1d92", "sighting--ff73a8a3-5c06-47d3-8721-763a4170c8f8", "sighting--9d462fe1-f1a2-4713-98be-9bc1e1630795", "sighting--ef3cfd73-16ec-46f9-b9b9-50ee8d1f37a5", "sighting--5f8e4411-cf84-42f4-8395-50ff4f6fcaa3", "sighting--5c76f844-f37a-4894-a2f5-170e71ab2a74", "sighting--5b90eed1-0138-48b8-8756-fe3da4c0c21a", "sighting--cc86bc2a-9b43-49c5-b4fc-5bf9a576fe23", "sighting--626f9608-32fb-49a8-a7d6-0342036d39d1", "sighting--6227b9ed-fad2-4e48-bc94-f8e234123dee", "sighting--9381c652-f906-4b8b-ba95-f65061fa4117", "sighting--ce8ef838-d24f-4046-8968-3731f5f563c0", "sighting--3bd4f927-75c9-4c58-afc6-10396ac0b83d", "sighting--ed111c7e-c5b9-4279-bf7b-ec1eb1c8190e", "sighting--e95de319-f089-4034-ad8c-9d84fc1f1a48", "sighting--9ae29a52-3054-4abf-9873-f534bfff27c1", "sighting--b296dbed-a0fc-4c58-b818-db5752eacbff", "sighting--72276778-82c7-4a16-b032-68bdf641315f", "sighting--38224c68-c49b-4c4c-b885-c8b3ec0a4354", "sighting--c6912782-bad0-4f2d-8903-4595f5363b95", "sighting--42db3e50-3e40-4bac-8f7c-f9842777e88b", "sighting--b78cbaf5-6cb6-48f5-9b0c-96b55d6fbee5", "sighting--9490430a-eead-453a-8f5d-a38c01a5d7c0", "sighting--1ea78500-298c-4a67-9c5e-44c8997c8c4f", "sighting--2669d191-95ad-4c93-987b-614daafdac91", "sighting--1d5f35c0-8241-4a7e-9ffa-7fa27e75d13f", "sighting--5bbf1043-e696-490d-a132-35b91b5e1e2d", "sighting--d8019d39-3c93-4009-b1f7-78788347b75c", "sighting--39cfef26-0b9a-431c-b143-4637ee51a7e3", "sighting--a46b7d56-2bbc-4133-9c72-e2a90e401456", "sighting--7d8e2937-3f83-4496-a3d7-982f6ff0af6b", "sighting--01ff4b3c-3a28-49f3-b194-a6d02266131a", "sighting--69f6b4d9-f963-4155-82f9-5486313c5319", "sighting--157fc71d-eb39-40ad-b8d9-9f0f329fb0a7", "sighting--29f2a95e-754f-4cb5-a798-90dd6b5a0758", "sighting--ee4e343a-708b-4d95-b7f1-c55722ccddc0", "sighting--b01064aa-6d09-4f42-876e-fe945ab197be", "sighting--73fe1437-1632-4863-bf4e-a10633fa95fe", "sighting--c0c2325a-ea30-409c-8e62-b8171ea61b00", "sighting--71cfc82b-d42d-4f65-87c1-0a113db4dc3e", "sighting--10e63311-1ce3-41b0-99b2-7e5bc927ed93", "sighting--0bc52a01-8183-480c-9ba3-8c8fb73849a5", "sighting--4712bcbe-e5e2-4a94-a796-b5d874c2d2f7", "sighting--8e5fb12b-4114-4c0b-a456-b5d7ae5a6058", "sighting--50264426-589c-402b-9771-21a38b818780", "sighting--b77f1438-6d17-41fe-a81d-ed3d3a3ca541", "sighting--8e6fa6bf-3fc5-4c27-8b57-b11999062ff7", "sighting--c186be59-6efc-4978-8fb7-83451f463061", "sighting--1e6da315-094b-49b5-aefc-02f3e27f6918", "sighting--6615acfa-aec8-402d-95ce-74dcdd70f649", "sighting--38b3c396-1d6e-4d54-83d1-54d1bbe6b9a9", "sighting--6fb151c8-8c9e-4e48-90c1-3b5203eb6c7f", "sighting--11db667e-6c85-4b6a-9baf-e4cd42d21941", "sighting--43113bd7-178c-4bff-a3aa-83d2cb7bd51f", "sighting--f4386eca-a3a4-4325-934c-b7f648092ced", "sighting--2a32cdf1-17af-4f9c-846e-52e2aa5629fb", "sighting--38d8485c-0589-454b-bdba-0f160431e14c", "sighting--0e6b3be9-3844-4f31-a5f7-ad6c589f123a", "sighting--d038b361-3882-4e02-9dd0-ed941fecec24", "sighting--ab0af222-a774-4d53-96f9-94160cf7ca5a", "sighting--031dd029-dc9d-4181-98b6-4d4cb3233bee", "sighting--f227f830-5a52-4183-9c4c-ea5e80471585", "sighting--f88eadb4-a6fc-4496-a166-2f9115d7dae5", "sighting--c2991509-3e0f-4c6f-bd47-99bda89ce56d", "sighting--77a37dd6-cc1b-4566-a681-af532f35e5bf", "sighting--c0f6eb0f-f273-460b-a7eb-be35e463df25", "sighting--b1fbb9f8-63e2-4c0a-81b6-c2d375496b69", "sighting--5611c781-b02d-4c70-8f79-52040874806f", "sighting--59bc600a-66f9-4a83-a1aa-d08beb0fe779", "sighting--6b1976d3-8266-4e88-b722-ae4702f5ebe6", "sighting--2e327171-eab8-45b3-a09d-4e8389d74e7a", "sighting--51bfc91f-8679-4825-9971-2aeac9b7ce03", "sighting--633ecc59-ee41-4e62-a9af-29ce5601c248", "sighting--d027f359-9229-4744-a035-7664b65cae76", "sighting--6a0d819a-7ad9-4e40-8777-3304c4c84957", "sighting--a07a4d28-8ce6-4eb9-b468-d137ecb06e14", "sighting--c6f487ee-0f18-4fe8-9195-a61bedaf9ef8", "sighting--6d61403f-18c2-45a6-816b-5f913429ddee", "sighting--9f10eac7-c7cc-48a1-ae08-2b9d4b5cdb4c", "sighting--d8be4008-91c2-437d-ba97-aca089dc7f3e", "sighting--3fd69d8d-67e7-403a-8f25-85f553242c81", "sighting--6f0f63e7-cc22-4919-9288-ca4fe5805efe", "sighting--62e69b79-768e-4492-99f0-d5bedb361e72", "sighting--7199d2c6-b6a6-428b-b4c5-946d8a22208e", "sighting--b0d00591-9ff8-47f3-b822-a19dbb95a464", "sighting--6dec7422-4d41-405e-9547-e9862ab1ac3c", "sighting--e47d151f-3884-4f15-8959-31d625033628", "sighting--418a6348-10fe-4461-bd93-e11b3f5e96d1", "sighting--ca87d9de-063e-4136-8f21-9eb3d272a980", "sighting--4fcfccc5-2557-4f9b-86d3-8e70a7aa8e1f", "sighting--93162787-e5df-41b5-bbd1-3a5d54d2809b", "sighting--45ee1a1d-6b75-4780-b21e-cdddd33155b6", "sighting--3d3156b6-40e1-4050-a272-61f6dd24a5b6", "sighting--896be921-8474-4cfd-8836-76c809c5b0a8", "sighting--b7ba5430-bcd1-4695-aa9e-d1f6047fc726", "sighting--9e2aadca-c97b-4eb3-a7b6-feff4efd2233", "sighting--0b922cee-dd10-487e-85b8-fa9cc0913e64", "sighting--81abcd8b-e560-4bed-bab0-c204fb922af5", "sighting--ad41e27d-802f-4fcd-8a95-e13a9bf3219a", "sighting--4f500769-d7d1-4d52-abcd-3fca83fdd17a", "sighting--c5317d52-cee4-4751-ad30-f50711ce0424", "sighting--4b2c471d-1b60-4653-8e5a-aba0f5a75441", "sighting--1e1cd145-4c3e-4310-bf54-c78705661f85", "sighting--275d7eb3-e8ce-4af7-bf2a-1205492c294b", "sighting--08c9d1eb-27f7-40b3-b39a-6cb84e2dc0e8", "sighting--8ed5928d-8bc0-4be3-b949-0c7a39c7a2d1", "sighting--ae565f90-b6d6-4295-834a-57301061b4e2", "sighting--edd4bf6b-cc49-48e8-8cc4-83a961141523", "sighting--1765281d-e7c6-4089-a340-369c28efd487", "sighting--432907bb-501e-4cbf-b484-a41a2df12dd0", "sighting--18e3a5fa-e1bd-4ccd-b2ac-68101dacb434", "sighting--3ace8997-1de1-476b-a1a0-85968144a18e", "sighting--a95e27e1-b520-4e8d-b0d6-16fc38c64857", "sighting--6031e025-22bc-4e5a-b48e-8ccb6c104af8", "sighting--a90e535d-e2c3-460b-a133-73c3a619da49", "sighting--58d86527-9102-4f7c-af88-2583b7d57683", "sighting--b9395f87-9871-42f8-be6d-592326f78936", "sighting--55d3c1c5-2b0d-40f6-b5e6-d34f1a725682", "sighting--52031a11-daa9-42cb-9fb5-9ccc4d828c36", "sighting--b5498d9f-92a9-4914-9950-fd4464b7ef70", "sighting--9744b2af-2bba-40e4-94bf-db7f46924aee", "sighting--9b6601cf-9872-479b-aa92-bf60acaa0144", "sighting--d195c385-036e-4284-8538-b2be3a22eadc", "sighting--1bda8b8d-f844-4330-a1b0-f0c28cba1c62", "sighting--2c098aeb-4699-4593-8fe0-73427abd178b", "sighting--262c571a-ae34-489a-872c-d3ed03cbd7ee", "sighting--d0cafcda-0941-4ffd-aeab-9a45b5b7ffc5", "sighting--93d82a43-d073-425f-b817-6763457a69a3", "sighting--501334ca-1fab-4326-8789-1918f59e307b", "sighting--b8322271-5fdf-4366-9ecc-faced54f48dc", "sighting--b029be7e-7687-4afc-a60e-58d18c8f5e05", "sighting--1d505d7a-1c0f-41e6-9043-e05ac09048bb", "sighting--48a3ec6b-4b6f-49c8-bc40-160dd15c9a41", "sighting--a63f0df6-3b18-4e3d-a07e-2d61f73e0698", "sighting--343c0a53-d8ee-4ee3-a7d4-65666ae8e3fc", "sighting--5967b484-9992-4d18-9272-ec3a2d81767f", "sighting--8e839f05-a6bf-4082-8acc-1b11974a6ea6", "sighting--bac4090f-2ac2-4e14-9cec-fa74c9e6b37a", "sighting--5d25125a-4aeb-420a-b728-20d67fb71e8c", "sighting--1ed65c9b-2e38-4200-84d2-4c8c66d683d2", "sighting--50e61997-3d1a-4c75-a90c-3c5514b4e3cb", "sighting--7a4cdaeb-eb1e-4ce2-bd80-0b44c3c729b6", "sighting--0aeb3c79-d890-4389-b1b1-569b27432175", "sighting--79e292b7-d28a-4756-b95f-147dee5034c7", "sighting--24a566f5-e4e5-4a22-b7c8-07cd8e37d5e6", "sighting--4f0662be-c91e-45b7-b39c-a984fc4b0a27", "sighting--14e3c507-dec8-4e20-9bf5-efc75697be19", "sighting--13c84eed-8fa8-45a3-8e0c-19ed1d2418be", "sighting--0de9b792-0c10-410f-a44c-5e0f3da855dd", "sighting--2f191efa-8161-4a8c-9e68-1ba658f4ab51", "sighting--7d0af9df-f133-480a-a1fc-0a19af4c83d7", "sighting--4832ddf2-1509-44f0-bc20-4c812cbc6a04", "sighting--a996e7c1-28ba-43c8-95c8-c78dc1cac785", "sighting--ab10a1f9-f48f-4a25-acb8-b6d28a597957", "sighting--d02374bb-3c9f-4696-82fa-fb05d9c2b477", "sighting--9894d259-8e62-416d-bb8d-bf33147fa354", "sighting--3b11157b-be46-4f5e-9ddc-b0f7a17311b5", "sighting--38857607-9dc3-4ae5-9128-c42edf47edfd", "sighting--06249743-fcd5-46f3-b765-cc54fe5b05b7", "sighting--08b13999-ff74-4a0a-9463-4b2bdb5a59e6", "sighting--8971f088-d50d-493f-aff7-06fd6f520764", "sighting--8c75db42-12f1-4178-a206-6e8dce3c92dd", "sighting--0d63e416-7398-4be8-9d5b-761e356a314a", "sighting--b43edbe1-3691-4d43-82f3-17c3212e88fc", "sighting--26c9ef96-bcfe-46aa-9e0d-36915b2055cc", "sighting--9e0662fe-ee5f-40d5-be59-e85f093b0d67", "sighting--04865ef8-c8bc-4135-964b-e2c994914e50", "sighting--d0054700-5908-4153-8b5c-eab2b6be4f1d", "sighting--2f12ddc9-ceea-4e87-9d70-7e39902900f7", "sighting--0c4d582a-2105-4c32-8899-d5eba17f638b", "sighting--0602e122-66f5-4f76-9830-fd9e5af50116", "sighting--25771370-7b5e-40fe-9137-a142dbc7a999", "sighting--71589169-3462-45f5-be4d-878f48a533d1", "sighting--a1818a51-35f1-4cd5-bf6e-7bf770c8ff5f", "sighting--58d4031b-55b0-413b-a42f-6003d241a553", "sighting--7cfc7880-a503-4c7f-944b-52a05eb612ce", "sighting--46eb9ad1-9a19-485d-93b7-8e57c1000238", "sighting--f81d6a2c-9dff-4360-8c64-bd855b14d7a2", "sighting--42aaa6c3-f72f-415b-8ad2-7e4c028374d8", "sighting--0ac08d47-8a57-4400-9fd9-7363bb5ca9f6", "sighting--1207f8f5-956a-4e62-bb10-3bd6ff619484", "sighting--ad72edf4-1ab6-4852-902a-1eda610b5775", "sighting--89b69c52-ba15-4491-8653-e34925403eee", "sighting--fbd536e8-f717-429b-8025-5dcb10601626", "sighting--55fc8017-3731-441a-8c2a-1a291bb42e89", "sighting--73262c80-3d1e-4d1b-a53b-028cc702b1bb", "sighting--b04b079a-11fe-42dd-bd42-05486f9c9271", "sighting--626f88d0-155c-4dca-83d8-489a14dfa5c5", "sighting--6ebebde4-4057-4251-9998-183f7991635d", "sighting--d9245d9d-1977-42c6-a9db-aee967b69e4c", "sighting--9c1c6cfb-2305-4ddb-8a45-0af1729e2211", "sighting--0c3fd5d7-8668-4483-8e1a-376b1cefaf29", "sighting--a937f9b5-6f04-42ce-b684-935c91e389ae", "sighting--7167132d-2cb0-47d0-8238-05026c1ca4f2", "sighting--5a68e037-4459-4330-b51a-833e93df6812", "sighting--bfd8fa1b-5b11-431c-ab42-1ecd56602372", "sighting--7e087efa-2142-43a4-9455-a7a2f4010e04", "sighting--f72614ae-e9e8-4b19-972d-9c110e0503fa", "sighting--145adfa3-02a2-4718-8f42-a0ee54a6448d", "sighting--5140d8b5-a5ed-4fcc-9354-e1ff9f03057f", "sighting--4053733d-6ae2-49d5-bb0d-7e001450f1fa", "sighting--b0195034-64d5-49a3-94bc-52d4c6613410", "sighting--d4716bc8-a886-4e0c-9dba-ae19ca5d25c2", "sighting--9c10a352-f0d0-41ab-83f4-aa6db0089d27", "sighting--c2d4fb52-4341-4559-a67c-4fe36b4aa9dc", "sighting--fb23f6f7-d2a9-4533-b764-5dbf96166231", "sighting--48cbc2e2-d82d-4e45-aa8e-4a0eea557d44", "sighting--bbcc452f-8400-43c4-a5ea-b62ff45f6412", "sighting--28272f49-e8ca-46fe-be46-3cf73d3e288b", "sighting--8bf6a80c-0b0e-41dd-ba99-acec86a5f61a", "sighting--f7fbb560-9fb6-45cf-96df-3f52affe2317", "sighting--ae8d09dc-2d60-4091-88dd-a27177c927dd", "sighting--66aca9af-c113-4990-b69d-20f8f8790904", "sighting--929a2d01-52e9-4d2f-b99b-4bb1dc7c2408", "sighting--5279863b-7563-4a32-a507-39673a34edc1", "sighting--2bd1702d-9bd0-4f5a-8f78-72b5aec7ec0b", "sighting--8d11d456-be6c-4831-bcb8-d030ce94a941", "sighting--10c300f7-8134-4776-831f-dc8f4eb16b35", "sighting--0a23cf4c-e8e9-4791-92bc-82357ffd41d2", "sighting--6058311d-c70f-4c0b-b8e5-efb6913391ef", "sighting--d4a4548c-d820-4041-9341-205e76deb6b5", "sighting--eb237ead-6adf-40b3-a1a9-a67ab035e86e", "sighting--29361f9a-732f-435f-8d2e-3ad9fba826ca", "sighting--3a34d21e-2a7d-42ff-8a84-fd1069c18ae1", "sighting--e0734e2b-e9f6-49a5-b5cd-b4793dcefdb0", "sighting--f963c77a-c0cd-4b6b-a206-eb01aa144702", "sighting--21de4e4c-1337-4c27-8f22-8d6a7587495e", "sighting--80d4bc74-8bf9-4487-a78f-f5b5c31ba9e1", "sighting--598f0afb-3cb3-4bbc-9850-a8d5e4b0cbd9", "sighting--71fd665e-926b-48ef-8aa2-707e29ddf6d6", "sighting--5b7b6260-fdc4-4415-a291-22d9d4e5fc7e", "sighting--17ccee18-30c8-4985-a108-ef0c79df4d6c", "sighting--46eac995-e5c3-4105-9ed9-c039cb1911cd", "sighting--a6e9ea61-5334-4362-bf59-8f86873cf98f", "sighting--8702bf47-9e4d-4909-a82e-e53f22265e83", "sighting--5e247f54-a395-4470-8e90-8a40f940791f", "sighting--877425a7-858d-4a82-b808-58db1ff0fe16", "sighting--351a7fbb-0532-43ae-b785-39313d5a3c81", "sighting--b1d7112e-af49-448c-a3ea-71429a6b5f5b", "sighting--827e58df-c419-43f2-8139-1f97a1f21136", "sighting--f1db2978-a4b0-4ee8-b119-9afece1824d7", "sighting--a7c82afd-2419-4580-8e36-34d9df3a28d2", "sighting--c7679caa-1968-4ad0-bfa3-04c46673d601", "sighting--6adc2221-dab3-46c7-b12c-9b6c9eb969ee", "sighting--4e1b3a90-5707-4ff6-892a-44f7a7666bfc", "sighting--ad6b71be-cae4-4082-931e-eed2fbfbb3ca", "sighting--f4ec3716-1d9a-43aa-a25b-ea256d039773", "sighting--d16ce0de-1da4-4100-be5e-8653c0d381f3", "sighting--502af487-a0a2-460b-99d6-466d2744fb56", "sighting--3a12ef46-2f57-47c1-994b-199c4957d674", "sighting--bc2d9574-0ce9-412c-aed8-b19b41745b5a", "sighting--33ea3a18-e813-4498-9c62-0ad916594302", "sighting--0e257936-6dae-4f9b-aa3e-5f69bcdf3184", "sighting--b8aa6154-7232-47d4-9a0f-3002e376cf2a", "sighting--814f2947-5c3b-446e-a26e-e8479fcfd8a1", "sighting--d111eb07-82e3-4e3c-940c-d1dfa8e60656", "sighting--08f3d8c6-2f89-45e0-83cf-33dc360678eb", "sighting--4fa34d84-b8cf-494d-bcf7-5c03fbc4611a", "sighting--b15c4927-4a73-4ec9-ad24-fc02a9f532e5", "sighting--d7492267-dbcb-463c-925b-75be46a4ca09", "sighting--8d850140-72d3-492a-a02c-092cfac81503", "sighting--a38f5242-41e5-4df6-9b86-99396c563cfa", "sighting--31db145c-0433-4fec-980a-c7e4e6b33aeb", "sighting--6bda2ae0-7712-4f10-996d-ba7f41ed7a74", "sighting--ff6c7d3f-2748-4630-a369-1cb886846b89", "sighting--a028957e-01f1-4312-903d-87b8f799d507", "sighting--f5e9f388-057a-465a-82ba-c53a1b7a7122", "sighting--8896e25b-c576-4cb1-8baf-df79d6957b36", "sighting--4d7a4677-3391-4608-a795-ff954c1b47ec", "sighting--5b4f920c-c0e8-46c2-b21c-f59430c7c154", "sighting--6cb61da8-365e-4136-85b9-196503543ebf", "sighting--e4e7b690-83d4-48fb-ac18-44d54951f418", "sighting--2d912b2d-dc88-4d53-8d9a-b62f792bf9b5", "sighting--5c6cb3c9-3b06-4750-aa43-b00e3a7f0274", "sighting--3ab1ade5-46e6-4afb-af06-4e78f52056ed", "sighting--7f8ae775-098b-429d-b47a-b200e23efab7", "sighting--42049973-f200-42e5-84c5-f81b30a91022", "sighting--15ba9c91-8314-4ce2-949b-ecb6b595a725", "sighting--5ab242a7-f5e3-4554-b6ec-fa2118fae35b", "sighting--a1f90c87-b55e-4c0b-b9ba-5b7fb444c25a", "sighting--4c5f70f5-a07c-4332-a4cc-1eb7ee43c2c7", "sighting--030db25d-4f12-4b82-b009-4d2d965704cc", "sighting--5ead48d0-7103-4e4c-abc5-b6cbae0f4455", "sighting--21d1a801-078c-45bc-9472-b32aec9302fa", "sighting--77ad85db-241d-4c72-9b79-5c9e79d04387", "sighting--b859d217-48b5-4d6f-8ab1-b96b2cee2c3f", "sighting--8dcd31e0-2076-4539-a027-0748d86c367c", "sighting--db40f5bd-06c8-4019-af11-2ddf9936e05a", "sighting--6ce1d925-6c3d-48a3-9f7e-047a11b5fa27", "sighting--05d7c4c9-e425-4a4e-b9f7-3a2bd4fb806d", "sighting--85b8d56f-0511-4b73-ad77-7ff6199921d5", "sighting--4176b75a-f5f4-4ebe-b8a1-81674a082481", "sighting--18eb0ef0-96e0-449e-b1bb-aee552320f1b", "sighting--4818a287-95a9-4201-a665-582931e63c92", "sighting--1ffd4778-6606-48c8-8e13-84cfac33ced9", "sighting--65d4c7da-018c-4987-a96c-7a3b8af26c3c", "sighting--64398bb4-d8e1-4e85-b48e-595f717645d8", "sighting--93eaadf8-363a-4a38-abea-960595e42d4f", "sighting--e3eb1dc4-ab7c-4dc8-95d7-39ce7b6fab83", "sighting--5b630944-d0d0-44bb-99da-eb7a1c9e033b", "sighting--894f8639-2009-4910-b7d6-be0f98c6f00e", "sighting--addcc4da-f20c-43e5-a502-795a5729d974", "sighting--714700c1-b9b4-4a64-9c8c-491d90c148a4", "sighting--7751889b-f3a8-47f6-beb4-47b6b6c776da", "sighting--7e99018c-a109-4795-86e5-9703ce8404a8", "sighting--95d9a068-0672-4e02-bbb7-a4204ea5a2c4", "sighting--7e83b5d2-e7ba-48d5-8984-8d3a946cba4f", "sighting--6a754509-fc63-48f8-889c-7d615abb4386", "sighting--a13d4f40-e140-4494-b972-188aab6e6433", "sighting--2ed249b4-7708-4fcf-8be9-4140da53fb8b", "sighting--0aee22f4-1a35-4162-be53-dcdf647779bc", "sighting--d9d7d871-0058-46e8-830f-6caac3e87b63", "sighting--fa685384-f233-49b2-b060-eca52a2c0500", "sighting--8e42e9d6-062c-431e-9d48-7dc178a5dcf1", "sighting--adebbe33-610f-4d81-9534-0c5d0beaa6ab", "sighting--11bc0e8a-03b2-441f-9f41-d3958ce3d767", "sighting--6f440fd3-1a71-4ad6-97a5-2f5c05014454", "sighting--bd4baab9-9304-4ad6-a043-52052dfcb921", "sighting--cc0c8aef-4617-4ce0-ab5d-e052efede4f8", "sighting--5deb084d-10b3-44ce-b3e6-678c9d25271a", "sighting--c9948891-372f-439e-8a46-805c1cc5afc9", "sighting--dba3bde7-1db9-43a2-a20c-1d579604cd1f", "sighting--bad2913b-5b5f-4e19-8a27-7955461bb371", "sighting--d8e13111-d9c1-464a-a9d5-3a65a3434f46", "sighting--6f9c7436-c813-4adb-b3e9-9e4c9eefa68a", "sighting--3f23f8df-0322-41a9-93de-292445e36f4c", "sighting--4e52757d-5b9b-42d3-987a-e5eeb6d0d921", "sighting--14080f51-2957-410e-a956-3e65e782ebea", "sighting--8e066c8d-f607-462f-b66d-7d78ce327ac9", "sighting--02bd5272-cee3-4555-aa89-5c7d9446e8d8", "sighting--6026dde3-a2c6-4faf-aaf6-468c594d02b8", "sighting--d32518ce-7482-419c-a6a8-e1e3aae96302", "sighting--f7af221c-c20a-4e28-96c0-1b3e9beab37f", "sighting--a71334ac-64b8-4c12-9ff3-38ddd3cff66d", "sighting--abb8f077-2685-4197-86ab-d785f2e6410e", "sighting--f2a8bf8c-6774-4361-9f4f-5a510436d67d", "sighting--9028345f-fcb8-472c-b883-21ef8de5c84a", "sighting--cab7d73f-220d-4730-951e-07038159d68a", "sighting--0a5d0761-ca9b-426f-9f6b-eaa12ab02abe", "sighting--cdb22813-48d9-4ed4-84da-58c1e269d554", "sighting--e27f58b1-9afb-43d5-b1ca-105819ef814f", "sighting--d3611070-bfb3-48a0-8bb6-95c87f73224c", "sighting--85262cbc-c645-49a1-bc8a-ea08f794f64e", "sighting--8da59f7b-90d1-4686-92df-1093d4681f01", "sighting--09875b87-1b1a-461e-b886-f73a8b02e75b", "sighting--efacafb4-cb8c-4bdb-aeb8-b15a75fce685", "sighting--ae12d126-8f37-4b61-8718-fe22263d7915", "sighting--f42aec95-d54d-4d79-980f-b01e48595ff3", "sighting--e6be7a39-b54c-414b-8896-4d216b3b5e6a", "sighting--1642dd34-1026-4967-8d0a-ae6bef9ef689", "sighting--c604c0ee-6244-482f-894e-fa775d9d3aa0", "sighting--bdd634e1-bde5-4696-aa63-90ae6720d3ef", "sighting--1bd623b3-f87a-4570-a8be-e6b86c733a5c", "sighting--295f743d-aa0f-47e6-8e96-73d38d557de7", "sighting--2d71b9ad-2e75-4c3c-a362-e6bdbffe3770", "sighting--6ccf8411-ca2d-458e-a62b-dc6f5ebe67a0", "sighting--aef4eb10-3b35-4883-a98a-e443a3eb00c9", "sighting--b1607967-5e6e-4d39-a184-47d4c6a55291", "sighting--e9c13fd1-7cd2-48c7-8dd9-e9857d841a61", "sighting--d8667bad-603d-4ac7-8eea-25225fafb4a0", "sighting--d74be443-c7b5-4044-904e-900816307204", "sighting--c738a3cf-2183-4a8e-bbff-4fb27aa97bbc", "sighting--ff2fcd20-8f52-48a5-bcb7-19e13ae909ff", "sighting--5872f576-86ba-4b48-a59d-105e01da1bf6", "sighting--77c25147-3e60-4d4c-a368-c700455ce3f4", "sighting--7eb7097b-0bdb-4e61-8f03-3c421f04b577", "sighting--76c3c0f9-e9ff-48bd-a67e-9e3d838a4d55", "sighting--7b512d78-53b0-4cb3-8490-be6f5638d413", "sighting--f286d7ff-8563-46ec-9134-a39dfaa2c02e", "sighting--6b48bc03-73a5-4bec-840b-6e1d2f37d1ed", "sighting--e52f248e-e3d7-4ab4-95b1-bd0337d5e1d9", "sighting--72c721e7-5c10-4097-abee-3fdeb2fd789d", "sighting--113b5031-d171-45af-92c9-f5f16d0bf7c1", "sighting--28d5f913-2e42-4e5a-a91a-7dc40ebe1dfe", "sighting--d3f756ee-c153-46d5-949d-64fc5c0b227a", "sighting--bda6600b-8c1b-4fd4-b196-a94bb9721c34", "sighting--c9bd4059-18fe-49a1-b3d0-9b6406277dd8", "sighting--7fe0a155-d1a6-49dd-8721-72ce0dbd920e", "sighting--97d806be-bfcd-46e8-8423-37e3b7184654", "sighting--baff9e65-3a84-4427-838b-adc151cefb37", "sighting--c59d5737-dcff-4a65-ad4c-f4782710a316", "sighting--a871b302-1046-4435-a247-10a18a26f278", "sighting--88153cf3-d902-4098-9c60-c568ec876770", "sighting--8fdafc02-2d0f-4754-9f8e-521dcfdf0f19", "sighting--cf032d43-c3d3-4357-a4d5-d56f1dcf33f6", "sighting--8222799c-7937-4176-9627-b2c960e3215e", "sighting--e8bd9bd8-bab3-4f74-9e71-d976e69da4f5", "sighting--d86e89dc-6d93-451b-a15f-305492eb92bc", "sighting--f2d0d0e0-e892-4c2a-9a7b-b3268b57eedf", "sighting--fae5fd7f-b0d3-4197-9077-9d77044dfd84", "sighting--56956fcb-a1d2-428e-9f2e-c43956b50ac2", "sighting--5a22e964-e105-478a-817b-33deb2447ae1", "sighting--95678f03-6b9b-4b7d-bad2-0e42badd71cf", "sighting--0562c77e-0457-4029-98c9-e47f2d982a0f", "sighting--8ac6c173-da1f-4faf-a688-976246893324", "sighting--9ad822a3-ff26-4c49-9d77-f5503618310a", "sighting--d90631fe-ad96-4fad-b793-f2a310b3f1b4", "sighting--f0ed9c31-d009-4e1e-b512-3419823b2220", "sighting--2156e8f0-7e69-4af8-b6a3-4cdbd37ed09e", "sighting--a2b57172-d99a-4cb2-943d-04ec44361705", "sighting--c0851e2f-56c2-4578-a68f-8656b6b0e396", "sighting--0d29d4c2-89ff-4c7d-999a-7d755a6a8003", "sighting--3e03456f-544b-434c-809b-1b6b2986ea4b", "sighting--91aaef86-764f-4696-b067-aa0addee7870", "sighting--e34df048-bf05-45d7-b3f9-cb16f71dc4b3", "sighting--003870a3-4328-4588-bf87-76db8d9911f4", "sighting--dc117720-1032-4a36-bc4c-3dbd2ee91cd0", "sighting--f6f93332-b271-4234-ac7c-c2462b374626", "sighting--d8ae6545-4120-4948-a3b5-50999b0732ac", "sighting--68afe9d9-7a69-4e50-8d4f-a4aa8216e04a", "sighting--14806d6c-610e-402f-bf19-f4184fba5aea", "sighting--49c43cc9-fcb4-4bc4-bb70-bc74db024578", "sighting--94da2ee7-c31b-4476-8401-89ff5bdc483f", "sighting--439edc94-6256-48cc-af52-e3d8620f778c", "sighting--48a34de9-5f3d-4029-b362-8bc617873656", "sighting--c1d7b471-8e4f-4b0e-a280-9bff7ded225e", "sighting--532f6cb1-42da-4c5c-bd76-d2113649446b", "sighting--58707b39-2081-46e5-8beb-0f800f8ccaec", "sighting--74bddeed-634b-418c-8aaa-e1e799702314", "sighting--7eca0be6-4c1d-4d5f-b212-85e441efecc2", "sighting--bfb14e5a-a5f1-434b-a906-914ed10ef6c4", "sighting--3951a648-f190-4390-bbbb-97f80a9f8148", "sighting--14521969-be65-4bf5-b63f-53f9e3953fbc", "sighting--d54d3cc5-1a5a-4be3-b75e-0ca297d06c7c", "sighting--e440cd46-c0df-46f5-b987-a16b0f7deab4", "sighting--85a01fae-009e-4294-b4bd-48f64921a838", "sighting--77d6b0ad-78bb-4aa2-a6ef-e40aef1ea9f6", "sighting--aa6ccf4c-00de-42de-b781-3ac1e3e40f5a", "sighting--184efa89-cd5f-4b69-b4bf-0577e840c7e2", "sighting--8a1f9843-467f-4abd-a301-abafc6318452", "sighting--697306f0-f885-46f1-b11f-c74c8bc5a8e8", "sighting--abcf248c-f076-435b-97c0-eacb1294362f", "sighting--309cbcc6-04ca-43a0-abb2-e8b236b25cb2", "sighting--6f452c67-4137-4d97-9e77-899eb0ee580a", "sighting--236b59c9-708b-443f-9622-7fc0732db337", "sighting--ce3dbf55-3449-4af6-8075-3561c2c7dddf", "sighting--7cfca1cf-6f4d-4463-959d-7c3edd5f2dbc", "sighting--14a37a1c-b1af-48d2-9a06-6ae3580db4fb", "sighting--0df7609b-fba7-4680-812d-85432186b8e4", "sighting--59f24165-e0e3-4ef2-80b4-04647fd9faf3", "sighting--acd24362-fe50-4e62-9eb7-9a79fb162ee5", "sighting--1bfb9b00-c6ee-4da6-8d81-56b8c673deb4", "sighting--0ef7aff3-87ae-4699-8341-6fe93b018965", "sighting--53805d55-d5e4-46da-91ab-2f1b83584e6a", "sighting--7e6678b8-12e0-47c2-b2e7-fe266c6c5487", "sighting--6b3bf0ce-01eb-4322-862e-d85bbc2034e0", "sighting--dd5c56d9-d1f5-445d-95ed-2beb90e58d3f", "sighting--4ef0b0e8-c2e6-4044-88f4-e5ab9a7cd010", "sighting--c8e68f24-2734-4f12-96e1-e4c99543a7ac", "sighting--9c59c412-8cbe-41ba-aa03-5356fefd2108", "sighting--7a663cce-30c9-49e8-9d57-ee7090a2f448", "sighting--c84f0eb0-c62f-4c03-a04e-a28c9addd681", "sighting--f1c8f30f-afb9-45f7-a2e2-a4476189cb06", "sighting--3d0201c1-b29c-417a-8246-708491502293", "sighting--24a4d6a6-f1c3-4196-8010-4f03df226c4a", "sighting--4f37ab31-6964-4718-89a0-713847fbe997", "sighting--4ea6fc08-ebb7-4ba8-b990-676cea55a498", "sighting--7d255ed0-0d9b-482f-b08e-dc2cc1b886c2", "sighting--ee032593-db61-4faa-9ec1-32867128a314", "sighting--590e68c9-22a6-41bf-ae8a-b0d0be120c35", "sighting--51da0336-98b3-431c-9dee-ea100adcf87e", "sighting--14b6f753-12b1-4ea3-87b3-87cb538be368", "sighting--ec9b58fe-fc32-4daf-b31a-4877a74a8fec", "sighting--342992d9-39b1-4c51-b091-50f1719b4536", "sighting--cda703c5-cf47-4b6b-b8e5-689654d6cc29", "sighting--5a14c47c-44db-437a-b6bf-c9aa2ab79932", "sighting--d83d14a7-6e58-4234-8717-8e565f51675e", "sighting--84cf1541-3b81-457a-ba33-a828b170ca67", "sighting--b61f8709-3219-4ecd-a4fe-54a91c6844d4", "sighting--0a1162bc-6c80-48bc-9ce0-9eaba8438b99", "sighting--60912729-6559-4529-98a4-3c27168aa9ba", "sighting--5607e17f-87af-43fe-b9b6-e5dbb7f81327", "sighting--091ddb42-1d24-45a1-8898-cdd0ccd83d37", "sighting--e6778303-a147-4e59-9168-f8012b2151b9", "sighting--39168236-2ea6-44ba-b3ec-cdd7f6c774e1", "sighting--243135e9-a43e-4967-9096-defc7e64ddc1", "sighting--86c2529d-dd10-4023-8e04-d54c2db4bd89", "sighting--d357c296-d9b6-4230-9271-80c46f79f337", "sighting--91ab45a2-19fd-4651-9d35-56f1669296c5", "sighting--c6b8cfe5-d6fd-418b-bb79-ce021a68fb14", "sighting--49d903e7-82c7-4305-b77f-7a37bc08effa", "sighting--790e59ec-158d-4d8b-9388-fa43ffe374e5", "sighting--5c0f57d2-a1bc-405d-850f-67c74e9cb0ab", "sighting--5c92db4a-3a6a-45bf-8662-803e957cc5fd", "sighting--55a2c0be-6296-42f3-a5e3-1adcbdb43124", "sighting--04eba8a5-b0d9-4ab5-b79e-11f0e5a9b12d", "sighting--1bbd7a63-7cc6-4f6a-b288-6465cbd200ff", "sighting--39c27d0b-0158-4619-8efb-1afb78cec089", "sighting--6d0f9c6a-4fea-4ed5-a4e0-f1d1cd99b28d", "sighting--61ed4d5e-81bb-4a69-b4d1-9b1719b3e82c", "sighting--1a3f6dce-63db-49a3-8317-0ed79b7630ff", "sighting--413e4de6-9682-4333-9da1-47310c13e0c5", "sighting--36bf55f8-f23a-4b4f-85bf-139b1746461b", "sighting--354b216d-33e3-4307-be36-49fd9c17c870", "sighting--bd1f9c2d-eba0-4513-9543-43b58f4e0131", "sighting--c266df96-87f1-48aa-9067-0277535823a3", "sighting--1351c6e5-1a4b-48b7-90f6-cdcacb18a5c3", "sighting--3234b723-dc16-49c7-8823-754fbcf221c9", "sighting--4619c99b-6295-4c0e-a3c4-d550088cc82a", "sighting--78895f29-1484-4578-a570-a5cab993fd9d", "sighting--a082b273-eaae-4a05-af01-be32048152f7", "sighting--a41b3ac7-37d7-42bb-bb3e-164f67c9aae2", "sighting--5ee938a0-85f3-43f9-a18d-30241560df23", "sighting--189f55a3-9d28-41e3-9719-e348a9a557a6", "sighting--cead32b3-327e-4432-82f9-c29fab84bd89", "sighting--cec3d9aa-7a31-4e92-8e85-dc9cca93046f", "sighting--62b88422-5469-4a44-8e34-c72a35883882", "sighting--ca87cebd-06a0-4226-8449-2b467246da61", "sighting--13e7db71-60e0-4646-a3f5-abfe3cd74f6a", "sighting--775e3596-15d9-45f0-8166-95c6ae8783d9", "sighting--a6df45dc-1d0c-4532-b6d8-df25e7f2eea8", "sighting--4207374a-354a-4db3-9677-61330bb5f643", "sighting--a5b2642d-caed-4203-913b-5fb33d1792a7", "sighting--33d99a74-803a-4dd7-be57-ed111569d5d2", "sighting--1fab0ef5-24ff-49bc-a90a-d15eb5fe1977", "sighting--2ca82eaa-fef4-47cb-b5c7-bcebbdb0057b", "sighting--43dcf491-6441-4c33-ba22-8f5186415d94", "sighting--f149a784-3260-4439-a565-330f77aa5945", "sighting--78188dd0-8f6d-49c4-ae7c-7e716f99d0c6", "sighting--f7be424b-9c4e-4260-89c9-53388f7c7b08", "sighting--99497de9-87ad-4d14-a72d-a82b01cdc48a", "sighting--2d438044-e98e-43a2-baea-852f78e327e9", "sighting--a52771c6-d5c5-484a-b986-e28c2215272a", "sighting--885c55ed-9087-4a8b-8a13-b432f23b4f30", "sighting--2f70ca8a-4bd5-4b75-9376-c08328a5ea6f", "sighting--27c5f7ec-0b00-4094-84c3-b331e24b0c31", "sighting--98c10ade-12c0-4ab1-a6bb-611d7a6e1423", "sighting--a8600fd8-c3c5-4b58-be3e-67c76b5700ad", "sighting--10402760-02dc-45db-98d2-963fd73aaca9", "sighting--76c6cf3a-9eb0-4beb-b67c-4c58e911136f", "sighting--69655162-4408-49a4-9d70-005fe684c1cb", "sighting--6832abf4-9212-4ba9-bb98-7da3b73f335c", "sighting--8b74d33c-e7f8-41a0-86df-84c4d1f404fc", "sighting--053d6a1c-c568-40fa-8298-1dbab65f7cac", "sighting--772183fd-a087-4f68-b608-636b3fc2550c", "sighting--131a3595-a788-40b1-b967-948df69764ba", "sighting--377a7b58-8436-4a2b-98bc-f3dc518291a6", "sighting--26b120a3-bb42-4ff6-943f-59008ef8066e", "sighting--4016c1d5-3efe-4d26-b8e2-4019791f2459", "sighting--79fbee51-ee72-4d63-acde-115bee2bc55c", "sighting--34d9557d-9be3-449f-bf22-43bf2106df2d", "sighting--26a6ba9a-3e94-4895-b918-abc5f6a13444", "sighting--57340b3d-4939-45bf-bddd-2bfb56cae5bd", "sighting--9b4ec79a-762c-4393-a09c-b7ce08bc7974", "sighting--23597f0c-2b13-444e-b329-76ec21972305", "sighting--9840d90d-cfb2-43c0-8fd3-3fa8084fb62d", "sighting--23afe4ca-23f3-46f1-a20b-e3172f01fef5", "sighting--c1e71ece-db87-4d0d-93af-d324d149e581", "sighting--5ab9ac0f-e54b-44f5-b247-1750fd688a52", "sighting--cfc874f9-ca5f-48d9-b710-202382e86013", "sighting--26caab93-0674-4e41-829c-da3c432cf5cd", "sighting--0de04d3b-7184-4378-8904-dd2cc3548c38", "sighting--66585d93-21f1-4990-ac97-2abf32ed987e", "sighting--3522f330-de55-4e19-8cfa-5ba2d3e28e2a", "sighting--e3354a37-b7da-4ffd-a63d-2f398cd991c9", "sighting--7bc58a20-07d2-4503-94ab-b64907eef165", "sighting--d6b16f73-1cd8-4e03-82ba-4f8327bd2f58", "sighting--4de44dfe-2a6d-4878-9118-b2b33e9165cf", "sighting--b4b7f3e1-9ff3-4829-a760-f05f031a139d", "sighting--5e22f481-0af7-4f65-809e-7cd2afc6c69a", "sighting--c2c35dce-5f97-4fe8-bba8-a7d41c05c0c1", "sighting--ae37cd45-37f8-4640-9f19-da9a0336b185", "sighting--65e9a8cc-ce58-48b6-b1cc-be368100ac2b", "sighting--4ede0a0e-391e-495b-896b-dc571ff53a37", "sighting--a073279d-4689-4689-8dca-1b8be12d10e3", "sighting--95cc8d86-987a-469d-b324-ae0ef7e01c3f", "sighting--bcf44ff7-474b-446b-b16c-085ba78cfb00", "sighting--f14f8bda-ce65-4af7-a991-989ffe57ff0c", "sighting--9a9ea71b-0d68-4feb-8425-f82b14c135a1", "sighting--8341fdb2-2c0c-4eb1-8adb-3ec84704ad1f", "sighting--c3fafac9-2fac-46e7-81b2-222abb819dc3", "sighting--70f71dc8-80e1-4d7a-8104-395abf368aaa", "sighting--2580c1c5-b274-42e9-8c6a-eb2496e00898", "sighting--f6f3cbb1-d1a6-4c7a-9659-99cc2e07d9b8", "sighting--fe9bde15-c5ec-4610-813b-8c9da6ebe973", "sighting--7c7c96d3-4106-4d9f-9f6f-ce0cd98d7185", "sighting--352f7bb2-4466-400b-a7d0-51568eff2cb2", "sighting--7ed1ea4a-94b7-4228-8190-bd305e2deb9b", "sighting--1e12a0e0-e1b6-4beb-bc45-449c2ea6847c", "sighting--5f3538ef-4a64-4e57-8dcc-f3cde875e87e", "sighting--fa8287b2-fb2b-4250-a95a-36609c7cda0c", "sighting--aba246a7-28c5-4eac-9ce9-2b2e12793a3a", "sighting--3b02928f-72e2-435a-88a5-4f4621336d36", "sighting--ef85d08e-dfea-43b4-b1f4-b3b308f39aed", "sighting--2944554a-b603-46dd-9c5f-953bac269557", "sighting--b357a335-ac1d-4aa9-b315-71ad96bcccc4", "sighting--5b7e60cf-2eb5-452d-942b-ce4907f678d5", "sighting--47534225-48d4-48ee-9ce9-8b5ec4e4ddb4", "sighting--6c5249c0-1d63-476f-96b3-e0af863d3c66", "sighting--d28d73a8-6acb-4812-8af8-07d52279f483", "sighting--65f0e890-9df3-402e-819c-ee0d9d7d4c3f", "sighting--20c088f1-3b97-4395-8862-49e88333ab94", "sighting--ac64e865-321d-48d1-bbe4-78a3d75adbd2", "sighting--39345aaf-e8bf-47be-b871-99d75f324159", "sighting--a56f8cfd-0bdc-4851-a522-bc626f3bdbff", "sighting--a363f64b-adbd-4a61-b6a1-302016acb98c", "sighting--29a090e4-8d3e-4775-9fb4-492ad9dfc324", "sighting--d6cca957-ff86-4ddb-942b-680611b758df", "sighting--59193428-1624-4a33-a77e-9457258178c7", "sighting--f99a9f07-035f-4e7d-89d7-006a4933eccb", "sighting--99914b3f-581a-40d2-87bd-749c1f2f9a45", "sighting--4da0449c-4c42-4baa-ab81-f748c2944477", "sighting--3354b5ee-b2b5-4ffe-96b5-21657516a03c", "sighting--0b98fab9-1459-46ec-bf6d-413d0326c897", "sighting--ffa75646-0ab3-4f8d-a32d-46bb029330f6", "sighting--46d9de78-d66f-4aeb-b99a-84eada37500d", "sighting--413ae1ab-3acb-4996-aa9a-67a5e16bcbfc", "sighting--cf2d4b30-2c51-4275-bd07-d7a292eb26c1", "sighting--9feee5c6-81c0-4513-af4e-3aed847ea0d0", "sighting--1b878c54-e7f9-453a-b901-26e2151f1f74", "sighting--aaaa72fd-0399-4392-ad99-726d35886e8e", "sighting--3c51fa64-7daf-446b-8260-2d6b46cb0209", "sighting--21738ac8-a471-46ac-90a8-8f5be6aa60d0", "sighting--34d1915e-e1e6-4b81-8394-50286e526bfb", "sighting--e03c5fb6-e0c9-405f-b0af-ee07a6715a8d", "sighting--dd5f5656-cbdc-4193-8b02-e2f93b4c6ff8", "sighting--6e72a429-f6ba-4fc7-bc08-154e91db4940", "sighting--b1b73d91-0af9-4652-abc6-ad0bca34909b", "sighting--d938fc64-edb9-4251-bce2-043dbff5db47", "sighting--4e58c29f-37f8-4c5b-bed3-95b4566142a4", "sighting--9d97ebd9-2b17-4e11-9e96-7df0e89bf58e", "sighting--93adc941-d122-4954-ba63-eee23a9931d3", "sighting--86214dab-bae7-41d2-ada9-b4432661032e", "sighting--3a8499c2-87e3-4c70-af99-8cfe327762d4", "sighting--48378498-a7d5-4854-b097-86e55e3b1418", "sighting--8adde724-90b4-440b-bda3-17d892961e30", "sighting--3fff95eb-6838-439e-8dd7-e45d12a1b809", "sighting--e1b41947-ae43-4b38-8e72-684753c82b1c", "sighting--75c6022a-ff28-43cd-bbfb-cf33af308769", "sighting--62e6f63c-40aa-4dd3-a954-9b38da982c97", "sighting--3e60ead5-7a97-46dc-94c4-bb4767c42f30", "sighting--7d463e46-d74d-42f6-b133-679b99a3e920", "sighting--f9b5f2ac-50d9-415d-87dc-e28052b5083a", "sighting--5f008ae8-c58f-4a2a-9b36-78d61c69a902", "sighting--bd6a8928-ffa0-4f05-9d91-7b59f6d4c398", "sighting--a0343707-2a81-4e2c-8606-4092aca30365", "sighting--f96191ad-74ed-4cca-ba8c-70a2f528b6b9", "sighting--52de2443-8d24-4899-90d2-152222b79f04", "sighting--4b0664ec-1d75-40ce-8b84-53e6352f8fad", "sighting--56c57ac6-060e-4d5f-8d75-1b32d4436d30", "sighting--977d0227-939f-4a87-aa57-15a97dda29fc", "sighting--9137a634-f591-4768-886f-279ecd10ca9d", "sighting--d2df4431-cd51-4182-b5ff-141304d44ac5", "sighting--dff4afb0-61b3-4d15-a92b-546bc68b114f", "sighting--1f66f453-5b8e-4d37-9d46-761e33786f84", "sighting--516ede14-07f5-433c-95a1-8aaa11900b33", "sighting--62198983-990a-4cfb-b823-7eb2d2ad2d41", "sighting--64f34fe0-97c3-4b3e-b7a8-554537ff5609", "sighting--f400b584-42eb-4bfb-9b1f-3975ff26cac7", "sighting--1292ab2c-fa3f-429a-80a4-895e444f53af", "sighting--68bfcd3d-893a-4466-9c1e-03f9924e5902", "sighting--7b11df07-766a-4f69-bb8c-e2975d88e43a", "sighting--9087ea4c-a3e3-403d-98ea-e4978bc850e7", "sighting--ac326374-cd02-48e7-8c61-5f61ec29014f", "sighting--683af9b5-3fd1-4d25-a89a-a81efefdae4c", "sighting--9f557940-ad48-4d40-a92e-2e2ec9d4cabc", "sighting--53082998-fe98-4e2b-b5e1-55886e070e1b", "sighting--5bdbb024-a964-4553-b6be-c2fc3f57a6a7", "sighting--43eddd83-9340-489f-b946-f2eb0a6704d6", "sighting--5a28181d-20fd-4e88-b1bc-c85a1f100945", "sighting--d8c9c4db-b0ea-417c-b15c-893483747a93", "sighting--8e1bbf3e-407b-437a-9238-31d6523b0c95", "sighting--0fba7fb3-6b75-4e7f-b2fa-028e84b3731e", "sighting--6edc2a36-f8e7-4cca-8e7b-76f915d400b1", "sighting--68d7bae3-78e4-4b89-bd22-fca95d91c423", "sighting--524ab0a7-5c78-4651-b110-4dbc714010e7", "sighting--6d70e5a5-d2ab-455b-a32e-654622ebecb1", "sighting--e9203d85-a54a-49fb-bf6d-4beddc47b27b", "sighting--973d0310-0abd-4af3-a7a0-02fa2f1914ca", "sighting--f389fb2b-bd6e-4989-abb7-573ebf9fda93", "sighting--9be7a031-9701-498e-9382-b5851cfc040d", "sighting--61fb7545-b06a-431b-9547-564657de5256", "sighting--b31251f7-57fa-49f9-b93f-6defed9e6986", "sighting--a58791df-8682-4219-80f9-82907ba9ba8e", "sighting--767232ad-f6dc-47ee-b99e-7fec460c2f76", "sighting--90c7a107-8d8d-4078-a0d2-ed250f0271cd", "sighting--2ef36ba3-9540-4a92-a775-cff413bd94b1", "sighting--317e5814-62b7-435c-8188-89a1e284dc30", "sighting--f9eeae32-9f9e-49c6-8af6-a34be3004593", "sighting--c64c4d06-1cbf-40f7-b325-ecfc041cdcf4", "sighting--b17d3782-4a50-4086-b12d-c78c2d112f8b", "sighting--f3947a6d-a086-4c44-a0f7-48ccc456d8f2", "sighting--b56d52f0-2bd4-494b-a5bd-2230a0a4efb9", "sighting--44aba46d-fd3a-429c-b6db-ff7d8cdf1cb3", "sighting--a780aa96-b08e-4d1f-b539-2ee6a5861fc3", "sighting--6ef477be-ea7b-47a0-a09f-981089a47364", "sighting--b000314c-561d-406b-b444-1e9a3c25689f", "sighting--88c90336-6836-49e8-bfa7-4f2bd9aff4c4", "sighting--9d9ed4fa-be3d-4fd0-b844-a8a0203e3fd6", "sighting--cf0b92e6-0543-4d10-9fd6-fbb8ab224f72", "sighting--e5fcff33-c394-4313-b42d-bc669e65198b", "sighting--bb263fa5-d5bc-4db0-9211-254cac754771", "sighting--7bc49714-1fe5-4c1f-bccf-d291145d8cb4", "sighting--56d1147d-3d57-4625-b1dd-68dc52db96f5", "sighting--c2471d7a-7ab7-4c9e-abf3-77888cb4a5a4", "sighting--11801a5e-9447-4693-a189-95d5edf486f2", "sighting--098b074d-19f9-4318-9c6f-7c62c97b2039", "sighting--a07311c3-a585-4943-8a4f-8fc9f158a0a5", "sighting--a79698c8-dfa7-45c2-8d34-68d7b34de29a", "sighting--30faf329-9f42-47f3-9571-690b839554c3", "sighting--f9b74db8-35a7-436b-b2a8-d61f1e3cb24a", "sighting--514877ed-79d8-4ab3-aead-6bdd62028819", "sighting--a1dd04e4-cb38-45a0-9d48-44454e46f987", "sighting--3eaa1c11-c305-4327-a0b7-241a8d6df5e9", "sighting--82fcddc3-767c-49aa-bf31-ca9cc878e6af", "sighting--64fb94a4-406e-4eef-8133-ecff94bf2d81", "sighting--07373400-15c9-4af7-ab05-670842c5871b", "sighting--6d6933cf-9f50-4436-9c00-e15f3ada4a55", "sighting--37b98b92-54fe-4ee9-b108-1c3d266f3abd", "sighting--3e46c225-60a4-4fd8-bea2-1241d19466fb", "sighting--16a27170-e80e-4cdf-8aee-d211bd2e0394", "sighting--869ad81b-4b23-4c9a-bc7a-eb18a913dd0e", "sighting--dbb6901d-8692-4819-af33-98582b749b13", "sighting--1074018b-b77b-4e18-b284-12b89ec49a48", "sighting--3d475dc8-fa65-426d-b883-a04ffb39d8bf", "sighting--a4d07945-aad0-4fa0-a39d-31376d80ef7f", "sighting--913093a9-0f43-442c-9a9f-db88f81416ac", "sighting--3c51d0b0-0e08-4984-9806-2b5b6deaf462", "sighting--e26d3dd6-beb9-46c5-b0b9-7a9c1c67dd5f", "sighting--4fdbcb96-07c8-45f0-b591-ca336e8a5ea1", "sighting--5b35f947-cb32-4746-bc80-c9d5ea24e45d", "sighting--2b48afbc-7ece-49eb-9642-d8474a2f40bf", "sighting--64e2f91a-4346-4ad4-bf87-531a00e686f5", "sighting--614385d4-2b7f-4f38-b24e-191ed8bf7d0f", "sighting--25a06967-4e58-4160-a44a-1a90ef5fbfad", "sighting--19dce001-0f2b-4f09-b54a-ce236e55073c", "sighting--41129eb4-3c83-410d-b838-9bdbfe7f4fee", "sighting--4a2ea843-5f2f-4952-9a45-cc8ec30e4939", "sighting--5cbdd22a-1912-420a-9e30-c4475619dd55", "sighting--b7e0f5bd-58ab-46da-9042-5156c142d061", "sighting--dbb69555-a233-4eb3-af80-9d1fa6568c53", "sighting--67a5bf50-09b5-4dc7-a2c6-c260f1e20724", "sighting--1d03ee6a-4d99-4bbb-8007-37c91aa20888", "sighting--577d7760-88c4-4904-9188-72633bf788ed", "sighting--56477f68-9ac2-430c-9e64-88006f31ef5e", "sighting--7c5045ea-cf0d-4cb8-8506-c44b270988a5", "sighting--bf1d7c92-c929-497b-81a9-2a100c6123bb", "sighting--2e98a811-787e-4463-b97c-bf42cde0c805", "sighting--78f166d5-a3ce-4d54-a501-02f20f26c87b", "sighting--6af0af2c-33f4-408e-8cc6-82bb33e9c26e", "sighting--98fad1f0-9324-4bcb-969f-0925f9064a35", "sighting--d0386dfd-7298-4e16-a321-02a2bfb577d0", "sighting--e3d96435-288e-4f79-aac1-27e14afe7456", "sighting--328fb824-5c57-4941-9a65-bf9237ca0065", "sighting--550d6404-284b-4cba-bc3f-9bc6cf6258fd", "sighting--5abbc2e8-f2f4-4d5d-9117-2765f88cf151", "sighting--29dd569b-9ce6-4e54-8109-dbe283c2b24b", "sighting--9e97717b-7641-4b3f-8642-79c829acb0c4", "sighting--c36590ce-3bba-493e-93ed-cc5fc884bc4c", "sighting--22f8b44e-c181-4c21-b54c-cb150807c7a0", "sighting--32ecd5ff-ff99-46d3-acd7-c9681e7e4ffc", "sighting--1a80355e-02f8-44ae-99fc-67d7e455a941", "sighting--7af8e375-2d7f-4a5f-a675-ccacb2f4399b", "sighting--44247952-ed5f-401d-8c39-499c1529c934", "sighting--42a262b0-efc7-4f79-af05-92959f9769cb", "sighting--1a4ec9f7-c299-4040-bcce-3f53167fbece", "sighting--b15b8653-1ece-4947-804c-069f87cc70c8", "sighting--9ec0cc66-1467-46c7-859f-01da7574262a", "sighting--6c523653-6979-4a9e-ab79-0cd12775e5bb", "sighting--ac4c62bd-4ccf-4484-ad7b-6ef1387cf4a0", "sighting--a0e31b4a-ade9-48a7-8a38-2f669ed593ad", "sighting--7efe9f10-e0d6-4085-95e6-3e74a52e2cac", "sighting--80acaa6e-ddee-4faa-bc7d-c36d68747547", "sighting--756f2cc5-e271-4d5e-9338-73464b820b88", "sighting--0769ec12-87fe-4aaa-85b5-ab0072a77a4a", "sighting--d6434410-ce6a-46e1-a1cb-ba1a7909ef3a", "sighting--a762740e-2df1-4ee8-bee4-3400827812c2", "sighting--50b9d135-e8c3-4ac3-9442-e8bfa07ae521", "sighting--42650ddf-38ff-4012-ab54-8f74bbf7f8fe", "sighting--88506198-86c9-481d-885e-331f10bc6897", "sighting--ac86585f-c8b5-44b9-835b-aa2b0b510721", "sighting--c36b6623-792f-46f6-ba08-7ea30e198e21", "sighting--a7fad9c7-9131-437b-a126-8d58743dc4a7", "sighting--13116e31-8fbe-4b92-afe7-8c300326775b", "sighting--5a855b56-412c-4297-9f46-3e8ae60e16d5", "sighting--212d07a9-f152-4efe-aa90-d330d15eb26f", "sighting--e9ba7abd-2a81-4b74-8a45-942e6a3113ac", "sighting--7f733394-3b5b-484b-a6e7-5127479011f1", "sighting--027ceb1c-5301-45be-9eff-5e9f00732aef", "sighting--9c935d11-c698-469f-b868-812f779762a3", "sighting--36b0e1d7-fd4b-4d2d-8e3a-e616573df350", "sighting--0aeab04b-a95f-42d3-9e3e-90258b49fd65", "sighting--edf94283-3815-46c2-8dcb-fff075e7e70a", "sighting--868d0b4e-dec4-43d3-ba18-77ef100aa8f8", "sighting--33fb8ca4-0b3b-4e87-b99f-da9ba5ceb9f0", "sighting--9a6b6826-34d1-47ca-87bf-01e1faa95f19", "sighting--dbf00483-dc0b-4d61-b7a5-37490081596e", "sighting--24227199-9098-4d8d-a1ef-71837d369979", "sighting--fd91dfef-1c84-482b-a058-fcd2c95a8201", "sighting--0e496d9c-a030-4177-9260-02166858b888", "sighting--08a3225a-c57f-4633-a162-2ed643b024a4", "sighting--4820475e-d0eb-47e2-a178-587e507a2191", "sighting--93673b5d-3a77-42a4-bdc7-faef12918437", "sighting--61fca6b2-291e-499f-8ec7-5befa24f9122", "sighting--73095e91-1810-4bfb-81f2-299f03cd8966", "sighting--94668e07-365c-4e99-8b99-1cb90435e9a9", "sighting--f2d6c91b-a236-4103-8315-2eab16edb2e2", "sighting--70e38742-fae7-4675-a05d-651088f3e411", "sighting--4b623846-3c98-45a4-886f-3f299c1c3639", "sighting--e6aa6c4a-9558-45f2-bbb5-ac42de8a6710", "sighting--13a8be8b-1fb6-47fd-a1db-6961b4c59486", "sighting--3bed9bdc-e6f0-449b-9bb3-d8f3140dcfcd", "sighting--80041d4a-6b7b-4cbb-8b15-17bd5ded457d", "sighting--6f419de6-66cd-4c38-942d-6bff2285d721", "sighting--cc55d52d-153c-45df-8088-11a40c37cc48", "sighting--9adc29f7-b9ac-4891-9af5-3c3ade5c2bbe", "sighting--b61cf8eb-72ef-4252-8198-8117bfd0b209", "sighting--1a137b45-445c-4474-8de7-89ac16f488e1", "sighting--24e17199-4ce7-44aa-9e7d-f2112a2274cb", "sighting--8df97c32-d94a-47ea-b82b-0c7a2de06841", "sighting--04429339-2a02-46cf-997b-5ee4b13a4b9d", "sighting--58e6ba9d-5dc1-4639-b428-6be6ee913b61", "sighting--2be140cd-b3e5-4ed9-8e3a-d1debece93f2", "sighting--ad522959-a050-425a-a7a4-6dc22a92d87f", "sighting--c88f1920-0846-4b52-bfbb-9d53a6bfcce3", "sighting--040d1c99-2710-4538-a3f7-644c1e5b0603", "sighting--e9e37643-08e9-4849-8a36-009ccabd556c", "sighting--06f690c6-ed1f-43c1-8d6c-447c4ce6eae1", "sighting--18c226c6-c8ae-4bb9-9113-3ed673aabdcd", "sighting--3976c4d1-2d74-4d0d-ba22-89ef89f9dbfd", "sighting--809837c1-9f62-4670-bfeb-ed6eb59928e7", "sighting--57809d65-7c80-4fb9-aeaf-7ef484809abc", "sighting--d8d97108-44fd-4c59-9f4e-61f512df92d8", "sighting--9598de2e-1b6c-46d0-bba0-21ec4aebff9c", "sighting--ee9e78d8-6856-4a0e-ac14-fb272c8752bc", "sighting--6c058903-2dfc-4f2a-b04d-ccf1dcba22c4", "sighting--a5d30301-19dc-4bc1-8ff5-8725004f9a65", "sighting--626316dd-10a7-427a-9700-9cdd5fe03e4f", "sighting--608309d7-141f-4480-b5b0-82349b9dfba2", "sighting--e29eda75-1c81-4e6e-8d8c-215d1933f893", "sighting--dba61ba8-f573-46a3-8d1b-fd1ea21e8b0f", "sighting--b9239346-e1f6-48a7-8f1f-05cc08a63fb1", "sighting--3764a2e7-cb21-4343-960b-2534fb0179a1", "sighting--e03699f8-6e2a-402a-8a75-8dfc399362c7", "sighting--f32dcf9d-a404-4873-b291-0daabeaa68b7", "sighting--598ebef1-e7aa-49f5-ac2c-484044de5d8b", "sighting--b18a14b7-f9f0-43cb-ae23-a6ee1875531a", "sighting--b5e99322-168a-478d-a131-7d98ae110c07", "sighting--d8def97c-27f1-46cf-a484-f31fb6ff9a14", "sighting--d8a614c1-73bc-47ef-8bd5-0cbfcd077b8e", "sighting--3f31429a-9d54-4e10-85c6-1c3aeb6c58b7", "sighting--a8ca332c-de60-4848-9f04-74b758bf2cd7", "sighting--ea84a0de-28a8-4ebe-93cf-43016dfb1949", "sighting--ea7327bc-19c2-4ec9-ab74-54bd64416937", "sighting--d7a89d6c-157a-4044-8599-7d8e30d6b9c9", "sighting--747881b5-fe76-4a1e-a5e0-932d085a8e1a", "sighting--650b7c4a-2353-400e-9104-7b4a8d256d24", "sighting--7b2067f0-71f4-437a-bf88-042598d6f56b", "sighting--7034f77e-f3ab-41ee-9aeb-89ab683ef64d", "sighting--d8aa982b-399b-450a-a928-1f275f555da0", "sighting--703496a4-0cb5-4542-8880-c78412a25402", "sighting--1cabcc93-cdb9-4b32-9259-ea744e5d2697", "sighting--2194caf6-8147-491e-96af-601b0cffa552", "sighting--34c2472d-0467-4ac4-97cd-9a8ac083b98e", "sighting--05560262-61d3-4693-95e6-b580a92e7722", "sighting--2e431bb3-f584-4f4c-901f-16bd935f8f90", "sighting--812133b9-f29d-4162-992f-a88d87d94a07", "sighting--5d6fe48d-b186-441b-866a-b8f0661e7541", "sighting--0c79e757-1258-4ac5-bc59-4dd6663f44bf", "sighting--964d8471-e3d9-4b98-ba80-ee1ec51e8e3e", "sighting--ff945c40-8bbd-452c-b439-e6fc14e2495c", "sighting--823e467a-d871-4d1d-ad8c-3563271bae94", "sighting--2e11cd68-8f2e-4256-a76b-5394c693e75b", "sighting--5f3b2f71-f3b5-4c4d-a77f-d2d9e3cb4ff4", "sighting--e19ddc35-5d4c-40c3-9f22-00b689452fd8", "sighting--67ff5890-68c7-4726-86ac-b54044d19dd9", "sighting--eaebfea6-8289-42a2-9df7-541d57b49544", "sighting--208d3e95-1548-4783-92c5-e9b78c59e885", "sighting--92af027f-176b-4290-8939-efb6cb617cdc", "sighting--4bc91dd3-b6df-4a5d-bf09-65510cbb7320", "sighting--65b26820-384e-46dc-9b7d-1549bc9ba0a0", "sighting--f546399d-caf0-4a0f-8ba5-c155a572d1de", "sighting--f9aebb8d-c6c2-4167-9f0f-06829962b5dd", "sighting--b387f5aa-d69a-4a94-9bc1-8d19e35b6bbc", "sighting--ea2dbf33-032e-456e-9fc4-3508557b935d", "sighting--eb541ac6-76c8-4965-90a2-abb9f1f9484f", "sighting--7abc730e-fd23-49ee-8325-993d2681c303", "sighting--e980300c-5657-41fd-8bc2-42af81c536e7", "sighting--61bac30e-e5cd-4e27-8982-0fda02b0eb2a", "sighting--1e375fa8-0ff4-4f0d-8406-7f089bbe3cfb", "sighting--1c459130-d0bd-4320-a0b5-ca9e0569294a", "sighting--ad88b5a0-f47b-43f4-8c92-f7105c1666fb", "sighting--ee8c5ef4-ec08-4f8e-b570-dd824c6e4574", "sighting--883093c6-fc0b-4b39-9d14-16f392f5ba7b", "sighting--51793b31-b7cc-4bf5-9920-f776e5da6eb6", "sighting--c759126d-2c0a-4494-8269-af8e6400c35b", "sighting--f0ad66d6-4600-4a31-a32b-eaeee9c2ccba", "sighting--cd7f8058-5633-4f9f-b544-43c8c6a5c76f", "sighting--92206735-9c9d-4e55-8e4a-203ea907be09", "sighting--b264c70a-b324-46b4-80d4-9b6ff7d17001", "sighting--d8c9e8bc-480f-4e58-9e53-22ef9256ce13", "sighting--aaa6c63a-add7-485f-adf2-c851db37f519", "sighting--feedbd09-f49d-4291-b31b-acc8de0f4f4a", "sighting--273b0cae-4090-44e0-b51d-490c1d42df99", "sighting--6f3a077f-e6d2-44d8-aeb9-b208bc5a825c", "sighting--4d6bc596-32a6-4909-a285-7d4694f7d3df", "sighting--81c456c5-4964-41f7-b0b9-5c2f74321e0b", "sighting--d98ec0c8-9660-4480-a734-b5fe736e01e5", "sighting--cb101955-2129-44c3-b591-4e9ab6db92b0", "sighting--ed1de4e7-edab-4d8a-8de8-86769e7361bb", "sighting--31066060-e49b-4e69-9199-6f3b0f95bbcd", "sighting--d62a578a-0328-4faf-82f0-5b6b256a9dd1", "sighting--75d24516-0ac6-4b01-a86c-1cbbbf3088dc", "sighting--c08843af-167e-4384-83ea-244c57564838", "sighting--9479460e-3503-45ab-a32c-f3c56201564d", "sighting--59c04e65-39f5-4d6b-a099-20606ccec278", "sighting--0ae1cff3-45c9-4022-bb62-68c825e80331", "sighting--9772ea17-6397-4f3a-91ef-d2fce349b770", "sighting--0270b027-d117-41fc-86a0-ca5194bb9723", "sighting--7f89fc42-0912-4a4c-b0d0-d5b3072ee9af", "sighting--81f13969-4fef-4c1f-9397-1853b878da5c", "sighting--39797b4b-7bf6-417d-b1bd-2d636ef577fe", "sighting--132ca0fe-a876-4b7a-a0ca-efb73a48a671", "sighting--81c0a68d-f32d-4e36-8b7c-cc443fea7e8a", "sighting--7b169a65-ff21-43e8-95eb-0d879097d6ae", "sighting--fe54bab9-b465-4ad8-8983-05924ab9f7a2", "sighting--efddd32f-d76e-4ca4-b557-82b53bb1cd5d", "sighting--f85db271-aca7-4392-83c6-7492a5a7b1e0", "sighting--9edc6520-44e6-4705-a52c-b41ad96d1689", "sighting--db8235d3-4749-4e67-b2cf-4555338b3c95", "sighting--5f7fe2c6-c5d0-40eb-ab7a-ded0154f4958", "sighting--537c3d8e-832a-491e-b3cc-70e0a36e9de4", "sighting--40c73ba2-25c5-4d14-b271-f5c757060261", "sighting--7fedc0e9-43f3-4e81-8aee-acd7e74e83ed", "sighting--04ee86ec-7cb7-417c-9e2e-bad4384b6f37", "sighting--9078fce6-b336-475c-8cb6-bbdfc11d0fbd", "sighting--94465670-c1c9-4faf-b41b-9e7383a93dd4", "sighting--62554542-5e6e-478d-b79c-e3905a51a42c", "sighting--254ea51d-fe71-4e9a-b83f-7094a2142350", "sighting--1dff3305-5fae-483e-a957-252c452a02dd", "sighting--80b232e3-56ad-4ec3-91ab-0fc826c71aeb", "sighting--1c375c80-ddd9-4461-92dc-47eb107b9e33", "sighting--0dc31442-3822-4c9e-828d-852729bf1160", "sighting--79c0d012-ba76-4cfd-a818-7365bd9b5749", "sighting--4607b99c-66a8-4913-8fef-9bc86dcaa111", "sighting--156b679c-56ed-46fa-9f45-3f651316daec", "sighting--40432d78-acc1-47d4-bb1f-5b2089a1b6c7", "sighting--f858a647-b054-41b2-bbdb-fcd3bd8dcb05", "sighting--79afd82d-eb8c-436b-86bd-16bc82436e2f", "sighting--81a90509-27cf-41aa-8ee9-4fa1cbe1e88b", "sighting--3b33cc1b-3a72-4ab4-838b-1d87a3c96802", "sighting--e23f540e-4151-4baf-a8a5-62f6858d6364", "sighting--d380094a-5b44-49d0-80bf-9ae2846208d7", "sighting--48977d2d-267f-4ada-90cc-32ddc21c2bec", "sighting--95b71d25-646e-4106-ac8f-560e1c4cd32b", "sighting--45e49135-7ead-4fcc-a8b9-9acc88aeaf6d", "sighting--22fa28f5-16c8-48c9-9240-0395af365692", "sighting--c1b7f24d-8226-4749-b092-aaf8066bbb89", "sighting--ba2d2a5e-f959-4138-be0f-442cf62cf6ea", "sighting--419772aa-1424-4267-912b-cb49f6c04184", "sighting--fcfd7323-e606-4838-bac6-bd06c5a281ad", "sighting--dfd00171-18b9-4418-a44d-dcdc9a91d5de", "sighting--909ff899-68f1-4845-a50c-8313869788c1", "sighting--8ad5ba1f-e664-4262-8f5b-ab454b80a8a4", "sighting--66648915-5b29-4c17-883d-73e8dbec01b3", "sighting--999b90cc-b8db-4169-8ee8-25d85182b14c", "sighting--2514d1aa-7c76-4682-9fb8-c1cab99d0816", "sighting--d6e4bee7-8637-4485-93cf-b1070989d8b1", "sighting--afa5ed87-b53f-46b5-8dec-cc35adebf269", "sighting--89964a4b-22a9-4b44-9058-2e615cb2788f", "sighting--93947b56-4263-448b-afc2-defbfd8b2c49", "sighting--2f605e13-1150-4aca-90f4-fdaa2f0120f1", "sighting--8e400ed6-7bf4-4e37-90cf-96292f7d77b3", "sighting--12c07398-dbf0-4852-9f94-7a0f5fa9f970", "sighting--16961687-a171-4f33-b705-080918ae7e91", "sighting--fb99e025-4f09-490d-964a-0ad6e57e072e", "sighting--6bae1a46-a9f1-4ea1-89ba-295b046fef5f", "sighting--c42ba57a-3f3d-43dc-a6dd-2977b2c75b09", "sighting--bb478b97-ba3e-4eb0-87fb-77ff2c96a41c", "sighting--432b153e-14d1-41ec-ba8d-4265b7d081ba", "sighting--546fadff-f3fc-4010-916f-d8278e7b135b", "sighting--898a76ce-faeb-4310-a732-d9a378314687", "sighting--2f1a6428-6b0c-4fe6-92cf-ee0066867117", "sighting--f60b7738-89d4-4de9-8836-89e67d871a0c", "sighting--32b1f6f9-df89-48f2-bea2-f4eae31ddf68", "sighting--6f2bb37e-fc97-480e-8ef1-7d2835c1405c", "sighting--dd4dd590-0bfb-4dda-95ed-8ce01e8e4d42", "sighting--77c2fb93-5437-4399-8f04-ab6f3c87626e", "sighting--e3450a23-c8a7-4e48-a9b8-2caa2e9d4b17", "sighting--280f9fa3-fd46-40d9-94b1-21440a75c024", "sighting--f843fe20-0ac7-4c43-9e36-f7e4a52552e9", "sighting--15fa0feb-753b-4f46-883c-dae5230ff519", "sighting--d08dd02d-80b8-4dff-a45c-05b8cfe3019d", "sighting--989ea913-1cea-455a-b9d8-688c49c53079", "sighting--bbb8c227-c5a8-4fcb-b107-cd6398a1d064", "sighting--f5061b58-9ab3-4c51-8c44-dbb223c3c20e", "sighting--1f430cb9-0be6-4e37-b9ed-e44ed80d4d87", "sighting--995d73a4-4555-4375-842b-cabc11cff9aa", "sighting--4f6d7b2f-75b0-497a-91ef-a94d1ada943e", "sighting--f713d4ae-4a73-4ea0-95fb-480cc14f8df6", "sighting--24c6f0e3-2ff7-4b2f-9394-d36e9c0dd8b1", "sighting--f5b9350b-6a75-4ff8-a40e-1b5cf869e817", "sighting--7a912c09-aeb3-4529-bbf3-e2c6e178fa75", "sighting--48f9668c-098e-472f-9b64-f85663806102", "sighting--4860ea01-1db3-4a63-8d5f-803e7116ad26", "sighting--0c65556a-4f12-48de-87d9-113f01500732", "sighting--a41e3457-d3de-4ef8-86ce-a9a21a8e20cf", "sighting--a6266591-7c83-4c11-8dbf-95ae90560447", "sighting--ffe764bf-49bd-4f95-b827-b2824b065de6", "sighting--c24ed28d-e03d-4d24-a5b9-6520761a6aec", "sighting--7560c0fa-e8ca-4e51-b8df-e105a5b1c3e2", "sighting--aca1ac7e-a175-4063-aeef-3802b401127f", "sighting--757bb4a2-969b-4ec2-8c0d-a3a0ecfda99d", "sighting--1bd17eb8-f369-49bd-9b76-d4f123c6e0e0", "sighting--45778b5f-1421-45dc-9660-282473ecc3cf", "sighting--c78d0f74-6bee-4d5b-85cc-ed3a6f5aa607", "sighting--35ef69ad-791a-42e1-9c83-b5c43641743e", "sighting--ef590094-b0be-4428-a347-a3f233589cdb", "sighting--b5831110-4ffc-45e5-be51-d0ca08e06f64", "sighting--46227cfb-7052-484c-85d7-e87409ba0a2d", "sighting--2523cfb0-4e16-4636-b11a-443acc403f51", "sighting--49848031-8faa-4e6c-b16b-93816baa7c70", "sighting--baffe8e2-196a-4f98-a3d7-6fe0faa1b671", "sighting--36bdfffb-ca47-48ec-bcce-19d25a333f24", "sighting--a3a22be3-3db6-46bc-899e-1def67026bb7", "sighting--c1c770e9-09ef-4fe4-9100-a1a98d06aecb", "sighting--2bf0696b-c725-498b-92d0-f065f86db39a", "sighting--2618b970-8a60-4025-9589-ed32a1ed82e8", "sighting--ae7e48e5-62cc-488e-81e2-95fcdce8e3e9", "sighting--a725017e-016d-48f4-8b9c-e6c3cb95ba26", "sighting--f2937f7f-4b10-4248-90ba-4b21cb11d052", "sighting--853beaf0-f580-4200-b944-8c50724e7b9a", "sighting--9197f450-645d-4841-bd80-4750c4decf9d", "sighting--1ee0a4b5-e701-4cc2-9c97-56fc353254c2", "sighting--766473a0-7d95-4c2c-a7cd-d1fe45426dcd", "sighting--ed9a0145-3aa8-4d71-b6c0-3b78cf3fdd47", "sighting--7dde7597-b2d2-4318-81a9-285b5995aa92", "sighting--da0dc12a-b2f7-43a4-b5d4-4d23fa59f179", "sighting--2169d4a6-dfd3-48c4-936c-efb4e693fe00", "sighting--80edeefe-1d77-4f3f-b3ff-251530ef4deb", "sighting--128afe8d-7e6a-45b4-b8ba-3a909980f4e5", "sighting--8eebb61b-d347-40ec-9dd0-322f680351a6", "sighting--c7ca89d2-2bda-4d6d-b19a-c577083eae99", "sighting--ebc0b5b9-f365-4ef9-9980-91464e46a13e", "sighting--e9f35bf2-3290-48d7-bfcf-6e3b668fcc74", "sighting--a792bb79-34fc-4ffc-9fa1-89c254a83019", "sighting--497dab6c-d79c-43f5-ae6e-283c17d40c98", "sighting--83930f06-8786-4b90-b9ca-92918388c9d3", "sighting--36885407-2b86-4ff7-9447-9e51488f1b22", "sighting--0a2368f1-62ad-40e0-a94e-a9200c440609", "sighting--20a67575-fb3b-4dc9-b10b-4519fc7f782d", "sighting--5bb82e13-6c2d-4c51-9a71-688e99fe0cdb", "sighting--574da37c-1abc-42e7-a7dc-f6d06d10a343", "sighting--82a79681-c4f5-41de-ab21-1a327463bc66", "sighting--9a3dda03-8a45-4651-8b37-a2bc01293758", "sighting--b1c3ea1b-4fd5-4e75-900f-74b092db8391", "sighting--2e921ba0-baca-43ef-bd02-2105ed44cd87", "sighting--b342c11e-4d2a-49f8-bf32-361dfa1a58b4", "sighting--d58e9ca6-9fa8-4550-9a28-6c8dfef6fb8a", "sighting--ff6dc548-0243-484d-913b-4fc369d0e1b8", "sighting--0888225b-19b0-4bdf-9ad4-42a4a0818cb5", "sighting--32d4a043-3fc0-4d66-8c85-48ac67a552da", "sighting--faed3e28-8b36-41e2-abe9-f78dd938c254", "sighting--56a59909-7190-446a-8572-ac32edd92d5e", "sighting--cabf17bd-f0de-4ce4-b732-1d77a638c06e", "sighting--a5c5590a-851e-4688-90ed-85027a0f178c", "sighting--12b822f4-8e0a-4741-8385-d4cc881b743b", "sighting--63577e34-6d87-44d6-b272-0fe6d17387d4", "sighting--3a0b9b36-7cbf-453b-adc9-465aa2068dac", "sighting--dce87879-5834-44ed-a899-59a128346376", "sighting--2907c9b0-450a-48e0-9143-dd5b467900c5", "sighting--dfa8bb05-f8b5-4505-8a06-b324ea1c976a", "sighting--7c8d6f41-b18b-4e4d-9e63-9fd82391034f", "sighting--ecc10af4-9d62-41a3-a77c-d6612fe9c9b7", "sighting--37a03a97-b9cc-48e3-a32a-89bf0005e2af", "sighting--e971392c-dfc2-42b3-b5a6-c097617156bf", "sighting--1dfee336-1046-4dd2-9e39-51a6e187c6cb", "sighting--1c1704b1-d8fe-4167-bf4f-98bfc1604f2a", "sighting--eb563cdf-37d4-4be8-b374-09bde23e3b7f", "sighting--5e5790c1-2b4d-478c-90ae-105fdb27fcdb", "sighting--b753ab04-6bb1-4be3-9140-85e7a598b2cf", "sighting--9a0aa87a-0cd0-4b9d-825a-edbf31a5d94b", "sighting--f1211994-cec8-47f6-81f1-30616c1e34b6", "sighting--d1fbdeab-96c6-41fe-b5ea-869e83d87f73", "sighting--e143b700-2761-4128-bdd4-441575fa8f14", "sighting--d6f04265-8059-48d0-a8a4-eac9f7a75cef", "sighting--35f96f45-f2b0-4431-87c4-7e2f73249d6f", "sighting--e0d5734e-216a-48f3-8b59-b3c9ee093c44", "sighting--d67e95af-a89a-4de4-a0ea-a67d88fc2b3f", "sighting--9589c79f-108f-4664-b376-db8a9088811f", "sighting--16cc84cc-d9f4-468a-ba53-69b8ccb29e56", "sighting--57146a97-ad05-4ce7-994a-a85119aa82ff", "sighting--6fb9f9b8-3147-4c62-bcc8-a6419ea92438", "sighting--e74d19c9-046e-4c70-a8d4-5fb6c905c4dd", "sighting--63b7c52c-8cc1-4cf4-9e66-4d3b91ce06a6", "sighting--35b2755c-a7fd-4625-b8ed-d0736a0b7595", "sighting--ff7732a1-a9c3-479a-8e57-765a85787d06", "sighting--ca5f7a8a-381e-4c18-927a-57d2f44db43c", "sighting--ed2caaf8-5311-48e6-b4ff-30a1e8cfef69", "sighting--201a6164-6843-4c35-9a05-7f6c5fbeb3b5", "sighting--1f7d353a-4cfe-4fa2-94f8-e1d5c7d7be08", "sighting--6399f908-d015-4143-a6f2-395a8c4fd8e3", "sighting--459f6025-31b3-4442-afae-9ee562968833", "sighting--f7c5e408-9cf2-41a5-aeb0-253a3dece406", "sighting--01c83a63-42db-4115-8cbe-bf44232ab3d8", "sighting--d6e18ad3-7e0a-435d-9096-1563e106ccc2", "sighting--dac8c2f4-cc2f-475b-ab86-ab1baeef19ea", "sighting--0b62e155-8b2f-4d07-aa61-84433e9eb68e", "sighting--e1ffe90b-8b64-45b7-bcd9-8df0f9c27512", "sighting--45e2f9b6-7fe0-4a8b-b166-c4f04aef1bfb", "sighting--36c85867-58ee-4a5e-8d44-2cd0ee4b62a8", "sighting--6a66d1e3-44b0-4bc2-a972-4864a1ca8f38", "sighting--81e27669-9314-46c5-9fe8-90c5badedb63", "sighting--98c1002a-f59b-4dc2-a67f-198dba88fd80", "sighting--ded9659d-dc5a-41cf-9999-3ef8d45f4c83", "sighting--303a2c38-65d9-4647-b618-f7c2ef952645", "sighting--4281b202-b3d7-4d06-8e3a-7c35971c2f59", "sighting--55db6ada-8edd-4a78-88ba-986be8e60a1f", "sighting--30589b15-e0c9-4a93-917c-138a8b66a21c", "sighting--0439426d-7b45-48b4-90ff-75d0fb0c80e7", "sighting--8b13221d-76d8-47a9-80d9-1ab5cd6ad25f", "sighting--3425c405-56cd-43ca-ae94-89c1f2ba1651", "sighting--13e6836f-9af4-4b36-8a43-e331f1b8f111", "sighting--a132a973-142a-444f-9328-cc9b14ae73bb", "sighting--447b8089-7030-43e1-887b-b713484f7fcc", "sighting--03ae7819-8d28-4634-ae47-3b01a4bce373", "sighting--41fe97a0-68b0-45d4-8340-e3345680fd21", "sighting--cedbc613-f594-4e33-a509-7c98d566c5db", "sighting--8545e404-3856-4c1e-9000-dfbe7c6d3b1e", "sighting--9472fd82-e638-41bc-8e92-78171a45ba65", "sighting--d36571e9-e135-42ae-a041-c1c874a20d72", "sighting--3b15052e-7011-44d4-a60d-26b48f66f35f", "sighting--9b374240-7dbc-4c72-b8f1-2e6e3d7098cd", "sighting--c26e88c6-f073-4ad9-abe2-421500b7bc61", "sighting--949e4f13-d41b-4c88-8d60-0573e393d43d", "sighting--c855dd2b-5274-494d-b20e-98353c27ab2c", "sighting--653fde05-e7b0-4ca8-9bd2-06872dfb0f0d", "sighting--2025cc64-21db-461a-b14a-3770a71953ab", "sighting--604bff19-320b-46ba-8e1f-44f06b24d523", "sighting--a79104b3-6500-4d5a-8c36-d94ac10ceb56", "sighting--6e106297-be47-4a98-a6e8-9ff48d92a55e", "sighting--fb95624a-333d-40d1-9b90-517b456c4539", "sighting--d5d76bf7-8956-4a1c-9877-74a7f7f74d90", "sighting--60142f57-02d1-433b-8e69-62fc34bdce00", "sighting--7a0fb919-ffc4-4c25-9fdd-c7d52be72254", "sighting--78b76581-7b07-4fe4-8591-a93a4c8653b9", "sighting--6eb1900d-a021-4826-9495-c370be6fcbb7", "sighting--fefbf044-6377-4e74-a8db-78b00ca815e1", "sighting--f27c5842-1c82-4474-8668-20bb84ae7a66", "sighting--8f67a6b6-9ec5-4935-bb97-f15d391f5aa7", "sighting--16d0504f-d7e0-461b-8863-f552ab62acb0", "sighting--dfc6cba9-1c06-4375-82a4-cf3ee94f1ec2", "sighting--25ec7436-b2f9-4719-b290-dce3ac9b7d49", "sighting--b41e736a-c3a5-4622-8c1c-094950eab8cd", "sighting--b3ba80ff-c59d-430d-a4e4-d545b14f96aa", "sighting--35b89985-20eb-4300-a2df-07f84b3a529e", "sighting--57669055-1caf-45bf-a2be-07180a0577e7", "sighting--17d820ec-8982-4f79-bc1d-5425364c3a4a", "sighting--c942a719-ea3f-4792-95e8-4c3819a542de", "sighting--275e9f5a-bd75-4dd4-b26b-336f068521be", "sighting--791c5644-649c-4634-86ee-45190086614c", "sighting--6f2d0e70-0c15-4769-9c13-b87ded32ef8e", "sighting--16934dff-ef25-47c7-b89e-8b01735054e0", "sighting--35b2c6a1-e14c-41ba-afdd-62fa38b32824", "sighting--2e465dd4-eaf9-4e68-a349-ce69cdfc748f", "sighting--bad5de93-0dca-4460-8f62-33641017d0eb", "sighting--4f139cc0-75fa-4832-be74-8318da5e8566", "sighting--b0ad0e7c-6e51-4a8c-9fca-6d55871a7224", "sighting--efc62c90-4314-4a7e-8f3f-50e08aaacada", "sighting--41e91725-0966-4b14-89e1-32218e908c6f", "sighting--87f82a1d-19af-4e8d-b3d1-d8dbc6b57fb9", "sighting--ca892946-788c-4f49-81b4-3054d3d6d349", "sighting--d8520159-644d-475c-a0fb-406666f62170", "sighting--ad71a58a-c022-4096-842e-6496ebe05235", "sighting--a8a28bdd-345e-4a38-b846-95df1ce838cd", "sighting--4f6fda6c-596f-44f6-825f-d4c935ac466f", "sighting--74cc5e6c-b9e7-45ce-8011-ea8c39e81aea", "sighting--1e61dbd3-2157-4e68-868a-f43fd7c7ddd2", "sighting--7742e084-12dd-4775-975d-4ad2147cdff8", "sighting--eed010b4-41f0-4529-81f0-7bb48a053941", "sighting--f348139c-07d8-4cd9-952c-28c4640fb5e2", "sighting--63bb966f-d5c8-41e4-ba25-23252a5d7c93", "sighting--5aece352-5b50-4388-9150-ef1e91079322", "sighting--45cd5a12-aafd-48c7-bced-5215b1942641", "sighting--ee762a68-e835-4097-91cf-1ad63371e2ac", "sighting--2c1055e9-a2b6-41ff-be72-7f2e4be5bbce", "sighting--5b2e895d-07d1-4204-91b2-dbd9a1c22493", "sighting--c871bbad-cdf4-4e76-bef5-cbe835518f33", "sighting--cf28d244-7d13-4608-b0fd-a2446e77647c", "sighting--4c0120a7-49d8-403c-9eec-b5af50763e73", "sighting--abda08f8-d32e-4952-86ee-c285eca5cb67", "sighting--8fc36df9-a028-4186-9e2c-4b11d34d873f", "sighting--20d02ef5-21fa-4d3b-9f3c-97dc2fcfef53", "sighting--46befbd2-e891-4383-84c2-3afef605a862", "sighting--31e30837-b7c2-44e6-9857-40fa354368fc", "sighting--fd4a2bb5-0db7-4e26-9676-aa73a6b9b5a0", "sighting--b706e902-fd13-47ea-ac2e-51a5342d2bd1", "sighting--59c2c07f-d1f8-4302-9217-47bb9af8e941", "sighting--f5042f6e-fd42-4d27-9eec-d07a53b7611d", "sighting--ccac230f-ed6c-4a06-9ea0-64c52c86ad03", "sighting--bba5e992-0735-4b43-b8b0-ef66b3c31fac", "sighting--f7591d34-1d41-46e8-b98c-f705ced40860", "sighting--c77f027a-dbb0-465a-94e6-b58172e94399", "sighting--071425bb-e493-4697-8695-802eb70497c6", "sighting--c14525ae-af71-47ce-9b9a-d76e4b7760c4", "sighting--755b815f-b793-4ef6-bd7b-4b6a78bc73c0", "sighting--32a1224d-c28e-4108-bb95-0e10fe00917f", "sighting--c87f1ba7-87cc-4b9c-a64a-bada9efc461e", "sighting--da25808f-d793-418d-8b4b-d12aba4c2165", "sighting--6f393b06-d055-4572-9be6-282a33296433", "sighting--d78a8df5-7e52-4892-9416-3f1293a89267", "sighting--1ad11ee4-6070-474a-b30f-82ed8c192dc6", "sighting--4ad5c210-6250-4974-94c1-41703210f784", "sighting--50ae762c-2e37-4522-8a9b-a84b455e2f69", "sighting--5fc42a50-3a20-4210-98cb-7a81a202cc40", "sighting--14242c8f-c716-41fb-8154-54d9e500e5ae", "sighting--8bcd9b34-8441-40ab-88b8-84e95fe0cc62", "sighting--26a25c40-d7c0-4aae-97fd-4170ba5fcd58", "sighting--938e5f91-9e05-413f-911f-c653e50fabd9", "sighting--0e26c82b-841b-42e5-baed-82a7a0947370", "sighting--7cf59613-1080-4bf3-948a-f335727f3800", "sighting--a8b5b94a-beaf-4e5d-9e2d-81ba9a73665e", "sighting--ff366267-31ec-4be4-be74-f5e5888c71a0", "sighting--6ede2921-6534-48d4-9d2e-3147b9bd299b", "sighting--14f605c7-19a3-43f5-ba19-2aa5d10bf2f9", "sighting--e4b37f01-a950-48cd-8506-2a8617e3aa44", "sighting--a9d21276-c22e-4d45-854b-9b884000a583", "sighting--4a88d246-52b7-4177-bb1c-9b372d5b5722", "sighting--fa457958-a26f-41b7-9791-a5dac70ab2d7", "sighting--df27b0c0-b134-4b20-85cd-797e1e89591a", "sighting--ec2ef067-792c-4e4e-b3e7-f00515fa0db7", "sighting--92952c66-6138-4ba1-8e19-37a8e4bfd80e", "sighting--ac2179a2-c626-4d1d-aa77-42e754a16698", "sighting--2d3e5d93-e8cf-44ea-823a-4bfaf893290d", "sighting--5a71e352-5315-474b-bd45-882fd00ab8e6", "sighting--b4ae601d-df03-4afb-b8f2-d3ee9ad39d4f", "sighting--79e4b8d2-2e3b-48d2-b8a0-95c9f0b6530e", "sighting--6ced0280-5499-4d57-9199-ff3da621289e", "sighting--ec7b1d13-bec6-41bd-9792-b2abc150356d", "sighting--60f5d8a4-caab-4576-bead-3db129d42a94", "sighting--fd4d1e71-0513-4311-9854-a1423b04be7c", "sighting--ee172079-f335-4280-8250-78ff1b0075ba", "sighting--cf337b92-a00b-4c9f-b641-cafe13555cfb", "sighting--79e992c7-b184-48c9-a181-2c9d3717065f", "sighting--54166008-2c72-4b17-8be3-eacd6c2e6b1d", "sighting--1323800a-053a-4d35-8330-157ae7c82177", "sighting--3075f763-3bb7-4958-9b8c-1d530de4bfb4", "sighting--99f5653b-dc44-4f4a-ad8f-0ed2484c419c", "sighting--779c42d2-8d1c-435e-9a1f-d05f867db00b", "sighting--3469b507-4faf-4495-8c42-9d94b5d95b37", "sighting--62e9c3f2-6870-4aca-8c37-9c1752522e3c", "sighting--d3c7c953-09ba-4009-8f21-540e08023da7", "sighting--e7c37d3a-e46b-4151-82dc-99e4bad3136e", "sighting--297e8890-7468-4879-8f0d-3b173e378c38", "sighting--60ddbeb4-c0fd-4d05-ba5b-3a4be322ff89", "sighting--e9eab42b-da9c-44d3-b76d-f28554322ebe", "sighting--7966f77a-f37c-4884-8fc2-cb58a31efdba", "sighting--b87dff35-9509-4a9f-8861-24e3c81fc39d", "sighting--d60d29e6-ace8-4b5d-97d4-fbce3bf66880", "sighting--4a026c93-7650-4fa0-9473-97a6f4a5b418", "sighting--5f40676e-f880-4e2a-a105-8f5ccd16a9a4", "sighting--016c1418-9a87-438e-a6b1-bbd0f7b066cb", "sighting--76f3a01a-1351-46e5-a92d-a0027bf229d9", "sighting--44073f6a-d112-4153-8985-c803959fd9d9", "sighting--df07194d-a564-4d12-8523-d105f9ea6e60", "sighting--880b09c2-c444-4ad4-b68d-79ef06c2eff1", "sighting--c2dcf5a8-a248-44fa-b931-0bcdee9cd5a9", "sighting--f2ed2bca-5820-44bf-816a-b0e3426ea411", "sighting--02dbe0c7-d6d3-4d72-bb34-7564ea950759", "sighting--103f3679-66ed-43fb-ad44-46ac42ad9f52", "sighting--d2ed8ae8-8cd5-41a6-bbd4-06ddecab1562", "sighting--8fedf34a-1e9b-4dca-a98b-b49efb5639ce", "sighting--06b36d98-b157-433b-b778-de2b662f5455", "sighting--8e331ea6-b8b7-4b37-a2d1-88dcca6ff3f7", "sighting--4291f7cf-2d05-4cdf-9996-4f7d3f8bd01f", "sighting--aaf382f9-e766-4c4c-b7c1-ed9e03015fac", "sighting--72ae085b-641b-45fe-bf4d-54f3d60b1e33", "sighting--5eb82487-897a-44fe-bbc3-4ffbaece29ab", "sighting--83c7cbc3-ef7b-451f-a6a0-da59782e1767", "sighting--7f22476a-1400-4bfd-8dc6-afd3cbf61f7c", "sighting--b4a186e9-180a-4515-acf0-a7ba50e215d5", "sighting--0e02e043-4316-475e-930d-3273a4a80098", "sighting--6e66d53f-0ece-48f5-a6dd-ebe1a30b6f33", "sighting--31f44c52-ff25-4cb8-bcee-2dd36dee6540", "sighting--5fba926e-6944-45a3-9308-a6d86ad8d4d6", "sighting--39c339fb-e5fa-4fbf-a91e-6d00517c009f", "sighting--61dbdcec-98e0-4c3d-96df-9653743142d2", "sighting--d34f8b64-cdee-4b69-a3fc-933d97613630", "sighting--a2e0aa49-14d4-429b-a0e3-3e64dab2573b", "sighting--7e0a9ba7-91aa-4890-91d5-d20ac76b7f32", "sighting--0067fdf9-5131-4e76-b08d-f0125d623cff", "sighting--261e6c8d-8b03-4432-b58e-90369d14afe2", "sighting--0454a422-18aa-40b7-9f43-c3e62c17ba90", "sighting--686c581b-8cb7-4454-9e70-08d9108d012e", "sighting--2b0c63d0-43c2-4b34-be01-e77b57f0b84b", "sighting--b1487301-1a1f-401a-b33e-26fa8e34afed", "sighting--eec17b25-6ff2-4c89-8b2b-9f3cc8f505c2", "sighting--78f20aca-dca5-4bf2-9987-5781cf4b16d6", "sighting--41ef5269-f7f0-44fb-960b-b38678d47442", "sighting--886a1b5b-cc12-44a0-bdf4-c25e2b63be43", "sighting--9c5a836c-d605-41d6-b5c3-ad252ae20906", "sighting--49653e52-2ea7-4303-9c91-10037cecf21a", "sighting--84d0a446-e3b8-4fcb-aa46-9fd425cd31ec", "sighting--599ea1b8-cbc6-4fe8-8a6c-15b906618ce7", "sighting--c469dd11-d815-4e5f-bd09-a07e997c0aee", "sighting--f9d7671d-c8e7-411b-bf62-81a06b177a3a", "sighting--3fd974dc-2c44-4632-be41-e96332b84b86", "sighting--238a166f-250c-4690-829d-68f250ae7967", "sighting--ac015e8a-9a81-4828-a0da-635ff195a68c", "sighting--572282d0-1cc4-42e7-b1fd-3908effcddd3", "sighting--b79f1a43-bb04-45e9-802d-5ab6e08e06eb", "sighting--9bd7d214-4e9b-4acc-a2ca-b7614d2f6d21", "sighting--79d1e548-cb44-4e84-b349-55c2844c2109", "sighting--75ed4aa1-44ab-4698-b094-323eacef6869", "sighting--d0619353-dbba-4301-8714-08fb68722722", "sighting--44b3f316-b4f0-4714-87fb-5d2d349fd341", "sighting--df1e8e9f-9392-492c-be81-9f7c7e4e942b", "sighting--41f8fbe7-acea-48f8-af56-caccff0e7653", "sighting--0e0ca3d1-f893-428c-a03c-75bea63f7924", "sighting--52368a9c-5c0b-4c47-a3e9-7a6e960648ea", "sighting--0b554071-772b-4391-bb95-07b07dae4ea8", "sighting--df9dbde5-0c8e-47f2-9026-7e4fd84b8ae6", "sighting--893a2ff0-1e27-44c2-a13b-f0c9d8e697e0", "sighting--7b06ae25-5bb7-4c67-be50-09f07ba8b0ed", "sighting--cf905216-3971-495c-b87e-1cb634fa65be", "sighting--eb830216-dbce-4abb-b0e2-300c78aff4bb", "sighting--6b31e88e-fcd7-45fb-8215-f3c2861a1187", "sighting--f94d0d6e-e4b8-4b14-afd1-b5c9ce37ec82", "sighting--3233943d-f335-4c64-bb07-37d7bdb70768", "sighting--4d7ce38f-5bf6-452b-a4db-5392ce414ba1", "sighting--6e40057d-b593-4ba0-8665-279799469a1c", "sighting--25460f9a-9502-44a6-8bbb-71d5a5b4a9a7", "sighting--fbc63119-d3c8-4ffe-9904-3d6a6ec93f49", "sighting--8c916f49-426d-4203-b64d-a7a6db9091e5", "sighting--751a4b95-7263-4ba3-84ae-fa1d5c13e7d2", "sighting--1611dbed-2991-4296-aa8b-b0bb71fd6ed6", "sighting--1f984755-0170-4ff0-89b2-16543d69e037", "sighting--2f146306-0606-46f7-a21c-e12bc5d7773f", "sighting--7a8030db-cce9-4cc8-9031-78bff7c11c5a", "sighting--dc7ed0ff-e862-40f7-8f7c-78c2dc410b80", "sighting--ec7f020e-c9da-47bd-94fc-acb1fbc39771", "sighting--b3af813f-bfb9-47c0-8867-cb312a7fbe2f", "sighting--54545bbc-e9cd-4369-b7b1-c6afeb541893", "sighting--10668918-1b61-4816-abfb-80a02ff9037c", "sighting--b6e93e78-407c-4bb9-adaf-c9f7c272c8b5", "sighting--51b979d4-297c-4ed1-8103-800ff2cdda46", "sighting--d0020ef4-87a2-4074-bbf4-91355d06eb21", "sighting--acf85fb9-ebab-4fe4-af50-92af3237b7b0", "sighting--dd7191af-3810-447d-a97e-1cc281f5430d", "sighting--31cd7aac-b251-40c1-9079-9886835c38cd", "sighting--af8eaa66-b150-4aae-ac72-0cda8fa63ea9", "sighting--1b448d2d-1a81-460a-91ad-29e312fa5ea6", "sighting--b8ee3495-1c98-4e26-9176-db0413360cf8", "sighting--70616c3b-d061-4963-9b16-a256f0ef9508", "sighting--933e06fa-e9ac-473e-b691-70f79288b882", "sighting--52c306f5-37b8-4b48-aefe-1dce897e7405", "sighting--56aee0c5-8011-48c8-aada-afacbd364d0c", "sighting--ada4a3a8-c4b0-4614-8d54-fc60aed6eb57", "sighting--25a47062-460f-4ac4-b370-d70e6c9b32d1", "sighting--865751d4-4b70-4acd-9e76-7f78deeafa4a", "sighting--1304ce81-1dd5-4691-ae22-25e3c2f9ed76", "sighting--8953af0c-15f6-43a6-9695-6d21fb70bc6f", "sighting--8f6dcc78-d92e-4c29-955a-954337a58540", "sighting--5a68f2b6-5ba4-4c71-a2ef-73bc0e463acd", "sighting--9a492788-ba4a-4611-a066-8b16d819eb5d", "sighting--affcf227-1245-4027-b59a-96a47df46d3f", "sighting--a1c24eed-c699-417c-ba5c-83ba5dc4c420", "sighting--9fb72df4-da22-4061-b194-0a5013e0caaf", "sighting--3f23c454-e4b6-469e-8889-8df0c1aa1a5a", "sighting--576ad9e9-8e36-4c63-94b6-4bc269dd8e4e", "sighting--b32c3a64-cfa0-4c1b-93c8-67d8e011810f", "sighting--73c42212-3a59-4a7f-8256-8f51f5d4cd94", "sighting--079d5930-2970-44ea-87fd-1f15266b83b0", "sighting--a97c507a-a163-4ab9-8aa6-2418fffe2d20", "sighting--8848c301-e56f-4b59-b6f8-192c2d124c8a", "sighting--608387a5-daed-4e2a-9e53-62fe0e670292", "sighting--9ab693ae-593c-4408-8b96-8e299e8c5c0b", "sighting--f046396d-819e-4dbd-a2e9-df3caf02e0f8", "sighting--aab0c2fd-6ee2-4937-bf9d-5a04d578a8c9", "sighting--0c70ddbe-1f9b-4b76-8630-7c6bf956ae2b", "sighting--7b20bc12-232f-4a02-ba30-72b44143ca59", "sighting--384fb0fd-c89b-4c73-8e60-333d8be4c1ac", "sighting--a3e3a86d-1b42-4e5c-b74f-4b6ec1d98adf", "sighting--e612234a-e86b-4173-bc2c-b2742ef2c55b", "sighting--5ed75715-4db3-484b-bc73-d03c1bfa6633", "sighting--e2ab565c-01a4-4775-84f8-ab7cfe7d1761", "sighting--768e92b8-6e7f-4855-8c4c-eab41d9576b3", "sighting--6fb08ea1-5423-4c8a-986d-64105453f6f7", "sighting--817c7ad1-4a42-4bbe-99a6-b46d376f862a", "sighting--d4ce8b8e-2c61-4393-b283-cf66d98806ff", "sighting--835f2ca1-860a-4429-a107-49348c2f85e7", "sighting--27a2e148-c3d8-4505-b64e-01d60591da4b", "sighting--292230a2-6c99-4b68-81c4-6d32185ff4fa", "sighting--cc6e14ed-63c0-4f6b-89c1-d91c7889bed3", "sighting--58ab062d-eb25-40d3-90dc-e6481e7ff416", "sighting--c421f651-e833-41ee-a2c3-bebfa320f577", "sighting--adcdcff2-6041-4769-b02c-e6e1408fd3a0", "sighting--b8e6b159-1b36-4a7a-8616-2d0e7fb00947", "sighting--c6a61e93-22af-4027-8c54-d7597846b626", "sighting--116ab3d3-4523-4e69-bd83-fed7f86c0ca8", "sighting--c498ea46-d55a-4c40-97be-b6104f93143a", "sighting--9bf98ddb-b8dc-4c0e-a34d-0f0ffdda758f", "sighting--eeb254e6-175e-47be-a3c8-dee5656086a9", "sighting--663b5efb-0297-4a08-8973-8268c9579029", "sighting--e5d768d2-2a0d-4f90-97f8-ad694bf4fe56", "sighting--d18464e8-1837-4654-b6a0-5e1f94498752", "sighting--0b6bb2ee-fed2-46e5-a15e-1ecf943913c6", "sighting--8bed8107-ba4b-4907-b9b0-5cfa12fd127b", "sighting--bd173b7d-52e7-4b58-832b-6adfd4f8b88b", "sighting--bc4e6372-bb99-4616-b784-c759d587200b", "sighting--5df54c10-6c3f-4a48-b048-f14fd937296c", "sighting--5058fdb7-f32d-4e18-a42d-27be0f3a8cac", "sighting--33653e7e-4c4f-450a-aef8-56c7cab632e5", "sighting--f838376d-f1ee-4414-aa2a-839fd77b579f", "sighting--4e16e7fe-c875-49f3-bba6-2e59e1beb834", "sighting--bd267dbd-c77d-47ef-a137-59b27f76cf97", "sighting--8099b2fd-fdac-4431-9521-6aea022ec21a", "sighting--0d5ba557-5366-492c-9862-1b40c0b20a9a", "sighting--59a12eda-6c6b-49b4-8547-612f9f86a29a", "sighting--7862d65e-0cd7-4387-8478-9b0c535ff6a2", "sighting--1621bf9c-4245-44b3-92a0-d7ed72de73f3", "sighting--32cca56a-a849-499d-bd88-4184f38275bd", "sighting--170f07dd-5268-4c46-82fb-5245ac736f5d", "sighting--153ac139-606e-4efd-ac99-8739061a2ef4", "sighting--c2f98276-4e6c-4497-955a-37a4e5915a15", "sighting--dbcb34a0-dcf9-4ed8-84d5-647b6ee9935e", "sighting--a0c5d126-9556-496b-8121-2b76b6ea1874", "sighting--a35424ae-3f9f-4af1-89e3-34c380d58eb6", "sighting--96ee13f8-95d2-4fef-82be-06fe2197f303", "sighting--9b74a240-81ed-495c-bd33-8896cb23aeba", "sighting--58d9f7ba-bb53-41ed-b45f-97d0615bd3ec", "sighting--9dd255d3-e571-4352-8de7-298fdb283ddf", "sighting--52274152-5162-4589-9b27-efd98681e642", "sighting--ea2eaa0c-e0d9-43e2-a383-563de074c2b7", "sighting--776d635b-7ca5-4669-8b2a-6812e997c4fb", "sighting--d992f3fd-c4f6-4cbd-84bd-a34daf79cc29", "sighting--9e0f4f9f-ba3a-4fba-9b47-157dfe414472", "sighting--7c924d2b-a268-4377-b879-a0519303c9e5", "sighting--7a533eba-cd30-46c8-a33a-86d2f102fc3e", "sighting--96892339-cbba-4069-a110-5e6005b4b5de", "sighting--670ef2dc-b32c-40f9-8454-655bf6f159ba", "sighting--0bc50e50-d832-483d-9e1b-0d6eceb298d8", "sighting--0ca9f470-c4e9-47ca-aaef-eaed39507281", "sighting--5b9b44f1-ffb2-478f-8d1a-13531e7cc23d", "sighting--615e8a1f-41f9-4243-861a-1cf1bedceb79", "sighting--a5c4bf64-ea86-4b89-bb03-53b831a3b5b6", "sighting--315434b5-92c0-4776-8754-0f72db6ea5a0", "sighting--9092b3c2-2a7b-4a69-b13e-6354eca339ad", "sighting--db8719d7-f940-41db-824e-617989292108", "sighting--e64c8337-3c5b-4a6b-ae28-8271c33153bf", "sighting--04c05362-9cc6-43ab-9388-a0c3e85d3cdd", "sighting--3b47ce63-019a-4cda-8dd3-2cbdc45ad8b8", "sighting--440778d7-33b3-49df-ba00-36d3a05858bc", "sighting--3135997e-60bd-4d28-a8d4-d0973f30fad5", "sighting--d3327d7d-7155-43b3-9431-51aa39f9c558", "sighting--ee45eae3-5fcf-483e-8bef-466ea4b6995a", "sighting--bd70a610-2982-4564-8d47-e582ce0db7ba", "sighting--c1c270ae-f0ee-4e6d-a3af-9a705c606db5", "sighting--e516c04f-8c36-49dd-94c3-bbdb27886c5f", "sighting--42aa3699-2f64-4b1a-83d9-48259792f2ab", "sighting--95c479c3-1ac2-4950-8451-4001c6e0d2e3", "sighting--60172bd3-98ce-4f06-9741-5226aff28d27", "sighting--2f877bc7-2475-487f-8e97-b438ecdd9378", "sighting--551ec8c0-6a9c-48de-898b-1d2332571293", "sighting--92888128-6d5e-4d58-8cce-842ab769fe41", "sighting--0ac10baa-7d39-4ce2-a4f5-7ae3ad999ad9", "sighting--9ae244d4-0678-4249-921e-fb8383e42ff7", "sighting--c5c747c9-3a6a-4655-9099-a9f41fb3464d", "sighting--9d025abb-ed20-41bb-a1f2-ef8daf73fd74", "sighting--c4540b48-89bd-4bd0-af70-02457714b2f4", "sighting--eea556a1-308d-4742-9259-0e53eae35c16", "sighting--97d71237-8b44-4f8b-94b7-620eedc8ffdb", "sighting--f9f55e5e-dcbe-4243-9702-e3e49b6926b0", "sighting--cf7f1870-cce7-4118-9c2e-506f843a4829", "sighting--64928c76-ed8e-44d4-adde-71fb7771a863", "sighting--87d5ce06-02eb-45f8-91b0-7129a978f855", "sighting--a351e435-94d4-43c1-adfe-2e6d7454539d", "sighting--4949b5bb-471d-463f-962e-b397dfd94dd1", "sighting--d568128a-6d41-4978-a4d0-16f0b33613c6", "sighting--7e685509-fd27-494f-9735-0716387ab99e", "sighting--50c21af4-0250-4cc8-a990-6f5a81014a7f", "sighting--8d3834f8-f820-4c5b-8aa6-5afc6326b781", "sighting--b578e0c8-842d-49a3-8452-786bebe1f902", "sighting--c913817f-f662-424a-a0e7-a89249c94bfb", "sighting--33bc1379-86f5-4ea3-95fb-71b10df4fa7a", "sighting--945fb235-cf4b-4988-a42d-4be089f46138", "sighting--6e9bf319-e155-4a39-8405-d9a78a4b140e", "sighting--b7dd4423-bbf7-41be-b30a-ed39bcc47a6a", "sighting--01f13e1c-7492-4632-9cb3-0130290672f2", "sighting--868a095e-0f48-4e0e-821f-9b1ca1a50d5f", "sighting--74703c58-6ec7-49fa-8349-d55ce776a304", "sighting--a316364f-2fa7-4a80-870b-a353a74f6819", "sighting--e99c3e68-1ad5-442f-858a-a65b92bff78c", "sighting--91a1feaf-f406-40f5-91da-9fdc79eeed82", "sighting--3c28a255-0efc-4225-b35c-3bbc0aae7573", "sighting--768a688d-9720-4be0-a446-5a052a9be036", "sighting--031deae7-3f93-413d-b0b9-25d720fdf5d2", "sighting--651690eb-b6b4-4fe8-87ff-64010eba7692", "sighting--542df3f9-4fa1-4aa3-b379-6487aa366e4e", "sighting--f0579ce9-25d3-48e7-a05a-db8cfa9dc215", "sighting--f573579e-b43b-401b-b451-b1cf0ab3f13f", "sighting--5b686576-8954-450f-af81-81aa83e2e4cd", "sighting--000a36aa-db57-4600-8800-e46335f5c810", "sighting--107dc56f-7479-439f-ae36-12f84bbf953e", "sighting--a794d19a-5859-4d19-bf95-b144ba9279f8", "sighting--9a5e6546-8519-4b40-af38-d208755d9636", "sighting--859d4766-ee4c-4966-9b1d-8634982fedaa", "sighting--64f5c07a-f814-4d36-981b-1ec815455acc", "sighting--544c5345-4937-41f3-a21f-d4510ecf0ec1", "sighting--d14fb697-e123-482e-ac9e-c0d09643b84c", "sighting--0ad85c49-4e28-4e43-97cd-5ed25f47383a", "sighting--e136041c-2d96-4c48-831f-cad27675b93d", "sighting--3ca1873a-31c3-49af-9977-0ae82112a2b0", "sighting--2d50a4de-a0a3-40d1-8a4b-c49a8d12f74e", "sighting--a04eb358-2157-4244-aec2-21cd550090c4", "sighting--ba5dd4a3-750b-496c-b770-9ce2b87b54fe", "sighting--2c0d22b1-b5dd-4c6c-88f8-328bd1c71c11", "sighting--d721613f-f310-431f-b56a-bda41aa239fb", "sighting--adfc2bec-fe21-4e0f-99c4-42672ed92cbe", "sighting--d540b4da-1798-4ee2-9f23-5da5a9ccc884", "sighting--f23f75de-a4d4-4c05-8f50-a1e79697bfba", "sighting--d3a9e580-780b-47d0-bae4-44394182250e", "sighting--18eb39d1-cc12-40f2-9928-312a7e2575ed", "sighting--96544d5f-a826-4085-9d4a-ea9a6c5f0141", "sighting--490f8de5-399c-40ab-a5dd-455c23640448", "sighting--3b8d862b-067f-420e-96e2-3a829bff1a5d", "sighting--a653bb11-753e-47ca-894f-e0ecaa2d4c6e", "sighting--a81c5aa9-71fd-416b-955f-f85f68ec753b", "sighting--3dabbb9d-c4d7-469e-b124-c7c379da0bbe", "sighting--cd272eaa-9d9d-4bd8-9ed5-e7c61ea48866", "sighting--70d3ed65-71f1-4286-bfb9-0fcad26d0138", "sighting--8096c77b-c171-45cf-ba11-0d11d7ce034b", "sighting--d5fa108a-f7bf-420d-b81e-a6e05108bcbe", "sighting--63b11d85-2ae3-453b-adc6-9d3c6a1fc92f", "sighting--b8b4acd7-13cb-4188-830a-d570db6cc0e7", "sighting--6c2b8fda-ac38-4c11-bc63-70a7a2b6f6b9", "sighting--5bcb839f-6cba-418d-a7af-5cb4a4b568a1", "sighting--a3b533c8-aad4-449d-9148-4fe73c25e1d0", "sighting--cde2cb25-0d5b-4bdc-80a8-5462975155a5", "sighting--f9314f92-fa24-47cf-9d25-f2e10fa45664", "sighting--786dd5e1-c36c-44c7-a5d1-872e1a8b3c3c", "sighting--f97d0c2f-4c2b-42bf-84a3-fe4490ebdad9", "sighting--4162fef1-81b8-46f7-82cf-55c1e90d039a", "sighting--72310294-c224-4bc7-9779-501256ced902", "sighting--f7c86afd-f434-4457-a7be-7d17fc45ccd7", "sighting--329c3a1c-2000-4684-82bf-1a9001c40f28", "sighting--e3917c4e-e52b-474c-b28c-50b9b8158a8b", "sighting--2f60f0c6-9afb-4d95-b510-bbe7691b8ede", "sighting--82411d54-07aa-47c3-8246-5f9269870314", "sighting--f75e11b1-3d60-496b-ac6a-2a06b786fc23", "sighting--1f2e76fc-c803-47e7-a288-4106e83b4944", "sighting--bee401dd-deec-4693-8b23-0e6e1ac7ae89", "sighting--004e5138-5df3-48f7-8906-2777d89b26a0", "sighting--31749047-62af-4e8d-88a4-815833b92850", "sighting--bc473b7a-b9e3-4007-a645-3913e54cadbe", "sighting--7a7e7975-2d7b-4e9e-b3c3-9a1a5581f041", "sighting--73658cc5-2c4d-41ae-8ff1-5f8cf57bfeaa", "sighting--7d2526be-6bbc-4a34-bc35-4c5e0d8c407f", "sighting--e897e723-5eb6-4fdf-9455-5db152ca9cab", "sighting--c023d1ca-cf5f-484c-a015-e4903261f181", "sighting--38a8043a-fe5d-45eb-b0a3-d90a1440a0af", "sighting--169b2246-2f7e-48e6-96f0-0e5341da5fe0", "sighting--76a76ceb-b5f3-474d-82ba-f5123c8dc28e", "sighting--f6e9ee12-aea7-4ae4-846f-ae17dd093acd", "sighting--35b85e4b-8e53-4d46-8437-48edada696c9", "sighting--ef298d42-50a3-4e3c-b045-8cb968f90654", "sighting--97a1c3ab-0890-40a3-853a-4114244c5c68", "sighting--b23f532f-75e4-4726-9313-0a9a64ecc196", "sighting--fd78ab1b-0512-4718-b7d9-b17b7b8733ec", "sighting--32d29d07-d34d-4f5e-a89a-50893ea99c50", "sighting--51023634-4b67-48cb-932d-29efe9b05990", "sighting--770f5f94-59e2-4541-a6b0-72e9e558a69c", "sighting--21409211-eee3-4886-9d82-fbfb6b090ba5", "sighting--3c5175c5-5947-48f3-82bc-d01f4c770e9b", "sighting--917baa0e-04f3-41ba-933d-b297726c3a45", "sighting--ec67b23f-6a04-4752-9d10-65db7a8d1fe5", "sighting--192a32c2-78dc-40bc-8c60-cf9e044f6e2b", "sighting--7c923082-3866-4aed-8606-5cff9fe121bb", "sighting--651bc5cf-1ff7-4762-81ef-093cceee2f72", "sighting--d22d5583-dcf2-40c3-af6f-39f8f75d9678", "sighting--3499f009-f6d0-4495-bf87-0df05c8ec099", "sighting--fadba5b2-85b7-4ad9-a46c-fd9b7833a89a", "sighting--d70205a7-e649-4d28-a65b-9d6f86193634", "sighting--1b51504a-692f-4b3d-9e54-48784ccc291c", "sighting--4bc3459a-5694-4835-9405-8f3d656ce926", "sighting--7bb3ce08-ddae-4570-9544-ae020ae465d4", "sighting--1ac78a10-e9dd-4dc5-8422-3f23e68c3dd5", "sighting--1e9d119e-eff5-4c46-b9cd-8539b0375048", "sighting--f0c1ce55-0714-4cf4-95e3-557d37b1a42e", "sighting--86dd50ab-2102-404c-a8ed-f3191a57079d", "sighting--88b33490-67ca-4ae7-a4cb-b60052d14e8d", "sighting--b6f00829-32ba-4bdc-b176-f5e724440212", "sighting--254c5641-d529-40b8-972d-e389741241cb", "sighting--9f4e2850-5bb5-406f-bda4-ecad73934c13", "sighting--8cd4ad9f-4917-44b1-91eb-9b553403f848", "sighting--4299cf88-426c-4e7e-8c98-0c8e82ffbded", "sighting--c5d95e6f-ff4e-4cad-a3cc-2bdc201fa88d", "sighting--b538a5fc-c832-47b6-a512-adc259fa8caa", "sighting--51493d6a-b6f3-4a62-8194-4ef43567085b", "sighting--63127576-82d8-4e79-830d-c679e7e44f6a", "sighting--4a54b6bd-4fef-4d7d-b525-ffa162d639c7", "sighting--2ba32722-5d24-4c47-aecf-6c201b524def", "sighting--c7af475e-0e74-43b0-9e2d-9432d177cce2", "sighting--acef14c1-ee10-45e9-b58d-245c67bcb77d", "sighting--bc165669-699d-45b1-a678-de78ebb4a588", "sighting--42d59040-d9aa-4286-ad11-efdbd8bb780c", "sighting--b6e9d3d4-12bc-470d-a0f9-e7925f1cd4f4", "sighting--fb589ec7-b376-42e8-bcb0-71efb77fac40", "sighting--2512b7cc-8e07-4e56-ab47-40b72b1f279d", "sighting--b2485ee1-cf48-4bb7-873d-b4baefb13253", "sighting--00289bf9-a3b2-4f28-b1be-232203add134", "sighting--261bfc42-fa45-4eb4-bccb-b705dcfacedb", "sighting--53724bb5-726a-458f-afe4-b62d5b50e4ec", "sighting--0cde5c98-8452-4ac1-a6b8-a33157cf46c6", "sighting--94234724-9520-4804-8d17-b2ad3b76c053", "sighting--d0464fa7-0d58-4e6b-99ee-ec903dc9766b", "sighting--3c65764c-c3f7-439e-9fd0-432795084348", "sighting--5d803371-c6e6-4b2d-a8af-b0bb3ff6d615", "sighting--73d27508-5047-417a-a30d-01637cc7ab66", "sighting--e9c81760-d863-4a60-a77d-12181a3e4365", "sighting--cdd85532-d20e-4f9c-8f62-7097bfc62b06", "sighting--e9eb7106-447a-4e73-894a-5833746778b0", "sighting--a0a944de-8f95-4c29-9eda-ecea3c5e7856", "sighting--83c81ffa-8301-4044-ab81-9ab7d08cae10", "sighting--997c1f26-5a0c-4d6a-a558-bb6abf764a79", "sighting--a47960f4-233e-4a69-9944-24d3c6106294", "sighting--11689570-c492-44cf-99cc-3de12a402c3d", "sighting--f97ede21-b60f-46be-af83-6896f00c76c8", "sighting--3f3767c9-cd6f-494a-a967-9c31dc132823", "sighting--3ab1a43d-3e38-4521-8db1-6505b62984a7", "sighting--6c05093e-a5f8-462e-a643-f51a950534d5", "sighting--f360e3ea-806d-4139-8777-a1f564dda5aa", "sighting--f476e9f0-8f21-4222-9d28-04426ec95292", "sighting--d0d3cf18-6a7a-408a-8f14-d9a9c0717285", "sighting--b31f75c7-bf37-43a7-9caf-f3fc04724d33", "sighting--7bc6920c-a268-41c4-84ef-f9760849cd5d", "sighting--54850fee-a4f1-4b30-b6ad-43a386851e39", "sighting--0a17f1b9-e513-4df7-87d3-50ac08ea1f85", "sighting--12347044-d5d1-47e6-9951-15d788d2a950", "sighting--9528c32f-a9e3-4b23-ae48-4d50e8075d20", "sighting--cccdc671-c22d-4cf2-8f47-218dd3956976", "sighting--bb2aedab-679b-4d7f-8622-35603dbd7bb1", "sighting--675af6c5-c891-4c25-aaa1-6c29a1b83b76", "sighting--63edc9a8-503f-4907-b74f-dea6095c0d9a", "sighting--6cf9d658-ed89-4934-969f-c0ae98d5c420", "sighting--14ba99b0-a8f7-4b94-b164-28c3a32701dc", "sighting--4cbe1a8d-67f3-4aa1-8086-07ac90d62f7d", "sighting--8ab65f75-ae4b-4be8-92d0-914ffb381d92", "sighting--974e3a95-a31e-414a-bb72-edf375e8c5cc", "sighting--e566c7f0-e104-4ae1-bea4-80bea24e5b8c", "sighting--578d3dd8-b925-4ab1-a744-bc2af5322cf8", "sighting--f2d36594-c16a-4cff-8205-59c271ff939d", "sighting--36f23cc8-b049-4a27-adc3-5da5e072e7cc", "sighting--bf332cce-658c-4bed-b845-1365387618e6", "sighting--9280ea10-4792-4373-a7d6-b23b211a161f", "sighting--aeb7e1b6-4ea7-47c0-b42f-4076904c279f", "sighting--86678299-d5fe-4bd9-a5a6-3f50dbc91c3f", "sighting--f22420f1-5b2f-429d-bcd6-c8c81b240a2b", "sighting--32852991-0c40-468b-b7e5-61fc8c20d0f5", "sighting--625a556b-1b8d-40e8-8570-d3a940a46df8", "sighting--71028067-8cb7-437e-82c7-e923229ca906", "sighting--3284e9f2-5a61-4dd8-b0eb-981540a8f463", "sighting--ca1342e5-ef49-424e-b513-64c35476fb36", "sighting--ca0f6994-94ad-40e5-a24e-c796e4b1a71c", "sighting--b0b65b59-5e4a-482a-9150-b1e2fe209683", "sighting--58156a25-2619-4e60-9074-c922d72f1b4c", "sighting--6cdecd7b-ba48-48ba-a30d-e593b8c8fc82", "sighting--ced6788a-ea08-466b-8be1-84b74d9b4c1c", "sighting--47d8ca84-3ac7-4203-906e-a7c973562f95", "sighting--96d756c0-da9a-4072-a556-d08c449d71fb", "sighting--0f00e1e1-7ec3-454e-a321-2de93718e3d6", "sighting--10ca70b1-99d4-419d-bb9d-d8cf1b2ff0fe", "sighting--76b10d90-7ba9-4ff1-85a9-437cb66b9e08", "sighting--779c9de3-04f3-4346-bb4e-282eb1069d52", "sighting--967fb151-59b1-4866-b8f1-af975008d206", "sighting--0aaea3a8-54c8-49dc-9267-36e77c91cc6d", "sighting--bc52c20e-756c-4c9f-9e3c-f13d24e8649e", "sighting--a62c593d-dfa4-4de0-9e8f-f07b5678fc78", "sighting--16e8d903-3eb5-492d-84db-eaa5f76fdd01", "sighting--86fddfc8-f76f-40c2-9ebf-0c8db7f67120", "sighting--00c4b2a5-b26c-4c5b-acb4-d1c3c63d4767", "sighting--47c9e081-fd1a-4447-9631-6a1eb300f678", "sighting--cc045f85-ab92-4abc-a7a6-06c6b471840a", "sighting--c4e71bdc-b19a-474f-80f6-f5aaac3fc4d5", "sighting--35d047c1-d781-4e78-a45b-681a50f675aa", "sighting--90b20d24-e01e-4946-a489-90e69bf95400", "sighting--09165909-9dc2-40c0-8830-f02254d0b6c6", "sighting--e2f314eb-a4a7-455a-a0a1-fd23f2a3b928", "sighting--8322a7d7-db6d-4166-a009-59d667744d13", "sighting--8c29daf5-57c2-46dd-bed9-e550624cd7c2", "sighting--33784f94-868d-413a-a1d1-55bd0545d2e6", "sighting--96bc767a-88af-4403-b71e-f02d1328e1d2", "sighting--64b7577f-a297-47b7-86bc-172b3f535698", "sighting--30a2ffc8-e7f7-48c2-b421-fd8f2e1f2f6f", "sighting--cbdd0336-a366-4fec-86bd-7af2d090c507", "sighting--da73677c-58c0-4fc5-abc6-627b393f7e25", "sighting--5cb74ef3-01b3-405e-8f9b-3cab0f612c41", "sighting--fa84bbcd-4d29-4759-ac92-2486b3408d33", "sighting--dbcba283-75b9-4872-a98e-a8436e571f42", "sighting--f1a83a0d-7a55-4bce-9044-1972332906eb", "sighting--502a5d93-15a8-4830-83ed-d6d478ab00b4", "sighting--6297d4aa-0916-493c-851e-efd044e52c37", "sighting--13378c19-3267-478c-9a51-850f0be0767e", "sighting--9cad6c88-bd70-41f2-abbf-354ebb58f792", "sighting--6ae1851e-b2ac-4e4c-b966-3d3f6f0b0b34", "sighting--1f72d092-ca2e-4c57-bf62-c1d1b7568ae8", "sighting--c584baab-c28d-4ffe-b821-0a6d8993cb96", "sighting--3d1f2651-f6ed-44b6-96e5-6990836d163c", "sighting--53ecd822-6fa0-4e29-b1db-0d20073511ad", "sighting--dc864fa3-e081-4e6c-934d-01d6d82bd4b8", "sighting--960d5c59-e480-4f5d-86d8-ebdcbac19a9c", "sighting--d693ad0b-8fa7-4b54-829d-4a58f9915489", "sighting--6d571381-1b3d-4978-80d2-e9a4fae0ef5b", "sighting--e3dd6d05-92cd-4360-b199-fbf08c576fb7", "sighting--b8716f27-e760-4ed6-b469-cb60e63d1268", "sighting--759ea058-4ab6-4916-9efb-7201c2564245", "sighting--59845c77-bc6e-43f6-8d9f-82805f2e81a4", "sighting--9e60333b-3e9e-4fff-bbc7-897bd6ab1e24", "sighting--b49a95d0-77c8-41fa-9570-742610691c06", "sighting--c457f2b7-8480-4987-b20e-db3e750521d6", "sighting--9cb77d05-4af2-4b5f-92ce-30b11f4b6494", "sighting--cece0ba5-f73b-4961-826c-8711e33ca8e1", "sighting--7c65a68b-d855-477c-b2a8-a7673a213b84", "sighting--fe76381f-5217-4a50-8de3-d1dcb81de333", "sighting--38b185ed-191f-4203-9785-5cdd63ac29fd", "sighting--c8d88f00-e2a0-4110-8e55-dfbbeb1bce4c", "sighting--3fa9d6ad-9dab-40e7-a767-5cff68ee46d3", "sighting--0d5171e9-eed9-4a33-88b3-f91d17340c47", "sighting--c4a78480-d780-49d4-bbca-4060c5636874", "sighting--ed4cd0c0-aab1-4443-bc72-7e5f7c7c39da", "sighting--1a931808-45a7-43af-b088-840487ca3e3d", "sighting--edb94735-3e99-4532-8585-df297086bcb9", "sighting--7afbaaaa-37a2-404e-bd6f-b188e6c6b435", "sighting--bcfcf4b0-ad1e-49ea-8742-8dd6e332f4e5", "sighting--03b25d16-2f15-4b1d-955b-947e779916a8", "sighting--fb8c89ae-f5e4-464a-b716-2ba8fbe52a72", "sighting--8c631779-6017-4194-bbf5-1d58428a09a3", "sighting--43d1c72a-7b4b-48b3-9c80-839ea7aeb8b9", "sighting--57d8de1d-4d9d-429c-9dd5-f4fe1f8134e0", "sighting--51e8bff7-4eb7-474b-a1b4-7acf494c5c19", "sighting--c5006ed2-1a78-42d4-83e6-d01715f4a651", "sighting--6258da8f-8063-4ce8-9163-3a22d8a51bba", "sighting--b0fe532d-0671-4b31-852c-1f2ba8948cd3", "sighting--04ec50a7-f347-4400-9202-f538ad1c1c0e", "sighting--b73ba230-c4d8-49fa-86ef-f51f5f25aeb1", "sighting--591a0d14-523e-4c66-95f0-6729f64a6ee3", "sighting--36b8786b-703e-4962-9165-3f28e9f369d8", "sighting--b844ef3b-4a82-4ceb-8871-53a646226d59", "sighting--7b9b41ef-ab33-4bb8-a1b0-ca253f533d06", "sighting--4b926f1a-588b-4d3c-a9e9-b16d2f7ffbb3", "sighting--420d15fd-520a-4887-872d-d1702edb7424", "sighting--35f03da8-2f68-47a1-b2c6-e67879f0aa9d", "sighting--c856801f-e899-4e9f-b81d-438ab49a86c5", "sighting--e6006797-34d5-4706-9de5-56c596eb9f53", "sighting--39c6e83e-47ac-4f18-9628-5194cc7ad92a", "sighting--0a35c656-68df-48f1-8523-eb95394149f2", "sighting--2deab39c-264e-4459-81f1-85bbbd794636", "sighting--05340932-261c-4d9d-afe0-5fe527fb0126", "sighting--ab3c6ddb-24e4-44c3-ab84-216f4441415c", "sighting--a17d115b-0107-43df-a14b-143768f5f7eb", "sighting--d1933a76-7179-4d8f-a35c-76b4f69daec0", "sighting--fcbd6485-408f-43d3-81b7-6935f022367a", "sighting--7a2d833c-e244-4d9a-8619-6fba389b1835", "sighting--593bfbc7-4d8a-4b80-ba55-e9789781ff02", "sighting--1b29f013-e790-4ceb-aae1-b68b751da923", "sighting--355844b3-3d2c-499e-b2ed-0441cc58678d", "sighting--c3ed1b1a-db35-4c23-a152-79470bfa8abc", "sighting--2eba7a12-fe29-4451-82af-3083051ec0b7", "sighting--87ed78d7-e361-4c4d-9145-756575875ffd", "sighting--7b536400-c876-47be-8aaa-5da66f4fee6e", "sighting--0eca228f-127a-4793-b159-23b52cfba4bd", "sighting--8ce4a8c0-a32e-4684-a075-396ff63a2df4", "sighting--04c5ed98-4bc6-4e17-a171-494436239fd1", "sighting--8b7173fc-d5ae-47ed-96ba-9c09eb80c58e", "sighting--3317212a-7b24-4e69-bb70-da0a41187224", "sighting--68bc1ac4-ead1-4f5a-85b1-2c5aea586583", "sighting--16f47029-b447-483e-9182-7cd37230b43e", "sighting--a6d78f60-888c-41c1-a118-77f53479421a", "sighting--5bb2a23d-d33b-4ac6-8e86-bc9421b096d4", "sighting--2de18dce-3ef5-4e2b-9fc2-32e668df84e0", "sighting--ad74eac5-51b7-4f63-8124-0689ed630463", "sighting--685233ab-8f44-44af-9cf1-e77f75e541e9", "sighting--b97ed3ee-00ee-4797-92c9-5a8383869d1d", "sighting--fd1b0851-1b3c-449a-9065-809347fc3234", "sighting--85a4f2ea-209e-47f2-a2fb-83c4725aa5bb", "sighting--90b877c6-2126-478e-b090-e935cfa779e2", "sighting--430adaa2-792c-49e7-bd04-66dcaac75a40", "sighting--9b7cfd43-c818-4296-a09b-9f84b1885434", "sighting--474c8f2c-45f8-4163-b562-69e0b09c59c3", "sighting--c56a7c5f-e955-4a88-ba72-f850a119a2c4", "sighting--3c67efae-c02b-40da-b951-196747d3ee4a", "sighting--5d0b9f99-e39a-4eec-92c7-1707f9a89512", "sighting--5fb91a2d-09df-4d43-8e4a-1b2dd3c9c8c7", "sighting--e1dcfe64-e9a9-434f-a646-80cc3574f04f", "sighting--d5a2934e-2557-4587-bfd5-2cdb2b5ed032", "sighting--9a870326-3ece-48fd-9a67-293747697437", "sighting--c07eceb9-2dd4-4614-a0aa-0131cfb6a4db", "sighting--cc9f9808-31d3-41e6-b520-32064789abf6", "sighting--567bb0f5-0d5f-43d8-81c0-62bf8cae6308", "sighting--9084420c-6afc-4668-b123-9ddf33fafc7c", "sighting--b22ddf6a-be4c-48a8-9739-38db444d2c27", "sighting--0c8d1032-c64f-40f8-84cb-7f6c9899e180", "sighting--45ecf703-b426-4f9e-a92f-5afd34da5a33", "sighting--96c2d556-1c89-4707-b651-9a7dc604bc02", "sighting--daac81d8-4c72-4a89-8d60-e0d0bfebc3f8", "sighting--3e4ae82d-293c-45b3-a5b3-6ef2228d0596", "sighting--45163351-4acb-4234-abd7-5d966185c4c7", "sighting--fe3e9915-267d-45a4-bebd-42b54c3386c6", "sighting--177e3ddb-cda3-4bd1-9804-fbc02842e734", "sighting--321882fb-27e8-4d8d-ad8d-68470ee52fa3", "sighting--5638d890-89fe-4a21-9997-2471465ffc7e", "sighting--d2189f6d-dd95-408b-a82d-de95d798cd28", "sighting--35def892-0959-4aa6-a80b-651ac92e0402", "sighting--73b36c8e-dfe7-44fa-9ca1-0b8a84f7fa0a", "sighting--fe0efc7e-ec25-44db-9ebd-7cf1a9f845ca", "sighting--833c602a-2758-4faf-b5be-949569ccbaf5", "sighting--886b1431-0048-4fc9-917c-f53b3f0a852f", "sighting--b6be3ebf-3be3-4537-bff2-515666291a45", "sighting--546b0038-d1e2-4f1b-bc19-7f74715f8296", "sighting--fccdac6c-22ff-469e-9e82-763c8908bae2", "sighting--77f807ad-7759-4cc9-a8e2-6e271836233d", "sighting--26fa461e-f152-4e99-b9bd-cab9382d08dd", "sighting--6be66156-dea3-4314-9694-a0d0f244aa07", "sighting--610e01ec-c2f0-4fdd-bf25-aeb0c75b80a5", "sighting--cd320236-efba-4ec0-8260-424da35e2323", "sighting--bbd35b10-290d-4c2d-9268-df58fb2a9efa", "sighting--a7676e00-8389-4e29-bb64-b065e7fded30", "sighting--e4791b76-357f-4994-a03c-6c0d19e1b225", "sighting--0b199b13-12b8-4353-9a25-f70d59524127", "sighting--ea308d62-975e-4105-94da-102b7db7a157", "sighting--58ec651e-1d90-4db4-9a69-8f27bc25e2d4", "sighting--0c1c5e56-42ac-4cee-bd8f-22992c8b2198", "sighting--4d35bb2f-7dda-4b5b-b9f1-5130e4900713", "sighting--df69e42d-1c22-4931-9de2-f4d95805ddd8", "sighting--78b9a62b-a134-4019-a0f6-90a25e095c0a", "sighting--f61e55da-7cd0-465e-bd9a-ca90c23f264a", "sighting--ae940fcc-af0b-42f9-ad6f-816f903d43bd", "sighting--b0c9bc29-dd84-43f8-9cd3-cf189665df91", "sighting--8fc08ee3-89c7-41fa-9402-533afe43a77d", "sighting--c683c6e0-6039-4a55-a570-8806fc89916f", "sighting--633950a9-6023-45dc-9316-1b38a82075ae", "sighting--26ec1db5-c1f2-4bcc-8442-94b61a2c1405", "sighting--4cbe8219-61b5-4e2c-b514-048a6de04c63", "sighting--2dd898ea-389f-4cec-975c-a1905af620fc", "sighting--9cea718a-1b8e-4c61-b441-a16d7c500630", "sighting--b13c9eb2-58ff-4d77-abca-ab71f36d8cc3", "sighting--4f35603c-0d8d-404a-b467-5a3d957a43db", "sighting--7450e9de-940e-4694-8e46-609dcec58d24", "sighting--f59d3e33-8f1e-4220-8c78-8712d3368710", "sighting--94f166b9-f399-4aa3-ab98-92e5d1fd8853", "sighting--d92e3d30-97dd-4e69-886b-632e3fcec014", "sighting--92d2e807-6fa6-4b5d-bf7b-8ddab1971dea", "sighting--01c495f3-5b30-4e9d-bc41-0d7a7e2ddd46", "sighting--f1c82e85-5233-4879-a6bb-73f60bf66295", "sighting--491f6b38-cba5-4463-9fc9-3ed6e9e79686", "sighting--22c59165-621a-4125-a29f-a55b0f8c5d62", "sighting--dd8e222e-e965-418d-b41d-c3390cdfa563", "sighting--91b8c0ee-859e-4b0a-b8e2-90abdcabdd35", "sighting--f6d390a9-4e28-4041-b505-3b96d1948505", "sighting--c9a373be-e54f-4610-8695-e1c4915666de", "sighting--2a6ddc97-f5b1-4519-b714-ac1aecf4d9d0", "sighting--26a1bb85-0768-4548-96d8-d28f7e8285a0", "sighting--30c0a7e5-92c3-4e82-b806-a9a31f88ebf0", "sighting--1e1ac982-f83f-4bcb-807d-7345f9cddcca", "sighting--4aaffd86-c0c9-4f86-a5f7-0be2ca960f66", "sighting--33dd3439-fa80-4ce3-b523-aa9f51489216", "sighting--b8e1ac8d-fde1-421e-80a5-2c5a9e803f0d", "sighting--ee6ad3ee-f017-4e8f-bba5-dccd24fb6ab6", "sighting--c544af5a-2f67-4e07-a929-1225d9257c11", "sighting--832f7720-b77c-435c-b7f4-c7d15e6faad2", "sighting--8accd9c4-4ad1-4689-86c0-3d4c2208e57e", "sighting--4500a222-0305-49b0-bc0b-5870862a2796", "sighting--c44ae7d4-b70d-4de9-83ff-4524dc399f7c", "sighting--470faee9-1c3e-45f5-8635-dd23019dc780", "sighting--e840e394-bcc3-4734-8f76-32951227bdce", "sighting--56adc840-ca86-4a44-a428-efdfa54877a0", "sighting--54454866-ac04-4003-8c6c-77cd0feea04e", "sighting--047363b0-c003-46e8-b9ec-7b709b65cb81", "sighting--8eecbb8a-325a-465e-96c0-64bfffa4f7ff", "sighting--26da4a59-f4b2-405f-8851-df7b297ef420", "sighting--24df48b9-4922-4625-9074-210ba94b6618", "sighting--337f625e-8ef7-4146-9e18-533a73ba0fa1", "sighting--145dc9a9-8946-46e5-9475-e664013c17dc", "sighting--14d370f8-cbca-4356-9684-d9363ad1e2c2", "sighting--8a71889a-c742-4e02-8e45-a7fef824cb99", "sighting--315affb8-be4d-4e8f-bf01-b7478027abd2", "sighting--2af1325b-d521-4f48-bf7f-053384fbb42a", "sighting--4d57ff49-4cd0-497d-ba83-d1b73b16ac4f", "sighting--c7102d00-3209-4f2c-8bdf-3ec759d76565", "sighting--2df77ecb-d6c7-4c5d-9c1c-7f79256cf00b", "sighting--7e72daa3-810b-4e20-9d35-ecb73c654ead", "sighting--90b73021-e6ad-4e2b-8eed-62be3b2bf2c5", "sighting--e931542e-f9e0-4989-9708-d89669bad895", "sighting--4acb9731-508a-415f-8d65-678aa34d7e73", "sighting--e4993892-f077-4e94-8b1b-66a12914e5ba", "sighting--138cee5a-9946-4bce-a430-0dec9ac930ad", "sighting--85f354e1-5edc-4c70-a9b1-cdb34aa55bdf", "sighting--1bf6afe3-c8d2-4cf6-a750-48ae5ed9a66d", "sighting--46b0bd63-1395-4300-80fd-987c451982a4", "sighting--7111063f-5b2f-45db-90f1-7c9b4e79aabb", "sighting--9abc5958-4a1f-47f3-847d-f8a2ab619442", "sighting--27942a72-d691-41da-a35f-d22d4db9eb75", "sighting--f661ff78-56ae-44b6-b258-b4ef000392c4", "sighting--4b7ed9d6-04be-4d80-bf32-c695f130ec9c", "sighting--7e03bafa-1d4a-41bd-8dd6-45fb69ed17cd", "sighting--acd00b47-097e-4aca-a5b8-e79f437123aa", "sighting--e2e2f80d-bd14-432c-9f0c-41c2c85f88c0", "sighting--88fe9a1e-953f-459b-b925-7fc33b33de91", "sighting--0f5476fd-0c4a-4822-a803-5e061e0473b9", "sighting--0a105ed3-f526-4c22-8a42-256be565b462", "sighting--521f2642-e92a-4547-8f26-50773f6b7d35", "sighting--c8894dc2-0c0f-4ce0-8a20-6d94787df6a4", "sighting--667bca5d-364e-4c58-b7cd-d4476881b31c", "sighting--b886975c-1dd1-4941-a992-16fc26c6b9b7", "sighting--906888bf-4f34-474b-a9d9-eac3fd4a4e50", "sighting--c2394c11-627b-43d8-b8a8-d24db80c7afd", "sighting--3cda1d1e-680f-4369-8bcf-f25d60f4b668", "sighting--76954690-a763-448e-ad42-e68b94e335ea", "sighting--7ed73ab5-fa79-4b1b-be54-298681eb9cef", "sighting--bd99557e-0ad9-48a7-a2ef-31250d4e362a", "sighting--b3194173-e833-49cc-8440-5ef9c3af2c71", "sighting--0e69761f-1a84-41dc-83cb-6ba685e636d5", "sighting--ac70fe08-ccd8-4bb1-9a0e-b9a0005b0e88", "sighting--a8900c69-823e-42e9-a234-3c22bec8d39f", "sighting--2dea0b8e-2321-435a-b94e-6398bc48f6ec", "sighting--b72cb80c-4e59-404b-a498-77d0e97a3a6f", "sighting--3c94b701-7ca4-48b3-9755-049d77bdea83", "sighting--2427942c-c513-44cf-99a8-d1d56ed74f0f", "sighting--409bc091-09dd-4871-a74e-76e5fbd42dae", "sighting--a13eba68-2e2c-4828-b72b-4931f4c6cc12", "sighting--84135589-c0c4-4719-8b1a-bd4c9f598f8a", "sighting--5639a5e1-62be-43f3-bed5-8ce5f3505754", "sighting--3cc36765-05bb-4ae3-8469-7c56fb774d2a", "sighting--9c948664-d4ba-4314-818e-ff88a46dc945", "sighting--aeb76aaf-6bef-4d4b-8a60-2ebe9c0ffae8", "sighting--18843e00-c09b-4ed8-8680-4f3ae95fa734", "sighting--696da4e7-2786-4c4f-9534-8439a0110745", "sighting--c31bf25c-8bdb-49a5-87a3-b018f0d7c1a6", "sighting--a7de7017-71c4-4dfd-a3f4-b1de422b2979", "sighting--93ea321a-53bd-4bf5-97ea-1ee7c572c39e", "sighting--e4960263-d58a-4af0-9799-045c1d2f6924", "sighting--15c73e8a-ab24-4139-bbcf-e61d2b048fce", "sighting--4232c0db-17a1-4af7-88bf-a26b849516b8", "sighting--bc8ee6af-7453-4e16-97a8-83f2595e2b6c", "sighting--440d9130-2a11-4923-954c-5fb9e4a852ae", "sighting--fbdb72c9-5a77-4db7-9227-f0583dec447e", "sighting--3d16abea-c321-4fd0-8ffd-2d04d207193f", "sighting--4f52cac5-aa3e-4a95-ae01-93a383d205fd", "sighting--46fbfde6-16cd-4e3e-9e46-67c03db647f4", "sighting--8a006e73-1a9a-4d7a-b79b-964a617a5b44", "sighting--6893373d-a466-4538-a6b1-c80d35bfe60d", "sighting--e42b0fb3-6e6e-4971-a24d-b5062ce8bec5", "sighting--14096b91-f644-430f-847e-7df941b26e42", "sighting--f35261f3-2ec4-4f02-a4b6-e372b0fa06c5", "sighting--24f26097-6f9e-4c29-bc34-37534996caef", "sighting--aee64f81-aad4-4c61-a1ed-fcdf19b1d6cf", "sighting--c21dd0c6-3a4b-46d0-abc9-77db03353faf", "sighting--d185153c-3608-45e0-bd6a-2f2707b7ceaa", "sighting--6f0e6756-32b3-4ec0-8430-254f464b3a2f", "sighting--4041aa0f-c3ac-4ebc-b8d0-ba73cf108684", "sighting--89951075-4ace-40e2-a26d-311388eb887a", "sighting--b5d59e91-6c96-48ed-8411-9ed21a001cdf", "sighting--78ea347e-e4ab-4020-a689-07fc8e3d079a", "sighting--5103b1c3-aa60-4697-91ee-f60641a9ed3f", "sighting--e63fdc5a-2ac5-46b5-8a6f-27feab08fe28", "sighting--8721471c-69b4-4d63-8efd-97931d57bb02", "sighting--ea0b057e-a63f-4f60-9543-1da378b943cf", "sighting--c155e79b-af5e-415a-aec1-a3755f8b9573", "sighting--1fce8d83-0bea-41e0-b643-132bdab122cb", "sighting--f9de3e00-e127-4a47-a9ab-8ea84f0a77ce", "sighting--638d49a8-fd8e-40e7-bd2c-6ed0690dcb44", "sighting--26ea4a56-62c0-4170-8220-6e3d32b359b5", "sighting--82e67f56-2715-48b4-88b6-6d9e7997b38d", "sighting--053ac2fd-9496-45b0-a9cf-feb67ea16da8", "sighting--5a2a11b7-8be4-43e8-9ad0-87aacc0c11b0", "sighting--a4d9e8b6-cb42-4447-a774-55c840be1723", "sighting--4c24ca08-dd37-435d-a6d6-2e15284cfb45", "sighting--26e4648f-0f2b-42a8-9087-4fe9b9d8b991", "sighting--aaa999f5-3c51-42cf-8683-12c1a6efef50", "sighting--fb558ede-d49e-4c5e-99af-cc8c95b06f12", "sighting--e9497cc5-71f0-43bb-92c0-6a3a6f2f5f58", "sighting--b9606866-9eb6-43f5-a46b-6faf7a6d3d2a", "sighting--bc054eac-fb2c-4642-963a-6b742800fdc4", "sighting--bd22ec0e-25f4-4174-ac71-8d290264fe45", "sighting--ced93b52-f8fa-40d5-bd3b-fd1c5d802d48", "sighting--6987be91-7ddf-498c-9d41-dfb84e144987", "sighting--1e0f296f-682a-4c01-abe6-412ea2259840", "sighting--efdc503e-3486-41ff-a8bf-f8e40517f306", "sighting--b46ddc63-04e2-4c88-8cf9-7d592cea23d7", "sighting--027eee68-4d75-4f96-b4a1-6382ff9ca322", "sighting--11c7f9b7-4839-4870-b694-657b9e7b6b49", "sighting--744b2479-9e45-4bab-abd9-0875568dc4a7", "sighting--d757b2ba-1031-4280-bab0-daa05193544f", "sighting--3b6e7cf6-fb1c-40c8-980c-a54f80ecb042", "sighting--c35f2e30-5912-462d-81ac-1bc4aa9c02f1", "sighting--23774c09-7da1-406b-a0b8-523e2d35f914", "sighting--5fd21266-68bc-457f-b91b-dab3bc082dfc", "sighting--5bc1ef85-e8a8-4207-bb9d-58e37bba9d18", "sighting--12dfb6cf-8529-4f55-9142-3555faba5239", "sighting--4c0c21b4-3d44-44bd-9114-be0a5505e21b", "sighting--799ee16a-5226-44e1-999a-870a8fcb4a8c", "sighting--b65f0348-9b79-4347-b188-19534d7b1bcf", "sighting--71c4b597-82ee-4be3-9dec-0dc08c7f2958", "sighting--e77e28d9-7150-4390-9b78-4c01b612501b", "sighting--e11d815e-b54d-4286-a02e-1d0de3e3bc65", "sighting--d26ed0ed-473b-4a47-a6f0-0c02d56ea8ab", "sighting--8709d2e4-32cc-410f-bf96-8d31dcd2d38d", "sighting--b09e3036-5640-4e1b-8fb4-2c937fe2e251", "sighting--aaea19a7-379a-484f-89ad-e15c337d5457", "sighting--27518ea2-5239-431e-a49b-ffcc2b174c9b", "sighting--01370652-685c-48e5-a7eb-b41b59252561", "sighting--eeeeaa1a-f21a-4dcf-8458-f7b672a86ffa", "sighting--97ea8e13-5e2f-42ca-a6bf-7a80935cfd0b", "sighting--244e0370-f63f-4d99-b143-c4b699fbaaac", "sighting--27364276-9c23-46b8-a194-744f1b446052", "sighting--d569a43e-6b68-47cf-a1be-b4cdb4225abe", "sighting--1acc9c62-a403-4b5e-8185-343aad164730", "sighting--96507b19-13b3-4637-9b07-81b0341fdd1f", "sighting--541b5edb-9dd1-419f-a4c1-6521bc1ea8d5", "sighting--f1e0382c-6e63-4f78-95a6-182bea8bf703", "sighting--8318480e-516c-4da7-9c2d-2efe61ec0ca3", "sighting--e94e85b5-b86a-485a-9d11-e9f8456f761d", "sighting--45215f77-70ec-4889-86ae-91e514d3ae1d", "sighting--dd89eb68-8162-4968-8404-76319b77f275", "sighting--16a5d70d-3f97-48ce-aad6-05b40e02a12c", "sighting--3cefddd0-fb57-482b-8b26-11f2cf71652c", "sighting--15c000a4-4522-432d-94f6-7d31bcb71877", "sighting--79fc80fe-963e-4ae2-8e18-9e0b4fec3815", "sighting--b9ca1432-44cb-4dbd-80f8-943442f3d660", "sighting--2b492352-6d61-4012-a3b6-49901f03ad8f", "sighting--7004ed8c-1bcf-4aed-8a4f-1a542ac054b7", "sighting--8997650c-64ef-4be8-aa7a-79dc6260586e", "sighting--a18b7cec-b62e-4597-8f7a-0c4085c94dd2", "sighting--f3c28f7f-6644-4ac1-9579-40f22680a03c", "sighting--cfbf0ad4-df13-496e-8188-92b6539eaf96", "sighting--9c42c139-e861-4a86-886d-fc5cc04ae395", "sighting--fd39fe76-7abe-46ad-82b9-c9c0e3387a3e", "sighting--51451bd2-27d7-495c-ad96-2c7dd2c36585", "sighting--df9d80e8-8240-4cf3-9b21-4983f58080df", "sighting--94fa24ee-95b8-4151-944a-0a11c501811c", "sighting--3816ba4f-e23c-43d7-a544-eaa4f9827e03", "sighting--8430e837-1eaf-47ab-a743-be9edeac9578", "sighting--fb2dc21c-8d5b-47df-9d59-1eea82252d0f", "sighting--1970922e-0ca6-4893-b72b-9b2884347c5c", "sighting--fe240afe-8aa5-4c2c-af54-ef5df5208e82", "sighting--c8faf089-2fb2-484d-9774-23ddb923a8a8", "sighting--6ae76e9a-f291-4f8b-9c02-4357e28db4ea", "sighting--0ec8c81b-0e7c-4f84-bc6d-9b234900453c", "sighting--beeea263-8f1d-474d-b8bd-6936a6bb5457", "sighting--affb6a0b-9d19-4d08-8829-76a2dbc17d88", "sighting--64d5f4d3-cc63-4cf2-94d0-cd578c5aafd2", "sighting--d5cac8a1-b7fd-4e69-95f5-a3d888c1794a", "sighting--09add901-0f7d-4e81-ba9a-03de896bc8a9", "sighting--fefce561-f5b3-4eca-808f-1994b17758ab", "sighting--7cb0a30a-6f8e-40db-8813-f7436054375a", "sighting--c1daa8f8-2358-4145-af31-417f4d0b4411", "sighting--b58fb748-d45f-41a0-b958-2326f5a153ff", "sighting--070c3072-caf3-4877-9e06-2e02ec1ed5f2", "sighting--b1525778-3f0a-4214-bbf7-7e32d193eee9", "sighting--ba46abc1-1599-4265-9f14-1161a7147396", "sighting--33f93826-6aef-44b0-89ec-317f96b344b3", "sighting--2ebbb39e-23c4-43bd-ada5-ade3fa75a6ea", "sighting--7443fa56-d324-4f31-9c8c-c6205373f9df", "sighting--26d370a7-f514-433d-880e-62d7796f2b63", "sighting--493b1c8a-36fc-4d3a-857d-62d5d7c6f651", "sighting--c11e27a8-31fb-43a2-a509-3e98ee50fa63", "sighting--1c48e365-ded9-4370-a513-cce790e30bab", "sighting--59d86d7b-d395-4890-8261-d6a81c1d02be", "sighting--709a87cb-0361-4c94-aff2-400f49d572b2", "sighting--8bd98665-e368-4d7f-9f93-630e5c584b1d", "sighting--0f1ca636-47a6-48ca-bc4b-3269042f7162", "sighting--c178d964-8915-4661-8270-5ea8238e43fe", "sighting--985018ae-d18e-4486-87b5-e46360726dc7", "sighting--c5d356a5-05cf-435a-bcae-a3a9bc393291", "sighting--0254e033-5f2d-46b0-8329-1246156f9559", "sighting--c6934efa-d680-4405-b240-ac05937143ba", "sighting--29128bc5-78ae-40cc-971a-64321223e36f", "sighting--f4fb96f0-ab9c-4bfa-9d92-d36e4ccfe4be", "sighting--9135ae25-1134-4609-8cad-dee1fa7d71d9", "sighting--3ed8e050-9015-4ccc-88e0-ec6d38e45bfd", "sighting--0a9af7d2-2e44-4b4e-bbc9-afe5a227cb57", "sighting--c86cdda8-fdd9-4713-987d-ed40a68f0ada", "sighting--9ece5bf7-6b76-4846-bdcf-95be9a619600", "sighting--8f6a1435-53d8-4cf4-9c2a-851b5781d25f", "sighting--2cd6ef42-da2c-42d5-aa80-bf7be40e2eb8", "sighting--f9a922aa-091c-41f5-85b5-a52e9368cce8", "sighting--1d3eebcf-f21f-449c-b6a7-9f63e413446c", "sighting--7aad5023-0750-40c2-b775-f65861c26766", "sighting--eee79c80-a6f3-43a0-b008-895a55af91a2", "sighting--f0892d00-f43f-462d-8c86-1d358da98173", "sighting--e9f6ba5c-c74d-4595-acdc-9fac65bf80b3", "sighting--6f031880-18b2-4653-8bfa-51bfd426ff28", "sighting--296cdb0e-1216-4083-842b-5e8c57c4334c", "sighting--13e8eb4f-c695-4d6d-bd40-cea293738339", "sighting--ce05e1cb-3fc9-4819-b04b-0281f71257c6", "sighting--5cf983d6-28cd-44dd-b56f-813b8d87f596", "sighting--ed544064-9c74-4da3-afdd-fa458ec0718a", "sighting--82ca6251-fee6-4f24-8ef9-5c5eee1e694d", "sighting--bc1c2b93-cc37-4d5d-904a-c444f75921e9", "sighting--9f399d0c-006e-479d-86dc-65187572dafc", "sighting--e6e02329-969e-4300-9868-45154eb45942", "sighting--65d4ec8a-fc3e-4a2c-b215-f53fb36396e9", "sighting--27f21317-7d07-48b4-88f9-3e36567c04e5", "sighting--8345f470-df1c-4e06-bdfe-2a4d92c25b65", "sighting--67ebed9b-1ce0-4140-9810-fe561497981c", "sighting--11e8e899-1e08-4fea-b91d-d844665ac6bc", "sighting--306ed3e2-b6f0-4e1c-ada3-d100c4259a7a", "sighting--7e2c924e-14a5-40a9-81a6-e1a002b0944a", "sighting--c88889a6-1a88-434d-98ad-79f244608525", "sighting--9c869cab-3339-418a-8b28-b0c582af2f69", "sighting--93467de9-0e10-4a07-817b-0980970c92d5", "sighting--f399e964-d4ae-4366-8746-a38a900ebcdc", "sighting--645ea304-0136-4cce-a091-5c9a8a1d4b82", "sighting--3a02fc59-79ba-4747-885b-ecaf5eb6af3f", "sighting--0bec1597-f560-484e-b529-9689aa482416", "sighting--ae788ed2-2686-4863-a218-ed0b49bb1a7a", "sighting--2897ff1a-a203-4ce0-b36e-f3cba9562260", "sighting--409d791d-d1ec-4d8b-8eed-1867ae6db3b9", "sighting--b14cc863-3518-4d17-8c64-7655abe8a064", "sighting--02d4c312-217b-4e8c-b5be-ad5a912644ba", "sighting--259d8dce-da86-4415-9c85-3adcd0f8be37", "sighting--1714251a-f5ba-42f6-93ec-32aaffd9f65b", "sighting--26503b9f-bc85-47dd-b417-d45436d6b134", "sighting--a8b62a35-b451-4671-8569-9e357bee95e0", "sighting--031d264b-ff0c-43c4-84b6-05f513c5d02a", "sighting--df26ea54-cf13-4209-9883-f1157ccc079c", "sighting--05dc030d-6bbb-4f9a-94b5-e7224e818a8d", "sighting--997d7f4f-82c7-430f-bab7-79aaa6c15957", "sighting--1bd4c20d-d6a8-42fd-9c4b-ddb1480ccc8d", "sighting--a9da684f-9dd8-48b7-a939-fba4dab8152e", "sighting--7b2dd1b1-459c-436c-8f88-fa579cd07d2b", "sighting--d2f2d3a3-d5ba-4f2c-ae70-511a4cfd4cfc", "sighting--ab413836-c7cb-437b-9c52-76db3af545a7", "sighting--28c946e9-7ef6-4713-b2cc-5790fdf53de3", "sighting--122b0e85-76aa-401e-b1c5-69c01e4d7a9b", "sighting--16766f3e-bc3b-4568-8478-dc6dd27a3a70", "sighting--9e1a7f03-66ea-4df5-a3dc-1a23a047b57e", "sighting--b57d7908-cd83-4d2f-8cf9-a464955de229", "sighting--83815df2-6cb7-4895-a96c-c77a844cb78f", "sighting--9dce2a9c-26a6-4dcf-9b88-b320cc3cab6b", "sighting--8fcdacf7-b7fc-400c-9b0d-23af263d25e5", "sighting--efd59dc0-db71-48c7-b17d-fca8bd33be38", "sighting--7c12f67a-c1b0-4f53-9381-f6abd3b59d54", "sighting--cbc7f147-a24d-455c-84b5-482f1c0fff00", "sighting--81fa6534-7805-47e9-9077-aa85c063e5f7", "sighting--92f443e4-7636-42eb-bcdd-447af2429693", "sighting--7555f477-e4a0-4c38-a3ec-fc2b28976f11", "sighting--568739b8-95cd-4fd2-a0be-f53b75b44969", "sighting--2a23b370-2ca8-40ac-8ab4-0642558e6bf8", "sighting--852d0081-2f2f-4e94-89bb-195e2729fa55", "sighting--4b906009-8a71-44be-b9c1-823eeb6af17e", "sighting--3596c31a-0d2e-46cb-aea7-3a95781fddde", "sighting--3873edd7-3af2-4762-a156-8c8127176e12", "sighting--af1fd569-0200-4046-a9c4-f3e1bac4aaec", "sighting--1b66fc94-33b8-4d82-8266-1ba23b633b58", "sighting--b873ebc3-d4fa-4795-9f4e-13aa4fa75a37", "sighting--be4b37c7-3a72-408a-a7ab-953fc935e3f8", "sighting--654487be-a8af-4bd2-805b-17a034c4c3c0", "sighting--feb84b40-149c-4b14-890e-c1e3e047fd64", "sighting--f7f06678-bc87-4e95-89f5-f507a6c298fa", "sighting--79894ef6-b7ce-4704-9828-048dbd963cb2", "sighting--71249068-046f-4af7-b82c-54cb11c04c61", "sighting--1bf1e07b-04bd-46ac-8765-8bcac981a106", "sighting--81a18a2b-381a-4f21-aac0-a3acda662d1e", "sighting--af9ecf34-a3a6-4a4b-977f-be7efa554667", "sighting--9391a03a-176c-485b-bf9d-1651a4338547", "sighting--55465f63-0220-47b0-b959-8cf233eaa1a7", "sighting--0352062b-c178-4539-8139-9b954479192e", "sighting--4770dc50-5013-4e27-85fc-8c2ae95ec307", "sighting--21936c12-9200-4a61-88a5-bf7e94a7531b", "sighting--71e8b526-f7cc-43f9-a36b-aef81b2a84d0", "sighting--ca2d23d6-4ba3-429e-b663-f7d39a275141", "sighting--4c9a1558-129a-44ac-899e-61814bc550d9", "sighting--cc813e7b-460a-4281-b247-903973779e85", "sighting--8806fb5c-bb2c-4b34-9cb8-f9fcdd3ccaf3", "sighting--5367cc63-441d-4caf-8d0c-17b8336cb4d1", "sighting--62439c8e-4a34-4d22-b96c-090f3926a407", "sighting--656aaa26-49fe-4df1-8127-b0472fe609db", "sighting--15518f7a-da1b-4321-a42d-e2b1bc74704f", "sighting--84e00eac-7580-40ad-b4a3-b1ad277f6009", "sighting--e07af4c0-cf8d-4828-9fba-50eb320d0f2d", "sighting--1a9a2441-bdd9-4f5a-9254-1b14490a6883", "sighting--2b51e6ac-a8d1-4b65-b041-b3fe323d9b8e", "sighting--41f62c92-722e-4a04-b9e4-a4c429501f87", "sighting--a38987ef-3543-4d30-a729-d4db6c24f35b", "sighting--942d66b0-70fd-4363-8c00-68717f4944b4", "sighting--5c266e91-2c59-4a27-99d8-981aa3a531b2", "sighting--9fc6eae7-057f-465b-a4bc-8c4c55249e4a", "sighting--546fd757-0b6c-413e-9bfb-b66df55dc26f", "sighting--55c4df9c-8aef-452d-96cb-f5fb745bbfdc", "sighting--0d62de63-4d47-44dc-8424-5fe70f3e51ae", "sighting--949dc28b-4193-4633-bb82-342a08f57e39", "sighting--217904c6-6c44-44b1-a993-f4d8369e1a3e", "sighting--b8122381-f4ce-4052-9756-680580892168", "sighting--134a8b47-c7aa-492c-90f9-4b4089219eb4", "sighting--e3f7dfee-7615-4ede-9d14-c4fc22369bde", "sighting--05feb303-71f4-4550-9870-dbe808df8582", "sighting--e939058f-9048-46d2-aee4-923519e74f66", "sighting--1d9475f7-2b7c-4ca2-80cc-775ab0931dfc", "sighting--d74e343c-2c2f-4a73-bbe1-85bd6b0badda", "sighting--8c41526f-a7d7-4f64-b91f-8cdc8d8b5588", "sighting--48cc73e3-835e-412e-9232-9ba735bcba6c", "sighting--0ed3402b-a945-45d0-94ee-cee729f152ab", "sighting--0fed0e66-997e-4f36-b979-41d4067d9ae9", "sighting--2dbb76cb-d0d3-459c-af5b-98fa185ffa42", "sighting--3bef937a-5ac0-4f52-9ae4-ffd237c6a922", "sighting--c4d53899-6e04-46ef-b191-03c0e89ce7a6", "sighting--2ee7abee-cc55-403c-b16c-a6ab93c272f9", "sighting--e9bb36a9-8578-4856-9926-66d2fedab7cd", "sighting--2227c12f-8048-49b6-8b71-56777ad3d55e", "sighting--d1cb8bbe-2028-4e12-a554-ece7226f4ad2", "sighting--434a267f-dc9d-46d9-94e4-9618ec0c0981", "sighting--1e50da9b-e75d-40a2-9645-b1754043426e", "sighting--11aea72e-e9ed-4ebf-9e5a-cea353e69ea1", "sighting--309f0fe1-a5b4-4a31-a6d3-eeef596c7d22", "sighting--dfe53ac3-3b20-4f37-81bd-018245751475", "sighting--648b8db6-8bdc-4fca-9fd2-462fcd718c09", "sighting--72db0f54-a2b7-46a3-b040-98cad638030a", "sighting--bb21b7ab-85f3-4ad8-a85c-d3e04dcf4d7d", "sighting--c30edd37-7998-48a3-ae9e-707752a7c897", "sighting--9e1df477-22dc-4f12-bab4-31acf750e1f9", "sighting--31f3fcba-a76c-4873-aec6-11ebdb0a5371", "sighting--bc782b7d-ef6b-42da-af28-63e6ff4e327b", "sighting--7dcb4913-950b-4e91-8f6c-a7bfa20d6b2d", "sighting--6a78425b-bb38-4247-80fe-4824e6359d06", "sighting--e5f7a1eb-4ae0-4753-80d0-ea7b181e27f3", "sighting--cf41a2e5-9a25-48cf-9cc1-09ed78e89c3d", "sighting--777529f4-d454-4215-829b-a94de6104a4b", "sighting--3f5f5f70-07c2-484f-855c-01620a94d5f2", "sighting--3f2b1db9-b6c2-4f93-bff0-bdf259d1e363", "sighting--b5668e82-e32a-483b-a087-0ddf0b82e95d", "sighting--d804fba9-1620-4114-80db-6c057993a507", "sighting--5f5bcc52-2e12-4666-9eda-ab1fe96087a3", "sighting--28ae5607-4c21-42c2-a62c-78856cf1fca5", "sighting--5c9c2ae5-2d2c-4e24-9adb-9702979fa940", "sighting--f532f15a-a5c8-41d5-b41d-d290623fdf97", "sighting--fca4315c-dd70-4401-a820-05c34b6048e8", "sighting--28b0ac28-c846-414e-8ca9-40b893a61377", "sighting--3a717c32-0fd5-4e6c-b1a7-af3dee12eae8", "sighting--e3a9693e-9cd4-4da9-9dee-9c533e996451", "sighting--133b3fd4-5f3b-4bf1-ac1d-229e9b6f2132", "sighting--05161625-23e9-4616-8ce6-24be2899cee1", "sighting--661687a8-a265-40a9-833e-a453c34d5539", "sighting--1bdfe8da-fd82-4d9a-99d5-172b8ddbed33", "sighting--c8c5890f-b299-4c20-8475-4f2042c1d4d9", "sighting--302cdb2e-728d-43f5-8143-044c9525c361", "sighting--16dfdb61-aadf-48f2-9f75-1039fff8dd97", "sighting--930206da-768a-4716-a6e4-9a8f0a5fa507", "sighting--d8f084c1-140c-4427-8057-7f955c511f06", "sighting--aa8e65c4-ea54-445e-a720-0740c6208627", "sighting--71822c3e-d350-4972-866f-f45c25fcf614", "sighting--ed652a62-0a5a-44bd-bea3-eaa34258d4b3", "sighting--95fdf8a8-7972-49ac-bb62-e22e2c565bd9", "sighting--7cc7462e-3bf2-408c-abf9-5ad7065baff9", "sighting--0c81839a-776a-49be-9226-2cbf8b42a075", "sighting--d665f34f-c3db-414c-8faa-eda04caca8dc", "sighting--53282698-acad-4447-8b07-f4f27a309a40", "sighting--afae7daa-dd9b-49b8-9666-6a8bca79a978", "sighting--0068e9a7-4a51-41b0-8fac-57c56cb30cda", "sighting--6f754007-bb86-4ccf-932e-980e52ecd9cb", "sighting--924b6cfd-429c-4f57-a29d-4edfe43cbe4b", "sighting--d73dc4dd-80dd-47ce-a261-8ed2f571516c", "sighting--0fee0f0a-5e69-4100-80a0-c9a4c1f6180e", "sighting--df613e70-7304-497c-812a-1bfe37f29d9f", "sighting--fa22270e-4bb6-479b-8532-cc492795bd22", "sighting--b2781cac-751d-42be-b0f2-c4beba0d1423", "sighting--46d6fe5b-7a9d-4eeb-b216-a85ce6114410", "sighting--f9b999e7-eb9c-4d7f-9ec9-b9baa3d9b02a", "sighting--aca7d0d2-b238-4443-a328-ede5a6aeba5e", "sighting--9d90893b-a61a-4b09-9982-0e2adf940364", "sighting--2d74325c-366b-4436-aa82-53b5f915e506", "sighting--6d9aa1a5-0f65-438a-a176-468ca4d266b9", "sighting--2df1b0ee-8949-4d37-b057-7061689e515a", "sighting--307f69a3-c510-43dd-b2e6-519f191687db", "sighting--26c4b553-c3ad-4c79-b008-310dedc0cb40", "sighting--ee9e3b7a-02b9-4640-b9cb-3b129cca8c1f", "sighting--d874a7f1-1b06-4269-9885-a78b820bcd55", "sighting--378ccefa-2965-4fba-83af-02ae3b1cbfb8", "sighting--5bd4a1f8-8e3e-450b-a32e-095aff4d0490", "sighting--5b40c473-70ab-4f65-a89e-568045941668", "sighting--1ee4ff49-413b-46c2-89cb-0ce7123be89d", "sighting--c71824bc-5d4d-4e28-ad77-eabd38ffdabf", "sighting--58bdaa2f-b581-4cb0-8890-35752652ceb9", "sighting--eb75bbd7-5db9-43b3-ab33-43e96098c562", "sighting--657feec2-628b-410b-af48-6f669117a899", "sighting--a2b235b3-75ba-4858-99a1-63961cf8b892", "sighting--ecd0d42e-f25f-472d-8243-2b6028e524f9", "sighting--271ca6be-657c-48b8-951e-e1aca180b160", "sighting--3cf6b2e7-0ee0-429f-a1dd-7e90b8ba7c9b", "sighting--dddb2ed2-ac27-4bc2-87c9-bddb89626cd6", "sighting--4b4f9a87-a0e3-4a55-9c5c-670bf2b5482c", "sighting--3edbb19e-950c-4b5f-9bdb-5332c2ae6739", "sighting--ad21e006-29aa-48ca-9a48-80ca1be5d79f", "sighting--0320c2ac-4e5a-4784-b814-f1fb994c5190", "sighting--899ec577-c688-42bc-95ef-1b2c19f694e5", "sighting--0d298bdb-a680-4d77-8ecb-0469423509ed", "sighting--ce6c23d8-66e9-4c38-b950-062572f7d531", "sighting--ee58e22c-511c-42b3-83eb-44f2f00a620a", "sighting--55701442-a2c2-4cce-911b-f2a099fdfb88", "sighting--b5c7987d-5b0f-461e-85f8-7f9d0d93f679", "sighting--8db85fb6-77f2-4b43-9d66-0bd3637e58f4", "sighting--f30d64c9-acf2-46fe-820d-97aa69e477a3", "sighting--a2cbee1b-7684-4c33-a540-0d6ce248900b", "sighting--99745ded-77a3-4941-a0fc-1077957f4770", "sighting--691c9b0e-b523-464a-8ae1-c0d0998a003c", "sighting--ac7f782a-6b07-4d3b-a0ec-d5e51fc4edfa", "sighting--619f6f05-d855-46a3-9bd6-ea024a777296", "sighting--93e163f4-33f8-48ec-973c-4a2cbf99fb44", "sighting--2c4778f5-eea5-4698-8991-e78370740f11", "sighting--6eba8eb2-cb71-4b3d-a36e-f617ce569454", "sighting--d9057027-0bec-42dd-b511-7aad26babd2e", "sighting--8100b643-7dcf-4575-9704-b9d0193c1c72", "sighting--5af77f70-db4c-4230-b811-f509a114f5b5", "sighting--517daab5-949b-4ecd-85c7-9c9fc08dd7e9", "sighting--48249875-bc3a-4008-b335-e07bc8402940", "sighting--d0a7d8fc-3459-4bb4-be5c-61114db25715", "sighting--628e150e-aa41-49bf-9534-39caf343690e", "sighting--c869168e-9204-4f6e-8a49-813dc982b630", "sighting--df90f63e-0179-4dcd-94ad-cfe047fcf675", "sighting--ccc6784e-5cc8-41ea-91f6-75444ac9bd91", "sighting--d2362a7e-1765-43ed-8f29-d1c12f982669", "sighting--cf8b3c46-78fb-488b-958f-1ca0cb9899a3", "sighting--e08a95af-d1c6-4707-8455-15eb794e2f8c", "sighting--68e00c7d-8e57-49cf-aee4-911e69c564cb", "sighting--c6492856-4b3d-4cc5-8fde-65f225bf86fc", "sighting--3b1ea551-2cd0-4932-98f2-e1d060cda71e", "sighting--6ad70278-8303-42e2-8319-119adf0f04a1", "sighting--12ad7912-0b74-4c8e-a276-8ca02d4e9b89", "sighting--87279118-5366-45c1-8376-9ce1bb8100ba", "sighting--613ce7c4-fb69-4cc6-b50e-38913925f2da", "sighting--901c8d62-d1c4-4576-9656-401fa0f87820", "sighting--95398078-dafb-4a04-9bc2-37443112b6bd", "sighting--f7369bcb-b4e3-4204-9ad2-b5c5b2046d74", "sighting--fc8dcf45-5e14-4926-a178-dff48d1dfb44", "sighting--38ded96c-06db-44c1-bd14-173c011b2c62", "sighting--2459b528-5b4a-4f69-8ae3-478dc769947f", "sighting--a4563168-be35-49c7-95c4-a87a9f738205", "sighting--9e7d4204-0fbe-4a4c-9f79-454c1df39fb2", "sighting--73fa23ab-db1d-43d9-9203-4138d29ea9bc", "sighting--1f6b47d4-70a0-4c48-a9af-b3ef00493fbf", "sighting--a49a5fa4-96af-4b8e-b320-8f0562ec1588", "sighting--b509ac96-6d4f-4e1c-830f-8af1076e2d15", "sighting--f5be83d4-3fe1-4afb-a012-a90108a4b0b3", "sighting--4b9fa419-fd2b-41aa-9acc-cffdcc0979d4", "sighting--12363b12-4877-4643-b680-74edcef10697", "sighting--46aa4abf-c90a-476a-b80e-ec4e01885e21", "sighting--c8e97c53-eee0-4517-a86d-862e23906c13", "sighting--b8589f87-8bb0-40ac-b0fe-98c6e6d66422", "sighting--85a07829-a098-4858-a101-7e8cb8c24a4e", "sighting--0b715678-9ede-4a59-9d53-f12ad11eab79", "sighting--27040952-8ab8-48e2-8466-3bf2f11b3ab3", "sighting--6487205a-2a8d-4134-b872-cfc5cd58dfe9", "sighting--cdfb13ef-f2eb-4e0f-bc41-d89df0228859", "sighting--724c17d5-6a11-4b51-b049-918e8fc00c1d", "sighting--b7af8bad-f8de-4097-9c85-ff66950a0f39", "sighting--d610704d-9422-45f6-b89c-2b8986ab9224", "sighting--443e23fb-086b-4880-8997-6ae4da14881d", "sighting--62b3e083-034d-4d24-a58c-62dbef0574c4", "sighting--6335c875-32e2-4e3e-b2e9-f2c142cd4e51", "sighting--9b22eaad-0cf0-4f0b-8e23-c64f2dd7ce70", "sighting--2a38c7eb-c8b1-49ba-8370-ddbb4ff4192a", "sighting--3015b8bc-4509-4625-a721-51688ad459ed", "sighting--9abf3dd2-f176-456b-8e84-0e0626e8a129", "sighting--beacb997-c6b9-4f01-8658-2a385bba5b6c", "sighting--c92e7281-4b67-4ac2-9e83-e4461c523752", "sighting--1c98f1e8-ce28-4d3c-a9c0-d780e35dd1d4", "sighting--cfc6b10e-45d8-40ec-8299-14c1da65d414", "sighting--5cea9f89-8738-4fab-a641-75c0c200c0ae", "sighting--9afbaa57-e95b-4ecf-9f85-791c16cb8435", "sighting--d243dc3c-3a63-4dba-9aaf-72fbcc6b3eb6", "sighting--7ee9faf4-c8af-4a60-a68c-81fc262795d5", "sighting--41d3e7a3-4272-47c1-ad7d-36792baf152a", "sighting--f8eb92f8-4f42-46f4-8e1d-789f645b3e33", "sighting--2e0acf30-3177-4609-9cab-69c58b6a1a06", "sighting--d1211bc0-4bf8-4c88-b6ee-5dcef375729d", "sighting--c80202fd-c2bf-4b2a-9066-eafc9ee1e2ee", "sighting--f2c99cb5-80af-4c0c-8ab6-87ced5b8111e", "sighting--a8c134d3-9aa0-4196-b8af-1a10ae858559", "sighting--60a4d832-74c6-47da-be11-fcd47f027e63", "sighting--23e1c705-08cd-4d6b-9954-596da090efc1", "sighting--80ff655d-a42f-4b00-879d-502840bb2462", "sighting--116b2544-72f6-4882-a47c-5fb1690ae99b", "sighting--f663d585-bd06-435c-9a2e-3449238b2b5e", "sighting--e44f16d3-4c56-47db-b147-70cbfcbd7edb", "sighting--90393b5d-b06a-480a-b203-d7ae5f2aab28", "sighting--f81b63fb-6ee8-4401-9b70-a55d171f1f3e", "sighting--848cf3fb-0f79-4370-a580-f37b4f8f6858", "sighting--82dc948b-57f0-4d3c-875f-04e7ffd57221", "sighting--9ca9670d-1c52-4284-bd40-df18fd006920", "sighting--1cf6ccb2-d24c-414c-a184-fb34c9e2a1c1", "sighting--6f40ee1d-33eb-413c-8191-bd4c0c49a032", "sighting--d48c9339-0812-4edd-85fa-13df8eb3cb2a", "sighting--ee9871b0-bc74-42e7-99cb-8bf12d27cfbf", "sighting--87f23f17-2ff0-42ab-b479-5d75a09f82b9", "sighting--72d95777-709d-4742-92c3-d0c4a23ba64a", "sighting--4d4be65c-7fc6-48a5-bd12-e2ae58b08ebb", "sighting--602f3d84-7551-4f6f-9fb0-0fdf1cbd7a0c", "sighting--d58dbd05-134a-427f-86fd-98f988a1fc80", "sighting--0064170c-72e1-4c64-a706-d51adf23d7eb", "sighting--3fd5033c-0d2c-46fd-91b9-6bc2b484218b", "sighting--bbe085a4-d447-4892-9128-eef9ed27a7e4", "sighting--fc2c4cc6-7a97-4d54-a64c-dd57fab204e5", "sighting--79aa22dc-3148-42b9-b2db-a6fb5ea9a22b", "sighting--067f9461-32cc-4735-8d1a-956d09110cf4", "sighting--a03efe0b-c649-432a-97f4-36ccc95d300e", "sighting--768ae781-7082-466a-9186-5808edcedaba", "sighting--b6d679fb-8299-469b-bdf8-25753b79099c", "sighting--e3640466-f6ca-49d1-9b42-ee9bc8ffac10", "sighting--d9788e56-e6d3-4f60-bfae-ca3b3a72a89d", "sighting--1e48bd35-2baa-43a9-b092-29700ff85f4f", "sighting--ad842580-1c60-4de3-bf84-c820c96a1ca9", "sighting--dcff01be-2fd6-4822-b906-809e3b74799e", "sighting--c4875467-6a97-4974-8c6f-d57dab7aaf64", "sighting--fc90d075-258e-4678-8c78-b84cca1d2168", "sighting--ecb7b060-10b5-466e-b3ca-2f15e60c861f", "sighting--9c6ceb2e-8847-41af-bd5c-2b81dfb95889", "sighting--1104e0d7-4657-4c31-b2e1-6a503a489d4a", "sighting--19c1a7a0-6f2c-463d-97d2-73edde26755c", "sighting--4100253f-e269-41ee-9d05-76e1f09177cd", "sighting--79a3a082-f040-4335-b534-37b7dca6f900", "sighting--55a8bde5-9737-4aaf-a012-2a65f13e9edf", "sighting--015e8be0-9b2d-4758-a1a7-47cb0511bf62", "sighting--c4be984a-fb33-4bf4-842f-570b2f25e961", "sighting--d5369dcd-1e95-402f-ae38-3b49f8fca52b", "sighting--5379dabb-aee5-482f-9baa-31f6fd2d651d", "sighting--23b78759-a588-4e10-837a-54a64dad83d2", "sighting--30005137-2f4d-4a9d-98f6-d61d32129621", "sighting--22e5a97e-45b8-401b-b8b8-eaf072eeb1d9", "sighting--ff49910e-8464-4a26-a321-0b62d651f769", "sighting--f73a0ab5-1746-4c95-baa7-db951943b5fa", "sighting--cb6bba63-0824-42d6-8f57-1f761941a80e", "sighting--dea865a8-3614-448f-b92d-72f6a3ed812a", "sighting--e0264d0d-df20-4618-b676-88b5946b4ae4", "sighting--1d01df4a-83e9-4acb-be02-abdbf84a46c9", "sighting--5ae5d85e-1619-48fb-adb3-9adb3ed5187c", "sighting--a17f2c4a-6c47-41bf-a273-8cd9673ba4fb", "sighting--05851764-b543-4568-bcf2-db5e5a30803c", "sighting--101e125e-1b07-4e2e-a380-0f18cc4991f2", "sighting--bb675d7a-8208-4a4e-b0c5-4da76df6eb9f", "sighting--53271d5a-86c3-4dd9-813d-6eeda79dc981", "sighting--0c4752a5-a58d-4cca-b574-e3604e58c2da", "sighting--5cfd5a8a-0d6b-4e2f-89b6-1631999e1a3e", "sighting--e93005b5-eeea-46e5-9863-bc92803a0d14", "sighting--e23cde69-c7a0-40f7-8fde-e0b971e0ee6f", "sighting--ea8443ca-ed1c-4e2a-a9fb-e9de9b7f0503", "sighting--369b269e-f47a-44d5-b60d-9e80a3af3dcf", "sighting--87181da5-17db-41a7-a6d3-2c2f9db477af", "sighting--bab7de4a-e998-4386-bb9d-c8e08eb33e3e", "sighting--a4035b9c-9347-4790-9138-f2d5cc98fdb7", "sighting--a281bded-0737-4ed6-872b-6d3696b513ae", "sighting--baeebf43-798e-47a6-9313-7d39bb1882b4", "sighting--79cd6134-f621-4986-88fe-debbae728953", "sighting--918e27c4-985f-49d3-bb2f-9213223b1aa1", "sighting--0b7b92c6-28b4-492c-a989-ad57ca1a27d2", "sighting--8b5a8919-9313-4e61-9652-d0beec6534a1", "sighting--61ead9ce-c515-49bf-9d93-7cd83689f2bc", "sighting--41d636c9-f8ce-436d-a446-2b1fcb99eaaa", "sighting--9d628da9-c846-4b99-a88e-daa74f3e9bcf", "sighting--9731fad7-6b72-4bf4-a4d1-e549e811cf7b", "sighting--4a06e8c9-1ecc-4e47-9f2e-922435104f7f", "sighting--a44316c5-2322-48dc-bb67-67d098eec9c6", "sighting--78b5d7da-6777-4a8e-accd-052e98b52977", "sighting--bf460e8c-a397-41d9-8a4c-fab11faa9acf", "sighting--bdcead10-ae1f-4f85-b661-0ae27009e4a5", "sighting--9b81f0c2-5a07-444e-85aa-74226814296f", "sighting--c0a3ca96-7e97-4101-be2d-987caf3c672c", "sighting--354c52c1-cc5e-473a-b40a-fd13f5f0c38f", "sighting--728944ec-97d5-42c3-8a32-5cacdb407a38", "sighting--58f4e2b0-a57e-4d20-86ae-f4971f325dd6", "sighting--cdf46c51-f389-49b8-8a08-a3bbc86da7da", "sighting--e7887911-1fe3-4dc3-a690-729a052ca74c", "sighting--f64437ef-e392-4e66-b3bd-fc5867077d79", "sighting--578f07b3-92ec-4552-ac7f-ca1b6c89a463", "sighting--03cbb655-e61e-4baa-a804-23a7ceac6b9a", "sighting--3c0f1fcc-23a2-4091-a9d6-83d467f17a75", "sighting--dfd893e2-59ff-4882-9ef0-a0d4bba13954", "sighting--20a8fbaa-5563-4227-afda-7bceb113ec2e", "sighting--01a57e58-0e9b-4e0d-b6a1-5da503db4fa7", "sighting--9bd6083b-2e0f-40f5-a0f7-aa0848864858", "sighting--9d065ffd-dfa9-4857-80d2-99a86358df89", "sighting--238286e6-fdcd-4659-ae8d-65dfe45625cb", "sighting--451d3970-8532-47d8-b884-1bc7d6c6a15c", "sighting--26475849-6ba2-4b6f-823d-50a5bed9e41e", "sighting--c74f3c11-a85c-43f8-ac73-aa66d767a0a4", "sighting--995e27af-91f2-4db8-89a9-e1eb57e48c2e", "sighting--971af789-3c32-47b4-9e14-1ba2512acc15", "sighting--af089cd1-0eb1-4b5d-8773-14a3851e950a", "sighting--d23a412d-3fe2-4af6-a321-fd7c7ba247f0", "sighting--6935f41f-f747-4414-a370-7adfcaa21777", "sighting--ada81286-9689-425b-8866-c3a764ec94e5", "sighting--009b4957-0c51-44dd-9a89-b638dbf4b221", "sighting--d0826491-a00d-4cc7-a4b2-7fa62dd48323", "sighting--58d34d22-6040-44c4-b314-554f1c842554", "sighting--15f3c7b6-55ad-40a4-8473-7be41461622d", "sighting--ca131217-ca29-4de0-9d05-7606e9cc0c95", "sighting--4fcee51a-fd82-472f-9bb7-df858c95c391", "sighting--652cf9a0-e097-4701-98eb-9e13a29fd943", "sighting--65a18b6a-0501-4806-badc-8d08237e70ff", "sighting--36d2e535-12cb-490b-9228-d2c8b05b6c54", "sighting--1dccedc4-bb17-4e1c-bec5-c4e82c7bf99a", "sighting--fb50acb8-08af-41fd-b4f7-fc93b7bc0669", "sighting--a213e094-50b3-4ff0-a8ab-7e4b0a4e52dd", "sighting--311ee58c-2168-4e30-9423-244e0a2e3681", "sighting--d84d7d74-6366-47a5-8528-f17d8b5b0081", "sighting--309cca32-d563-496e-942c-dd9251a92d30", "sighting--fa90d54d-0aef-476f-ba58-a353be3d7ab1", "sighting--fd6941ff-1fe1-4c96-b93b-ce61565b076d", "sighting--0bf633e2-18da-41dd-a478-54518b32f9b0", "sighting--44ce0598-b3e2-473c-be06-02f21b3c9b2f", "sighting--17ae31b6-5e39-45d7-9e0d-795a130740d5", "sighting--f047f441-db69-4064-a914-12bf961d170b", "sighting--a388709e-335e-4d9e-a0b1-72ae16afb931", "sighting--9e4cd4ac-ade3-4a01-93c1-56446ad64e89", "sighting--79f73db0-9744-4479-9a75-b6ef8d9e7df5", "sighting--755070aa-6a40-41af-a927-f7984966515e", "sighting--715ecdfb-140e-459c-a4ca-dcd9a66b5d96", "sighting--da768527-c6f6-4afb-bc56-d8ac54757a53", "sighting--34fa92ee-88f4-4ab9-99d2-f30a06a7a7bb", "sighting--6d7d1708-3bc2-42d2-b708-40b8052c4b03", "sighting--76d86fbb-070b-446e-b25a-c75df254a825", "sighting--17d88896-bdeb-42ad-9626-8ad61963a49c", "sighting--c90a36ee-d2d0-458b-9444-5f52812fb6ce", "sighting--98cf8b0c-ac9e-406e-b3e7-209d2978f366", "sighting--2d8595e2-1ac7-4795-bfc8-2cd8b2540743", "sighting--37d012a3-eea6-4993-92e2-c6432852c4d4", "sighting--35f43aac-7aa5-4fa7-92cd-f184bc0c382f", "sighting--0ad133d6-e60f-4691-b8a9-cb8708053722", "sighting--6a91987a-8fb3-47c5-aaf7-6cb54b70175f", "sighting--172c619b-6317-47a0-97b8-3cb10a5fd0b6", "sighting--12c8bdcb-2c7f-4ca5-8796-8666dd8e6d58", "sighting--15df8f2c-48e4-44a6-8eb7-0f9c236137db", "sighting--0535887d-7d8f-4fdd-bf1d-9e650fe06c9b", "sighting--00a4cfbd-3dc7-4c3b-a073-4f5f0b0e42b2", "sighting--56cf2d10-f995-4aec-ad32-7d47cb824084", "sighting--76394b15-8886-4bab-acdb-1b8b555f3595", "sighting--9cc73c32-88a9-49fb-b658-ba473981f77e", "sighting--86adab3e-f878-4840-b498-159874f9298b", "sighting--22d7b627-2418-4403-bbca-0774564f9dd5", "sighting--67985245-9bba-4ca5-9e4a-853d3c7654b1", "sighting--f8772c39-d392-49ab-9328-d3e3cd1b696c", "sighting--d41e0723-efd5-478c-8a9a-15efab2e2d8e", "sighting--e5bbbe25-64b1-4826-8c53-0e8e790d9742", "sighting--a763a124-82b4-44d3-b708-434cb11ee70d", "sighting--98847dcb-be8c-4d23-9d23-fce6b7af3336", "sighting--f1fffff9-5165-4dab-bb2b-0456393b9a1a", "sighting--2c2f53d8-5f6e-47ba-b9eb-2c84d811532b", "sighting--c36292e5-230e-4a03-8fcd-17080010afb7", "sighting--759e6424-4082-4343-b206-8f670d40e6db", "sighting--b40585aa-0e6f-4a09-bf74-ae656825b643", "sighting--fc956c50-f0d0-416b-9ab8-0b13e2bbf52e", "sighting--e60b0034-8ffd-43f0-abdc-04b7923ac136", "sighting--7e3d0299-e502-4fad-b324-abc9ac7bae69", "sighting--9ca20d4f-0a65-4bef-adc9-750ffae6bc4c", "sighting--df9303bc-fd26-42cd-937e-14b6cafeeba2", "sighting--cc02af11-d826-46f9-901d-d5c84ae75eef", "sighting--a7be04f5-1bc2-4844-98e6-6e6ffd3dc2a6", "sighting--9392d84f-5c80-4b3d-9297-473fa8128eee", "sighting--ab3e7957-278d-453b-acdb-65c07dd14d41", "sighting--9b798da0-2820-47b9-86b9-c478c2e4182e", "sighting--639607e0-3b97-436b-a773-d28a18971df4", "sighting--afb4411e-d302-4fb8-9644-145c79ac8e25", "sighting--89d6402b-b928-4aee-a653-10a956be29a7", "sighting--cc89ead2-3294-4bd4-a36f-1153c0082c0c", "sighting--4e5df252-7d12-43df-8e41-19b3168f80eb", "sighting--431e37af-a2f0-416e-90a6-dd6e1900d45d", "sighting--c6aabde2-bcbe-4671-a869-8c02e8a70d35", "sighting--7613a28f-2f75-40fa-96f8-3a66db0d2214", "sighting--aeb5107f-2318-4884-ab7d-b509d0665447", "sighting--b74ca867-b1ca-4d3a-97f5-5a14e7417710", "sighting--1a6fd14b-5065-4267-af78-930b1a79e73c", "sighting--1ad7fcfd-ce75-42c8-85c8-a02249c0005c", "sighting--3ea6db38-64a9-43cc-ab6f-024fee3b2a06", "sighting--83cb7f46-5148-4223-8722-fed9cd35862b", "sighting--658584e6-4cac-4689-9f66-e650718d6828", "sighting--9f28836e-eafc-47bb-8d14-af61fd3ae820", "sighting--9e5e65a8-cf2b-49ab-acbb-f64a92d2e87f", "sighting--930f81c2-2c59-41d0-b0c2-504f0977ec36", "sighting--0eedaa09-ebab-48bd-bc99-2f2401b4a04a", "sighting--9dab2358-5820-4fcd-a980-a8c7bdf2bee7", "sighting--d062f719-beef-4386-96fb-cd130e941739", "sighting--22ef0a74-3f8f-439b-906c-fe1421301bbe", "sighting--5f0a77f4-2871-47a9-aa48-f3e9a8eb95f5", "sighting--7e7f4ea2-9231-4f76-96b0-fbc8c2a0256f", "sighting--bf955055-ad2e-44b2-8284-fae282121121", "sighting--bef65fd2-2cb0-4d03-a232-9d01698a431a", "sighting--3bbd7861-f047-4099-9873-95a543b71d6b", "sighting--b76ccc3c-e56c-480a-befb-60453d8e4c59", "sighting--d546e4c9-8494-4cd9-a7a9-40ceec3f5e0b", "sighting--5d5b4339-4f00-4937-9c6c-3585407fa255", "sighting--a8d98b39-59f6-48e0-91fb-559a9dfbe005", "sighting--2a0bc271-022b-47fe-907a-7cc1b9a566e4", "sighting--5fe7b115-82e6-42df-b600-8cbb34e7004c", "sighting--98e1146d-ef8d-4d55-9add-5077841ce1fe", "sighting--8152e3dd-2514-417f-beeb-c9eb7598393d", "sighting--85647ca9-c6dc-452f-a4fb-60e2063ed676", "sighting--1dfa071b-f50d-47a1-af61-547ee30aae7a", "sighting--d5c2e84e-c128-4ccd-adc8-04008b8084f9", "sighting--7abd0887-7e33-4ff8-81c2-7b660e90a1be", "sighting--c71fea29-7acc-41bb-ac9a-dc6e402af79a", "sighting--27c87090-47b8-485d-8e39-f2b62f56622c", "sighting--83b55a2d-48ff-4185-96c2-e147e3da5e1c", "sighting--51046884-2467-4bbb-a47b-3413aa5eb78b", "sighting--4b0e8605-f01d-42ea-8b99-0d3f8b626dc4", "sighting--25e67edd-e1ef-4c52-83be-39f3c707dfc1", "sighting--d9d5197f-b3c0-48cb-8b0e-c2c3d122ab75", "sighting--9ac1aa7a-f079-4fde-b87d-0825bc54b71b", "sighting--6592b346-68fb-4b33-b95d-83c1bf2f5eb3", "sighting--ffa22eab-1568-4c04-9a60-97fef51b8994", "sighting--2ab73ab2-3685-4e52-99bd-f6a2a4ceaf0e", "sighting--5ae0d005-6f91-4286-bfd5-0c8e4f985952", "sighting--97f0e147-02a6-40de-b82a-11f74f4cf00c", "sighting--2bc2e72e-207e-4e48-bad8-14718ab0aa46", "sighting--208d22e4-6915-4803-8920-82ca29bc62ab", "sighting--cbfcbffb-f32b-496d-b22c-1893f7b6b2e8", "sighting--a0080ca2-36c8-4e0b-90e4-b5da860a6d46", "sighting--68c1f268-4f1a-4108-85bd-f6f75ab32c77", "sighting--0ac22d36-cf0f-4f69-9e41-b63e3dc23a65", "sighting--9232035a-6162-4ec9-bed0-29a9a3ad47fd", "sighting--a0fae8ec-b860-460c-a682-7cf588838380", "sighting--57451cf3-9473-43c7-83de-70f34b0bbd31", "sighting--e6f5d662-3086-484b-9bc1-5534615087d4", "sighting--593dccf1-aa0a-4b89-b40b-8f2f1f10f18e", "sighting--9ad57fbf-27ff-41df-a49c-7fa8dabdef60", "sighting--829653aa-db48-417e-a810-459cb0bac05a", "sighting--de1c06ee-b82e-464f-806a-791c0b6b6b8e", "sighting--84f6910f-30af-451a-b873-fc4a07cf3649", "sighting--90447f12-3e2a-46b0-961a-31711f686ee8", "sighting--51d9d295-df56-46e9-90cf-3a4b7c3e6437", "sighting--afd2fee5-2cf1-452f-8997-c3232fd3c4dc", "sighting--0ec67905-2a6d-4fee-95df-fd60978707a0", "sighting--433ae6d2-4ab9-4b12-88f2-02f9cb32d785", "sighting--dbf0ef60-c6ed-4838-bada-5bff0ea0b540", "sighting--cc443285-0157-42d3-bf4b-7aee7d9c1232", "sighting--2e53030e-f8d8-4308-987a-e8200b452a97", "sighting--c37b21ac-35a2-4724-933a-4e2f079e1310", "sighting--84622591-e428-4a95-91c1-fb35c5a3ce5b", "sighting--07cf22a1-3ba8-4e50-9c0f-33ecb90efa44", "sighting--62793bac-ef61-435a-9702-d5d04770778b", "sighting--99a31ce9-634a-46dd-9000-50854732baca", "sighting--b755af73-1eac-4557-8ad3-51f1b2a91576", "sighting--421370a5-9f7a-46e1-9d6a-5bd66cee4709", "sighting--0decde1f-fd36-4e47-804f-f3e3926ea876", "sighting--233bba67-1cbf-4ee2-90ce-a75daf45c189", "sighting--f61101d4-ff46-430e-8cc6-da686099c2a8", "sighting--04466992-24f8-4045-a593-32295f9009bb", "sighting--50676110-8ee8-492c-bd27-4d86ca0bb09b", "sighting--e10915bd-291b-4545-be9a-bfd5d31cf51e", "sighting--d6744e10-f352-41de-9141-d8c4a1793398", "sighting--a5e47257-529e-4c28-9a96-8b6816752a56", "sighting--3ff31bbc-a45d-4744-b09c-21d2f67e88db", "sighting--e2a6c23b-27e5-499b-868b-994f9164f72d", "sighting--4db7d2fc-aca1-4ada-b937-d9a2bb0ddb12", "sighting--f55a9ffd-7ba5-425b-af67-3f16a859b51a", "sighting--53a6d05e-3691-405b-a04f-9a29ccd91eb7", "sighting--6bf220b2-5d3f-4c8d-8a05-1474de716abf", "sighting--c096e90e-3bc7-4e6f-a9f7-234a0365e9a6", "sighting--b2e61875-4707-4cde-a997-eca2b223b27a", "sighting--8e02514b-c539-4ddf-8f66-7e23c51f7eeb", "sighting--753faecb-a059-4f35-8ac7-db351850241c", "sighting--551a456e-505f-47d7-9a04-898cd48075f1", "sighting--96353dbd-d2f6-4b9a-a6ad-6a7bbdde56aa", "sighting--8d656e3b-eeab-413a-9421-0318b3ae7398", "sighting--dd27b428-3da0-45c2-b319-404cb326dc27", "sighting--ca93c9e2-5aee-4322-9efc-71d33d97ee15", "sighting--37df6ceb-4d44-4056-b5be-7a06cbf46405", "sighting--650fa24b-3401-408a-98ca-59a571da1c4e", "sighting--c073d6c5-1997-4299-80a8-d21deb0b0f13", "sighting--9645ae73-45cf-442f-b183-0fd7bd4762c7", "sighting--d9c06cbd-d07a-4272-b9f1-2d337ca8ce56", "sighting--06cac20d-6c64-4168-a898-f3d8435c5e5e", "sighting--65d691c9-95f9-4138-88bd-98e4f657bed2", "sighting--f8621faa-2b3b-4a3e-999b-c0d6c3d053e5", "sighting--1b669353-1984-4e92-9a57-f9f1957afe38", "sighting--b77bfb12-8cea-4def-9b86-7ac5890167bd", "sighting--26198d3e-1421-4400-8a32-b587e8bf000a", "sighting--1c62c3fe-4235-4c8f-b676-341e2ba76f7e", "sighting--43f43746-d573-42be-931e-70c9389ee6e3", "sighting--17c2112e-3490-4720-b6d2-05877ff1c483", "sighting--cd5d647b-e65a-4955-b5c6-9740de8f60fb", "sighting--42feb695-8b9b-48c6-b959-672914f9d0af", "sighting--29a17b5c-3cb8-4164-be94-5438eaa7ee43", "sighting--c45a479d-282d-4156-bfea-7b9683d249f4", "sighting--6f63f5b9-f98e-41ab-b0e1-a18273e79e9c", "sighting--f8582132-44a8-44d3-a28a-7054537524bd", "sighting--f4acf4ba-9e77-4510-a724-1acd1a05fa43", "sighting--6f24793f-4051-4c27-b7cd-13646971ff8e", "sighting--ad7aa464-ae5b-4299-a4c9-2d6df35cc1d6", "sighting--eb43808d-fe3c-4a1c-85d1-aa0f837ac111", "sighting--f4645a72-eacb-4f96-9f42-a6ceb8f00edb", "sighting--146fe6e5-824c-4ba9-9bf2-09f3616d7d22", "sighting--c5480888-7fe5-4f88-a256-1210a95829af", "sighting--27364da1-c868-43d6-aa39-d9d1e6dc68a6", "sighting--d52ec74c-47b2-4bb8-b72f-8128ceb1932d", "sighting--e2c99bad-b141-480b-a7c7-572d827a8ca6", "sighting--b573e2fa-5a60-4573-857f-40293f05572a", "sighting--de853281-e5d8-4fc9-9a5f-7b6482fdbe3a", "sighting--d7bcb6ee-6932-4352-9be8-36d901f6e709", "sighting--e00e2a13-190d-4e5e-9047-52c86b2bb928", "sighting--c86266e9-23d0-4ea9-aa09-eee09e071ba3", "sighting--63bb210e-baee-48b0-8e68-4ff7ae6f837d", "sighting--a7054d21-16ea-4276-9eb5-0c0b162a508e", "sighting--b3a39f0f-1c8f-412e-8817-c8877197651d", "sighting--a0e8eebf-e356-4f88-83ce-65dbdc7244cc", "sighting--99ddc331-8319-4b89-9a01-d4d625d51b16", "sighting--259f3fc5-5a10-4c97-838b-973370c60608", "sighting--50a66085-9a9f-43a0-bb61-bed81b0af720", "sighting--ec815ac0-9ec1-4c66-8bf8-e2aa1f1cbcf2", "sighting--c7d6ceeb-405f-4544-8c03-bca2783332e4", "sighting--a0be745e-1fd0-4cab-badf-9d5966057472", "sighting--e0265dac-ec00-4b22-a0a3-2c40aafede0c", "sighting--2bef9ca4-fc37-4d65-9bc4-2aa76734077f", "sighting--0c7141c2-58bc-4a4a-9487-9cbe5e3b17ad", "sighting--17fc1159-ba8d-41f1-b4e9-330f436fb5d6", "sighting--61b5b7a3-5eaf-4661-9ad8-5e9dae7d2dcd", "sighting--2e14da40-0d9b-40aa-8168-622a164448ca", "sighting--85c450eb-2d40-4b0d-bbba-440bde7300f5", "sighting--732b5dca-300c-42ab-8650-7d19494826cf", "sighting--13416e99-84c1-446e-b2e7-54d7c20cc476", "sighting--734b82bc-c700-40d0-9594-ea4b0fab0520", "sighting--40f0ada2-a1fd-4d31-88b1-4f24f575ea4d", "sighting--f261dd0d-3ec1-4361-b9e9-4353556183c7", "sighting--4fb5d62e-a727-425b-a170-18fcbd95eb42", "sighting--4423dbc0-226f-4c7c-ba20-7c33c68e2643", "sighting--28957999-4da3-4f9f-bd09-2d546b4481dc", "sighting--8e02fff6-01db-44cb-99f5-2f10ab8b0aa0", "sighting--fd6368a9-e78e-4f62-9e45-876de1e6b5bf", "sighting--40175326-9222-4807-bd84-1bbb11129bef", "sighting--95bf1d0d-f2f3-4140-b602-16e6e7eaeda0", "sighting--3132aa4b-4e73-4a4e-9f46-f3ca816e89bf", "sighting--b5e5173b-ebd0-460d-b098-4b4e82404167", "sighting--bcd96279-3327-42ce-9127-40861e5c850c", "sighting--bb970328-6d15-428d-8bbc-46364e3bad78", "sighting--cdb444d6-48b7-4a74-a6e0-117ef4858847", "sighting--5077238f-8c6e-4ee6-b4b7-60b4813a8595", "sighting--0e37ddf1-8321-4e95-9105-e32cd1915953", "sighting--2bebc068-e5da-471f-a82c-76b69cd16582", "sighting--fe94ba3d-0b54-49df-be03-df58df1ab267", "sighting--ea914ea5-23ca-46e1-abd7-80181b590b48", "sighting--b1e3401b-d647-4e82-8960-d0009edd81f9", "sighting--4799515b-1f34-4b6b-8826-ccd53e37d9c0", "sighting--35b9f943-32ab-400f-9029-8354df2c31c3", "sighting--7f8b4f7e-9b4f-471f-addc-14a891188cb8", "sighting--c8f49903-fac1-4a00-92c9-403cd0875d6b", "sighting--3c615000-4afe-4591-b9f6-9e9d2bb29a78", "sighting--f50cdf2c-b060-4cfd-b4fa-0415443720e3", "sighting--a455add7-d85f-4a48-82d6-1c143bc6ab4b", "sighting--1583e578-5afa-4ea4-8f39-9dced5e49a4d", "sighting--de85d5f5-2720-490a-aabf-60ced584d7fe", "sighting--1f9cc024-aa4b-47ad-85bf-b869bc2041ec", "sighting--8aa25a9f-ab18-45e8-99dc-b6633a5ccb2c", "sighting--8b5a6fdb-ccfc-4031-8ddd-010f6d94e482", "sighting--ef90e507-f783-428d-ba69-60beb8cab750", "sighting--a8bb6e56-69d6-4ab3-957f-b421e35a817f", "sighting--a4600173-5555-4bcf-8031-6f160cc2ac21", "sighting--09bbf635-67a2-426a-a90a-d1248f27d0b7", "sighting--7ac7db9a-e962-4cfd-9f52-84d31564ec1c", "sighting--db77259b-c632-466c-a724-6961d2073b74", "sighting--c0e0a965-0601-4507-b452-df2aa47a7d14", "sighting--f1cc6b2d-ea38-401e-91bd-67e2718d794f", "sighting--f9c41fb3-4422-49fc-8496-739560d9fde4", "sighting--fa3209fd-6965-41c1-8058-4f82c0d395b9", "sighting--1af408ff-d8cb-4490-8042-88d2c99f660f", "sighting--db36a16c-33ba-42fb-ad6e-687df1464161", "sighting--410d264d-7967-4c23-849a-25f0df3c7a92", "sighting--8a5f7dd5-6af1-43de-9785-edf6c1b40033", "sighting--b5441dad-61de-4756-84fa-81525e1bfbae", "sighting--cd194999-3e25-4fc5-a6f3-c8cd2f831184", "sighting--59422e5b-7101-495c-956e-76be143b6b31", "sighting--31f6bdf1-1d8a-464d-9dfb-131069bfef89", "sighting--13308a12-2b1c-4e9d-883d-a784971b4c21", "sighting--79cf469f-405d-483e-aeaa-e756d16ea229", "sighting--3c6bcd99-ece8-4902-94e2-0fec0f255717", "sighting--6394a6bf-40b9-4ad5-a344-ee1498325752", "sighting--9ff7b850-2df2-4767-a301-5b160109365c", "sighting--55904c32-67b2-4217-b71f-e8e93277d0fd", "sighting--75d2fbbc-e504-43be-a458-cdf6ee7beb11", "sighting--929b6b35-da9c-4072-b28b-e7e77fff6b37", "sighting--da7c01d2-a926-4667-ac3d-f008f6fa81a8", "sighting--1f75a22d-033b-469a-8bd2-100254bc840f", "sighting--601735f0-cc80-4e7f-a688-5aefc54b6c81", "sighting--4a88fa01-a8ec-427e-8f64-94b25f646785", "sighting--2776b114-ebd7-4ab6-b3b7-6260610ccb09", "sighting--d0ad7918-b3ea-4ab7-b31f-26850bb879ad", "sighting--4a09636f-1463-4417-939e-c4c2b792e6cf", "sighting--1dfa3ff4-284c-41a9-b519-8a4bd97ff1dd", "sighting--ee81d2fc-5ca3-485f-978f-62d0c96545e8", "sighting--3cec27d3-faf9-4b09-947c-1d84a785c5cb", "sighting--145cc0a2-58a2-4587-8c11-166cbf78ba6d", "sighting--d1f56ff2-77b3-44eb-a7f9-dd58a865605b", "sighting--76c2f6a0-eb34-47f9-856d-525f202957c2", "sighting--b8393366-0876-40fe-ab0a-4ed22e2ed125", "sighting--1638dd07-2a44-4864-a4e4-4656a15d99d7", "sighting--91170751-695d-44c6-a586-b8f745faef05", "sighting--7362162d-cede-4e94-a7c5-286cf8654f57", "sighting--5521f99c-1464-4bfd-a134-354de42b378c", "sighting--164077ba-fe1f-4bc2-a73e-14be96f3a4f0", "sighting--ed6612fd-8ed2-49dc-8c5a-f70d2debc7f6", "sighting--dd470248-eb9a-423b-9833-b59adf262b81", "sighting--6b3b4c77-a314-4e56-934f-b7647d60daea", "sighting--f725f22e-f162-4d9a-939d-e91d4edfac6e", "sighting--c97b89e6-9e88-4ceb-9855-7d7f87311057", "sighting--388687ec-86d9-4c17-b9e3-1b79828f043d", "sighting--56bc91b1-95fe-44f0-aa0b-0af3a845694a", "sighting--85b1e305-73f3-4656-8365-a4d310f23437", "sighting--65136b6c-0f5e-4498-8a6d-33b569219af4", "sighting--4de28fe0-4745-49aa-970e-0bc26e42415e", "sighting--529d8de1-e45d-416f-bf35-550ea37a69ef", "sighting--cd083853-cdb6-45a7-ba3a-6c832728ab7a", "sighting--d3091966-cc70-4cae-bcc3-126956af759b", "sighting--f7223204-cf05-4057-a5b8-1ea6e8c990cb", "sighting--0d9ff099-8723-4770-99df-11732b4f52b2", "sighting--f03145a8-24c1-4865-b8c5-a507e180c809", "sighting--d2f6edf2-8c43-4c8d-abc9-dc24306fecb5", "sighting--710d90ff-4c3e-45b6-9810-14968dff6993", "sighting--ebb7f6e3-8c3a-4cc9-a914-c04efbd7e6df", "sighting--ee00e7a6-ac02-4563-a13d-b32b6d70c7b3", "sighting--257264f0-94da-49b5-ad1d-af19a13fa4d4", "sighting--8f5a8bfd-19eb-451e-b5c8-d273ba586af4", "sighting--feb6ac36-5e00-41f5-8fca-a5628c0ca2fd", "sighting--f6a66a85-4026-48f4-ad4d-a5e7e8589357", "sighting--8f5847d7-4790-46a8-aab5-df21e16d0938", "sighting--a48770cc-0c71-483d-955a-12cecff91bf5", "sighting--fd8ddad3-6d87-495b-95de-f8a09d63bfd0", "sighting--9664063f-dc5a-4139-816c-817061c067f5", "sighting--ae125909-5447-4a1c-b28f-1a6bfc3895f3", "sighting--7f532513-f4b9-415f-8cf8-04bf321211e1", "sighting--cb4aa7b2-bc9b-4b22-a728-166c5bb350f3", "sighting--750ff539-5e1d-4762-bda9-b0123f0f9415", "sighting--2951371c-13ee-451b-a487-581ad1838437", "sighting--f6286548-1cae-4d25-895b-445c978da2af", "sighting--a13a894b-32f4-427a-ad65-d7b6f8c188c1", "sighting--64321b00-c918-449a-93a6-07bd2d0cd9e4", "sighting--8234e0de-4b66-41be-a05c-a7b61cdc4b0b", "sighting--ad7b7eda-f9b2-4a3f-9856-153352f18e0c", "sighting--3953948f-3673-416e-b06b-15728cf95352", "sighting--12c5402d-00ec-4744-87a0-fda5b906e254", "sighting--be3cbca8-72a4-446d-8f36-7d8b9fef3d70", "sighting--9df9a1f8-dd3f-4658-93ca-13d83ad800e1", "sighting--de6e13a2-4c22-4afc-b05c-9b7ec7c90098", "sighting--2feb9a98-bfef-4111-8874-e78195d27347", "sighting--6c58e9c4-b052-41a2-8ba4-dd741eb1ed8d", "sighting--efab6c37-efbf-4a7b-8764-e650d8ff9679", "sighting--bd477d3c-0c03-4d26-aa45-7bd5d090a231", "sighting--ffc3ede4-5732-41e2-871d-d8b310d34a94", "sighting--429215c7-02b4-40a5-a2ce-7ebbe2edd219", "sighting--f67aff1d-7456-466a-8669-ad5139e67598", "sighting--a9f2e464-97d3-4ce5-a0e2-9b8ccad12633", "sighting--76d7f828-fe0a-4790-87d5-635f72e022a0", "sighting--5655730e-cdf6-4096-9d41-4750e949feab", "sighting--5c210e57-b8ef-46f1-81f2-3411b5d16031", "sighting--dbd280f4-a3b2-4105-a23a-028a62c4227f", "sighting--e8159169-7859-496b-b65e-3a30201f5b5e", "sighting--dd6fbfbf-aedd-45cb-b673-c2c6049204cf", "sighting--43e4759b-4ef2-4f60-b308-b4ed6c98ed77", "sighting--7054bcc8-ab49-4bcb-9ebf-19795c9b8312", "sighting--77c94950-38a8-4f0c-b55e-c36f0cc35502", "sighting--765e028a-e56b-4c70-a39c-ac1727af8dda", "sighting--7144a401-85fb-4689-9c1e-e949c225a094", "sighting--2d046d8f-bb66-4995-b23d-bf5ad1a4286a", "sighting--10703e8f-cf22-4ae1-aad9-963b8f6d7d0d", "sighting--10a2c019-3206-43a7-ad44-d459c9d704b7", "sighting--1ba16e39-0388-4758-bda2-19fb15b60166", "sighting--23940979-157d-4290-b32d-14d7ceb82857", "sighting--615889d4-1d4d-44b1-8157-02c9f549f933", "sighting--46500acc-8b44-4d2a-881b-8b99ea7f890d", "sighting--c3690a79-38d5-4c3a-8c3e-25e10cfa09b2", "sighting--5aa17de2-4a16-4af9-89d0-b47ec038a118", "sighting--c25c452c-ea1b-4387-8712-b193f4e58906", "sighting--78d88d2a-edd9-49bb-9393-cd8b630ac96d", "sighting--c2362df1-5e5b-4811-98e9-563d4d56d2f9", "sighting--c4b7f170-f5f4-4f9a-b9e6-12e0e6419fc2", "sighting--9aaeffe7-8efc-4f68-86c2-01e03f1c83ff", "sighting--506b6e2f-9aa8-4f95-83a2-651bdc3a6502", "sighting--f17ce351-12f3-4b34-b8a8-86c68101da7b", "sighting--259d34b7-24cf-4e61-b6a5-25614d1042f8", "sighting--f0439303-768b-4561-9364-998ea512cbc4", "sighting--00b10d46-8a1b-4c30-a7f2-11e530aa5549", "sighting--78bd3b54-aa3e-4d2e-ba9c-81e7b770325a", "sighting--468298ab-0d67-44c3-a14f-c1b4e19a9043", "sighting--7969ea87-6249-47a5-b5e8-65b6afae45bb", "sighting--b623dff9-438a-49e2-88e5-95a16415728a", "sighting--1f34ce37-48da-4a44-a099-d46f0176971d", "sighting--d5ceebb6-2a15-4570-88bd-4bb987e60d28", "sighting--41d460f6-5d9e-45f6-b9d0-4f96d76dbbd8", "sighting--2e44847f-ce50-4e34-9e6e-8832f664176a", "sighting--0a947a7c-e472-4331-8cd1-3d2b642a0058", "sighting--c7095286-ce3e-421e-8101-0a84f69329c2", "sighting--cdf7173e-f6ac-4bea-bc2f-7a86d220ee0d", "sighting--214ce7c1-6942-4a42-bac3-ebed76dbe73d", "sighting--1d9d74f4-d047-4bae-9906-c2af89d5c801", "sighting--f8c53eb8-ab2c-40bd-98a2-4197367bba1e", "sighting--4104d81e-1789-463a-8e33-168b0354faa3", "sighting--5ceed3f9-10f1-4c8b-9603-ee71718d132b", "sighting--7c2ed271-987d-46a0-850f-46eed3110af4", "sighting--08aeea25-84ac-4b7d-84e6-0dcf423d3faf", "sighting--9066050b-c9ec-48fc-9c12-8adb69aea5fe", "sighting--6ab445c0-ab2f-4e28-b4d7-20cbeeed3343", "sighting--82f759dc-679f-4b32-8bba-931b214dbc98", "sighting--52dd2c6e-8fe8-4ec0-8be6-ff4faf01fc9f", "sighting--a15181b8-3967-4c35-92ea-4092728c131c", "sighting--9638b347-ef8e-4e71-8177-09cb95aeff4e", "sighting--0f354c43-c260-486a-b5de-d397741cbd3d", "sighting--ec33aa1b-3c00-4733-9406-60ddaea0f102", "sighting--a5ce6ed0-5a1d-453b-b4e4-5760d0a0ae08", "sighting--c15362eb-4b96-4515-b1bc-b535f70660c1", "sighting--2f08d509-0125-41d2-8c71-3c6f60728956", "sighting--152df277-5c00-4a62-957d-beebb16a6486", "sighting--a0d60d5e-75ba-4be3-8605-0791798f8155", "sighting--3c350bdf-0a1b-46f9-8a97-55cea4d235c0", "sighting--f3fee8a3-b5b5-43f2-b800-685f4fb3b7d9", "sighting--54c87f44-1dac-4d89-9363-e30d16ce8813", "sighting--8afa7309-16b8-4466-816e-8e62f9dd67a1", "sighting--67a246ab-deed-492c-98ba-415cb4aad9da", "sighting--f70c8229-c5b0-4d89-9fcd-b7044d5381ba", "sighting--bcacfae9-9dbd-4012-a9a7-bce1131d9f81", "sighting--0f6826c1-d697-4220-8b2d-673e8e9485f7", "sighting--2e2ddcb0-631f-4152-aef3-c77e57dd53bf", "sighting--e9a1f638-f305-43b2-957e-6e6a1db84f2d", "sighting--8b395f15-dcfe-49f0-a4ef-6f05fc5d8cdd", "sighting--9f6bd406-5461-441e-ae35-7608345ae735", "sighting--5561274f-609e-488a-baa9-e9ad2fe4e9c6", "sighting--03d33b70-b008-43b7-9de6-74f25c43c36d", "sighting--986b6875-2e9a-45bd-ba32-3fa1d256423f", "sighting--2992c63e-1e61-437a-8dda-b2002461b709", "sighting--65acc9c8-4637-44ff-974c-11741631cb23", "sighting--409e6808-ef47-4198-b6ff-3f990d93167e", "sighting--e004778e-23e0-429b-9a50-cf6e6fda709b", "sighting--131d5edd-430b-4029-95bd-cd571ab42e4f", "sighting--597e5d9c-7fb7-4745-aacd-61f43eb19e33", "sighting--63e6fc48-7b15-437a-bbcc-d7598285b189", "sighting--e105f119-e913-41bb-a001-f7844186d4d6", "sighting--d1fae57c-c8a5-401b-927e-9289dd500cc6", "sighting--711f9e64-6f4d-409a-830b-4473af408c7e", "sighting--7ef3695d-114e-471d-8b44-4df9d4449766", "sighting--222d2360-b5db-4eb5-bd62-2221d2ba6cd5", "sighting--856a1d11-3a4e-4c83-904a-9687f4e86c15", "sighting--0ee82e94-863e-40a7-8f0d-730bfd2a4b8f", "sighting--ae00a929-6710-4765-9281-ef944966ee90", "sighting--8d37acfe-2971-47a8-8c5c-e287da2de7e5", "sighting--3c4da499-983a-493a-8330-807fe9e6b235", "sighting--d802d8e7-57a6-4b12-b49a-b39d002de8aa", "sighting--e2f6ef49-d1e1-493f-b464-40ca15263eef", "sighting--918fb95e-e09e-4b9e-8cfd-22a373577de7", "sighting--0a7a502e-b2fa-4204-89d3-36b96dbaf171", "sighting--41d1fadd-cd46-440e-a357-6792b45c957a", "sighting--f2091a28-a2ed-4851-9b0b-5c2d6368aca2", "sighting--2f8cbffd-646d-4650-9c1c-87dc1b2c476e", "sighting--5b0ee61d-7057-4340-b2e7-85a4c84b074e", "sighting--48483f00-cc6b-4a5a-aa63-6555a6b6a30f", "sighting--a9e42499-b759-495d-8edd-868f274759ea", "sighting--75fac7a5-b9b5-44c4-b95f-5dd082d81d1c", "sighting--13a402a0-e81b-4e6e-ba1d-88c167016625", "sighting--33e4de21-52ec-4bdf-b30f-58b4cde1e909", "sighting--efd3ab9c-ff1a-47b7-b863-b52907c9e234", "sighting--5fd124b7-1067-45c7-8e6b-9a493189cc18", "sighting--0f87aae4-d4ca-453c-a6bf-f7b21328e297", "sighting--c3aeb8cf-41c5-4ece-b6ae-398af04e0fe3", "sighting--2d8495b4-1561-451b-a016-e1e1c348b0af", "sighting--a074f668-f1ff-4c6c-bfa9-9dfeab8a80ff", "sighting--5306903b-6054-4964-975f-a564b8f6d00b", "sighting--85b3a09f-840d-497d-bcbe-45407dc20989", "sighting--153bafbc-74c5-492e-9aa1-6bd45d772d1c", "sighting--b70446a3-5297-4c33-8f79-c6164a524f1b", "sighting--b7990db1-7a23-4a1d-ac24-f211cf51b2ce", "sighting--2df3a862-9e4b-4c9e-b252-4136d07bb4b8", "sighting--c570ba5d-04f7-437b-a34e-038108346d2d", "sighting--d5e1d56f-b8c4-40ea-aaf9-f94886f435a3", "sighting--0f626d5e-e34e-4bdb-a34a-b0f4031bc830", "sighting--b6e45f5a-2d94-478d-a2f0-46fe180ee434", "sighting--c70e8d5f-a9c2-4c02-8e94-ca7a1f3e6b86", "sighting--206780f0-1444-48df-9ed5-577c2390a227", "sighting--b23285ce-23a1-466b-96f9-ab1b3be5cc69", "sighting--d11fa09e-29ad-4891-ab69-8cf201e0cf04", "sighting--9994c445-2eff-430b-a730-9a679b630be9", "sighting--606e4b9f-2c2d-4c95-95a0-a24e43e421db", "sighting--c4c28241-9e07-48df-99b5-6f380db4a41f", "sighting--b6e86d39-58f3-4b85-b28b-610210b72a67", "sighting--d40a9487-6edf-42f2-aad9-51c39f15cfc7", "sighting--ba9a9e16-8e7d-4ec5-a772-01d9191ee4d9", "sighting--a2233dba-94cc-419a-adbf-ac4bdce8f536", "sighting--951a34f1-49ee-45eb-bff3-2b4b97202322", "sighting--27e9f7c0-ddca-4321-adb7-5868380de01d", "sighting--e384ad7a-b392-48fc-a930-33d7565ca4c0", "sighting--433ebfd2-abdf-4e47-bdda-11af031a1170", "sighting--bc32135a-21b0-4838-9cf1-225b687970d8", "sighting--a8ef85ad-2bb8-4e2e-8de3-0124918f8a71", "sighting--209b2128-91f6-42a7-95fb-94861da9312c", "sighting--3ad172a5-5f77-495c-ad6c-5460fc3a1a96", "sighting--06d7650e-ac29-4f79-88f3-16b901a44670", "sighting--611df051-1ee5-40d8-b639-0063010a3531", "sighting--dca84060-0774-4332-877e-823df21cf539", "sighting--de1683fb-e23c-432a-b558-d9111ada4b73", "sighting--c75bc87d-1c58-4a31-87e1-661c4a761995", "sighting--05dabc94-d5b6-471c-a11a-9dd366d11154", "sighting--e13f92e2-308a-4d03-a095-b1cb312af231", "sighting--16d40d42-9e59-474a-a871-7d7999144d1a", "sighting--4a806055-458f-4419-bda0-c4944bb05c99", "sighting--a50ac81c-efcb-4cee-b32f-d7fde43e0690", "sighting--d68b4ede-df4c-4140-9c96-afbc452084c0", "sighting--ffc76bad-4842-427d-ae89-5ddd9c07ea1f", "sighting--ff73a9e2-4930-4420-94ef-1f401fab83be", "sighting--fb367af4-5f05-4f43-8d60-08392b9875bf", "sighting--a5472535-0c2b-4b52-9f9e-346a9190ae0a", "sighting--e6c7985f-feb9-4b15-8fde-27d32af9cafa", "sighting--63072a78-87b4-4123-8a27-110651fd6490", "sighting--94174278-fb72-45db-9ffb-5aa4c98533a2", "sighting--67c87b4d-cb1c-4d78-ae7e-6e192e3e4dfc", "sighting--7390a842-8757-4379-993d-1f33c2028ad2", "sighting--7b4feaea-3064-4669-8c5c-d98e6e81a252", "sighting--673b44e0-4937-448e-b90a-85939027678c", "sighting--8e920009-cc06-4123-9de0-9880db0bf35c", "sighting--94b55f5c-8eeb-4226-b317-ad662839037b", "sighting--1e00c213-aa5c-4fdb-8171-9b7ba576ad93", "sighting--f70038c3-61cd-4c4e-9345-9e496aba3fe0", "sighting--aeefa239-51d6-4b20-afd6-a0f1f1cdedce", "sighting--1447e8a3-b406-4ddf-a545-4337b97c0f89", "sighting--be7dd0b4-59fc-4f23-9391-6c99b3689229", "sighting--62ba6a2c-c11d-4e2c-9475-5eb6191db7ed", "sighting--f72bf42c-5f0c-4d8c-aa5c-838d183e3013", "sighting--81fa9e4f-3781-4a93-ba93-fe7a57eed34f", "sighting--8c36f7d3-7e78-4fc5-96af-0d4e9341f077", "sighting--175bfb80-5e33-42be-b2cf-c013974511e6", "sighting--7a999d3e-e1ef-4c2c-876d-01bcdc277ab6", "sighting--d88d5bfb-640f-47d4-8186-0192c6c7c0bb", "sighting--938e938a-0ded-4331-a9fa-4855dbec2078", "sighting--881739be-7548-4175-98fb-213d7458cfa4", "sighting--25438651-c90b-4514-8a6d-56b6ab757fc5", "sighting--71b2215f-d07e-4208-bd45-186c09aabab9", "sighting--6764bdb0-2188-4de3-bdc4-c260bdcecc06", "sighting--5f4dbc85-abbc-4aea-808d-01e2f7f68c9b", "sighting--f82aaca7-7122-4f30-9c29-19ea61a6a474", "sighting--eb4f4e3b-d885-4c6e-abdb-1c8a3babdaca", "sighting--f2845162-733e-466b-8029-a5e58db22d18", "sighting--4fc5985c-e407-4f2d-8631-e0b7d8afe9cf", "sighting--ea49c7df-fbdb-487c-9109-987da2a7d490", "sighting--33e4aa8c-ced5-4931-8457-810dea6a3ab6", "sighting--b99f8fb8-1d8c-4020-b282-7f2f3abcdfd7", "sighting--305b46ac-6abb-422a-8dc8-c5b12750ce4d", "sighting--877e8373-254f-48dc-b1e6-80e3fe0021db", "sighting--5c4d99f2-9f20-4d14-8c43-432ac7646eac", "sighting--de30f4da-07f1-466d-b9c9-4635d7fbb673", "sighting--fb95564f-237a-4e93-81f5-85005da211ee", "sighting--e5b18f3f-abc7-43b7-890f-469ba9ab0b45", "sighting--e8c47b25-c84c-4568-a62c-f7c2177d13c7", "sighting--c80dad85-7dbd-400e-a80c-36e87a570dbb", "sighting--b4941b56-cbda-481a-bff2-5c2481e2347b", "sighting--9792451d-9323-4ecb-92d9-657485df687c", "sighting--cb6cd4d9-b3fb-417d-a91e-7e480b5d19ae", "sighting--158d2e0d-acb4-44b9-8888-ca2a4d2f6531", "sighting--013960e3-e338-4836-ae3a-a3cffb877c5d", "sighting--49554e6c-f00a-40d1-874f-1406b191f09c", "sighting--bd74b429-5793-4a2e-8350-a0b218ceebc6", "sighting--94a93cbf-bb75-45be-b4df-0781c99165f6", "sighting--33722507-f3cf-468f-b211-600072ffbba4", "sighting--8cb1c9cf-a942-4990-8a2f-9b83317929a5", "sighting--efd73dbe-daf1-448b-b528-caa3962cc751", "sighting--66e7dda1-d3e1-4339-9f3d-c5e604c07b70", "sighting--19b8d393-b58d-47be-b35f-ee6bb1f03341", "sighting--489f22ad-82da-4dab-9b11-6fa6649f672a", "sighting--70dd6af4-bd8e-4fc5-8424-6b5282ec3880", "sighting--b345a09e-82f5-44f2-822b-0905d0424a09", "sighting--e71e6ae5-273a-46d7-8f64-e3cf78219d4d", "sighting--09d1584f-d7c5-4c6a-8d01-440d40732620", "sighting--a8a02fc2-17c0-4b47-8f10-10abb5a8bce9", "sighting--5dc10d04-d8f9-4f2f-84cb-52045030a77e", "sighting--6be9605a-8c88-4e98-b1b1-762beb1f58dc", "sighting--c680fe2f-451e-49dc-8079-f7655c195216", "sighting--2a1fe95e-7fd5-45c3-ab3b-36255d130fdd", "sighting--023facfd-a133-4446-9615-8f214c05e3a6", "sighting--33fc11c1-d98a-4380-9940-b19492e3242c", "sighting--3553ce03-7e8f-482d-9c98-f0ad510d9307", "sighting--d17f4d3e-ce35-4bb6-b3e5-46c1acca30ce", "sighting--a887c286-6854-49a8-9206-5ba64101383e", "sighting--713af753-b18e-4ed5-a3bf-896d82639e78", "sighting--156c9b9b-8084-4e95-be99-cbc03b177892", "sighting--d4447890-58a9-4665-927c-35ed8a9d8952", "sighting--3cbb5e01-d7aa-43a6-8e90-027945ff06d8", "sighting--06b4b367-aa5e-474d-9910-ada29f06c8fd", "sighting--f6363d7c-2168-4b9f-9d78-4a8322b3a98d", "sighting--0625e05b-5eaf-43e4-acbc-96e1b4ed99b7", "sighting--f05f016f-4979-4b69-ba99-d99ca9aff2db", "sighting--181bca85-670a-43f4-9716-fef060f1ecb6", "sighting--302bfab8-5223-400f-b54e-69c22a1cf4ad", "sighting--35802ad9-0412-4547-a944-2146d95e4b68", "sighting--abce703e-6348-4861-844c-7c8414f47f04", "sighting--b0887986-5896-4f2f-a577-64b20cb6b5d0", "sighting--957ad3c4-d372-4c31-a866-1e60736b4e4c", "sighting--a818c876-a829-4b81-8118-52e312dc368f", "sighting--d4bbaf72-bc88-4394-8523-b7aac947a1e2", "sighting--9d264b69-05aa-4fd5-a7e5-db2f983bd8cc", "sighting--06fb3e1f-9e42-497a-b4bd-723c8b80b0f6", "sighting--d27162fb-3d9e-4e4a-bfb0-78a51d1a143a", "sighting--9033f380-574b-4186-8bea-787070d757a3", "sighting--46a33241-03b0-4dde-af20-ee77ac5a1fcf", "sighting--3738a7b2-ae88-41fe-a8f5-a522c7b117c5", "sighting--a91f8f6e-a941-4a5e-9ce4-ab40098d68ea", "sighting--55d43f38-e91d-4abe-8562-2c6dc123f1bf", "sighting--e6aead31-50c3-42e3-bbc2-f6799054f67d", "sighting--e0e5f2e1-b764-4195-b7a4-1a99fb04fdf3", "sighting--dc6c31f0-c1ad-4dcf-9bf8-5bf617f1c1e4", "sighting--ceff6b51-c84d-4c6d-afe7-26633dc32170", "sighting--b39ceaaa-0d01-4d8c-96bc-d9ee0d1117a5", "sighting--ae88d48b-2077-4206-a213-afcc38d742e2", "sighting--dc994e3d-6b70-4a38-b3e8-842c0df55bfd", "sighting--23202989-b468-469a-8f5b-ef61a44b3934", "sighting--5d098cb0-8002-43ae-834a-6f99b22efe9a", "sighting--446f1d09-5b52-4b33-8fd4-39bd026e7ab9", "sighting--4ac6fbbf-6697-4870-9dfc-b429fed074c1", "sighting--9c33c983-a9e4-4934-aaa8-2e1ebbc43a2a", "sighting--edaae6eb-cd94-4f3f-97b6-944e1cb756c4", "sighting--ce362d2a-522d-4d71-936e-e9886cfa9a7d", "sighting--1f2c3f09-4e27-4757-97df-1d3cd4a44b33", "sighting--d2d75dcf-3d44-4888-9033-1439d11eddf1", "sighting--a4c8d987-bcbc-4c2b-89fc-2fa3db8cb1c0", "sighting--7a1b6ce0-638c-4430-91a7-5e7051fd4d5d", "sighting--6fca579f-2036-4d44-9a02-7c35ec811c80", "sighting--895805ba-a983-4408-be7c-854f7ecad342", "sighting--03ed6b43-8c50-4d21-8a7b-5756d45fc9c9", "sighting--330aac20-1e83-4950-9d4d-f100bc712fd8", "sighting--93ac30d8-061f-4cc1-beaa-a5dcca59d7d5", "sighting--f98d4aa3-876b-4db2-88c8-e25085140d8a", "sighting--cf7c1373-48d1-4ae2-b12c-4b352f49a974", "sighting--1096fa95-cfe7-4755-b10d-e750a438ec24", "sighting--d4d222f4-0aea-4328-be85-b02b4b527549", "sighting--d9be5927-d04e-4a9d-a190-7b66ab61ed47", "sighting--d75b8df4-4b37-4f74-8a73-35311ca8aaba", "sighting--bdeef3fe-d5ff-41c6-a7e5-5260688775f1", "sighting--7fa6fd3c-9d53-42cc-8793-26be83ed5995", "sighting--d0f7c0a8-8ddb-4eb8-8a8d-3e9a5c374018", "sighting--504ea293-75e4-44bd-8f4d-fc88b2ddd419", "sighting--96b8f012-6fc6-4be2-8e70-f26b81a60835", "sighting--75d83169-0906-44ac-a9b2-6f58e3cf3271", "sighting--fd01a35c-238b-4940-b32f-3bd518b216c5", "sighting--fc7bb1e5-a5e5-4aaf-b39a-b34856751564", "sighting--45ec8e98-56af-4cc7-8a60-00e35914d796", "sighting--30d3dc51-7b72-447a-9573-23c9c3562cdd", "sighting--336b9d14-25d7-40f9-a6d8-2407092d25a0", "sighting--7bee0c7b-8afc-4776-9226-e95cb25508cb", "sighting--0662d580-ef50-4a19-bfc0-2ea52e604fa8", "sighting--6dbc5ddb-33e6-4c62-8baa-e271ab443ccd", "sighting--b17fa9e4-5b60-438a-8e44-f1ec3e21f752", "sighting--68d5cf0d-2ec8-4ad9-a1b4-f8fc98a15521", "sighting--1705c1f4-11d4-45c1-a006-2c88d3d8b9c2", "sighting--ac55ade8-39ad-4596-a1bb-7094c06822c2", "sighting--5e2c5566-c5b1-4c84-8080-0981d1310144", "sighting--dfc0e7fa-901d-40a7-9ee7-b7783fddb5da", "sighting--0d148feb-2b93-4d23-a3ef-670a9bd9ebca", "sighting--9be5fb0e-fdf3-4709-943f-f3daa202cab9", "sighting--a5a06ebb-6785-49a6-9bb6-9a2498f26153", "sighting--f7792e31-69b2-48a3-a949-0ead40592c33", "sighting--bcb0a7b7-67c4-486a-ba4b-8caf907f0afb", "sighting--2b874e5a-154a-4b17-9456-de1fb6ea28f8", "sighting--7d57abb3-beea-4116-8a09-7ab87187cb62", "sighting--e1ae542a-24ba-4c4b-90c7-bd064037271f", "sighting--07e55d56-81af-4bdf-9700-f21e60f25b9d", "sighting--26ecfe87-18f3-4eff-a2c3-d3c1cfa8830b", "sighting--96ad6ad3-1ccc-499c-9d5f-6aaa2f8f7fe8", "sighting--9344eb90-6b20-4c6e-9deb-b5649e6671d6", "sighting--1939d575-68c5-478a-97ff-3779f69e5c1f", "sighting--e02f6113-d96b-4cee-8890-f947b0d9bd01", "sighting--f9df46a1-11ca-4f21-9393-2b88820a753b", "sighting--cef11ced-6831-4e8a-a1ae-882aaaee9595", "sighting--ddc6143c-649c-439d-99ae-c4644763557f", "sighting--6c6df64b-68b4-4c73-a7b5-bd777be97d4d", "sighting--9d913e5f-c70a-49fc-83ed-88e6aa978386", "sighting--07227b42-7ea7-489a-9b8f-36e57bfd9072", "sighting--5fb41ca5-bf1f-462c-8589-35e9051636c5", "sighting--4030f849-3bc0-4944-a372-8e52173e81da", "sighting--05c981c6-6224-44c4-9c3a-49bd2b2c8ba6", "sighting--140a3b33-743e-4ec2-8d23-f825d566bb24", "sighting--c6fd96a9-b37b-4450-84c9-06a3368e396e", "sighting--5830589b-12fa-4f77-bcba-5c67d6cc8e15", "sighting--999b8c8c-35df-49ba-955a-05ef25c14038", "sighting--7eb2fbc3-85e4-4d0a-ab80-d108389ea25c", "sighting--58d7c4dc-a48d-4f52-a14a-943a91fe8bce", "sighting--3a49e5c0-611d-4aaf-9e15-866c63d6121b", "sighting--a0c2a108-c316-4e35-b085-15d80718dd28", "sighting--e2f8cdc3-18f3-4025-805d-d29104bf91a5", "sighting--bd26d76f-2332-48c0-8a27-8ece32b3a8fb", "sighting--e499399e-68b7-4d44-9607-a5480a934cec", "sighting--105499df-1fd1-43c9-bd35-49ab2bb9a84f", "sighting--1039689b-3b83-4408-838a-343c1141a7b2", "sighting--1babfe84-afd2-4683-8a46-dc1451f93dc5", "sighting--058e6305-b2de-47eb-9cee-48e650b1dd36", "sighting--6627f76b-fb3a-4d0c-8f38-a8b6abb0f0a3", "sighting--bdd95418-f337-4b6d-b681-57f8b3816bc6", "sighting--32564a49-430c-4b35-8c9c-40bd265c7879", "sighting--00e8b0c0-2747-4f64-9d31-476541e74eb8", "sighting--be8145de-0d97-4f95-9378-e9d4c8d60d33", "sighting--fe8753c6-7786-45f4-8acf-229152c6c862", "sighting--97bdb18a-b974-448a-8b32-47a16c5affdc", "sighting--d130fbf9-ab64-4635-b29e-ef2b3f079446", "sighting--fa0a9625-b199-4c09-b67d-40d1f849de04", "sighting--175fb302-cebe-4a23-a647-b4bcab3b0892", "sighting--1fa6050a-1007-4c61-9507-587cd4fe21ca", "sighting--7ad8e1ba-5993-411e-908b-2e8109be5834", "sighting--e138bf9d-21b8-4522-8169-a562a9c420ea", "sighting--dacbac2c-ca9f-4e68-9aa8-32c573f5315f", "sighting--5d77db9d-adb0-4754-841a-d483b775094f", "sighting--148f088a-f49e-404c-9080-76bcd12bf384", "sighting--2a9b22f3-4532-45fa-8698-409c171bcd47", "sighting--c08aaa2c-d864-47e5-a616-45953182ff75", "sighting--52be26aa-11a5-4456-863f-a712adfaad1f", "sighting--854f44a3-56cc-4298-ac76-9d12fd8b1d7b", "sighting--32b98dcf-d82a-4f40-9b84-62069e097271", "sighting--4738b397-b1b4-44b7-98d2-551167e2a5c3", "sighting--3d2fa7a0-5a7e-4edb-adc2-9df8b5731e91", "sighting--976649d6-4808-4b12-b585-abec1e6eca0a", "sighting--4fb905af-86e9-4d8c-a7c0-50ee4fa92fa1", "sighting--3546c245-6d7a-4ab5-a149-6d9e157e6475", "sighting--2289dbe1-55d2-421c-9a1a-1912a9abfb9f", "sighting--e8a96dde-acb9-4263-9ab0-a9a7b74ff8a6", "sighting--b168b2a4-1564-40eb-9ddc-9ae47f28fc12", "sighting--ca6558cc-2d34-48d7-a988-aa772c1cd8f4", "sighting--1ce45e58-a4b9-4757-938e-16e514600692", "sighting--560bde9b-8d83-45cd-bacf-133439071f5d", "sighting--ee79bf31-9563-4c65-b0c5-4200ba654c20", "sighting--18ea3958-3142-4721-98c6-cd2666fa2a54", "sighting--e2464dce-6c7b-4fe5-a0e2-045a45125659", "sighting--b15a7aec-835b-453b-b4f0-5f330644323e", "sighting--9083fcec-6865-4546-ab96-e271c9f1cfd1", "sighting--97f6d8f6-4ff7-4bf7-9e98-48cdd70837a7", "sighting--1c66ea5e-b423-422a-8a33-c567c685ab1c", "sighting--d77f13f0-8ada-4a42-91f9-612265db1c9c", "sighting--fedde346-be5e-4536-87c7-b1e9f113557f", "sighting--488c2464-dfb7-4aba-93b7-d723d1cbf3e6", "sighting--2a76cf6a-146c-4850-add3-866077942eb5", "sighting--d3958716-abb9-4bf9-9279-5830536530b4", "sighting--27315c59-f24a-4cbd-81b8-ae5effcda731", "sighting--b8c82313-2026-4cb1-9b2f-0efc5e315078", "sighting--6a4e02f2-0356-4b96-ac9f-666dc238f7cf", "sighting--d36c9104-9f8e-45e1-bf27-b04eb113b062", "sighting--9d10ec72-89d3-4f55-88f0-979a3cd1df02", "sighting--3de2182f-eb0c-42ec-b1b7-a3b57be70866", "sighting--99e3c45f-31cb-43c0-a258-81e12d7a3079", "sighting--67ca6575-54d1-4374-8968-37064f3f301b", "sighting--61c38a26-5874-40a4-a847-da579e2815eb", "sighting--63a65633-219a-4537-90f3-76833d8a1e6b", "sighting--43611985-2d92-4a7b-b5f4-fe681edfa54d", "sighting--739b9aa8-5838-4a48-b555-3ad86794d7d9", "sighting--af4c413c-ee55-4e25-be95-befbed9fb6a4", "sighting--41588744-6c43-428c-88d1-aae60f56080b", "sighting--bc91662f-e66e-4eb8-8919-45201198c378", "sighting--65ec4af5-461b-4b59-885b-4009c52b8d69", "sighting--f27e226e-c813-4e1c-b004-6b661ddab5a3", "sighting--ec7f40b4-9277-49ae-b183-f215c2bbaed9", "sighting--9d3b38f9-61c2-4279-ba20-400425b1bd57", "sighting--2f9441e3-a8d1-437d-95e8-3c102e0b8719", "sighting--904c3ccb-8129-43c3-aa98-06834f761e05", "sighting--8800f066-8a00-4088-965d-1f606a6f9b1f", "sighting--1d4977ed-d2ae-44c1-ac62-2347267bf537", "sighting--968897e3-2c0f-41b5-b0df-bf1763b87ab6", "sighting--2def783c-2e49-42e7-9939-a6d8f8eb13e0", "sighting--4927596a-13f2-49a7-b4c3-b3265c078d1c", "sighting--8a7fc1c3-147b-4d09-a742-560311089a73", "sighting--f3ae38d2-a23c-49f2-a564-9b9eb809b263", "sighting--6255893c-3d8d-476f-a845-56cc732eb4a7", "sighting--a6c60c79-6368-462c-a1db-f0c923ed6c15", "sighting--124ecdb7-3b91-4040-a929-a672499cf153", "sighting--01e9890f-8aae-40d8-bcdf-2b0a480100ed", "sighting--b41c4802-fe8b-4df4-8981-f5c2f8c31353", "sighting--e7cbf251-bc9e-4394-b96c-defe664dc4b7", "sighting--5a4e21f8-f034-4137-8e48-459ff7caad50", "sighting--39d8f722-ec9e-43e0-b820-30cc2ca1ef0d", "sighting--7e3246eb-791f-4f0e-a9a6-e9573bba0ddc", "sighting--4d43797d-964f-4ef9-8182-356141e51b70", "sighting--8311c15b-0f82-4ff6-a702-727816b8c9a1", "sighting--b89fd239-29fa-489e-82de-9100b2bcc25f", "sighting--e23554ca-4c30-4082-a811-4e45038ce3f0", "sighting--08d7ba49-aacd-4888-afc2-e185a942c0ef", "sighting--3a3b8a3d-d79a-48e1-9975-42c94b25cedb", "sighting--f4b0879d-c949-44a2-b5dc-3ac0f1b73501", "sighting--4feabb6b-0369-44c1-aae1-a3a9dd9114e2", "sighting--b1dbf817-4094-4df4-b802-19f2be72f5b1", "sighting--97ad876b-9e07-42ca-86c8-a2abd4bef437", "sighting--e7999676-3604-492e-9607-8edc8d19a03c", "sighting--3ec0e903-1d80-49a0-a249-8cc85172a8e5", "sighting--72ce0451-b340-48b2-9089-4826d4c4521b", "sighting--3763611a-1a66-48fa-9ce1-02d631427a73", "sighting--6fd66197-29e8-415c-838a-27f6dbedf816", "sighting--4917852e-88e0-4867-a8a7-c41217eddd9b", "sighting--a055c16c-0abc-428c-af23-dbc7de3f3d72", "sighting--00ae1660-7ef9-4e88-9bae-73b7afbad719", "sighting--02baa186-b30d-41e4-9291-21a55324702f", "sighting--5d89e7aa-2051-4a1b-b0df-63835c1388b5", "sighting--4baf38ce-fb1b-4269-8cc8-0e89b2158805", "sighting--701ab0b2-5eb9-4b28-a7a5-8c3e37760257", "sighting--a77ff747-1bbe-445d-9edc-fb2c4a5386fe", "sighting--4ea7a659-39fe-48ea-849b-9b0f1314ebe0", "sighting--2b90361f-bba4-401d-919e-be23db4e545b", "sighting--d30ffb86-2985-4c4d-94e1-5ffd87b92831", "sighting--3e81473d-ac87-4163-a5a4-004ddd932fe8", "sighting--022461bc-6598-4ba5-954f-34dc22e6129a", "sighting--ac9f6f93-e5b3-4305-a2d1-4cd45b1a4ca8", "sighting--7d9985e0-e4e6-44db-a150-83a6f3c99398", "sighting--27d2f205-4686-49c0-b38a-5645d265bf3d", "sighting--6e6bfca4-aca0-4b8e-bc36-435c1debbb28", "sighting--63e85d84-7612-4923-ae74-0b4ddc9facc9", "sighting--e0cc5a33-d313-4bd8-b445-c8dea346554a", "sighting--ea04175d-0eac-48d3-a597-90cfbb10eccc", "sighting--8a812921-b671-40e0-afdf-cd2939039ec7", "sighting--88fa9dad-7b3a-46ce-a182-9e4b278f8346", "sighting--f2560d71-7f92-4029-87d9-7cfde815aa6a", "sighting--b03960e9-d116-4ca1-a139-2e6a8db70ca8", "sighting--b39ef5c3-4f33-4754-aa08-95cef6ab13f7", "sighting--cc120788-c257-48ae-ab44-450a63bda3db", "sighting--163d5715-1b60-4b42-844a-274c05d5aeeb", "sighting--7002de3d-2047-4c88-b0d1-560a5087e44b", "sighting--a40482cd-21b1-4b91-b390-21622c245897", "sighting--dcbb3339-bab1-4a22-abb3-9ffa23c0939e", "sighting--4e57d437-a93a-43b3-9abb-89831a33fd5a", "sighting--33a94208-c2da-4366-9f41-944fb5e0d3e5", "sighting--3a09c677-e0af-4c3b-9a77-98b580b12d35", "sighting--e1c3fbd5-33e1-456f-b178-89fbc1e7ef54", "sighting--b901fbb5-ccdd-48fc-9b26-8a587af8a5a2", "sighting--33a6feda-2a44-4b9f-90cc-6233e5711dfd", "sighting--c20c853d-db63-409a-b57b-e7173412bb1c", "sighting--ad1210d3-a3ed-4456-86fa-84aeb62b6b68", "sighting--1ee6981a-2142-40ad-b845-608d05d1bcec", "sighting--3fab53ba-bc67-4029-9349-a7030b9456fb", "sighting--54dd91c4-b2de-4886-a1de-a000967b6139", "sighting--f55a590c-c953-4cb1-af79-4b248714a9fd", "sighting--b4de7219-f054-4ca8-9476-70b85932e223", "sighting--2fd2019a-0ea2-465e-9ada-d65d4ca41363", "sighting--bae249b3-c899-4d15-8d71-8c137336e9ca", "sighting--cd5ef08d-37c2-4145-be4b-b48013f10cee", "sighting--1d762741-89fe-418b-ab88-ce27c812f834", "sighting--a489ee0e-174b-46fa-a4e9-048cddc77f99", "sighting--166a3b23-0ddc-4fc6-9931-f983aac5faff", "sighting--5dbf9885-f4da-43db-9440-820c67d9070e", "sighting--11d4769d-222b-42f3-a826-361cb326426d", "sighting--924e94da-34e7-480f-ba64-5be1c42578eb", "sighting--92b884e7-f575-4bef-ab40-196c42e95afd", "sighting--d5a3f033-de48-43fe-a886-a0fe2aba41b8", "sighting--c8d1f184-74fa-4703-af02-e3cf8e7c4b97", "sighting--c6f1dc18-62f5-480c-8c6e-81f3394e0ee7", "sighting--8b766dc5-a3b8-4fc1-8b0b-9b27007f5459", "sighting--7a037dea-33f5-431c-a361-34e244b80a9b", "sighting--076e62da-07f5-4478-af7d-b61b6ea91e38", "sighting--0239f278-a504-4fc3-b008-3e3cc3ca7b6a", "sighting--14cc41c3-7b36-4d80-80f6-50de4d1031b4", "sighting--600fc86d-6030-4d21-800e-c308f2e98fa2", "sighting--98236ac5-3c85-4607-869d-d140995e04cf", "sighting--1caefed9-a916-45db-a376-074f394bc885", "sighting--dec544ca-af2b-4929-a8cc-3d94e12c203d", "sighting--dca6cc93-1149-48cb-994f-1390827f9405", "sighting--af70e030-5ce5-415a-bbdf-79fbd4a94366", "sighting--3528c6f2-f9e1-4af0-98c6-9dad04c40dc6", "sighting--0a440bf1-c1c2-444e-90a9-146e329628d9", "sighting--58a2b3c0-0d32-4e0c-83cf-b8d4be2ca00d", "sighting--044ca754-7887-4c7e-be59-d61f32089d59", "sighting--9d1d1e81-b81c-43ce-bc8f-6788fb7790a3", "sighting--8048e825-13fc-4464-8e21-be607176aabd", "sighting--751485f6-7492-4ce2-8fc0-5011c241b853", "sighting--b1f38608-4e78-4b30-ad8c-407f95de3b1a", "sighting--dfbb2abf-6f2b-4664-a241-fa0061e34a22", "sighting--d6a308ff-1425-49b9-bd56-110305ce723c", "sighting--214a7bce-5544-4480-ab5d-5d393e1701bb", "sighting--74d267f9-7fa5-4943-abf4-02b9d7912dc4", "sighting--0c3ff0b8-207d-45f3-b4c8-9ccebc2e6ed4", "sighting--050a5dbb-c7a8-4f78-8451-b6149a0d94ac", "sighting--82112217-30a5-4d57-963c-480ead16addb", "sighting--cc5624b7-1bd8-413f-b707-2ec41349d4a4", "sighting--173faa97-aa95-4093-a08d-71a48fcf9c01", "sighting--3ab7e847-4eaf-418d-ba91-bd556a767017", "sighting--3da23098-58d8-4182-bdfd-b953171beb62", "sighting--7b566dbe-0b19-45aa-87f5-c4f125d1aa55", "sighting--8065bd35-8836-4860-901c-dfb51a510af1", "sighting--91fd2db1-b1bd-4b70-9c9d-4a86159e80ca", "sighting--8a3acfbe-34e9-42f7-8fac-e1db3f356b0d", "sighting--54178997-e149-4eda-8bd1-4e6786be1621", "sighting--da5e58b5-4741-4add-a473-9b2dba8f208f", "sighting--0ecf6fec-7930-4868-a414-c3d35d00e92d", "sighting--d0e8f0fd-c15c-4165-aaff-555c1d90bb24", "sighting--a37191f7-8f55-46a5-a8f0-8202549af995", "sighting--32ac2f71-ef07-499b-a7d8-1c839739737d", "sighting--8a376f87-664c-4e17-9a95-3bc50ccf358c", "sighting--a48ca326-8715-4058-ba8a-df4e14ea05dd", "sighting--30484aec-c083-478b-afaf-399fdfc409bc", "sighting--6f689b44-24e8-4840-8e69-1abf9322abf6", "sighting--9400b0bc-8032-4c2a-8dde-392f9c880c68", "sighting--a4aef241-a87e-4a9b-8d7f-2ca98cd95dfe", "sighting--41f33dce-a8fb-4b5a-b496-9b536a852bce", "sighting--daae4a20-0f3a-4cec-b44b-7f7a2f71ac0f", "sighting--e41395c4-4e9a-484d-921f-2aef1a30d041", "sighting--83c763e7-8445-4702-bf2e-6e8db2f95aae", "sighting--83004186-2ad8-4d6e-8dbe-05d9cee050d6", "sighting--5f6f60df-438b-4ffe-838d-ce838ebb581c", "sighting--2c88d8c2-5255-4741-9208-ff69d1098240", "sighting--b24e1497-8905-4328-961c-b5e638577a02", "sighting--a7f9859f-770b-4b61-bf88-af1283da8cee", "sighting--a5b0b9cf-9f7e-47a1-a458-2def989b9080", "sighting--50c96758-08fe-4c84-b072-85cf11907ba5", "sighting--a44d8fce-dc9c-47d2-9503-5e3cdfd0fc5d", "sighting--042ceab4-6e4e-44fd-8949-60b119251fcf", "sighting--764df857-cc19-4907-ac83-2bd47b267ea4", "sighting--303a9690-d537-4be9-83ca-806ee7aa484d", "sighting--4c061492-8f43-41b7-a97d-cc1e9bd6b70e", "sighting--a6ca420e-5cd0-46c5-904d-6f6d37c56276", "sighting--58e6e645-ded9-40b0-a50f-33f6b73db917", "sighting--320aeb34-f56e-4e38-ba4d-c7ba3981ec41", "sighting--c242f8d8-872e-4266-bff3-3928204c5053", "sighting--66d83495-801b-4c1a-84ea-352062c640fe", "sighting--bcab5a72-a6c0-4499-b08e-02b7a516fe37", "sighting--7fd0f22c-e060-4a79-b22a-509e214fa1b2", "sighting--2009361c-cbbf-42da-ad9b-6d94451471b3", "sighting--b3e8c337-d236-468d-9eb2-7c34118873de", "sighting--04213e77-f945-47ca-92a4-743cc620f78a", "sighting--216fb8d6-17f0-41f0-acc3-5e276c588118", "sighting--ca1f06ed-b5b2-493f-ad9f-9ee520185254", "sighting--eb023f1e-20b9-48ca-bd1b-cb179ecb7c06", "sighting--e9f9e11a-3f98-4600-8059-14bc68d5602d", "sighting--83e84625-99e5-4115-8a29-a01c42c4699d", "sighting--ee573278-0803-43f7-ab47-2d6d3143ac37", "sighting--f4344f9f-083a-4c64-b917-e0e3df9881e2", "sighting--19495df4-c1f9-4af6-847d-0a34dea5df2a", "sighting--720a54b4-5e97-4f59-8969-8538e3b5bce9", "sighting--2ae598d3-eea9-4e0f-8902-0d4e107da72a", "sighting--729a314e-4b5b-4b46-b2c4-59c76afbb89c", "sighting--4a762491-f9f5-431c-b13d-2322046959f4", "sighting--d6d28fa5-41f8-4783-be17-fd5cc6815c84", "sighting--70cb8e70-641c-4dfb-b9f4-41638e09a9b4", "sighting--21bfe09e-f97d-44ae-b464-56d656d467cc", "sighting--6e72a8dc-15b1-4b86-afa8-3c1a750a4e9d", "sighting--fd892cfe-5d18-4f42-ac65-5a2db91ce62a", "sighting--62d20dc4-854d-4807-8033-41820a0d467e", "sighting--b428fdb2-1038-42c4-a89c-6e80812b7922", "sighting--b0f61ab9-ca9d-4d67-99b6-217288d80169", "sighting--257f5e3b-ea8d-45c4-9a6c-c46d69a64b5c", "sighting--7ce5bf11-b426-4d83-96df-5210f546c15a", "sighting--b80b31a1-a2d0-42a7-af2e-0c400179515c", "sighting--5bc379e4-3b4f-4ab8-a721-cf6315fd3021", "sighting--f4530b4e-119e-43b2-a969-d8d08da9f91d", "sighting--d43f41a0-53ac-40f8-a039-2cf2f54ae920", "sighting--67456dd0-4b20-45b5-ba11-aac0bdd7514a", "sighting--cd06d6bb-08fa-46f3-8b41-9e11e82bb43a", "sighting--886d2cc0-f280-4680-a95a-f9c1dff108eb", "sighting--21f09845-d4aa-44e8-84dc-514183d03ac4", "sighting--386778ee-9f0a-4f1a-b0cc-295275222e83", "sighting--f17b19b8-406f-4fb8-a2ca-e229532fd839", "sighting--df929611-1f0d-4189-ad8f-f947d5b6f647", "sighting--44eaa538-9f6b-426b-b51c-acb265550ab8", "sighting--632503b7-5e39-4696-a371-a8658159a96f", "sighting--74b7d3b5-7d24-4720-87e6-526ce6484111", "sighting--1754275d-63fe-4495-a253-d9c8e5b4f392", "sighting--ebc02684-3332-44b7-befa-afe713e291bb", "sighting--73b51a93-73e8-4f4f-8e9b-edf388cfc149", "sighting--1c819d28-4897-4b35-b33b-a06223fcc8a2", "sighting--844ce1c0-b859-4a5e-a0f5-8ae69e422dc8", "sighting--8efd29ac-2077-4533-a262-4f705617afd7", "sighting--f9e1fc92-b5b8-4923-8541-47d1ff26deb1", "sighting--53f568e7-1d31-4601-a95d-32504d02dcee", "sighting--455c058d-cbc1-4a0b-a53e-32f50d17110a", "sighting--60c83cfc-5357-4f0d-acdf-4a1bc90564d5", "sighting--35dfcbe0-4b19-466d-97a8-fd5f44ae8bc3", "sighting--a71d3f0a-51c0-4e1f-9b86-42bebeeab5ab", "sighting--5b0ec911-6ffe-4f60-865c-659ffa1c39fa", "sighting--74f9c04c-019f-4664-8689-d60ff9cc0a8b", "sighting--32adbb33-0570-4ec5-ad79-b0d632e4e8f5", "sighting--1879618c-a156-4a8e-894a-2afd1a0540d0", "sighting--bc761f81-1f0a-49ba-a4d0-4bc06198e3ae", "sighting--e28af2b7-d95c-4cb0-a0b6-bf0dc3eb007c", "sighting--5585ace1-2fea-40d9-a44e-18efe891ac96", "sighting--f421ef87-8228-43e4-a5ef-f1d093aaa8e4", "sighting--2770bd41-4248-4b44-8c2d-69b319b6c760", "sighting--f8e625de-62ae-43ec-b71e-04a93176eb20", "sighting--dd73cac6-bb9a-432a-8d81-62a45564f6b1", "sighting--b7016d74-49e2-447b-8deb-f800d7fe0702", "sighting--daf68fe6-5425-4602-afbb-d4d64b2db54a", "sighting--27401a90-fbc9-4682-a128-8ba1a2b3816d", "sighting--5334f34a-d3c8-499b-9f13-c511cbe50ddc", "sighting--ba86b696-91e4-4353-9fff-bf451d8cdd19", "sighting--3c005347-59c3-461a-b186-5a306d745ba4", "sighting--1a50cfec-74e8-415b-8794-d1cf5ea7cd23", "sighting--2f89055d-a486-4bff-b659-369b0b88765b", "sighting--0c5e8eb4-abcc-4706-8bce-efd2dc011e11", "sighting--ac68f4d2-8186-48c2-851a-0c588918ccf2", "sighting--6e331127-6956-42f2-8b67-eaad3acf5099", "sighting--77087c2a-4293-4553-8627-c50bbc80f379", "sighting--f9caf033-e816-4acd-b58d-299bff483103", "sighting--ec6daa59-bae2-448b-a8e9-ee8d3bbacf17", "sighting--70493baa-f6ca-4c9a-bf95-6fde449a395e", "sighting--8515f144-bf04-4b7e-b81f-3fd4ad974c89", "sighting--bc4115df-2aee-4c3d-92fc-be028ea4186e", "sighting--10b14d7c-51ff-406a-ba9f-e9cfd6d77e7e", "sighting--8e3185b3-9c2d-41f7-a7ec-8aba01be7559", "sighting--0c483d6f-2834-4bd3-b8f6-bc2f91ca1bcc", "sighting--d3d679e3-257c-4f69-a386-fc29c27cdedf", "sighting--2e275c74-6a62-4736-a512-fcbca74a17c2", "sighting--4a3c0659-be91-4895-999b-f949ab21e7df", "sighting--e3305d1d-88c4-4be3-98ca-b815ddacb428", "sighting--d524b139-6a62-4299-a177-317d0aa6bb33", "sighting--c1c9f638-25c1-4f83-8ae0-a585720edc54", "sighting--f45d1964-5051-4496-8f86-c88a0893e9c4", "sighting--9aba4752-fc5e-4bcb-ba41-6eea1030bba3", "sighting--b9383d18-ed03-4025-a345-4e1b9b82a86b", "sighting--d050e573-6b53-4073-989f-92ce0e49a788", "sighting--61a6acac-9b14-4034-afb9-c078fd6281e5", "sighting--638ba616-b9b4-400a-876b-c030bbd1671f", "sighting--d0cffa7f-4365-430c-b1fb-f29a7aaae71f", "sighting--32520b6a-798f-4a72-8798-14f109339197", "sighting--f0b22998-1384-4c7d-a78e-f8866796c3de", "sighting--65333ffe-bb70-49ab-9899-901489ea86a3", "sighting--f0e05d0f-876d-438c-baa2-a802a85cad3f", "sighting--c1af7e8c-4356-416d-a510-9c044bec618e", "sighting--535f8512-0ddd-448b-be00-070410d56696", "sighting--e3b9eebc-9fca-4f30-b631-3de9712e3850", "sighting--ca0d0859-15db-43be-a320-edd3a3f6bc56", "sighting--b6f73690-7576-491c-9482-e85ddda7abc9", "sighting--ae347bb5-369d-4429-8b6b-fc3718400736", "sighting--40551ecb-001a-415c-9ae2-c3bf5f708d13", "sighting--c3381c89-6e84-4aa9-ad63-e1169ed32b22", "sighting--2676cb37-21df-404e-b7da-a5898997f71f", "sighting--2887932f-4adc-4912-b757-fc913e24cfc2", "sighting--7ab2d428-f810-472e-bfec-4f14bbf04ee7", "sighting--3358c608-f099-4d6a-833b-9abce661c053", "sighting--54ac611d-c78a-4cd9-b308-dabb39d9e7ad", "sighting--509986f2-0e5d-4294-8f4a-1e5a2e17fe3f", "sighting--865b2542-dcda-42b3-835b-bb374158525e", "sighting--721cd930-ab5c-417f-bce7-58951b1c6d6a", "sighting--a94e9eeb-180c-431d-b3de-35c28be33d46", "sighting--a2146371-085e-4342-9699-37371916ba8a", "sighting--349263aa-3486-485e-ab4f-881fb28d4516", "sighting--7f0a2250-5ecc-4ac1-a60b-8fd742fc7e94", "sighting--2b9245df-a93a-4749-b576-829955066752", "sighting--b7b702c5-ef1f-403d-a87c-db7d1457a77a", "sighting--12a18c27-4d73-4236-b353-c3baea30defd", "sighting--cdffc6af-54c6-4beb-ae61-2d9bdf20198f", "sighting--afe4410d-57a2-471a-9646-38ca849950ad", "sighting--02e86643-2750-4a02-91d1-9902fe8866e2", "sighting--cd82dfdd-52c1-40c7-ae67-3bcb71ea4a25", "sighting--ef98acca-8582-4b28-a020-620fc910f0e5", "sighting--64131bc5-2a72-4010-b6eb-897018370d4d", "sighting--074494bb-4b95-4cf4-99a2-499971dfd6d5", "sighting--1d740982-08df-4d61-bde0-122b0cbe6403", "sighting--1d603b08-55b6-4e23-a885-69c519745656", "sighting--fa5a916d-8c02-43e9-9caf-bda6144ce015", "sighting--1e0b8eeb-1faa-4086-8d8c-604776017015", "sighting--2cfb94c1-1a43-4b2a-af85-5e6eb7c4b81c", "sighting--a3fee9e6-951a-42b8-b286-8bccdd79bf2d", "sighting--dba21a9d-ce5d-42bc-a58a-321d3b37744b", "sighting--9ee5fdbf-0c00-4452-9614-80295dbcf24c", "sighting--b1c57dce-2f8d-43ed-b8f6-a2124bddfdb9", "sighting--f45f1bc4-739e-412a-a432-3e341612a635", "sighting--f733a5ba-c0d4-42bb-8ce0-8c9739d4ccee", "sighting--8cf37aec-9d84-4d72-89c1-f01ee4468ce8", "sighting--55f85cf4-265f-466d-b9b4-72a028f4a1ae", "sighting--b2e18c48-de6e-46f5-b3db-2c170a2aff70", "sighting--98eeafc4-c36e-4488-97c0-493981b17b86", "sighting--538d2b51-b585-4694-8233-7c678522efeb", "sighting--ce0d8e28-e8a0-44bb-b893-2df30a772465", "sighting--f8d5bf50-b8ce-45e5-8067-c4e357327c9b", "sighting--d03ec80f-92ce-4b77-a784-99711ece55c1", "sighting--73d5f761-5511-438e-a291-5d08523f5197", "sighting--4f45307e-1d32-4f0e-b5ac-9721164b4552", "sighting--5b6c03dd-d93d-4f51-8f95-1b360d38cea5", "sighting--643fffb1-55d5-4592-9e3c-a532afb4984f", "sighting--96e130a3-48aa-4b60-8ce0-9cf5935b05a9", "sighting--fb2ddb44-5355-4452-9381-6f996150ac25", "sighting--34d0eb3b-b62c-4101-b0e3-e28fa1df77aa", "sighting--2a9b297e-3911-4fcf-834b-87eef775ad1c", "sighting--b4f94bb7-a94a-4cd6-88b4-5fdd8813a1d9", "sighting--3ab372a9-a46f-4abc-a12d-0d801a1d29d9", "sighting--8960f5d6-6877-458d-ada4-eead69f16c92", "sighting--14021a1c-80a4-4a4e-94ca-3563878d3285", "sighting--28ef3c3c-ef30-4f95-a423-79a197333866", "sighting--b8b7bef4-06a9-4f25-bb42-efb42c6049b5", "sighting--07f23022-6ffa-4935-9589-1daae73a39c6", "sighting--06672b2f-c730-424a-97ed-a36a11e0da49", "sighting--69506fdb-b334-4b67-a83f-5ba8538971b6", "sighting--7e5d9e85-74c7-4f3c-a0a8-c52138afff97", "sighting--31ffe8b4-dda7-493f-b9d0-cab5084c6f37", "sighting--4717d067-0846-4ea9-8377-5713125e4911", "sighting--a69c272a-3230-4ead-b37c-e59a51937966", "sighting--440170d4-f18f-47b6-ba2c-6f3fd6db7b57", "sighting--fe24b3df-ae62-4aa2-b350-5753ef125adf", "sighting--a1729590-2b6d-4c63-867f-51a924f2b20c", "sighting--34eca466-9e8f-423c-93fd-a81b19870ef1", "sighting--d99dd51e-0817-43e3-8221-7f16133ddf19", "sighting--fcbb06bb-012b-49a2-a2c0-3797eca2ac5f", "sighting--fde1be31-42c5-41bb-9bb2-58d3b99c4b93", "sighting--6b7ea394-2692-463f-8975-15657b41c8d5", "sighting--5cdf24d7-9159-4c62-86b9-c1ce917d5742", "sighting--0bd24549-3e96-4213-bd54-97433dca2a13", "sighting--ec767b6a-8948-4888-bfb4-dceab6e1b1b9", "sighting--4f5867d9-2754-4003-a573-e964725c43c4", "sighting--38afba92-75d2-47bf-a5c2-03b8575ec100", "sighting--9545835d-3168-478a-aa07-21a25e94fc3b", "sighting--02987225-4d55-4ccb-8148-003a09a123ca", "sighting--d6addd4f-fabe-437f-80fd-f6f48e549a90", "sighting--e1d9a72f-13e5-4695-bb38-92484f93c07d", "sighting--667ffc9c-b330-459c-993b-2abd430430fc", "sighting--9f2873f3-b1e2-44bc-a100-f2818c47f625", "sighting--9d4f0009-9302-4b07-a344-b256f231b117", "sighting--004a4aa8-a843-474d-adca-fb28bfa90bc5", "sighting--2202bca2-d99a-4bc7-bd47-3166b38fa630", "sighting--266753c0-3bd3-4439-91a8-87398b73c807", "sighting--1a13b16f-df05-4c37-ab20-26477add57f1", "sighting--0508f338-30de-40f0-8160-5087a5aef69b", "sighting--b34df4c9-043c-44f8-9c5b-9cba15a90ae8", "sighting--9a77b4c8-c5f7-4244-b83d-fba6f0cda8f3", "sighting--2b77e6fd-2465-49a6-b328-2e943f7a4232", "sighting--dbbab719-72ff-4603-ad74-4417f5174a2d", "sighting--370baf7a-b1f9-4bca-a504-0c5e3f605efa", "sighting--0ba5b13e-c075-4ae9-9ff7-4a529d80cbe3", "sighting--369bf873-b067-4266-9fd0-e7fdad737efe", "sighting--bf8b1a97-f2fe-4130-825d-1b2cbaa539ef", "sighting--0da278bd-af21-4206-96f6-4ffe42fc4173", "sighting--f9567f82-39ea-4942-afc3-36c3fa430e31", "sighting--549ff64d-e7ba-46f9-97c2-dae0ee09ee6b", "sighting--7447697a-d112-4e0a-9876-6c7d45bf144c", "sighting--8328d219-873d-40e1-95d9-26df363fc0b9", "sighting--90dc42d8-cf52-4bfb-85a3-7b9415c308b3", "sighting--f57f5ab7-a946-4f00-8719-8bee9b082fb4", "sighting--e69f6783-03c6-4266-a877-393618063a6a", "sighting--299df604-43f3-4847-aec9-d8c1dc2c89e9", "sighting--301eee8b-2f80-498c-9bec-5ad1d9325b30", "sighting--0c7d5d66-b183-4f89-b257-115bf5a5441d", "sighting--1be58867-81a3-47fa-9ffa-cbefc7ea4fd2", "sighting--2d02c8fd-f306-440e-b9b3-5624edbc5092", "sighting--fd43ff78-e12a-4fb2-a3e7-8efdca249bec", "sighting--7b994cb0-6302-4cde-96e7-f262e01e518c", "sighting--c3752df4-b57f-4e67-adcf-c193c0e5b702", "sighting--81e5ea54-3eed-4914-80e1-77de68d48cee", "sighting--a154e0d9-1b26-4749-9ead-4007b2d84f5e", "sighting--6204788c-e194-4daa-b7d7-4a28634450e3", "sighting--c7c7fb9f-4073-48e4-a810-39443901e186", "sighting--16e5ba14-cf57-46c0-a5bf-00014554ed76", "sighting--5fb356c4-1744-4e83-830c-799817a088ca", "sighting--2609aa00-ecfb-4d68-8d31-31b36fc5cecc", "sighting--2d52cf4e-b2c4-4226-a41d-695ea2aa527c", "sighting--fb2aa025-03aa-41e5-8edd-7e4e9847e7f6", "sighting--7dcb065c-6b5f-40d2-a13b-c86d2acd52e8", "sighting--c37ec8c4-7c17-4751-ae17-3f0ae62410f7", "sighting--29036f42-daf3-457b-a2ce-b0d4299666f5", "sighting--8e95060a-5464-4dd5-8c6a-30b5ba77e83c", "sighting--8d8dccfb-1374-4aad-b646-14b47cf6f892", "sighting--3eabe3f3-1948-4844-b227-5fe042a12833", "sighting--422c3405-cf42-4a8a-a55a-0cd45381e687", "sighting--0a1e4843-b6fe-45ea-8ab3-43e636995a6f", "sighting--0cede736-836d-4731-a650-cba0a5d9743c", "sighting--978b7b58-1acd-4e39-8108-1ca452f67bc3", "sighting--23abbcc6-daab-437a-bd1d-763e2d2e989b", "sighting--8ae2ed63-bd2a-489a-96d7-1b0e7556cefa", "sighting--186a509a-acdf-4f3f-a43e-f1fe9bc4c2a6", "sighting--2f4794d5-92aa-4352-8576-b7af86fabd1d", "sighting--951e94ec-29c5-4762-8f85-a6aefea13dcb", "sighting--a1eb8d7a-eeae-4f24-ba84-97809967ca21", "sighting--01e9616b-7c32-40ac-b694-b20d62732ae1", "sighting--bb9e2d7f-1402-4d3c-968d-49940affd8d9", "sighting--6283a0eb-a6c5-425b-b5ef-aa3fdf20f317", "sighting--8507cd2f-e928-4123-a964-d79448643e13", "sighting--da331a58-f30c-419f-932b-e899f74337dc", "sighting--9532f1e2-904b-4c9a-92a0-e47dd54aa565", "sighting--c9196839-8824-46aa-a41f-1f03d1e0a934", "sighting--4c6d1193-8a3e-4f21-a919-fc32afc287f4", "sighting--00b6aa6d-5878-4db4-8e6a-77da72fcfb2c", "sighting--659db2b8-76f9-40dd-8404-e049e5409931", "sighting--e93fc605-8333-4602-b055-d7867ff4b057", "sighting--c6da8074-676a-479b-afd2-2545416436a5", "sighting--38cfd806-c61e-4d3f-930e-dd89a08b23f6", "sighting--4741948d-a7a5-493e-b77e-d958f438fd50", "sighting--f3e1d9fa-8b39-4b6f-8829-247fbf1789eb", "sighting--f333bcd4-7709-453d-bced-20a8ce221478", "sighting--9828c944-dc1a-4303-a426-e1ad5e293015", "sighting--37f8361c-b091-4e09-94fa-d16d089ddaaf", "sighting--557464ce-cc15-47b5-895e-b7ebfa84f05e", "sighting--0d22151b-f664-4e04-b5cd-56868aae90f1", "sighting--a8925a22-2fb0-4586-ac01-5733f1376a20", "sighting--d9f61373-ac21-4a67-93c5-7907fe166e3f", "sighting--f9205727-c231-4d8d-8da3-0693d8d88899", "sighting--91e32565-c255-4fd3-960f-8257907aaefd", "sighting--601bea13-37e8-4864-a06e-74765fb4c8fb", "sighting--d35dc134-a3a7-42ee-88b3-8296ec40bce6", "sighting--5a98924d-2907-43ab-94f7-88a7314b0bf7", "sighting--b7826198-9eca-433b-91f9-c169e7579170", "sighting--22a79db3-67e6-4d48-966e-ba81fe8500ce", "sighting--f46b6bf5-1c16-4fe7-b721-03422d9e4433", "sighting--fe48f1d9-54be-4536-a99a-922e35171752", "sighting--3185ab30-5c4d-4d07-ad68-7b1590825df3", "sighting--128fd800-5837-4cb9-9cba-26920481ca3a", "sighting--73c7536a-f3bb-4208-8755-89967f256269", "sighting--01e13697-4f53-4229-81b4-bb5a04889a92", "sighting--e2da3083-589b-4c58-989f-3ac99f4cf702", "sighting--aacd90a9-363d-4d06-86ad-27c7038c27d1", "sighting--9afe72db-aaf6-46c2-a153-8e6436dceda2", "sighting--0ea60a81-0291-4119-aab3-d7d4e9122b8b", "sighting--8b8e7ddd-6101-4d40-a8b1-31b249ad6a33", "sighting--e7bdd725-76b6-4036-9cb9-cca22b274ce9", "sighting--2dc7c610-b938-4c1e-b25f-60be9ba8885d", "sighting--1fcead86-bc67-44fd-9366-024d6e25fcda", "sighting--004429e7-d1d9-4028-8d6d-ac15c854b6d7", "sighting--f4aef855-2cdd-4d2f-a19b-bf19634a0f1a", "sighting--199f3037-9e4c-414f-a882-882417f180de", "sighting--d3a29e5f-af57-434e-b18d-a9817ea185a5", "sighting--8b68c276-c5e2-48d5-9150-8aacc9754a82", "sighting--f3d9d321-0efd-4a2d-849a-089db77a26a6", "sighting--660ff605-a0ab-4aff-b308-c787e99d0ce3", "sighting--62c83a26-a18a-4795-9442-1536307dcf99", "sighting--293e2433-1b13-4010-b776-8e7a6eb05c0b", "sighting--6ccf9339-a6a5-4e7c-8641-fd37d3667eaa", "sighting--c21d9c7f-7257-4bf6-8c2b-f04996598375", "sighting--c91f53ba-dc76-46ac-915c-219137799301", "sighting--69b8b88d-daa6-4ad3-8134-6f6331ce2a5d", "sighting--621f8ba8-2d34-4571-a347-631324346ac6", "sighting--bf64b682-e41e-4779-b270-e252f5d21a4b", "sighting--15a1df1f-eb34-4625-8e4c-6af0ff4a14bb", "sighting--d460cfeb-8d20-420d-b5c3-93762a4e2813", "sighting--d9747000-b610-4136-8403-29aad5e18b65", "sighting--83e73792-6d64-4cb6-a9d9-96646872a60a", "sighting--0df11552-c9b2-46a4-807a-adc314e4ed15", "sighting--080aad3b-0c83-4779-aaf2-b85f7f7be370", "sighting--fced4e8c-8dbd-4a68-81c7-089694d6eb09", "sighting--76334b30-73a9-4541-94c6-5fce2a8de88a", "sighting--2587a5e0-d90b-4cc8-8238-681e83668ba6", "sighting--0d3f678e-4814-49dd-b503-feb93c5ae9af", "sighting--746d24e3-259d-4925-9e3b-a27a3f5309a2", "sighting--25253097-7758-40f1-8f80-6c36c999d321", "sighting--3c0452c9-4610-4c4a-9554-e92a5ec58977", "sighting--088cf553-f591-4fda-adbb-07a92d2670be", "sighting--a32720e4-c238-4061-b31c-ea7ac944f9a7", "sighting--5e04ba5c-5c5a-4d23-bebf-0c48af44b848", "sighting--ef15346f-8cc0-4228-821e-e812bd23ea07", "sighting--b411f6c3-1dc8-4c1c-9a9f-2727c5728a7c", "sighting--160e8d16-1d9b-48a0-a4eb-eab3a952b779", "sighting--91a86ca4-af0d-4028-992b-e47a8c5b8a3d", "sighting--16ed68e6-695d-4fc2-a4ac-80aa3e380d93", "sighting--a1f27cde-caf9-4cd6-8488-acc9d173fbb6", "sighting--7bcd7325-182f-461b-b769-5a1c669370af", "sighting--4ee971a9-c71e-4b12-9f60-2a64e3d3b6a1", "sighting--67eb1adf-ce56-4e74-a5b7-6929c83c8132", "sighting--371079cc-6021-4f74-be99-6e7b5dc58a93", "sighting--ba26a3c1-194c-4cd3-ab08-bc3b9a4ff80d", "sighting--84453a1f-e1fb-4491-a118-4467a74157cf", "sighting--5695940f-6055-40f3-ae6d-a87999edb0a1", "sighting--28d6f67a-39cb-46ab-ab5e-4d18ad11e3d3", "sighting--092527fd-48b0-48e2-9139-b5f1892f5706", "sighting--dced518e-435d-4900-83d2-c9620602bff3", "sighting--534c649a-520a-4178-99eb-463ca6cc73f5", "sighting--c1c92594-4265-450d-b107-43976ffbbd52", "sighting--addefa28-a035-4df7-ac28-ff2b859778d6", "sighting--cda181f8-a8ef-412f-9b36-79451e62dcbd", "sighting--4dc6f65f-173d-48c1-a0f9-b090872f0514", "sighting--e8472351-67c0-4f20-85db-1ef81436bf03", "sighting--f2c34fcb-3467-427f-ba57-47c54aa2fa09", "sighting--213269ec-e4b6-4a62-bf17-c727824b043d", "sighting--0eadeb80-220c-49c0-9883-374a3c918ee8", "sighting--9bd06394-f798-437b-94d9-a76c2cada60f", "sighting--0ffbcaeb-fb63-40e8-9f5f-fb2194484e93", "sighting--26ee4775-ca98-46fe-90ee-37524f9fb4a8", "sighting--c1d95d50-fad9-4125-901d-5884ec397859", "sighting--a38bf5f6-437a-4646-b408-e6644662481a", "sighting--2780c2d5-72cf-4bb5-a287-b9be450245ce", "sighting--42062dcb-c558-4f16-a4e7-a9d7d504d7f4", "sighting--b747576a-8628-4f35-8489-6b28df757286", "sighting--7fb292cf-48fd-41b6-ac58-4c46ca84c6e8", "sighting--dfeadde4-2462-4660-b566-678b9cc40aa6", "sighting--b2429efc-9e0b-4d79-987a-56043ecfd805", "sighting--e4be8508-e355-4415-859e-ea2e4f7a93ac", "sighting--7bf1deb1-6e2d-42eb-ba50-992db3112a09", "sighting--864a88bb-726d-4d19-98a0-e20f70693d0e", "sighting--0508806b-28ae-4c00-87db-0fd6b196b935", "sighting--fe5644be-8b0c-4656-b9b7-a78cd8018c88", "sighting--35deb204-8c60-4de8-9d2f-e6b2f7c5dc39", "sighting--0b2ff91e-77b8-4061-aa8e-f77afc903a9b", "sighting--d16c622e-937b-40cd-8c5f-6ca5a56133d1", "sighting--c037f06f-7a15-48d2-821f-585c3fbc5dab", "sighting--26ce6ff0-49c2-464f-bb27-ce4155e19457", "sighting--eab1d89c-5c89-4e19-9d91-f69c9f04d6b1", "sighting--e9972f18-07b0-48ec-9132-aa3ae9398806", "sighting--c31c4d62-91db-41f8-bbc4-39fbdfd16d12", "sighting--75616c9d-11c1-4458-a29a-5fdbb0932235", "sighting--a85c4287-0a41-4e8a-9c23-45da7655d0a9", "sighting--9cc8c5fa-41d1-478d-bd2e-a7ba238b37e6", "sighting--51166dbc-079c-496a-86f3-fb516509ec33", "sighting--09c4640b-a2cc-49a1-8e5e-66a68aece32d", "sighting--9d56bea3-fc77-4998-8a6a-ea797b7011cc", "sighting--c6c64cf5-4bda-4879-a866-7c5c4a8ac3d2", "sighting--984902cd-b0b4-418e-8efa-a8b8cc393bee", "sighting--eca7d1fe-e5fd-46b2-9466-fe5b99408f47", "sighting--16356a8e-c803-40cc-86bb-0b4f9babc7df", "sighting--6bc6fcda-eefb-4ad1-b778-7d287482a5c6", "sighting--0465557b-226a-4f4c-ab37-095fc3b60d86", "sighting--349e0f6d-d2aa-42fe-b687-2cf18df1c425", "sighting--0706c45c-00df-461f-9614-0969ac6fe199", "sighting--c4d488c1-d4cb-4a36-97d4-8e87cda63d51", "sighting--761e6d7a-8b93-48bf-8dec-be2bd8f6d7c8", "sighting--1b70c699-8449-43c4-8a7a-c888cf5b1ca4", "sighting--df9d685a-b2ec-43be-8ca5-8d0bba0213c4", "sighting--f2bb5563-908e-4728-99d8-2532d0fc471b", "sighting--37935b68-bf47-4cc8-8456-7bac84a94ddc", "sighting--5682b17c-62b9-489a-922b-7e7cc21207bc", "sighting--ae6299e7-31e9-43f3-bb87-c58cde397b5d", "sighting--c796534e-0c4e-401f-a6eb-752e9e652b35", "sighting--25b42e3a-b1df-4824-b4fe-ed978886425c", "sighting--212b8e65-1e6f-4c2b-bb7e-337af5c5e7e5", "sighting--aee2ccb0-8978-4917-8f5f-cc5f84aba712", "sighting--446b8229-a7e8-4f95-b0f4-99bc0d3bb417", "sighting--d24c26c7-4f63-4c5f-b9a5-c4f3df6a10de", "sighting--05359ae2-22f3-4a30-b42f-d27ce65903d2", "sighting--745ee5e0-6bb6-4f63-9a13-47182a897bf3", "sighting--65612db8-0d9c-4d87-a2ea-54444aac2227", "sighting--69cfac42-52a3-48d4-9b2a-b05162bfbebd", "sighting--981fcf22-9845-419f-a346-b8cd7b741b74", "sighting--9db132a9-3387-4362-83db-ab407d5a696a", "sighting--f979d7ac-002d-4b69-a42e-de26c3578bc4", "sighting--5c5aca65-174e-4b8e-82f1-a206bc7d4230", "sighting--386978c0-ddc9-47d9-9f4b-307c1a9c0c4c", "sighting--4a844f79-6fa3-4a02-b8cf-c4f945cfadd6", "sighting--0bc41aae-5bd9-429e-9272-a402bb903f4e", "sighting--e06d29d8-3a24-483a-b8ec-0ef53df57521", "sighting--5fd33d6d-6895-4b66-81bc-f10bfd8291d7", "sighting--96079ee2-12b9-4f20-a83c-721f0560aa74", "sighting--b589b181-33b5-4d71-b3a2-d8beed6f8e0c", "sighting--7073c0de-508c-46fe-bd14-f50e7f1bdedd", "sighting--fe4b3a0f-b40f-4273-a33c-4605fc1f0f96", "sighting--b056eea3-092b-4200-9457-3a93fe44655f", "sighting--713a9bdd-c272-473f-8645-798b23dd7894", "sighting--26329c35-59cd-40a8-86db-38e82304d564", "sighting--418b59b1-cb34-4c13-afd0-8a5aa268046a", "sighting--e9dcdcca-a205-49ce-a77a-8ddff9032276", "sighting--295eb522-03cc-4a31-a7f2-c75945b67712", "sighting--56dc5ab3-7808-431c-9dcf-30b2f67d5120", "sighting--cff476c8-fef1-4445-b6cc-05d8e012cced", "sighting--17043adc-1e92-4328-9b2e-67de1eb96a4b", "sighting--f52458ff-2bfb-4616-be17-ebc559bbd63e", "sighting--3eec7684-1098-497f-aec6-7a1d38fd21e0", "sighting--1bcd8374-f5e5-4d8a-b36a-1505f3ead30c", "sighting--989462c4-0cc2-4383-b5d6-6000de136f23", "sighting--aa861a11-8d9a-4bab-a46b-87d4d3d7bc86", "sighting--3e4082d9-953e-4183-8cf1-bd82acd543bd", "sighting--a02e3985-555e-4ef4-bb41-70a91c5ff86d", "sighting--fdc9de6e-6652-471c-b4ba-a7e922eef1f6", "sighting--3a20f2e6-af99-44d1-be64-15d02ce5518e", "sighting--74d22091-f493-4ad5-b98e-67af47d6e9df", "sighting--dde91aa8-7d97-4fc5-9dbc-62eff907b540", "sighting--90eac04c-abaa-44f9-aae2-1b44a0cb9336", "sighting--2b40c611-23fb-4c38-9c52-64416c8e67a4", "sighting--a9ccb808-fe57-4853-8262-2e9070c1e37c", "sighting--c98c6808-917d-47f1-804f-6a14b3021c3e", "sighting--06c6cce6-15bf-4183-97fa-31076c460055", "sighting--47ea25df-e3fc-4e8d-8ac2-8af036e876e0", "sighting--3e1fe210-970b-49de-8905-5a659aae9572", "sighting--930e77a0-cecd-4823-9488-8155b35e2d87", "sighting--6e552bcc-ca1e-4a30-853c-482e0680d0f3", "sighting--a630fac3-6a63-405d-a042-d9f116efbdab", "sighting--d04dceee-aec5-468a-a7e4-e2714d6462c5", "sighting--066b5ab8-53bc-4e70-9f1c-0b00156f0449", "sighting--a094eaf2-8ebc-45a5-b5a4-014b52d5efb1", "sighting--17d86671-d711-4da4-a643-456ade692e78", "sighting--a525a5f0-a32f-4580-b85b-56c55a30a891", "sighting--0bda046f-f667-4746-b4b9-bd842759ea1c", "sighting--0a806b13-8ad7-4cac-b998-0e88791084c6", "sighting--8bcdc740-942c-496b-9ed1-a956f3770b28", "sighting--49eba27b-f158-4249-80b1-570c8e5d1548", "sighting--4330098e-d74f-4135-a047-2fdcc71c5eba", "sighting--1697acef-47cf-4657-86b0-0f2f4f4b5456", "sighting--cde78c65-d0fa-4319-9343-1080ed000d8d", "sighting--e285b1a9-d9a9-43f4-be52-acfd38854485", "sighting--06032913-1806-466e-b913-55ac176234fb", "sighting--8acc8643-50d6-42a7-9b8d-8880650db29d", "sighting--496b0f9e-de99-494f-95bf-b31c87cda943", "sighting--f7126376-8a93-48fb-b07b-db69cb59c9dc", "sighting--3f90f283-19f7-48a7-9228-4b68e941e161", "sighting--30ae7dac-3b3d-476a-a53a-a6d5d608c83c", "sighting--2ad7418c-90a6-4fe9-9df5-27f7bceb4419", "sighting--ee38e40c-8570-4d9a-a2be-e70253b28d4f", "sighting--7e098d77-10bf-4abd-8aba-e7426386cc36", "sighting--941fcc89-ef0e-4f06-8d98-ac1a25e5d888", "sighting--49723383-b59b-4e4e-b859-0604ae576c1c", "sighting--14c74b98-d016-4844-8b38-56d3e5d121fa", "sighting--3ed59f1c-5b17-429a-9c6e-961b821ca7d2", "sighting--c7db0e85-0cce-49ce-886b-71e9a92f6b3e", "sighting--d7969a1b-ddc1-4f1f-afa2-a473f2f4d069", "sighting--b0f7f3b4-537f-421c-bfe7-b52e755da391", "sighting--75e127ba-dc12-43da-a7de-eff9dd82cd5b", "sighting--6e92d4dc-4ebf-48c9-b8ec-7a53c89db5c3", "sighting--e1aba04b-913f-4007-aca9-5a89a6a5b3a6", "sighting--0f0c9db7-b625-4907-98c9-0a920a177cd7", "sighting--c9e4b9dc-5f14-4ee6-a013-52d7af13fede", "sighting--d261ca7e-25a2-4cd2-9e30-89859e98066d", "sighting--5ace2cd2-3c36-4531-949f-ba21fe54737c", "sighting--2fd12bbe-d072-411e-ae50-2b6528b82a6f", "sighting--4a6794c5-2032-4952-996f-bf58b26b7909", "sighting--6b847572-5f4f-4961-8a8c-d40c9bdd1601", "sighting--cba9df22-7de3-44fb-b5ce-3bbd11af1b17", "sighting--d46560b5-3c5d-493f-a7a7-44cc15053027", "sighting--1e050480-0245-43da-8993-b0d25b68d994", "sighting--147e8240-6586-4969-aa42-43d2b26c0fb5", "sighting--1f736e8c-9bbd-4579-b830-bebdecbca491", "sighting--27d21a27-57cf-4059-b67b-9998490a60ac", "sighting--7ae5eab3-6e0f-4041-bfe7-4728f3d93e6f", "sighting--0ef56cd1-8828-43c7-a2ed-a15fd8eb8e81", "sighting--7956f704-afb6-43fa-8c57-355e0c4ba33f", "sighting--d236490c-048a-4187-b337-f852bc6350f6", "sighting--dca8255e-471f-434e-86b5-e815c247d042", "sighting--5e337b60-a942-4132-8ce6-0760d1752480", "sighting--826627f4-cc6b-416a-8b18-731f2a405e2b", "sighting--8aba7f83-4c9d-400f-ab6f-8f299b656ecb", "sighting--fcc1c553-556b-4eff-a597-f5721d888727", "sighting--f405a038-410f-4ba8-948d-6a34fa56a7fd", "sighting--f0c89a33-aa55-4459-b55d-ab195461f644", "sighting--c33f0f66-48eb-4f98-8e97-22d94db470bf", "sighting--e9af75c8-c246-44e7-b2c4-bdb645973a6e", "sighting--eeb834db-2cfe-4443-a729-804aebf2baf6", "sighting--1643678c-c785-4577-8dc6-412216ed908f", "sighting--52a3a5d6-9b6a-4093-a636-3e90dd7aad1d", "sighting--9c99bdbb-dc29-4f5b-8497-c40eb0bb0ccc", "sighting--99a2a408-e066-4f94-a2a8-510506664651", "sighting--bb793048-9f18-4419-84d6-2aaac3ea8573", "sighting--f5c51222-60f1-4d9d-a81e-f5fc5605c912", "sighting--0a0f37e8-e9ab-412d-8fe4-a2043cf93751", "sighting--9b5c9926-7c15-40be-a4b2-40bb56eca569", "sighting--6895e7d0-2283-4fc4-8490-099cc02c54fc", "sighting--1c860a11-85eb-4d3e-abd4-81c52daf7a25", "sighting--384fe093-71d9-4d0e-a141-f4aa47287b26", "sighting--ceba3069-0897-4f33-9464-3d65ae64b946", "sighting--6c801bf3-decd-4e49-8091-4bac6c487dc8", "sighting--b3a9d745-4fa7-4984-b909-f7a1dad672d1", "sighting--8dfb9c90-80fa-4b52-9871-32f465c99219", "sighting--d8a2a90f-f264-4eaa-8bd4-20ebc11d4f69", "sighting--d1468173-dad8-4415-8063-5f896a805a16", "sighting--ef388b75-86e7-4772-aff1-c32a7d5ea1cc", "sighting--386db5e4-3687-4060-99b9-e32a18702c0e", "sighting--37a115f7-13a9-4d6c-b6ca-136df5a185cf", "sighting--77c612d3-9852-4be5-b6dd-10bc6848435e", "sighting--4c5032f8-a4c1-4c23-bc27-796b20ae68c9", "sighting--adbedaa4-6ec2-4e5f-a1c1-5337ea3e8145", "sighting--c0534746-2028-491c-80f6-b422647dfe70", "sighting--eddee801-00ea-4f7e-9a69-ecf6f8bf06af", "sighting--489da399-c7ce-4cd3-b02f-0d61888a57ba", "sighting--37d72b06-e6d6-4dba-8c04-91b1ad87e873", "sighting--082f3746-2eed-4e77-9df9-f0d904e259a4", "sighting--a634dadb-3460-4d95-8c8c-e17a46654cf1", "sighting--5b71e1d7-4569-418d-986a-8d1627e2ec1e", "sighting--554b5857-3743-479e-8a3d-3c6aa80b5f57", "sighting--12d4ae52-7c82-4f7d-9593-7b78d3c66f05", "sighting--6fc03242-3fbf-4a31-8c40-bd056c7199e4", "sighting--bcda6ad0-bc5e-48fc-91b2-90f45f5070d0", "sighting--519558e4-48ad-4107-9044-424ee81c3b47", "sighting--3cee9104-5033-4a74-aabc-9148a07fe464", "sighting--097a5917-782b-4605-b0fd-b43419a77f08", "sighting--0d269c84-430a-49f8-a9be-ee8bd1f89a99", "sighting--4ffe490c-54c8-4796-a00c-03c498ca9d40", "sighting--2d049f30-d095-40bb-8aee-b6065e22e16d", "sighting--b797ac06-3763-4e10-87f9-8a3b475f7da3", "sighting--5f6b5d37-ca00-4a72-a746-b2a6b71c292c", "sighting--c3c73337-5231-4eb5-ab0d-2c705c1b80d1", "sighting--6ebcf13c-0bae-460a-ab7a-4bfcc04ee9a1", "sighting--5d98ba14-ff28-4b87-92f5-4e3706c3e59c", "sighting--48f992dd-bc16-43c2-ac05-c6a047ee8f42", "sighting--a40332e0-2fca-41d1-a2f8-8c429260a0d2", "sighting--6cf42cc3-31e3-47ae-90d4-17402ff35688", "sighting--c20fff28-8703-439f-808d-d108a3215585", "sighting--bfef8a7a-60ad-4635-b590-3ccb97e15084", "sighting--bc7846eb-8ea8-459e-9c74-fedb188cae76", "sighting--a8526bb9-e52c-4f0e-91c9-30f66971ab61", "sighting--61c05865-f6fb-4459-8cb6-495528347ecd", "sighting--bdb2b306-ad50-4c5e-8f1d-69b3c5227e63", "sighting--24ec37ae-54af-4da0-a3de-628c2513dd42", "sighting--f7f26811-e8db-44b7-a11c-97a9ab27f7d8", "sighting--57c01f77-9c55-4caf-b959-cfffdc76fbd1", "sighting--03ece200-08ad-484d-a6e2-20097d2f7713", "sighting--fee256b8-92cf-4382-8038-739fa70b52db", "sighting--1156c3cd-3b97-4f9c-be74-61d59b8dfa4f", "sighting--830c34b2-a0c9-48f1-9c03-9a6e6c92016a", "sighting--311b7faa-8d0d-4021-a64b-4f596cb0790b", "sighting--2c7e1f73-3a6e-42d2-9044-152c18cbd37f", "sighting--69462cce-0b98-4c5e-aaa6-e1b8d1161cb4", "sighting--98a679a3-1d73-4650-854d-5de551b7eed6", "sighting--16b01ba1-a29d-4e93-8b74-376d0625bfda", "sighting--3a95462a-6076-4237-9f00-6b3d898ca63b", "sighting--5dadb23a-0043-433b-a702-ff65c0e6bd0e", "sighting--5463c411-9890-4c27-afd6-12ffb6db6330", "sighting--c25f9933-d0d2-4f3b-bb51-343f78d02ab0", "sighting--ee39ed58-35a7-456f-84dd-05af90b48124", "sighting--8b7ceb07-3200-4fad-9f83-8311fe6cf79c", "sighting--2356e341-b83c-4286-b1c8-d80328c0fb07", "sighting--5ce9e467-6680-4ce1-b19e-369358b1f26b", "sighting--1bef096b-0e9b-48e2-875f-dfc32bae9879", "sighting--d017f049-86d9-4373-b9e4-d07202b7e570", "sighting--a6027fd6-5810-4d1a-931c-fd07d052db68", "sighting--24b67e21-97b1-4d98-9987-e8df1ffc34c8", "sighting--990a2d39-da95-4009-aabc-f6eb2ad167aa", "sighting--4f8479fd-0766-4ec6-b98b-6b893a0f5e02", "sighting--50606867-2f0c-4869-a95c-aa6c2294ad56", "sighting--af4ee2db-17b3-40dc-a3f5-37de71c081c4", "sighting--ff11ff7a-4e82-45d8-830e-c9ad4a7f0838", "sighting--0d7f70a7-7f55-43ab-8690-00c7dbf04c2d", "sighting--11d9a30a-2de7-4fbd-809f-0f3c35b8f684", "sighting--de612917-7e5e-44cd-9b5d-08c37fd0a1f8", "sighting--c6c9b340-de09-41a5-aae0-f8a72c59a58f", "sighting--a75a107f-1427-4f92-95b3-9f267888ce65", "sighting--52081bd3-1f44-4746-97db-a2960b88455b", "sighting--670be41c-485c-4e2d-800c-571d165ea752", "sighting--c0b877d8-ebee-42e9-a2a7-d62f7ac081e5", "sighting--e9c3b895-5dd1-41c0-b5f4-58810ae9288f", "sighting--4da21109-4f41-4596-b174-8b9ea3b0bec8", "sighting--8b1ab240-fcc3-4edb-8333-5fe8eb9bea66", "sighting--1f06e7e5-5485-4888-9f94-a0bd6d5cfc62", "sighting--22b206c9-f849-44b9-b683-a8f25d4ac4fa", "sighting--3eff332f-b2cf-4766-b587-a267c54191e6", "sighting--5976aba7-64f6-49c1-8b7e-1cdf082e703f", "sighting--cdde84b0-2b7c-4d17-881f-d8af26c1802c", "sighting--003f9fe3-fef9-4c39-b324-662998c3e3c7", "sighting--4aa6d57e-1e83-43df-9aec-d2e520e8bb2c", "sighting--76b9ad16-ddae-4bc5-af3c-2d2d8d40f72f", "sighting--9058da96-a0c6-4cb0-8842-d6a13a80f9b9", "sighting--8990df93-ab72-4422-af42-7f1ed9e60481", "sighting--ba1510d1-c245-417b-bc26-f0173507b24f", "sighting--0ef55d3b-e704-4113-baa2-898f3dd89443", "sighting--132df364-a535-427a-a4b0-2befaf2af088", "sighting--915d38e1-79e5-4249-87ba-2670aed2e9ab", "sighting--b4c95aa0-25ee-4d2a-8037-fe7e38a15c07", "sighting--3b7d5c04-dd3a-497c-bee2-5ce40cd22825", "sighting--ace18d8c-afcc-4b8a-a18a-8df81c08c01b", "sighting--0a321729-18af-4b9f-b105-0e78e792c24c", "sighting--da67088d-f9b9-44c7-a3cd-b5692d4f625e", "sighting--27299481-5ed6-4428-a9d4-f2e048cc9bf7", "sighting--d9d56d5b-4fd8-4597-b9bb-b1fecdd64341", "sighting--bdbbfc19-2367-4776-a8de-f444fa007587", "sighting--7d264ae5-0ea8-4f7d-a90c-9894be8385bb", "sighting--69ec9bf3-f3f6-443b-ad37-ee2fc7095dca", "sighting--75e29849-4cef-457c-bb9c-fb48235693d1", "sighting--de82e652-49bc-4d5c-846b-c8e6d316f6b2", "sighting--10b65b66-509f-4863-80e8-0b14b4db11f3", "sighting--728ddbd8-a14e-44b0-8020-500d6df50a39", "sighting--de18bfe4-f563-4d83-b5b0-5f07475b1b98", "sighting--931232ad-a0e1-474c-8e23-9ab6c28f7a24", "sighting--2fe569f3-1533-4e0b-a962-c68d64cfdd44", "sighting--fb1ebe25-77ff-4e38-a2f2-16fcc0c6cf42", "sighting--d9678657-5eff-4b59-b30f-f4a742619050", "sighting--99280c75-5a5e-43dd-8f8b-c5c715179cdd", "sighting--e66233c7-0644-47e6-81a3-e90fc170a344", "sighting--e9f69901-420a-4426-9f75-281c92262068", "sighting--010f1bf8-17f8-40b9-9921-6eed0283057f", "sighting--6a3f7d68-81e7-4301-9c9b-7207186de7f2", "sighting--32d49766-cac5-4ed6-9ce3-7683fcaeba06", "sighting--e6a884ee-d708-42ce-93b2-4bd3f46d51d1", "sighting--90d424dd-1a7e-47a5-9a3e-7610ff7308a3", "sighting--4d2b87df-b6b0-4557-9bad-6c238f38680b", "sighting--9cc2cb14-3e7e-44f5-b142-a4d353a2e3da", "sighting--b6c7a5bf-1362-4bd0-adf1-3fb596df253a", "sighting--fed807d9-2266-4d70-918d-636b703c9161", "sighting--da4797b0-ce67-4720-86ef-271703eb9df6", "sighting--cf0b277d-5f5f-4cce-9429-5f0c43ded34d", "sighting--74420aad-2e49-48ea-bfb8-a3fd77e837f9", "sighting--6e9572e5-0c7e-4f26-ab6e-855fa454b56f", "sighting--5b06fd88-5a8d-4875-b9bc-87c83f7243b6", "sighting--ae5802c9-6330-45f1-a282-e7fb3e2f6c85", "sighting--af34d3bb-2082-4fbc-8e33-05fd74350188", "sighting--49568fb1-c6f3-4fe2-b977-6cd9a9d7b068", "sighting--8dba5962-bd3a-4536-945b-85c7dd52a119", "sighting--475e78ed-69aa-4346-8226-a57646fcfa0c", "sighting--6ff1846e-6251-4eb7-8bf6-7adae79bbc68", "sighting--22f15e8d-5bb8-4422-8d8d-15bf5704ca58", "sighting--95ec610f-d4ba-4f7e-af66-78ad32f62f7e", "sighting--5649f995-30f0-4964-bc95-f2abe7188095", "sighting--a3b40818-4098-4484-a610-a0a009fbb16a", "sighting--c40c4d3c-e89b-4815-ac40-25ed0775bbeb", "sighting--e8fc96c0-151d-4b56-abba-09a627b3c4a0", "sighting--a15e7648-a20d-4b74-88ac-a8dd5775e015", "sighting--88101e0c-2f71-4428-b2ff-eee7c1a71437", "sighting--03522381-02eb-48c3-ad1b-e97b347ca0c0", "sighting--8ba92236-db47-4016-a484-fd87e36b475a", "sighting--c0b8c3a0-b885-4602-8964-52c18ce23874", "sighting--5cf39c02-b13d-4ff5-8acf-96094e7b68c9", "sighting--76722921-9e6e-4654-9818-0024b4d6d00b", "sighting--d0a3be31-f40a-49d2-981c-b57c3f976328", "sighting--f3f1361c-a07b-453c-9681-b0b4bb35363c", "sighting--1891461d-2f7e-4ea4-8a99-d232fb2f10e7", "sighting--9d42ddd1-a705-4693-a153-44b90a776af1", "sighting--8f21de1b-baaa-4373-8d67-8bca705bf076", "sighting--3e190a5d-83c6-4ce6-9f29-c11c6fe29231", "sighting--e1552cd1-a942-46f8-9226-56408b957509", "sighting--e0ab8e73-8262-43ed-826c-2bdbe53508fd", "sighting--1d4cb074-03a8-4922-920a-a772f81319b2", "sighting--c5b101f6-b9b9-46f3-874b-bfd6c64835fa", "sighting--11a5542a-d7f3-4329-917f-1202e2dac82c", "sighting--ee79fbde-9cb1-47d2-a645-7f88b53ded83", "sighting--044ac84d-9bb7-486e-bd9a-d273e16dcce4", "sighting--ddf0eae8-c3b1-48a6-b323-9d81965f4c3a", "sighting--f27c0694-83aa-4d12-917e-a6808c3fbc4f", "sighting--d8cd8699-78c8-46a4-9bfe-64e0254ddef7", "sighting--abce0d6b-c67d-4b63-b374-4f80550454e8", "sighting--6ca380d5-f3f9-41a9-8194-24281bf6e09f", "sighting--56a39752-4852-4211-bda1-afc3dc16aab9", "sighting--cc156c35-ba4c-44b5-a4e2-05d6977568e9", "sighting--605389c8-a606-49d0-8595-a7f25aec7c8b", "sighting--80568553-19b9-4f73-ac60-5230696e3216", "sighting--73971fac-deb8-45aa-a5c7-647cf0ac8b36", "sighting--87478819-beb5-4321-8f8b-5f655edf5c7b", "sighting--5718a9ad-bf97-4994-813c-a135056a2208", "sighting--d7fa2635-e93c-4fb1-ae55-8d5191782f85", "sighting--22ece756-b31e-46db-9c1f-da3a9a740036", "sighting--86f2237c-e8bb-4b63-b70f-862177212d03", "sighting--b3f2be87-9850-4237-a04a-f73ec9c10b19", "sighting--a00056d7-77a6-4b45-8f45-461d94ca3f86", "sighting--f49e70c4-b38e-4715-9d25-6e7dbae5e54d", "sighting--c970c191-5fdc-4167-b1c7-9b94426ee645", "sighting--7c9b2278-4a01-45c0-8a11-cad78dcdf494", "sighting--33ccf9c7-91bf-498e-8c67-9cb62b4058df", "sighting--2e56539f-1dea-48ca-856b-ca29de0bad7f", "sighting--60e1276a-ddad-40c8-a960-ec727bb96713", "sighting--f49bce1a-567e-4070-88f4-91bf378e43a3", "sighting--ffa8f15f-d332-46e2-ba12-c91b8ef3d191", "sighting--7cac8688-3211-40f1-a402-64c56f01488a", "sighting--771a8968-28ff-4d76-8054-bff041a66cc6", "sighting--2e72e484-aeb6-44fd-a2c3-1c1c6716623b", "sighting--53cac4ad-b5a9-4ea4-8441-8931587725b3", "sighting--50268b08-bd64-4c33-bc1e-0ebd479c6d4c", "sighting--69575ff6-c3ae-4251-adcd-30d22fa844e3", "sighting--c635731c-c38d-49fb-a8d9-5320790b4ecf", "sighting--95490274-5763-4ca9-a500-dce29db3282e", "sighting--b02d5b28-c07d-4de3-9082-ad3c02e8fad1", "sighting--e88a607b-746d-47d1-9611-198d01b8e8a7", "sighting--6b97739e-0708-4638-8e21-79149739fc91", "sighting--25cfdbd9-3118-4342-8093-fd655f731e20", "sighting--cc980036-3036-4bfe-893d-0e830a69d58b", "sighting--6ac40fe1-eea9-4121-a854-12bd1ebbb744", "sighting--e4de827e-f3b2-4978-9bb5-f6748535678a", "sighting--e8381bf9-49ab-4302-8ff9-287662b2d2c0", "sighting--c8fa6902-0b47-4869-95aa-c9c94b355f30", "sighting--3b2dd3c0-fae0-4dda-93cc-978fa219cfcf", "sighting--d4f0ec37-e829-428f-8c61-c7b6aac7fbe8", "sighting--2eded089-ac89-4caa-8570-02fb03ece5f7", "sighting--b5a6e519-a85a-4fe6-b482-2260b6da25c7", "sighting--35a1aff9-af86-42ff-9922-9a97a0d0381e", "sighting--96755e6e-b85e-4004-a366-257958ce4caa", "sighting--ad1f7f7d-d9cf-4351-a86d-be8230aef363", "sighting--c2bb2ac4-3507-4657-95c9-8b259f221456", "sighting--ebbddccd-bdbc-4f9b-8332-c3e0dc732859", "sighting--d57122e2-0de2-40b5-8bfe-a10cbdd915df", "sighting--da9f2987-14cc-4616-bab3-1b202fe8b126", "sighting--d69bd325-d965-40b7-9be9-37a30176b1cc", "sighting--7d349bed-6fd4-4bcc-b8ef-bd230ceea292", "sighting--09b01cb1-94f3-4a47-b69a-7ea6d55bd938", "sighting--71e8a1cf-3065-44c0-a585-3ab44ce6a8e9", "sighting--fbcc6213-9392-4224-8a1b-5b1590f84f51", "sighting--98a38dc5-d0e1-4d2e-aa81-d0a65f866e24", "sighting--d0c881be-f14f-480f-b6f8-7368f50a9361", "sighting--b84fb3cd-dd05-4833-89d0-bab2ca75c2a1", "sighting--48d825a2-f626-4b6b-a484-666292f5e33d", "sighting--4e90b821-326b-4436-90e6-e1004d2ac299", "sighting--86625496-d0fd-44d2-a385-b8a31e3db500", "sighting--594057fc-cf48-4548-ac59-c7c756c672d9", "sighting--92466bb5-e551-4d59-b3ac-382f0c73ba69", "sighting--55a77a1a-99d4-449c-9afc-f494b806145b", "sighting--82caf9a1-114b-4487-a9e6-5b0ee9b52f12", "sighting--e5ad0024-215a-4eb6-b57e-0c398a6a7005", "sighting--021ba5d6-c258-42e6-a192-951a073d8368", "sighting--fc6d10aa-1e18-41ae-a3fa-3fd983867969", "sighting--548947f8-abb1-47ab-90e4-9bfec97deeb1", "sighting--c8f4f487-c625-48bb-af5e-a81366e618ce", "sighting--8c4d5fae-f092-4e88-9ae9-7e7c65133ee4", "sighting--dde66d70-834b-4ac4-8463-05f50d8dc6e1", "sighting--2bc464e5-6a5e-4ff8-b32c-7dc088a259fb", "sighting--20ec37d7-dc2f-4032-80a3-5e7ba8bff179", "sighting--4308a67d-384f-4521-babb-b91b761a813c", "sighting--0c0c2174-3f89-4c37-a8a5-618f2206d4b6", "sighting--d30ef1f7-26cf-424c-8ab4-fcc0936f96bf", "sighting--632d0d59-bfc2-434b-8935-ad180ff20d25", "sighting--9ba5fb82-b9c1-4379-b723-a6d7b89ca88c", "sighting--63c74e09-cad8-4fdd-a01d-e1f95e0fe3ec", "sighting--97d1268b-70d0-4ae4-8a12-442afbb96fca", "sighting--65d6140c-b588-4d14-ba68-0f281c25f3ec", "sighting--daaa5d6b-c98c-4b27-b16a-cabe0f113167", "sighting--272e9d3d-2ae1-4210-ac97-477e0922aae3", "sighting--86880fc2-5895-4f4e-8082-76230b581547", "sighting--2d6b2c84-f9d9-419e-a7db-17d62db565f1", "sighting--646b009e-c846-437a-9ff3-a250182b33f8", "sighting--1964be67-53af-4281-82da-dcd2b10e6212", "sighting--7d8f4310-67d7-4459-a3f2-6f21fd2bd72c", "sighting--11203aa7-d45c-400a-bc14-03cf7b14976e", "sighting--e686be04-9a55-48d7-bf42-0d4c7e815e18", "sighting--b30927e1-c0ba-4798-9887-4f95984f02b0", "sighting--17ad16f1-1c21-4ce7-9ed3-b87232403c49", "sighting--59cc2df3-5dac-4207-b56b-ce27a6ceb686", "sighting--2f5f0133-aca4-4103-9334-63d46c7defe1", "sighting--48d50aa0-db6a-4745-b9ef-6ffeabe47733", "sighting--484cf4d1-74c9-4618-b5ba-4c810a41e827", "sighting--4661f0b9-f30e-4375-a5e9-2972a321793a", "sighting--d5eb4f55-6fdc-44d3-8025-36dd826db3bf", "sighting--45c9b701-d8e5-4c33-94fd-cb8d4cb04bed", "sighting--9c12e0d8-08ef-4dbb-a74b-d6e5dd85cf73", "sighting--7e932556-18c4-47d0-b066-2a99ca148934", "sighting--23675c81-c44b-434e-ad99-1e4679892a2e", "sighting--5ed92b97-c34f-4ac0-b3bc-29a544a4b093", "sighting--399c760a-2165-490e-9275-9d82986cea3b", "sighting--c52ff193-7de8-40d7-9752-d877f0375a83", "sighting--d77105f2-95e3-49bc-91be-bf2d6711b99b", "sighting--1d31c218-c872-449a-a4b0-34292631d3a0", "sighting--f129822e-98ec-4bea-9603-b891acfa1f26", "sighting--8e05d494-48e6-4616-af1b-1c52dee227b0", "sighting--9208a121-f8cc-4c4c-b199-e18f437517ee", "sighting--29c79964-af5e-4e5e-b8bf-05b6d8cffff6", "sighting--ba3fb67c-9065-4548-b39c-56d9276666b8", "sighting--c530cd5d-8d70-40f0-9fc7-2ae528b0c86e", "sighting--170ba267-7984-4031-9aaa-770899794451", "sighting--9287ce39-d064-4862-89ba-5a8efc7d6d69", "sighting--86f3d6e5-ad57-4727-9de1-fd7845ff030b", "sighting--7b3458b1-1c0c-4e9a-913a-ff9395afa2b9", "sighting--7126022b-fc95-41c6-9581-68a124a6546f", "sighting--990ee15b-c2b4-4988-8210-b7e3c1e9f534", "sighting--046b2a24-98bc-4c33-84e0-e7fe330c743e", "sighting--d48a04cc-9dac-4e77-9bdc-35667879b8dc", "sighting--afb4996b-ee98-4ccf-8458-42b244f9155e", "sighting--6d0c0614-e8af-49e2-88a9-ca13fd53395a", "sighting--07712f71-d97b-4db3-b94f-58fe95216b75", "sighting--361dadd3-aa74-439a-8b55-dec3ccd8f6dd", "sighting--2c1aadb4-9297-4d66-a427-69127f0e7d19", "sighting--f4b55159-6f9e-4756-94cc-c03be85bea05", "sighting--d75b9e04-fe1b-41cc-9a77-605c3569664b", "sighting--21618025-f78f-4384-9d55-4e256cdc7d56", "sighting--b692aaf9-c177-4637-8d35-cf425e88b0a4", "sighting--d7a9901a-cd97-4466-b8d4-bcdb13dbb5ea", "sighting--07a6034f-8cd6-4e96-98bb-7fcff63dc340", "sighting--0a642eac-47af-417b-8186-aad94ff8c410", "sighting--d4e23cf9-fb30-48ed-8da0-3b57f04ef6d0", "sighting--42f7bdd1-5712-405c-9164-d6244dad416e", "sighting--0acef1d0-4ffc-46bf-a51f-013218be06a4", "sighting--ba6a1d0b-da80-4c61-8cb4-01bff303d29c", "sighting--52dea4e6-4d36-4772-ad0e-93f0e90233a1", "sighting--763af98d-7a62-4932-875c-1541fffcdb2e", "sighting--eb1c4eb6-96cf-4242-85c5-bb14d8b51088", "sighting--5ceafc24-1342-4437-a9a4-9d0abc047204", "sighting--faed374e-0e13-4813-945e-cde68563287b", "sighting--6cad376c-4b2f-47e3-8f54-7e62e264046b", "sighting--740c58a5-f5cd-4db0-ac77-7a12c7323615", "sighting--9c5b4456-61af-41f1-b3a2-c55b016edfd4", "sighting--9d20b365-4820-48fb-939d-52e7129a6393", "sighting--8aef094e-cdbb-420f-aa69-a147acd17e9e", "sighting--5e336bb4-2a65-4156-8651-9f0d01f70520", "sighting--18719d07-2b5a-42b8-b228-abad4a6faddc", "sighting--ca0b4539-32a6-4db0-b306-6360f659cf9f", "sighting--ef0c90b6-0b1c-4dc8-8552-d7605c15239e", "sighting--c814dcb2-c9ff-4abe-a118-558e8c1ed704", "sighting--96d62e44-fa52-496f-b891-19d799b1ad3f", "sighting--f7df083a-cdc8-41d7-bc33-84f8fb9655b1", "sighting--14f72088-cdd6-4fd4-9d1b-dd3f3359c32f", "sighting--f7ba4b74-7af1-43e1-a93f-3c86ea9e6a28", "sighting--5c371a02-e86b-4349-a3e8-fd0e617bd972", "sighting--4a704510-5372-48bd-bd45-df771b297cf8", "sighting--020f2510-5898-4d54-ab5d-15710d474d3b", "sighting--e34b27e5-7e76-4f87-a14b-6cbccfdc78ed", "sighting--3caa7d1e-875b-4fa0-bc3e-0063ad2cec66", "sighting--78113d79-25e1-468d-8d22-eed0d84d2541", "sighting--69acc34e-d6f7-4c29-b5b0-05390d1bbb75", "sighting--959933a2-953a-48f7-92f6-cc62e2f33474", "sighting--d19a3567-1896-41ba-b6ce-7697e8692358", "sighting--ead6beef-10ac-4387-a85c-cd4ff48b8c12", "sighting--f0e4ec02-d564-4570-8f81-efdb28816166", "sighting--20830f76-c2e9-4f10-96eb-a36df83c33cb", "sighting--6ca37d4f-a255-45c4-834a-b962fe6ecdf3", "sighting--34aa9d9e-de81-424f-b718-67541f52ea58", "sighting--ab9e1d35-1595-4f31-8d4d-86f7d04c95f2", "sighting--219c39be-937d-4173-a5ec-0a66b59e1af7", "sighting--d3b190d9-334b-4dfd-bca9-e47207b5d842", "sighting--4d7309de-f463-44b7-82da-186ea6ae41aa", "sighting--dc3a8986-5270-42e6-82ca-bfc1a8813319", "sighting--8341fa12-8e54-4fb1-a4bb-446dd7028f4b", "sighting--6e4e9d58-d80c-4002-ba6a-7bfad6f483f2", "sighting--96f6962c-e9b1-4819-bebe-fca0adf86ae8", "sighting--cdae781d-9102-47c1-98a9-df3e93685b48", "sighting--b29f333e-c437-4473-b594-2ba104196528", "sighting--992378df-cd6e-401f-8a22-7036f407637c", "sighting--3df45ef7-7c3c-4e23-89b6-03d48c14ffd8", "sighting--13b8cc94-50e4-428a-9ec6-b505b8b040dd", "sighting--6c5d9dfd-62a6-4ae7-a528-b2904dede4fc", "sighting--060f1592-4328-412c-ac73-8f65e67c4625", "sighting--0f3b11e4-29c2-48c4-bb21-efbb0210a408", "sighting--090a50f6-2542-409b-9a8c-5142cadae903", "sighting--dfd01574-4ad7-4a08-8052-729cd4c955bb", "sighting--fbe39ea3-d30b-449e-9a69-72ab36363710", "sighting--bfd8b506-2050-4f43-bcc0-8f7e49304c08", "sighting--0cb6b55b-1656-42a4-b77f-997c6027e224", "sighting--e3b292ed-4aff-4136-9886-5926b02c27c1", "sighting--61b68d57-117a-412e-bffa-406d6b51ded4", "sighting--24717c00-5bf5-4878-a774-a47b167e409c", "sighting--05a6df01-b8c7-44ff-8849-55088035a261", "sighting--ce98729b-9194-4b94-921d-ca4440ca6de2", "sighting--e73c5513-3c87-4ff9-9de3-d4c38c2b93e3", "sighting--53a8939b-8531-4505-8328-d7de38d78bc4", "sighting--2929d7d8-47ae-4a6a-ab7f-ed7e99880f42", "sighting--5d0aad12-0e84-4a7c-b05b-b47c2e515163", "sighting--2e20b148-cd58-4687-8935-c4bfa09b2f54", "sighting--11b21e5f-4555-4988-8bad-3c2b882ffff7", "sighting--6c40f534-a261-4b58-ab2f-6d815a7ee4ea", "sighting--06f10b04-ae2e-47f3-9996-1e0192eb9aa5", "sighting--703b3636-8326-4fad-9bba-21fdafa1574f", "sighting--3a0dc530-7146-4b21-b7ba-9ef11c4dc124", "sighting--cfb624d7-0c89-4ff7-b919-227400a43aa4", "sighting--525da8b8-55e2-4e3d-ada3-5fd65a3c1fc6", "sighting--359543bb-0be1-44c3-abab-cb1de400f6e1", "sighting--fb8e421f-6b83-48c4-847c-0e18941311b2", "sighting--fa78209f-3f05-4435-8b74-e6afe2ef404c", "sighting--cf896ffd-8635-4ed3-811b-2dc0cdd6367d", "sighting--d74b3afc-bde1-4adc-860d-8a0afd468c54", "sighting--d362b585-87ac-492f-92d1-9c9af43683ae", "sighting--572743be-a51c-4e1d-9a83-1334f3872c92", "sighting--232d4890-9d64-4c6d-aa39-2e6a809da80c", "sighting--9cf5bd88-41e6-4b32-afde-b9772c78606f", "sighting--54c3d31e-ea53-44f3-bab6-66c324aa089e", "sighting--b9a32c1d-9f9a-4a15-a44d-9db500dafe43", "sighting--8f0dbe6d-c5e9-4bf5-8425-8d0676940038", "sighting--ad610a00-8437-4aa1-8433-e6def53d0844", "sighting--608eb2fc-b891-4e49-872a-9a4b62d15005", "sighting--03a7a2d9-195c-43b2-aa70-68438fec53b1", "sighting--cd152f4f-27bd-4a46-aadf-937e6620ea3b", "sighting--207eef6e-e9d0-4504-88e5-014fc4917e72", "sighting--f1c2fdc4-415a-43da-98e6-c21714110656", "sighting--1747fc4b-a294-4b8d-b03d-a177ac651537", "sighting--e4f80677-67b5-43bf-839d-0dec0b671d6b", "sighting--10a01355-2657-49d6-b1ca-1099f22e9c33", "sighting--654f6f49-51a4-4b42-826b-44a990e99d88", "sighting--bfb1c134-4321-493e-8c32-c1b87bf8c24e", "sighting--fd8c6bbc-6868-4a04-8db0-92e190fe0ae3", "sighting--8deb1f53-e571-4bfa-bb05-36ead59f81da", "sighting--85ffbae0-6176-4769-a7fd-f639ea140de9", "sighting--9e34ebca-de8f-4daa-9a98-57964f7c76a2", "sighting--15e0c2fb-64fd-4de2-acd0-38e75504d598", "sighting--fd884931-0dfa-47b1-b527-96b35f9cb275", "sighting--a8b29275-b183-4e26-a95e-cd1885e618c2", "sighting--91cb84b3-ef2a-4b99-94e3-6f637ef4582e", "sighting--31af0094-8577-4396-9270-908671cc282b", "sighting--35a26b49-83db-44ef-9af1-784d9aaa9be8", "sighting--33b31f7b-5b89-4b3e-a60c-2f85367937e0", "sighting--62ed46eb-433d-47f3-a0a5-245dd3bc7ec4", "sighting--aa1b458c-4587-47c2-8121-9f90cfb96a93", "sighting--7027be36-4846-4602-b252-139af680005d", "sighting--831ccf1a-69ab-4fc6-9ad2-55e8df46e440", "sighting--a4750d87-8bd6-454a-96a3-13436c5c5eca", "sighting--1a99998e-94a4-4e89-9be0-f19deb050d83", "sighting--9d7fd9d5-d7f1-4682-8d89-fda8d6009267", "sighting--d7492d89-8cbe-440e-947c-05e715b2145b", "sighting--fdb97501-8fd8-45e2-bd70-445668e6c626", "sighting--b083faa2-7b42-4317-a55a-884eb402ee73", "sighting--a7d8a7fe-6f22-4851-a46f-330a20a1c3bb", "sighting--b8f2697d-3955-441e-a941-f2351e9fe7b3", "sighting--ec0c087c-e5c7-47e5-9e6e-8f90516cf54c", "sighting--788db8bd-1391-42d6-8fa0-c9ec744a82ea", "sighting--b678749e-33be-4e0f-8140-ef457a5e8573", "sighting--3fdef80c-6c84-482a-a403-e932bb56170b", "sighting--c109bb12-f538-4c99-9d54-6263f5ddbe77", "sighting--2d50854f-cf5c-4a39-91eb-38604491d8da", "sighting--47aa1645-231e-429e-9543-018736ba0eac", "sighting--a98da4c5-2f7b-4f87-ad3a-dfe823c856c0", "sighting--1d1d557f-56a7-44fd-b990-f37832807d8a", "sighting--55b12a7e-1300-49d2-a7b5-bcf912736f57", "sighting--19c01a36-27ba-4567-afc4-7e3c3c034e80", "sighting--acb0444e-3961-4d8f-ba99-b7f149d1da4d", "sighting--374020d5-6358-4826-b00c-c977575f9da6", "sighting--de73a655-c3cc-46fb-b36d-6dc965bbc9ea", "sighting--dbe23569-c532-4ac4-a3f0-6c226e2c6109", "sighting--7798281f-e41b-4362-8022-35b6203d4486", "sighting--2c8c8074-1ad9-4f2f-b8b3-496617d25248", "sighting--638ba435-e7b1-4c21-8757-7e5b21d7fb19", "sighting--fbd97439-10c5-479b-8732-287f3627ea36", "sighting--ad42af16-7e02-43c5-abad-d43e705044fe", "sighting--e707e7ae-77c4-43a1-9fb5-68bf7334f3ec", "sighting--108e5719-a04c-4b26-b4b0-a984535974d1", "sighting--3869bacf-3810-44cb-a698-c99373a006de", "sighting--ef007af1-8e7a-408c-8698-78b0906efda9", "sighting--bb32dc4f-626a-41ad-94c9-e1e229bb3c43", "sighting--c3c358bf-0940-484f-9aac-0cb800ec4135", "sighting--37d8ecd8-7c0e-43cf-b75b-f7ca8f140c78", "sighting--2b638e32-33f6-4588-b784-c9eb79e23304", "sighting--74313619-8b26-49aa-991c-4bae20ff514c", "sighting--74d9757d-ae93-44e3-9b40-6605a88b8dbe", "sighting--74a95c5e-49b0-4911-94ca-937f84bc85fa", "sighting--928fb490-a5ec-4b1a-be7a-70a0df78be1d", "sighting--13ea11f8-8352-4108-8988-1054aa17d023", "sighting--8f88caf6-7a55-4155-88ca-d1974fbec9d9", "sighting--fd4a6466-779b-4e5e-a1d7-94fae4fcb6c1", "sighting--597f290f-cf57-459f-abf0-23abf5e474ae", "sighting--b9d14b1a-953c-4cf9-8f6a-d0ec11f95a6f", "sighting--83de570e-a81a-418b-b617-b5fd1de336d6", "sighting--4085d589-de59-4b8c-b46a-dc9518e846da", "sighting--7a342fb5-7ec1-412d-afc6-faff3ef9045d", "sighting--40d62033-2e24-4e14-92fd-78737da6ba83", "sighting--a3eeee52-fba5-4c67-a332-0d358e07f3ea", "sighting--cb5a5ca0-14d1-462d-80a8-a5baf0fbf021", "sighting--ca4cffc9-1fb7-4773-8f2c-e8099cb7a42c", "sighting--fa283375-0528-43c1-8ff5-4472d38c32d5", "sighting--06707db8-522f-413f-b6c9-8ef0be220b76", "sighting--f037e46a-9f94-46f3-ae28-acb07a069fc4", "sighting--6715fdc2-9b00-4e60-8c4c-885fb3813bd3", "sighting--1fff2691-c2a7-484b-93c9-1bf088103323", "sighting--a68304f8-c9fd-48ae-96b3-b3244d0755de", "sighting--afdb1a40-98ab-4dca-bbc7-06bf9da4ea43", "sighting--bee1d8ec-42a0-453d-9c5b-90702678148d", "sighting--b1fb06df-8db7-47e2-8aa6-b6b85f1a413a", "sighting--50d57a1d-bb1f-4486-a019-625f94e80a72", "sighting--b50bdeba-6a39-4e15-a718-1eadfa717a1d", "sighting--c318c266-6d60-4bcd-b97a-b22fb4c3cfc7", "sighting--2f2f14bb-4c95-403e-b6ba-1c533ab9ec13", "sighting--3c83c2d9-aa35-4d7e-9c23-fd31e6f1db0b", "sighting--961fc8c3-b378-427f-98cf-4b6242b21aba", "sighting--ee0a75fd-8d41-43dc-a1a1-e8cc12d6473b", "sighting--fecba3c3-7398-43ad-8764-a537ec8ea8f2", "sighting--5aefc926-3358-4df5-aeaa-3055d87aa915", "sighting--d467408a-35c4-4ad0-a480-9cb09eb24219", "sighting--0d43fbe8-2a4c-4c26-9e9b-ab68615acb45", "sighting--c85a6b58-330a-4111-b23a-5c7b7067a65f", "sighting--69d722f2-9681-4027-8031-544d5575593b", "sighting--e1fa4866-0c6c-4b2c-a93f-f30e850475e2", "sighting--6f9c910e-2d1b-4861-9184-55d81cc48c32", "sighting--e5ca20ef-fc59-40fc-85c9-9f67e1979c77", "sighting--eb74ae7b-529b-4d49-b195-896d3e7b15be", "sighting--877c3752-1ec5-46d3-ae72-57c360f56486", "sighting--0e30eabf-382e-447e-88c8-fc310e2d1ed3", "sighting--59548cb4-1aa5-4c8d-b3e3-7aa588f81ca4", "sighting--fa72728a-15fa-4a59-8046-42a3448e6784", "sighting--1da1c8ef-7abe-468e-832a-a7d96d8b82d5", "sighting--4feb8e81-529a-481f-8d6b-43818b122472", "sighting--156bb45c-323a-4cff-8539-4e908298f791", "sighting--f5c87f4b-a8bb-4da5-8cd8-525270b074e4", "sighting--c4cce18a-baf2-4d74-bd4f-96812c6bd529", "sighting--486c8eb0-ddc4-426d-9ca4-9e14bc198142", "sighting--7fe4066d-3145-4184-91a5-82aadd6f130e", "sighting--6338eebd-1e91-4eb8-99b2-da201c81d08c", "sighting--c3d5d1ca-b432-4aa6-aebe-3ffcba0301dd", "sighting--aec274e2-1ad4-4345-acdc-65167bd8f6d1", "sighting--cf40c2bd-78bf-4716-a591-e51cb9ecad87", "sighting--1a482e08-4966-4778-8309-94858362ec8b", "sighting--5b51ce4c-3ffb-4f93-8005-367ee789dcb0", "sighting--baac4a1a-a76d-4c4c-b6de-cdcc582e08d6", "sighting--4998fb70-b035-4a71-a32e-31c365ed362d", "sighting--ac514b2f-f8b3-4c9d-99a1-d60c8bb7f727", "sighting--3733369d-fe9e-4c38-a667-70812d22c759", "sighting--8f7e509b-07a3-4243-9491-1f7d863c4e1a", "sighting--5eac9c96-6a49-4cea-a0f2-ee1c899d64ca", "sighting--c33e218c-ec06-43bc-ba69-fca6450f198e", "sighting--179651ef-b56c-4457-ab76-7499dfe4e2de", "sighting--b425bdaa-eaf1-4f86-997a-1b10dea49d25", "sighting--4b3e9bd8-e921-4620-944f-b621cd82cf53", "sighting--0a14d697-6153-4a32-9005-a529ce9b2668", "sighting--58304aac-96a1-41b3-b1e7-450488c33548", "sighting--553b3385-b4ae-498e-bf7b-c7534a282c72", "sighting--d5ceaa56-9e09-4989-9181-5ec05c958ee2", "sighting--075ec693-9dec-4933-878d-1ce2f863e392", "sighting--e8e87ffd-ceee-4d17-a9f3-1ad040f4337d", "sighting--640535f0-a436-4ab9-87e5-13a1152bc5f5", "sighting--f848f4ed-c64f-4335-a6bf-a02fab7f77a2", "sighting--b8d856e1-f402-4385-acbb-f5a99d99d74b", "sighting--60282dad-37e0-4487-928e-c46b73ff3a5a", "sighting--8c2178cb-cf91-4b7c-82e3-6153635bd14e", "sighting--348c8f49-a3ef-4289-a0ad-411de4bb073b", "sighting--1f3ae562-7297-47d2-95e5-c40b934e0067", "sighting--b98c1022-a549-4e67-857b-1f3690a14626", "sighting--b1e742b1-f25d-493e-818d-1c466609865d", "sighting--c8138cba-c40e-4977-bf20-0394e2c25777", "sighting--9e6c082e-03f8-4a09-b594-51ce98b093dd", "sighting--a1f525c2-5e44-4bbf-9a14-7da170a81cbc", "sighting--d0fef195-7711-429f-beb8-194c1284c1cb", "sighting--525d4a38-3873-4807-b023-c51def47bd5b", "sighting--6012c1ed-788d-4513-b621-56457b2bcf53", "sighting--30d0ad22-ff71-4d37-8434-531c73dff411", "sighting--105e37a6-a900-48b3-9b5e-1345a4e2aead", "sighting--c71013e6-5b0b-49f4-b683-8812d233fef9", "sighting--1ff0504a-c048-430c-bc34-1b53fb654232", "sighting--0bb62ffb-6f95-4d2f-810c-52d0441afb3a", "sighting--42820766-5d4b-4d6e-93de-5c35ff92e38f", "sighting--9383a7c0-80ae-4c23-b18b-9ad6a559ea55", "sighting--866663a0-a3a8-4dc8-9302-80ea686f3b3b", "sighting--1ed69588-f7ae-492f-bd67-510fb2b63b6e", "sighting--a91fe037-4dc6-436d-b1d5-f9b16207107d", "sighting--09fe9086-7953-4855-ba0a-0b604c0c45e3", "sighting--f4f0adbc-24fd-43d0-8a8e-df92d6b5d239", "sighting--11d46e4b-5a06-48ec-a41e-512c8dff969e", "sighting--996876de-c39c-4e29-9af4-7e713bc330bd", "sighting--c4cc2234-002b-42f2-81b9-6c91e9424b97", "sighting--9bbf9a74-f231-49a7-8862-e208e3fc4a0a", "sighting--b7d6ec48-5d93-462e-bf11-a5e937ab3600", "sighting--8d7d6d45-cc25-4f77-8122-0170d2aff4ec", "sighting--7c1761a0-3f86-4776-9223-957479933b87", "sighting--e28569d4-66be-49af-b4d8-cba7ff8a82f6", "sighting--ab606d7f-2005-4a9a-a2a8-6c878274b25b", "sighting--e6ee1f1f-25f7-4061-b5eb-8ee9fb15c0ad", "sighting--7722aa94-2dca-4c6a-80e3-5b68763d4200", "sighting--6ab75b53-31f4-4bbf-907e-1ce843ca7a86", "sighting--d1fb9c3d-03e7-466c-8bce-db09b242bb68", "sighting--1e5c2ce9-77d8-4133-b88c-8fc2cbf8fdf5", "sighting--2fc95a1c-5acf-48e8-ac2e-470944b245c3", "sighting--2b67a947-fa17-4aec-b6c1-3e4205a45c24", "sighting--6865b030-6c91-4bf5-839e-0f1c933380e4", "sighting--56422dbb-386c-4975-95a1-ef494e310654", "sighting--c6d426dd-4abe-4167-9695-9954f6a7724d", "sighting--03b44502-15b2-400b-ae91-4b7f5609863c", "sighting--25e730da-4985-44a3-b01a-03abf665d2ab", "sighting--ed9cee9d-a140-4ebe-9c2a-5053be2fc6c5", "sighting--d97257d7-2b8e-43b0-9210-53e5353930ac", "sighting--ef04249e-83ee-41d8-9d01-5e7a4ffe464f", "sighting--b857d140-aaaa-4029-b6d9-3bcdd5f5c3a3", "sighting--f260d124-ce73-4265-917c-b4db5478df6f", "sighting--5bc93cd3-7766-4a06-827e-42b6a44e1d9b", "sighting--f8b626a3-a396-4ffc-ae32-eadc19d59a65", "sighting--842f4337-4984-4cfa-a839-b0626a6b583f", "sighting--d9e5c034-dc6b-49b9-9b46-045159c230d3", "sighting--d35f5d42-d741-4a9e-bd37-3cfbd8eb3a15", "sighting--61f37cc1-1b16-433b-963e-88fed92a59f4", "sighting--ced956d4-58e0-4918-a8f2-1121b09ea34b", "sighting--e00f9a64-befb-413a-95c9-d63ba2374df7", "sighting--25ac17cf-e40a-44ae-8bc2-4b0f6b6e09d6", "sighting--a4bd91bc-a4c7-4dca-84e9-2bb4faa19150", "sighting--8baa55e4-f955-4072-aaa0-c7482d14cc09", "sighting--ebb07c23-096f-494e-8a9d-cc3033f674b6", "sighting--af9dadc4-ad09-49f6-9352-eda2106ff04c", "sighting--4f1a22e3-b52a-4f19-88e0-74c0240ec5f0", "sighting--d5f5afea-fb9f-4148-a6cf-d956b24b66fa", "sighting--e43ea621-7a16-45e5-bc1c-7e6e170231e4", "sighting--0e428666-d614-4ae0-8956-4d7325bcb297", "sighting--9ec88a0a-4372-4d57-a805-204b40561b07", "sighting--121eff84-e143-40a0-81f7-e88abb59d081", "sighting--dec808fa-f009-4323-aee8-59f0a6d73c3d", "sighting--7cbd118e-3795-4195-af6e-6c715502ba35", "sighting--789990c9-5e80-4887-9b4d-c30ca4991c6a", "sighting--21bbbe18-dfc7-4ade-85b0-c458145742a3", "sighting--d41ba451-b11e-40d8-9b2f-27a01562e086", "sighting--02fa811f-2b12-4b61-bf29-82dfd86dc5b6", "sighting--de0390ab-a0ce-462b-830e-f135a7bbd743", "sighting--eceeaf0a-e5de-451e-8e37-33977c4687f2", "sighting--a506cf0b-694b-48c5-90b8-a576061e7348", "sighting--f422f8b7-f10f-4406-b2a8-f88566dabffe", "sighting--81e47bee-ae81-41df-92be-0f2c2d1ff826", "sighting--435a46fe-56e9-4555-91a3-73b792b57916", "sighting--143aca4d-e495-4da9-9dff-b24995ed870f", "sighting--1038afd3-f0e7-4103-8727-06fb01f4df84", "sighting--dce640bd-73b3-4cac-b7c1-400ec506bbe9", "sighting--e1205b34-18e1-4d54-9810-f9ea71420b99", "sighting--f63714c0-855e-4372-9225-7ebc04997eb6", "sighting--c944f879-63bf-4902-9258-96d99247dcd0", "sighting--f8867087-2dde-4f7b-9942-fa8dddd236e8", "sighting--386fdcc4-a3c1-4297-b294-181fe9d5a792", "sighting--68cec316-e849-468c-bd5c-efecd705bdbb", "sighting--f6a39d6e-5f76-4eb1-8901-5c3f71a7a278", "sighting--3d345f2f-1b95-492d-b31e-434042969ce3", "sighting--edd7e495-c400-4a9d-88ed-9491b8e7bff9", "sighting--c863c6f3-9d78-470a-a2e9-234fc56e67d8", "sighting--12494d51-3bbd-4529-9d63-cb4e32e889e4", "sighting--bd676604-59bb-4f4e-81b8-d8fb906ebac6", "sighting--3328c21d-8bda-49ca-bb8e-d0186000f79d", "sighting--79c12e7b-4693-4399-bfb5-8f870b1168f7", "sighting--ab4fd23e-d64b-4264-98ce-0d0b7ba1707f", "sighting--e1e6fd55-441a-45a2-951b-079991499810", "sighting--4d7bb95c-60e6-496c-a548-01c0f89064b4", "sighting--48750152-994c-493a-8412-0b26f85b0852", "sighting--f93ef76a-d81a-4d20-a9f1-7e55e281809d", "sighting--a4a0ed09-bb7b-47dd-8401-fb020153bcba", "sighting--6e7a3fe5-76f8-43cc-8c30-302b71b08608", "sighting--43bc96b0-37d4-4113-a11d-635e482d593e", "sighting--ee8b1957-a68c-4198-bd06-643de1ed12c0", "sighting--d30ec194-d399-47fb-b20a-20ddf8128684", "sighting--cb155447-0aa5-4d04-a099-e214e48fc9d0", "sighting--a7fd2f56-4568-4ca7-a93a-f0425c76bc2c", "sighting--3683f430-f639-4b1b-99f6-11b3d19bf3ff", "sighting--8de19f6d-ea9d-42cb-941b-fa71c6d8dcd0", "sighting--793d5beb-ddfb-46db-8e9e-d34809f8a474", "sighting--bd7f2f7f-bb4d-41f6-8fb4-d4da6a3e9b11", "sighting--802ad414-fe0b-4a62-acd7-b5bd8e27bf28", "sighting--6d4a4284-708a-4e47-a078-1a96e1bcccd1", "sighting--4b84e553-80d5-44fe-8634-f568e5bae1ac", "sighting--69dc5903-c493-4cf0-bf77-e27c01f7a8db", "sighting--d9f3fb94-2377-4c60-ad42-8f7c2c936179", "sighting--be3b7457-c1c9-4aff-9d9e-766996be9db7", "sighting--746f3637-c8d9-465c-9036-d1aa83e282dd", "sighting--2104e91c-d3b6-4e8a-859c-2295013e25e1", "sighting--d7f8928e-6fa6-4c04-a27f-96e139a80128", "sighting--475dd07d-d573-40f8-b257-9120f1074ad3", "sighting--9ea820d7-9577-4673-8151-fa8f06ec8961", "sighting--3dea1716-17db-4488-9be9-42191d09b936", "sighting--5a5ce44c-1fff-42c5-a981-0d116de5754b", "sighting--d1c3c506-3487-4266-b1f5-8970f9ea7673", "sighting--57b9d6af-6592-463d-ac7c-2177160ef8f2", "sighting--fc2613c1-3be4-4bc9-8472-62c64ffe6b87", "sighting--3fa40cc0-128a-4eb2-8197-663b651d0843", "sighting--39b584c0-0f35-4604-92a7-9397ab92d037", "sighting--24af1473-8feb-4cbb-9b03-098980c0ad47", "sighting--044c5f1e-e46f-4ec2-a904-aa68c08624b5", "sighting--88086075-e25f-4971-a78e-c64c05413f43", "sighting--b3f511cd-958f-4d1d-9d17-5bae16073b68", "sighting--025438df-95e5-47de-a44a-dacc95e6742d", "sighting--d09dc74f-45ae-420f-a298-002805041900", "sighting--14c525e2-36b1-4d74-b88c-66fb4e39a39d", "sighting--110e822e-00b3-465d-b035-4ae199dd9861", "sighting--2e4f3a01-c211-45e3-b5ac-ee57c8672b2b", "sighting--94daed55-6b3d-438b-9ebd-13e431457916", "sighting--72e84ec0-b0df-472a-99bf-f6c86ca44a26", "sighting--0fabb0c1-4ea4-4f7a-93df-76ed6eb57094", "sighting--204f5c13-c576-4cf5-aa42-a3c1d31445cb", "sighting--fa96ea50-422e-4949-8b26-c111e481314e", "sighting--bac0e4b2-ca95-4d31-9585-806195c8d5ff", "sighting--4b3f9325-f3c3-492c-8760-1a2c0848af56", "sighting--184ebd62-89a7-4272-bd11-d56e07ef1175", "sighting--d50b678c-9301-433b-baa5-1128c3ea056c", "sighting--03a5fcf0-1091-4dfe-a5c1-73048194122d", "sighting--8c26d739-29d9-4536-9cf6-05d053f1af57", "sighting--8e7ac1a6-0720-401c-bf01-042f25797e8e", "sighting--1def54d0-1576-4207-a765-216d9da0892d", "sighting--240fef1d-b8f8-4f32-a0ea-43b424b12a28", "sighting--1b3c8152-7466-4385-b6c3-706c39cc08ba", "sighting--a7b2908b-51e4-48c2-824d-3f50728e05f4", "sighting--c860bc29-335e-4d3e-abe1-2ece2e3caa7e", "sighting--f99d0b3a-ebf5-4ba0-a738-d57ac49bf89c", "sighting--a92c9d14-656f-4b7c-ba1a-c105def4dd21", "sighting--8a7cad9a-8b79-4fb9-80a6-9cd51f57be3e", "sighting--228b9836-8e53-49f0-9215-2c0b5145fad8", "sighting--63696581-a9d1-4dda-b6cd-408b7096c2d8", "sighting--3aeb47d3-990b-4c43-89fb-ec3e01d7bc66", "sighting--b4290ce2-5aa0-4b1f-949f-0b67d1300640", "sighting--f64a52a6-a484-4cca-8f0c-f8357926106b", "sighting--881ca849-fe64-482d-819f-75c3ac1e36b6", "sighting--08f609cd-59a9-4233-a283-3e2e6f74e1e2", "sighting--9fd7fcad-7696-4d74-b6a3-e5b4242e3d7b", "sighting--801c296a-6007-4447-98b9-4e34a96c75cf", "sighting--f677fd58-112d-4eed-958d-48b7e0eee5c5", "sighting--b3fb9cbe-1aeb-4eee-8c2b-bd45d0d51e69", "sighting--513042c3-fb7a-4175-9ab7-c61b0a7670bc", "sighting--a0d04112-caef-4249-b8ff-3c881d1876d4", "sighting--cc02fa4d-8e63-4fa3-9e6f-af4c088ec701", "sighting--ccf6a07f-20c6-46f4-95f3-555acf86ae51", "sighting--01567325-4148-4f02-ae60-ebe8e97676fa", "sighting--ae278ba8-5a54-4ee7-9cc3-8fcb0f88015d", "sighting--88763e11-697d-4ec8-805e-01978d5564ec", "sighting--e3277519-cd2a-43f5-9e65-f658f8bf1fea", "sighting--eddf2a15-a274-466a-82ee-f317624a48ed", "sighting--681ee8e0-0ebc-46fd-adff-98ce2c5f2952", "sighting--2c77c655-f984-42e7-9fa2-4d8341c51089", "sighting--804ec677-cc61-40d8-9772-c6e9567536b3", "sighting--5d746602-2d67-4572-8cd9-d4e17f901e79", "sighting--907f560c-1a76-44d3-9f98-7a5e5fe26b57", "sighting--7ff150f3-b045-46b6-83a5-3a0158314677", "sighting--d555aeb7-e067-4140-b575-e00a03ddf38b", "sighting--e994f645-9900-4ae9-a822-a21659eb78f6", "sighting--e57d6cbc-7727-42e7-9465-531f91a5a2ff", "sighting--b980e1a7-bcf1-463b-a5f7-fe87eec2d0a2", "sighting--5936718f-fc79-4b08-856b-7d73cce910a7", "sighting--74d282f9-bd62-4ee9-8846-4ee5b530dd43", "sighting--662a4ff9-9f11-4924-9fc9-8dcb948c1654", "sighting--56bd4883-43df-4dab-afa5-05ad164539ba", "sighting--84b1b3ba-1869-42a7-9f46-a02c6ffa660c", "sighting--3749c8f1-3df5-4189-9960-521aacfab069", "sighting--8a3fb4f6-0834-4a78-aaf8-5c102cdca327", "sighting--c2124ff3-e615-4bf5-aa40-fa502dda7c08", "sighting--459c0428-a263-4a18-b65b-41a9e94e43cf", "sighting--9678d8fb-3d4e-469b-a0ed-da1ff268ae48", "sighting--e484141d-9830-43fd-b3ff-2e877ef38431", "sighting--999cddba-dd29-4f8a-adfa-7f7bad8186bb", "sighting--3b42e122-53f1-474c-bd69-c859fb7014cf", "sighting--a573df65-44e9-4133-974c-b59675471280", "sighting--6cf5ae57-447d-4807-98ad-d747558c37dd", "sighting--81370490-b5f4-4baf-b7ee-23c6be69af23", "sighting--ae06f4c2-25fe-4c12-8be5-a5f5c200e562", "sighting--89605a97-1a9a-4d0d-8066-dd5f38919f3b", "sighting--8f3c7521-9926-4667-ad2a-0deca39cf4d0", "sighting--8a6ab78e-7ef1-4611-b891-af6d6b8577de", "sighting--abbb2b99-ea78-49ed-8345-9cef5892e01a", "sighting--b4bf078f-60fd-445f-ae41-51a2037afc59", "sighting--0a0e12e6-7c67-4f62-8599-b4602985095f", "sighting--060fdf2f-2f33-4097-a8c0-a92cea760799", "sighting--f644c9f1-5290-4105-adad-55c2ab29674f", "sighting--81565150-8077-49c6-b6da-bb370c8ec69e", "sighting--68e2e1a6-311d-417e-ad1a-8f73592ab05e", "sighting--1756470d-7eea-4561-914f-676943c5b030", "sighting--885d49f4-a309-458f-b5c6-67fa1c5be2a2", "sighting--fddae1f3-7176-4241-8dfa-0553c9e85339", "sighting--11f78c58-251c-4743-b97f-9623b0ce54df", "sighting--3cbe5841-22f3-4937-b597-d2547149f658", "sighting--8d60c4ea-d78e-4675-a635-371e86d77ffe", "sighting--428b400f-17f7-4858-957a-a1bf4bbbc1ee", "sighting--d722477d-2c0b-416e-804d-574512248679", "sighting--30fc5afa-1c64-40a0-b5d7-0948ba797851", "sighting--1f59d39c-f297-410a-bc83-d3bac0a3c75d", "sighting--77a08262-b69a-4afe-8c26-afa61405c7cf", "sighting--0eb07cfa-7840-44d7-b5a0-68c74f7a2978", "sighting--299749ab-8029-4b1e-a0e6-d4e217b3719a", "sighting--6a21cf16-b8a6-4ab2-bf80-b1a1394d058a", "sighting--683fb132-98d1-4c50-b707-76c231357151", "sighting--9bde176d-7029-4995-8cea-830d6b743486", "sighting--deb55f61-e3d2-4816-8b78-b4c5207c2911", "sighting--ca04f197-9456-4632-8bd7-b438d6cb5c17", "sighting--8a02ae3f-973c-4b15-8363-b196c560710d", "sighting--0efda2e8-f2b1-4964-a092-8cacc9cd21ca", "sighting--197aa273-343e-4dea-9c5f-961c13d0daf3", "sighting--3d391f59-99ca-44cd-bd8e-dc2905e96e6b", "sighting--1a3e5f71-c0cf-4c36-bd53-f3c63a994d7c", "sighting--a735c0c6-2bff-466a-afdf-782a41388772", "sighting--fc0d565d-e240-4e80-a2b0-69f1c593c679", "sighting--edb54b4f-e2e6-4630-a946-899b7ea4e270", "sighting--433b455f-d6a3-47b2-9619-08b27864801c", "sighting--77a33e20-cece-44b6-a043-eee267276ce6", "sighting--f5cfe2da-ec7e-4acc-bdc7-fa0efbcc041d", "sighting--a14b2b90-3f1a-45ca-9d12-83b6bf177d65", "sighting--6640cbf0-ee8e-4195-acee-085281a4b71e", "sighting--c7d59687-0217-476b-adf3-5e68cecf347a", "sighting--78b95f67-beaa-4930-9a87-3e067cdcc0fe", "sighting--8e6803d3-1a48-4cb9-bafb-b31069b2ffd0", "sighting--a2e76a73-3f0f-4677-aeff-bcd28fae6b36", "sighting--f0cd6bb5-f441-4035-a929-d0d31824ec05", "sighting--02bd3049-1b74-4224-9045-2f5427af3ec9", "sighting--6b0c9198-e9eb-4b52-b73a-b318ccce2e35", "sighting--5efa7ed2-1e38-423b-bc5f-e16791728117", "sighting--b90fc5d3-52b5-47a2-8364-aa77ca35bb32", "sighting--fe95a45c-f8d0-4415-84d4-381af8e20e91", "sighting--629e76d8-2cb6-4d95-bdfa-3e3ff0a96418", "sighting--6fa8e24d-0374-4644-bd82-cc17ad67f631", "sighting--570ceba8-f445-457a-9fa0-532a93f7ac8f", "sighting--ea5e799c-542d-496e-9b8e-de6959c0cd8d", "sighting--cac6f9bd-fb40-47b1-81de-90699aeab479", "sighting--91a85ec6-559c-4b4e-89cb-1c0b0e32990d", "sighting--b6c699c7-fad7-4521-b29f-c76df6edd552", "sighting--935c7896-9761-4e85-bd66-2c511c341827", "sighting--50532d5d-fdc7-4e32-817b-768f34edf02e", "sighting--ac895f57-b65a-49bb-8365-708d1d6f347d", "sighting--4747e8a6-ead2-4f50-b49d-956df6cdfb1c", "sighting--5f0118e8-6373-4a89-9820-a61bd26a0b59", "sighting--9c5b040f-e58c-4e1b-b7ce-b88d9b2587b0", "sighting--43f78e29-1d5e-4e77-b9ed-3f18fd71e595", "sighting--ef9d384d-6bb9-4694-8369-5b8ea3c372f9", "sighting--b3869230-78ff-422d-8ca4-66d4f196f9c2", "sighting--b77ecd34-02a2-4cdb-b168-ec84352cf372", "sighting--f73b7ede-4ebc-4d17-b9cd-4824391f0e84", "sighting--4a7e480f-275a-4ba3-bfbc-62f7fae37d27", "sighting--92ef4901-4841-4efb-9757-3f75103c879c", "sighting--cbcc0a75-f06d-4f3d-8dd1-34be12c0a708", "sighting--09e3e92e-f479-46ed-81eb-370213c613e3", "sighting--5272d41f-c04f-4c30-8e90-e0f15b41fc9d", "sighting--1facddc5-fbba-468a-9d6f-a55b64890156", "sighting--af26d78a-af37-4455-a83c-7573f8da4094", "sighting--b824af43-39f4-4c0d-b88e-22fdb3323f80", "sighting--1a5982c2-40b6-49ef-ab48-e0250619970d", "sighting--461b5a84-2719-4c77-b53a-e37df8e5e7dc", "sighting--b0aad31d-7ae1-46d1-add3-b23d8ad20155", "sighting--3228337e-1d6e-4ae1-a0eb-a6444605d53b", "sighting--4984a1d6-72cf-4e64-82d7-ebd6015a3573", "sighting--e0557dbc-a595-4f57-9d5a-39d2dba32dcd", "sighting--9286187a-8b13-4bfe-b33e-a977f881166b", "sighting--32a8aa2d-ea12-4e0c-ba0d-a9b0d57c5ca4", "sighting--ff64d829-c487-4ead-8e69-75491a2b6d6d", "sighting--eeb12211-8d35-42b0-98f1-ae108fddd5c6", "sighting--91109a4c-a953-42f9-8f3f-210e46c72e31", "sighting--8af9e6bd-64b6-4481-9ce9-297fa1493eb4", "sighting--68cecb5b-920d-4f64-b96b-e1f1f16f3e49", "sighting--e21c98be-2694-4648-93fc-7df872bd2e39", "sighting--894135ed-2c59-4f37-a496-ef387bcdf99e", "sighting--cee2ae14-6204-4369-9b23-1f73cc1e4b9b", "sighting--4fe9b105-6518-4837-ba1a-925b05d0122a", "sighting--35b99d1e-905b-4bc8-98ad-7f5d58085b4d", "sighting--2af5c76d-bfc5-4462-b805-3ab860115f26", "sighting--b1313207-5ca9-4732-9577-f02a614be08f", "sighting--53b3f5a6-07d2-432c-a833-b8b373e38800", "sighting--5feca7a9-58d9-4df3-ac0a-f43f04f5eb4a", "sighting--1e9948d6-ecd2-421b-a11c-23832325b03d", "sighting--6a3d4fd4-1bc4-4834-a1a4-23f6b6485ed6", "sighting--19624347-9fe5-4a3d-adc4-0396e1f1d9c7", "sighting--7d2297c5-4336-4c81-9467-4f29b752a5ec", "sighting--31aaef36-ef28-46af-a3b1-fe09722803fd", "sighting--7a582f2f-41c8-4957-a00d-a1f3f544c765", "sighting--8a621f71-bbe9-4184-8602-882c5560fc66", "sighting--92b74380-709d-47b8-9f44-3129bf52e778", "sighting--cffd977d-42f4-4d32-99f7-bdf6157410b1", "sighting--a4d8086d-3d6d-4f96-8b18-b5d18a8ded30", "sighting--88009e19-4d7d-4c6b-8c5d-adc3fa65e56a", "sighting--f4cd76de-fb1e-44ef-b07c-b82f84bc8133", "sighting--89bc52ed-c059-40e7-a564-49a5c6b81f0f", "sighting--83c6a4dc-f5be-4f33-b1e0-ce3eafae1bf2", "sighting--387eec18-cad0-4f2d-9f6e-7ff16f70548d", "sighting--2fce3e07-2387-4f18-9a69-9d47852f80c4", "sighting--76aceb88-bbcb-4575-bf3f-4fedfb28ab8d", "sighting--bbf5c700-30e6-4258-9899-53db67b8d540", "sighting--d29d5b8c-1d5c-495f-8724-4b5009abf105", "sighting--ec2bd6ee-328d-4149-a57d-596e8504b167", "sighting--dbfcc69f-fb4e-429d-ab83-aaed1e567d52", "sighting--449894bc-0550-4a3e-8379-ac221f4055b4", "sighting--8aa04d7a-42b4-4cad-9699-3e011d5ff52f", "sighting--7c0b5347-9b35-4425-9229-796c4bf00968", "sighting--69aaa10e-0dce-49fa-84e4-afc9f7a6b451", "sighting--968f2087-6fbf-4797-8936-d3539f741b54", "sighting--f5b3d536-a303-46fc-9e27-8a5950e9255d", "sighting--f408d945-f9c6-421c-93d4-756a9b0265f9", "sighting--e71fad30-9922-45c7-af69-2abbad631d9b", "sighting--9492a6d4-4b0e-4953-89f4-22450d88c02a", "sighting--481e9cb0-d051-4a3a-8325-bb3b026b8f72", "sighting--74fe0d0c-169b-4f8f-813a-f4d21f48a23e", "sighting--d3d1df15-8496-440c-baa9-a75991d9fac1", "sighting--e5f63f42-cdf6-4740-bfc8-fb074dfdb3b7", "sighting--780a307f-9596-4045-aafd-7a9fee159839", "sighting--0e4349cb-50db-458f-93da-751fca7b6e28", "sighting--c3e43f6d-9108-4760-8977-f0f3b7d163c4", "sighting--707bd54b-15b6-4594-96f0-51498df612b4", "sighting--11c018b2-03eb-4d54-8ccd-4c2638cf98ba", "sighting--3d7b011c-9931-4ff5-a893-2beabd5f949e", "sighting--432bf5fd-b6ef-4b74-a1a5-70f3298cf977", "sighting--c245c9c9-b2db-4a30-90b1-fea7df251335", "sighting--e052b7e6-e199-48da-9e14-f91f85b8c44b", "sighting--7a5cef97-9f63-41cd-baa3-1eff2b6b98fa", "sighting--3843f954-cfe1-49af-8133-18e7919e758f", "sighting--96a8fbca-149d-4919-83bf-6bb5775079af", "sighting--0c85a0e3-a1bf-4460-9ef3-ba03fdb23fb6", "sighting--a4cefff6-3394-4510-81e1-6eb9ee8a01d7", "sighting--11790c10-be2a-4690-a262-e58f3a8f1ece", "sighting--3b50f2d6-75d1-4da5-8b72-dfa5c0e6e369", "sighting--11e349dd-aaa6-4b71-ab5f-4cd2d6246028", "sighting--ac7b96e6-a61d-433f-854a-745ffa240d74", "sighting--fce4b14b-ceeb-4fbd-b1aa-b0e85dcaf033", "sighting--49c503f4-86c7-4b2c-87af-614c2bdf6a3f", "sighting--5742e5df-fc42-4e31-9338-c5348d9ad5b7", "sighting--f862eb49-482d-4dae-9e78-b823227495f5", "sighting--3c14197d-694f-4cc0-96c8-6d8d7f58e5fb", "sighting--24d61f84-ebd2-431b-a9b6-18b6b411bd41", "sighting--2a18589e-1ad5-4717-a3e1-b4f9159c885a", "sighting--57547f91-24cd-4fa4-88a1-da66ed0e5843", "sighting--cab7e116-66dc-4496-ab42-2c1b27513523", "sighting--15b04be0-8479-4cdb-adf8-19300537a2f4", "sighting--115994c4-d9bc-47df-b2a9-c0fd58b099d3", "sighting--6ac7b04e-b0c0-4584-add9-ea635cfdb1d1", "sighting--d456c454-a515-4e5a-8030-5c55d1a1fa77", "sighting--803ec391-c880-4783-84b5-b7aab713bf69", "sighting--8e79e27c-9276-4285-8d41-cb09e138183c", "sighting--6949973e-9c5f-46bd-b67b-b4b4758d7848", "sighting--244da4f2-a09d-4f45-a344-e1c347c692f7", "sighting--95bb2ff6-d06d-4bfd-88ac-24b5a94a4e88", "sighting--7e391590-6956-4fa1-b97d-4e5a05937da1", "sighting--496022ea-369e-4336-8986-8b9ba8df7da1", "sighting--f34ff457-e118-4818-ad5f-c1ba8d23b0e4", "sighting--5a15fc06-4a0e-438e-a75e-0f7d88ab9077", "sighting--5cc78799-f8fb-4766-8bd4-21ced535bdad", "sighting--3a56d069-754e-4789-bdf5-f6e83cd55a68", "sighting--b85a4eac-ac69-4973-93e9-e9273ef1e477", "sighting--cf753ade-4994-4618-a0bc-125477b81984", "sighting--3af781ac-a242-4936-99ca-485ef57336f4", "sighting--58e71e3d-b4ec-4f72-af15-0be6f5c4b478", "sighting--6dd0da8d-04b3-4781-a177-05d5f7f0f3ac", "sighting--04ccefb8-054c-451a-8a7b-fd4f2c526e67", "sighting--61aa7daf-c249-484c-923b-9cd1ed30d5cb", "sighting--c9c8556f-9576-4a12-b78f-24f285246b42", "sighting--0e2ba1cc-51ab-4fce-8e5c-481eadae2a2b", "sighting--253651a3-46a7-4c46-b748-96484c8bb5f5", "sighting--139238bd-2bf5-4ab1-a554-f6985a6510d9", "sighting--b1a43f80-e578-414f-b27b-1895c93e3e7e", "sighting--d6de2302-405f-468e-8966-5346916330ea", "sighting--5dd02b2f-51a5-4688-9ba2-62413743594d", "sighting--546990b7-5496-4545-80de-87075dd0949c", "sighting--9ffa51dc-64fb-43cb-9233-a93d053b7f1e", "sighting--0b8fe622-0508-458d-875b-4970202f7851", "sighting--c3cebdc7-46db-4efc-9c12-481bfbcbc803", "sighting--8ee7c493-c058-42e1-a00f-5579e0dbf9b5", "sighting--834e727b-7ab3-43f8-af98-6c8e90460e94", "sighting--bedccdae-9c76-48fd-8a4f-e60b8aea8cc5", "sighting--3f4bbce8-e3cb-48ed-9813-e05a693d60f3", "sighting--a5f6ea25-2058-4a7d-8a94-21172658a5f3", "sighting--a3825dde-fc07-4fac-aaf4-7ed3e690f1db", "sighting--c19eca7d-38d4-4f98-adff-0abd89f5ab25", "sighting--276e936a-fd6c-4d63-9e36-5ec6c366a335", "sighting--f4d58161-1470-4ee8-9cfc-28723ea4d06a", "sighting--127c4719-6d4d-40e2-8385-56a07536c3f4", "sighting--a137f01a-67bb-4c29-9e7e-9319d95c6062", "sighting--7ef044ff-208b-4cf1-90c8-f890b4f5313b", "sighting--e9ef896e-cf26-48c6-baae-2b08a65b6557", "sighting--d35d7a7b-0c85-4b7f-a240-ff749d32d34a", "sighting--00304abc-7a31-4f7b-8466-da052d959f41", "sighting--ecaf37d2-65ec-4b20-b747-95e343d67bb6", "sighting--becd75be-2cde-4035-a95a-34c343e86607", "sighting--2d9125be-bdc6-4b54-bb28-6f05e5833e98", "sighting--6bbc2b3f-8f24-4fac-b83a-53adbb93421a", "sighting--8679a1ec-e5aa-434b-b459-2aabeb9f6a17", "sighting--c48929b4-c449-4faf-862a-3c80ea3f039f", "sighting--f544f67c-d08c-4cef-b7b1-7b8a4f7dedb0", "sighting--6de23728-df1b-4ffa-b71a-99e37a3e4f49", "sighting--339eb286-2949-4fa2-9ef9-60edc660391f", "sighting--f2058eb9-db2b-4441-800e-75bee22c8c84", "sighting--b29a59cb-e88e-490f-9107-add0b472b6ba", "sighting--6725a876-a506-4698-973d-665424521c2b", "sighting--c126d635-a0ba-43e2-8295-e4ba4e7f1005", "sighting--20284fbe-7120-40aa-9ee5-c54159a8c083", "sighting--ed89a016-5e44-4ffc-a7e7-12c15f2bfb10", "sighting--11b44d8a-0e4f-41fd-a9ad-398a1d7dc554", "sighting--6419084a-9571-4e36-95db-9d02f59259bf", "sighting--5d0c6691-faf7-46af-93c3-5a6efff958ca", "sighting--fe46dc5c-cc4f-4751-a256-22c8cedead47", "sighting--74cafac7-7c1e-43ac-995f-18e8253939bb", "sighting--6b5b1bb2-e0b0-4302-a472-8c6a807a60c7", "sighting--f2580a56-fac1-4552-a29a-dca0adea665b", "sighting--b6a567e7-5d23-421c-8ce4-bb51c52d207d", "sighting--44db21df-54ac-4b95-a543-df3b3cf7f129", "sighting--e08e1253-8e98-40dc-9c22-07fedc2527d8", "sighting--28f36972-4da0-4d42-9974-1f23188b226c", "sighting--99b001ce-d31e-4cf8-8353-a57b882e608e", "sighting--90d5c86b-9d5f-4e7e-a075-68220a6beeec", "sighting--c2d6e59c-4af3-437e-90ad-f61b04e3d11e", "sighting--bbbe3a0a-f8ff-4a3d-86a7-42d37574c68f", "sighting--5e801b76-f7e8-4fd8-9df2-04276cd908fe", "sighting--2567abc4-2ecf-40c9-91ba-8a7736803a9c", "sighting--851e4ea9-3f73-4f86-9ff0-40f490aa90b1", "sighting--be7a9eda-ed46-4723-8ccd-437512084afd", "sighting--328b2a9b-18e1-4521-a15b-7efaa462fe40", "sighting--4e59cf36-5012-4b50-af59-9f02bc930218", "sighting--ed1b3669-afbe-48ad-9a94-ac56aa800407", "sighting--5b5ff857-1795-49f7-a81a-14dc44675155", "sighting--253e0209-b14f-40b7-b7d2-148599a1692e", "sighting--73c3c816-49cd-4dcd-a832-e27b291e652d", "sighting--71dd50e4-e323-4166-a43d-c225cabcd133", "sighting--4a0c6ad8-4704-44a7-842d-a75de7ef3ae3", "sighting--416d3f6a-50dc-467e-8924-fbf07feecc6e", "sighting--8ee99762-9ba3-429c-92ab-24a15dd35f84", "sighting--1672374b-197c-4b84-ae10-58ceb2de8e4c", "sighting--3a4c71a1-287a-4ecc-a9a4-1ffe0add0a2d", "sighting--00b45827-d509-4a05-9167-b046df726805", "sighting--10a4348c-8da8-4e10-91dd-453793339101", "sighting--89ba69ec-e577-49b5-b795-9b81a34857c5", "sighting--d407a6b7-33ef-4b38-b7c6-cf9e6a3cd9a5", "sighting--52fb1224-0f92-460d-a563-724f1d304a0e", "sighting--5013c5ca-9037-4b46-9923-5f41354daaf3", "sighting--51998d37-7b54-416c-9866-64562261fa44", "sighting--77463ce6-0ec3-4776-acdf-e5e878c087f7", "sighting--96f536b6-0dae-4454-834e-7edd0534a8a1", "sighting--811edf95-ac49-4e93-b53f-2dcbfb2f7c81", "sighting--45ff4a3f-061d-4943-907a-6e40767c999f", "sighting--26b4ac06-817f-4b78-a81d-bf13d81fd8fd", "sighting--b00548fe-81b7-4e23-8a95-504bc5637713", "sighting--7eeb1667-5901-4d5e-b557-025246ba5d08", "sighting--65201c2c-8e8b-44bb-8dc0-e2003bd5280c", "sighting--154ff690-e79a-4695-bbf6-f98bcd513524", "sighting--ce036863-dd9d-4edd-93bd-ed326acca15c", "sighting--ff638ace-9517-4a8f-a8e6-2a8b7540bdb2", "sighting--deaa086f-45d3-465d-8904-70c69ccd7ef3", "sighting--1f966f06-6b59-43d5-bef6-ca4b88b49dee", "sighting--82b0134f-3fbd-4462-8250-bc5705eccac9", "sighting--60ab8543-14ae-4c49-86e3-82bb17f8dca4", "sighting--a66123b5-d853-4382-a091-485b348c1e73", "sighting--af319da2-3c7d-4c33-9e32-a8b3f65a513a", "sighting--70c33ab2-8f17-47e1-b013-d5f6c317bcf6", "sighting--3b42c768-4162-4be2-a269-9c6130af9b62", "sighting--799b31bc-c91c-4fd2-b487-315ebb0d7f09", "sighting--8ef7fa6a-9930-42ba-af14-ef5d07721dfd", "sighting--c2ed266f-6704-45fb-bc5e-fadd0e63e2c0", "sighting--0e944d5a-6655-4775-b1ff-3b633103dc1b", "sighting--b098f2dc-d25e-4cfc-a81d-3e7fe3151741", "sighting--cb9b92f9-ffab-4883-9a24-8f3650492ce2", "sighting--4ee4deda-a1ee-40af-8095-49779fa7856d", "sighting--d4bf495e-531f-4dca-a15b-3e8c7f74d331", "sighting--0310560e-0b1a-4012-863c-bb22a2df6263", "sighting--0cd46bf9-6ec8-4a70-9a01-829a57dbdfda", "sighting--fdbe4f28-5705-454f-94c0-0e313c00d099", "sighting--88497129-b465-4a3d-a514-325ea6040c35", "sighting--d92399ec-f3eb-4051-a0f3-aafee05d05f2", "sighting--302eb4e5-6715-44c8-8b1b-b1bf56bf78eb", "sighting--d5c81317-df1d-4e0a-84b7-f52be8b72a25", "sighting--4714b338-20e9-4000-b059-3c714b0f8f51", "sighting--5293b441-f5a1-47c9-b851-7962838f1d66", "sighting--1c58a726-6abe-458e-89f6-0a8175088932", "sighting--1a26f881-c4c8-47a1-bd85-acba674af504", "sighting--5bb739e9-fcc0-4c76-8e30-a87f6fd09d46", "sighting--3d1253fe-172f-4e76-99b8-575f83b60a06", "sighting--2797a1d8-30f6-40ae-95f9-9e910d190494", "sighting--6e233ece-3b61-4818-af7f-efec79f4d1e1", "sighting--85611a27-5c36-4402-a1ec-2914b0517bbc", "sighting--ec1be5b3-e201-4ddf-8c8a-fbe38fc43b7d", "sighting--18fa4024-6267-42bd-b81b-555ed9d3cbf8", "sighting--eb2cec01-503a-49fe-b79b-7ac771d71f7a", "sighting--c08471ac-9806-49f3-8026-af213db0a97a", "sighting--793b855b-036e-4a72-9cda-2713e7c1684f", "sighting--1ffb4e22-ed73-4372-82d3-01d3844aa218", "sighting--1dc79029-6544-46f9-b899-157bf3f59593", "sighting--c2b078d8-a4a6-46cb-8681-3844296a6617", "sighting--a13d9e42-596e-4452-8c7d-d3eb64e80ba9", "sighting--cbdb9c86-48f0-40bc-81c7-fcddbe621457", "sighting--56117b4c-9f6b-40f1-be9b-2d15c2eae3c8", "sighting--77ec5ebb-12a8-477a-b72c-17d7817436d8", "sighting--21a4c65c-a230-4d02-a13f-b8381601a71f", "sighting--858bdf52-25d8-47ff-89f3-6aeea5bf3d7f", "sighting--66c41265-ce83-4f30-8745-8739ed88c1a4", "sighting--7893e0b9-3f72-4a93-a70d-c0d3ed26bb17", "sighting--686d99c5-141a-439f-9d99-ea3dc46547d9", "sighting--8bc913f0-1468-41a6-ab13-5da7d377b7a2", "sighting--acdeb36e-867b-4bf6-885f-3a83b59e0bd7", "sighting--4ff696d7-8a3d-467c-be67-77b334d7c06c", "sighting--aad3d647-feee-4e96-9491-b306d68d85cd", "sighting--f47d5729-12ff-4e0a-b408-1d230fd9611a", "sighting--b00c72db-a7af-4065-bc7c-e477dba4dfc6", "sighting--48d807be-e59b-4093-8191-3bd6dc6544df", "sighting--e377658e-7ef6-48b6-ae2c-9d8e9b89c6ef", "sighting--123bc8da-a156-4222-bad5-0ceab5e9f261", "sighting--d8408995-ab36-4dd9-afae-763a5fbe33bc", "sighting--5d85c1f3-680e-424b-aac6-f418be174644", "sighting--f512ab59-bfb7-45e1-ad0e-4c884ca23879", "sighting--e8e9b5fa-f61b-4811-a910-3c85bb352758", "sighting--97c3f842-fa78-4a86-beb9-cf98d275be6a", "sighting--273eec03-9127-4cda-925b-663efe8ce6d4", "sighting--bd585e2d-90ee-4b81-a675-f9b59e26b4da", "sighting--0769bb94-9251-4666-95e8-135aefecad25", "sighting--741bfc33-7cea-428c-af56-eefa6e22d70b", "sighting--cbc0f7c4-a478-4250-8d03-a37b225558b6", "sighting--962d4cfe-c948-4455-9bf8-ce0f67f1c123", "sighting--2eae2549-85ab-456a-a9ad-e99ce1e5fa2f", "sighting--d5e6afdc-023f-47d3-ada6-1bf86040c5bd", "sighting--752df314-3137-4eaa-b839-879e70f5b787", "sighting--fa8233c8-51ed-4134-b38f-8b9a8601ef4d", "sighting--3cb86584-05a4-4f4f-bd59-bc928f1920a5", "sighting--907a56d6-7eb1-4446-a950-0d0d770e8e92", "sighting--0a422006-6375-4f95-a898-f54ab42d907a", "sighting--9f70778e-2ca5-4bea-93ec-83f987fdb6ee", "sighting--50eebee8-6bdb-4633-abaf-502c07fd4dc8", "sighting--4bcc79a1-d27b-46ed-b981-6582d5485bba", "sighting--3bdbdf2d-76ce-4e49-b483-a78bf47ca944", "sighting--fb0073af-e538-4e80-b981-059d457d0cd4", "sighting--99d3ed96-c6bb-44c9-a748-3a5475665a62", "sighting--43031ad7-f440-43e9-82c8-01b7c05f6000", "sighting--613181e1-6bb9-458d-8c09-9d0060d5564a", "sighting--7cf78cd9-da66-450a-8b3e-19282794e1bb", "sighting--b7ff1955-6baa-4444-9f83-17973e56a9a1", "sighting--d4519a45-3a87-48a6-b6a2-4053cf3ec092", "sighting--364e4b09-69e1-4d01-9c0b-7fa4de6406d5", "sighting--89a078e1-4fb9-4f3e-9f5c-5b5c22e45ba6", "sighting--bf4fc32c-81c5-4a3b-a166-5588335e13ea", "sighting--4e161e01-626d-4bd7-83b0-d27fa70a587f", "sighting--6e33a2ee-84fb-4b55-8e98-839940d0ae9a", "sighting--6e56d6a3-c988-4334-8b44-269d8cccc7ca", "sighting--e54f1740-27b6-4807-ad09-80e2f3911814", "sighting--192cad15-6142-4a31-b61d-250bef74965a", "sighting--44e5e270-658e-4196-87b3-5e6190075464", "sighting--9ea76421-72f5-4e37-b1af-fca2959c69c3", "sighting--8020c8af-4b6f-470c-ad8f-a6aafe746c85", "sighting--d1bddbb3-2680-4b06-b70e-beb771fd35c6", "sighting--3a16298c-1304-4e55-a57a-fc1878a065c1", "sighting--09aba1d4-e6ca-4f23-a33f-28b100be4334", "sighting--3d5269b2-e0e8-490a-9a46-3ac974d1f5d3", "sighting--c82e518e-978a-45eb-bea4-0000701a32a8", "sighting--0683adbb-49d2-4ca9-99f5-b2750ef9b73e", "sighting--178cd2fc-9fa8-40c7-833a-5bbee7e71c16", "sighting--37a7a05a-15ae-4be2-89c0-98aabd235f2e", "sighting--0abcccec-8475-42f6-9485-b8a43c2076f9", "sighting--bba51c96-379f-44ff-8040-c4ba7abe5225", "sighting--61171951-edc8-47f7-bc07-a14746fade4f", "sighting--53ce4172-de7f-4cc6-94c4-77e1c1218f78", "sighting--0b529a59-4d10-405b-8177-eb3965938a44", "sighting--34f7845c-dbbe-4bf1-9a57-30512e16f3df", "sighting--055e8ef8-71a3-43b4-8ec0-deaa588b7926", "sighting--24313a30-7408-43af-b919-fab5a896da84", "sighting--cddef50f-fce9-4767-ac90-8edc16e23df6", "sighting--840b87b0-6e6c-4bb9-8796-f0127c9d0388", "sighting--5e396a10-62a4-447a-ad99-190616113224", "sighting--2c387948-3842-4d36-8fd3-a299ed81b9c0", "sighting--428e3347-6700-4ee1-8bef-3c415a66b512", "sighting--461ad372-1bf9-4a53-b29f-4767eea29b38", "sighting--d7686c21-07d2-4fbd-aa9e-60fa7a03a197", "sighting--d5a22212-4d50-4e16-9eee-9a70afc66858", "sighting--f9b0f49c-00ce-4b89-85a6-5e2aa7936e58", "sighting--21337d12-a3fd-43b1-b356-77da6870ddcf", "sighting--41ca02d5-855d-4169-8abe-175bab72b0b1", "sighting--c6bb21c2-b128-43e1-97b4-474c452a5562", "sighting--e9ef3bb4-a86d-4c2c-abab-b3c1b15cb593", "sighting--1fcd990a-8f3a-4f65-952e-479b1210cc4a", "sighting--30d5ea65-3d78-4e7f-8e2e-774e497c0a44", "sighting--2b6db8c0-c994-4873-b384-26dd5b7544cd", "sighting--4e68c3f4-b8f3-4776-aad8-38e6acf6f775", "sighting--c0202eb7-c5ca-4731-8635-a5d7973c14df", "sighting--b507e2e8-84fa-4335-986e-559219009ff8", "sighting--d8c3c2e1-9de4-402a-945f-3589d0d60ff6", "sighting--3562d62d-29c7-40c3-a86b-f5dba2d202d3", "sighting--4af167ad-0ce5-48b7-ace7-950c3cd78d16", "sighting--396b6f1b-6925-4f19-b646-3c06470ef3e2", "sighting--f6ac600e-1ef4-4b56-8eb4-cc843ef33c45", "sighting--1d5bf25c-47b1-444c-80bd-11a5ef9f43e6", "sighting--0497fd80-726e-4505-a5a6-813c9623c472", "sighting--0b8fd79a-a714-4537-b117-4d46458c3639", "sighting--3619db35-39b3-454f-8937-669af2a7c763", "sighting--213bd24d-877a-491e-9be3-66d287c6538c", "sighting--8836435b-75f2-4867-8d5d-f23364c0a93f", "sighting--9a8076f1-dcc3-4cba-8e17-2c3969afd520", "sighting--01a761ba-d76e-46b4-82cd-9e8aee8f9dd3", "sighting--6b38b1ad-2acf-47ba-b0c0-efd5fa279c95", "sighting--3b1182e9-f8db-4958-8a67-c9763592f9e3", "sighting--540b3d17-7e6a-45e3-9687-2d05f4b1709b", "sighting--b08f6adb-28b5-466c-a820-e25db14ad05a", "sighting--3492415d-2e08-41f0-bdb2-37a6c71ebdb7", "sighting--d58922cf-dda1-4750-a167-806ce78b06ba", "sighting--adbe8f42-2bfc-4076-b05f-d6cced4d7afd", "sighting--d7f04df1-ff4a-4f64-9b09-208c418409b9", "sighting--98b7e7e1-f49f-4575-81be-2a8cc618bbea", "sighting--adf86fb6-331c-444f-93f5-e4fbab52448e", "sighting--c7a9284a-3291-48c5-9f92-a006fbd958f4", "sighting--cffc98e1-529a-4cfd-ab02-3f7df31fa0e5", "sighting--dacc0e44-d992-4452-b555-1157aabe86a0", "sighting--a5e27104-0f9e-40df-ba7d-5af819eb3a48", "sighting--a64c6340-07e4-469b-93d1-0e08d95283a4", "sighting--0ff9c2d2-ab2b-4b0c-972d-b216becb884e", "sighting--0a476782-998d-49f4-b95f-fabe32a1e156", "sighting--709f6376-7191-427d-aa25-7d8a1382f453", "sighting--3513c44f-8123-4d85-af6b-1495df155fce", "sighting--a811c9e0-af73-417a-af21-8b0001f37ffc", "sighting--67771b45-c7e8-40d9-835e-f11b81ff3752", "sighting--2776318c-4d86-4e16-885b-bd4903118b90", "sighting--0399308a-c619-4be6-8712-71284f8ac624", "sighting--e036c4ba-8a04-421d-bce2-5a8818eaafa2", "sighting--0397d427-7b32-428e-931f-e5d3d4fdc569", "sighting--5108ba62-830f-48c9-a845-f68b4c026d16", "sighting--8c519714-12c8-4c36-9337-8ad40ab8a2d8", "sighting--cba3fa84-51a2-469d-ae89-3bc3f2bc756b", "sighting--4186d403-f35c-40ce-af89-bcf302caa40c", "sighting--1dc1b075-9455-42ac-9ea3-58b2f99e0267", "sighting--f28c1e90-0bc5-4a11-b70b-0d939345048e", "sighting--5ce9babc-e4ac-4dc5-9d98-04684a2813f9", "sighting--6396e2cd-2d3c-476e-9dd0-e712be7f6093", "sighting--fb2a1c7c-fa35-42ef-a2df-11550181affc", "sighting--cc3e76ef-d918-4509-b706-dec08d370b54", "sighting--ad7e930a-e23e-49af-b86b-511e39362be3", "sighting--678093e7-27a0-4039-bf4c-87c5ad6831f9", "sighting--d7378863-fe35-4247-b365-250e0321496a", "sighting--ab568731-5020-4e26-b5bb-91b847be107d", "sighting--bfcbde19-b365-49da-a703-60d30f1a2d4d", "sighting--0fef9522-1b3b-4d0e-a1af-294876fbe8e0", "sighting--7c617fd1-ed48-44b1-babb-10dc110aa040", "sighting--6b733792-640a-4bd7-b2f7-e004e395153e", "sighting--c9aebf85-427e-421a-8670-15091a6b943a", "sighting--25e52712-935c-4f23-aa1e-b0f2bb59a565", "sighting--b5a895bf-2dc6-436f-b384-112f343472e8", "sighting--d00edc3f-9f17-49ca-bf4e-94201db0ef12", "sighting--277449fa-a8c3-468d-a608-acd96151784b", "sighting--3b296294-e1cc-4e94-9dcb-740e7da3d4b3", "sighting--111df005-dc17-48a4-aac1-5f6ef90ad77e", "sighting--227576f2-45b3-4a07-bb8a-35c469ef690a", "sighting--c86c1378-605f-4428-8672-3ec513188d65", "sighting--a324cf3d-b840-4098-a3bc-92fec6e10319", "sighting--ed37efc9-11c1-466e-ae81-3cc7e7dfeb5f", "sighting--6a272cd7-d787-4406-9190-86b5ca232b6f", "sighting--37018fb8-8059-48bb-b576-5c9e87dada9f", "sighting--a976f6e6-f2df-4740-8175-866cd69db366", "sighting--90b39f6d-652b-4b9e-8e85-a926730afed1", "sighting--a069a8bf-7723-4e9b-b617-4f0f2b49a7d6", "sighting--ab3c4d89-8cc5-4be9-bf33-9e56c94fd4cc", "sighting--e9d316a0-165f-4763-954e-686860919b69", "sighting--03c8da82-3675-4870-8d41-2a98d106eccf", "sighting--14730bf7-15a7-47ec-8265-38d2661a7826", "sighting--c77bb042-128e-4b7e-9fc8-1a5ac2fdb84e", "sighting--91306181-8a24-4650-8c19-b82c65c0f01f", "sighting--9c853ab4-46b8-45d1-8d42-52a96b0b3466", "sighting--a4e91e79-3197-4def-a9bc-3379974a0fe1", "sighting--0bfdb681-8b5d-480e-8a09-ffb3e469eacb", "sighting--f10eaf85-7bff-42fc-84b9-bb66721e3777", "sighting--5655edf4-27d6-460f-b581-7351c971caa5", "sighting--84f6cd1d-6d24-4cf7-b2ec-3b6ffc6aa07c", "sighting--723ed238-bef3-4628-80df-f7620aa50c82", "sighting--d3c0e8e3-bf27-4b5f-b68f-8711a9d8ec33", "sighting--8e5e682e-303e-4431-9ba5-51aa27ddc9d1", "sighting--639250b7-ea8b-4a7e-ab5e-8a63af8fe602", "sighting--156691b6-b685-401b-a184-a2f8ba6aacdd", "sighting--a12d7eeb-1986-4a87-b303-a2aa5ebbd3d2", "sighting--fcf2c5b4-f31c-4fe2-be0d-fe080b435f9c", "sighting--69f8dec1-8ddb-4e9e-a449-2b20acc45098", "sighting--a8cab185-ca8f-4931-8787-cc87c214caf8", "sighting--e88905ca-fa9f-4b35-aa68-56284e6ce0f6", "sighting--95edece2-64c9-4716-bb4a-c452fe8fe080", "sighting--b012c309-5f7e-4fd8-a6dd-d15710167178", "sighting--39da8519-e49b-47f3-bf02-d7ad393434c4", "sighting--6274b190-a337-4153-a2b9-f0392a58921a", "sighting--d1b1f7f3-8d1f-402e-a801-48efe673529a", "sighting--70887466-de8e-474c-ba99-84234b31c9bf", "sighting--41aa3e7c-2dec-43e4-a627-6b0185ee3052", "sighting--b591e5de-66a0-45fb-ae1c-245bdb5372bc", "sighting--03f5c26b-cc87-4c2d-b9c4-63cc73651418", "sighting--543a5957-3a4e-4640-aad9-6425df822dfa", "sighting--b879258a-390f-412b-9bb3-bf5c2b504340", "sighting--13b18f98-7e5c-4d73-9d19-a2b618368644", "sighting--bd8d6ae0-ac2b-4e08-80e5-df5d572f231e", "sighting--c66c1ea7-e2f3-411a-86d0-24faf67762ac", "sighting--1f790f80-3b3e-465a-bb53-0037a0b020a1", "sighting--e4df1dfa-b70e-46cc-a755-8bf2176e2a21", "sighting--74cd18b0-f6cd-4ee3-bb5c-5ab26669ad87", "sighting--d23c9452-b7fd-4be7-a016-eb478003f8e2", "sighting--69c986a6-abd0-4781-8421-881501a87b1f", "sighting--b2a1410f-8c70-4fa0-bd4f-c25634f671bd", "sighting--618eaa21-6147-4ecf-9b0d-95a71a2ac7cc", "sighting--48d96dfc-a2ef-4a8e-86e0-38a9f471f131", "sighting--720f28f8-1362-4f2b-92a6-fccad9cebee6", "sighting--2ad8c4f6-835f-497c-8069-c8e9a7546ce0", "sighting--4483693f-222c-4ca2-ab10-c2d90270b244", "sighting--0aa62098-124e-46dd-9639-25d3b512d9b8", "sighting--a356c1d5-953f-4325-a628-c2ba29afa6c2", "sighting--341cedaa-6a9d-4a4e-851d-73055a0d776c", "sighting--c3fc1ba8-bb3c-4c01-ba6e-ccd9b86fa355", "sighting--dd45619d-0913-4e52-903c-18f48ae9b49c", "sighting--4b7c4ce6-44b4-4110-a212-db82f793892c", "sighting--ee82a208-8f7b-43f2-add6-aa1bfdf6e3a4", "sighting--ad5a2485-1388-4ef9-a7a4-61426b23ee53", "sighting--0e21a7de-a85c-47e3-abec-35e12391e9db", "sighting--02cdb0c9-15df-4f57-9845-700e806fc257", "sighting--ff09d88c-a7e3-401d-8b71-a6f76ff94081", "sighting--243187d8-89f7-4208-98d3-b62112cfbe1e", "sighting--0c5a9049-153b-4383-8716-626dca1891d9", "sighting--6c4cfbea-afe8-4496-9dd5-e336b812ccc8", "sighting--d0c98980-8404-46ad-8b02-a85b40114a59", "sighting--bf2b4803-b80d-4ea4-b8dc-447bd6fe0f92", "sighting--bcffcc7e-71c9-4838-a90d-9d14d22b8862", "sighting--a8ae343e-0213-4fca-a826-f79ca4692b6a", "sighting--43935e07-780c-403b-8591-d4dca954b17c", "sighting--afed5927-33ee-4864-afe4-1ad328466572", "sighting--42f51218-8db8-429a-967f-db653aa63d57", "sighting--1bab31c6-add9-445f-b669-be21060def40", "sighting--a483d235-f7eb-4d3e-86b0-a75ecd365ab6", "sighting--9fe8ef39-faaa-4057-946a-aae521e930fd", "sighting--fe9b1b49-9fcf-466c-8b0d-385f379d3f93", "sighting--422a4b26-598b-4b4b-8fad-9cfe759adb06", "sighting--7ff370e9-e9bc-46db-939f-8eb695bb93c7", "sighting--8d05d200-53e5-4773-9bbd-cedf9dc51d52", "sighting--64a3dd32-74ec-4992-bdb6-f97e673e0df8", "sighting--92fc3ce8-b2ca-4422-8e18-9f3ca4848a73", "sighting--cd47776c-c094-4674-8617-365657f0ef79", "sighting--c1f2ab3b-9840-44a2-9a9a-02c0a8761c45", "sighting--e551f1a4-18ea-4ce9-aa0d-0d4d2906987b", "sighting--00760207-cc70-4ab6-8953-fddb22859ca0", "sighting--010a14dd-e8f6-420f-a996-78e6e59cebd4", "sighting--fab2d5b7-d614-4f66-aef3-93cdaf8e3c3e", "sighting--a4bb19c4-7e72-49f3-b27c-00db8c61436e", "sighting--db92dc63-e43a-47e3-b583-d68bcf32832d", "sighting--26c66274-6e9e-4fc9-870f-931e49d21f06", "sighting--4d63c072-4f75-45a8-af84-f154ccca0eb3", "sighting--5cde4588-33d4-40c5-8c35-4aeb5c2d1444", "sighting--bb7730c5-d623-4fb3-a980-1ee252f9ce75", "sighting--a3b64bc6-c15e-4d32-945c-33c12bc03bec", "sighting--aa8ad88f-116b-414a-8903-86494166954c", "sighting--800c7368-ad4c-40a8-ac77-a2a4eb392338", "sighting--32d1ce9d-703b-417e-98be-ee3b3abc3f4e", "sighting--49bf792a-a53d-4026-896d-c80ddfdc59f3", "sighting--4a68acc3-239e-44b3-bd59-afd9a1aba220", "sighting--95844e1c-50de-4989-8e1c-bbfcc0e1a963", "sighting--d21cebad-09fb-4b4c-ba2c-f7520e05cf18", "sighting--94fd00e6-41c8-4292-b3a8-4fad2843bf6b", "sighting--d6537760-c168-43ac-a512-9602502775c4", "sighting--77c2b180-9547-468a-ba5f-873a6343c406", "sighting--248a900e-a3f9-442d-920b-720cb576887d", "sighting--c0fd256b-94aa-4696-a96c-4fd3931f7614", "sighting--3faabbf8-0e4a-4cea-be3e-fbc89008c366", "sighting--a5b74a6f-b538-4c0c-ab45-326e7f4396f5", "sighting--c2e1d543-3698-409c-8856-cb7fc163488f", "sighting--95c0139e-8288-432d-88a9-814e6c7efcca", "sighting--fc63d8e7-501b-442f-91b5-82c78ac40282", "sighting--39530862-7d82-4f1f-8431-9ebed5b95bff", "sighting--8da3208e-4e95-4fe3-8263-6910958c399f", "sighting--29ef7e5a-54c8-4ebd-9653-a2d58539e99e", "sighting--9f51ad3c-ba65-4c14-befa-c9a7bcb252a4", "sighting--4ccf5fb3-4f81-46d6-9296-17335df2d937", "sighting--4c8a130e-105c-46ea-a92c-b54b9f09c2f8", "sighting--5bdb581a-af8f-4efa-b1e1-445a3c36ea61", "sighting--5cf9a8de-c5c3-4c96-81d9-a66c6a938396", "sighting--e2ebf97e-0d0e-4584-b0c8-225f354f28f4", "sighting--617e9415-aa97-4fb8-b477-6c4b8563669b", "sighting--2e88eb61-5e2a-4fde-be6b-3e718aebd70c", "sighting--bf3eeecc-88d6-4997-9e68-13bc516ef3f6", "sighting--b1a6cbcd-280c-4114-92a7-42ef1addc39d", "sighting--2930cf17-aca1-4183-8ab2-2d50b0ac805d", "sighting--b1af74a7-0956-4b5a-a5e0-9976f3444e9b", "sighting--b77e8925-5973-4ea9-b071-4129315f7f29", "sighting--8b3af997-6302-48f9-a25e-84045ca16282", "sighting--da9c777d-db85-45f9-bf54-035a9cbcb256", "sighting--a9ac44d9-f5e2-44b3-9f43-6fa93259756f", "sighting--5d796198-738b-4244-acd4-895d99eea4dc", "sighting--9a59a462-fabe-421a-a9f9-ecfbd339eece", "sighting--b1ea8867-44db-4c63-9cd0-a30cf93478e1", "sighting--9e3ca01b-ce99-41ff-85dd-3b672a7bc95f", "sighting--1296ef2a-998f-4e58-a512-db4a0c9723bc", "sighting--6c581a73-0981-4d54-a2a9-39c17dddebeb", "sighting--47f2f730-d00d-4a96-8ffe-f133b8706b01", "sighting--236f8b8b-c81d-4870-a2c9-02afca5a5621", "sighting--2cf6898a-23b4-425d-a4f3-bb28df65502a", "sighting--d9a8c635-056f-476f-9d5a-3090d3128266", "sighting--090eeaa0-b521-4d83-b59b-08c61012cdc0", "sighting--1c58ee21-1091-4f07-8111-d6a1bd116888", "sighting--ac153fe8-2555-4f26-a407-aba069e237c1", "sighting--f448ee69-17aa-4867-aab2-98c6ffb9383d", "sighting--26734bce-ce0c-4e75-912c-2c45308d932b", "sighting--2bc65bbd-428b-4cc6-9ec4-07de9443303d", "sighting--4358a998-e839-4989-a0fc-f68bca0075b8", "sighting--221a5a17-612e-4e42-8bd6-73e3c2831d14", "sighting--583e8d0c-45a5-4d06-8069-5e33d8ff9a31", "sighting--0524671a-ac72-4848-a8f6-fa91c43d5c66", "sighting--451329db-17e7-4958-b2a6-ff7f02e9d026", "sighting--bc5ad966-f830-4b70-a2b2-f74646672e39", "sighting--ced8cb67-195e-4072-af3d-987875cf8035", "sighting--d11fb736-149e-46cf-a42a-c7e9441de608", "sighting--83d051e3-2976-4b72-b754-e04a9c40bf7d", "sighting--95d5efae-7952-487e-8f41-e4d12226af3f", "sighting--b1e7e870-d3e5-42ea-8941-bc94afd56e24", "sighting--f42d16b6-1b59-4ef5-ad76-ea9176eac590", "sighting--048ba24a-356c-476f-96f7-17e63b8acf4b", "sighting--3662a0b6-6d3a-42c5-8d73-2a35dc15d149", "sighting--cca75fa9-da8d-40a4-b94a-fd6e083be11f", "sighting--7ba580ce-afd8-4085-b328-643bd625aa52", "sighting--a6b38993-49f3-443d-98f7-2884bab0f885", "sighting--fcf9cac4-68b9-4e11-8e1f-96108cd662de", "sighting--a0f38e46-3e5f-4c86-97ed-547798cbb0a7", "sighting--5e72e32e-30d8-4b3f-97b2-670ad8e84144", "sighting--93cf3bb3-da20-48ca-b6ef-c64381850dfe", "sighting--f63db459-ae82-408b-a428-09321b874a7e", "sighting--44bd4e41-ebf6-4af6-9910-9a988e10fac6", "sighting--ecf2ad77-424e-4def-8d69-81143d48e1ad", "sighting--65d12411-79c7-4496-81ee-cda0777168a1", "sighting--b2c76156-b1d1-4f6f-ab92-56117e4fe457", "sighting--66ad9b39-118f-45a3-bfe8-e85f3c842655", "sighting--d180d52d-02b5-42eb-a877-d2db1e2008ff", "sighting--efdb9fd3-fbad-4e11-9c41-5cbe82e99e0c", "sighting--2001bf23-f9d5-40fa-a410-576cdd726904", "sighting--779c1d82-4c24-4257-8565-421ea3ef9aa1", "sighting--981f67be-325d-4996-8f4a-1b22219a1a65", "sighting--4e85a957-f5b4-4d9f-a1f0-aaa71d0b2146", "sighting--1154f59e-a0ba-4e9b-8c6e-2ad8e8d18f35", "sighting--3a101185-1f6e-4d5d-81ca-d30b6b3dd95a", "sighting--4b9934ce-b23c-463d-bae6-2d0d5f83d2c7", "sighting--3e2784c0-b137-43b8-9e37-a9278425f734", "sighting--d16c6c70-c8df-4ffa-a18f-9dd4bb4fce28", "sighting--6269855f-8076-42d1-95a0-a76c89ee68b1", "sighting--5308ab8c-255b-4430-b65b-647930bd0f2f", "sighting--73f7dabb-0130-4a8b-879a-15898d084927", "sighting--64735833-2dae-47af-a845-ff9092a9f907", "sighting--5786be46-0100-48c2-a71b-c222bc717591", "sighting--bb174aca-c53e-47ce-9766-99b3fbc66db3", "sighting--ab094bbf-08d6-4cf3-bfa8-73629117c889", "sighting--47b44e4d-9c74-49eb-8545-b7624c317e92", "sighting--028e8039-9a2c-428d-aa96-71262948639b", "sighting--641ccc41-dda3-4dd0-abca-c4d6fc890a1b", "sighting--a9a20189-7dc3-4947-aacf-c72ff8452d7d", "sighting--2c346525-6bc0-4adc-8ef5-5f058e54ddcd", "sighting--f280727e-66bf-4e0d-8cd0-e7e0cccaaadf", "sighting--05b6c4fc-154f-4ece-87ef-b5e3781100e3", "sighting--423e8947-818e-4376-b525-d5a09478b214", "sighting--1f533e08-77d0-485e-9beb-6e0c197ca1f3", "sighting--defd5ab0-259f-4468-a8d9-c17d17d9c5d6", "sighting--8e651864-adc0-4d1b-954c-51876643e5f1", "sighting--7bac6ac9-8c56-4708-99d7-7877717cd1bb", "sighting--4ea936a0-932a-40b8-a1f8-123d2fa30b02", "sighting--62b02adb-cede-40ed-93bc-2279d51f964b", "sighting--7e68f8ba-9f54-454d-9723-9594679ec429", "sighting--120cfa18-5825-4dc5-b75e-fc0cc4450b93", "sighting--ad9277f7-3447-49b8-a9e5-a16a4555a17a", "sighting--1b530abf-40c1-4dec-b8e6-776977a14b22", "sighting--7f88d42d-771c-4c3c-94a9-4d8fd7cb2fda", "sighting--1cf9f367-a385-4710-ae37-8e573fa95efd", "sighting--b91ac4d2-d990-4a28-977f-1ceb7b6ea376", "sighting--f9a2619d-85d0-4a8f-a7fd-045906a8dabc", "sighting--f405234b-d4df-4e9b-b50c-8fbd4f77e1f9", "sighting--2b318e0e-4055-4565-8dfe-14dd2a6ca0ae", "sighting--af0edd3b-2d4d-42ac-8f7c-9e3ae938f055", "sighting--6db3b6f3-ed42-4bbe-9cab-654b0e75b5b6", "sighting--53a73745-e7b1-4966-88ae-5b260256ecb2", "sighting--7a375c6f-8aa1-4e38-9583-4d87b5493bc9", "sighting--a127caa2-a872-4ee4-b108-63f6fcce6449", "sighting--80f2381f-ca93-4777-a46a-7f57625b5820", "sighting--4ab2fb64-721c-4962-9cf4-d77b2112397a", "sighting--d540f3fd-9e18-4048-bc2c-eeec91678fb9", "sighting--a900902e-d571-4003-8a30-c16329c81c5a", "sighting--bbfc9819-3587-4434-8034-c9a673524ad3", "sighting--e0f8e3f8-2498-434a-89c5-4ec0bd2d03a9", "sighting--169de63f-9664-40da-8d32-c388dc4f6273", "sighting--81345011-74db-498d-a97e-bf520f2a1fd7", "sighting--fc5648e3-812d-4169-9387-d37ae07e8434", "sighting--cd4d8456-3617-4a52-be99-efda2f4315e3", "sighting--ff5d839e-fb14-4c5c-9a2e-41c8615d7a6b", "sighting--125c7bc1-bc7f-4244-bce0-ed722e9c23ad", "sighting--b9cf39dc-d528-4f1e-b000-ed0fc6683810", "sighting--cf7251f6-31ce-43b2-8799-a35937c9e6e8", "sighting--7c65dd11-63d7-42ce-8960-5cb9d67baae2", "sighting--e051c3e5-c1a2-4df9-9da1-0ffb92ff94a9", "sighting--884544eb-1b10-479a-9a8e-2957903a71e1", "sighting--d0873323-97a5-4a66-86b8-5d2d433b6b93", "sighting--3fc62169-a51a-437b-90a7-66a9c88f13a8", "sighting--50057099-3c86-48b4-8d73-5376661205dd", "sighting--7d3beddf-9cb8-48c8-8501-44114d9d1615", "sighting--357a7eba-7f24-4384-9f78-d2054cb810c4", "sighting--9cd736d7-b0ef-47e2-8972-1cd20299f19a", "sighting--3a2e801d-0986-4697-9ef6-aa1323a32785", "sighting--2ed4981d-4a2b-4665-a4bd-8f69124c998c", "sighting--7e919f3e-cc04-4b97-a9b3-321e82081091", "sighting--0b513f1e-14ab-4bf0-aa6e-e4a637595e71", "sighting--1a35bf1a-9a8b-454f-b650-46e8547845fb", "sighting--afd45be6-522a-46f9-af81-a011c6556302", "sighting--00c40a4c-f49f-456e-a899-64a5252b4920", "sighting--2b30744a-1542-4f3c-8b1a-0bd35eba9c3b", "sighting--61718f07-ec47-4691-b5d9-f7d427d6565e", "sighting--1bb20dd3-594a-4855-9969-11743524c3d5", "sighting--f296e770-25aa-4e6f-a24b-889caec6e15e", "sighting--2074906e-9ff3-4355-8a68-31d0af2a2cdc", "sighting--397d7837-65aa-4140-a15a-26628e84deee", "sighting--f5c13e27-3585-476f-9b0b-1ec59e26d909", "sighting--78a05409-bd9c-4dfa-b246-31ce1ca0a752", "sighting--4ec0555e-605c-4f27-8db9-9a0fdef0562e", "sighting--1c6b58b6-59a1-45fe-a204-fa5212566a3c", "sighting--d5caddb0-79f3-4882-9714-0ba1559eaee7", "sighting--1e65db43-8723-4916-b695-8ca848cb8899", "sighting--08e57bc9-c150-40c9-be8d-0143c73276cc", "sighting--33c5d37b-9ea2-41ae-967a-59a3e15b33d3", "sighting--05b9b373-d753-4982-91b8-2c1e25314fe3", "sighting--b6e82768-ac08-4f8d-83e7-f04671afac63", "sighting--b17ee5db-f42c-4b7d-9395-fab204cf6c7a", "sighting--1519b6b3-1f0b-4655-b6ba-f8f0f603a7b3", "sighting--da69c604-6706-441f-b8b2-fa280f6335fc", "sighting--02ced12b-29e8-40f7-b247-b526fd36e6d0", "sighting--0eefa78b-9205-47c1-9085-6e24c8b31d26", "sighting--f3c20248-7a6c-4311-8c8b-76c5e6752a33", "sighting--705b9a73-2ed5-4ad3-8ffd-1456cdb6005f", "sighting--b762d704-8522-4d76-82eb-a76589579e1d", "sighting--efadfb97-33ff-4097-b016-de3b535dd43e", "sighting--f4264c87-91a1-4cf9-bd8c-74a846281067", "sighting--9c800416-0cc5-40c4-b8a7-98f18e698ea8", "sighting--250ec1ca-af5c-4ffd-91bd-6d98111e8f89", "sighting--b40c85f1-50eb-4330-870e-551fd5a31470", "sighting--5ed3c4fe-c174-4acc-b096-5113fde2eb73", "sighting--df0d98ce-8613-473d-9144-52baf79347fe", "sighting--4d85d0ac-0c4b-48b1-9e44-b42786351e4e", "sighting--2af1c58d-223d-46d4-8a58-f3e30b261c4c", "sighting--804157bf-f2f4-4af9-8ebf-f85ddb34ddbf", "sighting--d5dd9d56-5963-49ca-9cfd-5bce9bac1d7c", "sighting--5f2713da-9e6c-42f9-aa9b-11c642bf39b8", "sighting--a3f53015-8f17-489f-ba8c-407bd33cf151", "sighting--0fb1fef7-3d37-4af4-96bf-6d1cf483dd3f", "sighting--f77b5922-1dda-4029-a992-b70db7133080", "sighting--2a7e589c-c71c-4d4a-9ea2-e98f0ed8dbbf", "sighting--435e56ea-caca-4656-a352-d9875f267ba4", "sighting--2e7daf44-ac4c-4902-9971-0e194ea3a6c9", "sighting--3c76a503-0ed2-4386-b3a0-75aad8906f11", "sighting--4b881a44-6c84-4816-81d4-16a4ff5961d5", "sighting--a8909ff2-f9c9-43d1-9581-fdd792b7b35c", "sighting--aa4a7d70-5a1a-4151-a5f3-a6b7b68335e5", "sighting--bbb64105-c982-4498-94eb-551780a24c5a", "sighting--7585c0d0-4f94-4295-83bf-1fd1cd96f165", "sighting--564b50d2-3f08-45dd-b4b7-e2d442e0f09f", "sighting--ddb0ef15-e25c-4aa1-9257-ddb6fda683b8", "sighting--a323f8b9-5ae9-487b-a0d8-792ea623b1df", "sighting--a9ca2bc8-1f7f-4a27-a90e-d4cb9c45f70a", "sighting--15168e83-f10e-4cdb-849a-10890ad6b808", "sighting--c53ff000-60d1-4ae0-bda2-adff6fc9fdf6", "sighting--9ae5facf-4571-475c-9464-3b6b804e4426", "sighting--ea533601-b7e2-4e78-8846-b4860a27bb23", "sighting--eaecaa7b-4612-4ab3-ae78-a481a29b83c7", "sighting--02c919d9-8cd3-49ac-9255-1350aeca87be", "sighting--f9253fef-c1c3-4262-a9f7-caf82308eb2e", "sighting--d1ba3477-1f8f-4671-93c8-f6ccfd74ee95", "sighting--a73d8385-d1ff-4767-b9c6-eb0dfdb32e20", "sighting--1bbb0d64-ecd0-4574-8e4c-37781e954f78", "sighting--feea0820-8482-4071-9e0b-375b3a42f65c", "sighting--e9914c03-8a2d-4d43-b3f6-903fd868cb1f", "sighting--f9954b50-7792-4afd-9eee-6d45dae99a9b", "sighting--f0e0cd0f-4a6c-47c5-87d7-2c40a69768b2", "sighting--a6dcf758-c3b0-4640-96f2-3959d93daffb", "sighting--e6474921-a9c4-4cce-afd7-3cb98c208e3b", "sighting--6f104f73-b688-478f-897a-7c8239e47fc4", "sighting--1bf53f63-ce27-45c8-9cb0-acfc17634e0f", "sighting--a4616631-384c-4708-8aba-1abb5c2e9eec", "sighting--bb04b397-2188-4e37-bfdc-d265f63b1cdf", "sighting--c0e1d13c-245a-4ab3-8f93-9e4627862575", "sighting--ed942ca2-f186-4579-918a-6c9cb23f243f", "sighting--cf44023e-e0a0-4ec2-8da5-43d1c4b7c04c", "sighting--fa88874c-36be-4cc6-bba8-835e9a569c10", "sighting--aec60de6-78d0-412f-a93e-eeccd297cc73", "sighting--ce454ab6-9ded-4ecd-83a6-fdb06b30c094", "sighting--6127e4bc-1802-4d44-a267-4c1d779e14e1", "sighting--a4152365-d00c-40fe-b5ea-a778abc536c6", "sighting--1f68943f-8d40-47d5-aee9-03b7896cf2ed", "sighting--43594432-1dec-44b2-b707-2f8a973cf826", "sighting--91e1a9ae-77f0-4c5c-832a-c6d52d665757", "sighting--a538add9-2453-42ff-ab1c-35863c83256d", "sighting--d35b3973-2c59-424b-9c75-23ee42131316", "sighting--a8a4f8b3-152c-4a88-bc38-04050793d3fe", "sighting--d3ba5957-f1fd-4201-a1b1-4745195448c0", "sighting--6facad2a-3c7f-49ee-b0fd-2ef83739b1c2", "sighting--c90fa7a1-23b7-49f9-a383-5fbba42caab0", "sighting--eb1e3b49-0a8f-4f76-acb1-50f7944e6fb5", "sighting--ff4ac05e-ab01-4f50-b43b-a4a6912d371e", "sighting--3ea820a6-4f3a-4609-a1e7-c0dc00fa6c3e", "sighting--560d073e-87f8-4ec2-9f6a-09418ee50068", "sighting--6fecc091-056f-4843-b368-997bb79c88c5", "sighting--2c3a88f3-d4be-4282-8a69-263435576396", "sighting--b228f350-13a1-4b76-90d2-4bc5a6681156", "sighting--8770236d-9826-4f57-b913-9ce3d3b79e58", "sighting--e86a9050-cb51-4511-89b6-36c0fd48bc47", "sighting--e5634c73-2696-4c23-8a64-4da85eb6b1ee", "sighting--8ab87a22-9531-42f1-a0ac-b1b2c9134ae9", "sighting--a778c8d8-e29f-47d4-9c02-e61b416d32da", "sighting--28013d36-cf66-497f-922c-b30e7c813ff8", "sighting--9861c896-7ebe-4bf8-9a62-99619557b9e9", "sighting--a4e9229f-0983-4a0a-9de4-86c9c518d7a6", "sighting--9e8266b6-299f-427c-9794-a39ea54c8855", "sighting--ae4b72fc-0537-4597-b774-8d2f5e715d0e", "sighting--1a8c5496-0f6e-4447-a45e-068748362d29", "sighting--05c26028-6e90-40d7-8c1e-ef5ac0e0734e", "sighting--a16ddbfd-dc84-4ee5-927d-0cd23d8d0eb5", "sighting--6a72dc85-1aeb-468f-a6f0-351466bfe636", "sighting--febf0c91-30ff-42df-89b1-569e1bef908b", "sighting--8622fc3d-287d-44ec-8def-bb7dcf429898", "sighting--683283d7-7b00-4a53-9eb3-8643bb40d0c6", "sighting--8dd964e0-7caf-48ad-92d4-92c39135cd3e", "sighting--8de37237-a040-4196-b44c-067bfec52a59", "sighting--ad0763d0-4336-416e-809b-1b2cba42c469", "sighting--04e92e2b-47dd-49be-80d3-f0d1b3c4522e", "sighting--312fd818-0f22-49fa-850e-97c6954d6710", "sighting--8c2b423e-a879-4a0a-8504-e9924d1c518d", "sighting--5d6e4b5f-c28d-466c-a2ad-7fb70e70b1ab", "sighting--1d9286f7-9744-4990-bafb-1baae9f98242", "sighting--ceebb9b5-e5ff-44f4-8d85-6f2b63dc021b", "sighting--8a618e3d-0deb-4ae5-8138-9777264a1aa2", "sighting--6938f970-4d03-4a20-a17c-25c0f259923e", "sighting--3b63513e-c063-4bb3-915f-fd356641887a", "sighting--060e9ebe-154e-4c13-9872-9a80bfcf5c0d", "sighting--8e4e4bd8-e551-460c-82a9-fef2ac017ccb", "sighting--fcd089c5-e130-4b8a-95db-3f66a19d25d5", "sighting--fb7c0f69-04bb-4634-9d06-9c950a3d3f9e", "sighting--bca17c4b-76e0-495e-92c1-2715aa20728d", "sighting--d72e2361-b258-4c86-a6e3-e7b066fb01f5", "sighting--4ef511cf-718c-4849-b0c0-28abb47305ed", "sighting--092f9be4-1011-40fd-be5c-ea5491ac878c", "sighting--f453e20e-987d-442f-a782-27aa90db122f", "sighting--733ec23e-c899-480a-aee3-38b5ed28f8dc", "sighting--0c70d02a-2410-42e3-bb24-8b757f4b5d23", "sighting--7c298798-e11e-42f0-b522-d89a390941f6", "sighting--944e6a8f-ef0d-487b-ad11-87468c8a2187", "sighting--2fdbe367-c034-43bd-99bf-d0a79d10eb1b", "sighting--d17ea376-18ec-4ed7-890a-9a3f92a4047a", "sighting--e741e877-90da-4152-ae7d-b8593f01fa0f", "sighting--47cf7dd4-6f7a-4dbc-bedd-0361aba9c93e", "sighting--e8c4b257-95c1-473d-972c-9192130f4864", "sighting--c277200d-0775-4183-8ab7-25e38574d270", "sighting--45b9f908-094b-48db-bd35-0c67669bf9de", "sighting--bb9ce2e2-fc67-49d5-bd42-a642b4de4334", "sighting--26b85f22-5651-41f9-9b49-51cdae577d69", "sighting--70331055-753f-4d38-9637-a8359e1b6497", "sighting--66fcc7e0-574f-4204-a8bd-d0bec5406f9b", "sighting--6afcb4af-666e-4fff-9b82-32570aaf3e98", "sighting--cfa6f87e-cfd4-4585-8dd5-344485b41ce1", "sighting--8cafd55d-306d-4f79-a949-c39e440f92c7", "sighting--145360ed-f7c0-44df-b230-d22cb4d0ff3f", "sighting--1bb43dbf-d3ee-45e1-bd34-8fff25f842db", "sighting--08c487fa-4af3-4586-b1b5-02076ba5e002", "sighting--8e2738c4-266c-4af1-843a-9414ae344bce", "sighting--2b36e17d-c739-47fb-97f7-dd73bea9ad67", "sighting--bddaf4e2-6202-498a-890f-d74e826a60f0", "sighting--953e784f-4e28-4e6a-a679-b5818dee8325", "sighting--39e445de-43b6-442f-b3ff-1aac81434eb0", "sighting--15b89c6e-8dec-4800-b0df-2aa4c3acb2b9", "sighting--83f9f410-7c36-47b6-a890-c36c5ccbf07f", "sighting--4dada912-5318-4183-bb01-e223b4b6b44b", "sighting--e867757b-6836-4203-87e1-e13b3535af67", "sighting--4251a482-fce2-453c-9083-e8cd82e26546", "sighting--ce0eb077-cccd-42f1-bd42-e557df9a9e7e", "sighting--db367674-193a-4600-ae53-5ed95c655120", "sighting--a02ec09e-8a00-426a-ab8f-ab95650f4861", "sighting--055d2299-1ce1-4d72-966f-4afd64740679", "sighting--a0863aba-2a39-49db-95d3-40d9a4f505f0", "sighting--10d7cc84-6e94-477e-88b4-30aab72dec2f", "sighting--b474b592-ad01-45ff-9cf5-0bce86320ef8", "sighting--3983f29a-93ff-4c76-b4d7-c3f2d131f5a5", "sighting--da904797-97fb-4e03-ad6a-60b8f81052e9", "sighting--f9d3050e-0f51-4596-a5a1-100d46551eed", "sighting--5c8e7f0d-b4ae-4e66-bd59-8bcb6c77363b", "sighting--b19991d2-3ee6-4c8e-9c8a-9ee1d102912d", "sighting--3527c13f-ea7a-4db7-905b-e2b7a07a5456", "sighting--84157c4e-13fc-4bdd-9a63-428acbd0c310", "sighting--b6f5c31d-17cd-49a9-827a-c8400449702d", "sighting--e22bd7fd-73cd-49f5-b508-c89ef07fb5e9", "sighting--a538c35d-43d0-4498-8658-9e2a3dd8d586", "sighting--339b65ed-2a5d-4da7-a5c2-2598980bcd5b", "sighting--586e24c5-4b12-4c42-b93b-baa9b4f32260", "sighting--15e01e48-976a-416a-a4b5-a05292beeed5", "sighting--82488eab-7319-4f6d-86e1-cafc264efd62", "sighting--c23a9a83-3584-4c03-861e-da32601c85b2", "sighting--91c62d75-13bc-4e14-ad28-6b5ac54f19ac", "sighting--4b00691b-c249-438f-a2c3-3223d988db0b", "sighting--d3f41da9-9368-4070-b7d3-ca5341172c98", "sighting--730e9dcf-aaaf-46c7-9f7f-1f3450f8728a", "sighting--7efe2fb8-b659-43ab-bfe2-239ab347d5b0", "sighting--2ea51bb8-97c8-4087-88ea-9961d67d73e6", "sighting--d5ff9cc3-1a47-4a9a-a9e7-f86a24897f68", "sighting--5ad2cb7d-9d16-4a16-84f6-a43f6debb36e", "sighting--54457dea-f113-478d-81dd-a1530dcc998e", "sighting--a3086b00-4308-48fa-a3b9-3ae78ee1f8ad", "sighting--464d0bad-65d5-47b8-bf50-7a582c2128b4", "sighting--b31c35c5-3c35-4e50-95a0-ed4a372ead6f", "sighting--d3651bd5-0ee4-419f-8231-af257ae47c16", "sighting--0d0b5c72-bc46-4e57-b374-3ed7dfeeabb7", "sighting--0ca786e0-a22e-4b79-84dd-fdc7abfaff74", "sighting--8f2a66a9-18b2-4c79-86a0-cb5ec5a3e2de", "sighting--e0397f30-b9e9-4b59-a749-dbf05e5a6488", "sighting--ffcd0843-1c4c-4d2f-8204-cae9eadee87a", "sighting--d4ccf91e-4de0-4e0c-adb4-0a256509feec", "sighting--5dc2d0a6-264f-474f-ac01-5063662f7e7f", "sighting--4b5c834c-8632-497a-8f17-6e3645fe01a1", "sighting--d0241eaa-a9f2-4ac7-9f89-3d293e9efe79", "sighting--e3c93897-45ea-43c0-93f7-73917e2bf4be", "sighting--059cd3b3-0f24-4ac6-a2aa-cff2b3eaace4", "sighting--75093ddd-3b50-422f-bfdd-4b99cb368b6e", "sighting--b15da176-9913-41e4-b817-59cc1731d811", "sighting--2f2a6794-f274-4207-9b0a-840fbc2a9483", "sighting--59a3bd3e-6ae7-4c56-b8c8-2e89f04c962b", "sighting--72820dec-4b7f-4989-8b3c-e4f04e30efc8", "sighting--06c40bf9-d945-400c-8371-a6f7a4e33d3d", "sighting--d0a52790-ce41-4a67-8fef-ea0391c0be15", "sighting--4a936db7-974a-428a-8d25-744452884bd0", "sighting--100d091b-0da1-4e30-9718-f1194d26481b", "sighting--4cbc3cc8-37db-45cf-a546-489ced9972b1", "sighting--2d95f320-53af-48d8-b945-9b55b70d003e", "sighting--b1b12bd2-bf37-4679-b9e8-b57df21c74a1", "sighting--86511c21-31b2-4bfe-bc70-acef4450920e", "sighting--95830147-8e9b-4ca0-8ab0-7f876e27fe3b", "sighting--8dcfe0be-8c0b-49bf-99a4-2fd9e547afce", "sighting--65b47121-2b62-4669-887b-6f6f5ba7fd57", "sighting--e5bb16e3-a75f-4491-8f7d-f3252bbc94d9", "sighting--4f3370f2-2842-4066-b201-31cee1f37013", "sighting--fd4c2fa9-182a-4b5b-b363-a0b9bd59f00f", "sighting--8a99b358-79cc-4914-9b34-4ffa04da42a1", "sighting--f494256a-e838-458d-8b82-0b11864a3476", "sighting--f2de10d6-cbc5-42f2-a7f3-20253c7bb071", "sighting--577c1869-d1f7-4132-8493-861c8f07f0a5", "sighting--e7fadc97-ba22-4d38-a0f7-2ea4f1307f57", "sighting--ad9317ff-2c26-4e29-867b-93dbf1651b4f", "sighting--fda9ed45-135a-44e5-b5c0-e20155aa81dd", "sighting--dd3dbfa0-92d2-48ed-a52e-52992a441969", "sighting--b1ced358-6349-43ad-bff0-fdef44cddbfd", "sighting--fb237de7-91c3-4ded-9cba-f7014f8bc702", "sighting--b67e3b38-4f70-4445-8619-0b47613a854e", "sighting--4de13aee-99bc-4a99-ac31-d5c23be5be3f", "sighting--514a8156-2691-4a5b-bd4b-17dc0ba9b6b8", "sighting--2bcaf61c-fa32-4db9-b2fc-267c6bdab948", "sighting--06b9af08-4a3c-4b41-b632-60764cdd18b6", "sighting--3370c717-caeb-43ef-90d5-8d2f832c12dc", "sighting--b14a035e-e825-40ec-a24d-caf7fcd111f9", "sighting--7aa2ab2e-dd49-4144-bf7c-5b01248be74c", "sighting--4e1731de-dbdc-4dfc-8bb3-9a575820cff9", "sighting--8a86850d-d1ad-462f-b199-2f1ddf1e346d", "sighting--a49c49b6-cb45-4105-963c-3d4e66e9fd71", "sighting--eb7138d3-415d-4a99-8bb4-59b203522ef9", "sighting--2269a800-9bae-49d2-a588-f1ade1387308", "sighting--30ebe332-729d-4824-8ac7-580a6b69e34e", "sighting--a576310b-1281-48d9-a768-cca8402d5e70", "sighting--6d1566fd-ebf0-4b87-a76e-a922b0362f43", "sighting--5cc0a278-e807-4b98-999f-f0d627719006", "sighting--c9260582-8b1d-4adf-b6b2-fa6619f37844", "sighting--7e0011ed-ab99-4566-95fa-764e34583ff7", "sighting--2c8bf6f2-8caa-4fa4-87e5-1875d13a0be9", "sighting--e7a81ca1-71b4-4f47-b97f-cb5c4bc17a57", "sighting--c5cf4eb6-33a1-47e6-849a-4c18acb6e2d3", "sighting--ea8c7883-f3c8-45cc-a767-e529f73ea63f", "sighting--3b5a28b6-c709-4e1e-b62e-2380cef4a2d7", "sighting--26993c65-b885-4643-aa33-37d73054762c", "sighting--f5727652-5663-4042-ad48-2c48aac53020", "sighting--2f4fcbff-df5b-494e-a50b-c53abad4fa90", "sighting--c9257bcd-ec41-4b77-8682-b68657ebcdf9", "sighting--a212f855-26bd-42ea-9cd3-ea86703dbd85", "sighting--d913506f-ea17-402c-ba25-4c529166cebe", "sighting--44fc77ef-967e-4e52-b783-efa0498e35f2", "sighting--db0ef6d2-9412-446b-819c-27cfef20de01", "sighting--e30581a1-8ae0-4a27-aa9c-5c027d71b999", "sighting--78aa6cc2-ec65-473b-93e2-a62a2ae0ed45", "sighting--4faff00b-737b-404b-8a07-95438ac54305", "sighting--e761cee7-3e6d-4098-9b39-16f3eea873f5", "sighting--4dfba281-e9bf-4455-bf52-37099cd95b69", "sighting--9d796175-c613-46aa-8bdb-a49a8e98d072", "sighting--5b46fcb3-8230-44cf-a39b-e19decde4874", "sighting--1ed1f196-71ac-4588-8635-f86bc4275251", "sighting--2a8c5f8c-24fc-4142-810e-77e131967f25", "sighting--f8c2b71e-cc11-48ca-b376-40a7dd0f9cbb", "sighting--9f70140b-55bd-488d-8ba4-04bb9bcce7ce", "sighting--8ed9df59-7afb-4f43-8d5c-93debb456dba", "sighting--5d16796d-e576-4ed3-8905-51686b0c29e3", "sighting--97841596-4f12-4aae-9623-d2adb3a630b7", "sighting--a401c209-ec6c-49df-a8c7-535c98d32fb0", "sighting--d4da78cf-343e-457a-a196-5b5505a768c6", "sighting--6e84e719-9fb7-49b5-8507-39c5a72731c9", "sighting--70eb2150-498d-479f-9c1d-36b4b4f9c46d", "sighting--7563e4a0-2dfa-42c2-a7d2-75273d77ca8e", "sighting--5bcef2e7-9fd1-471f-b6fd-a8cdefe6cd21", "sighting--898b546b-e7e9-4d6a-9974-b852421cdaa0", "sighting--c61ba98c-da9b-4ad9-8c1d-9bd80f45a6e0", "sighting--ba165438-41a1-4902-b3bc-111bf6a5a3c8", "sighting--e4d0333c-d514-4359-b1b9-3f42bf01fe23", "sighting--37c12bb3-a6b3-4909-bc11-4ffc4e5995a0", "sighting--4cb90901-5dcd-4eb3-83e0-a176517d4454", "sighting--180b6181-2280-4d94-ad6f-dda37076a4b4", "sighting--b93a19ec-5d60-4c1f-8a70-71283354b732", "sighting--b0547124-d902-479e-9477-2b2dede744a5", "sighting--dea19606-788b-45d2-8796-cb3c202f0ccf", "sighting--4f0f04be-b6ac-47de-b4bd-feee67a835ee", "sighting--bb076893-8b57-4092-a4f7-831f61647152", "sighting--79cf4b03-8c2d-458b-9ae1-fe52c327f4be", "sighting--75db940c-9579-49ab-afbc-cd67b1e50401", "sighting--fed29f1a-045b-4ca8-b8b8-933a8059f526", "sighting--bd67727c-1f98-4344-ac41-818d8f9c4f34", "sighting--0a8c297b-6563-42c2-83f0-5dc578752e4e", "sighting--c9673088-2010-4f1a-ba63-8f9743db1d7e", "sighting--5b8abc14-7f7d-46fe-ace8-9bbc839a85e4", "sighting--ed6e4c43-4fa8-440a-9ad4-1e835c9b117d", "sighting--697740e9-9476-4601-8de6-c4b47e8be371", "sighting--4d918654-30d0-4c65-9715-47d61593d17f", "sighting--81c19329-52eb-4a02-a1b4-ced3043d2db2", "sighting--e58b6f58-54bb-48bd-b54d-b6d3dd788dd2", "sighting--c5a2b123-8a95-4a8b-a0dc-d8d4895f1ed6", "sighting--3f030145-d622-456b-83b4-c3f518ae3616", "sighting--0454fc59-fb37-42b4-bfcc-ab08600c13b0", "sighting--e3e48898-3050-4ad2-a259-4aed78961467", "sighting--2bd35659-bdfb-4d49-8c34-5812c8caf401", "sighting--be30ed84-3025-42ef-bf27-1b76febc9c31", "sighting--ae785a58-eb18-430e-8b58-f2c923cb376f", "sighting--142183d7-38b6-4ffa-b986-652ecf6d9e69", "sighting--6702fdbc-d3cb-4c08-9ad8-05fd85bebdf5", "sighting--2a27b26f-8b02-4b9d-9ff1-f75b034d1609", "sighting--74a6e485-925d-4b93-8c69-daaa5997da8f", "sighting--e65e159f-a37d-40a6-be3b-61185f7cdc48", "sighting--59548f05-c567-42d5-acd1-dd83b3da751f", "sighting--93a6e815-4dbf-4c2d-81c4-4ce0a44abf63", "sighting--41ee684d-cfd5-42d7-a3c7-a91dfc3a013f", "sighting--aa87e018-ccc1-4938-909a-73d8b6f5e4a4", "sighting--01eae0fc-58fa-475a-9c70-7362284c458d", "sighting--782777a6-8942-43d9-b261-08e49b16142e", "sighting--59bbc8f5-19f0-4e9f-955d-6708b415b8df", "sighting--f7114ae0-595c-48ac-98c4-960bafc68d67", "sighting--715dd4e4-2267-4876-9aa8-ec9a9e18a999", "sighting--7afd2d1c-385e-488b-9df8-e2fb04455132", "sighting--c24f5101-a51a-473f-a7c8-b73c9700c211", "sighting--a91a71d9-8f4e-459e-bd20-d9b02419c688", "sighting--444f9e2d-46f6-46b0-99b3-faeb27e28043", "sighting--d89d51f7-4fc7-43fd-a1d7-cc2eab6d7f13", "sighting--ee65025a-7b51-4741-be0b-728d4a21772b", "sighting--2e3a7ce4-0173-46ce-91e8-c34e8d2cec86", "sighting--0a399439-d77b-416e-a1b2-e4feceef39ca", "sighting--75e809df-2ffa-4b71-a87f-65b62711906f", "sighting--3c092844-c5ea-4323-9c5c-1b00dadc4877", "sighting--8d0e52de-9c0c-4a7a-93b7-59a56cbef43f", "sighting--d02a5e2a-8a8f-4336-84b6-4e50035d8e55", "sighting--fad8f973-597a-4cbf-9f26-659d3cc4c410", "sighting--4df613d8-824e-4559-8d1d-2f058100efc2", "sighting--c0e1290d-04a0-46e0-95f0-4feb51abf49d", "sighting--20f0c979-4df4-4dab-ac23-1b5220e51a44", "sighting--9593e2ce-53e8-40fb-8521-505ea274a6bf", "sighting--6d5a8e53-89ee-4231-a9bc-0391468df451", "sighting--1f03953b-50be-479c-82ad-e3b1098f8c95", "sighting--aca5bc47-7f88-4614-93aa-011261a9dd3c", "sighting--e3cf41b5-7aad-4390-bb47-d4714abbee07", "sighting--574f6ee1-409e-46ee-8cd8-07b8c3d44776", "sighting--89c6f53d-b3b8-4070-befb-c6cb1b8b911f", "sighting--e8ccba9a-0a9e-445d-88b4-842f3fef0714", "sighting--30eefde1-00d0-4702-a1be-aa58a5597047", "sighting--92f9c907-7691-4dbd-bdf6-614309805384", "sighting--0979e03f-49dc-45e2-8675-a47a46e412b4", "sighting--545b070b-336f-44ab-a553-468255200e99", "sighting--413c3552-4f5f-4453-9c51-61b8f31bd487", "sighting--6d38dbbb-2a73-4419-b805-b2dccde66a10", "sighting--5f6d54b9-e05e-4f76-86d3-1820c00691c4", "sighting--a210fd07-6593-4db9-8885-948ba56faafc", "sighting--34ba78c2-a02d-466d-98b4-3e732e153538", "sighting--e0dbf851-e34f-4f76-b44f-47857541c080", "sighting--2264762b-098d-42a2-9b81-b9c5268fc7ea", "sighting--8a97d4ce-d342-40aa-83c5-edf15d5944ec", "sighting--76f786da-008d-44af-b227-9dd298990ecb", "sighting--e5fc204b-1b64-4135-84fe-f4fce03d281f", "sighting--948cb2e7-0023-4017-9118-2b3202f09a29", "sighting--6a69fe92-48a4-4478-a62f-630fc51125b4", "sighting--7a199eab-6434-4f01-9750-bee7944c15c8", "sighting--aee5f160-05fa-428d-95ff-7b93ea96a01f", "sighting--bd823504-7940-456d-a389-77d867c62298", "sighting--a4ed192d-f045-4dd3-9481-7dc97df364f5", "sighting--58724d03-b584-45fd-900c-b21fa824a880", "sighting--e303c9fa-390a-4c79-89d1-8f86123f30e0", "sighting--5d1b5b8f-67de-4073-a461-38882ce497c9", "sighting--3c060cd0-fd0c-4ed7-bc51-f9b0b4968c70", "sighting--d8ad9073-f89c-499e-9d78-30e05d31e0dd", "sighting--04955911-70f1-42d7-a464-2e83e75a005d", "sighting--e854ff35-d393-4f99-bb66-1d2ee0aeb228", "sighting--262b2539-bbc4-4c19-9e74-7aaa44704466", "sighting--83f087e9-12c7-47f6-9ffe-53d8ec21daf0", "sighting--d271ef3d-439e-4842-8145-83c7c9a8d3ca", "sighting--828a18c5-df31-4af0-a90c-b9c8cc7b4d7d", "sighting--1e1084cd-29ea-4b6d-811b-1c7cab9f31f6", "sighting--42e9ba12-50b4-439d-b79f-e1df1bc7568f", "sighting--2d85e5b6-a346-42cb-a654-9cc1c37e5440", "sighting--cc13e906-025b-46dc-b956-6eb8f25fbfab", "sighting--da506619-35f3-47ab-94a9-019b991b22ba", "sighting--af7433eb-1bee-486d-9bcd-14342fa36fde", "sighting--dee25c60-b4bc-41e6-86ab-24e41552a22f", "sighting--e07fb8ea-1290-41f7-aa2c-bb3c79b4aa2d", "sighting--160c51bd-576e-45e8-8daf-11b8db6536ac", "sighting--ef73d72c-cac2-4783-9d0a-fa3ab7fbc0df", "sighting--458fa35d-b8b8-41e8-945f-b5d6ea09a1a8", "sighting--4cfbe058-1670-438b-89e3-7c9f7d202154", "sighting--1e463d2b-cbe5-4829-81ee-6ce88cb97529", "sighting--6595def5-6713-402e-b9eb-bb9564dabe0b", "sighting--66d9afcc-edac-4852-a462-584ddf7d0a2d", "sighting--08cfc872-39b0-4b3a-935a-d336d9c96b6d", "sighting--cf68f7a0-4564-4d20-a97b-b42a2ed331c8", "sighting--e1e5ceec-158c-4b1b-94a6-1043b5360ebe", "sighting--e38bb5ab-6b59-41a7-9ae9-083d37aab3af", "sighting--ecd63c28-7705-4d5a-b561-0bb79fc491bc", "sighting--ae111a43-abf0-47a9-9529-3c4d7d9cec5d", "sighting--8b728fd4-ce15-41b7-b5c8-c4e09512277c", "sighting--979cb2be-55f2-4aad-b74c-586337b4b356", "sighting--107c05e8-2d1a-4015-9852-b5833bcd1c04", "sighting--1078e215-da86-456c-bbef-94883bd5ff37", "sighting--30993ad0-59a9-4259-a9b3-6f06d8df112d", "sighting--43830cb9-ec41-4fcf-9485-b3e0a766f67e", "sighting--46bc5304-688f-4e10-b591-e0ffd7a1a1e5", "sighting--d51b44a4-de32-429c-86fa-877fdf564735", "sighting--9fa0377e-6183-484c-8cfa-ea20c1b4a8ef", "sighting--af2c806d-b83e-4908-a08b-9e6ee8af4cd0", "sighting--261dfb51-ac7d-4aae-87e8-96ba61599bda", "sighting--1596140a-742e-4cb3-a117-f9e631084b2e", "sighting--48bb5dca-1a99-4014-80d0-ab331d4bbcdf", "sighting--4b994c57-544e-4ee9-9245-5220a047e752", "sighting--080f3289-d59f-408e-9c32-5f22e099bb56", "sighting--662d3442-db65-4071-9dc3-3fc4ea18169f", "sighting--dbba6dd4-ca6c-4b25-92be-cec6a6c1b0da", "sighting--1b2af849-a52a-4f7d-a3a6-67f2a34ef140", "sighting--e51cb862-b334-4b60-b968-fe698da78a85", "sighting--230f578d-7fdb-42f7-b573-2f98a2fd7b2e", "sighting--fc5f7970-4fa2-4c12-b2b5-f7b3e7069ea4", "sighting--bfd8d34c-dbf9-44d9-9e28-546b09d9118b", "sighting--6ee9cc09-ffb7-4a81-9d00-4065ad4cdb99", "sighting--aaba9986-ae37-41e1-939f-e8a89858ae8a", "sighting--6b990247-df5a-4105-8296-8bee69f4efa5", "sighting--c6c793aa-fbbe-466d-8fb1-370d17da58b1", "sighting--7d473bd8-1248-45a8-a707-edd40f7c6d58", "sighting--2f9ba772-f1c7-4b62-854e-15b9bbdb2bab", "sighting--4d4b6b2a-5a03-4d55-9b8b-af50fc84f143", "sighting--5610c039-565e-4732-8207-f3eb2ed33e49", "sighting--0c367742-99bc-4808-90eb-2168ba98479d", "sighting--d7efeecc-ba45-4254-baec-f97072e3b769", "sighting--125321aa-9c25-458e-9cd6-72d5cf424d92", "sighting--dd840397-5700-4f5e-827b-19aa90840853", "sighting--15ee248a-2cef-4e84-97d9-f654342c9552", "sighting--8715b01a-3970-4533-bad5-460ea52e23b8", "sighting--b7a6ccec-f897-43e6-b242-47b3dd24c96a", "sighting--075e01da-8265-4d3f-bd99-464090fe5e91", "sighting--93848cce-8f3f-47ac-ab3a-3fbebcd1b9ac", "sighting--3e45b96d-5776-49a7-8330-81fa9c418665", "sighting--b0f6fec4-6e42-4220-b432-0ffd09a0a086", "sighting--587b8e18-4c6b-45b5-a1ba-9037f6d2f82a", "sighting--cac8fc07-eafa-4166-a817-9bcb7ee94884", "sighting--07a9c3d4-e20c-444b-8e30-9cd7d2b996c0", "sighting--aebed150-8ac3-4ebf-9c0f-749f672655e3", "sighting--d59b7de2-d816-4bdf-988e-0760b46f29fd", "sighting--d7e8aaad-74bd-4278-a1e2-f2bc6404566c", "sighting--66dc4731-1cf0-4726-b51d-ec0984fd7fc4", "sighting--d8ba7919-625b-4e01-9d80-6f3baa1e6508", "sighting--9f6883de-9fdd-47bb-93f6-050f22a6860d", "sighting--76eeeea5-5cb6-4ac4-b24d-4ab8eea4c395", "sighting--cbd8acfa-2570-4dfc-812c-aad0e72a39d5", "sighting--9718583a-edaf-4268-9a99-23dcd2277750", "sighting--eaac566f-5543-45b1-80dc-57adf6b618ef", "sighting--67c854f4-d1e2-4a7c-ac28-179a45e39dbe", "sighting--9015a464-67ec-4e86-a00d-c2c6767fdc87", "sighting--9fb1a27c-5680-4342-9b5a-c268bc15eeab", "sighting--ff22fb81-8115-4883-95cb-7900b412a4a9", "sighting--345f6045-f99a-4336-870b-cb403438c245", "sighting--a35f8a09-a876-4011-9740-95dd5361f4bd", "sighting--2f83b556-b3b6-461a-a8fd-bd06b301fe4a", "sighting--ce9d47e2-9add-4ec0-9e2e-461dba089291", "sighting--cdc2b854-8e86-4a65-ae92-78f37c3f0576", "sighting--b2b8b440-24a8-41f5-9368-a09ce8b41a81", "sighting--6b1ede4b-5ef4-4a91-a17c-06d2cf3e4595", "sighting--3c0092f1-a47e-4ecd-a0a1-d858453e5d39", "sighting--ce30ff2c-552f-4c05-a1cc-6b8f2717d8d4", "sighting--eadfd51e-fe87-426c-8a4c-7bbb35027d84", "sighting--4b8dbc83-87ef-49e7-8a50-e7d8defcece5", "sighting--5caacf20-cf4e-4ff1-a11d-ed383bef08ad", "sighting--e8634667-5648-493b-b2bb-fc48caede649", "sighting--65ea76b9-f689-4da8-b4d7-2fda2a5bdfa2", "sighting--06a4282f-6aaf-4a21-b8aa-e1ff8fb697f8", "sighting--ace32dba-598f-4ad5-9337-165f05dfd94b", "sighting--7afc47a1-f399-4c22-8fc0-1f3533ceb81a", "sighting--d0c40058-73f4-4478-bfb2-19066467961a", "sighting--673fea93-c8b9-4e01-8cb8-3f6165daf970", "sighting--d8048498-6eaa-4513-913f-50bbb0fa0e2a", "sighting--5cb3183c-2c39-4254-a7a3-7c2ee79ac1e8", "sighting--b2d9644e-c84a-4a4a-95d4-654adfc14a22", "sighting--2d99911f-9d02-4af3-aec4-455a6fc1c08f", "sighting--e5bc9d05-89f5-4538-ba64-4afe569b4d58", "sighting--d7bc5da3-40a7-44f7-960f-cae303fa093c", "sighting--d30bc8e2-c824-4244-ba7b-cba993290358", "sighting--2bfa96b8-c729-4c29-a7b1-055a50913198", "sighting--c6834178-1671-4193-aa3f-327f8c3e5ced", "sighting--38738357-4b6b-4bea-925f-d26b685aca79", "sighting--c384a813-dea7-47b7-b152-af294f98e2b0", "sighting--56025461-08c9-4ca7-9aff-a011c846bea5", "sighting--ca115ac5-5352-444b-8d9d-10e6ec89ff52", "sighting--e28a3003-6cdb-42bc-bf89-ed3262697919", "sighting--46f69338-5bcd-489b-8510-e5143e5e0a93", "sighting--f365d3ff-6c3c-49b2-a213-c9de0067533f", "sighting--e65496aa-63c6-4c11-be3a-7f3af8c401fa", "sighting--67040075-4992-4544-8663-936ef684c8d3", "sighting--9318b853-ccf7-4e97-b613-751e440c8084", "sighting--e920ff4d-8e5b-4272-8b5a-3723c5fafb33", "sighting--82a3d452-8b85-469a-be10-aa8887f54943", "sighting--930260b8-751b-4a4b-baa8-8c88dac663f7", "sighting--e66a9b5a-d93e-4adf-800f-90bdbab21cde", "sighting--500f7bcb-538e-4522-850c-a02569e8bd03", "sighting--90c6d2d1-978e-4cf2-92cd-a116cf7dbd2b", "sighting--d920d3dd-e329-43f1-94db-7746cd1c6113", "sighting--db631268-6b66-4d01-9660-474b2f97dc0d", "sighting--790869a1-45bd-4631-b44b-597a259edc2d", "sighting--9a27fac2-947c-42ed-90df-a0c4e846637c", "sighting--61f460bc-06f6-4482-9b9e-5afba4e133f7", "sighting--717260f1-c70f-4730-bed2-d6f4ab8606ac", "sighting--387d996a-53fc-4e66-ae7b-d7b3d1e927e7", "sighting--a7e97261-cea2-47b8-a9bc-3c156bfb0611", "sighting--2f6b583a-e8c2-495e-bf32-4cfd88183e9f", "sighting--2869fedf-d6a9-4f42-9042-b063e5a0bddd", "sighting--66eccacf-d41e-4088-bd3c-644fd30cadd3", "sighting--47944db9-0650-450f-8d1f-fa5428aab09a", "sighting--0c3f04a5-d968-4fe3-9226-870eea6e37e8", "sighting--dbfde2b6-b919-4467-a42c-c94a990e6a67", "sighting--12ebfed6-bccd-417f-af72-f5c677cf5b82", "sighting--24fe254c-38ba-4bbd-9eec-a31d08721246", "sighting--0776ae82-d736-4d7d-a4c5-70d855c7ce7f", "sighting--ede88519-7c4f-486a-877f-aa3d287daab7", "sighting--d0811564-7ead-4005-9ff8-4d59a29eca00", "sighting--edbf5c26-1208-4f07-bd97-70ae3c7637c8", "sighting--f2a50d45-1cf1-4c87-acad-5eb19351103d", "sighting--1c3e8702-25d4-4e7a-ad5c-ad471b0faec8", "sighting--22edc232-f451-4548-b04b-56bb0e4ab8ed", "sighting--ecf98052-67fb-4454-88b2-c075cbf86664", "sighting--60b6ce7b-3e91-406f-89de-cb8f9737c925", "sighting--7fe2fedb-6c37-4b62-8d3d-db9a89cce4c9", "sighting--4d55e79e-c4fa-4ae7-8533-cd6ea569f032", "sighting--24fc822e-2222-44ab-bb3d-3a4088f0e995", "sighting--f30551ae-97d3-4049-8419-d1d0fea0161b", "sighting--c1af79a7-a1b3-4c58-9d6f-89b870b98063", "sighting--793da0c1-9f14-4e19-9f73-3a4c7d8ca5ca", "sighting--c42b70b7-e11e-4b60-9fa2-760960ee9daa", "sighting--c92b8543-5c42-42bd-b75c-78fc74cdf920", "sighting--8e4bf1a6-3104-4edd-971c-3c202af8d0e9", "sighting--aaf11958-6532-4b41-b76e-2442b55465cc", "sighting--70c30469-83ad-43f1-9bd8-760c4339f0a4", "sighting--a86a5996-2d26-421b-992c-4398e6c2ad62", "sighting--0180ffc3-c853-48eb-a0e9-a26aa6c4f0b0", "sighting--f8633f27-2686-47f1-a401-e90e720fec66", "sighting--89d8039f-0c6b-47c5-924a-6f1623f6ef06", "sighting--033bcee8-bb43-4db8-8a5a-49730b4a7509", "sighting--a1cead4b-3150-4d66-8219-707430af030b", "sighting--a91667ae-5369-4873-958c-140bd3c8f1d5", "sighting--a327e853-2e8b-4ef4-bcaf-caa4bd0246cb", "sighting--f1d2ea0c-5fa3-42c6-a0d8-878806d5052c", "sighting--545b93c7-6d0a-4e16-a981-0251f2def757", "sighting--dcd1e140-d5ae-44ed-9a87-4c32a119273f", "sighting--55b8f941-784a-4f9d-8d83-9cbf1150f004", "sighting--03c4bbf4-7e37-4e49-8cb5-2398a143720d", "sighting--83b6be63-1993-4f7f-9bf8-534094553c13", "sighting--7f06418a-7747-47b9-ab39-528fc5a5f8a7", "sighting--30ad60e0-56c1-4988-b27d-11b671e49aa8", "sighting--16a624c9-071a-4b5a-b156-2118f1b5e6da", "sighting--56311d16-5b43-42ec-927c-fb5a4588353f", "sighting--b5ace22f-a1c7-4457-b6a3-92ab756b6963", "sighting--b17a8790-c128-4fa6-b6f3-79d3a898565b", "sighting--e44732d9-cf5b-4cbb-8434-53224bb48ca9", "sighting--ef0df020-000f-49c0-94b3-ff85400d5ff0", "sighting--786b1b2a-a00c-4a67-a151-13ebba56565a", "sighting--448acff4-79cf-43ee-b0ec-0e6be61d3689", "sighting--a11959c4-51e8-4521-a786-3b1ba979eeda", "sighting--027ecce7-57ec-43d3-91f5-72f8b7648d18", "sighting--e3f7e22d-899f-4ec9-bea0-99fa4ca6e828", "sighting--aa921d9b-ce60-4621-a8c9-f3201f298cf8", "sighting--e874bd49-7fc7-4563-9bca-78549ddbf687", "sighting--650cb1bd-bb41-45cf-aba6-577083e5d29a", "sighting--0209e6b7-7a5a-477b-8c2f-28a0f5990c0e", "sighting--26b162e4-a021-4060-9556-6992b31d366c", "sighting--12605594-f98f-47d1-8bf1-eaa11a0490ae", "sighting--b949c7c8-5bfd-4d7c-b924-9f29b81db76b", "sighting--3447cf4f-1f91-4a18-9cd2-35ae8e20e93f", "sighting--34080049-d0f9-4c60-a524-775b94ef7062", "sighting--f3e31793-35db-4ea0-8dc7-7c45670b18e4", "sighting--2f162f9f-7bb7-4343-8424-822c2c7a964b", "sighting--ff400aa3-de2e-4b3c-b9b6-a74a2b8b258d", "sighting--cb14bbac-b6c5-4e3f-aaf7-11c73ac1f181", "sighting--ca1a786e-7db0-4a69-985f-290990dde40b", "sighting--7e03825c-b216-49dc-8407-db2021ab7f39", "sighting--cd374ab7-addc-45ce-a85e-13a4e5bbe5cc", "sighting--a7ad8cff-681e-4e1b-9493-f52ff10aad97", "sighting--d9d8bba0-3706-456b-b017-0c420907c131", "sighting--9d06fcd6-8080-4292-9a45-ea912a599b24", "sighting--cb518505-83b4-4fee-975b-69c4849858bf", "sighting--71226b76-c582-49cb-b2e6-cb18ce11c761", "sighting--018cac56-376a-4523-a4fa-0d3b0b0f1d05", "sighting--94e79e4d-84da-416f-b591-52bcda202284", "sighting--6aa3a0af-e049-4405-af22-634346f895ee", "sighting--126500f8-6c18-4b6e-8317-073bae16acd3", "sighting--917c5c49-878d-48ec-b339-17c99204ceb9", "sighting--af7ef800-52a9-4bc7-8444-4b7f78b83ee0", "sighting--7881db0f-8c9d-4052-bacc-b44e0c09a46b", "sighting--8d844985-bb8b-4bfe-b932-83553a243316", "sighting--412aa426-4c1b-495a-a4a5-53e69abd9d3e", "sighting--43496842-6987-46f9-b45e-37df7b4aeb4f", "sighting--da4ec126-bd69-4c02-a555-22c7cbf934e4", "sighting--a5990a73-2e1c-4c16-925c-36e2233b5c16", "sighting--8decae26-8a74-4862-ab17-98a2fa783fb4", "sighting--ed2180a4-5900-468c-92e1-069a8f3d0e45", "sighting--86f3d325-2c36-48bb-ba06-56527f226e83", "sighting--dd21de53-3f57-462d-b488-b7b17e0a1573", "sighting--bda140df-6f8f-4e78-aaaf-4f911e63b0e1", "sighting--ca533854-54a3-453d-89a3-df9e16659e64", "sighting--a3ba9e22-98d9-470f-b9d0-82589f1fb35a", "sighting--74016309-0f42-426d-8e0d-88454d507466", "sighting--241faa49-183e-420c-87df-4b82fc4d173a", "sighting--17e2cbdb-be48-42d9-a1bf-17eeecdae395", "sighting--734adfe4-eae3-43a9-94a7-ab7d57530b8e", "sighting--b322d911-d39c-42f7-aa74-993368d7850a", "sighting--ad2f1a56-825a-44a7-99ab-7159c5797e22", "sighting--022b4229-3d3d-485a-a813-c09cc1a88130", "sighting--62e97725-dfc0-4ce4-b685-7aa49584da8f", "sighting--bf901eb7-13b8-4878-a6aa-2e9b4874993c", "sighting--431a5cdb-eb35-4fd3-b767-50179d1d9141", "sighting--4397668e-4d60-4482-90d6-e6d13a95765c", "sighting--a243a6d2-b18e-4c8a-9b4f-dace4a01b4a7", "sighting--c585c17e-8557-4885-a733-754594eae028", "sighting--f2d6d865-2c63-451d-9048-6e4a409fd80f", "sighting--0389f253-11eb-4c37-9a3a-a497d2cc3b90", "sighting--1a1760d2-049f-46b1-ba3d-867c9b0b79f8", "sighting--2e9577d7-ffe8-4dcb-9aa2-5b923bbbebe8", "sighting--b7994841-6cde-4732-a0ef-e0bff205c389", "sighting--cb3b636d-6946-45ad-9680-9bf1cf8810ec", "sighting--a1605744-f777-495c-9701-3c6ab1cbf097", "sighting--365fc6bb-c3af-4cd8-88de-1e4ff6d8e9ef", "sighting--6e95b22f-3169-4fbf-a22f-e5ad1da1ec62", "sighting--d92966d0-e03c-4ecc-8bbe-6b1733ed5afd", "sighting--101ad075-ff8b-4fef-913c-e44bedc16e3b", "sighting--08d1dc04-8b1e-41bd-8577-8d17a25cb861", "sighting--ef6b9434-f381-4ce1-9201-78863a3daac4", "sighting--d2f24f7a-611c-485b-aba4-d9d98d817dc7", "sighting--9b2c83d3-4242-45af-86af-633f336e67b6", "sighting--ec51be5b-7b61-4c33-aa5b-8492cb7d20f7", "sighting--32a000c5-31f0-44e1-b8d1-a4041cecd077", "sighting--21b9011c-1206-4adc-a6f9-201c37fc0cf9", "sighting--4aeff677-cd71-4030-bdd7-26c292d5af29", "sighting--b2a48e7d-4df0-42c2-94db-39803d9a3821", "sighting--73ffbc31-8b60-4101-8a4c-d82e89610109", "sighting--842a9f67-a8a7-4473-896c-5583aef6308e", "sighting--bd10e064-9384-4227-a4bc-ba8b521fd811", "sighting--9045d466-a5a5-4064-92fc-195488838e27", "sighting--c458bc8c-9ef6-4306-862a-16e8d405ab34", "sighting--5dbc71f1-7f63-4abd-a6c3-11caa6916fdd", "sighting--d4d153b2-17ff-432b-9dc7-1530c8419aa1", "sighting--d8f5f60d-820e-49a2-b6f2-712d0edfbf4d", "sighting--a9e55017-e65c-4b72-bafb-0b153ad7a519", "sighting--cabf8ced-0083-425e-8803-0f2ba3754700", "sighting--bce3d7ae-b1e5-4fe1-8801-5d3ef514d2dd", "sighting--32a68565-5e48-468d-9b2d-c9a1050ca9f3", "sighting--71263df1-4b7d-4f1e-a88c-1052544f9d36", "sighting--e8d94ef4-3369-4db8-bb5b-8525401e48a5", "sighting--f0598c1a-66bc-498c-834a-14f46c6cd0a2", "sighting--ce958ba0-9bca-43ba-b782-0990cb675976", "sighting--3eca5260-8350-4c6b-9f66-ce694de06ac4", "sighting--ff756ccf-f3fa-455b-a3cc-a3c64a5ed9ad", "sighting--4904ef5f-a414-476b-acc0-f0da8f0f934c", "sighting--05221e9a-7e08-4929-bf98-db0f5fb90a4f", "sighting--fcd1c593-5fa0-4aa7-80a0-18860861ffee", "sighting--e5240e53-f0c8-44c7-911b-9226e4ac8ca0", "sighting--66df53da-57ac-4436-b9b7-61de74f6b87d", "sighting--8fb0ff35-0609-4104-9e57-0876953d843a", "sighting--e909604e-f905-4807-a953-1f19d8cd7a4f", "sighting--7cff9a5d-dfd5-418f-971c-0586e3362bcb", "sighting--56f00912-82f9-4974-adf9-3dd74d2d48ae", "sighting--5f72bcec-ba7d-40cb-9dce-b4a2eb788c48", "sighting--19ccd0f7-f802-4aa2-a6da-858ec1dd6a17", "sighting--90e8a557-aae6-4459-99ce-73d08ea6d26d", "sighting--dbbad7c8-a085-463d-9ed3-14b5d8cf8f53", "sighting--3374fcec-625e-4dea-bcc7-74f7e52c447e", "sighting--83d7eb22-da2e-4bed-97d8-01bb78332c17", "sighting--b0c01b95-b768-479d-a3f1-e55f06c4cc4f", "sighting--38a1d9dd-60f0-4d31-9d8b-91156abade3b", "sighting--9a0c1c1f-da12-4642-be06-299934da2302", "sighting--193f6c95-be0a-488d-b0a0-0456c8696190", "sighting--062354d3-f652-4034-aec2-4460861648ca", "sighting--3fd16da2-fc0e-457d-a583-938899fbe024", "sighting--e3b30eef-408e-44e8-8793-403e670d1721", "sighting--8d2a63d4-11bb-432c-b0ad-57de2c9c0320", "sighting--5921d3a0-fa17-451b-b93d-19a2cebb8254", "sighting--46848633-4ced-4792-b061-018d032bfcdc", "sighting--2da4d7fa-253f-4970-8731-f4defea46d48", "sighting--0f6e7689-5938-4ff7-b5e4-2c3a83d6eacb", "sighting--6bb1028c-3f2c-4030-b34f-39897390300b", "sighting--130567cf-daf2-4151-9db0-6d3fbf75630a", "sighting--33ffd5ae-0bc5-4f15-b4ba-eb608b3e7e7d", "sighting--1df5b273-20dd-46e3-9414-d5aba476229c", "sighting--37e027b8-1ce2-48ba-912f-229a67ff2fb3", "sighting--7ef8c85e-8849-44b2-a92d-6dc2de142315", "sighting--e2de5b96-72f2-49c0-9e54-4865b3879051", "sighting--44fa67b7-f730-4a8f-b41d-f16d079215b7", "sighting--b6c2c724-9cb5-40ad-8de1-580147cedbac", "sighting--6b3c4785-a765-4a74-936f-2c5047a000bf", "sighting--db6f8b19-a5ba-460a-8617-7aa0c8a5d233", "sighting--f6cb1a40-a10b-4780-b96a-188d0e5177ca", "sighting--85caeda4-2b55-405c-8309-5d7143b165ae", "sighting--91588e3a-42a1-462b-8985-088a73a2e2fd", "sighting--888c974b-201a-46a9-90cc-7aa1a0506605", "sighting--5ee23901-dd37-49e0-9707-53d95a26f11f", "sighting--096e521a-8405-4b21-aa8d-39bae820aef3", "sighting--cefaf9b1-6716-4b1d-a2ad-67f2c3a9efab", "sighting--7d8abae5-67e7-4f38-b504-51cc9582eb96", "sighting--d2aac913-911c-443c-98e3-f2f4065e845b", "sighting--2a10570f-9717-4451-9734-699b9637a532", "sighting--79c067a7-741f-4ebd-a4c3-9ad0eb29bfb3", "sighting--1d290f11-da3a-4ce1-8f49-45b9cc8f3b3c", "sighting--d4345147-e84d-480b-8bcb-a8551a2d8486", "sighting--7f5cc5c4-22aa-456a-979f-4563d8e5a0be", "sighting--b2234b12-417a-4e75-b4b5-1acdd610cb5f", "sighting--d1f2b53c-4421-4434-a3b3-b6d6568718b9", "sighting--a8742d0b-c1f0-46e1-8a73-ecc43c3ff425", "sighting--81a17b60-bb38-446c-985e-918011251ecf", "sighting--a68cf2a8-7080-4766-b589-ca19a0567b46", "sighting--d6977c4c-6d32-4d19-b7c6-585965d73169", "sighting--ca30ad90-6206-4430-9827-72b2ea4257e3", "sighting--782c276f-5063-4fc7-af06-58aae13352e7", "sighting--77e5f0dd-6fd6-422d-8bf2-ddee1c448d86", "sighting--41c6b77b-ec37-46ba-b952-a4452445166b", "sighting--270ea1c8-e7f1-41d7-aad6-7d9fa9439183", "sighting--2ee346a3-15c0-49c7-a799-1b8b9bdd7255", "sighting--3c0a019a-f4d1-475c-a681-7281efd596de", "sighting--ca1fae23-2a5e-453e-ac7d-36d0f628d866", "sighting--38d10254-13be-4bc7-b766-f572f38bb0f3", "sighting--a4847dad-c007-4519-a44f-a8b9f36010aa", "sighting--3ffaaf28-b21e-4269-930f-fa669b1b773e", "sighting--041c47e9-fdb2-48e9-94ad-f7e8685ab2af", "sighting--e41ac7e9-5121-4523-84cc-312fe6689eb6", "sighting--2111347f-2d6a-49c4-852b-43716bb8f51d", "sighting--5c60a53c-555f-481f-b742-f86caf8e5573", "sighting--35223e94-ad62-4b0a-b25a-776fc00946e9", "sighting--40cbee01-c6b1-416e-8091-5a6a7c67518e", "sighting--ae45386e-36a7-4626-9283-a446bd6ae55f", "sighting--033ea5dc-c4e4-4a0d-943d-2d897f8445b0", "sighting--4c7daf17-cc26-436e-be8e-4f52031c90a5", "sighting--0864c60a-28c1-4949-b802-906bf2ea3405", "sighting--f9fa8399-28f5-4977-b365-0f080a636556", "sighting--44042fca-00a9-437a-b34a-b0356a18d7d2", "sighting--965abce5-a4eb-4436-aad8-107069976efa", "sighting--c82bb999-6f2b-4f93-a880-fc4f8c024b40", "sighting--6c1cec75-2c65-4784-89df-00bbafe01bb2", "sighting--30b87fb0-df29-4a28-8ed5-c10eb66b93c9", "sighting--6dacc331-da80-4a89-8950-0cd695527a6e", "sighting--62c9771c-a8d7-4300-8271-2c8810373bae", "sighting--32d668ed-c53a-48c5-a958-e17dc6962d6b", "sighting--96e11a9d-0941-4928-b877-3772dca20f93", "sighting--45c75845-cba6-449e-a7a8-c762dc588cff", "sighting--0b7a71dc-f2d6-4337-bf95-a8e8da3385b1", "sighting--f9b8c7a0-5c04-452d-a1c9-6998885340ad", "sighting--d988af1b-e725-4870-b162-a80c6d273f62", "sighting--88ce06aa-68b5-484a-aea4-1f00def8e72b", "sighting--c61c2f88-34e0-4979-9d64-44f832f51098", "sighting--9c7e9c73-4d3a-486d-8e31-72933f110b18", "sighting--34fe84ce-df73-43ca-8111-4e624385b8e8", "sighting--5f281fa3-58ba-41cc-94bc-c272a3463dd9", "sighting--2b65ba54-4a72-48ce-97f9-7507d164f29d", "sighting--0375914c-0b2c-43da-9f8e-723cfd1c57e8", "sighting--1973f002-77a5-4702-9df0-d1e93072c1bc", "sighting--3393bf93-3512-4724-8c04-d0e74daf0fb7", "sighting--4e4114bc-92b6-44a5-91ca-908163ce7e01", "sighting--d87d7007-e2ac-4808-94a6-dbff34d7312e", "sighting--0aa34cab-1e19-4490-a80b-461319f36eb3", "sighting--56c460c2-f2eb-4d15-846d-80d598cd3d6b", "sighting--9f4777d0-073e-49c4-89d3-8bf57b61b4b8", "sighting--ba5c032f-eb57-466b-a610-9417a8b7b030", "sighting--6ef11446-63d8-46b2-af70-30d505c5d90d", "sighting--9b9094f5-d752-4d5a-91ab-3bdfa3af3c7f", "sighting--1c753c5e-683f-4d67-b41a-dd197a8c6eb0", "sighting--55c57fa8-9a0e-4a20-9d29-3c1a08e17d7d", "sighting--90c34f47-e208-42fb-91d9-831518d71316", "sighting--1e1efb36-da54-4711-8443-fcfb0bdb70a1", "sighting--439a2b99-f6be-4481-b7e2-0679e827b422", "sighting--c83fae53-f01c-47c3-82fa-a72d92d08cc1", "sighting--7793049f-9be4-4e73-b2fa-933fa0f29942", "sighting--cc12649e-2214-49d8-a828-2b07348e95c8", "sighting--5b8e32d2-1e61-4a1c-b2a8-4c09ce365ec9", "sighting--b84f28b2-a3d7-4e8e-b3b5-607f7d3e981b", "sighting--605bc83f-2304-44f0-affc-dd060a9f7df1", "sighting--577806df-47c7-4f4c-bc61-11b1eca92c15", "sighting--fa2595d2-6f69-421b-8c24-1b5b94c5d14b", "sighting--2e1bf944-6417-4e94-9f7f-38891b1981bb", "sighting--cbc0f9f8-4a03-47ce-b37e-2fcdb1dbaea1", "sighting--e3ae9a96-5db5-4d2d-8fa2-8698ba1bf3d2", "sighting--a794c78f-2bcf-4a05-9a92-9b5fd18520ad", "sighting--33302796-eff6-4991-8bfb-9843394a204d", "sighting--e915047b-2ded-4078-97e3-f4d4bd725c14", "sighting--385c8324-1d77-4f8e-9f58-21e2b13740db", "sighting--90224f60-0826-42d3-bf63-57c975c8618a", "sighting--e5a16946-253e-40c2-894e-3938564f79ed", "sighting--d8e960bf-c619-47d1-b025-db05894a26bf", "sighting--faf0f745-f2a8-4ae7-9184-a5383f56beb0", "sighting--ac02b9e7-54cc-4460-b0fc-aeb52627560e", "sighting--888ecffa-5206-4a5c-8e12-31f23e989bc1", "sighting--a40276eb-52ee-42da-9da4-fa22d8ad4eac", "sighting--d3bed1e5-c3c0-4a27-8d73-d704fec7f9bf", "sighting--4193c376-1fcf-4b03-83b7-f3cbb0d0e124", "sighting--7aa0fad2-447a-4c7f-b19f-52f5111b8e02", "sighting--fa986c83-bea8-44a3-a10b-c5d81621eb18", "sighting--9e685c1e-cb72-43d0-a3d9-81682c0adb8d", "sighting--f1cab10e-f266-47bd-b95f-c967375e33cc", "sighting--a65b104e-bea0-4049-af5c-add41ade2d40", "sighting--d77bfc72-f79d-465a-b84f-937142c7b3c6", "sighting--c2ccc8bd-d443-469f-8873-c97ef486d015", "sighting--6de3c90f-4eb2-4015-9761-77b0453249e7", "sighting--87e30a68-9d9f-4527-b1a6-f3aa74e9f6f6", "sighting--b5faa9e3-210c-4053-903b-ee5a487515eb", "sighting--7bd2ddc7-f3d7-4f1e-b562-2349c9b37a77", "sighting--aed6eb04-6422-4ab4-bdf5-7b70bf076a3c", "sighting--10071e37-bf5e-40a6-89ec-4fd95f7e5845", "sighting--0dfde86f-8c76-48ca-898a-7f888e262165", "sighting--d421ad6c-0bd7-43a8-a17e-29f88b3245a7", "sighting--74238fb4-9054-4014-8ba5-0512b4be454d", "sighting--b1970fb8-1d8d-4dd0-9edc-a358176da77a", "sighting--7b94bc7c-9dda-4fb9-a8fe-0d2783179041", "sighting--9657d41a-8d13-494f-b021-d4ac81636365", "sighting--88d0c9ac-0698-4cb8-afad-497b89d74387", "sighting--e3204e7c-4382-49a8-b6cf-73feb4be9ffd", "sighting--83da2355-620a-4406-9d6f-251b043e294e", "sighting--8cbf8357-9fc0-451c-b4c1-5b776c56046c", "sighting--81bb0c93-fe11-4843-b2ca-286820492647", "sighting--3c627024-5a43-4135-a7f1-ea65072ab2fc", "sighting--333f7189-4fb4-49b7-93eb-5a0657b7b939", "sighting--e4811387-f488-48e6-b987-88f514ea5074", "sighting--d31b8aa3-f46a-4c55-9197-7eeb91fc2baf", "sighting--247738e4-d12b-4f1e-809b-5607275ae8ae", "sighting--fb81cc98-1249-4951-807a-a2d7078dbb52", "sighting--86aff2e4-4cd2-498f-8d2d-0cd05c802d84", "sighting--6d2dfe28-dcba-403c-9cbb-7a46c26ef02f", "sighting--84e822a2-6f9a-41af-b468-5e5e7866d9c4", "sighting--48f9bb59-e837-4034-b231-16aeaa44649f", "sighting--636d234d-2a49-4fc8-86d0-891617451715", "sighting--3dff0870-3036-4b40-81a3-0ea59f837240", "sighting--70ecb805-94d7-47ae-8eaa-c16edbe9193e", "sighting--95e36a25-3e74-491c-aa83-f662dee5c752", "sighting--2aef416e-e3a6-4110-948a-d2f3a8298c9d", "sighting--e41d8ec7-02f5-42b6-b088-4cb78aebd626", "sighting--797fe464-2571-43ef-ac4a-2fda084916da", "sighting--3bfbd72f-59cc-4376-b2bd-74835e857b78", "sighting--6b738f1b-6b91-45ee-b851-ce03c5e2e294", "sighting--bd24cb7f-7fcf-4284-a840-07ec0a217334", "sighting--84659a1b-87fa-4f9c-bbf5-7fdfe621e93d", "sighting--bb8f40e7-e8a8-439e-a0b0-f60b3043a48a", "sighting--7129537e-acbe-45a9-ac3e-54edd17f6fc6", "sighting--ee8f851a-5372-47de-be90-36f7d243b1c2", "sighting--95aae837-60ab-4d39-b83d-96d58be1795d", "sighting--e981bca8-5aaf-49c2-81c5-8cef2ff17113", "sighting--a624bb61-1b72-454a-bada-36e72173cd45", "sighting--04346f56-f184-4724-95ce-695f62609f18", "sighting--09a0afa3-df04-4aa3-8f44-3b655931b8b7", "sighting--3435e177-76f2-4203-839f-4f81948c4e26", "sighting--35e74874-f6f4-43f8-8375-dabb6311c516", "sighting--516b57b4-1275-4dfe-91f5-059aa747491c", "sighting--d0ce2b6c-3962-4940-94f3-bca3611f65bb", "sighting--e83f4166-c565-47e3-b48f-2d2b39c41666", "sighting--6151c31f-5750-48b6-9bbc-2a7477873d76", "sighting--327d4c2b-3371-4ad5-8f0a-2baf9ce6706d", "sighting--914a3cd9-41cb-44dc-9c8d-b4a0eb83aa49", "sighting--0446c53d-c325-4be5-9c74-dc227ddfbf8b", "sighting--12ccea8f-677f-4816-b69a-7f5d2b288705", "sighting--27418902-9567-448c-bae6-ca87ec008bb8", "sighting--bc7714c0-17f7-4554-a38e-8d80f14c2dd8", "sighting--f8623062-231a-41c9-a394-bdeb2dd3ca0c", "sighting--bfd9d173-9949-4a13-9d36-ddc9a6e8a4a9", "sighting--6bb5a2f9-5eac-4049-b611-e6675d50893a", "sighting--85ab03c7-bc9a-497a-add3-ddb85cadcb9e", "sighting--fc0d2fbf-4a45-4d18-8701-fde5056d579d", "sighting--2df06134-eb6d-4a88-ab3a-fc52e0477323", "sighting--0baff9ce-ce74-4f72-8e08-f7fb91678567", "sighting--2cdad5fd-6017-464e-95a8-5392225d8386", "sighting--6b898ce0-5cfd-46b0-b44a-63c3866bbc2f", "sighting--ec26c0d5-0d52-4a45-a466-eb6c81dbc8a3", "sighting--24c9428c-3e45-42b4-855d-b7732bfb73ac", "sighting--64aad2f0-ae7d-4857-84a8-4772b4132cc2", "sighting--d0ba9325-3ba6-49eb-8077-566303edd34a", "sighting--77cc0b63-990f-49ee-bd3f-93d78b492ab6", "sighting--d079fe4e-49ea-460c-aef8-c00aac1c1cc0", "sighting--5b27bcc0-e633-46fc-b157-23d88b7c4f70", "sighting--ebf36d3b-9fe8-4555-bd37-7fecc53b7997", "sighting--44fa36a5-2d47-4c1b-b699-ffbac4689472", "sighting--821b0415-765f-4d02-8dea-26a0131c3650", "sighting--ee1ecac4-ddb9-4567-97da-3e3d2a6105db", "sighting--f487e628-5308-4545-ae70-155264be2c4c", "sighting--969d5120-c24b-4a9d-9710-203890e2f038", "sighting--4a286242-afd3-4b33-92af-81eed54ab61a", "sighting--ee771453-2318-4150-a2df-9ca0ba10216d", "sighting--6cbefcc2-69af-4d80-9d21-57ed25a1c76e", "sighting--21e292ec-a643-4577-9d49-c86c8a63ec34", "sighting--8e80c7ca-fec1-4d62-b31f-e3bb82c6ef2a", "sighting--d346a825-a49b-4ada-ad32-82aa47040ae1", "sighting--ba66811f-2fb4-4eb9-ae7e-d26e7b0cbc8a", "sighting--a17fc3a7-8428-47a0-9588-9357074a7357", "sighting--53b36f47-a879-4924-9f72-c210745ec1c7", "sighting--b6666a14-97da-4f7c-a742-95ceace0b516", "sighting--208d182a-89d2-4cc3-b643-51336adc8c62", "sighting--70453011-c720-48d9-b2bf-94a90446d579", "sighting--77460faf-c7d6-4e44-957e-a49339292358", "sighting--68977e11-2999-4ea8-b51e-874712169607", "sighting--f328a613-1c9c-44a4-9437-455b5ef28bf1", "sighting--a231468c-6d9c-4b22-bc44-8e106b714d60", "sighting--a3dc11fa-0eb9-4b98-9129-75f9373e3bcb", "sighting--169ef3a3-5e8d-4a42-a61e-6b120c6b31e3", "sighting--980d31fa-1c96-4d0c-8247-3c1b6c7884b3", "sighting--b68a8e8b-e0bb-452e-b576-526ae80fc856", "sighting--83ed799e-6131-4c8e-ae7b-a42d013e64b1", "sighting--9ceda809-a440-4176-9fe6-773abc24d9cd", "sighting--73e92581-bf60-40e6-a3ee-b586e2a48b5a", "sighting--700b969f-2d79-415e-9b7f-0b9dd7f69973", "sighting--94f7784f-90cb-40e6-97b4-4c9226be1360", "sighting--f30732a4-bf49-492d-ab0a-6a5a10277820", "sighting--5f1d1e23-abc4-4370-ae81-15bd4ce20a3b", "sighting--7a7666e0-8f79-4c5a-b1cd-bb1c85d294f3", "sighting--add82b9a-7ba4-4ccd-84f7-13d4c0e9506e", "sighting--4efa79e6-3cd6-48b9-8d04-2eeecea6587f", "sighting--53d88dea-a2ae-4b57-8686-338d5ae074fe", "sighting--6c8b9baf-8115-434d-a3d7-0f131d595565", "sighting--08406f8c-cf7c-422b-9820-7eb3e9e1e4af", "sighting--ccef0286-9fc3-4132-9ad4-f85547621aea", "sighting--0596255c-c374-483f-ab1b-2fe2c3dc0c89", "sighting--061c7894-c735-4db7-ac3e-9fcf9356202d", "sighting--efd5ca9b-65f6-445e-aaf5-e1eae172af16", "sighting--95083177-2a01-410a-b7c2-6521bac32a0d", "sighting--600b1adf-719a-4dd3-8623-dd1e3568f4e7", "sighting--67adfd56-1738-486d-89c7-4496dfb7786d", "sighting--0f733b1e-85ac-4322-86d6-ca18f4f7c051", "sighting--08ebe23e-7f21-4477-a0e9-a128829c1a5a", "sighting--68bd7b2f-ca63-481c-b55f-ac93b84d496c", "sighting--161627a1-4d6d-40cf-b765-756e3b3994a3", "sighting--c7a4903e-31e2-4b41-a225-cd105407927a", "sighting--dd39eeb8-5228-4e03-93ef-d9ec5cdaa71b", "sighting--d9febfec-a986-4fb2-b14a-039a046ec403", "sighting--ce5598fb-cc4d-4557-b683-e8ed9c3f8713", "sighting--ebd3fbc9-c68a-40fc-b980-654fc276345d", "sighting--204dc3e7-a284-4479-8cdd-6095267cb277", "sighting--6f7ad84a-5b3d-4a9b-be4e-b4f95edde20c", "sighting--4c70ef7d-6bdc-4dd9-86cd-76312d25940a", "sighting--a297f612-d7a8-48de-a2b3-51e274d84c69", "sighting--8afcd2bb-60a0-4244-b098-81bc3191d8c1", "sighting--7b56f2b6-b52b-4740-94b1-b346fe95ab54", "sighting--04795154-d4be-4325-aa8a-12c95ae98d81", "sighting--746eea2a-8946-4ece-afe5-974b9f9239e9", "sighting--d5f2bda9-1a72-4a10-8eb0-7467a5ce8dcb", "sighting--3b185c6a-2905-4b51-b795-3c4a2f1c5644", "sighting--be3844d1-ae34-4298-b752-175f4e5f49ca", "sighting--179df270-26b9-4604-a1bb-30a632258754", "sighting--d89f03ef-5b2a-4875-8ece-5052d6dcaf1c", "sighting--ccc7edde-408f-494d-b99c-3f8250bb3591", "sighting--04badd95-11b2-467e-9c66-eb647ed608fb", "sighting--ed074704-403b-42aa-8de3-d1cfceaedd73", "sighting--031095bd-df97-4d77-a1f3-fecf9707ada6", "sighting--c6c94f9b-066c-4bc0-b72c-8507fdca73cf", "sighting--1ded9575-f7f5-4a94-b0ec-9722fa8af1a9", "sighting--b4ccad8a-af20-4a57-936a-20d05e9f44ef", "sighting--57c69e52-1064-4f56-ad38-89645a353261", "sighting--3291226e-927b-4092-9852-dd21968ae9d9", "sighting--f8fb2d9e-fe06-49d6-bdf7-e1efb7a7d559", "sighting--db2616bb-a558-4786-bb55-da16d34cfcd4", "sighting--dd37c532-9169-47b3-a1b7-9135fb44d7e7", "sighting--cb887435-d70b-4ef9-bceb-ba770d5d8975", "sighting--c54bbf68-d5ed-4f5e-a934-7250c02a7137", "sighting--a3af3b34-3f9c-4b9b-a6bb-a9e93a9da1f6", "sighting--d662f324-dd65-4aad-a11c-fa2d2934e732", "sighting--b1cde874-dcb9-4ab8-9ee2-0fdc2bf5fea5", "sighting--93d8f883-b38e-4c8c-918a-84ee3d873f6e", "sighting--6fc3a551-9630-4906-8cb0-46af51ccb9a8", "sighting--91ec368c-70c4-41ab-bf88-04df8457da3c", "sighting--e5604dd2-46d7-4bb8-a988-7344b1d9aee9", "sighting--00c3495f-dbf0-4e01-b07b-ba7cbccca04f", "sighting--8ac8489f-b9e9-4b97-a7a5-4d4c54418cff", "sighting--7c52544d-76ec-4878-b86f-7fa0dfe554da", "sighting--3cb3a46b-a4f9-4811-a671-f35a6fc9d4ff", "sighting--d6db84df-a9b8-447d-8ad0-fb6bce24364d", "sighting--433eebde-f635-48c9-901d-8f8d16f20fc4", "sighting--219b35e7-82c1-4504-b795-240e46c4325d", "sighting--266c8724-8950-4367-898a-e4fd6c89699e", "sighting--80890185-9ab0-4140-998c-56c9bbfbc338", "sighting--ed0309c8-ccf9-43fa-9dbf-0c1a9cb89cbd", "sighting--0ceba293-0e44-4c61-ad4a-218fcaf27aab", "sighting--f1dedf72-80de-4128-9f47-7ae00ee8474b", "sighting--2f3b57c6-0575-4fc8-ab60-c37265c80e20", "sighting--15d5bf79-78b3-43ce-949b-ca318d3b2003", "sighting--8de2c01a-93e3-4501-86c3-274fa039e7f4", "sighting--0df1ce32-2484-4929-82b0-69120d8d9602", "sighting--912b4f0d-a272-40fb-9d36-0b88203dc610", "sighting--bf5551d5-0370-492c-9cd9-3e17a13b1a9d", "sighting--07d99d5b-458e-447b-8c1c-608d4b417896", "sighting--578f925f-9a73-4776-9905-3d527fa5e6b8", "sighting--3a636cae-642b-4037-b7fa-9110501e4ca1", "sighting--f0807457-185e-498e-a24f-c7d2749592a8", "sighting--a71b1c8d-4946-4cb0-bb07-c7d8127b4873", "sighting--a5fe66e5-2823-48ea-9054-6aadd09ae9bd", "sighting--e874bbba-34dd-4351-bf4d-94be0f484ed9", "sighting--0c5390d5-ddd9-4a2c-b6ae-129d7176279d", "sighting--b7c36154-3a56-440b-97a1-969e1e04498e", "sighting--594e7e34-c8f6-4a32-b54a-9da4c906c07c", "sighting--1a65dadd-fdf0-4515-98d4-8cec126514e2", "sighting--f4bb3dc5-529a-4dc8-9169-e6562e3183a8", "sighting--4b73a6cb-924a-4b82-8ae0-f28e87396fb1", "sighting--6d01c986-fedf-4f40-8f0f-b23bb5fa4150", "sighting--0a8834db-e63f-40f1-b661-6b192b2e6bdf", "sighting--68bf7931-a642-41ba-a327-f5f17a8270dc", "sighting--94047cc8-b539-45b8-b0e9-ac7c4ae57b36", "sighting--b17957e0-66c0-4c61-9b1e-f735130486d0", "sighting--48033465-bc3f-47ff-8fd7-4f6ac7b7a822", "sighting--2ad06d43-d0cd-4fba-b67f-850dbe928f19", "sighting--8834567b-ed5d-4181-a8ae-83af9cd3e1ca", "sighting--b8aaf5a1-a60a-4c57-a5b8-38e9f3459cd8", "sighting--4fe72359-08ea-41bf-83eb-109e90e51bd1", "sighting--838065bd-ccb5-4632-b4e5-e78e50858819", "sighting--61bbfc90-04b3-458a-8aeb-a9a019e5f3fe", "sighting--1b0e9471-b24f-4317-83a5-f46934bde532", "sighting--ebe7b7fd-36a1-4bcb-8a48-1e85eeae85cc", "sighting--8ef17a08-4c97-427b-a3f4-ea30afa6ad0d", "sighting--566dcad4-bb7a-46d3-bbbc-57d5ae204e7e", "sighting--9d9c5533-2704-44ea-ae09-0900f12aa3c8", "sighting--ebf090a6-288e-4098-9fdf-09067a34a6f4", "sighting--ea30475d-6bfd-4c50-b148-60e0b1eeeac2", "sighting--2ddea986-d003-4f0e-80d0-32482c46af3a", "sighting--3834be82-7e6e-4bc9-bcef-7d50e8d89c73", "sighting--2182f220-5c66-40f3-9dbb-9195582a7105", "sighting--b694bafd-5132-45e5-89e6-e4d20ba25638", "sighting--f873cf83-6948-42c9-b29c-0413d2c171ce", "sighting--d56909f9-6e63-4790-94ac-d03a1a2d1f42", "sighting--8d50ffc6-a546-42f8-a044-adab283156e4", "sighting--0e9f8bb8-1f5f-44be-ac31-d15889399e72", "sighting--c895f108-7d36-4dfa-a333-f95c3dbaaaaa", "sighting--a53e35d2-ed55-4cd2-965a-8208f786445f", "sighting--fbf9dc28-cf42-4652-aeb4-ade608975555", "sighting--fc875f13-2298-4e75-b499-deb5e99421d1", "sighting--309cdb10-6f73-4e14-a508-1fec9c5ddc0b", "sighting--8f3465f4-c40c-484a-80c5-e9382c5988ef", "sighting--05671588-66a6-472f-80d1-288b83d87e9c", "sighting--83ea1d0e-e34e-4288-86ac-f020727e0bc9", "sighting--792ac45d-7e72-4c90-869c-004f11285fd2", "sighting--f0f30189-6ff2-47d8-8149-80d42f86643a", "sighting--e9536b96-7d85-4ab8-b9ef-47161d55d99b", "sighting--086089d9-de31-4d9a-afc1-4dda96abd2f7", "sighting--0a97b618-d904-4bd8-bd00-31d770bb4bc5", "sighting--bb4055c2-df66-4c27-b0cb-9d021b5a3143", "sighting--8b1a51d8-a5f2-4681-b3d1-a8e8447d6452", "sighting--c1ae7710-7ebc-4c5f-9b4b-a270d05a8033", "sighting--32027dc8-8ff6-4be4-b841-be5e9678f3c0", "sighting--46bee7bb-74ec-49ef-bdc6-f7357af56659", "sighting--e29ad084-4d3c-4f96-aa30-69fee5ba6e17", "sighting--33327ce9-f375-4676-aac4-5cd82f221f44", "sighting--4d7b611f-ebcb-41a9-9445-338ab075f233", "sighting--e8786a35-8738-42de-8d8e-75f79f07061f", "sighting--6649e400-ddab-488f-9e33-0254982709ce", "sighting--00f22bca-ab12-41df-a944-c7746fb88079", "sighting--6135cf2a-1871-40f2-89e6-f35ae4f46598", "sighting--aca86009-7ff3-4349-8ef2-224366d85499", "sighting--9e93ab6d-45b6-476f-86af-efb393866486", "sighting--1c04e3d1-56d8-4092-a077-a51d0cb908dc", "sighting--c0c99fab-e358-4391-9175-48c7e870df29", "sighting--8c8759bd-38a9-40dd-af68-88ec86892347", "sighting--4b8e5763-7c7c-4553-978f-e14557bfc424", "sighting--b8aad630-29b4-41ff-ba04-6c40da85b70e", "sighting--68b80380-1fd3-4274-91ac-21456625937a", "sighting--54e5e0a6-c507-4c02-a1a9-066bc6021548", "sighting--49c0db0c-3c88-4d0e-87c7-982ba18d1964", "sighting--61c4c08e-59d5-4796-8d8e-2f9297b4552d", "sighting--d45b1c1d-7c63-4cab-8067-5a02cab69d49", "sighting--19fc2c83-1cbe-4677-a36f-0741e255e5b9", "sighting--2361ee41-1709-42f1-ba46-6c11510d510d", "sighting--29398660-892b-4b45-bab5-5b2b1b1f184e", "sighting--e11da6de-6ae5-45ad-b862-38b28d29971b", "sighting--ed7d00f3-3aa5-444d-a6c2-29c53c0f312f", "sighting--ff5ca833-c407-4976-bb57-fa764853ef4b", "sighting--dcaaa3aa-f308-47df-8c13-b82e2bfac876", "sighting--3190a671-1ecc-4af4-9c11-9086e309981b", "sighting--63dcefd0-6180-4ef5-94b7-dbb3c358cc2e", "sighting--6146ba26-f5fc-440c-adda-031995c748e5", "sighting--8b85267b-b800-4762-9669-45b7bd9c0461", "sighting--fe68181d-a47b-42cf-9181-6642137feb31", "sighting--0760809d-ef6c-4272-97af-88a9183fc104", "sighting--0e3aa71a-71e8-420f-8cf5-ffc407e4a01f", "sighting--8e14ff96-edb4-4015-bbfe-25c3af26a671", "sighting--92540950-8f4b-46a0-afc2-20f0de109a9d", "sighting--221d26d7-928a-407e-bfd5-2e7b78501621", "sighting--8eb57ff1-3629-4d3c-bcd6-28715ea2d8c7", "sighting--89f6cf92-fd76-4bf3-8357-e961b31c03f7", "sighting--a5791e72-aeeb-4f7d-b5b2-49cf1b24c39c", "sighting--88e0543a-dad7-4832-a093-395a31dde6a3", "sighting--586dd5a0-f37e-4bf8-a3ec-73f2d4c7ba18", "sighting--0300da7d-e07e-49e2-b871-21b87a087520", "sighting--e1588f90-85dc-4488-99e4-4c09d44b1da2", "sighting--0451220e-70d2-4477-bb7d-62f550789c07", "sighting--8e504b17-04ac-4a0b-bedb-45c5fcb2aef6", "sighting--ae813862-381e-49c8-9149-c6dc92095246", "sighting--cf024789-6a7d-425a-9cd8-6456d83aa411", "sighting--e7f74a1b-3208-45b5-b5be-1a66c685b817", "sighting--cc209cf0-899d-473f-9e2c-d7f576016e72", "sighting--0279f721-ebf8-41e0-a931-028c9b32a321", "sighting--2e9ba2ec-556b-4fbe-83ab-f38cf0754be9", "sighting--75db290a-0657-4497-a52e-d376a5f92cc7", "sighting--134256df-5c63-4513-afb6-a07f34b7c041", "sighting--ed5f0bd9-2eb3-4536-9be5-0aab80b49bc8", "sighting--38de5b27-0140-4908-8f1d-9aa02973c6c3", "sighting--75a90974-eee0-4eba-b924-3b88cc0d7133", "sighting--c005ffca-0c50-4c46-b362-112fd95a49ab", "sighting--1551a020-edf8-4a67-9150-352b42a34bbe", "sighting--ce1f8225-9e8a-4390-8ee1-1c5a4871a556", "sighting--9f3f0f6b-08b3-4661-bc58-8f1f5ed2497f", "sighting--80b1b62b-5928-450e-b148-0ec9c85b3d15", "sighting--4f226647-ca2b-4523-9588-df181328738a", "sighting--c546d72b-bc3d-4290-ade2-5394982b71fc", "sighting--4557bc56-edd6-4a67-bb88-b7ca0da6c61b", "sighting--48a3723e-06eb-461d-9dbe-e069d0daa34f", "sighting--7174e80d-9038-4e59-b323-dbd655b3e87f", "sighting--7ae8df25-7f1b-4ff5-8532-c632c38b5878", "sighting--d905aa31-d5af-46b5-8199-55c596c2f661", "sighting--6cd03230-f7d4-4182-97b5-639c0267f4f5", "sighting--082016c8-43d9-41c0-b131-d54e5c13b9a2", "sighting--c9fc23c9-2f36-4d11-a287-64e8a94767a9", "sighting--81a0a638-fbc6-45d0-aa8f-1d99b1139297", "sighting--82bb90e6-f24d-4783-8fa7-df2bfaa0c40f", "sighting--b49b5c5c-4808-4734-afd9-eefdb37d41f9", "sighting--d8be7b95-1715-4ed4-a35f-20d039830e09", "sighting--442165dc-dba7-48f0-8f74-f2e4c6eee6ec", "sighting--fda93ae1-1ace-4139-9dd8-27bbb33c0f11", "sighting--8c14764b-fa2c-4b9c-bfce-05bde796a79a", "sighting--2b6af2a6-ef5a-48af-981a-63f96ef8ac4c", "sighting--c91fa45f-8528-4682-8901-56cb1388cc87", "sighting--fcf4b1a7-a304-4df8-ab6c-064f6544097d", "sighting--65450fc4-3a16-44c7-8b40-d1f6c2d2ddd2", "sighting--97d46d2e-e97e-4e30-83d9-670533c4fb84", "sighting--592cf641-2f26-4f40-9f4e-04bc0f3b3bb3", "sighting--ee7d0c0f-6f8f-4ac4-9b7c-abdbff789d06", "sighting--41435a5d-cf64-423e-bc98-f0a604ccb5d8", "sighting--4502a795-5912-4baf-a615-2cf0db44ec50", "sighting--c432e9f9-7e47-4dfc-934c-d1ebbbe60828", "sighting--abbfbf5e-6582-4896-9551-502ae7485beb", "sighting--2e8f6ed9-b36e-4277-a9f0-44daa1511b7a", "sighting--8df016ee-288b-4f2f-a9a2-c7e026b7a15c", "sighting--1066fc1b-5317-4b71-bd91-19118af398d4", "sighting--e9cadaf1-8096-4535-ba14-4dbb90a5e07f", "sighting--4c2825a6-73dc-4859-a544-b5ccd7a6b0c9", "sighting--8d9dfc44-764d-4c9a-a676-499f9f33257a", "sighting--d84d0c50-1247-4670-b62f-f63280a1f6a2", "sighting--da612f8a-58c4-4b38-bb58-b60d762bccc5", "sighting--13c61d67-4fa3-4f52-a3a3-b0d2c2a2542f", "sighting--064addc7-ca1e-4bd5-a101-1065088aead6", "sighting--4ec6e397-41ff-4211-b320-776b834964ec", "sighting--e336bd0a-451b-432e-8c92-5e0695b943dc", "sighting--e0efc56c-d6be-4272-b1c1-76729f092f15", "sighting--faba62b2-6c66-4dfc-90a7-a5fd0e3bd729", "sighting--a1a7399f-6172-4853-a810-dbd33b1b6f14", "sighting--d12144f0-c37c-48b8-8c27-b667cce6c46a", "sighting--f39d0a74-dbf6-4dd0-8397-c859e2d91d1c", "sighting--cf608606-327c-4d9b-bc74-1a0f06acbdda", "sighting--fc1ceea1-8bd8-47d6-8457-9b8998c153ae", "sighting--ad4fdb5e-ebb6-48b7-a2c7-ea16a7a59b43", "sighting--4e12b749-0a40-43cf-99c2-e51996ae48c6", "sighting--06568449-0020-4ea7-9bb1-cf886e0abcf1", "sighting--610997ee-70cd-4576-b6c1-dcdeed63b4f6", "sighting--a02f07e3-d565-45f0-ad58-a3bd50f85f0d", "sighting--bd15b2d8-d764-45ca-b18d-d638826c9bbb", "sighting--1b59778d-b50d-4eb2-b8be-6ea6107b6415", "sighting--8c6445aa-1aee-4e1d-a4aa-3357513f7464", "sighting--424d8df2-a1a0-4885-ae89-15f636af8832", "sighting--4d91e517-048d-4c32-bfcc-5d89d53b6354", "sighting--06618f0b-5ab8-4d7f-9189-590a58a7e258", "sighting--87a8b12a-dbbf-4e5b-9fe2-c9e3119a8fc6", "sighting--b110dc43-e6a6-452b-b3f8-fe51ce2d9fa9", "sighting--e923b8d3-0c52-4a95-9561-3aecc6c7dd80", "sighting--06e7372b-d3e4-47a2-8da1-f0984314f7e9", "sighting--5e3b5831-463e-46a4-ae30-1e5ade13f50b", "sighting--8f31f8d0-2f78-405c-a0e1-539df24a4e68", "sighting--0d77d58c-6f01-4912-938e-18a5a46fd4d4", "sighting--5bd439d3-dc24-46cb-9135-3ab309008295", "sighting--7b643e5a-37c4-4bc5-98e8-f12e09fee55a", "sighting--6b0621e1-a6b6-4155-8e92-559e507d49cf", "sighting--6e540f5d-f296-4d22-9f44-3d5cb8e4a40c", "sighting--ef018b40-d14e-496e-ba41-05e1492d7340", "sighting--3e67780e-e1b1-41e2-9d39-dfe39e2ece01", "sighting--233f5ec0-5f2a-4481-b0f8-eb1207cf3163", "sighting--9ff868d6-6fd9-4374-b1c2-ed60eabdae6a", "sighting--23131fc9-6686-4a54-a3d1-95c3ba8e8fac", "sighting--87305932-b27e-45ce-adfb-9d190e38fcad", "sighting--fb2ce99c-99b2-4460-a29b-277f5bf184cc", "sighting--636973bd-e07e-4b31-8e86-5f4169d2eee7", "sighting--4789c358-8b58-4926-a0bc-a287a161f93d", "sighting--531afddf-6aeb-478c-bfd8-6be7449c7d38", "sighting--db7c58e5-a4b5-47be-aeef-9881254983da", "sighting--607bb8f7-62ce-4e9a-b85c-13e69b7d4330", "sighting--36888fd2-f9ca-4ac3-b850-d7bb4189c09e", "sighting--1984f009-7389-493e-9551-11af3a592929", "sighting--921e9b78-1caf-41f4-8763-f5e5b1b2c15f", "sighting--0e87f118-1834-49e0-8a63-3988a39f1d5d", "sighting--90faa8a4-3b03-48e5-a4d2-843b57315298", "sighting--9c9bb82d-fb35-4ede-b89a-c152d9b3d8e9", "sighting--864ddfb3-d8e8-4e1c-a064-e285a7a37ad0", "sighting--4958d622-08b6-4de0-a217-9b204f882442", "sighting--b5815fcb-5ca8-4fd2-b8a7-28e5200f42b7", "sighting--b8eb9c7e-77b2-4beb-849a-8711c702eb20", "sighting--7f2ff143-ef4b-4e62-843b-bd3308af2aac", "sighting--7e031810-d126-498e-977a-53d6c1d98186", "sighting--5c4d3d6d-a2d4-4fe0-ab87-710216a2d381", "sighting--f598f564-82f9-476c-bd07-26d2ce6582bb", "sighting--e0ce06c6-c486-462d-bc09-7dcd940522a4", "sighting--ec2bfd8b-00ee-4a8d-ae18-24630337152f", "sighting--cf518f8f-cbe1-4d70-be2f-bd2c34c7d4f7", "sighting--4f1edf98-f372-4b26-b1ac-8b0c8f5d224e", "sighting--3b05e2b5-8bc2-4ea8-9f7f-7987eeaa8762", "sighting--07cecc23-52f0-4db1-a90a-1a367550cdd7", "sighting--300032db-fac7-42e7-b5ea-68dfba728129", "sighting--7dffda88-f392-4631-aff4-6466cbe14896", "sighting--32823934-4080-48c5-8f0c-1b0f046b32bb", "sighting--394ae459-44a8-45bc-8c5b-08f5011a8c8c", "sighting--ed0896fe-0871-4a5b-8ff8-29b4ce93b56a", "sighting--015a8aab-f30f-4e13-bf67-47787fdf0fc7", "sighting--ace6c9e8-f3f0-4621-9296-0c6331340f8c", "sighting--19b97ce5-bc9a-42b8-b17e-43dbd1f5246d", "sighting--d1c1a1a8-7817-4a3a-9f67-5f27e692dfc9", "sighting--cbb1dae4-c98b-41c3-bee5-e1bd868487c3", "sighting--072f87e2-f6b8-4474-a10f-a1fd9a817eae", "sighting--011c810e-3730-4d8d-95b8-694efbc77911", "sighting--d822db94-d12e-4294-900e-b2b1ab44073a", "sighting--7c73910c-26d5-4010-83aa-15f4aaea0bd5", "sighting--1e091e6e-bd7e-49ca-b88e-478a78ee5e47", "sighting--df3d0259-a674-47b5-8c62-f93c4efa3889", "sighting--ce20ecbb-33f5-4998-b406-1930339b24d2", "sighting--1ca3560d-03e4-460e-98f1-067d1024ee34", "sighting--53c00a16-84b3-42a0-b7ac-4de6698cf6a0", "sighting--3a975ef6-ee48-4aa1-af0e-483884055e32", "sighting--f522a4f8-697e-4592-ac46-cb47b7b869cc", "sighting--d320eaf5-b975-4814-82c9-e077fa9e11a5", "sighting--7faa57a5-21a2-4bfe-a6bc-aa4f5586e9ca", "sighting--de589f47-65db-47a1-bf58-60ceda719e1a", "sighting--b07acc7a-5218-4e81-b9eb-0ca51fa2786b", "sighting--3ee98f2a-56bd-4ba9-8cee-2b3c293e80d6", "sighting--7008495b-0a41-4075-8b56-6b57fbc3f6dd", "sighting--f71859a4-2cb9-4162-8e04-441c795c7920", "sighting--879594cc-f26d-40ca-b51d-ad18fd6fa826", "sighting--56188937-265e-4b02-90fa-ccbbdad7468b", "sighting--5fd7634a-274e-4606-aab2-f35c4122b21e", "sighting--c4fe48ba-1ad2-4ac5-b055-4638b8cea301", "sighting--7118b697-179f-41af-95e7-6e3ec2604e47", "sighting--f43b9bcd-c1f2-4ea6-8f1b-74449f939628", "sighting--87606c17-13ab-40c7-89de-823bc20e79e6", "sighting--58a20ca3-aad3-4cc3-bb7a-c1d626176dea", "sighting--5e25665c-e387-4efb-8e5f-c98bc18d00cc", "sighting--41384333-78dc-44d5-b34a-c538446a2c0f", "sighting--ff88a55f-a057-4335-bea3-74e3913d5df7", "sighting--41df9fea-3474-442d-aea3-b5abf4fd3fbe", "sighting--04edb069-bdb8-4b66-b89b-5e3aa37f4c80", "sighting--6dc79288-dbcd-42ab-bcef-9e6f5f753590", "sighting--798dbdb2-7194-4119-9127-8bec951a052d", "sighting--a08e6cd2-05e8-4c51-a93a-143a476deacf", "sighting--6338321c-afd7-4e32-90d5-9e3748860988", "sighting--458f635b-481f-4db2-8bf3-4df76d51f85b", "sighting--35ce8344-5430-4be8-9ebb-79460110a26b", "sighting--2ba1224f-3659-48a4-a341-2332760e5878", "sighting--88258e76-2fda-4b57-8a9e-4138fba1d684", "sighting--0fa6436c-0977-4683-826a-1c7ece9453cb", "sighting--d8a5a47e-ca23-4385-9c35-e47cb5c5de26", "sighting--c13334b3-aff4-4e6b-87c2-59833a303b9d", "sighting--15a2fb46-a50e-4f95-8d4f-b1a1ae01b232", "sighting--8ceeefca-db28-4fe2-8519-524df35cf061", "sighting--46dc1f10-39da-4523-a326-d66f5d5e859c", "sighting--905f89df-9cbe-4985-bf3e-b0785f48cdd8", "sighting--66214a55-1ed7-4711-abdc-2359b6299dee", "sighting--3754fa8f-b751-40f7-91b2-65613b309242", "sighting--73bc35ef-e752-4dfb-8fc4-3de0cc4496bc", "sighting--e64d9f37-bc3f-4ac7-9576-fcaa934aadb5", "sighting--ed2c5446-9d16-4855-b624-931d214edb1d", "sighting--bcd2aa5b-8af0-4fcf-b77e-441d364bbe61", "sighting--05e470e1-315c-4a2b-92da-44ed39c5c328", "sighting--263a3cbf-25c2-42a4-ad30-f0e061523640", "sighting--4336711f-3716-46cc-961a-dd13061c70db", "sighting--cefeafdd-9928-42d5-824d-e4bbef506e70", "sighting--e897dc6d-4fe4-4bd0-9a90-fe80cf98c75b", "sighting--07737a28-2002-4217-b9e0-23c48800d8d1", "sighting--6a98bc15-6ba0-4df3-9ce5-0f81765428ac", "sighting--474a217c-beb4-4be4-a433-1f6dd7a66415", "sighting--19fab98c-e3d7-43ae-b51d-427012807b89", "sighting--c153a4f0-36a8-4fb0-9cd2-e641c40d8733", "sighting--240ad34e-38cd-4d94-8fe4-c5decf86e13c", "sighting--248009f8-3264-4823-b1fe-5f67ffddfa33", "sighting--87d90aa1-469e-40b4-91e1-66d6e887e7e9", "sighting--63274dd1-40a2-4603-9804-31e0f721503c", "sighting--ca1b2f5f-448c-4ec5-9aaf-a9f0aa0ad42b", "sighting--5b275753-eae3-4d4d-8ae1-d6d619872375", "sighting--b36eb6dd-7226-43fb-976d-86811c3bc29a", "sighting--4f20c92d-eafe-4ad7-87fe-2a3fc2fd2a1f", "sighting--65a9ba14-20e2-4830-a798-c238c33e3124", "sighting--a9552a9f-9777-4d56-8910-dbcee2a82ff5", "sighting--b7d1b585-0bd8-4610-838c-2da30a7613ba", "sighting--afe99e12-49b6-4fae-b6b0-e2b65fcbb4b2", "sighting--3f3d066f-1fb6-4eb1-a89e-c63895e63b16", "sighting--8fc189fd-3140-4eab-b350-8936bf09b258", "sighting--238a4691-dd69-470d-9796-4b686f863462", "sighting--ccd1952b-8419-45d1-b8c8-bdbab18cb159", "sighting--f1bb66be-da75-4ce5-a25d-b3056cb25e7d", "sighting--781d3e16-9698-4cb6-9921-607692bd7095", "sighting--43e21fe8-1008-4fbd-91a7-18cbf2db1d10", "sighting--bceb7473-3058-4fee-aa82-1bc862577a51", "sighting--42760485-d935-4cca-bb04-b91223710562", "sighting--a2195e4b-bd72-430a-a192-b268716ae263", "sighting--aee1deb2-3b2e-44e3-88ed-2bef6adc5237", "sighting--fd7fee9f-68a0-4372-a471-8b66cf762f5c", "sighting--c1288c2d-2027-4582-a39f-1c22a2196649", "sighting--da9a362e-703a-473c-8dd1-4fe91726f343", "sighting--4f9b9661-e385-417d-ab24-76458ede87a1", "sighting--4df59617-b6ea-493f-a855-66c7a557cff1", "sighting--aee737e2-af36-400d-9c68-88db438e531d", "sighting--a91e2197-57fd-429a-83e4-5ed10c6a6878", "sighting--2bfed7d5-9dbe-47fc-9e5a-56a61249a6ad", "sighting--d2cb1135-aaf0-423c-a592-45c160fb5c41", "sighting--1987f393-8968-43ba-9bee-c3ad4118a099", "sighting--b7615ed4-79a4-4c41-9647-5a8f8967df8e", "sighting--8e2d5aa8-ac27-4e20-84fb-68eb4ba8ece1", "sighting--b50c4e29-31a9-4703-a60c-6e4eebe2eea1", "sighting--4a6aa31a-b1ce-405d-823b-3f5999422130", "sighting--a42713aa-8d4e-4efa-b1b4-3a349c438a5c", "sighting--154b8377-d698-471c-870a-806e4093118d", "sighting--af7ec838-a3c2-42d7-91ad-5c4943b9f6c3", "sighting--a19a51ff-9610-40e6-b816-572c070748ce", "sighting--b7f385da-9f62-4778-83da-9b1e634f75f8", "sighting--bd711dd7-4ef4-44d7-a8da-cd5abea0d9f2", "sighting--9bf04eea-9867-4546-93c0-774785284e02", "sighting--eb83431f-169e-49e7-8a39-e3af723f24c3", "sighting--71642f9e-46e4-41f9-9b45-e72616000b32", "sighting--40c4ac9a-19d9-42ae-8ad2-6dffd5c42c45", "sighting--545d78ef-4436-41d2-88da-ee2262ffa71a", "sighting--dec012a7-ca55-45e6-aedf-e4d55e3240e5", "sighting--e6718096-4c41-4d55-90e0-b88991b39a9f", "sighting--4688b12d-4f01-405d-a6ce-942ed222c7e9", "sighting--59f0b0cd-d8fb-40f7-a4b6-7ed9d7202513", "sighting--6f24aa4f-5594-46b1-b780-2882b5df31ac", "sighting--2d01bd73-3bcd-483a-bf9a-35d6b815cd61", "sighting--55ca7bdd-64f4-48d1-b624-5b43600bda48", "sighting--5704f962-5848-4c3c-860a-bdc2cfe42b1d", "sighting--30250125-c80a-4be2-83ec-851fc6845610", "sighting--7d897afd-39f2-42e0-adca-89cfa02c3db8", "sighting--dd160e2e-f557-4c9b-8fe8-039dc516ddd9", "sighting--e6b879f9-6794-4ee5-8b45-6bf20dd33dd8", "sighting--ab5d55f5-10ab-4fe3-b202-8fd3062b6ec9", "sighting--5824a9fc-9519-45c0-9d7f-e75816505db9", "sighting--6381afc6-715c-49b0-831e-6c448e80f5d4", "sighting--6110c263-6417-4a20-a7ad-3a3b84f1744e", "sighting--a6cde082-3644-4ba8-9367-4e3578cfb9e4", "sighting--380d291d-4dfe-4fef-8ee7-094bb58f7437", "sighting--3e3fe821-5fc3-4e63-8087-11956425aba6", "sighting--2e4dc47f-dc0a-4ddd-a602-fdfab46b2439", "sighting--721222e7-2d34-41cf-bafe-d880691c4179", "sighting--921aa48a-5872-4aa6-860b-3ab49ad766b0", "sighting--3f274c26-47be-4337-9b21-ae5835663514", "sighting--824e1a82-fbb2-47d2-81a0-272b5dd37cc5", "sighting--7fb2d129-1dac-4088-b990-a43d0536acb8", "sighting--60a7fed1-5b68-45e3-8203-7523601b320b", "sighting--0d7431ad-2e75-4045-b279-92c07aa80979", "sighting--cf149a2f-d27b-4017-9c40-8fee26b2c283", "sighting--a8c2a714-cad7-4682-b7ab-a9d9eedc3fe7", "sighting--a83baa76-7719-4b8c-8088-46f83e885afc", "sighting--743fbf88-72c0-4aca-b412-760625023131", "sighting--4195500a-299c-4941-9307-86672f4fb494", "sighting--aa937c9e-0621-4d5a-b1c9-da24f2734d41", "sighting--6c31e8c9-bafa-442e-835c-e3cd914afdb8", "sighting--778398b0-d6cd-46ea-b7ec-a0e0498e925c", "sighting--36c3798a-c7f6-442f-977c-cb9e245971bb", "sighting--642b375f-6ba7-4c8b-a350-5fa6a1b45ec4", "sighting--e937b6ec-abcc-4a17-a00d-d4fed21c92ee", "sighting--022b5f11-b2e5-4b35-9a63-9ffb9c030a54", "sighting--76efc12a-1957-45b3-ad26-9e69ed93c8a6", "sighting--ba762e1b-aa63-4c4f-95ca-08337ec39976", "sighting--1d9eee3f-e0bb-4309-8e8c-64eff2ef986d", "sighting--8e26d433-2b14-49cd-ba74-dda833d640ca", "sighting--f70e0d81-0652-4082-aa9b-44d1e570ae77", "sighting--50ffc678-ad91-40d3-b363-f7ba2ea525d8", "sighting--f1d2dd0d-bda5-453d-9d8c-3f681fac7ac1", "sighting--df07a1ab-e351-4218-8297-222c1ffdccf5", "sighting--3c2ced79-d8e3-4c19-b602-ee15349aab0c", "sighting--d9cf9a91-bff2-4c3f-8f91-69f965d3e906", "sighting--834ce3b7-1fbd-444a-881f-5268690ff6b5", "sighting--99a679de-c927-404f-870d-b5ddbe12e38a", "sighting--9bf8d618-0f84-4a9e-a4a4-61eb94eec1ba", "sighting--39eaf83c-de9c-4d04-be29-b773f0c481bc", "sighting--e5bedc77-9092-437e-b67d-79f07180a089", "sighting--2dec259e-e1fe-421e-8c72-0b58ea778ad7", "sighting--bfc76724-a4fb-4cee-a8d4-35429dbf53a9", "sighting--5807e6a8-7e9b-4f26-9fe6-cb1a6eb4a570", "sighting--678f2b1d-8e96-4346-8139-8fe0ccb3d9e9", "sighting--1e1b3fd7-e9bb-4114-bca5-f81095434108", "sighting--deef304e-7604-472a-8c0c-3568b0749417", "sighting--48bb8372-f670-45b6-bc5a-4d91e1f22b41", "sighting--d70a605a-a888-4b5e-ae1e-87ed8fe7d577", "sighting--1b982d2b-e6f8-4934-bf8e-a17e0606f6d0", "sighting--cde58ee0-6020-44ce-8f8a-b7ec82cabc3c", "sighting--8894fb96-6a14-4f01-8223-4a527c50f38e", "sighting--ae794535-e88b-405e-9a6a-75481b14663a", "sighting--03e42c1e-5e10-454c-88b1-e21bd4e5db78", "sighting--94cd7af3-e252-48d7-9803-300fd237f546", "sighting--e3e0d067-9b34-4095-bd30-eaf76383bf5b", "sighting--3e942a96-d4fe-44ed-ace1-c2b3cec0e357", "sighting--242d7178-fdcc-497c-9464-3c07d9d30a2e", "sighting--cdbbe0ea-6ca8-4c2a-b89d-9dd9470b6a17", "sighting--72e64d52-e6e4-4a60-ab41-97ff192e1cc6", "sighting--19ef39e1-fec4-4c16-ba4e-dc7a5be31e33", "sighting--a87952cf-4fb5-4550-837f-5859e5535f47", "sighting--6f3ef935-1512-416e-897e-a832fe0f30d4", "sighting--7a00d86d-aeed-4bab-a1b5-835dc9985b53", "sighting--c59c633c-630a-44a1-b44a-0714bb903353", "sighting--8cf2c32e-007b-4b60-af1c-1c4b2319bdb7", "sighting--00c69399-1413-48d2-8512-dfe1910184a8", "sighting--3190c225-622a-4378-9676-cc77be966f2a", "sighting--c55c4aa9-a1db-4ff8-8ca8-0c8787b3765f", "sighting--6ea3633f-4747-465b-b53b-07daa86c7acd", "sighting--44083c29-d618-436e-8665-5d027edfd178", "sighting--d2f7c739-a4cd-4028-ba25-252d3ab4ef3a", "sighting--7ee1d30f-e24e-4288-9a0b-cc2a7ed06deb", "sighting--1b936f1e-2079-47e7-9e64-da3118e5f2e0", "sighting--3802ae1c-d2b5-44fa-af32-e2904fb10473", "sighting--df39a5d7-16b8-4146-a3a4-093a154a8bc3", "sighting--b7a746e0-3e50-44b5-bc2c-f616a3c612d1", "sighting--c06499e7-f079-4223-9feb-471adcf06072", "sighting--cc527b91-734d-4fb3-bb52-29e6d821a9c4", "sighting--906d43a5-8ef2-4f3a-9d16-f5800cc7599d", "sighting--6eef6eb4-514d-48d5-aa1e-154dfcea47fb", "sighting--a41ed2b9-f0f8-460f-8520-cf7f2a390a83", "sighting--d13e4e7e-5c86-4adb-86cc-bd461e86b877", "sighting--fb7073c4-c58d-4ad5-9034-2b6c1231eab4", "sighting--f42fa0d1-26d7-456a-919e-de37b06757e1", "sighting--97303c04-f7d9-4205-9361-e52fb5f8b7f0", "sighting--753944be-5a00-4775-8613-a76add95d1f7", "sighting--73e9ad86-2c51-47de-85cb-378f3a362b31", "sighting--d1ab9fbc-a0ce-4dc7-95e0-074c79f45462", "sighting--20bcf133-856f-4c2e-8321-594f9c4b94e4", "sighting--49b701b1-8d6f-4eb4-bfa3-aaac97339a78", "sighting--1392d541-be6f-40bf-adfd-6a9509cb764d", "sighting--51083b41-ab32-4dbd-ba3b-ee16361b89fe", "sighting--166b859e-73a5-4880-8130-6703948dba98", "sighting--c4290526-5a1a-42fa-a827-a862bea97f95", "sighting--15b0f1f1-2df8-485b-ac7a-1d2d1e51ed01", "sighting--6abf105b-fe71-4b1f-865b-0171464d0dde", "sighting--e0abc8cd-6de9-4bfb-aaef-84343614ba33", "sighting--0aa7b03c-da0b-4698-a1d1-38fb7b3db9d6", "sighting--6266d5d9-8f20-4bc2-8a86-eedfe51ae782", "sighting--6ade44e6-7933-48f7-ae81-e9c1fd83b3ed", "sighting--5dfecfbf-e65f-4db9-9e7d-63a343d2b430", "sighting--4178756d-a843-4b56-b874-256644871143", "sighting--75fe1050-8189-4c1c-beb6-b690679ccb3d", "sighting--83f754ab-acff-46d2-b5bb-6bfbaaaa2763", "sighting--cda3ccc5-0997-410f-ab0e-4b63de9c48c3", "sighting--db3ac4fc-c91f-44b6-8c0e-d26135c1e894", "sighting--78b5ede8-6aae-461f-9421-5103f71dfc71", "sighting--00d15ea7-98af-481d-af78-f2307031259a", "sighting--3988587a-6ad4-4000-badf-83259acf16d5", "sighting--24c074cd-21c5-4793-b3f4-b94c58173ed7", "sighting--000b2628-1edf-47b2-9135-5655d29af9c7", "sighting--20d6f378-0503-4145-a7f3-3f5d46eba884", "sighting--9223e7cc-744e-404d-8fa9-198167e70621", "sighting--c4e86d5a-5d09-4166-ab29-24f9ec72618f", "sighting--397a90eb-cdb4-4bf5-89ed-08746e4bfa34", "sighting--e9dfa121-fc48-4b00-9b19-371cd4e9215e", "sighting--f9693abb-5139-4dab-80f2-b101827b44d7", "sighting--a7c258b4-fc3c-499b-93d2-a1806747b0a6", "sighting--5ecc3f53-1541-4468-9cd7-ec259281ae96", "sighting--1696e8ad-e400-4090-b480-95c5421d79cc", "sighting--887b00f7-3e0d-48c1-9710-9888a22319c8", "sighting--cbd38899-6449-4419-9f6c-ca8f753a9472", "sighting--caad5c93-c70d-4ac6-afca-ceffda2a0c54", "sighting--e416160a-b210-4c3f-bf28-8779cabcd297", "sighting--abac5274-64c5-49c2-9d19-b64b728b0dd0", "sighting--114fdd2f-bef1-40e5-a3c9-0243a93f56ea", "sighting--6eae60bb-237a-44b6-b3b5-9fcb8779f459", "sighting--dc57bb65-6cb0-4182-9b07-08ab0e689c10", "sighting--c5e4b260-a9e7-43ef-bc0d-beb10e6fba84", "sighting--8e9a4dbe-3309-4b80-9d89-50c4d0f07cac", "sighting--110adc49-07d9-4e92-817f-199d5e10d235", "sighting--0f53d59f-ff77-4506-9b37-e64b2ff398e4", "sighting--ac79c0bf-d5f3-41ab-8323-acbc4245442d", "sighting--3e2dba10-bb7f-4239-89c7-b1b68d2640c8", "sighting--719678ff-a0a1-4ae5-8176-fb3e57ea34bc", "sighting--589201d7-d13f-4838-b569-a095384a5618", "sighting--d640a7f9-db3f-4d18-9e6d-0d5003586c59", "sighting--bb5aeabc-99e5-4e15-8d6c-265ef41b0873", "sighting--9c82c875-3740-4213-b8ee-978b48c794eb", "sighting--34900308-1ce3-4bc3-8101-804af3e0dee7", "sighting--0835a66b-a5c7-4165-b794-289551779be9", "sighting--5cc7deec-0028-423d-8cc6-27cd57f3f773", "sighting--982e1470-9738-4b7a-b53d-c6f50a4305fb", "sighting--dcc38cb7-6a94-4eac-a7fb-f8e366e27ce7", "sighting--e1952526-87e4-42ef-8bfe-de241bb0d5e1", "sighting--7607f9a1-4799-4eab-ba73-3577c9a7887e", "sighting--c2813de1-5de3-4680-9073-4e7a4c62240b", "sighting--ddaf4fb5-084e-4fbd-bc8f-1b6037f4a91e", "sighting--cffa86d4-9719-428a-8420-5201e2d9afa2", "sighting--ba2ba3aa-7592-4e69-8984-e965fde9fb46", "sighting--256dffc9-ff2f-48ab-8c54-199deb7b6de5", "sighting--ade68517-ec1a-4e1d-8e7d-77bd6a9ace5e", "sighting--c539d53f-b63a-4f85-a288-f5b2458991c3", "sighting--869b836e-cfa4-497f-9c48-cc8b4fe30cf7", "sighting--5950d92b-2eb7-43a0-9228-7a51572c37e7", "sighting--d3ed19e0-f3d0-4a0e-ac96-c9a3c5732a94", "sighting--a0c7e896-6367-4e1c-a657-b9c9c9cd8bd6", "sighting--879e80a5-4c79-40c9-9f32-af6bb17d9b00", "sighting--037e2ef9-8340-4e27-9128-07ae4bd58994", "sighting--2d93d669-0706-4cf6-bf89-0b29007209af", "sighting--35699bf6-c558-47d7-9503-730493a1d357", "sighting--2a961ed6-5b49-4971-91d2-482ff8c0cd42", "sighting--234a56da-5734-4b1d-a1c5-8174328d39b0", "sighting--5c5354ce-ee7e-432b-bbb5-857a99f4e8cb", "sighting--87127a2d-c758-4fb1-bfc9-1ff11479ede4", "sighting--e522aa72-f076-40ef-b33f-13b44855bc9c", "sighting--be40cb6d-0ae9-4cfe-a055-d01b62a944b9", "sighting--1d02d144-addb-4ec4-97b4-e39f0a03fb18", "sighting--d552764d-b317-4f12-83cf-42b92e6c6bf6", "sighting--d9f1390c-530e-439f-ad2d-cdc04796494e", "sighting--899d33b4-a072-4e01-98b7-43a9546fa8aa", "sighting--9b5b5635-f396-44ef-9911-ede514a13d28", "sighting--dc689c0f-6f36-4ad8-9ba4-ebdbf9a8d2ff", "sighting--d40691ee-b18d-4961-90cd-3e8e26e170a5", "sighting--c2678c55-e987-4c92-8f45-251f2d46438d", "sighting--63b038f1-06c5-45c0-bc27-8125c94e07a0", "sighting--5ec607ff-b4ec-457e-b387-29e2b4c6d761", "sighting--a8d2c14a-5d02-4251-8eeb-787bfbb46621", "sighting--d908a8ad-9f4f-4bea-9334-6abc367a7394", "sighting--f5f62bae-4136-47d6-be9b-24b7c7de144b", "sighting--80eeac14-5485-4489-8175-7886a4db6c78", "sighting--b176674e-061d-4691-9073-b1d9ace7b393", "sighting--1c85fcba-b4bc-4879-9058-5f417bbeb1b3", "sighting--614aa433-9b1d-4749-af2d-2b3d2113a35f", "sighting--2db1cc05-2cde-4c8f-9906-d6f2306c6ee4", "sighting--82e1ab7a-6a66-4b72-87c1-967d6bd9f20b", "sighting--42c14bc3-9b57-4022-9ba5-ea5e5fca0945", "sighting--24dce87d-4a77-464e-9fa3-1aa34932c175", "sighting--7033e35c-3291-4b2b-b542-024dd490e2df", "sighting--e393ce3d-7272-46a5-bc3f-514f31e4952e", "sighting--7e5e1d19-9fce-4644-aec4-cbf606d0a575", "sighting--f3dba699-1f41-41bc-9d5a-c1b092c85054", "sighting--4e422bb9-1515-4065-9d58-6a70f336d676", "sighting--16deb02a-a44f-4a4c-912e-f2e9f2bd82e0", "sighting--c8cb3611-ec89-4268-9790-875b320c6de3", "sighting--340aeb4e-1f58-4068-ad67-b668a581d11b", "sighting--54fb81c9-181e-4ddb-83a6-f9b7dbb139a8", "sighting--4ac8d26d-5f82-41d3-952a-bddc581eb9f3", "sighting--feefe569-4194-4167-85a4-3734ae365b79", "sighting--eea85222-8a07-4887-91ff-17745ebb7ace", "sighting--1fe60a96-e345-41a4-b632-5cea3db94bf9", "sighting--0cec4c6a-48f6-479b-851f-533516c2c545", "sighting--3e8f0ed9-36c6-4637-bdaa-090455c077a9", "sighting--0b6c272c-87b6-4d7e-bd68-ff54878a41a0", "sighting--a49cc7d8-3b24-4a49-8297-f1f8cb1b1a54", "sighting--e1256f5d-bb6b-414e-b801-749c5e59a3d7", "sighting--6c52b826-f630-4e35-a2ea-38dd38d741d0", "sighting--b7d25857-4b3f-4e7e-bd17-7eaa8cc76291", "sighting--47b81095-9c9e-4498-8b91-38e4e930d7da", "sighting--5d9853db-2831-4620-9527-9efcd00fdb1c", "sighting--4ecd3e3a-bf05-4d97-9b8f-a238b5d01982", "sighting--b6e35e97-2801-4e75-9c37-8cf518f72790", "sighting--114fb90d-6fb7-4b4c-bb8a-f8ee85a98477", "sighting--c3441c94-b538-4a45-8a84-cf2eeb875c52", "sighting--72e3165d-6a40-48e9-86cb-7f582bfa12b9", "sighting--bdb37376-d83c-49d2-8a7c-9763ce87530c", "sighting--cc49d5e4-afea-4e4e-bfde-5b8e56e507e5", "sighting--cd21a93a-d4ac-4129-98d2-f466e5ec42a8", "sighting--8c004d76-e6cd-4976-83c3-78cb79efc2e5", "sighting--98b65bfe-fa20-4f42-8d73-f4841893ac21", "sighting--42798166-c270-44d4-9c1b-63c89561768c", "sighting--cec71f8d-19e4-4973-a138-933ae6145ab8", "sighting--19a2556c-1d58-48bd-a361-ffe4074474d1", "sighting--ab3e3f05-e0ed-49be-8975-96c1c06bdfa3", "sighting--b594360c-ef08-483c-90cf-64978448524f", "sighting--7dcc1332-8041-4191-b114-f94b3b4a165e", "sighting--f55e92cf-1c5f-47da-a196-20183378b928", "sighting--65df7359-dd97-4643-aa28-5b9e9a76bfab", "sighting--3eee33d6-6741-4bee-8ae6-8637fb0f8878", "sighting--678abbd0-bae8-4e8a-a97b-e2119fb66e94", "sighting--404c85b4-3498-4abd-a547-671965a21d00", "sighting--ba6e4f30-301e-4ef3-8742-3ba372f810b9", "sighting--74989ba9-a211-43f6-974a-62c33db5ff7e", "sighting--1ba2872f-0f66-4ba5-a697-23f64a6e824b", "sighting--639809e5-d8f1-4b5e-a119-4bb087737568", "sighting--ad959002-b9cc-4eb4-9fdf-a803caa49fa6", "sighting--7db2141b-f7c8-4912-9f16-ffdd3f710b91", "sighting--e998a20c-8060-4806-8290-141e3e830684", "sighting--5d69e677-8b44-404d-82aa-dfb834786bd6", "sighting--eef64f78-a182-4eb4-b6de-d84917631b07", "sighting--50321cc6-5c8e-43f5-b652-ade6c4cee397", "sighting--cdb9e60b-63f8-4b20-b589-5241833ee818", "sighting--f1a02a4a-6141-4b4f-b341-c0ff32313e70", "sighting--80049f81-4bd0-4f07-94dc-789e4c434361", "sighting--fdefaeba-262a-46e2-a025-e9e57c2817c3", "sighting--87b21796-1f29-4248-951c-bf096c37aa43", "sighting--544169fa-5714-4297-b6bd-51bf6d2db35c", "sighting--72ffb577-4eea-4f09-89e0-fe5593961439", "sighting--130d53a8-4c51-4ece-9eb8-f8ed8249f850", "sighting--f34ce11b-1493-4c1b-aedd-37f44073138a", "sighting--c7fce126-cd03-4e6b-9731-4114344e06b6", "sighting--dce3fc4e-5c09-4c4c-869f-5d7de67d6bfb", "sighting--08df748a-8763-480d-b9f2-65d10378d241", "sighting--6e718390-16ae-4545-be48-8236e61a80e0", "sighting--8dfd5835-fc71-4a10-84ed-c1a3e0d304fa", "sighting--11442da0-e26b-4fda-83f9-96d8564fb4c8", "sighting--0776d296-e74c-4536-8748-a62242c2e151", "sighting--e97b476d-1977-45ca-ab66-530f563c3100", "sighting--1f92269e-a1a4-45ed-8d27-48c6f8e6cffb", "sighting--98d36859-6af1-4a99-ada6-8e9f8b13361a", "sighting--a1d38ee7-7b55-4376-b12f-455d98f49518", "sighting--a411ff40-bc21-40a2-81a7-3c091048863c", "sighting--950a678e-f777-4837-810d-658557d795c7", "sighting--097ac1bd-2f76-4952-a95d-54cb88ec3d1f", "sighting--12b460b0-60e3-45e2-aec9-710c15a6b880", "sighting--f2e5d49c-4d38-4639-bc4b-eb53900fb622", "sighting--54d429f7-f8f9-44b2-b53a-f1ef4a01be59", "sighting--2ed6b290-22db-41f9-8582-0f6ff8f3af87", "sighting--b1bfd6d9-049c-4ac1-8813-f603c625561e", "sighting--0972df4c-42a1-4265-adc6-4e8d51959645", "sighting--44d4b3c9-64d7-4f1f-a49f-ce488064fbad", "sighting--95a4abc1-6929-46b3-9bb0-79b957b82a70", "sighting--4c71ce48-1650-4588-9e95-25325c50e638", "sighting--de050849-6039-4a83-b3ca-46cce52ba30b", "sighting--6fdb4a59-076f-44e7-adbd-f6a3e997ca91", "sighting--1574870d-83d4-4b82-9e84-ba608c5d220e", "sighting--1fde1e05-71f4-467a-b969-701259c0b1fa", "sighting--a653257c-38db-4871-aa2b-f9b1d2e11bf2", "sighting--0fee6a05-6fdb-4d32-b353-77eb7de430af", "sighting--e934aee3-a65b-42e9-a6bc-21af88f23465", "sighting--32e22427-2e59-41b0-bea9-3ec7e3471237", "sighting--1d5fc627-3d01-4f29-80ad-b63938ed8419", "sighting--09855583-ec83-4012-81a8-39a1bbe1e2b0", "sighting--3fa60673-af8b-48d5-a7cb-acca10d76781", "sighting--1f68aaf8-486c-477b-a50d-44746ae5e0a7", "sighting--c4fad7ed-d65c-43c2-b691-5fac13eb02d5", "sighting--fcc87db9-8dcc-4ff5-a8cb-3fc1a0c7edd4", "sighting--10c154cb-7fc3-4bee-bef6-1f9fecadfc9f", "sighting--fe131187-3770-4c1c-9ffd-61dd9b4658fb", "sighting--d88518fd-f4d1-41f2-9a63-7ec034f4f729", "sighting--d7611a30-98ad-48d2-aee9-d5098066d31f", "sighting--db45c5dd-ae1c-4f4b-a470-e6873415c128", "sighting--aa560c18-275d-4d9c-8b7a-1c35411ef203", "sighting--dbda1e79-959b-4fdd-b2d6-9dc632a51508", "sighting--f0027997-ab71-4328-bd3a-c6b54d72dc3c", "sighting--2e46d32f-de67-4216-bb34-8dfa1111aee0", "sighting--4243071a-147b-46ae-a1ad-89c5ddfbcfbf", "sighting--0fa929c2-6ed5-46f1-a5a0-e3f015dc2615", "sighting--2e3ea40b-c44c-4486-b677-2aa3a46da9ff", "sighting--8a2b49e1-d694-4759-ba0d-d70a5cb8ffdb", "sighting--314f0979-08df-430b-a6cc-8a31f5d544b9", "sighting--f65e24d2-1e74-4b50-878a-3bfd5c3e3903", "sighting--029a5640-99b7-4b56-8d67-291fb3da7f16", "sighting--ac3ee9c4-8c53-4cca-a1b8-1dcef8a674f7", "sighting--0fdb9967-6c50-4e30-b459-a3869d3971de", "sighting--3e20a3b6-52d4-41af-af62-61d01478b0a8", "sighting--6eb07ef0-3be6-4a12-a8ff-0f8e0050ac12", "sighting--ea4eadb8-516e-45b8-a834-0e81e5aefd6e", "sighting--020ccd53-2b2b-47f7-98fc-575c9670f060", "sighting--3120b026-b3fd-4bda-8690-0775091f3a5d", "sighting--d89bfe5e-351b-4c44-bcf5-596d4f3b978d", "sighting--cefab0b9-112b-479e-8f8d-b883b2b49a53", "sighting--21828cd5-4546-45c2-ad27-97830fa4ad9f", "sighting--5271a05b-9102-4156-8690-581e3043fc73", "sighting--9a12d746-f895-4eab-b8ac-da62e7269b20", "sighting--a75a5736-29cf-4485-b9b4-2b5a0de92330", "sighting--4112550e-f42c-4241-8ead-cc4980628fe3", "sighting--03bd6a17-0143-407d-a31d-86ac6d69102e", "sighting--a5f2a4d8-b3c6-491f-84b2-f0b6e0eaadf2", "sighting--66924af4-e79c-4a39-a43e-da06072351e8", "sighting--111f2283-9d90-4a26-91ec-a0bd7f89160a", "sighting--17593a18-6555-480b-997b-b5f3584d36b5", "sighting--27a8b4ad-ae50-4de7-8965-01ef55c3f3dd", "sighting--92cace39-8156-4991-97e3-967b29957616", "sighting--e5032b95-a2db-4cc9-809a-76dfeb2b8c95", "sighting--40bc2823-a1b9-4734-a290-6898c722706c", "sighting--346cd167-c9f1-420f-ae56-f0d1ea8d207d", "sighting--ae35f180-c3d7-466e-913d-b87efa3cb1b6", "sighting--9ea80824-e449-4501-a663-bf6c01e02cec", "sighting--31d0a200-0e77-4e98-847a-e8a372d57125", "sighting--b661c4f4-dcc9-45f9-9491-a8d0c20bf980", "sighting--3d28b36b-9c26-40f1-aed0-635755e1bbba", "sighting--b6b2eeb6-3d0c-4d78-b571-e95494c4c966", "sighting--1ba60468-ba27-4039-ab7d-92f9d6626168", "sighting--f9b7dd1d-8d84-47c4-adfb-8a834398cca2", "sighting--d64dc6bd-3d11-4e95-a30c-96654df9321a", "sighting--15ed2693-25a7-4fe0-a201-3bb033e288a1", "sighting--fb050600-f235-46d4-897e-af80904b2819", "sighting--42a38cfd-542e-4aa5-80d4-21a872ff6275", "sighting--18b00bd2-af11-4a5e-915e-f997cf25463f", "sighting--4740fbf3-f210-420d-9cd6-51753703df94", "sighting--2a5b892e-ee3e-40f1-a4bb-d3f899359592", "sighting--1605d47d-dbb6-48af-b281-1a67f27e0648", "sighting--b0f1bbaf-5adc-4e56-98cc-b06dea989f47", "sighting--76793a7d-93c7-4917-9cd9-3726fc959e3f", "sighting--f96fe473-477e-4f91-ac55-2333f5123d80", "sighting--d57dc230-16b5-40ea-8470-e197b438d95c", "sighting--811baed9-6ea1-4289-9df5-87c5b468fd6d", "sighting--4ab1f432-6475-4ca5-a625-9de98ae2dcf8", "sighting--b240bc5c-01a8-4344-86e1-8432cd6c5754", "sighting--0c3b0932-f4fc-48ac-bb37-43526611e3c6", "sighting--f0582466-a9c2-48f6-b601-9695a5b0f397", "sighting--c8ff583b-6d88-4149-b037-15ef0e5da879", "sighting--ca367c00-e451-4bff-a22e-e4df51b5dcb1", "sighting--cdcb87c2-dff0-46b4-963a-17f39a5569a9", "sighting--584c35c9-9fad-4f0d-8b13-31625cfca831", "sighting--496c87b8-ee77-4bb4-9cdc-6f95c5e73ba5", "sighting--e5810f79-894b-444a-9848-fcb7c8e8b7ff", "sighting--7efbfcf0-e824-4900-9e68-5dbcac7af7e0", "sighting--d1837985-b65d-486a-b531-6dfa4b170e2a", "sighting--99559b28-b470-4e40-a3dc-782b9a472a66", "sighting--dbe3ee76-dc83-4e18-9f4c-856f0c473891", "sighting--41ce9207-9b89-4ea9-a2ae-2cd40ab3a31b", "sighting--99ad6614-b8ee-42a4-962c-d9b9bdc3b61b", "sighting--d4ec905c-84bf-4a03-9ede-857e9624a9e9", "sighting--182b56c3-d6cf-4ee6-a9ce-40929abc0043", "sighting--7f80b87d-0c3c-41d8-a25f-2a5e5de6af53", "sighting--07578de5-c90f-4352-b058-22b1f3d85c88", "sighting--b250ea6a-e311-4711-928c-382664336702", "sighting--3aac4646-87c4-4607-9ffc-d6c0f77b6e29", "sighting--3a3d680e-79ed-418a-9d78-5a19728b5d01", "sighting--0136619d-dfb3-43ca-a737-acc5390105de", "sighting--202d6495-6281-4bac-8db7-3eaa99eef739", "sighting--92433405-6e24-4eeb-bbe5-90baa6173093", "sighting--589880c2-1021-4b23-bd42-ff8505afc38d", "sighting--c72ceb4c-f81e-4135-9d89-0169f1a9d44d", "sighting--fcca96a6-41c7-4159-9e4a-d8d2b171339a", "sighting--3bf55fad-a67e-433b-9015-7975e4de6881", "sighting--f30c463d-9244-4916-93e1-469e99fb0cb7", "sighting--e9742c64-9aec-4b50-bae1-71f04d59d37f", "sighting--31a26128-4337-4c38-a1fe-0ce95b35ea96", "sighting--e5f48aa0-820c-4e62-b473-fadbcb74bde8", "sighting--42fd8168-7c37-4d80-aa09-8ef8dd38fe7d", "sighting--dc7af775-4948-47b2-84b5-80c98a286528", "sighting--000768f0-faba-43ad-b6a8-26e1a770dbc2", "sighting--9742be7a-8559-4777-bac0-69fb6b4d986e", "sighting--8e18172a-243b-4d55-a687-11aa95a9e3bb", "sighting--32a933d3-a09e-4f9c-b7c1-58cf136dadde", "sighting--0b0c74cd-e38c-4a65-b84a-a231ed2e5e7a", "sighting--6a47bb4d-6fad-44a3-89d3-11267a20f3aa", "sighting--1afda92e-83c5-46be-b1eb-dd79af7bdcac", "sighting--f5a28c45-f5c9-4761-8037-7d1cfead096e", "sighting--20a3bd46-370a-4172-ba2e-684045304941", "sighting--46a2f911-eb32-4ab5-b042-4090604dbc27", "sighting--5bdf6193-75a4-4cff-bdd0-69136aa6a2ea", "sighting--9bdf78fe-f1ac-4f9f-a760-ee8f3a9d2852", "sighting--bfb9c05a-d8b1-4e04-8c17-06e401340d69", "sighting--6568900b-632c-4c21-8b0e-6d8ea9984ff8", "sighting--b7fd9a53-9042-4e7f-b4ad-8e3796d17be2", "sighting--b38e409f-119f-4536-a45a-01c81b4e9268", "sighting--e1aa578a-a2e9-48a6-a3d4-51bf942e405c", "sighting--bafb0dda-5ca7-4ea3-8494-c3afa1fa2ea4", "sighting--cbddcc97-2181-4cf2-a1d1-6dd780a32aec", "sighting--6aa95bd8-2fbb-49e8-bf62-710c8b18c9ab", "sighting--b769b5ad-3dfa-4662-b02d-2b5200d36438", "sighting--c47a2122-5fab-4574-bbb8-d3d2b4020ec7", "sighting--ee671327-965f-4b17-b212-706e31bac0ee", "sighting--ade43ac8-0a0c-4f32-b8ea-d25d3e5505a4", "sighting--fdaae708-0cb6-4129-b14a-be458440d262", "sighting--110cceed-25e0-484e-998c-213df8379799", "sighting--634a65ef-e160-498a-b925-a2d98620cefd", "sighting--10b2c17e-9389-404e-8586-adc6537c7971", "sighting--9bf3b878-0381-4913-bfb2-23d5a5d1532c", "sighting--aeceb339-dfca-4110-bd1f-b52c1bad940f", "sighting--19bfd99d-da55-44d1-abaf-ac6cd5244899", "sighting--a4df8580-e24f-4732-8ab8-18fc59335ea1", "sighting--b2493732-0854-4d14-8f54-6492674582d8", "sighting--cd26f4fa-6a88-47f3-b989-52e643efdf44", "sighting--fdc50b83-4dc3-42fc-afe8-4422bf3f4250", "sighting--2ed0d298-c51a-418d-a0ce-be3caf859556", "sighting--7d804deb-0d73-480d-92c0-77bce80a5e2e", "sighting--c1c9e20a-ead3-4806-90c1-e1711e10e0d4", "sighting--bee65170-8826-45bc-8c34-33ab1121cce1", "sighting--c12dd681-ddba-4086-953d-64668867b613", "sighting--0564fbee-b206-4010-8ebf-b94410840961", "sighting--88c476e3-2f87-44cc-b86f-5fbfdbf63abb", "sighting--5ed87d13-ba5e-49d6-8629-0c0a7ab1497b", "sighting--cfb05cfb-5599-4ee0-85ff-8d41614b5347", "sighting--357d1088-bddc-4027-989a-4ff63e6ae9c7", "sighting--f5b02b67-df08-4edd-84b7-7d2c37dd4f04", "sighting--5dbbf683-bcdf-4889-99a9-16d46c233095", "sighting--f1b3ad7b-1a00-49ec-bd07-fea67e0c88c4", "sighting--e4beda08-d8f8-4d09-a11c-1159ba79c776", "sighting--fab30152-cd08-4e68-9986-6667a7f31943", "sighting--6e8c1cd2-7aa5-4485-a1cb-e86042f8bc85", "sighting--4d4ed56c-69dc-417c-bd8a-895c599122e1", "sighting--346e1a38-a27f-4dcc-85a2-f8f201b2261f", "sighting--b9ed222d-1660-4cba-bf0b-4f5a008ddf3f", "sighting--8c2f35d8-351c-40ba-a218-8d9491552d36", "sighting--634e2c47-746f-4aca-9bce-efe3b83ef3f3", "sighting--eab7bca2-d233-4f1c-a622-e0aaf47f1749", "sighting--8cb339cd-21bd-4eb1-accd-65ef0e44c1f9", "sighting--40f0740d-b2ce-4d6a-a6db-01e384bf6f94", "sighting--27b6046d-c25f-4581-a9e3-01796436d56a", "sighting--cb58cd26-6385-4df9-881b-79ce3fcd0616", "sighting--ac84125a-8695-4a31-a5a6-8a68b29ee2b3", "sighting--3a160f69-21e6-40f5-af89-4b2aaead741f", "sighting--21de898c-5397-47e5-8862-01d0337dea15", "sighting--ae89778a-5d26-4680-8e7f-f98a41062ad7", "sighting--f8f8c7ca-3571-484c-866d-4973748e962a", "sighting--a458dfa0-5a4c-4e8a-88e3-a4430542e4d2", "sighting--eb82ee73-74d2-4087-b5b2-6379fad61b09", "sighting--feafe20b-4520-4116-af15-225a8a015553", "sighting--374e3690-424b-4ab4-9ac1-e8510a7aaafe", "sighting--cf425df2-c3f3-416a-ad68-ca8f56e5942f", "sighting--4404727b-dcb8-4a93-b684-5ff61c8febf8", "sighting--533f78f2-1a30-4652-b071-30626b73924d", "sighting--69f52dba-d08d-43cc-bb0e-37a8989351fd", "sighting--99dfc71d-5f0f-46de-a3a4-79ab4025aae2", "sighting--8089e9c0-5b8f-49d3-9238-0bb9a3a958df", "sighting--4985aac5-aaf0-409a-84fa-aaa8e7502f1e", "sighting--f54838b4-57b4-49db-855d-0334a6cc6c36", "sighting--ede33aa2-ca7b-48d4-b2b3-1ce0d279fc5d", "sighting--84ecc7a8-9a7e-4aee-8151-d81783fb777e", "sighting--6378384c-9e35-4cbc-a2e7-954ee02a4af6", "sighting--f1aa41fd-7eaa-4a79-9d88-38a67d920033", "sighting--407193ff-3645-45d3-85c3-90dc6cd3457a", "sighting--5d6f2379-7f36-4afd-83e3-43c5693f2efd", "sighting--0f1732a7-ab96-42ab-8ec1-086ad0e4da4f", "sighting--a198cf7f-35fb-424a-88d1-57086ad63b04", "sighting--0a1b4746-1048-4949-80a9-f0cf61d9e50f", "sighting--3ae12565-447a-484e-8b71-3d452e7c8f37", "sighting--22d368f9-f3bf-41c7-81db-505db1a6d138", "sighting--85520f4b-6fce-4d79-8043-554988f3b398", "sighting--1b999e8b-6bcd-4d6c-a300-e0472ccb112e", "sighting--4eeb5440-cb84-4ff5-9db6-82586bc5f272", "sighting--5cc90395-9bc6-4ccf-973f-82b6c8e4d3d0", "sighting--e96919f1-b826-4ec8-bd2b-064285154014", "sighting--1d60bd6b-1f3e-4ba6-b0e1-e62fc0c70721", "sighting--c507b9cd-9928-412a-9fb4-44a930ce6e0d", "sighting--5821b145-99a4-48e7-8f60-97b7557b77f6", "sighting--bc69a09c-350d-4d4b-a61f-ccbcb69bceb8", "sighting--b092ef63-4867-4bf0-bd59-89f7db6451ce", "sighting--4e01e84a-f283-493c-b029-0fc1a4ece7d6", "sighting--e189e074-107c-4fb7-96f2-796a0bd87e3b", "sighting--3ecaa3b1-2532-4941-a1f2-37b68ff263f1", "sighting--8aa902d2-93ce-414a-9db3-1ceacdef0e53", "sighting--a1c87bcd-0900-458c-8fcc-08ecc24d377e", "sighting--4254a33d-c400-4214-bcd8-62b7125e72e8", "sighting--bb9fba2c-ef9d-45ab-b84d-b80bed09b4cc", "sighting--0d0e4c50-71af-4bcc-8cbf-b170d02118be", "sighting--dfa38911-5275-4b77-94e6-f7e03d24676f", "sighting--22cb47b9-6600-47d6-bb9e-728d5a853cc9", "sighting--77053b53-bcb8-4a82-87ca-0f004771126d", "sighting--56b6da50-b2f2-4e12-acd1-aae1ccf4ae40", "sighting--483ff8d5-e177-4568-92a3-984fb6fc263d", "sighting--689cc92f-0312-4a8b-a0cb-30a3828b175d", "sighting--402c88b3-74f4-41bd-a532-9b5ad0062d71", "sighting--fc2a7fc6-9ebe-4888-b724-1afb551c2734", "sighting--e5733d39-a5fa-4139-bb6f-a9540e7e833c", "sighting--233c0f83-8497-4457-8e42-2c65c1ff803c", "sighting--bf857783-4291-4271-a7fb-a1567caf7cb0", "sighting--9a5ef4f1-c823-408c-af56-9127b86e06df", "sighting--eefb98b4-4565-42eb-955d-5991029fba63", "sighting--477ddee4-688f-44b2-b755-37f24239be08", "sighting--d2607ee0-f58c-4ce5-9303-4f399498516e", "sighting--6e4a756a-364e-4726-93be-f2890464eefd", "sighting--d7177229-7d4b-4e20-aded-7bea2cd8f3db", "sighting--361d4fdd-2ec2-40ea-8b44-a45df6aaab83", "sighting--dc62f716-c1f5-4c25-9687-8b34f938ae55", "sighting--39644373-27c5-4088-8a0c-c534cb3b8fc2", "sighting--c508ac29-afba-46c4-8ea6-7a75b72e5e99", "sighting--146b45f1-a7aa-43d5-b55b-01a684283576", "sighting--484e1d47-6c45-481d-85be-085fe539e042", "sighting--b5365584-5faf-430b-84ea-b1277b1b6e61", "sighting--281bdf02-3b7d-4f5b-9ba4-a17df9952d11", "sighting--902fc812-201f-47c5-ac61-ddcdd128fdd6", "sighting--bb04ee89-0108-48ae-8759-f66d42b48737", "sighting--a976c8f4-9bef-48c9-a25b-509fb37e4298", "sighting--e45b9478-1736-401a-930a-a3266ef0d8d0", "sighting--e1299764-22fe-4d4b-8af9-0c1c9d05ca28", "sighting--9a6bf1f2-151d-4ab3-a0b1-9c65fe1abe70", "sighting--3c0d3876-55d9-40ab-ba13-c2b47e1f555b", "sighting--5073a5e3-78dc-42f5-aa31-26e9dedc7346", "sighting--c7203a1f-39ae-41e8-9d5f-1a082da86095", "sighting--83a8f5f8-ed9d-468f-9cdf-819402b76d7e", "sighting--4c9579f6-e00e-408d-b4c2-083b60876251", "sighting--c62f335d-b591-4f52-9377-788bca80faca", "sighting--61e8b1d1-1c28-48e2-a668-694c6569fcd5", "sighting--67e3d565-00ba-406e-ab10-dc3131d04b96", "sighting--1b12206a-4412-4497-9892-3ed0caf7ed2c", "sighting--20ed3e6c-a83c-4d76-98e4-a74123f9057b", "sighting--b731e1a7-d009-402c-957c-dcf220901768", "sighting--83b41efc-7ded-4d75-aedc-4ad4ec03b01c", "sighting--e90b2e0e-183a-4cb5-9e8c-fa1999e5e822", "sighting--a13b1b2f-f9f5-4f94-afb9-7f60fe5b2e26", "sighting--b5ce0c65-7f76-47b5-86e0-7d95689c6dcb", "sighting--cdc60151-7f29-454e-b202-25d83776f2b2", "sighting--8721f2b7-504e-4d58-82a8-da733dbf9fdc", "sighting--d0a4698c-b591-46b2-904a-6d0568b89f86", "sighting--9385a189-50fe-4a93-93cd-12f981318a6f", "sighting--c004e044-a94b-4176-b80f-51aa1e6cd6a5", "sighting--2001106f-6118-40b5-82f0-9c7c45c6f955", "sighting--08445c44-6eb7-4eb3-bcf2-f472135756de", "sighting--f8ea97f2-496b-42ed-bf2d-cddb90d40559", "sighting--289e8dbe-a18a-4f27-8600-d6b5471eaf31", "sighting--e34aade3-ef91-425d-bfa4-0bb9abd571cd", "sighting--3ebc66b9-2eb0-4466-8eed-d5fc5f0bad0d", "sighting--6300d050-64a8-4446-bb52-cb563144610f", "sighting--cb65af1c-e929-4f73-bad1-f06a81851010", "sighting--aba49602-d733-401e-851c-7cdae15fd459", "sighting--44f21cb5-d539-4184-ba3c-5106246c1a76", "sighting--7bf6eac5-e1a7-4020-9ba1-0b4fdb33b653", "sighting--24df440c-a1ac-4534-98a9-279fc175373f", "sighting--fc7e6d3a-5789-4377-9e38-353761954417", "sighting--8c88bca4-5862-4daf-a86e-27d8499f8b3f", "sighting--a4f6761c-39f2-4ccc-9c05-6fd03545d752", "sighting--4107c040-a2ff-4770-8744-848edba08484", "sighting--4c8ff0b6-f883-49f4-b17f-ed653a24dd8f", "sighting--8d85b36b-62d9-4c44-ae05-3f9369a91a29", "sighting--e1f618db-3290-430a-a2e9-89fc34605b37", "sighting--3a9caef3-5f1e-4f08-825e-faab2594ea2a", "sighting--8df4260f-3676-480b-86a3-6f93eece1e58", "sighting--f363ec57-f6f0-40a5-a1f0-c0bc7a7ec641", "sighting--3b3979fd-c447-4f2d-91bb-a0af991c3eb1", "sighting--cc89a788-af16-4611-9b09-361b3abbdba4", "sighting--48c32140-e01b-4f79-9714-3f15685f936d", "sighting--db7d4adc-3312-4406-8ec4-6a4fc988aa0e", "sighting--b698f9cc-b99f-4389-bb68-072b064d9ae2", "sighting--0c0b9acf-3b99-4b02-90d5-e885c4ab98d3", "sighting--63e87153-475c-44d7-b9bd-9049342fabc6", "sighting--fdb5bf92-60de-4e26-8265-94735cfb5324", "sighting--f890f589-390d-4fcf-838e-7de39096ceab", "sighting--1dd1c15c-fc93-412e-a703-b4af2cec2e2a", "sighting--4890b30d-0ff3-4448-88f2-08275c00345e", "sighting--73ba7711-b221-43d9-b37f-804f00c6c2e6", "sighting--934e1a74-e16f-4033-b089-4f313d037cfb", "sighting--5f33ca40-61b9-49a9-952d-f9a4e5e4fe2f", "sighting--c5dcd17c-54c4-4c03-a812-f52f180be8e0", "sighting--7299cad3-ebf1-42e9-be2a-108e6e1ed452", "sighting--8aef2089-8366-41d3-875f-2c7105233a5e", "sighting--9465f651-aa8d-4b92-8708-3757a39f4d1b", "sighting--5c3f1347-30f1-45a1-b58f-2230e94575ff", "sighting--1f893599-7acb-4acf-bbd9-6ac9224ee64c", "sighting--500e0a17-6954-4b61-87d8-e5ee67c90e32", "sighting--b7c5c8fa-571e-432a-bda4-d352f4f8c155", "sighting--c83abdbd-65ef-4430-834c-0851e882e54e", "sighting--8a3b5901-3212-4ff5-ab65-8d7516978181", "sighting--20ec7d02-6368-41cb-b784-1a800e19176c", "sighting--789c0966-29a0-4935-bcb0-978c7d629777", "sighting--9755e785-82bf-43b5-b827-39e8aee0cee7", "sighting--fefd2f10-a2e5-4866-99ac-feb5fcf093da", "sighting--bcd7d77d-92aa-4b4d-8bc2-f30a097efbe4", "sighting--3c6b45f2-dfb9-4689-a3b5-d1f0eaaa8bed", "sighting--2076e4ec-0db0-4447-b6f4-8f9d71c80fd9", "sighting--95270406-6c2f-4c63-b720-accbeb5521d2", "sighting--cd80481b-b607-4b65-8b61-9f19e62b155b", "sighting--23021052-13e2-4b55-94c5-fe99183cf4c3", "sighting--e3b14698-53ec-461e-8276-dac48d615b3a", "sighting--27e0199a-dad7-4d4a-b93a-bf2d57900216", "sighting--29ed0016-c057-4b18-ac37-7f744d3262c8", "sighting--aac9bc65-0399-4a7f-b2d9-7e9976e6f4cd", "sighting--b7ec399f-0aee-4088-b2d3-e631d5687e8b", "sighting--6cf666ed-6af1-4847-8cb4-d14cfb5bc876", "sighting--7aff8c76-aee1-419a-a556-8e0183f447b3", "sighting--6f30adf4-254c-4e6c-be3f-7e13a7cbeb18", "sighting--4168fce0-66ad-45e8-9127-a7906cd3d2f7", "sighting--54a2b1f6-5195-4b49-a026-8d0c81e01fc3", "sighting--85b6112b-8036-4782-9167-3b6c5256d56e", "sighting--4deeab89-d378-4a62-9d8c-aa234419a683", "sighting--1627ad7e-7c0a-4cf5-8cf0-730a6741f62a", "sighting--09d29c04-5417-4473-890a-79400ee4e1b1", "sighting--98222650-2408-4132-abd4-89c86bfb696f", "sighting--a8ef79f3-7d6e-444a-b668-ccdfff3081e6", "sighting--0cc6a3cb-5918-4a30-ac2e-1f419a11c9fe", "sighting--9ae8cde1-27db-4f49-9523-70f16ad4b218", "sighting--51108134-4fbc-47ad-b6dd-46d975d23e54", "sighting--af89aa6e-752e-4bd3-af3e-67f8a81db6a3", "sighting--2df4325e-158a-4541-84bb-64d5e1fbd795", "sighting--0ead7d49-810c-4a8c-b6f9-dd1a1506e563", "sighting--7f745081-7fe1-4bb8-ae98-19d0cc09c94b", "sighting--0760f858-5535-45ec-af0a-c9700bc0b375", "sighting--7ddf9473-59bc-4b19-9546-9d5f1493abdc", "sighting--510b3d0e-7481-4939-b905-2ab98d793246", "sighting--7be72570-5a65-4841-b452-934e2615307f", "sighting--ed9f535a-e1c7-4550-b449-2ffd1fbf0bc7", "sighting--b63a6cd4-40f6-4a7e-9030-a0fa7f2ce67c", "sighting--5a28fac7-36c0-4068-bc7d-f69220f3d2b9", "sighting--3f6c047d-2b55-4a7e-b048-3585fcd5472f", "sighting--90502b3a-b1d5-4d9b-8fe2-4a0187eb0e37", "sighting--fed39f75-8429-49db-af50-702b256de78e", "sighting--1bca8f57-9920-4384-8b13-47c895a0cf09", "sighting--ea07c30e-a933-471c-80b4-916741f9017a", "sighting--420bf5e3-ed70-49fc-bd79-5dd332f38084", "sighting--15d8a9c5-e77c-4aa9-9b0f-4dc9a6fcd4ca", "sighting--0c22baf7-efc5-4808-b158-4abe7d2d1d12", "sighting--363bca47-fdb6-4fcf-a2cc-3fc1e7994018", "sighting--661ff184-ce0b-4e27-80eb-bd36bbd6e42c", "sighting--b9958d17-1fc7-4145-b8d5-de5851c91a48", "sighting--96852bdf-48cb-4684-956d-cf01d10e6bcf", "sighting--2fda1c74-29fd-4cc4-bfe5-1a993cbadd69", "sighting--2896451e-3d6b-46d6-8207-9d6990e8e1b3", "sighting--efbefda5-7c0f-4e9f-9898-41d82470033e", "sighting--95854e51-f5f2-4d49-8780-6efdbb194177", "sighting--6dbbcb12-9283-45e6-85b5-5c613dab04ce", "sighting--dde0e1ee-8909-448b-ac6d-63c58cb9add9", "sighting--806c558e-e9c5-4007-bdcb-b9accb834356", "sighting--4579e840-7a68-4c24-9ef3-e0269f5b2e22", "sighting--22c438ac-f50c-4e10-9db6-867c5b659157", "sighting--66490892-92b2-4145-9628-e2976ce393d9", "sighting--204c7c1f-6491-4ec6-aa95-8477c674e1c7", "sighting--cdeb3abf-ba32-48e2-b1a3-4a892fd81d1a", "sighting--7d516781-ff0d-4d78-9299-e6818484c94a", "sighting--32799bd9-74b9-484f-9112-38db0ce147c6", "sighting--1d443164-cc21-435a-9477-8fd21a4ff112", "sighting--593960e2-1c61-4cc9-ae24-2631d9bceba3", "sighting--18a5da76-eb9b-41d6-b882-71d78c17b141", "sighting--bf9a50ff-1c52-4741-9af4-0674159205e9", "sighting--3b626510-f79c-45a2-a72d-75ffa0067925", "sighting--05d9ded1-83b0-4c28-ba37-17e25d164f78", "sighting--6857b4bc-1780-4fc2-90fc-326711fda2e0", "sighting--6b7c6e32-33e4-4561-a6d4-3f910a1f4e8f", "sighting--671eac01-3f67-4ccb-a460-10b9ea3e7a0b", "sighting--dd53fd03-5146-4462-9072-84ac8093be66", "sighting--8ef64196-5550-4446-96e9-831c156bca58", "sighting--252afb56-2fde-489e-9c51-eb939e221f30", "sighting--74ae5af4-a20f-488a-a757-6df59de8fe8b", "sighting--3e7c8e89-e6cd-4274-8793-a2ab790e766d", "sighting--cfcdfe92-0060-4fa6-89ec-7f4187cf5a68", "sighting--e010b092-ca9e-4fca-933d-22f21081ac99", "sighting--1fc79e5b-257f-4302-a5dd-753b3ecf2df7", "sighting--4605f31c-d7a8-41e6-8c0a-4e5835d01c70", "sighting--e80399e1-43cd-4762-b736-ae8d4bef9fae", "sighting--0f679792-391f-491d-8f55-8f73bf07ec0a", "sighting--20665eb4-7f28-43d3-b3ca-e06796e3620b", "sighting--b598d27a-f128-40ea-8912-22d549684d92", "sighting--c4252492-2746-470d-850e-f5f0fc5b6a0f", "sighting--ebc229c1-c195-4e86-8480-baa39f21b900", "sighting--ca5c8d09-c378-4327-a9e8-fd8c2c43cf14", "sighting--9bcbaca1-2540-413e-b629-eeb6442170e1", "sighting--b72cfb5d-93d3-4237-a3a5-4a1b98c44edb", "sighting--377fbaf6-9506-43fb-8a35-5cf143a4ef16", "sighting--7216d9b8-f6a9-4997-828f-e4086f86eb4a", "sighting--b205bfd9-c3da-4910-90e7-23ec4c8e9dc3", "sighting--531482c3-2d2f-43fc-ae92-da081660c624", "sighting--c5fc6a74-752f-42e1-83f2-78082216781f", "sighting--7152a7d5-fdde-42ca-9b88-88dc4e7c5424", "sighting--064e3549-210c-4d96-bbe2-a9a4ae2d9aeb", "sighting--3cb35acd-b1ee-47cd-ae9a-d8ea412f3629", "sighting--81f8732e-532b-4129-a488-ad4921ef35b2", "sighting--f63c17fb-5862-4f27-8b1a-2e521471f636", "sighting--49cf1bed-7b8f-47a2-9be6-9aee53d2397f", "sighting--4311b4bd-bb0b-4a1a-96ae-9e9c8d17870a", "sighting--6d1ec647-93a1-42f6-8906-9909a90dffc7", "sighting--3d357226-39fa-42c0-9780-68a78e2d1af0", "sighting--0380e007-dcf6-43cd-8a14-0648e6f2e5d1", "sighting--0b0a3451-bba7-4e82-82c7-8260a0be0bf2", "sighting--49ffb460-9fbc-4287-af4d-cc4c09c9f5fd", "sighting--1731f5a1-56c1-4515-b702-2010022fe422", "sighting--dc669943-aefb-4d45-abe6-840cc1634e0e", "sighting--efb20d0a-6724-4c98-9e88-bef25419e124", "sighting--9f7e045b-2e01-4f81-b124-f0003992c5ee", "sighting--0bb766e2-5d93-4c46-866e-26531a238005", "sighting--298df251-39fe-4d93-acba-d1a760e28a41", "sighting--bcbe8b89-2e13-4e99-89ac-0e38837ecf88", "sighting--09b18af6-6c44-4eca-81bb-db7056115b47", "sighting--8727e283-9864-4452-90ac-6ec42c1a979f", "sighting--bcae7176-3640-4d43-8141-79f594b76537", "sighting--9e48dfcc-d56a-479d-9643-199e1486d23d", "sighting--9c666b53-3120-4556-bd6d-e57f79b24295", "sighting--4000bc37-a829-41e3-85f2-21a3ae55b83c", "sighting--a2311bec-f042-4d38-a72a-8e00b4892906", "sighting--aa1013e3-b3c1-4427-970c-3412ec3a3525", "sighting--5394fffa-0d5c-4c87-8615-a0dc1e9af940", "sighting--70d8cf46-9a01-4333-beb1-11f826e2d341", "sighting--238471e7-f076-4487-a572-01670f73fc69", "sighting--2944feef-a927-4c5d-92e7-8123f682efb1", "sighting--15583be0-0b07-44c3-be8d-c68a64c6d62c", "sighting--941ca157-19d5-4e7a-b22b-f76868d648a4", "sighting--32126c72-1fa5-47cd-96a1-8a3f286b4a55", "sighting--fbab8d2c-1efe-4e43-84f8-eda2d9a73dd3", "sighting--5722ba23-bb34-45e7-9921-88ba4a456b6f", "sighting--ecc8c3c4-cd6e-4e85-be1a-ee8431dd8cb6", "sighting--72514e5b-b713-4a39-9c2b-38a34cf922fe", "sighting--40d045a0-0e37-4fce-89ae-da9ab47e6bf2", "sighting--7e90958e-967d-434d-a352-33fce9ac2f24", "sighting--c59f67fc-1720-40a4-aa4c-ad5f256a6415", "sighting--bf0544c7-fe38-4127-82f2-c292c16ca6ef", "sighting--567e87d0-5e3a-4cb3-a93c-496f391bb671", "sighting--b5f567a7-f87f-4853-a55d-bf2e6542454e", "sighting--bbb426de-2931-4e30-bfe7-72da481397d8", "sighting--fce595bf-7320-4f05-91d0-0617901befd6", "sighting--6f785820-9164-4360-ad89-eaa2908bf9e4", "sighting--f6fa681c-e4f9-4405-9dd2-3c7c2bea3648", "sighting--a1205d01-2a15-46fe-9e3f-a6ec52cbd75b", "sighting--48b11a5c-283f-40e6-97fd-705a2be7786f", "sighting--d29fca54-5962-4d98-857a-c06b0eb1ec49", "sighting--54e2ec50-0b10-4c30-af2c-b8b5a118c602", "sighting--6c3cdb72-ef60-4f0e-bfb5-cbaf1f8a1e3d", "sighting--75aac4df-1d06-4859-9727-2f8db5d809de", "sighting--ceba5cb0-b3a6-48a0-b019-a5e920efb99a", "sighting--9381b884-bb7a-4dbd-9db5-65a2883f9449", "sighting--0680d0b1-f177-44d8-9d9b-64da068cd2f0", "sighting--6f67cb47-e36a-4f9a-9bdb-8c59618ddee1", "sighting--2575321a-e1e8-4f2a-840a-7257a7df9625", "sighting--e3b77fc3-ab62-4941-bb97-789820a11508", "sighting--b966272e-d6e7-463f-b8fa-fe3e72e65eb4", "sighting--bdf8cf35-8499-416e-8436-9e22e0f6ee39", "sighting--87bc65f1-f977-4358-96da-6ec5a9ad20d7", "sighting--e0098f9f-e9b5-4cb1-9b2d-10342465cf27", "sighting--2ce5b551-dacb-46ed-840a-ed6bce557467", "sighting--b38b64a5-8b1b-4d3b-ae8e-8be0d6c4023a", "sighting--a34263d2-45cd-4ba5-9671-ee92807be11d", "sighting--93cf119f-9995-4818-92e3-d0258efc7f30", "sighting--0571fcf0-70c2-4af0-be02-6ba1d7113670", "sighting--296fd0c5-042b-45ad-ae6e-40b195eb244a", "sighting--cbddfd19-084e-4d7a-8150-6c125db1eeb9", "sighting--0c990c16-bb83-40d2-b6c1-75f4a74f30ae", "sighting--8d11c912-0ce4-4f84-a2e7-a45bcf40a328", "sighting--8910c228-9e10-44aa-a2de-28d6c5fce46e", "sighting--f70e3c8d-7d3e-45ef-b3d0-c10712fea6bd", "sighting--028ef477-8eba-44b5-8114-c1ac36de93d2", "sighting--67298dab-6827-4b4e-9ebf-0bf79291aac8", "sighting--cc440128-1fec-4108-bb5c-b1a65a90f52b", "sighting--2bc9ab32-1d62-42c4-a319-33d6a5edb4d9", "sighting--e6e1a019-032a-4eaf-9c64-532dc3b196ab", "sighting--5f75d912-7e97-4914-903b-e0beceeeda9d", "sighting--e46bb885-bb06-43cb-bf13-444e2cc2007c", "sighting--65aea514-34a9-4a7c-8fa7-53dca8129a88", "sighting--a9e41040-c515-4856-81df-07a970a8439b", "sighting--169d1e16-e835-4ba1-80a0-4334af02d65f", "sighting--f330be9c-1261-475d-9ced-b07e88afe15d", "sighting--91d4bc8d-fd6a-4652-9e6c-2a508402747c", "sighting--94c824cc-099b-406c-bacf-e91e312c14b9", "sighting--0e17a979-fe7f-437a-9323-0537e0a8a968", "sighting--e4cdda0a-256d-46c1-b993-f91c08c6eb03", "sighting--74ebc1df-89a8-4c86-bf9e-59cbfc2e42b3", "sighting--dd7bb3a2-9d94-46d4-8c9c-be78df70d30a", "sighting--126b78db-c255-4606-9445-cfd949873473", "sighting--a6ba3302-be56-4e3b-bd69-52435ccd128d", "sighting--1d447f0a-e7f6-43a4-bdac-77a4637764a2", "sighting--04742d80-a619-42ba-9542-229630f3d55e", "sighting--5459f379-96dd-490c-9c34-103f51dae79d", "sighting--3f8b5ebd-4fa2-4cbf-b779-33bb54e0aab2", "sighting--f47f3c92-8807-4f20-bf89-4b0a4a5ba2ea", "sighting--914607b6-5b6e-4845-8416-9b761dded056", "sighting--4f1fb841-a6bb-43a7-8ffa-f725262288e6", "sighting--21359c20-5b78-42ac-b3b8-3405b9f9120b", "sighting--4092a585-a0b5-4a16-a579-1a8d094a487d", "sighting--de738000-7c0b-46fa-83e0-0fe9bcd8f1fa", "sighting--8c045e18-f8e7-4930-831d-17299a6808fb", "sighting--33561087-931d-4c79-813a-516d8f12aaba", "sighting--c33295de-12a3-4056-a428-6ef1b9198cea", "sighting--7f45cf83-b3a5-4577-84b7-c8f411a25f84", "sighting--58ffd3ff-61e1-48c4-a362-ef24db7d9b54", "sighting--cc697794-5993-442a-b63c-61803b3c8235", "sighting--1453ecc2-0b49-4583-a076-b8f18a9c6236", "sighting--c9ae29e2-ed59-4839-8634-4054817668ae", "sighting--0ab7bc5c-a35b-44b2-82cd-bd8213b2fcf0", "sighting--97f61f64-d953-4def-930e-ccbf55241de6", "sighting--46d56323-3670-4f05-b0a0-9d45dfdf2686", "sighting--ed2ebbdb-6a41-4488-9c77-8ee328c6aeeb", "sighting--14b4a70c-1df2-41e7-95df-6b237dd0c137", "sighting--2d7b1068-c8f0-43cc-82cf-f8cc73f085f7", "sighting--d77718d5-8b05-4a5b-8598-afb8a179a75c", "sighting--355bb971-da0f-48f6-8eea-6a0a12391969", "sighting--271f421e-1807-4a71-a48f-f1e06a6cd433", "sighting--b20c001a-228e-407d-9559-0faa70419f88", "sighting--caf413ab-adae-42b3-9b3e-f88824e45dfc", "sighting--26fe823c-0912-4710-916f-f25dd9eb84a5", "sighting--33b2c449-a4c2-422e-8fec-facfef45a475", "sighting--6242a896-fda9-4df0-a562-b3e0951a1261", "sighting--c47280a0-981d-4a87-9b76-95e094d96d18", "sighting--ec55e3a6-19bb-4248-baa1-06498033ebf7", "sighting--f353df33-13d4-4f4a-be26-be041c88d967", "sighting--e05cf059-ff28-4797-bd26-d44e8f94be4c", "sighting--aa189154-2bef-43d5-a386-a02682c9bbc5", "sighting--faf4a3cc-dff8-49f4-b6b7-9adec7a19f60", "sighting--c4eaa907-4079-4ed9-b9be-c1844f2d681d", "sighting--eb77b627-5cb5-4b91-97ce-a282f49d6611", "sighting--c6af8427-84a3-4844-aad0-7a060699bf5d", "sighting--b7ed108e-d02c-492f-a6c9-430e23738169", "sighting--fdced58a-6c6e-48dd-974d-e02cb826434e", "sighting--9b17607c-9237-4ca9-952e-722c9e963914", "sighting--5ffcdbc3-fa37-4bab-a37b-4f8657dac646", "sighting--8e6872b2-24e6-4b5f-91c6-012378cbff6f", "sighting--6ec89579-8761-4a2a-a441-94eda7bdb466", "sighting--7663aa55-0a65-4213-af68-877948375631", "sighting--d85c953b-6902-41e0-8419-7239a0a3e870", "sighting--88438e36-0888-4d01-935b-ac7a97abaaee", "sighting--72a3276d-bc9f-4387-8ff8-204e3eb688b1", "sighting--0f94c116-317a-41f7-82e4-5fdb72705ae3", "sighting--0c8dc528-a5fb-4ddb-9fb5-2a8ac1d5b449", "sighting--ba33b2cd-4d8a-42f3-a2fa-de238780ac67", "sighting--dc37ce52-ecdc-4bfb-8d08-5852205435c4", "sighting--0f8b1be2-580f-4320-9ad3-dd3e4ad9a751", "sighting--f7cb8abb-a4ae-4da1-8bcb-fb20eed113be", "sighting--528ab633-fafc-4fa9-a3a1-e5bbab525d17", "sighting--1bec042b-8a51-48dd-8d8b-a2bc8cf968d7", "sighting--cb4ae5c7-b2cb-48fc-953c-059a5a959116", "sighting--0303a476-b38c-494b-b3db-ccb5f62a7626", "sighting--664b09ed-8bf6-494e-8093-275d530cc93d", "sighting--c7e3e64a-a901-40c6-bb63-59b69a6f3300", "sighting--f4b1cda5-3c89-4814-bd4f-4c65eb8a6652", "sighting--8ec426d9-11d3-484d-b57b-c08fad5f67ca", "sighting--6660991e-5b18-440d-8149-01077ac556bb", "sighting--b8e43a36-a1ff-46a9-bda3-85fc0db3b7f1", "sighting--8364f536-62d8-4072-a420-34bdfd8e1c75", "sighting--15b1b9f2-1360-436a-91fd-4feec12c1f2c", "sighting--9e68decd-925b-4d30-adc3-8dfe5b5224ca", "sighting--3b31f34b-1bf2-4523-bb00-feba91eeaa1c", "sighting--ab767d83-2fa3-4969-a3a9-c76d177888d3", "sighting--52514607-cd82-41be-9bb6-65fb08849c4c", "sighting--673cbd5a-670a-4b83-93f6-27de6e17e6c3", "sighting--61bed7f5-4fcd-49d3-978a-ecf02b4e7a64", "sighting--6dcbfcd0-599f-44fb-bd06-37a5c73fc664", "sighting--bc8cdd45-897b-4066-848d-1b1f7018767d", "sighting--216b5c3e-9529-4c5b-8b6b-db1533603794", "sighting--4c3adc01-e1d0-4020-84b2-08ffae766890", "sighting--6a466675-18b4-44c8-b3e3-e2be04e8ef71", "sighting--b5681ccf-299e-44e4-9190-164ac851f289", "sighting--b5717ee3-2e83-4cd2-b1b0-29a35d8c68e3", "sighting--9d3e25b1-06c8-49ef-adcd-bc9186fc047f", "sighting--beb194c0-0a7f-4db4-a686-c070c7083156", "sighting--25d5b924-93dc-4e77-a1ed-383b5248e346", "sighting--5afeb1da-ee2c-475b-99b3-1943a14fde55", "sighting--f75039e2-b20f-4b16-b51a-7bd48dcfdefe", "sighting--061998d3-5f2c-44e5-9ae8-3bc1f4d309e6", "sighting--fe214667-efab-48f4-a27c-89aab8f576ad", "sighting--32e0f3b7-448c-4f10-9f91-92db3b4f4fb2", "sighting--8767d7e8-d7a0-4001-b775-13c1e60dbaa2", "sighting--56b90ff9-d466-45d1-95ca-1c90cf06ccf4", "sighting--2e36f93c-0a8a-4188-909d-5e8125bd4f5e", "sighting--60d60b73-44d4-41c7-9072-1ec6fa9ad915", "sighting--37f375bf-5f74-404c-a90d-b78a548bd112", "sighting--46326a9b-29ff-4799-92fa-f373d69a174c", "sighting--c367ffc5-2d0c-486c-b105-56432ddcb290", "sighting--2342a005-67a0-4f5b-b1e5-0496dcca044f", "sighting--26d3f8b4-e50d-4b8b-a1b1-21ebf344d90f", "sighting--f2ed03b9-8624-44ba-b6ec-71f2e2b38e48", "sighting--453a9938-5423-4ad4-b842-3a56fe2c3b11", "sighting--531f8a56-1276-47d7-8420-e81e50ac0fbb", "sighting--3cf1bc7e-2021-47b0-bb4c-b6aa2eb3607d", "sighting--659e1cea-3766-407b-9775-9517953a2d02", "sighting--05d9c814-24a6-40ec-8f6e-d7143b9108ed", "sighting--e042ba67-b519-4d32-9922-80fea9815837", "sighting--a7507049-f8ce-4036-9106-86192c4bbaa9", "sighting--62e38b80-1b50-45f2-8e88-e19aa22e7b45", "sighting--97cbbb15-b870-4f19-96a7-55e9a3817c72", "sighting--da269efb-7c07-4827-b3c8-01ae628cefc4", "sighting--9e3f1349-af0d-4241-86e7-cda600441879", "sighting--6c627841-d416-476c-899d-9a3612e8a444", "sighting--45fd38e2-c552-48ed-b521-672d6142eba0", "sighting--8093958f-76dd-438e-a966-b70b21b1a0ca", "sighting--6c63e475-6c27-4f36-b3c7-acca51da4eb3", "sighting--951b6f4f-5f04-4328-9fcd-3ea5d6989d74", "sighting--f79f9f07-cf6a-4a6f-bf84-53f277472c02", "sighting--8daf82b7-64e2-4830-9450-6ec4c9189d0d", "sighting--d2af9da0-02d7-4e02-8cfb-d718075aeaa8", "sighting--77c0fe5c-8c2d-4d1a-aea8-3bf8b98c81f3", "sighting--61bd31cb-185c-4e82-9a5b-ef5ce9cce3c4", "sighting--3f6dcf1b-6ac5-4e5d-bfe6-19e3208f90bb", "sighting--06ba5df0-b138-4a2a-9e91-9b73bd3ec89c", "sighting--f770f026-495f-4e70-a4ba-413d52af9c95", "sighting--f7a1d2aa-004b-4dc4-a605-6062554dc4bf", "sighting--d58ab850-4857-46e1-8b72-8a94b5d5bdc9", "sighting--dc36acef-7a51-4247-9949-58be844e8708", "sighting--da9982bf-414f-4ddf-95ec-b0618aded236", "sighting--d70bf994-33b5-4521-9889-646cf99c1b60", "sighting--55ad9e4e-c709-42e6-b3d5-3d021e7baceb", "sighting--9ce67e50-f733-4203-b2ff-3a2b88e78396", "sighting--bf8f710b-3a42-46ad-8ec2-7991f76f6be0", "sighting--e66b0d10-8830-4a3d-aac4-68959ff80732", "sighting--7803d164-497b-4a0b-8be5-f45b6a9d8c1e", "sighting--99a18959-b52e-4448-a0c2-aaa07664062c", "sighting--485cd949-5e30-4f80-8a56-40adef63d9a3", "sighting--b948e7d6-6529-4e99-9743-515c14b6b9b9", "sighting--a08e23fb-8704-455e-81ae-ab28872bd543", "sighting--b2cd3d63-7f2e-4c04-97a8-d6964699b805", "sighting--6afbda1f-3145-42a1-9f94-6518fb607bd0", "sighting--df3f49e6-2031-4ea7-b98f-ed237b6c6994", "sighting--483b9e82-dfb4-4475-a7ac-9fc4939daae4", "sighting--fc2f6d2d-6a78-4683-8624-fe13a1868390", "sighting--9c7ca160-6309-46fa-a1f7-3a6f0c5e8ed7", "sighting--e7812fed-ed87-462c-81b5-fdd496b52663", "sighting--76fba87c-6369-4bd1-9679-0c0efda76afc", "sighting--5e534c6c-d1f4-43f6-9716-4988f977c497", "sighting--380b973d-2703-4e96-8cf1-c607e5e7b1c2", "sighting--6a977868-ec1f-498c-9eb7-374b1bbcc7eb", "sighting--9e078384-ad3f-4250-be29-f70a841b4397", "sighting--a4de9611-bcf4-4e96-93ee-938e9976f574", "sighting--4f6b74c8-06ad-4ba9-81a0-57a8d1b29ac4", "sighting--a7c636eb-a6fe-4b2b-b99a-927555a21705", "sighting--57d75131-1a3e-47de-8edd-fa31ef48461e", "sighting--038da994-bd61-4567-b051-11c35db3e777", "sighting--f8fb513f-970f-4f64-bbe8-b198efc47bce", "sighting--3cd55d42-f3be-4316-80fa-17161c1bc7c8", "sighting--bb00d465-4799-4cd1-b1cf-fbd69f23d0eb", "sighting--a5caccdd-ceb8-4db9-aa91-ae61376ac295", "sighting--4ebb231c-cdfe-4bd4-b179-b701add55ca3", "sighting--54d9415a-c891-49f0-91a0-9e136dc29ad1", "sighting--a5785237-d075-4703-bd43-7fc4971c0394", "sighting--2918815e-bd8a-4ec2-9799-b96bedebc06e", "sighting--23905f28-a593-4126-9bd6-631418666ec5", "sighting--f33debb3-45c3-4441-977f-adeaefcb9869", "sighting--614b400e-7e5d-42d9-9d3d-964edaf729a7", "sighting--115f378d-3232-4e23-a853-82f938f2f59d", "sighting--d8cc981b-a5e2-4b3a-9971-09cb65cfc257", "sighting--9c1e4cbd-3623-4308-83a5-8bfd90f15e20", "sighting--4493d794-c8ab-46e8-9fa2-94086315e9f2", "sighting--c787b470-91da-4929-897c-3fed1b0d2c7d", "sighting--b2322245-c872-43f4-b88d-9cb910e700a9", "sighting--df0b985b-5378-4702-a71e-bbcd65845df1", "sighting--e4bd49fe-cb9c-4feb-89e6-c819f14ef03c", "sighting--b4554c89-316d-409d-80ca-adbb1722c46a", "sighting--71d236e6-b7a9-4a13-9cff-9b2848361879", "sighting--09aa01ac-51e2-419e-891e-a51cfb330048", "sighting--fbf9d9ad-fb0d-4c69-856c-b5ba17e782ff", "sighting--990f9a2c-1963-4b06-8db4-aeb2302fc66b", "sighting--2f02ae01-e926-44c1-8495-7c0a942a0f99", "sighting--25da5ff2-3651-44d3-90ee-f50cd30135ad", "sighting--ea523e6b-52e1-4747-81b2-d972339db74f", "sighting--363dfc1a-da08-4475-8389-ab11a21673e9", "sighting--d1528a22-bfc2-4eb5-9ba3-4dfd74ba10d5", "sighting--6d6933cc-d821-4768-85f7-4106a9abdbca", "sighting--ebfb0026-ea96-49fd-bb71-1e80dab5c2a0", "sighting--9b66871c-f70b-48da-9f36-cc25eb03a9a1", "sighting--ef472530-5235-4f6e-af15-170ed2c1d99f", "sighting--509731d1-29bb-48ce-a5aa-6b1dd9312c19", "sighting--b1ccef85-b1de-43d8-bcaa-64b0ab1f1723", "sighting--89c2c657-60b3-428c-90dd-3230a71a52ab", "sighting--68837ba2-6a00-4760-840a-4402e0903e0f", "sighting--9dc7d495-f285-4430-8bd5-8d232715d972", "sighting--a70f8070-2684-4f18-b429-cb75ba87c130", "sighting--e24825e0-e435-4fd9-95bd-a1f7ee64bf76", "sighting--c4dabbc8-1d8c-4f90-b367-876235512b53", "sighting--910a5f60-557b-41e7-8312-e8ce65cee908", "sighting--ac850bce-6764-4854-9336-1f96f8ad61a0", "sighting--811ae1d9-55ef-4be8-9a99-de96be507ea0", "sighting--831b83d2-3ecc-4152-b747-eea873b42687", "sighting--fb979c73-d80e-4c21-96e2-465c0b3b1459", "sighting--c8da3335-c365-4dc2-bb03-f8b53db81bf3", "sighting--24872f5f-e6e5-4f47-82da-5ea4dc370aba", "sighting--d9bc6b2c-a09d-4708-b1eb-ffea18b1de2e", "sighting--0edfad2b-4fa5-49a2-9919-cf3d7408ebf6", "sighting--b186ed5e-4c9a-4d50-9b21-90378cea9eb4", "sighting--c3ad25fd-fe04-4581-9d31-97de26b1de85", "sighting--d9680276-cd01-4fe2-b097-147513e2f337", "sighting--ef52cd95-1773-4f4a-aa69-6b624dc30301", "sighting--37d64fd9-7ddf-406e-9544-3793953bbf7c", "sighting--8c1754aa-d0b4-4948-bb88-7c3687626e68", "sighting--1f47bd1b-96e9-4ada-8779-8c799f33e3ed", "sighting--52c761d4-92d5-422f-9cb5-a1c2cb3c566c", "sighting--5bde1e8d-d36a-4601-b249-74cc7fb1782a", "sighting--ccebedc6-4367-418a-90fb-f8db01b07325", "sighting--de1f01b2-92f8-45e9-9cad-a4f03a2075a2", "sighting--6d8f92bd-142f-4f39-9db4-f9173a666580", "sighting--c0aaebc8-4b2c-43bd-8b1e-89011e3fefed", "sighting--4bac73f5-51d8-408b-95aa-d3adc7c1ac39", "sighting--38814019-cd19-4068-9acb-d19e4d88a4fc", "sighting--aafedc86-5eda-4758-93d8-5a8f330307d8", "sighting--f1f89e12-e187-4dd5-b295-d6016dd81aac", "sighting--d820ecf4-0896-4f9a-aeef-fc628041fedb", "sighting--82eba846-2cfb-4185-993c-f4da4ca829a6", "sighting--7d85c0f8-117a-429d-8883-74bee1885fd3", "sighting--d19e5d15-ea56-425c-a4ec-5cfb0068a719", "sighting--4d88781e-91fa-4c4c-8731-0d6af7279eaa", "sighting--0b398f73-cb3a-4bf2-83b0-705ecd6dedc1", "sighting--d7b6ebd9-5340-4408-b433-83876a37f726", "sighting--5809b3e0-4bfd-466c-8ed7-a960634361e1", "sighting--363445a7-561f-4a49-a069-3fd5800beee5", "sighting--e4beb7d5-eaff-4343-9376-4fc73f6a59a7", "sighting--517819d4-cb0a-4acf-ad9b-abacfc6b2a87", "sighting--66fca133-3fa3-4ebc-b04c-98f5a2d45697", "sighting--e4576520-252d-4dbd-a9fe-17eeef45e74e", "sighting--0602743f-f6f5-4afd-9bbb-0e7ee5215648", "sighting--8d1122dd-6529-41c1-a25c-1231c6adf606", "sighting--9d89770e-c929-423e-ade3-b71ce0260775", "sighting--c2a7701a-dcd3-4fc3-9df5-12a8f0219e7f", "sighting--9059812b-9653-441a-bb13-44bb21f27bac", "sighting--882e50ed-0ec8-4ffe-8a50-1aabc2145183", "sighting--f618b3cf-6c6d-4468-855d-efdb1630362a", "sighting--f9f6f9d6-82e2-4c22-9bed-afba4033f6c9", "sighting--18ca98da-f6e7-4b76-ba06-85454b9f6cfd", "sighting--62c37a72-1d7b-44c6-860f-745d082670a5", "sighting--743b6d94-3443-4fb7-bdd9-f932b829ac77", "sighting--9925db38-2796-4192-8639-7cd0f564f22b", "sighting--b680d7e7-9c2f-416b-af97-6c27c5bc5871", "sighting--73cf2f8c-f7ea-45ab-b2f8-23f861adc260", "sighting--9198ca28-6214-4a84-91bb-66da0bd82cc3", "sighting--2da16330-bb21-4958-b19b-f2c110cbfb7e", "sighting--eebfe5b3-7532-46c6-be1f-27f7ebdc06ae", "sighting--f67abb5a-b6eb-41bd-a282-3c32afe43c94", "sighting--e6796725-f624-4000-a6ca-77a624d68e7c", "sighting--8cf14b0b-0449-402a-bbbe-106d0e9f2b45", "sighting--43281634-efb2-4065-8b76-22676e8eb6e0", "sighting--0887d8a5-189a-412f-92ee-03f5b53a8433", "sighting--3d41b0f1-cc69-4ec9-ae69-707e1de7236e", "sighting--e08d30b8-42b4-41a8-bd4a-41e646bd7c64", "sighting--97100821-96f4-4682-98ad-b69ac6140b94", "sighting--d4742999-7976-48cf-8494-eac59cef74db", "sighting--7e6fd955-4985-4263-94e8-b81e063507a8", "sighting--3c01a9ba-bd8c-4e64-8e7b-9aa3c64af380", "sighting--70cda5ec-caa8-4d08-a3bd-d90f8d9414e9", "sighting--8dec5660-86a8-43d8-a443-0eb6f324ace2", "sighting--aaff8ad1-287a-4125-beae-3ff9facc5b7e", "sighting--8353c3a3-2d98-4046-96b4-090c8a7533cf", "sighting--bc6975cf-9ec9-46a0-9fcb-6ffc4ed69468", "sighting--1fcb61a0-3fb1-414a-9ce2-30f478bbec5d", "sighting--fb35bc3c-405a-44b1-892b-5c2bc554467c", "sighting--08fc61da-1dd4-425f-9b33-32b33156a9ab", "sighting--62396e94-25ef-455f-b5aa-bda728961edf", "sighting--b346aada-f0af-48a1-aa21-d6e643559adc", "sighting--cdebf804-fa34-49ef-ae85-2cc3053a6989", "sighting--9eddac58-4b82-4204-b6a8-f7e8382309a7", "sighting--6954f4c7-31d1-4c6f-8df5-43f1cb4e6fe9", "sighting--716d98a4-a961-4eec-b5ef-120170a0c918", "sighting--dd691455-247d-4119-a17a-99532087bcd0", "sighting--0692ddbd-c0cb-4198-97b9-67bd96bb0bc6", "sighting--66a08f5f-cde3-4c90-91b7-322f912b145d", "sighting--51f6a4c9-b0a6-4ce5-ad5d-67c65d240b69", "sighting--5a44af0f-9ba9-4b00-b4fb-c6e3700b5ab7", "sighting--a4353ca4-48ca-4d5c-b311-0dad0e02d241", "sighting--56df1dd4-b5e1-4190-b66b-15064d12f329", "sighting--ac1df1a3-42ff-44b8-bee6-594e4ac57b8a", "sighting--ae7e9da0-4c47-468b-aab4-33f36633b9a7", "sighting--606fb7ca-e8ee-43db-b24b-93d3b3068833", "sighting--7f1ad0e0-3379-46dc-9161-24dc6d64c5c9", "sighting--380bfc90-e6ba-4f19-bf6e-b3063a48b4d5", "sighting--77064435-41e2-4e14-a3a2-737e78f341a1", "sighting--e32c1848-3b6b-4d5c-8288-02055ab20c64", "sighting--ebccc242-e3c5-4e7b-8a5f-6222912df896", "sighting--6a7c3c30-8398-457e-8fdb-84efe1679cd7", "sighting--ba4a432b-e25f-485c-895a-7b8ba555a9f9", "sighting--717f529a-30bf-4700-83f7-d8b06cb530d2", "sighting--776263e3-0025-46d5-a5f5-10923fe86bdc", "sighting--0e7278e5-2e28-49f4-bfb0-e2d550621830", "sighting--3b601073-2826-4aad-be3e-e8f19b3fe337", "sighting--880381af-a4ae-4e79-9e37-304ff26fc452", "sighting--01ce18ee-cc48-4660-988a-67911737b3f4", "sighting--03124134-16c7-4d26-9692-758bd6651062", "sighting--3f308386-5696-4539-a57a-a300a3b1d17e", "sighting--5489564b-1cf5-4bc3-bd15-e32f5579f305", "sighting--0cafa52a-cd60-4699-8ce4-a1c5d8e4b700", "sighting--b7f08530-b62d-4aab-8e0f-20fe25f1138c", "sighting--54c45c1f-80d8-4f3a-9fd6-63fa2deec7c4", "sighting--0a4c5187-1317-47a0-b350-127161873e32", "sighting--c6b96488-3a96-4ed3-942a-2da41f325417", "sighting--1ece3cd6-bede-4388-ad3e-798fea95f55c", "sighting--5de85656-f7c7-426d-ae3f-d5a4b65e65df", "sighting--ddc729ba-4c84-46b0-b781-4948b9bde4f1", "sighting--80d094e5-5e86-43b3-b535-d5bb3b18d530", "sighting--a4d692dd-9044-479b-a65a-e241fd0d0137", "sighting--8508ef3a-120c-4006-8d80-3fde9122f208", "sighting--0e89bdf2-e618-4faa-8b47-47e7d0375dea", "sighting--22389a08-14d0-4a5d-820a-4447d5fd150d", "sighting--7ca4dcf5-25a5-4d09-9730-aa8709019c02", "sighting--d0a8de68-3b42-49ae-8cac-eba647dc8936", "sighting--391e55d4-ff81-44ee-91c6-963c60da2633", "sighting--e0439b4f-2816-466f-82f4-3d2eff2881b2", "sighting--b6c2e601-0c91-4124-b238-5dc74c87c247", "sighting--ceec84b9-8f40-4d48-a13a-d3b9f5a66d76", "sighting--0508d9da-754a-410c-9d19-f049e45df298", "sighting--27ea9259-a65e-45c2-b22f-c6c58e094917", "sighting--34faf19b-aec8-4d97-9947-d7f4d2aa48fe", "sighting--bf27c91d-3ef0-4382-b187-d87f783b3818", "sighting--c02313f7-4c68-4a7a-aee8-3c706413e5b8", "sighting--6637054c-483e-472f-9ae8-f3f6eccf6c52", "sighting--e0e939f3-9f77-4adf-9fcf-159babab902b", "sighting--059e5d24-28fd-4468-b14a-e24ee0502391", "sighting--a4043599-40da-4e9c-b892-6bf56825898e", "sighting--303df0ea-0a0c-4553-9ead-f76b50b74035", "sighting--399f03b4-4c10-4953-b2ee-7e64a6cac649", "sighting--ee5c5f8a-7e67-4250-9716-12192497259d", "sighting--b4956194-c58f-43cf-9bb8-81bbe76d0b4d", "sighting--a188e4f0-71f0-47da-8122-750e802e8aab", "sighting--7671c387-7c45-48cd-9849-4d72b554bb3d", "sighting--90813136-aa45-4360-813b-f60309e51624", "sighting--4c811ef1-10fb-40f5-93fc-50ec9d46f7cb", "sighting--040cb0ab-1090-456e-9f47-a513efdb2245", "sighting--fcaaa913-369b-4044-a3d0-854c09daee1f", "sighting--f66d899f-016a-46c7-a579-b5be70818eb0", "sighting--5d88e005-193e-4086-acc1-22ae57502faa", "sighting--8aedd764-345f-4e12-bcae-213f25606c2f", "sighting--72627a40-bd9d-4e9f-b939-fdd802b47a2d", "sighting--eaa4445c-2116-48bc-aadb-8bd5385ebe46", "sighting--5fa503c1-7d68-4a8e-b732-10eca1851797", "sighting--38654fe0-ec3d-41bd-a72e-2401d6d88f22", "sighting--cad56dab-9de1-4200-9e7b-02ba2bcef038", "sighting--1c9c627a-5750-485b-ab1e-0613b16b8053", "sighting--af10cc04-5175-441b-9d84-7113fef8ffed", "sighting--60ffa0f7-ce0a-45de-bd4e-09e7d867c232", "sighting--d02dc6be-6958-48ef-8ba8-b5a9f9506c33", "sighting--0176dd47-0ae1-4996-a5dc-0788df8febb2", "sighting--6f8d88c6-7739-4851-8398-32f7a2364d4b", "sighting--43e12ea8-01ec-4e47-8a7d-bdc2398b581e", "sighting--be5fe4b9-3cd3-408d-be99-41b0cefa65b3", "sighting--a50676fd-14b6-4e38-b518-87dea1c57f52", "sighting--3905aee8-96af-47e8-b8a4-ffdf452e6930", "sighting--aefa8e42-5d9b-4ea8-b241-afb90f838764", "sighting--c4ea6d3e-06b3-4d38-9a63-3846155e5c69", "sighting--b3c31e02-1d76-4f93-8ef1-27b67b2b31ed", "sighting--297c688e-23da-489e-8963-810fb3a567b3", "sighting--1c4d13b2-7e94-4769-bef2-ef798e2dbaba", "sighting--b1a9e349-1008-4007-ae76-da09f848ce20", "sighting--aaaf90fd-ed80-4ba2-afe4-92e46c3bd3e9", "sighting--752e43ad-293b-4b51-a848-501c063e4376", "sighting--6f967c0f-28cb-4f13-a2cb-7393fbdee3c2", "sighting--b542a781-97cd-4517-a257-2f5acea1e866", "sighting--9b9e615f-7dc9-4087-9eb3-805ab59efbb6", "sighting--70d3307c-61d7-4407-898a-4760a4f4ac68", "sighting--688b2894-2c7f-4181-86b5-3303092aabfe", "sighting--9139c43c-cd8d-41f1-95e8-e67fa7041430", "sighting--77ffd81d-9c6e-45d1-b32a-da7024c9905a", "sighting--d057823e-de65-44d5-a160-9deb9055205c", "sighting--5a694b8c-f43c-42b7-8e7e-c6d956e3b45a", "sighting--2d154702-995f-4367-8a60-2427551c23c4", "sighting--98e2aa8e-72b4-4aa0-9396-b0bd01b02f21", "sighting--e4191932-93a0-4216-8f5c-e2aafc60bc56", "sighting--785a4ffb-53c3-4339-9bf5-27203b2dba13", "sighting--c69d7f2e-3269-47a5-bbc2-a6194cbaad55", "sighting--2f8447a2-7af1-4907-9521-2d66816a17ad", "sighting--e45d70e9-059a-41d7-87b5-0170349ac695", "sighting--0e619a50-a6a9-4c38-9333-cf4f844d4f47", "sighting--af2d3847-1aed-429e-b3ba-9bbc2603a600", "sighting--fee2c5e3-6db8-4e69-b18a-5b2de7975495", "sighting--e7179a6b-afcc-4904-a8f7-372821474bc0", "sighting--b44e2be4-891d-4aed-a11a-881a502d22c6", "sighting--f4bd0bac-e303-471c-a547-c627614d88aa", "sighting--3ab8e8d8-40f1-4d22-a924-708276faa2ef", "sighting--8c76b2e9-3150-4078-b861-ef83e19ed1f5", "sighting--535e266c-bce7-4123-ab7e-1df350231743", "sighting--9609338b-655d-40b8-8020-5c269d302b7c", "sighting--cfd6690d-a102-45dc-89cb-f36bf852ba02", "sighting--bf7dcc86-079a-4e67-92e5-f1ab8119edcc", "sighting--cd310107-e9e7-445b-add8-d427efb21553", "sighting--bab83c6a-b970-4dce-ab7e-baa9839b33a1", "sighting--2d5c465a-55a2-41e7-a8db-f95ed0af5be5", "sighting--3797e799-6ff7-4634-8895-03c0e56a926f", "sighting--e415202d-7cb3-4b05-8291-d8083bec08e0", "sighting--881ecad0-9ce9-4927-9c8e-21a7dc7833f1", "sighting--83d20bf5-b5d6-42d9-acee-d1442822c865", "sighting--335c3df0-5db4-4c7a-a2ed-89073b26c0c2", "sighting--12962e62-adaa-449f-b753-a93ce45a7143", "sighting--e3f9b5b3-98bf-4fa3-9365-b2c83b63db49", "sighting--0de4a01f-9cef-473a-9b2e-598fd965d634", "sighting--9a8dd4ac-8aae-4e18-978c-3136f82d2994", "sighting--f1316233-4ca2-44dd-8f1a-18a9af52ba3e", "sighting--21097534-d5cf-4a7e-b63c-e3f1e4b7f6ec", "sighting--50fa5b02-9f65-408b-8511-7f09e814be1e", "sighting--db14e334-5bc4-4e6a-a629-adfcf2e93b3c", "sighting--3fb6dd47-5ae3-4a94-8202-5e8bbb5a08a8", "sighting--d08681d8-5295-49c1-8e3a-f917436113d0", "sighting--b5085eb5-f114-4e4a-a14e-e955713faf88", "sighting--18a6b6cf-fbd0-4ff2-b177-9b49597b2c1e", "sighting--750644e3-4670-4fcf-bf50-629c37fd9fbb", "sighting--e0b94bbe-2aae-4e2e-b446-f61b0b8c2e2b", "sighting--0bb3244b-80f1-469a-83a3-75f2075aec5e", "sighting--1dad073c-5459-46fd-9ba9-59768a9c8ba8", "sighting--e978f364-699e-42df-aafb-066296c06ffa", "sighting--3328ccc8-3890-4ff0-8f8a-d6e47a08fb8a", "sighting--ee84afc2-fca1-4507-9f12-b82ecb8a38e9", "sighting--4703e01b-7cea-4af1-b7ef-a8761a17866b", "sighting--01d2943e-9e5a-44d8-8f25-9dada4240b1d", "sighting--5b3fc609-a932-44bb-9ee3-6da7929f0376", "sighting--3fc5a53f-5a98-41d9-884a-387fb9dbbd60", "sighting--88457d5b-fef2-433b-a490-2d54e02af6b6", "sighting--84f83bfe-907e-4508-af72-c19c8eac8265", "sighting--cdc7cef4-9671-495d-bf30-896f594350b9", "sighting--4adf079e-4854-460b-96c1-5513f72fc72b", "sighting--ed491b8d-fb35-431f-9d78-1566d73a637b", "sighting--281d1674-bd82-44c7-9fbc-2714642f76d4", "sighting--d4176a1c-64d0-486c-bcec-d78f6fd9e76e", "sighting--ce2339d3-0adf-4909-a950-b6f35dd6c4a6", "sighting--3caa457b-4ec5-4ef9-adf8-08c3756e647a", "sighting--d51e372b-98ef-416b-8b2f-cba8e6998779", "sighting--7678197d-118d-4355-be82-9c369ab307a4", "sighting--e03a300c-f22e-44a0-9a49-cead1f87a151", "sighting--411c77ee-39df-41f0-ae09-b2ce38d2d8df", "sighting--2fff9f2f-3ae5-4297-a516-ff9c4ebe64b4", "sighting--858dc996-14f4-4abc-94c3-5b72ccd351a4", "sighting--d8475869-d2d6-4284-9314-6d7e10f9b6e9", "sighting--954fe976-0c2f-4771-a5c0-6e5983c1d36f", "sighting--17388ebf-b169-41e7-8fe1-b32b4668efaf", "sighting--f6a6e681-6cb2-486c-b598-6c63f6e1c80b", "sighting--f15ba2c1-0b09-4f0f-ba8f-fcae0533b1bc", "sighting--99a4404b-a036-409f-844e-cf782a2a6761", "sighting--b8b440e3-9d3d-4106-8cd3-c9d7c4f98f48", "sighting--ff2be439-165a-4f43-a49b-bfc64327855e", "sighting--63cde1b1-c87f-44d6-871c-9cc3a745fa12", "sighting--b20a7b22-5688-44e5-8249-429d03d385d3", "sighting--d05363e3-f2f1-45d1-887c-2e522f9b06d3", "sighting--84c02b16-e66c-4a40-9c62-78d876bbca04", "sighting--afd76cca-c0c3-40ed-a4b6-c9608e7f20d1", "sighting--79dc04f9-883e-4290-b2bb-565b8898e398", "sighting--a5a43a74-8096-4b1b-ba34-66d21e2f2f06", "sighting--14311e0a-b0b1-485b-9940-4294a4ddcd64", "sighting--cb489808-c239-46ca-8f69-598e099b6688", "sighting--7a25b7c6-898a-45bc-881b-c74619294283", "sighting--4f90a428-eea9-40c1-ae81-acba0ccccb61", "sighting--2548c551-e86a-4178-a920-8f643924b4d8", "sighting--e89ab4f0-7307-4897-b400-da3e55916e29", "sighting--9110a859-36b2-4dd2-897d-548785301997", "sighting--b07f4bad-80e2-472b-961c-25fdedefb033", "sighting--503efc7d-f0ca-4cc8-8487-b930c1be739e", "sighting--9796ab2d-7425-4c9f-bf34-9decadcbf926", "sighting--96efc38a-92a9-4376-ac07-1f22ad919923", "sighting--d5ea770e-34b4-4c7b-8f63-de38cdc6893e", "sighting--b13bf9cc-f39c-4cdb-9b59-8c02a5e74cbd", "sighting--a8c91b19-ddb0-49b3-a320-c344e7a3bb16", "sighting--44c357ed-8a29-427d-9840-45ee528f8398", "sighting--3e851c53-00f2-4f79-b719-4a6df743676d", "sighting--3df53fee-c7bd-4afe-bd34-83422ebf54ea", "sighting--9492561e-0db9-4add-bd95-3668bc7097ea", "sighting--390f7f8c-484b-4f3a-a0a1-cb6746f72e3e", "sighting--a1368f18-2d5f-46ad-ba4f-3eff3d4b0692", "sighting--d3d9c475-2f5c-41c4-8ebc-dec0b0310d63", "sighting--994f2618-a847-4ac6-b749-6e9acf11f0b4", "sighting--ae69e2a2-03ce-4b7c-9d71-1a0aede899df", "sighting--1d7e4773-3206-47bd-8fd7-e5ab9d33719b", "sighting--f85dc833-94eb-4b7e-b2ae-ac23fd018eef", "sighting--2764dd44-8c25-4e22-a64e-6200cc2be896", "sighting--8d4d5150-46c1-488c-9c9c-caf1e4786e5f", "sighting--69d7d5fb-df8b-4f52-be52-19b303f13f21", "sighting--f1e3aaf7-2f70-4389-b67e-69903bd22198", "sighting--3e6eecdf-f135-46a7-9450-1a9173869654", "sighting--84a5dd61-d5f8-4916-9dbb-23df06abd212", "sighting--97878bfa-0fdd-4d29-9890-b6fb7b31c522", "sighting--43ee7880-ff3e-4a13-b1e4-7b1ae5a343e3", "sighting--c957f64a-98e8-499f-b328-46a8b5b0613f", "sighting--5c3de22c-d5b0-43b4-8303-a491d5b65228", "sighting--9fd79980-e5dc-4d24-a56b-343c58368fb7", "sighting--de7d52d8-dd99-4f9e-b234-066e45bc78c1", "sighting--7ce65046-8d79-4df2-a209-413642e81456", "sighting--a67c1b0c-6447-42cc-a208-5c835a2d9fc1", "sighting--0742f909-a9fa-4872-ba6a-82f62d6c83ba", "sighting--4117d9f3-b3f8-4bc1-817c-b0d42b0492e3", "sighting--264ac491-1b18-47fb-9018-40981cbdb8a6", "sighting--ee3dcd38-6c68-4353-9b5d-58ab27004a80", "sighting--8841cc0b-9d83-41c5-8e20-121434006dab", "sighting--ee6d7b85-8888-4e36-be05-e8b77f8edd09", "sighting--8400e568-95bb-4f34-8b44-8a994c060e51", "sighting--66e8c44f-c26b-4f8f-92ca-f95413847fa1", "sighting--313abbd4-d175-42e3-b906-b3cb3173753d", "sighting--882879be-1e8a-4a3b-9c31-5acfa6122854", "sighting--035a3839-ce61-40b7-bf72-d12091cf4ece", "sighting--8d360e08-b200-4001-b162-e0f3359df22d", "sighting--01cfa6a0-d195-4476-8f72-1faf06f990ad", "sighting--4f14eb7f-b2fb-4d95-b4d2-13eaa989ddac", "sighting--f29457dd-308c-4ca8-898b-71d262646d68", "sighting--301d7829-4313-4fb6-b255-90960d3f3e11", "sighting--1be147db-7f19-4474-81ac-4ae4bf7132ca", "sighting--bbde1586-7afa-4c86-b65e-b0c9a6bc82ed", "sighting--8cf601e4-5768-463a-bddf-0dcbf8f81225", "sighting--d13d26f3-386d-49d4-bc74-edb90ca14914", "sighting--9fa9dd17-3b6c-46d6-b94e-04c799744e24", "sighting--1fd0ac9e-f058-4c68-8973-91cc90198ade", "sighting--b4eda739-d246-475b-8115-5a911959a886", "sighting--ee6eeda9-32bb-4ff6-83d6-2e8302a6f546", "sighting--5235b1aa-fd8c-49a2-9d5f-74f477887b02", "sighting--51126273-27c8-4d70-88bb-525213b8b8ba", "sighting--f2975be0-7741-4322-8db5-4907be1071e6", "sighting--7a4cd0c2-f1ec-4d21-b723-d4522cadb387", "sighting--835efbdd-b313-4ddd-a2dc-647a778f7d85", "sighting--2d78e018-2e9c-4b2d-9da8-4bad1bef4de3", "sighting--b7ae0f60-5bdd-4ce8-8d4e-f5f2f070b575", "sighting--ac2b591e-c28b-4faa-b01a-7139c8d6247d", "sighting--b55993ef-5a02-49fd-9f28-4e3820ac3c5e", "sighting--17f69ff1-966a-485b-8372-a2c48b0ad219", "sighting--5f437ac6-440d-4d37-ad74-1f5bb6ae4ab7", "sighting--1f150de5-e796-4635-91eb-7b22aad12d4e", "sighting--4fccf4a0-0e63-4eae-bb85-73861fe08465", "sighting--2f0b77a8-0466-4162-9af0-2fd8a4188a01", "sighting--9f3dd6b2-7f08-4e4d-90c5-b779e22d36b1", "sighting--b3fce654-8f87-44bf-b560-5e968a2747c2", "sighting--3a57f781-8a05-41e2-854b-b4574452f6b5", "sighting--2bb83e2a-aa7f-4049-b135-bb823f7fe25b", "sighting--6c6cb14d-67b5-4205-8e55-fd1c2ec5b798", "sighting--785d5b96-e31c-43f9-a1bd-7befdb157281", "sighting--c9133935-9118-4471-a875-c1f75da44a4b", "sighting--1f860edd-50a4-4d1d-ada6-d693ef2c9bbf", "sighting--7b51837b-20ef-41e0-b63c-20134f15c5a9", "sighting--1564cae3-91c9-4b4b-ae87-1cd75e1b6c98", "sighting--527e7628-3ebf-4288-a44f-a97349523026", "sighting--cb75b724-f4c1-44ac-9fcc-6a79094d937e", "sighting--70d76069-522b-4246-9c49-6c11f8d3c5d9", "sighting--4ae26331-8d6c-4c40-8512-b6983a5e97d3", "sighting--7bc7454e-5692-47b6-a27b-b45ab7a39910", "sighting--68342291-d580-4628-ae93-828930180432", "sighting--84ebf0c0-8fd9-436d-9e6a-1a3bbc49175b", "sighting--f0a25ac6-c290-401c-aa0d-a911ccc2f2d3", "sighting--c8130273-f8b1-4536-99f2-4c578a128eea", "sighting--dc7d59af-6eea-4fd8-b1bc-967c164b3158", "sighting--1b47a8c9-d689-4f61-be1e-2999396ee79d", "sighting--e1ee737d-432b-4540-9896-ac46af5bbf2d", "sighting--be51ce2d-0812-43a1-a4f0-c603a3723581", "sighting--871440a0-224f-4e4f-9c8e-9f97f1606cf2", "sighting--e22cff74-0178-45ba-ade7-fa7ed666bf0d", "sighting--0f7c6528-beba-44ea-ac83-129a30dc2d15", "sighting--5756f6f5-b32b-48d6-9c6b-e8b07a074daa", "sighting--865c16d6-f235-4a4c-a435-8bcb795a968f", "sighting--2118a4b3-1978-4662-ad3f-0bcf4874ce07", "sighting--abe7b575-126e-4fc8-afce-1b54ed41b3e6", "sighting--b348191e-fcbf-4df9-8cb1-9025113d5799", "sighting--6b6650cd-3593-4ae6-abc1-c109125b524b", "sighting--189ff9c6-f6c9-49ca-9f39-7f841c021304", "sighting--b1a5d717-fd40-4912-8d8b-76560f075a86", "sighting--05ad5065-34bb-4241-b506-800c491fb9db", "sighting--3996e1c3-9749-4357-8a00-112a8a2e5cd8", "sighting--9f9fc5cc-8c24-40de-ad4d-6fa936a30fbb", "sighting--17f0d77a-6afb-4194-bd64-d7a7315008b8", "sighting--c25d718f-9d44-4ed5-91fb-dce22f0bdb3d", "sighting--8bd62abf-bc2a-44f7-a167-e869b47d1cb4", "sighting--4d3b538a-f01d-4d15-86df-b32dbbe63a0b", "sighting--165d7447-1481-494e-a713-e7995cb9f49c", "sighting--b7b7218f-7ee2-4c7a-ba26-916889d2fb6a", "sighting--23c5562c-f7e2-46c9-9492-be5338b5a1ad", "sighting--99a6402f-4e90-47cf-a409-a2e23e5f9290", "sighting--3fbd4984-8fa1-487b-a9bb-52ac062aecea", "sighting--9eb1e1ac-5268-4de8-846d-22535c5f7fba", "sighting--29ebb56b-5b36-4c1a-b6d5-824d337d5b67", "sighting--d6eb1923-5623-405f-b3e2-970736c5e95d", "sighting--bd8bef0c-3e2e-4534-8599-344b563389d3", "sighting--8eacf09a-399c-4123-a52e-43abbee7a631", "sighting--058b4488-8717-4a4b-919e-6f68576a82d9", "sighting--71f8bef2-f715-4be9-ba3e-1f20676c896b", "sighting--5ca3a000-be9f-4a9b-bbd2-b2938c950731", "sighting--bd1a7c2a-2a8a-4cc2-9c20-d55c9f22b8c2", "sighting--de68fc72-4d77-4b07-b94a-26ccebe1bf0a", "sighting--5751f3f6-97b7-4bfb-97d5-d7f0129e94a1", "sighting--5fbeab50-5125-42fa-b9d8-66748ada658e", "sighting--b593c576-bfc2-4799-9623-7e1a8579d2fd", "sighting--6b117c11-3145-48b7-91f4-de51a727ef44", "sighting--f8c1595c-905b-41ac-b378-c4306980655c", "sighting--6779e973-781d-45b5-bff3-f9c2399ea97e", "sighting--77c0a366-1420-4bc2-aa44-a61279874f57", "sighting--739c8eb9-7490-4bab-8150-c953b3ebfe3b", "sighting--f2fa947d-3d74-46ab-85e5-7c6daa3f56ca", "sighting--797592b4-c926-42f8-93fd-e37cd69706f9", "sighting--d80a14bd-0665-44e9-ab53-bd47e68800df", "sighting--18ed42a6-04df-413c-945f-8020477e9461", "sighting--82d58089-64a3-4d64-ad43-ae8dfd559a05", "sighting--a4f2c1c8-3593-4403-9809-eb5d2fd812ff", "sighting--b3c7efe1-546d-477f-8a87-6b2cca38315c", "sighting--110d98bc-e5f1-49ee-a37e-ca91e9dab56b", "sighting--36072b44-d7e0-4f54-9679-584f12a299ac", "sighting--9b0bc5b1-5d2c-435f-ac0e-2b6b5be825cb", "sighting--96749b6c-b61f-49dd-99b5-e73e8ddb70d1", "sighting--b6ef1733-9324-40a8-b82c-47fea1c92474", "sighting--c107c776-6312-4d2a-b7f6-4f9ef0d9e0da", "sighting--699ff12b-d47c-4dcb-80ed-ab0bc6cb95ad", "sighting--b4a74451-d7d5-4f23-9630-2da8f2cfce93", "sighting--a3b734b2-e96a-4d50-8689-1682eb8e2fad", "sighting--3d41b43b-cbe0-42ad-93d2-86972fc48f85", "sighting--60fb784f-261d-413c-9830-07dea9f7ab8e", "sighting--c12eb0a8-7ab3-4c74-92d1-d8932e4ffd4d", "sighting--4ecd09fe-91a4-47f2-b571-3bde03f5b16e", "sighting--20b5ae93-d392-4a83-99c7-8a9a4765d32e", "sighting--930ebcd1-296c-4014-b9c3-22f7e5141e40", "sighting--6ef58639-669e-4bc2-b4b2-073dabf90bae", "sighting--3054ed8c-3e4c-42a8-976a-bb6451b990f1", "sighting--e52a65b7-816a-4662-b581-352af0a7917a", "sighting--92db1c06-6412-4d8d-bc4f-b4713f4e1187", "sighting--737a81df-07f3-4fb9-aa40-68d27cb1d22b", "sighting--a5041795-b468-4e73-8f70-66b12032210b", "sighting--4600fba3-ae66-4050-9523-1a4db10f417d", "sighting--3ba8d73a-ac75-4c5c-b82e-91f701ba0232", "sighting--4df372c8-26ad-4fb9-b512-161090a9122b", "sighting--c0686434-1f63-42d7-aa91-d647242a8966", "sighting--8567bb70-c09e-48a4-b492-95da0c767cb4", "sighting--847edb89-143a-4b84-ae58-2bfc93aac9eb", "sighting--d290ab72-4d77-4e43-9dbc-54770915df53", "sighting--7c561e8f-4a6e-4488-b97f-7fb38f895254", "sighting--df4f106a-2eea-4329-a757-f0098305723c", "sighting--003f616b-7ca3-40ad-973b-6fbb10b5a21f", "sighting--a7816f35-bc5f-4ccf-947b-98f093a2dca0", "sighting--b05f1a1c-f1a6-4c42-b789-0382cc82d001", "sighting--3ec141b2-c92d-4eab-8a9a-bd02bff6e1ce", "sighting--30889717-38b3-4bb9-9a39-3e46487280ef", "sighting--4c15d888-cec4-4728-987e-1c9c63c1320b", "sighting--c090e5e3-6583-40cb-83e0-1464052cece4", "sighting--e0a0786b-0ff2-4aba-a2cc-6fa63fc8176e", "sighting--1b978c8d-7420-4cbb-8209-72bf340a9c2e", "sighting--7e86c7ce-f2db-4773-8f96-d5741419c1bf", "sighting--d338ab13-e723-4a9f-ba22-77902a1e88cc", "sighting--4c073559-76e8-4c72-b14b-6c1dde4ffa0e", "sighting--26a754d2-ed18-42bd-9ac5-284ec753bf62", "sighting--f3339ae4-f570-457a-9142-116e97313a1c", "sighting--5041297b-5814-475f-8e1c-0976490fb12d", "sighting--86f316ec-9933-4971-a73e-99fbe9de4e46", "sighting--3ab9a7f0-2a6a-4868-99a1-3f6e72312b0b", "sighting--0679bd61-953c-47bf-8440-ff0706b40011", "sighting--550c02ca-e90d-473e-82e6-c1d675122edb", "sighting--4096033e-4816-40d3-9e01-b18eb264b932", "sighting--0c9cc6d9-1f56-429c-9cc9-8bafb5fb8ecc", "sighting--d0c3b9eb-e52f-47eb-a598-4a45ca120039", "sighting--919c415b-cc36-4db7-a896-d16d03969b67", "sighting--6825c9b9-5c76-4da8-ab6e-180c0dcb1885", "sighting--16c02799-56d0-44af-86e9-db4d9c0dda41", "sighting--bf2f3e76-e0e1-46f7-a28e-3eb9fbef2290", "sighting--73354cca-069b-440e-814a-1f9f673c1491", "sighting--99eb16a3-b023-430b-96d7-54f1da22e6bc", "sighting--936bdc3a-2fa9-4e39-a4bb-530c0f9f7fc1", "sighting--9141b0d8-fe40-41ff-995b-d966650c6330", "sighting--6043d48b-f644-429d-b599-37b727c8e635", "sighting--7865b396-96e9-40c2-86b4-eed6c915335b", "sighting--c5d28720-64d0-4f5d-9c4b-79af1aea3560", "sighting--63d58285-8b78-427d-afad-df67910528a4", "sighting--94302751-667c-491e-a40d-e38ebf0f6ab9", "sighting--de9fcc85-f567-4730-937b-98cd1c5a7c26", "sighting--b2ba79a1-327c-4c7f-bd97-bbad32b87aa1", "sighting--34e4cb77-bb01-4b46-9351-501d6de98fca", "sighting--2c26895a-373b-4dc2-be97-8c6cb90cff39", "sighting--fe7a798b-8d39-43c8-8741-632ff1f04768", "sighting--a2ca11a4-053a-4113-a282-916ddbb6f6ef", "sighting--6d54c205-d7be-4c45-a2b7-08872a275566", "sighting--804927a6-60af-405d-9375-9c5e15650a91", "sighting--eb0eaff2-1925-44d5-9633-0763d9197789", "sighting--6a53ec42-d8db-4fae-ac9a-2a891f27cf5f", "sighting--a3adff12-3ab1-4309-9d09-29e7ae3cd343", "sighting--e10c3266-5d2b-48a6-92e0-2cf0a583b85a", "sighting--5bb41f0a-3338-4890-97d8-2e46d722aa7d", "sighting--40985668-4517-420f-8363-6440b15823f7", "sighting--4fd61baf-c810-4ad0-9f03-056783fc68ea", "sighting--5a6b5405-cc97-4ea6-a5bb-78223232647f", "sighting--696d5323-0e7d-4ffb-b422-0f752aea27da", "sighting--6a30282e-498a-4e51-82e7-7a872c900902", "sighting--1cef57b8-7572-479a-a655-c9516862259e", "sighting--f97c9724-81ee-44aa-8ef2-a0c771af2051", "sighting--f97976bd-0c7f-491b-b782-36b1d8afad54", "sighting--1785769b-8da4-4b9e-85df-1e25870fb3d2", "sighting--201394e0-c6f5-4fb5-8e0d-05f211d4642f", "sighting--15e8128d-35d4-402c-8a6a-91dd2c886104", "sighting--db419d72-e0fb-46c4-9aee-167c37a71feb", "sighting--6476dec4-b779-4ff0-94b7-b220c2d05ec8", "sighting--f6d78933-c146-48b9-9c65-0d5d5c9cc079", "sighting--3db9569e-4f89-4793-9426-d3e2d8ee4978", "sighting--a0c2ab26-a829-4215-af49-8cccc5187ee7", "sighting--5020011e-6588-4360-a302-f29ceb496a7e", "sighting--9cc4c87b-3d07-4678-b3fe-0f00fc37b833", "sighting--a18ace3c-38c3-4dd8-9b77-ee6e59c34f2c", "sighting--b446f657-efeb-4c13-92a2-acb8be9e8e0d", "sighting--7e35a7dd-1b8f-4594-be04-ff1c03a8bf4c", "sighting--68df2b48-2196-45a6-b176-ce34fdc66175", "sighting--d427aa7d-29d3-4619-a84b-f2daee3558ca", "sighting--fb6c46cc-5565-443b-9dc0-b23aefe5d18d", "sighting--1c658704-1e7a-4446-9806-131cb33454d0", "sighting--249d9414-7f99-4584-b30a-969b4b913832", "sighting--b1ab4114-b613-40a1-b0bb-dd5100c0df72", "sighting--34ef6247-b3c7-41a7-8d89-d02c8b6b31df", "sighting--7ad0cc45-bffa-4def-adc2-a61cf3835f94", "sighting--2dbd8d46-362b-4d6b-b177-42a99d66213f", "sighting--585294b0-e47f-4639-acb5-a208f10b2783", "sighting--35f1dd5d-f54b-4827-ad69-3912f447801c", "sighting--a8fc2310-ce25-455b-aead-a3a3b2776934", "sighting--70b5665a-a789-4791-8f2b-3b654a677941", "sighting--9b5c648d-a01f-46cc-b122-770023de258d", "sighting--2a10dd0a-1054-4304-bca4-90f6e867d7f6", "sighting--f4e08000-7ed1-47b6-a8ed-858c06885b42", "sighting--22e3d4c1-ea47-4571-a9eb-f23f2e13ebd8", "sighting--43e73173-2fd1-4f3f-ab91-6c88e7116c2c", "sighting--a1c44ba1-a319-4ce5-818a-4bb5db1144a0", "sighting--3c76de69-c4bb-4a43-9a3e-febed07abad3", "sighting--80f993bc-7eaa-4adc-a288-87512b9bb74b", "sighting--7d7cd987-41b8-4d0d-ba81-84247abd9774", "sighting--93affcdc-98c6-45be-96bd-ab502fe1c09d", "sighting--d01ebe79-0a9a-433c-a745-a48d8b67e466", "sighting--b39a67d5-5c28-44b5-b0cc-c2ffc67fa690", "sighting--0a7b774e-1645-408e-b3db-842557d1542a", "sighting--a5cdd937-5e3e-4ea2-8ea3-90ebb6a79182", "sighting--ac17500f-3b45-43bd-a4fa-4236cf695835", "sighting--3a1bf044-670f-4e9f-ab70-af441375881a", "sighting--750a4aba-bfb3-45f3-a061-044c4805b90f", "sighting--3060a33c-1a3f-451b-99ab-d1732b933c47", "sighting--f5a94992-4ba2-46f3-a3d1-43a9f6c2eb03", "sighting--16e98cf4-2fbc-4de2-801b-6567c6d4afa4", "sighting--2f9269a4-6211-456e-97f0-abc49e2ca4bb", "sighting--c723afeb-5771-44e2-86ee-dcc0871f0ed8", "sighting--489d2ea8-79ec-4df7-8b48-b3036d30a17b", "sighting--12b8bc06-0e63-49e0-bef5-7b3678efe772", "sighting--aa2aebf3-53f4-40ff-984c-622de1002f15", "sighting--68beb613-8201-4e19-a407-5882277ca00d", "sighting--76ef714d-b0ab-4831-babe-536ceafb7f99", "sighting--ee4002c0-d881-4db6-bc68-48a3c446e13c", "sighting--225faff3-b0ac-4985-ae3e-5a45c49e168e", "sighting--26e25e6f-45ab-4596-848c-8c48502e4594", "sighting--f65946d1-64bb-41ef-9cbd-57882b28d3f2", "sighting--240aea48-870d-4355-a0cd-b2ca04504292", "sighting--4f29ddc4-f13b-4430-8cae-2ff02991590f", "sighting--0e99fd17-1690-44a4-889b-679956355cd1", "sighting--4586b761-2b68-4ad0-ac59-855dad996e0e", "sighting--50241e71-867a-4457-b1cb-da9a46e68705", "sighting--a8de412b-b1c5-4f39-8596-217176e15bbd", "sighting--22f945c0-6d43-4132-826f-7c5f6da042f4", "sighting--b4fc14d7-4c96-4804-825d-9076548ec517", "sighting--061131e1-6813-4753-ba33-1310def839f2", "sighting--39d38679-0721-45a0-823c-4e30f4c4e383", "sighting--c9839551-99e0-46e0-8b8e-559dec1e7645", "sighting--ff777b4e-fcf1-4dfc-90ae-7715798a766c", "sighting--96163132-f86a-4d8b-b97e-17959b3caeed", "sighting--e1508009-76de-4880-9050-b56131ff6142", "sighting--d4b0a0ac-77e1-4d1c-8aa9-a241509839f7", "sighting--236b10f1-ff4a-4d4e-8c9b-e9eb0a4e05b7", "sighting--725c1fdd-9a2b-4bef-9be6-a435bee69016", "sighting--0cf1d618-685d-4d3f-b5f6-4a1646bb4756", "sighting--6e2e2d16-974b-4a2b-8ff9-5b2a8de2be63", "sighting--75b2eb61-5f7e-4e0f-92f6-06e187271c04", "sighting--e6867b91-b95c-46d4-9e5a-1e1dbebf9c91", "sighting--8b1d6018-e50a-4787-aacf-3d3033352db8", "sighting--a6ad48bd-c336-4162-8c31-136f837ae627", "sighting--1b942582-3457-44d8-8cce-a2e892f9ff50", "sighting--37768185-f555-4fdc-ab87-0c0ee07b154c", "sighting--97181f37-1cda-412d-b1e6-585314e2804b", "sighting--4a38f7f2-7373-4e28-b46d-bd22b78f489f", "sighting--0c06d937-a4fb-4e01-8216-1e902f9a4fda", "sighting--e8d7e19c-fa27-44ac-bf85-5569cb928e00", "sighting--bc5b411a-4cbb-4208-b30b-8e543d4444d8", "sighting--0f21389e-829d-4b82-8137-39ca627c5dd1", "sighting--c2bef0a7-78f4-4ac6-a922-e44e570b9e45", "sighting--20a37191-eb10-4252-b8bf-30080f4daf31", "sighting--f4ce67e9-d4d6-4b48-aa3f-b217a44e189a", "sighting--c6736668-2190-4edd-bc3f-21e77bedeaa1", "sighting--4b6afbc8-eef5-45a7-b3ee-4d9d0335e6e9", "sighting--cd4f3676-8fd0-4bf2-9363-42e0f303c964", "sighting--78b41641-cc29-4585-982e-b938f73b2b75", "sighting--a85d1bce-20d1-4694-a9e7-a8ca6403a128", "sighting--f2da98b7-5a5b-4801-be01-387a794fcd5b", "sighting--a87542a9-f362-4b9b-8d34-7ac351423c0f", "sighting--bbb488a2-dba1-4e3e-a374-db18b8f5e7ce", "sighting--c1a83f5d-e0f8-4482-90ee-f485009fe6e3", "sighting--9ed0e2b6-0b13-47f2-a164-91ca8259b62a", "sighting--b81a38f8-c353-40fa-8d8d-11f3cbaf74ae", "sighting--820508b4-c4c9-4eb3-8249-adf0799e1c1c", "sighting--64ecad23-c1cf-472f-8140-62eec013fb79", "sighting--7a0c3d52-60e7-48c8-b05c-ff81c060c94e", "sighting--de0163ef-5eda-47c2-8d1c-814191bd44f6", "sighting--6bb32022-0019-41f0-ab02-efa1e6e42a73", "sighting--50c353dc-09cc-4292-ac27-97c87b4b2dd3", "sighting--0d9c1d77-c5bb-4059-a48f-d591f16351fb", "sighting--794ac367-6f0f-47e7-9341-bf6b0ea43090", "sighting--c2bd1aea-1133-4521-9e03-c5d42f74f76b", "sighting--c0874e27-174a-427b-9f2d-d3f6f9a193f6", "sighting--9843eeca-aa07-4c90-b553-46a0b06cbdd9", "sighting--3add06bd-3c77-4590-a8df-25a8c79c330f", "sighting--32b065bc-8213-4b02-919d-ef4976b08cb9", "sighting--b28f2f6e-6fcc-484d-a524-ec859cb3146a", "sighting--099cfc66-4e5d-4689-90e9-3830e8bbe4b1", "sighting--7797af31-9f9a-4da5-bf62-9ee95fb380a1", "sighting--8a2af686-debb-48ce-aab8-a2b03bcc5905", "sighting--0ce9f34f-af7c-46b0-b762-0f6af48e1b7a", "sighting--ad368f63-b5a1-4c79-85ca-bac695a7bceb", "sighting--9c3faf77-8e40-4f72-ac70-d11ce1817fe1", "sighting--399b0a49-92b4-4ef6-b351-3136b1757180", "sighting--fd48cb8b-032b-418a-ba38-87ae48753e97", "sighting--9a287190-da00-47c2-a2d8-005cdb451287", "sighting--83d3ef08-a8c0-4886-9874-4be4e4ec8f15", "sighting--a4ec6d87-aaaa-44f2-a767-653f5bbc15f8", "sighting--00970744-a834-4f5f-9aa8-1690259dcdcb", "sighting--91be73ca-f191-45a8-a649-ce57c7b492ae", "sighting--c8ff081f-2a2e-409c-af90-cf1316e92a42", "sighting--5750c5de-2ac8-4f1d-afe9-21960e4f1366", "sighting--b4169340-6259-4094-8b77-cd02642718f6", "sighting--2cf78c43-8925-4918-938c-8c305404a3af", "sighting--18444852-bf71-4921-8df2-91dfcefc8e80", "sighting--f7148eea-b94c-4b4e-afae-ff36ea1818dd", "sighting--b49acdea-2ad7-4987-92f8-fe6dd66e87cd", "sighting--72a7c422-e1d2-4ff7-8fc3-58f41a1b64eb", "sighting--afd743c8-babc-4094-8187-02225112b267", "sighting--9213f9b9-51d5-46a6-9ac5-e94bbcfdaedf", "sighting--d3310b04-2cfc-407c-ab96-3df26eb5ac01", "sighting--187d773c-1b5b-4008-9efd-ee793bcf648d", "sighting--68086c26-a0af-4e6d-af2b-fc898f4a1cb4", "sighting--92a58ca9-f388-4e95-8694-c0beca368167", "sighting--5dde77f0-ba1f-4eaf-93c9-9ae632e309c3", "sighting--903ee4b9-b29e-4916-b17f-8aaf9374f36b", "sighting--520834a9-10d6-4e7f-b921-0f69841018c8", "sighting--0e84b38d-7a88-48a4-9399-ea5088a1e309", "sighting--69f33fb8-7e34-471a-bc19-8175ccc817ff", "sighting--843a27d8-7382-4ad5-89a8-5a41b0d40d93", "sighting--6271ac29-5d5d-4c2f-bfae-093c501b79f3", "sighting--54534614-6a49-490d-9c25-44aea90d4751", "sighting--31f5dc78-8c78-441f-88b9-e369c71ea572", "sighting--f38406c5-ecd9-4b06-88e5-f7d17dfa9c07", "sighting--0bfd28c3-94ee-4313-abb5-18e48a1bd73d", "sighting--4b7d64b9-8fe3-44e4-af0f-6742fca3a7b1", "sighting--adbdbb2c-5baa-4a25-aa48-9c7b63e7cdb6", "sighting--b074c281-b393-4221-b8f4-43781704f296", "sighting--92e10018-793f-40ac-9167-a31bf444de3d", "sighting--699bbbbf-1753-41ae-ae86-e5d5af411dcf", "sighting--b73d1d4d-bf06-4c93-ba89-9676e196ba27", "sighting--d4950fb5-8588-4b85-af04-f6d3c1841761", "sighting--f6bf8eca-adc1-4eff-9fe0-400d9ec4cc37", "sighting--2abbd99a-4d08-4106-9707-4b782e163373", "sighting--28c01ca5-c5bf-4c4a-9045-ee39f60b115a", "sighting--135c5789-bd6e-4549-a3da-b2620f29fc88", "sighting--e4b15961-7a5b-483c-8882-348cd173357e", "sighting--201a32d6-2405-4fe6-b85e-795ce1745338", "sighting--d0ef47e7-ec6c-46a4-a4ab-7056ad508b17", "sighting--1557d32f-c086-4ae2-b5b3-fbc516c4a7fc", "sighting--6b022745-3c65-4a1e-8d27-70550290657d", "sighting--701bb853-1770-433c-ae82-9659331b0f62", "sighting--72a006d4-2a98-491a-b86b-f8dd07dcaabb", "sighting--7cb9ca79-0a68-4b5d-86bd-250a791d4ab1", "sighting--17581d94-bac7-4ccb-b269-104cafef80b0", "sighting--4b53ae48-1221-4338-8681-8da0cfecfc36", "sighting--5044835f-56a0-4048-88f7-b24281e19eb8", "sighting--2e9e9402-b3c2-4467-9d47-ed925fcb6633", "sighting--819e969b-4311-4b0c-894e-5db968291f21", "sighting--0c6540f8-a2c2-4d3e-90c9-b2f749239050", "sighting--25f4a38f-7585-4900-a876-6e69dd60c208", "sighting--d077d9ac-a0b2-4803-85cf-f9a55b35797f", "sighting--3c2f853c-bb07-4c34-82f4-0f23a6b7ee0a", "sighting--88ab2b1d-3bc4-4be3-8502-2eecbcd42f99", "sighting--e36f7d92-21b7-4771-9c21-71348f3dfd86", "sighting--4595eefa-b84f-4075-a301-6e459fccd508", "sighting--cf97eab4-e919-455b-b46e-4378a242169c", "sighting--21947a31-04bc-4684-85af-69ae19324543", "sighting--a4843794-09d4-40f9-bee4-186216dd5513", "sighting--b4f8cca7-a6eb-4692-878f-19d2c464a9ac", "sighting--57dffb7c-62b2-4455-861b-fe57205f27dd", "sighting--96947941-71b7-4c01-8f71-7f44841b0845", "sighting--24dd3dc6-6912-45fa-bb85-197446ef5096", "sighting--b77f61d8-2fb2-4429-8472-82bc032b3a64", "sighting--65eac900-268d-4ccd-8c1d-1064ac8887ee", "sighting--a42db568-2786-46f7-a54b-dc4044d41e4a", "sighting--ede62c4f-b7aa-4ac6-ac1a-ec6328fb66a0", "sighting--d5e3a54e-0b26-4f10-830c-d9780d958302", "sighting--625522a4-45d1-4c98-a241-69ecad424e39", "sighting--81ea17fd-6875-4790-bb0d-e657dbeabd9d", "sighting--6da5e294-b1f0-4eb3-ad6e-404a33ce4ef9", "sighting--03af54a3-c73b-41f6-8de7-1541eaf4872f", "sighting--d49b2fb3-45ef-4e95-bb67-30a33f8bc3c6", "sighting--b89394d7-6bec-4444-98f5-6f9803554cdf", "sighting--94bcb4c6-9e97-4d7c-aa21-1207b2b9fef6", "sighting--399bcdd3-26fc-44db-8e26-e178ed9f6ca9", "sighting--2f0344b3-8c89-4346-8ec8-bf7e3e8b3c8d", "sighting--71352df8-1a5a-47c9-aecc-ea653a17559d", "sighting--878a4074-d57b-47af-ba08-497fa293039b", "sighting--e7203b2f-8de2-4246-b29c-d6e4ba46923e", "sighting--0413cbff-4fb4-45e4-bd10-9d4d033c9303", "sighting--56a19410-1081-4528-93e0-baa6e2a75448", "sighting--f6b6bab1-8280-4a53-81e7-a9f4444e30b5", "sighting--26f16c08-d8ff-4348-8a0c-13e414b31615", "sighting--9936f753-1921-4016-bc65-832ef62220f2", "sighting--4e0d7e25-64ff-4cc1-a6d9-5028674f59d3", "sighting--08933ca2-bcc5-41b5-9c38-4ec8feff9916", "sighting--283ba635-e798-4181-845f-295ddf5fca6d", "sighting--8e1065eb-b3e5-4438-9c62-ec5d0d5efe94", "sighting--84dbdec3-7afc-47ab-8803-4047694c43ac", "sighting--2620156a-4576-458c-8fcd-cf329b24d161", "sighting--0d8dd99e-d5f9-4498-8b1f-e3a5b34b8cb2", "sighting--37d800dc-e40e-4d55-9799-07299b6bb536", "sighting--14ad8018-7ffb-4d02-9c7b-536c9e72a920", "sighting--2a26eead-1980-4c7e-90a4-3b9e291b54c8", "sighting--03006212-c24f-49ce-af19-8a5f028a90fd", "sighting--1cbd7aeb-4fd8-4d98-8e87-f067e6d0f43a", "sighting--51efc4f7-07a5-4a57-af65-635baa91c359", "sighting--fec69864-f239-4ad0-9400-9a38ce73cd05", "sighting--7e61722f-1438-4623-a238-f96c400fb1ff", "sighting--204785a9-a509-4ed3-b599-6ee6797b8258", "sighting--60024b94-e071-42fb-85c8-aaa9dfdc2f51", "sighting--40a05e41-9943-48a7-a86b-08e7d0d91622", "sighting--128d717d-95f9-42d5-8a90-ca110763e844", "sighting--fdc4ad2b-ac36-478e-b53d-f9dee1af6faf", "sighting--940363e0-6242-428e-b7d4-0c7e3a589ba9", "sighting--90c9a832-2306-43e0-a6a9-b43e2b2cc3da", "sighting--5786f9f6-9594-4f1c-9cbd-35dab543db8e", "sighting--a9a4d6fb-b2a7-4459-aa38-5ce74adfec2c", "sighting--f629e1ab-bf3c-4ffc-8d5b-a4165f07aeda", "sighting--2032ebf3-2e04-4338-9e29-2940bb408551", "sighting--c58169f4-d06b-475e-a818-fcab29dcf46b", "sighting--ead530ab-9c13-4157-aa06-d377b2d76b34", "sighting--5bc3f581-1170-4673-87f3-79840d725037", "sighting--c202ab42-6f58-49b0-a439-93a429b99ac6", "sighting--bb483f81-853b-4663-90de-dbc8f663748e", "sighting--ce996e54-0575-4566-9d62-65e25a666efe", "sighting--4f9da4e6-49eb-4a22-8ebe-4af89cffee69", "sighting--30f46369-d368-47c6-b32c-9bcf3f415111", "sighting--ead93f41-2171-477d-b23a-ccbf09a7d841", "sighting--5c6abe2b-079f-4dd5-9e84-13584bc0413b", "sighting--c605f348-9f82-44ed-8dc1-61628bb26d03", "sighting--75c40a55-f2d0-49d1-b5fb-b207f0713f61", "sighting--8df6531c-91e1-4487-8450-6d66bf2cef3c", "sighting--698d6ee3-6b17-49ce-b70c-7fb3a6892a3e", "sighting--efac4153-8a9c-49a3-8692-faa16498f039", "sighting--b6ae8b9f-296c-4ec4-bac7-afcd6a71f740", "sighting--fe375245-e0a3-425f-9452-9b457be02c0b", "sighting--c4ebfa65-3edb-4e49-a07e-cdf56188eba3", "sighting--e5ff9acb-4409-4a55-b446-b6ac0d4dcb10", "sighting--17408503-76b1-49ed-bc90-3d93ed550e74", "sighting--4643c3db-6cc9-4c06-8d0f-6f991e5a9553", "sighting--abd5a1e0-cfb3-47c0-8e76-fa2b52a59e39", "sighting--0b5e30f1-a0b0-4eb8-b296-fa9a68a9575c", "sighting--5ea46f71-ff6a-4006-aa0c-7751a2324b82", "sighting--5d5c59a3-6059-4e14-982b-f82c86555ef9", "sighting--8860b8eb-2be3-4c6d-8576-ededf940b6fb", "sighting--d6095c4f-faeb-4c02-af27-e899affacc6e", "sighting--b25e6e4d-fe2a-43dc-91a7-595d4b84dad6", "sighting--94b1d77e-4baa-4ed2-a5ca-1fa2fb77b351", "sighting--0cb4f0de-fac9-465b-a794-3eeafe051506", "sighting--60bb8b0a-2961-4fee-a90b-6348e7ab82cf", "sighting--9d3aa2e2-7655-4792-a8b8-ecb734ccd2f3", "sighting--6c75ef2e-f4e0-4d47-8fa8-03090142f77a", "sighting--f65f0b44-71e4-4191-8c6c-a0b4a8e128aa", "sighting--f3396b71-21ce-49b4-a168-6e68ed509806", "sighting--8fcd9843-925d-4f25-8dee-5b808707c6f7", "sighting--96caefab-1f99-47fe-8956-d2f74e93e86a", "sighting--384a53cd-f548-4dbe-a764-475aaaf12f97", "sighting--3f616834-75ad-4ef6-834a-739139cb6d99", "sighting--5ec38cb1-853f-4d66-b27f-6e9c42bc0435", "sighting--fb60ecc6-a841-45c8-b69b-aa67ee184171", "sighting--82ebeca3-77db-42f7-9d49-ef0e37d59630", "sighting--d19997c9-e7fb-42f4-b782-6e928dc1d9eb", "sighting--04b6fc2e-9fd4-42db-b7a0-4ffecea7aad0", "sighting--8d5f0e26-2c6d-4d8c-b7ab-a29a8845d232", "sighting--84ed973c-a268-4da9-bfd2-512496f17461", "sighting--47134bff-c435-40a6-af5c-64ec0d7bd87b", "sighting--978b1528-4bbb-4a60-9fda-766e9fcc183b", "sighting--a2e22093-7dbe-48ad-88b7-cbdb8f296040", "sighting--884316b3-2b1f-4eb1-943d-70444f340f78", "sighting--010c1420-3cb9-4ad8-87ac-279cca1f5a26", "sighting--2a09c305-0e48-4a1f-a47a-5710e4202171", "sighting--b885d3ce-b7ac-415f-afda-a1f2852131a3", "sighting--25aa4cd1-4501-44de-8394-753aa879ce64", "sighting--9f756323-cacb-4373-8d06-4572027eed81", "sighting--40655f0e-cc35-451e-a2a9-791d35523906", "sighting--9afd53b4-ba26-4e89-88ee-01c3898c3d97", "sighting--2baddebc-8492-4789-aeab-abe5c7c207fc", "sighting--e0e06691-4c4f-4072-9cd5-28d0571de085", "sighting--43390c42-6adb-44f8-9463-05a814dcbaed", "sighting--a26a60ee-30a8-45cc-a141-6cbc8bf9e925", "sighting--facd09bc-3cb6-4897-9699-4adbd309bcc1", "sighting--29456bdd-128f-4e74-a4ce-eb6c5efa28f2", "sighting--83d052f3-8f21-4fe9-a67c-cfbad3100b75", "sighting--264cbb98-45a4-471a-898b-180332dcc727", "sighting--8d4519bf-bb79-43ab-bb41-c38f9b8ecea9", "sighting--5b405ee8-d1df-48c4-90bd-973663c00129", "sighting--4ed1a612-49b8-422f-a9d4-54cfab6c65b4", "sighting--f7f82b5f-8f1d-49ce-be4f-7a0ccd100c00", "sighting--dae69d3a-64d6-4363-b738-0bfa20676edc", "sighting--cfb4b155-8d6a-4f32-a47a-84b2dc74ecba", "sighting--708813b7-fd9d-4501-8fe2-b7894e3bc7de", "sighting--b6d7d81b-69be-4999-a05c-648a6f608c7d", "sighting--e44b05aa-c87e-4e41-a81f-ee3dd526fbfa", "sighting--64854198-3173-4c6b-a9b4-fd9f23682379", "sighting--be6159ea-1b28-4dff-99ab-240c94601bf0", "sighting--fd3ada54-f705-4258-91f7-0c286970ced3", "sighting--7aa259d1-347c-42a0-bc97-ad699245303b", "sighting--6c18e52d-5017-4c3e-b2f4-297b028dd8c3", "sighting--c7a2620e-c21d-4235-8984-4b4c0a6cefc6", "sighting--b5e9a4ea-a690-41b8-820f-e31f108fe6ef", "sighting--76cca4c6-e1d4-4d1b-a4d6-f35d91979d03", "sighting--027130f6-1cfd-49f9-a616-cadbd9855155", "sighting--bb4e22ea-8450-41bd-bd85-d2ec429ad971", "sighting--e40bd512-0743-4d61-98da-2bbc6b507be2", "sighting--b95e7995-c15f-4521-94b7-38a4f6accca2", "sighting--e4cd4a54-75d2-47e3-af8e-8562944b94a7", "sighting--1e83619c-dce1-4641-9473-3118227638cb", "sighting--29684a37-0665-43b8-9f48-87d24647dafc", "sighting--2c1b6f83-1884-4284-b26e-90a20dfd5a42", "sighting--68a946d5-2d1e-4b21-9353-f07b1b7afe9a", "sighting--084ed50e-f76d-4dc9-857b-3846e7e2eb9c", "sighting--4ca294b6-f070-44b5-997b-5305295cf46c", "sighting--65114ed3-6599-494c-bfdf-f4389ad2a155", "sighting--fe0db62a-e768-4b1d-b9fd-dc3be95abb4d", "sighting--556ca4dd-11f2-4474-a014-a5114f64c0b8", "sighting--a9a6381c-5fb0-4e58-9b06-d0289840efad", "sighting--b9ad6f68-702e-4848-873d-c3a150fdbad0", "sighting--8c6d2b51-9c55-4236-894c-71fa73580c36", "sighting--a789c641-f66b-4384-92f5-bb162279d326", "sighting--818a3286-c143-4a2f-8996-1a7415b18e51", "sighting--ad806c3d-a071-4a2b-b7ac-7b459924597d", "sighting--ebf481a6-3842-4a18-88be-6ed432e380bb", "sighting--7c40158d-3914-4faf-9aa9-dce57460d0fc", "sighting--d751dc82-4b89-40d3-8b7a-a66c2099cd99", "sighting--0a508e9c-dc17-4607-9de4-0a9b144756e1", "sighting--cf236529-7dbe-4f2f-a03a-06d23f590437", "sighting--12c4cb79-476c-4e59-a7c9-c0a2c2464b17", "sighting--e687584b-3a19-4365-b49d-84b2a9fb64b7", "sighting--12dcd1bb-e679-4a20-aada-57b11739b5c9", "sighting--87abe3b5-7627-48c1-98ab-78309f68d2a0", "sighting--43214427-a857-4923-b9ed-792e6b1f8aab", "sighting--abb99046-e6f3-4a43-95d0-87133c094a60", "sighting--814093de-890e-4331-bbd4-c76262354080", "sighting--4035182b-f977-4762-80b5-6b7ada0a00f0", "sighting--3d89f1e5-2412-4fdb-8301-ea4e0192e5d8", "sighting--cdef7bd2-b79b-40fa-bad7-13dcc5dc6324", "sighting--74520b69-3d74-48b7-b5b4-dda41688d114", "sighting--25909fca-61ca-4a93-bd16-08c06732af0f", "sighting--ae4351b8-4915-44dc-8efb-839adc22c31d", "sighting--aecdb435-7c94-434e-8834-18dbcaddcf06", "sighting--bb6ab8dc-9baf-49b1-8485-bb36fc76bedf", "sighting--98b78765-e035-42cf-a8e2-c91965fb86d0", "sighting--66a4050d-f597-43b9-90de-dc96459bcb7c", "sighting--92ab1eca-0ac0-470d-86bd-d926b999360d", "sighting--a68292ab-6653-41e6-9626-d2ae302cc42c", "sighting--386c6af1-7d45-4c1f-b697-9977ab9e2af3", "sighting--13e843ca-3b26-420d-ae72-d4cdfde21650", "sighting--6d0dea1c-e66d-4003-8d92-c4a23debc115", "sighting--7c39ffba-5e13-456c-aa66-629ad2f26655", "sighting--d3e6b144-036d-4fc7-a46b-7a83004a9f25", "sighting--95df69d4-26dd-4a50-93d1-cfb32e910d74", "sighting--5ea629d9-1621-4302-9023-ede4353c360c", "sighting--4f935a93-3af6-420b-bd8d-d89100ca692c", "sighting--ad04f51e-c62b-4c0b-a2d7-da113936d401", "sighting--94c1341d-f6f8-40e5-aa3b-7edfe5c31e75", "sighting--afc48518-89da-4181-9dc9-5f623a874f7b", "sighting--1997cc2f-1738-4ab8-a2bf-d9f527d3fd05", "sighting--f5599c08-52e4-4bfb-8699-70ba4d67adf1", "sighting--b7edd7e8-87d3-4a01-bd65-34e715a2bc0f", "sighting--ddc109c4-b2b8-4564-937f-5fa3ef27fbec", "sighting--94a04f0d-114c-45a3-8faa-853ee90d4c91", "sighting--47d9bf6f-f844-4e19-9e61-d750f5ec0ef6", "sighting--78599675-243a-4ee1-ba78-86adf8729ae8", "sighting--c8eedc4e-c33d-43c5-ae02-656857c394a1", "sighting--d9a79888-8e38-447b-88a0-28e18f1895f0", "sighting--1f2926fb-01ff-4224-9607-72c854c5e690", "sighting--a7341cf0-50b2-458a-9f0c-eef0be895617", "sighting--a51c0d88-eec3-4b73-9070-934fe51adb9c", "sighting--fd648884-0a54-40e4-9a0f-ca14492169cd", "sighting--35060e49-7a8c-4e9a-9ae5-f09d99ba0a50", "sighting--a3d72d86-84f0-47b1-9ec8-7c4cadab124e", "sighting--18c8354f-2190-4e6e-b270-7ae16ecae55a", "sighting--dc92c365-5fe2-40c2-b25b-bf84660c1464", "sighting--f0c97086-0fc3-46a6-8c49-1045e8275508", "sighting--8ada9599-dfb0-4fee-9b3f-4ae47e42b714", "sighting--1c5b1fb5-8c90-4415-9058-ffcd339cf990", "sighting--e2c2d7cf-b779-47c1-98c7-39da86114544", "sighting--5ecc8a1f-eb9d-4068-8b69-2223a5a91471", "sighting--6a31b52a-6e5f-417f-ab51-b73e1fadea68", "sighting--ddeb7f11-a391-409d-94e3-c2c1d72eb666", "sighting--4a79cf1d-38e5-424c-a910-319ec7c7e5ff", "sighting--8fac91df-240b-477e-a836-45e5ec95ecde", "sighting--efdf4356-094b-457b-8f52-e569112468e5", "sighting--db1022f6-96f0-497c-a48e-d11278cf8403", "sighting--870eac36-de46-4c8c-ac02-12f2282bab64", "sighting--6e3786df-6d61-4e35-bd4c-3a590294e121", "sighting--ae07e8ca-3e84-43b8-934e-886bb45fd757", "sighting--90f927b4-a0d1-41bb-93df-262f9f538014", "sighting--d932d719-26ca-4a4d-8d28-d15681ab914d", "sighting--22635c03-b92c-4fd5-87f7-685f763bc64d", "sighting--fdeeb4d0-e4eb-4943-9e09-2201ccd1e725", "sighting--23ad58eb-02d6-49f9-946a-97b13b596623", "sighting--35b536c1-1b9b-48ce-a891-6a2ffe5fa250", "sighting--77fd1e12-ad55-4de4-aa6d-9df994ecc69b", "sighting--07e2d3ad-2f74-4514-a8c6-e9d65ec0d736", "sighting--50877d3b-f35b-40b4-8859-4a8ad0c10c9e", "sighting--5103b671-6cc2-494d-a56e-720d61dbee17", "sighting--5cd0ddf1-16b1-4f59-ab07-78429ca0665d", "sighting--2843d84e-afc6-4d9a-bdd3-f83af1b2cfbb", "sighting--dd36bfdc-fd0d-423e-be7d-08625ab7b821", "sighting--901ce220-04b9-4335-9978-3514e86e7c75", "sighting--8ea0f227-e384-467f-873c-3d659473841a", "sighting--dcb1b1b6-2ce7-4f92-a147-27a5cc0bc475", "sighting--aefda36e-ecda-4ff4-8121-cf371bd844b1", "sighting--f15f69d8-aa6b-4534-8026-6c262aae90ff", "sighting--505859f5-14ee-45ec-be16-4eb5eecbc3cc", "sighting--72c84a6c-cf2b-40c2-8122-90ef41ac5769", "sighting--e9d7c152-f838-4409-9e38-8f472817fbb0", "sighting--c065af9c-55f1-4c30-8d5f-9fa83b8bdf64", "sighting--55334797-cc78-4f1d-8f80-83aba86d3cc1", "sighting--30886ae3-4d12-4c20-9874-598a8aca854a", "sighting--9640e976-72a8-4111-8a0f-5ec368b103ce", "sighting--4a74e513-d14e-4051-99af-954fcad27ce0", "sighting--7eca44bb-9a02-4504-94f3-aeae16af9d2e", "sighting--bbd1f085-3951-41fb-bde7-10faa4ab7cb1", "sighting--972c4b75-f7e8-4fe3-87eb-b3bb87373ec3", "sighting--1781ee96-bf60-4893-9e7e-21a798aa9049", "sighting--b551a4cb-22d3-4022-b675-2f4f7d5f1aea", "sighting--4c8c3866-f150-4567-973b-aab55a5416fc", "sighting--7891e629-21b8-4b62-8f74-cbcb81f16a82", "sighting--fdb89dd6-fbf7-407b-aaeb-37c9dcac5261", "sighting--e58bad2d-b6ce-4b3e-848b-49dc0176fa38", "sighting--ab31769b-fac5-467c-b0c4-d50158accdf2", "sighting--06213079-c46a-41fb-9e0b-03bb417e900b", "sighting--97a691bc-73b9-44a7-b374-adfbbda50344", "sighting--ab70f44f-9363-4b26-80a4-8c5e89d9e716", "sighting--23b22579-c219-4b07-b16d-ade390c5415f", "sighting--603c3fdd-9e1d-4b33-9c36-9adf3871eb50", "sighting--6338c342-bfd3-44c1-9ac9-ee5a5158210a", "sighting--42052a91-ed4a-4119-a085-70b131e5ec0e", "sighting--3feae09c-d797-49d1-94e4-4ce10c046d69", "sighting--9de82a11-e787-4cf8-8e75-ca5038ef335b", "sighting--5b72315f-4e27-4e38-9a7f-fcd3795612ca", "sighting--d3d59337-98a7-4927-aaa0-5bfba1ffb881", "sighting--77e21c07-8451-43de-a2a3-4f01885a64af", "sighting--31cd2177-9f48-41b7-a1be-d54a1ef8766b", "sighting--00e63c83-eca6-4a6a-8d53-14024b29360c", "sighting--7e81c5c2-3c89-4910-ab5a-be7bb2068047", "sighting--5bb58308-aa5a-4794-8c48-df55e07913ce", "sighting--502caba4-5a20-4e2a-84dd-b540e40e4ff7", "sighting--460056ec-dd39-4b67-80b7-e3f23338d54c", "sighting--191eb875-ce84-46db-9bdf-a237a9e6b891", "sighting--c3bcb81a-6233-4ec5-8c6a-61bf10feedaf", "sighting--bf44d2ce-11d5-4d04-aacf-91d50449afe5", "sighting--f3656a71-95e1-4c29-9cf9-16b7be4120de", "sighting--0a83618a-8900-4644-ae76-3d116455ea9c", "sighting--41c9f716-9fad-4c0f-b7fa-7f7801a511cd", "sighting--26398711-17ee-4325-897b-223e20f52bb1", "sighting--2cc65501-59eb-4834-aec9-2b8b8e67afb8", "sighting--cadb06a5-9671-41d7-9501-68873b0e8833", "sighting--1ba393a9-84d3-4000-972b-7a02358d0d0c", "sighting--e3eb2f50-50eb-4676-b65d-cc1e95e54050", "sighting--631ef8ed-e174-4ab7-a145-eb14c88c0528", "sighting--fa83a0c8-274d-4f4a-8d49-5ee665ca2328", "sighting--6c62e1ec-8d90-4be8-99ad-8dae859e0023", "sighting--55c8a83b-bbda-4673-819a-e88a568abbfd", "sighting--f86be2e5-c8ee-4f3a-ad45-77ce4e404ec7", "sighting--baf77471-8e82-4bbf-aad4-714a8df1a2c8", "sighting--cf349075-7f87-4fbc-b8a8-2e64e64cdd41", "sighting--a20cc79c-c666-44a1-ba97-084ed9c12bff", "sighting--0b926911-615c-4155-aeac-3864b887837d", "sighting--5a83f6c8-9950-469e-be38-77b10026ef2c", "sighting--c189bec8-1b8e-479d-b005-378cba3688ab", "sighting--95ba83f5-092d-4c52-a39a-95766a79026b", "sighting--ce2d1c1c-9b6c-447b-9088-6d45e6694c83", "sighting--88ed1e57-4b72-4431-8d46-5a0a553d3ab4", "sighting--3fda4b1e-c7e4-4994-ab20-09da47be43a8", "sighting--f4920cc6-18f7-4bd6-a0d9-cc96bffcf1ef", "sighting--1263fbe0-22f5-461c-940b-d998619dc087", "sighting--272f3dbb-e255-4131-bba3-1e677c3b8b17", "sighting--ff7643f6-6761-4318-8206-4208c43f2521", "sighting--ad2d78b1-23ad-45a6-8ec6-421137909f5c", "sighting--8de405e3-a482-4839-b8d5-56d5a7048391", "sighting--3c1bd08f-be9e-4a30-92ae-68d858fecd6f", "sighting--f773f4b3-e451-4837-b953-cd82581de77b", "sighting--c2ff5ddf-88c7-40e4-b683-eadf6437821f", "sighting--30dac980-2b0b-4532-b070-c3e0b659afa4", "sighting--c549abc6-9101-4d8e-8819-7380449f371c", "sighting--7ba1c848-dad8-4f48-8aaf-4ebae475b970", "sighting--2457eb79-7a9a-44e1-a7b0-bfa65924dd7e", "sighting--04632543-4415-4a42-a685-72b0dc1fe7f6", "sighting--4cae32e4-469d-47ff-b3af-2a0f150a453f", "sighting--9ce49ffd-30c2-44a5-bfe9-e20738cc8bb9", "sighting--2cbdf715-2841-4350-825b-7005fc9d62b5", "sighting--eac2b5f8-9f15-41cd-b8bc-bc0edeafc829", "sighting--34bd5910-c3f2-4558-ba6a-9941a72b1497", "sighting--4a1b0618-87be-4e2b-9321-665b6aaf4cf7", "sighting--3a842310-15c3-4fb9-8d27-71ad94db34bf", "sighting--91ab9303-50ac-41e2-b59a-9f57daa57ea3", "sighting--8f6b19a8-cac6-4529-99bf-28573709067f", "sighting--d386bf29-23e7-4acf-bd33-ab27954368a5", "sighting--ac52d39c-309b-41a3-b162-0ce3df039190", "sighting--bfa6b667-66db-4e87-896d-2318693d1b11", "sighting--389d79af-6f8a-4b34-812f-1925c558d76c", "sighting--13d7edf8-60ac-4f03-b925-087ded1f6521", "sighting--7ba3d1e6-8e3c-4b42-93d9-933f1362b2e5", "sighting--b03c4e74-560b-42bd-85f6-6f895b07d3b9", "sighting--82510e96-ef0d-4a0b-8143-6f5c285499c1", "sighting--e7f2bd14-2279-4423-9aad-0a84b30dd360", "sighting--09e2e168-294c-46f3-8bb9-caea8e64b6c4", "sighting--c261c487-2554-4dfd-9daa-8bb86a69844c", "sighting--9b3b19f1-2330-4fb4-ad41-c46ef0e9dcf9", "sighting--64aa1ea3-7199-43c3-a556-63b75e4870fe", "sighting--1236aefc-793e-4080-a253-bed50b0fb256", "sighting--6df9ba68-e299-40e7-8796-cb4397e26392", "sighting--37e511ca-96f3-4aa8-bd28-64d3ef875db9", "sighting--2d9ee5e8-ef0c-4afc-bbf7-fd61f1937166", "sighting--ab6018d1-674c-4b24-8bdf-a731da58f31c", "sighting--211a5297-ef1e-45e4-bec2-bd5658c3e623", "sighting--87d5b44e-8186-4d4f-bc91-77762b3b1104", "sighting--5f48e65b-d264-48ff-aa82-1adc146fff08", "sighting--33f87fbb-8488-4b6a-8878-c6fa0a0ffcec", "sighting--cd6a3d57-ad0f-4050-a5fc-6bb2a40a2c9f", "sighting--ddc85af5-03e0-4696-97b4-da3a135a055d", "sighting--28b86d60-9cef-425f-a97b-ff750405dd4c", "sighting--c916a2f1-ece5-4483-b447-95883a517598", "sighting--a0fac33f-cd3a-4e78-9123-41710999e11c", "sighting--c9d1649f-432c-456e-9fe8-a23339de2af2", "sighting--9f0627dd-cbef-4ee7-b55f-6a9c938606fe", "sighting--a59b47b9-60ff-42c1-ac90-129f1aebe4fd", "sighting--2aa7b689-6c66-4ba1-9bfe-529a7e05befb", "sighting--60ab7159-0a2c-4535-88a9-868f52cb23ab", "sighting--6fb96c8b-72fa-4d74-ac28-164ece64ba25", "sighting--0faec284-9d43-4c5b-a7a4-2dcc0288e178", "sighting--136526ae-4752-440a-b9c8-8dbc4c1ab585", "sighting--452ab195-9bd0-434e-8923-4c0fe3223483", "sighting--ed21d973-011d-41f1-afdc-8105f3f0d259", "sighting--0d4d9a76-c25a-4e92-98f0-920598c783c3", "sighting--427cd2f9-b49b-4c38-97e8-a675cdab1de9", "sighting--58038dd1-3b9d-43ea-b695-61536031df2b", "sighting--b4a769b4-fa71-4916-9f48-c93b612806b8", "sighting--ce0af02a-1c56-4de3-aaa1-002c76c98214", "sighting--56715e7f-b27b-4fbb-b6f2-8b0312a88804", "sighting--75cd7903-9ba4-4b6e-8153-26c240767ca7", "sighting--382f3f94-7e37-4c9e-9263-ecc4b3c53b1b", "sighting--4c005bbf-5e7c-4f6e-909b-e25bb867eb24", "sighting--248c29e3-24b3-4c44-9284-8c3540a39138", "sighting--2d734e81-920c-4f6c-8cba-2f5b27b8e806", "sighting--342fc113-7573-451e-942c-f4f442f3308b", "sighting--e249d6b2-31ec-40ec-9e63-f48a6144e37f", "sighting--d000d80f-4ac1-4e1e-ba95-1fe5fce32054", "sighting--843979c5-7f99-4bd7-8476-2601445d9722", "sighting--75b418c1-5793-4588-8e98-8a8600bea5db", "sighting--0ab6c2e8-9592-4ab9-a294-e1490b21d472", "sighting--89d920e2-a01e-4853-adc1-6b5c90f3e630", "sighting--44500b69-aff9-4c6b-94db-b118ca6c32ad", "sighting--d6f62b00-2c1d-4424-b399-0e0e19722523", "sighting--51e84b01-f563-42f8-9bac-27131774ae50", "sighting--ce6ab42f-6a74-41fb-828e-abd673b4471b", "sighting--c7ee09eb-2e43-4ea5-9494-601fd4ae16a4", "sighting--8394b693-6990-4165-9247-5bce2ee1092d", "sighting--0aa08f69-b48f-4f4a-98b2-105fc4bba6de", "sighting--660fcb5e-1fde-470e-aae4-7fd6d7cb060e", "sighting--43643ff5-8f15-40cb-9ec4-2574b3951375", "sighting--b69b7ae7-875d-4da0-a098-47bbbc29faf1", "sighting--c7c09403-5550-4bfa-aaa0-a1301b83725d", "sighting--6475bcf2-9054-444a-b70a-3f4809cc5bcc", "sighting--b4c19523-be98-4289-aee1-ec3a542dde56", "sighting--68ce25f0-f170-415b-ac9a-e321bf02b286", "sighting--b568c697-3eab-42db-be22-d93d14ba19a6", "sighting--31fae800-0400-4af4-bdf6-0ca2af0302e6", "sighting--a1b94c8b-7639-40ed-99bd-183601746e9f", "sighting--8cf8fce7-7442-4362-8b53-8bd8e0d2c2b1", "sighting--f21582e5-ef2b-4805-a41a-2b6b1cc57947", "sighting--4c49b4ff-2255-4548-b64d-534f277c53bf", "sighting--63edabbf-0145-4541-b2e8-12654fac01fc", "sighting--637bb1f0-c8f7-4050-a6d2-77892a148bf8", "sighting--6ef92a59-e1a6-4459-879e-94b544910309", "sighting--4a6d66de-dc94-48de-974d-bb6d38074d45", "sighting--f8557408-c093-4a60-a11f-3d856ed948e0", "sighting--60e107a0-61ca-4b58-9ef5-36c9bca24059", "sighting--0170f04d-9f5a-4dc7-b504-32c1bfedd4d7", "sighting--fe74d7cc-6b95-4db9-8823-b1220c25ee13", "sighting--00b805f6-3528-4623-9023-895fcab87262", "sighting--c8c1de10-0531-4ec9-80a5-2c0e9d55270c", "sighting--4450acca-d22b-49da-929d-f7291f38c63b", "sighting--977ef83b-2092-43dc-b68c-90faa7d4bd8d", "sighting--b03da49a-e4e8-4ad9-a110-ac8590a0ee29", "sighting--0b53190d-1dc3-4e22-b116-d2ac9d82041d", "sighting--831dc845-6b96-4991-abc4-b1718c6202f3", "sighting--25665937-de86-4e13-8c4a-2266cc50a1af", "sighting--10add41c-1d76-4038-af44-14e2e4a93322", "sighting--ead99711-1ef4-41ef-a469-2ec51522aa29", "sighting--13a20b49-e273-4c61-bd4c-736a6db39733", "sighting--41668599-4ac7-49a2-a334-2911bfc6de4e", "sighting--a78d6a27-8199-47a3-b5ff-1b63ed70e375", "sighting--a0c6db63-44c7-4c1b-aac7-33328a94a863", "sighting--e716aa85-792d-441c-a8d2-d8c7f7069207", "sighting--197e115b-806c-46c0-beee-6a1c3b2ddfcd", "sighting--88801362-eb31-450c-aa35-d73599b98ff5", "sighting--d2e1dc4f-8079-48db-80ca-d1b7b9c5e884", "sighting--2fefa567-7d20-4668-9205-7c53392bae5c", "sighting--7c9ec175-2fd5-4015-bf45-a7ee73eb5ebe", "sighting--9d346107-edf3-4197-8ad1-448a8a1d7a16", "sighting--bee22202-e0b9-4f14-8f43-81c54ec6deaf", "sighting--8a405e55-b449-487f-abb0-78b646619dcf", "sighting--73632810-d9d8-487b-a0b4-719eea680c76", "sighting--af0b6cdd-745b-4504-ac67-5ed0dc1bf976", "sighting--6db35b1f-04ce-49e6-823b-441d343832c1", "sighting--29e16411-f2de-4338-a4af-e5b2e2f97f5e", "sighting--3e47e662-ad0f-4e07-b466-2f68c7dda5e7", "sighting--f49c0f68-4e16-4df1-bff6-2ca9cfabf419", "sighting--39221e92-8297-445d-8c80-5218e0c4f28f", "sighting--257275ab-275f-4fef-8f2d-15461177dd13", "sighting--562278c7-d705-48c8-9d18-7863b4667332", "sighting--ce19f3f5-24fa-4c61-9bfd-5a0ede4926d0", "sighting--6d6b6c2d-d80c-4238-af6e-ad6495b07504", "sighting--1a0ae5fb-2b01-4c70-81be-7deba1f11e81", "sighting--18fac92e-a849-412c-b2f7-24fdddc18a3b", "sighting--a0329572-c0cf-4132-84f3-6b057c864974", "sighting--c0997520-55cd-433e-ad1d-7a1330c90b43", "sighting--7430c9d0-b701-4980-8e00-3ede47b2f557", "sighting--df2eee2c-7bdb-4284-bc20-6057bf7714ed", "sighting--6f15a83b-7859-4c74-aa7c-786dacade66b", "sighting--f1a63c91-41c3-44af-b6ab-ddeddaa900ed", "sighting--e64f54d1-7fd1-41c2-bb8e-c2b45a14fc85", "sighting--3fa956bb-489f-4e21-ad08-09e8717046fd", "sighting--2b41aa2e-ab73-40c6-bed9-bdfc420c70b9", "sighting--6609a632-4d17-4b64-b9c8-d1da1bea36a5", "sighting--4ddc1592-e12c-4577-82ca-81d962b33a65", "sighting--62c8b69b-cd32-4522-9620-c5b2a903feee", "sighting--19eb336b-a7d8-4a2c-b121-367de4d90f85", "sighting--d1674b9c-70df-4232-a8af-86a6aa0da52f", "sighting--4704da92-2d0b-4bb1-8fb5-18231f3e19d7", "sighting--9b3b99d1-63cf-4ad0-ae7b-6844dfe76f92", "sighting--2e695cfd-f88f-467c-95e1-40bfbf797b9c", "sighting--9559f494-5a0d-46ec-8dc7-b7d0ed540289", "sighting--92e49353-a45a-4454-b5a3-eb4b7e36b82e", "sighting--4e13ab8c-634c-443c-a2b7-733d0fb6c4c6", "sighting--e1790589-9a8f-4024-b5b2-9cd1ce517812", "sighting--d9e7c0c7-4833-46b5-a10f-994bc36b3323", "sighting--8fa07471-9326-41cf-8602-25f741279443", "sighting--c74a4eeb-4e2d-456a-b8da-f5752fd39d22", "sighting--56dc7647-b473-47ed-aa88-73394423fc68", "sighting--ee598f3b-2b92-48b7-95fa-dd3bfd732b39", "sighting--c88a48af-d5bd-4b27-a10b-168c5bb3de4d", "sighting--7284268b-18ce-46cc-b56e-3aa10f9225f2", "sighting--ac0056cd-b4dd-4529-a70c-a13cc6371046", "sighting--bc7798f7-d954-4857-8810-0ee3599fcfa7", "sighting--aa69b4c6-9f3b-4b52-92d8-bfd40c22e004", "sighting--4dedee2a-7437-471c-94cf-1fb6bd0b8a53", "sighting--e2bf986f-7073-4406-b9c5-b935c5c48c52", "sighting--bb8a1d40-e045-4b4d-aee9-d42162d59fce", "sighting--cc652f3d-3c95-4373-8bb1-4281b12d1ecc", "sighting--ee9a00bc-acd5-4e75-a33e-34307660f5df", "sighting--13b2a723-4347-412e-93a3-709e866dbc64", "sighting--b95f9982-e794-4162-a68f-3044e68d05d9", "sighting--e7e2831c-498b-430b-afbd-b91d1f02aa0a", "sighting--54d227b1-7d1b-41b3-b3b9-76c0ecb89526", "sighting--cc7c1836-6837-4227-b99f-14c21f25fba7", "sighting--be74a241-9e68-45c0-9753-07083bb9977d", "sighting--c48e5cae-76eb-461b-b96b-3c84455e2d28", "sighting--d14fd33f-2ae0-4633-9054-e3f5fcaa333d", "sighting--e644be4f-4a79-4f99-a1a4-a951c1ed8127", "sighting--0df298bb-eff6-4a74-97c4-9e416e422870", "sighting--f5213cb9-e0e7-4a5f-b1ee-2ae0bbafb4f9", "sighting--585b0540-5bd6-4b40-93e3-87bd2a91cee7", "sighting--7ea935cd-4428-4c8d-9be5-d693b7064b11", "sighting--0df4a696-c612-46b3-8ab8-5d4c3f7dbbf9", "sighting--db8d1eff-c967-440c-8c27-ffa2b0407859", "sighting--e1c6c747-4d73-435d-8928-3623061e28d2", "sighting--c261f548-77dc-4494-995b-bbe57eb6de35", "sighting--d9279ab9-d433-4fec-be2a-dfc9a844a64c", "sighting--ff5fbebb-8d39-4410-93e8-98014809ec2d", "sighting--620b7a8f-db1c-4a1e-bbe8-1847687b955c", "sighting--cb516f6a-b356-41e5-bc1b-ca3078123ea0", "sighting--6e3ccd96-3321-4792-acd6-bf285b48d6d5", "sighting--11e1ceaa-986d-4426-bf9f-093153ebed74", "sighting--c931172d-db12-43c4-bee5-8e89c56e06f6", "sighting--195d3901-24ac-4deb-8411-b7fde70f31ab", "sighting--89c569a9-9afd-4df3-8455-6a074e035782", "sighting--6041439d-41da-4264-bce6-74942f25a8f6", "sighting--f1a1d744-ff56-43f1-bc16-89371b838ec7", "sighting--cebc1066-a497-4d39-9835-6233092b3bd2", "sighting--a0017056-3637-4d82-b7f9-424e88425f76", "sighting--db7cfcb2-ec5d-4a7d-8637-92b570e0a951", "sighting--ad40f998-243f-4eb9-96c0-94e7e176fea9", "sighting--b508a944-82f4-4950-9dd1-433374e2be82", "sighting--a05848de-16d6-48cb-b301-c8aa61ce81d6", "sighting--8e0a1019-7e54-4b1c-8098-d04baefe631c", "sighting--914abbf3-e43a-4aa1-8c6d-591ed034181d", "sighting--eb4616f1-50b8-4c5d-bb71-823b603df009", "sighting--5170071f-e5a3-4f3c-9efd-e0e80cd2b436", "sighting--52fd14e6-a483-48e1-b317-16c7be6d1f8c", "sighting--36b5644d-684b-4654-b794-e8f45690cf38", "sighting--af19e803-c0d2-4de8-8670-f2b64ee13ac3", "sighting--a9137824-6d53-4488-aba6-eab8a12c1a8a", "sighting--69658872-e4cd-42fa-a74e-d717a1521a5a", "sighting--c13e0c4b-91ea-4ff1-b26c-dd2a9ec27d87", "sighting--1ce8b20d-eed8-4d26-8cbc-88628a2a7695", "sighting--5d778018-cfc7-4b10-8865-b4258e28c19d", "sighting--eb5a532b-5e23-4b48-8f24-501a45a39b74", "sighting--3a84ada6-566d-4ba3-9832-210a4bc55bea", "sighting--3c334d0b-b839-412f-839f-6f4925282cba", "sighting--ed2a89c8-b13e-4d59-a10b-1a08aeb50f4f", "sighting--4874e7e4-20f6-457a-9eff-b71baa8fc25f", "sighting--02220f9d-65a1-4131-9087-92718343f6c7", "sighting--37b2cae5-1414-4b4f-a5c0-e1a9e67a4484", "sighting--3df72ccc-f21f-4d96-a4ed-e226e9e44d08", "sighting--433e1162-f71a-4285-8f4f-344813f2d5b5", "sighting--5ad23650-c833-44ec-8958-8cb83240574b", "sighting--6cbebf54-38ae-4c10-8ee7-5cb2c8ae30d1", "sighting--6439da21-31be-443d-bc9e-c2ff692da3e7", "sighting--01d12e4e-d6d1-497c-8f8a-4ff23470da7c", "sighting--a436e9ff-b85c-4f3e-b153-74d5cff30e28", "sighting--4a23e52e-61fb-4284-8f09-7c96bf037f6c", "sighting--5497eecd-5221-412b-839e-2fefdba05d08", "sighting--1a05c5d5-00ec-4632-8b6b-d65c2c9adf33", "sighting--9d3aab85-1566-4491-a081-42a55c015e68", "sighting--5aa3ec6a-c40f-48f2-89cd-9ec1f0ae6a7f", "sighting--03877bb4-b996-4858-8bba-14dc9ccd9e46", "sighting--9713c353-2e5c-4bdd-b330-d8bb645b99c7", "sighting--f292eba9-d980-437f-86d1-e510e21e46c8", "sighting--180b01ed-3731-4a0d-905a-1964ebd50033", "sighting--ba4f2849-4154-430b-b3e4-c00f0d252d05", "sighting--b604b0ce-16cb-4bf8-9eb5-01e06c6d97b4", "sighting--a6842d27-cd53-40ea-b389-eb72539cdae0", "sighting--66608e96-423b-4496-870d-b427a88f3a39", "sighting--cfe573d8-f75d-45c7-acc5-ab83db46371c", "sighting--c230edef-8429-47f0-99f0-b9c92d151061", "sighting--a1109598-6dd7-4b29-9f75-3e41606d778f", "sighting--32285117-b2bb-448f-8768-9fcf8f3f6111", "sighting--8a1d9613-ea05-409c-9f1f-0709ab7a9e6a", "sighting--d0486c32-5653-4983-ae0f-8e2a21f88002", "sighting--460a46b8-4f92-4691-b8ce-f8eef43e32c5", "sighting--4be8d3b2-e746-43e9-aee1-de01baefcf9c", "sighting--8b027079-9b03-4033-953c-de9ca21643ea", "sighting--41ba5d07-b594-4bff-bc10-c54c607249d9", "sighting--ea965c7d-64f9-46a6-94b0-66fc440033d6", "sighting--d28d3ad8-d5d7-486a-8a47-411e9962dde6", "sighting--adf99ba4-7f8c-414a-b9e0-6b241f0c233b", "sighting--4c71c886-64ea-44be-803a-fd262903af6c", "sighting--b47395c7-8e4c-4f0c-a1c6-f397435c720f", "sighting--3d416b56-0184-4bb0-bad7-9455bbf301f9", "sighting--9f7901c2-215e-4ec0-a46c-628f6c1397df", "sighting--ad262a73-b576-4440-bfdf-46e93938fd76", "sighting--9bd6db61-f06a-4c87-89d2-182be6c84c85", "sighting--51e9d337-2770-4430-ad04-97f4431e19ec", "sighting--a389dac0-df9e-477f-8619-b7c38470a436", "sighting--d09be8b3-61c4-4a67-bc86-fd3e4efdd09a", "sighting--02c01aab-9cc6-429b-851c-4f184f4c72b2", "sighting--243cb284-8cf7-46ad-b06a-7caa1c44b2f8", "sighting--10fe754d-5507-4aa3-9dcf-91917662115e", "sighting--760e67f9-9bc8-400f-9a3d-9ada4b1c05cf", "sighting--96488e88-8e62-4c55-b6be-5412d7e1e2b7", "sighting--553afc8e-e8fb-4e07-a927-2bf8bfee9657", "sighting--55f19bc5-8673-48fb-be82-6e72f4ba56db", "sighting--9b857af4-119f-437c-9ed8-ceb19966053b", "sighting--a21451fe-c660-4f1c-881c-e25d1b4e67e3", "sighting--e4f22b59-738a-43ce-bf59-206caca5c84f", "sighting--d3b4af27-f921-4a8b-bcdc-0c55667b8ab4", "sighting--87256788-13d2-4d81-8b40-fea2b3c097f5", "sighting--f89dd5cf-0989-46b3-82fa-9cbf95b5d489", "sighting--e5627191-6fa5-43fd-93cb-1538ae7340da", "sighting--546ef826-e93a-476d-b125-69c0ec9f7742", "sighting--3ca817b6-5adc-461c-b2ed-bca4cb073b63", "sighting--f747d81a-59a4-41e0-a93f-e9eef9de09a6", "sighting--1f8d1955-9246-491a-9f96-11896d323f59", "sighting--883c8279-4a99-4786-93e1-8978d1aae641", "sighting--e7284cf8-e9e2-4b71-9a24-8de851658835", "sighting--694a1acf-d899-47c4-a92b-b37eb8d53b6d", "sighting--a6b05da5-e6ae-4d8a-a564-0e12fec6bd1d", "sighting--d9d8a385-9eb6-4f84-975d-a8cf3a3ca39d", "sighting--0981b016-c5f8-44be-a400-adf99c42f171", "sighting--a3af1997-dd00-4e8a-92c5-c4d1d394a7b8", "sighting--39cdaec3-114f-4ab4-a27b-e34995e1597d", "sighting--69cf2182-e5a2-4be0-9ec0-e70e759e9fa1", "sighting--698b1e8d-0bd4-41f7-893d-bd886a4f1259", "sighting--ac93e29f-94e6-45ff-bd10-a0f1e4e77f3e", "sighting--134eb08d-d17e-439b-8bf5-4ab045807523", "sighting--d085a1ce-97be-4ff0-ad39-ecd4f2673b2a", "sighting--07eb22aa-eb04-402c-9e56-6943b8d4465c", "sighting--331dc8f8-ce79-456b-a6f2-de4514ead493", "sighting--9340785c-99bd-42c5-9c95-3dc9befcab36", "sighting--3c7300c7-1478-4f44-804f-ddb855e29faf", "sighting--d1ba777d-7962-49a6-8848-ac008d297d88", "sighting--b0bbb13d-a9e3-49f0-ad6d-fa57f4d57bd4", "sighting--9e997eae-903b-4018-aed9-4ff1e5e63705", "sighting--e443a3f9-82e9-4b28-b553-fa8e1b149239", "sighting--073fc80e-7e31-41f3-89bd-606203592342", "sighting--183ba8a6-b4e2-46e1-b4e8-8e81aaeeb007", "sighting--9f3f0417-dc48-476a-bfb1-06326961e33f", "sighting--84c59c16-95c4-4d89-b0a0-2357b2ffcf27", "sighting--8d4c4ccc-7053-493a-9587-7f98213c17a9", "sighting--6bc13fba-d088-4a95-b911-241a07e2d2ae", "sighting--c16d3931-d2cd-4d89-8a99-7448cd1d6bbb", "sighting--561dba3f-0f60-4e69-b182-e23d74480123", "sighting--6b78c2f4-b448-4668-bea0-fe4d14876b27", "sighting--f9ce5566-24fa-4acb-aa05-30407ba8ff1c", "sighting--845b8484-0876-4834-ab30-4a59fa82e664", "sighting--6483139f-449d-488d-9b26-447453c40eda", "sighting--dc103be5-03c6-447c-8f38-c817ca09dc46", "sighting--e37c3506-5685-4a85-a1be-8e8c3814b8dc", "sighting--9dafad0d-0240-43b1-8ac1-0151ac69381b", "sighting--fd7240d0-2f45-4d52-ac54-c69a8976b221", "sighting--3653dff7-ff4c-42f5-adbc-d8955e276e77", "sighting--880b2c0b-8d46-4c76-b45d-131614348ed5", "sighting--ae483b6f-e012-400b-a6fd-1dc16daf7fb0", "sighting--4ad2a7d8-a398-48af-aa93-c6b35e9d76c9", "sighting--7cc78359-c284-4422-9eef-53f193d9c994", "sighting--8b06cc0e-8f34-4de6-90e3-0b9ff78a8467", "sighting--244e4c0c-a30f-4a4a-919b-c5fec0610cea", "sighting--b41849fc-04c1-4361-a510-4164c2a2d934", "sighting--67827a41-974c-4614-ae3d-b36805692937", "sighting--e169e98a-ba09-4277-9b19-bfec8fb0edae", "sighting--fa73ab5e-4010-4b7f-8b1b-22e538b382b0", "sighting--902b983d-3904-475d-9915-77063292172c", "sighting--70477e22-78d5-4beb-aee9-748d07b51085", "sighting--032a7759-fd5c-4231-ae0d-778de7c8f648", "sighting--e514911a-4986-420a-8b5f-1f83c7e21e42", "sighting--d14d9fb8-3e5b-4287-aa42-ec94c5e8e21c", "sighting--a2322726-0785-422e-98c6-97233afc2b64", "sighting--7e6154d1-e99e-4d5b-a6ad-bc55be2714c1", "sighting--576ea7d2-00a8-4e5a-8fce-8947cb72d327", "sighting--88056f66-dbe0-4402-bbd4-766e929dd1e8", "sighting--c788fcf6-3f74-45dc-9326-b1f82378a411", "sighting--213f3f7e-1961-49a5-b833-75d42fe0ae85", "sighting--3e1b2665-4534-4bb5-a4db-1581d40b198a", "sighting--6deef994-9f79-4238-b65e-40d306fb13f2", "sighting--27697b9f-2b6d-4ec7-b778-360366210ae6", "sighting--0257fa51-1eca-4f74-a45b-1723af18f142", "sighting--8d10558f-0db6-4166-91b6-9de8d2b1010e", "sighting--7feccb36-bbb9-4482-9d58-1d99bcbc8b1b", "sighting--8b459d58-10d3-4702-a9e9-936a25bc72a8", "sighting--15989ee4-5e05-45f4-8e59-566ca70f39d1", "sighting--c9bb083f-fc53-489b-8565-866cef5522f3", "sighting--7d0bbcac-0f83-4bab-afd4-81fbe03244d5", "sighting--1cc4cbe4-e933-4605-9230-50190daa12b6", "sighting--585a7b31-ae10-4272-9efb-40acea67e303", "sighting--9ada779c-ecd1-47a3-b903-8952aa48c809", "sighting--d369fe48-811d-4afb-b184-e49614fdae3c", "sighting--1ae786f9-5a31-42b4-bb40-f58d4cac791e", "sighting--9f8cd2f4-3818-4773-94d4-dfa95cf0b07a", "sighting--666b85c1-3bbd-4879-b3bc-832b1c390804", "sighting--d53c2515-c698-4f96-9ed6-740524eec1f1", "sighting--bd97b5c9-cdee-40ed-bc81-eba06f83721b", "sighting--da1a874e-ad28-4ce0-b540-9b7b509a14c1", "sighting--59284e5b-73d1-4244-9d68-9ec63b325ce3", "sighting--09605ba8-175c-41ae-804a-e0b3453868f8", "sighting--cd761d0c-e842-4042-bb3b-d8c4bbc34131", "sighting--ed28378b-b778-4865-a817-1917d9654b9c", "sighting--399a773b-65fa-4c81-9e58-5834b4ca8f3e", "sighting--7d99994d-e9f7-403b-8f80-85f82cfe5b6e", "sighting--6d32bac7-ddef-4219-9e2b-08c49fd8a73f", "sighting--6370758d-7923-4ac3-88e3-61954c5ca1f6", "sighting--04a98f10-348f-4141-8d78-1f358302a56f", "sighting--b89da344-fbcd-4385-b6dc-5479b78d92d5", "sighting--8bc62dda-8c1a-4db7-863a-e2e517fd705d", "sighting--13d095ed-4b0e-465d-85f1-2701c81ec590", "sighting--8bfed161-7623-4e86-b8e1-e002ba792786", "sighting--f37e69be-b5d8-4d9e-adc5-5e5103fd0a17", "sighting--2f7826ef-6faf-4e6e-bf18-e088ff228ec8", "sighting--9a8672e9-970f-435e-9b49-28ca723a92bc", "sighting--55228d6e-2a51-44d1-9ecf-95fa9f12647d", "sighting--bc99fc40-123f-4a1d-830f-fa6e7fded58a", "sighting--10de317b-7f0e-46c9-b069-f623defc8cfd", "sighting--ce32014f-ae58-44f9-86b4-e5d60aacdae0", "sighting--eafb9cb6-7273-447b-ae5a-fce27f8a5610", "sighting--185a1c97-d097-4b05-8551-a601c77d6f51", "sighting--265eb995-6d6e-46c2-9d40-d3196d4b11a3", "sighting--8160f6a0-db8a-41c0-958c-210b9f0403f6", "sighting--56da184b-c0ed-468b-9832-302d616bbadd", "sighting--ffb74b84-c225-4b1a-aa94-58dee81faa2b", "sighting--8bb4dc9a-81a9-4175-9c74-5d437db44e54", "sighting--a0728f69-118d-4c03-a304-76d3c1a54388", "sighting--4628a10f-130f-4ced-9f7f-558fb1a33167", "sighting--4bd7951f-ed4b-4725-82c5-c47525231038", "sighting--e750b3bd-2600-484e-b28f-629ed8c9cfe5", "sighting--300dc4e7-9535-4857-aa37-3959ac4e6f4e", "sighting--80d9f271-38d4-4de9-bb76-fb9a360c4bb1", "sighting--f4c2355c-7692-43e2-b502-238cd558673a", "sighting--c7383522-c46c-4725-961c-eb01ac8b5db7", "sighting--def291f1-532f-43fc-91c4-018d76daab18", "sighting--5ec28888-bbd5-4b0d-857d-967875675e71", "sighting--18988fab-65c2-4f11-9b9b-45956e342608", "sighting--39e60b40-c63a-459d-86bf-5157c78bbedb", "sighting--34f0a5fe-1e8c-4101-8260-31fc5275aba4", "sighting--5dfb3a2e-911e-4631-a2cc-02f686fb003c", "sighting--b799f876-8d42-4532-90b9-5c3ee821c756", "sighting--814527da-6e79-42f4-b5ac-ffa583c1141a", "sighting--ff9e9ba9-19b1-4552-8ccb-6347780b5f09", "sighting--45ce0e41-fc10-4f94-9bdd-214cfb1e9bc9", "sighting--e58f2c05-4ff0-413d-b740-eb853906ea97", "sighting--9ede043a-4f2d-4f89-9f60-0b504c3b6de8", "sighting--3519e933-b50a-42fd-9581-3a9d978d8a59", "sighting--d0a451da-9e34-4093-82fa-4fe52115d51c", "sighting--53739e95-6a20-4b4f-851b-dd132f11f510", "sighting--4c318830-2082-4019-af93-32bd76db4256", "sighting--97741664-50da-47ed-b06d-4fd906b730b0", "sighting--96d12ae5-460e-4318-9148-463a7f5ef733", "sighting--f3f658aa-fd77-4695-8376-5bf1a6f2bcd0", "sighting--c4d902a7-5e5a-4a56-b630-50dd590214c5", "sighting--f72117c5-f41b-44a1-a896-d97fd125cfa4", "sighting--68a7edac-83a8-433a-bf1c-cd4912a1d68f", "sighting--b531d448-73d6-45d2-947b-96f55d8b66a1", "sighting--71f165a9-87d7-4020-a6da-6a2eafecac60", "sighting--7377d2a6-dae4-4a88-a095-73dc977e1a70", "sighting--760ab15f-988b-430e-96af-2cd4cc8aa85a", "sighting--df5b2524-6b50-4312-84c4-c768d7bb8620", "sighting--6aa39dd3-9867-49e6-863e-0eb0a130f597", "sighting--b38c1822-6764-4394-ac09-aa43b316a61d", "sighting--59524a76-0a2a-456a-a729-d2de84cdd187", "sighting--8b6a9f18-d705-460c-914d-0483e6c28e1b", "sighting--745074f0-ee20-46e8-a59c-6795519305a1", "sighting--fd137a03-db66-40c8-a94b-48db95676b3e", "sighting--83aa17f0-0a14-461b-9ef8-cb6af9e43b45", "sighting--f8f5e1ff-428f-40db-9068-165a799d7290", "sighting--8c06baf3-ee96-48a7-97a2-34f7d649d1a7", "sighting--69e62b27-2505-498e-8169-b69a01ed6427", "sighting--66de455f-c24c-4133-a8db-285626c3db40", "sighting--fa476ae0-10f7-42f1-9180-b65d3ed09b03", "sighting--82c4e667-28ad-4c77-be4b-22bdb7457a56", "sighting--2921cbc1-9428-4830-9ada-d9c7588c811f", "sighting--453d8f45-1d5d-4a3f-be5a-b34d8474aa20", "sighting--66d9789b-e4f9-4a80-bb7b-8744d7b32b75", "sighting--bae0c117-6b61-47bb-8da1-6784bb39d579", "sighting--fd243159-d284-4b2d-be27-e6d6aaf456a9", "sighting--dbb8ee5a-e605-40ef-8a6f-05236b8538cf", "sighting--63cc3807-00ac-46ac-af3b-7760d9675340", "sighting--02378b01-9252-449f-9f9b-becdff840359", "sighting--531f2afd-c894-46cb-9abd-62d6e9c51e17", "sighting--fc201265-61fb-44ec-9eaf-06e318a5352c", "sighting--afab17eb-b6d1-4fff-b1ca-30e3364e51db", "sighting--b7ad63d7-acc6-479e-8f75-9bb20846671b", "sighting--aad72728-6ddd-4228-9eef-b9f1a5ec0420", "sighting--f923f5a7-7292-4f9d-8c9d-94e37b8da521", "sighting--3a544c96-59c2-49d3-873c-2f0f6a3ca463", "sighting--b8fffb7d-3597-4542-8496-a237ddadf23e", "sighting--c2232069-9b88-451f-b419-c7dfdbb3a665", "sighting--b7f41d7e-07c7-4b1e-bbeb-8201ad3086ba", "sighting--aaf49ff8-33f7-4712-a7e5-4f145f22c4e8", "sighting--df6f8581-5ace-426b-98e8-24a0e1518993", "sighting--89ea2334-196b-4103-98cb-b60b87860601", "sighting--d3c1e58f-16b8-4365-b7b6-d78195096db3", "sighting--4d50099e-c5cf-4a5f-a3ff-a234f925eda1", "sighting--ef53bbe8-cf52-461a-9436-285ff5a7fa8f", "sighting--22427242-0757-466a-8871-94eef5cc2ea5", "sighting--68dee09a-2365-459c-805b-4d791d249978", "sighting--47cdbd10-8bb9-4dad-94c6-eac3fd277c52", "sighting--c3e8fc47-7d1e-417e-be98-09bbfa7efebb", "sighting--d44b70c6-af9d-4c2c-b0d5-cc85d6902677", "sighting--08b4f467-5e45-44c1-b6ba-7556813cd3c2", "sighting--5e0d29b7-a612-49ef-adb2-e13bed22c7a1", "sighting--b03e2c59-0a1c-4f55-9265-87f57dc33121", "sighting--7425ce53-e8c0-449c-bddf-5d1d0405aeb3", "sighting--2f422f5f-4fb5-447a-9177-16c5791d099a", "sighting--dbf5f09a-0877-4fba-ad09-fad39cc57c4c", "sighting--ccfd1d91-52c8-4282-9d90-c9d7991f76d2", "sighting--c8adad4b-a59f-4eb6-907e-e211502c1bef", "sighting--97a9a18d-d96d-4017-9d1c-5c78dce49a52", "sighting--bc9c46d5-879c-43ad-9692-c71ffbdf4d9c", "sighting--650ae2b0-fcd4-40d4-914b-42806f803d5d", "sighting--17feb059-d0c8-43b1-bfa3-186075e25129", "sighting--ab157b1d-1c9d-4d65-ad20-676fb9c15be1", "sighting--dc6e7941-fde5-4151-bde4-15ad12f9845e", "sighting--93287241-7c03-404c-8783-b76f4a6d790f", "sighting--36b3b7c2-0fe7-43ee-ab88-cab2490e345a", "sighting--8a2fcff2-76dd-4e5a-8098-e2626773acc5", "sighting--d4263186-a5e5-41d0-8a0a-bca1a6c5d1da", "sighting--5cc18d1d-d0d1-4f8f-928e-3cbf2d4d66f2", "sighting--8e0d35b1-7de1-4929-9c55-6c03bed24f42", "sighting--2bce8689-c303-4e42-9e77-6ab10f228bca", "sighting--b3abb0a0-2489-434a-abe1-3517635c03a4", "sighting--50cbe2ce-3adc-4276-96ec-1ea6e035f158", "sighting--f972ab2c-2973-4a9c-ad31-97d67b2791b3", "sighting--7c12cd2d-147d-4f05-afdc-d6607eab96e3", "sighting--2a638c85-5ade-4c6a-89fb-58b5ed560cc6", "sighting--ff715544-b6d2-4b34-9e64-2668be0c1e57", "sighting--a933d0e7-3b92-4b9e-b706-1a0574be1925", "sighting--28bfe822-2f96-4c3c-8d28-89298bcac978", "sighting--3310cd58-fae4-4bc0-8baf-449750bf0212", "sighting--f4080e7e-4c4c-4c5c-814d-f05cf16a194f", "sighting--dc6df676-3814-4ac2-a65f-d8dba9e604bd", "sighting--1cb4e986-e2b3-46b0-bc34-3088ed74728e", "sighting--9cf9f579-a3b7-43ab-8b00-1647d7d6a946", "sighting--336eb863-69bb-49e4-ae5d-7cf40b90ddce", "sighting--6f8a91cc-3a93-48c8-8d08-df950ae6cce8", "sighting--bc963430-78ca-4099-98cb-39ebb2b0de81", "sighting--15406d39-2ebd-4734-9053-73f296c0d2cd", "sighting--3abf1851-b563-4b39-989b-57ec6b11e49a", "sighting--1b1de73e-a7f2-4484-90ff-9bcc5aec8d0b", "sighting--99c415d6-0c7a-4cc0-9548-1410d13b415e", "sighting--db23a134-0fe1-4677-a4a0-d1bd9fea1fb8", "sighting--f77176da-ca48-4e12-a33f-5d7b6d00d2c5", "sighting--a80b7a56-a40c-4009-9994-6cf621e8b940", "sighting--0573b022-1dd4-4ee7-b984-c83e82162911", "sighting--2f16f64c-84a6-4bfc-8bb6-4682aaf10ee7", "sighting--eb0165d0-c861-4ffd-8823-a613f13d37d6", "sighting--8937b72b-95d6-41c8-9f6c-9472dbe6284e", "sighting--23231ff8-c08f-4c69-8668-ad8700fbab34", "sighting--c7cc8d4c-b7c9-4a93-ae4f-08f3000b38a7", "sighting--5e4ee2b2-2f5a-4fc1-b358-4da7d9b4710f", "sighting--184bca67-aa7c-479c-aed6-630d652ab55e", "sighting--514b18a9-69c1-459f-8c6e-87af710202b4", "sighting--2ebd2292-0f7f-432b-b783-f9d011df6cef", "sighting--ea25894f-4da1-4c96-909d-897db2534080", "sighting--5b9db325-6d3d-4d2e-b4c7-2839fd7254e6", "sighting--491bcc6c-ac8d-4bb9-8dc6-6fd26941ca18", "sighting--acc7646a-abfd-4479-a04b-8d7e604bc633", "sighting--82e1ae2a-fe46-4063-8097-4de34055f1e7", "sighting--77111535-9396-4a75-88fb-a7b4875847a9", "sighting--f1fc4f74-b1e2-42af-8f80-1fba4b8725ff", "sighting--055b7801-bbda-4fbf-9ee8-f3fc53bf7e99", "sighting--9f010ce3-1a7b-45e4-b29f-42a6b5a5bc75", "sighting--e096e577-78f2-48cc-ad86-0f7fa79f3f00", "sighting--4e998e3f-8589-4c12-94d9-b490413c662a", "sighting--8fd7e39f-48cb-4012-8781-832f8b9490a3", "sighting--bafcd5ab-b9b6-4d7c-b3e6-9b916d850a32", "sighting--f23cb07d-8696-4335-aae3-06a608b29296", "sighting--a5e9e8cb-d067-412d-b47b-252486fca272", "sighting--14d997f2-0423-4119-ae77-8b542c4d8abd", "sighting--5689a1da-788a-483e-b43d-85b827b841ef", "sighting--048f5857-9543-46d7-aa33-e49e07c2dd41", "sighting--0fc75a01-9c20-401c-a7a7-d5aa6fe9181f", "sighting--7ed6f988-c98d-4a7c-932c-6ceb8643da4e", "sighting--e92e597f-d3ac-44f1-a7e6-372ed7fb8b7f", "sighting--640d0881-6626-45b7-b6f1-4f07def9f39f", "sighting--22343135-555c-438d-af90-33c05d8f0950", "sighting--adf91fce-d5e9-48a0-8742-96984948284a", "sighting--2f322cf2-1ed6-4174-bdb1-7ee378988fed", "sighting--aa2487fe-31a1-44fc-8553-90cd39076221", "sighting--93a5a74e-0648-4e68-9e0d-38a17b30ba77", "sighting--51af929c-e79d-4926-8d2a-b2aaa08881ee", "sighting--93e22f8d-9354-4c31-95ae-fa11a16cba8e", "sighting--26bf36c8-8035-488e-baf8-0c222ec628a8", "sighting--f1721022-a5c5-4c6d-8f5d-9d4c72a66838", "sighting--045768ab-b7e9-43c4-a531-8267b7808c2c", "sighting--16a17a44-d822-4dcf-a5a7-a21d2098b2c3", "sighting--da9001ef-2de2-4853-9b11-9038d0e3cf38", "sighting--42115e35-d153-4d95-b1dd-acb121107cfb", "sighting--811468e5-ff23-47c4-b521-8b8941d7edcd", "sighting--8a22fa72-a706-40ad-b7ed-a1eaa2981a74", "sighting--be4c72ec-fa89-4863-b7c8-3ad017f6d11a", "sighting--6195f382-89cb-43b7-955c-4999eb71ec69", "sighting--e689f7de-aa27-4f1f-9e28-bf775a94960b", "sighting--a62f179a-f561-4d29-a5b4-4b7811b566fc", "sighting--67c086cf-6ca8-4133-a9cf-52ebad6704e2", "sighting--4d64c1e3-ef21-45f5-a7e9-42cdc1b4c1c4", "sighting--73a2b580-a17c-4d48-a9e8-3e7d1433ea5f", "sighting--82b0608a-7a23-4298-b36c-c9ebc82c9032", "sighting--aa165c32-9170-446e-9976-b7ec210d86c9", "sighting--4b364d9d-b3b1-4cb6-ad18-ce859a718cf7", "sighting--ad5379bb-2db6-4eed-9d2e-59919f9b3818", "sighting--2440583a-def1-4210-b105-77fc5bba8e67", "sighting--3bd33e17-f654-48f3-9334-fff90c7f1ca6", "sighting--ed051937-734f-4ffc-98ea-09f70b458671", "sighting--a302dd6b-8140-4ad8-9006-7780b5a7aaa3", "sighting--17c2c03d-7ed6-4007-9338-a31d1a38e802", "sighting--3e6d8282-9b97-4112-8810-a9f698d8d142", "sighting--26c19459-2d8e-4e07-831d-cb7c2ad0e5ce", "sighting--04bfe29b-8e07-4daf-b730-d0f470a39043", "sighting--27447e8d-8747-42fe-84ea-cb7ea2ff5847", "sighting--b8c0c160-ad48-40cc-8a33-632d911d7d2c", "sighting--64c4c638-2b9f-4125-badb-16b03c1cd30c", "sighting--4b51463b-6692-4abf-9152-854c33d61469", "sighting--41b40bf8-da9d-47f5-ab41-e304b7ef11d8", "sighting--b2cf5901-75d3-41cd-ac8e-281f0b39679b", "sighting--17192d10-1735-4088-8b07-9ced3514bfb8", "sighting--ee24443a-fb63-4daf-a2e8-9976743724c9", "sighting--c2c84c12-ac80-4643-8574-e2e48bc97ff0", "sighting--c16ea0f3-2e72-49b1-8cc4-d105ae599ca0", "sighting--67782e8b-fe6b-48ca-9320-bdcef0f28714", "sighting--e6a52422-2101-43c1-87ac-12ec7a45b026", "sighting--207991c5-d744-4567-98f6-8bb91382c94b", "sighting--76d08a32-0444-4a01-8b8d-3ff389c97240", "sighting--d9407260-7727-4bf8-a996-b6f2f881f00a", "sighting--a79ae333-535f-4926-94cf-b3933100e7b7", "sighting--d3abacc2-04fd-4e29-862a-3c182d13b5bd", "sighting--f8bd9908-64b7-4122-b79b-03b85a0a5f88", "sighting--b236b54b-a146-4c14-985b-b5f598711e65", "sighting--7356d2c6-bd2d-420e-b044-ebf207b7274f", "sighting--5252f2f3-3a09-49d2-8900-b211a7dd5788", "sighting--9ea15091-cc7c-4cdd-9cfc-719073b9fcd6", "sighting--96f90779-d5a3-496e-902c-005f253f5dfc", "sighting--4362b766-0821-48ee-84b2-65ef5293542b", "sighting--d5171cd6-023f-4e05-9e9b-dbc15ab83469", "sighting--d808d4a4-666a-454d-ab0e-e37f0bd9f0fe", "sighting--5ef5710b-b60f-4a14-8b14-2e5ddbef83c3", "sighting--a8506ca8-0213-4be7-8085-09cef4fc8e73", "sighting--7093dbbd-c488-488e-b615-d9a4884cece6", "sighting--b7d18a00-4708-4970-bcaa-a8c8c93a2114", "sighting--189c43ac-e609-409a-93f9-77f9c3f2b33d", "sighting--fd3b4e30-42c1-4606-af4b-a914141dc105", "sighting--b4f42698-b4b7-48d8-a264-6a5f0568c535", "sighting--15271f48-343b-49f2-a67b-a4d41f9bcb08", "sighting--02ba1fad-8dd9-416f-a543-2df344061cbb", "sighting--6c84e775-40c7-4788-9b36-4ed559e08fcc", "sighting--d04e59dc-8904-4861-a929-b1b31fe39cf3", "sighting--c19b857f-e1fb-4509-bb36-340c351b32ed", "sighting--23859f51-f6ec-4ea4-80ca-26d2a78ee087", "sighting--9db15cf3-37d0-4253-bc7f-32d2f68af019", "sighting--e9295ea1-c2a2-4333-9f6f-964965aeddd8", "sighting--bd9e09ea-eb0a-4755-a4a1-b5fea00febc2", "sighting--08d4e10e-6644-45e1-be74-e2727d7a9a20", "sighting--7a91a5d2-e084-4871-9f33-f3c4bd5119ce", "sighting--89257f7c-154b-4598-8660-c4a34901aadf", "sighting--155856a3-ec09-4a5a-8123-d4d0b87b3eb8", "sighting--70c1cba0-ad6d-486b-b8f6-7a3a803f6566", "sighting--65ac0c1b-9fed-413e-86ef-671926ae1172", "sighting--16e6f40e-913c-41c4-9a92-b560a25c3a3f", "sighting--b958fdc4-fa1d-4514-b478-6c9f70038441", "sighting--5eaa017b-aaf9-4369-9c32-c6cdf4c5cb59", "sighting--08d65a9a-33e2-4897-af6e-5353ae431d65", "sighting--e01e17d0-35f0-4274-b2de-2871f2d8b1c9", "sighting--040632e0-6c86-4754-a7c3-bb06a90c0387", "sighting--43dbcaaa-dfed-4478-b02b-2467b741534b", "sighting--e4099d8b-197d-45ea-9207-8bc21712d7a5", "sighting--0c6b2c0f-7910-4cb2-81cc-717bbadcfa8f", "sighting--57ff25df-4be5-479f-8537-f77e384760cc", "sighting--4f83d6b0-159c-40fa-b38b-c854699e00db", "sighting--a0d60687-8fc3-4d5f-ba48-97b3027282fa", "sighting--0850bac9-b329-4181-b6d8-b4b0cd524065", "sighting--cd3fe2da-1665-4723-8853-137e8296c40c", "sighting--690ef03c-b61a-400d-9274-ae0c6a7c6509", "sighting--b1318cbc-e610-4913-867c-603ff43d5a60", "sighting--5895832a-b276-4664-b37c-824c636845e6", "sighting--b7109792-e3b2-40c1-a7ce-be9137f0de71", "sighting--4c397029-fdf7-4e78-a32b-3d032038d2fd", "sighting--aac1ad2a-2cf5-4831-a6cc-9ef7359f946d", "sighting--23c3385c-76b7-45ed-a9b7-18c56163be05", "sighting--f1f4773e-8566-4fa4-8c48-3f0004fe1280", "sighting--dfc748bf-be7f-41cf-9c3d-852271e76209", "sighting--f415510d-496f-4664-ba70-5abd4fd295e9", "sighting--5f15063b-d363-43ca-8093-eaadda42b71f", "sighting--c461f058-2bdc-45fc-8f06-3c55ce656612", "sighting--24a7a8c9-f74c-4315-8edd-0059fcf44d25", "sighting--793cc63a-874c-4470-90b8-8e0342529b15", "sighting--5f0d6317-a289-4b4b-86f0-a5bb692702d8", "sighting--c248e334-fe6d-4ad8-ad2f-6a7d4e1143f7", "sighting--cc953d07-940c-45f0-bf42-d37d3f0a26ba", "sighting--03ac9b18-52a2-4ac7-a6ad-a40e8e362fd8", "sighting--594f1a2d-b112-4dc5-98ab-0e500caedcd0", "sighting--949cf2ec-cf6e-43ab-bc3d-342b2a7d259c", "sighting--55a6cf72-05a9-4de4-b386-9080af544ab4", "sighting--65aad2d5-5737-4525-98ba-90e2343ba536", "sighting--c3f04ecb-dacc-4bb2-8d51-409dc33d47e6", "sighting--dc4a0e94-73e5-48f3-aac7-ec6e4275f735", "sighting--e3e56b7f-0d1c-4d58-9ac3-7806d83f42da", "sighting--88c27207-402d-4d7e-9059-abce3567fa35", "sighting--7317c2bb-f59f-46b1-9e46-980ce1428e4b", "sighting--5c8531e8-9260-4de7-9552-9c8c6e7c9da4", "sighting--24609183-a44f-4ca8-baf1-75fb32a2f842", "sighting--0aa8b4ff-6b49-422a-9d82-7f7c19f049ac", "sighting--cf427537-2195-43a9-a43f-4bf1efd4ecf6", "sighting--7efc4714-dea5-4280-aa20-2c087327f0be", "sighting--b0018464-7273-45a6-89eb-7d26e770ab60", "sighting--a1748894-726c-4a60-8c55-3afe2ea25b0a", "sighting--87e5efb9-42e6-4f9f-acef-2093a6bc1ad4", "sighting--311eddb9-0555-4dbc-9fc2-c3033134db00", "sighting--83837686-5952-4f4e-945d-40a8551c2726", "sighting--636527a6-7886-46d6-8c2d-eecd168e4424", "sighting--5cbfa977-5818-4a64-aec6-3e0787455131", "sighting--42f27c59-9ad1-4cff-b27f-ea55e51c6f90", "sighting--6cdeb0a7-8ab8-470f-925a-252199b642a1", "sighting--a071b4b6-7389-436d-a095-a3752a52a988", "sighting--c705e05c-ca72-451e-baad-2fb97f1a8ccc", "sighting--410bf566-3602-445b-b747-d34a084b5dfd", "sighting--99f5cf5e-d4fa-4533-93f9-7e7dda30647f", "sighting--037db173-fb83-4e1a-bdfd-a9a6a1f45e9b", "sighting--75612e87-cc4a-48ab-9e84-f03e69410e85", "sighting--dba6e1a2-93b5-4a9c-9137-6efc33d0eb45", "sighting--e3c325e4-7de9-43a2-900c-a281f019a250", "sighting--a6759f43-d093-4322-bba1-fadb1ca12d27", "sighting--1794234c-5a69-4e62-a4bb-3375fde3ffbf", "sighting--841a6aa4-72bc-4f66-81b7-3993ec8aad80", "sighting--776d704d-568b-4b42-bd0b-c6d513f28f0c", "sighting--dc4f3801-b7af-4663-b49c-8cfafbc27b5a", "sighting--db0d76a1-573c-4b17-8fc9-4162173013d2", "sighting--56dd5a82-d919-4352-ad0f-1cd461aa02a5", "sighting--49ee1642-f033-45ca-9812-8ea7a797ecc1", "sighting--f70c028a-5b16-4168-b33c-c961e232fc54", "sighting--074363a3-3b5a-4cf2-b55c-f9d9aeed9ebe", "sighting--1fc12700-8fda-41de-80a8-c41a12f52437", "sighting--9b70bda4-c8f8-4a8a-bb74-6c7456edc580", "sighting--b63b6d64-8123-4404-8372-8984f5ef9a76", "sighting--6e45f908-e42f-4df8-9ec5-b5a88c7c39d0", "sighting--b8669999-ab77-47b7-bc5b-a92c57162029", "sighting--57b112a8-4218-4518-b70f-067bc45d5a0a", "sighting--80669742-3ec1-4e92-a47d-4c9be7a79140", "sighting--83d02b91-f172-48b1-8356-845a6e5ad77f", "sighting--bf0cba1f-59ff-4e0a-a857-3c6bbc9db5ae", "sighting--c7bd3bf1-c48d-494d-a6cc-1d51a9b96ee2", "sighting--c1a8cc94-e15f-407f-8e7e-981f734c03e2", "sighting--09f4c5c0-635f-4922-be0f-8fa08f2d7ef8", "sighting--6c951ee4-379e-4fb0-986f-533b734ccb65", "sighting--684be862-b0e7-4f40-87d1-87091f34b3c3", "sighting--daa0b1de-4a14-4125-ba7e-47eceb1ecff2", "sighting--46aed18a-f28b-46d4-8a0b-bfb0cc8f0041", "sighting--53f1b31c-217c-4350-9ca2-bde51414d926", "sighting--f36bc4bb-7d08-4a42-851f-a82931f7d42a", "sighting--de4947d0-8b61-4d0e-b0fb-98b5729c7f2f", "sighting--e773336a-95aa-4236-bed0-2d90541c560c", "sighting--51c87452-1e46-4b63-a406-b0491f5aeeed", "sighting--745b1033-e32d-4f2d-9b6e-cdf170487612", "sighting--37c0066a-2490-4d30-b85d-d8ebf7f7014a", "sighting--f817aca3-79b4-4677-9845-51f8333ab13c", "sighting--5f6cc7e6-cd06-4fd0-a025-10312e90dd5f", "sighting--76d38643-6f31-4152-ab44-25bb49fdb4fc", "sighting--b4173924-b6c8-4282-98b1-383fec7d4089", "sighting--b15640f4-1327-4d26-a96a-de3478154432", "sighting--4f078bf9-95c6-4b3a-b449-7a32f19edde7", "sighting--bacf2963-dcee-46a0-9a23-82c4504b517c", "sighting--8bc7899d-06a1-4ed8-98bb-2462f348ff02", "sighting--7542ee56-3d1e-4534-a567-f3d89490a2b4", "sighting--61d53112-c08a-400f-b89a-7d5b93b977aa", "sighting--a755ca64-d188-4433-af0b-84dc182c83da", "sighting--2ca219d6-043b-4e88-aa9d-8e23ae16b47e", "sighting--d1fc32af-5242-4475-948d-ca6de71de5dc", "sighting--8da59730-62ce-4fbe-97c3-724d1d4c727a", "sighting--98c7b3bb-cec6-44fe-a0c7-48916359285f", "sighting--24a49731-6802-41d7-a91d-93b873c4a00b", "sighting--08a9a2be-acda-428a-8b22-06b7653de7fe", "sighting--a8b44b7d-ab3c-498b-a0f5-93442d680859", "sighting--0562b235-f7c8-4019-813e-c8e40c6a5dab", "sighting--81a88c13-2887-4da5-98cc-1781c63e11d4", "sighting--e394600b-9a8d-4517-b475-daa85d2478b9", "sighting--3f6a392d-0e03-4a1b-85c1-faa19d6de4d6", "sighting--b87ae614-70e1-4b6e-afcb-aca1c3df421b", "sighting--12730cf4-1bc0-4e00-a381-f3e662877276", "sighting--8f026ceb-d3a9-4fe2-a6cf-9475be0df5ad", "sighting--d27a6188-df12-4ce6-b162-648816fb617d", "sighting--94f66cee-50e2-4271-832c-79c75595ab7e", "sighting--001b857e-c91a-4c79-a5fd-e553aeaaac5e", "sighting--705614d0-e3cd-454c-bb98-e5611772ebc8", "sighting--31d051e1-26f8-4d3e-9309-5097142dae76", "sighting--4f916818-7cb0-417c-8f19-d7481d6adc46", "sighting--660de19e-d0a6-4d68-abae-bbc1fd8eb614", "sighting--3cecbb03-9803-44e8-845e-79d64a7eff1b", "sighting--90e334a9-61a9-4877-a91b-2e3196823a05", "sighting--0400dab0-4a84-40e5-bf6e-9f2f29bc0b3e", "sighting--2bed2f47-aa2e-469d-8281-4807e03b3197", "sighting--cc1f1edb-9d78-4679-a6bf-5ae70746ba0e", "sighting--c5de3091-3451-4985-a9a9-8cd9a3760bc0", "sighting--fb922cc8-73a1-43ec-9c3d-0a12057a4143", "sighting--242406cf-9cee-4a3f-a26a-4eba007e9352", "sighting--ef439b73-5981-4490-849d-69aa68e5a080", "sighting--1978d8fb-0613-4349-8ff7-6fff8e4ad64e", "sighting--879096b6-d121-4150-8b51-087e75772304", "sighting--cce839ca-e41c-4e79-98e9-81a6253d0cde", "sighting--6ea1b7c4-05fa-4557-9552-d87cd425421f", "sighting--8f80d48c-dc19-48ac-9456-9e2c61176872", "sighting--3d6154c0-1f2f-4d71-b5e1-aaf375b8314c", "sighting--1ce98fa4-0c9c-4608-9d71-1196bdb2b830", "sighting--7662b7d8-8539-4f8a-a1a9-6328933e3f67", "sighting--5fd771ab-e9bb-4ab2-b97b-2f98a6a8196f", "sighting--72796dca-e7ee-4182-8498-72cdc010c0f2", "sighting--fd8f331c-dff4-4419-ae5f-ad9d0ffc4f9b", "sighting--57da2de8-23aa-4eeb-8cb9-8993546afcf8", "sighting--32ea6553-7cc6-4c6a-94d2-9ccfdb2b52ff", "sighting--fb3044f5-f174-4997-ada7-542fe9102a30", "sighting--1c9b6fb2-d7a1-4677-96e7-88f4df5cc82d", "sighting--25879658-5f04-4de4-a8b6-899310e75961", "sighting--12276a14-f832-4f56-8038-6cc510c1cb69", "sighting--4fe5ab73-4e60-43d0-9ce1-f522f57e4e98", "sighting--c5f5e551-9d9a-4d90-b00c-31f2b810fd3b", "sighting--5b96afd0-ce3e-4e2e-acf0-f732f5b3cf9b", "sighting--1cdb2aec-c483-4939-9e34-c6e63146c00b", "sighting--650d0637-d6aa-42c8-80e8-6a77aec27eed", "sighting--ecd492bd-9acc-4dd7-8947-48ddcc760aec", "sighting--0adf3352-6059-4480-a76f-faa547751fa6", "sighting--8a11efa8-5fee-46a7-9475-0c553acc2bea", "sighting--adcd58fe-94b9-49c3-bc94-dda936bcd52f", "sighting--105d9029-6d04-42ec-9041-4086b53da741", "sighting--2e03223d-fd7f-4ada-8da1-19dc06b13a82", "sighting--5aa7389c-b490-4914-9690-7de2a85810f4", "sighting--49603410-c689-42f8-8909-c3c6a869ec75", "sighting--75b3a902-4d32-4257-ae41-1180cdc49464", "sighting--3ee48e9e-51e7-4af0-93c7-d63754c469fe", "sighting--b831f64d-987b-4e2f-a549-a0334f048599", "sighting--839ac448-74bb-458b-9d51-dcb2afec019e", "sighting--a3b8a616-0ef3-4465-bd9a-8f9dfa7b79b9", "sighting--495bdbed-8a7b-4fde-ad7d-bf00f6055988", "sighting--1d2f55eb-a119-4d7f-8985-113727d7b6ff", "sighting--a2e862a3-2a00-4d47-b8ed-561c12e57585", "sighting--741e6276-536a-48a2-be78-207e6cd86a86", "sighting--7c3d82f8-ead5-4dbb-bb7f-f5596c98b42a", "sighting--25cc798a-af6a-46a8-b75f-29d8c9efd287", "sighting--07e24a9b-3e9e-48c4-b49e-b33e0078cf20", "sighting--98ac3cdb-c520-4ed8-bdbb-a362806e7e8e", "sighting--46702e64-36f9-45a7-b477-01cb410d05e6", "sighting--89618d9c-8ae4-41d4-86f5-11c2d465393c", "sighting--a16baa11-932a-4c99-9c1d-27e4985c8ef1", "sighting--d1784a25-27ae-4d15-b1f8-ed24b21f5465", "sighting--467a037a-c4ed-4ee8-9e4b-59d78fe6c6f6", "sighting--825c3b3e-ccef-4783-8b37-cec3bbe4152f", "sighting--42fe308e-aa0e-4d53-9d65-577d97b760fa", "sighting--1845879e-7710-4fe2-92b6-dd53baff2327", "sighting--a7661272-911c-4d5f-a13a-a4551c500590", "sighting--621b663b-ed47-43ee-83dd-60acf6b3c531", "sighting--9be3c1f4-1909-4265-a511-4085c3bee729", "sighting--a6d1c8c2-6f18-4956-8d90-ca9b364ccfc8", "sighting--f1ae3431-4280-4c86-9715-f2585daba11e", "sighting--0cc16a7c-e0d7-4e63-b438-681a8ace051c", "sighting--fbf5ca10-c87d-49d8-8d2d-2545eb7a010e", "sighting--b4f5400e-dcc7-4537-b2e3-79e96e9315f1", "sighting--f39f6850-2e0e-4527-b842-a91efa5d17df", "sighting--f3ce674e-adbb-4bb2-bd6c-87ba9b23f93e", "sighting--57ae5500-e15a-447c-8e1c-227e8640834b", "sighting--5a502c32-1eb7-4068-a0b0-45ce264bcb83", "sighting--e5fabc0c-8ae1-4001-b386-148af4e498fe", "sighting--b43d8ac1-e33a-44e7-9b2b-ef59783bdc6f", "sighting--fda63042-804d-4709-b632-e8fed3937cc1", "sighting--347e4382-5264-452d-8d40-bf25593cdea8", "sighting--7c2b8718-a691-4995-b67e-634ebfa2bb71", "sighting--a5eee90d-427a-4ef1-b763-e9f3f7672295", "sighting--8764ac59-4b7f-41da-9d27-66360bc94498", "sighting--9f857f75-0f2d-49d2-a5ff-5a800db5f6fb", "sighting--0c7d9e2e-9f6c-4afd-ba2c-e3d1d1b79ad7", "sighting--50a7eab0-eedd-47eb-93d8-7dbcddeafd66", "sighting--57148a2a-83c5-42bd-88e7-f53706d87d1b", "sighting--e3bf9b22-cd0a-4c82-abb4-48b5cbe8c94b", "sighting--9d2f1888-1c7e-4587-b903-0b73c5c514ff", "sighting--398a442d-93d6-466a-a792-0e26c24c4eae", "sighting--8fed760e-1c3e-44d6-82a9-2aa2a1ca6ce7", "sighting--aa11ec48-6608-424d-adfc-901cd6358720", "sighting--1256586f-a1ab-4e9e-886a-a38e198a0fb3", "sighting--d70b5d5c-f847-4682-8ca9-4f14888f51a7", "sighting--6f87f574-291d-4f41-9be7-87544754ea58", "sighting--416e8701-1915-41f5-bcab-5f67729f69e6", "sighting--872d2b07-c8f4-4f61-aee8-f99f17f02dfd", "sighting--9f23c275-fa28-42e4-9362-7672786c8078", "sighting--ebc06b17-6912-4e7b-9d83-17d697e922a6", "sighting--04c304b9-c7df-4e92-b00d-1d36c3ecb5f7", "sighting--f73f7ad2-18ef-4a20-946d-ca1686a8c1b9", "sighting--213839bc-b340-49eb-b66c-67dba736834e", "sighting--9d7a44bd-5879-4d89-88ea-551c26a32bc5", "sighting--d25e59a2-daf2-42ce-985a-b6d8675fa56b", "sighting--f14fdf8d-f63e-4f65-9eb5-baf02b0820b4", "sighting--bd541256-ae27-4c4b-9fd0-dcfbf9ec3798", "sighting--a26a07d2-2d4c-43dd-8f86-d7581407a37c", "sighting--932da04f-8531-4157-b4eb-e8fb48242a05", "sighting--3e63aaf6-d37f-4f0b-8c0a-27058881a43d", "sighting--e561d4b3-cb13-4815-824e-230864f3c931", "sighting--30f55941-03a8-4a8b-892b-39ab6bd585c8", "sighting--75e55ff9-47ca-4c5a-87f1-6832dafc41df", "sighting--57e8e2d9-0a50-4cef-bef0-77fe7cce08dd", "sighting--8173114e-85ef-46f7-9d84-6b60478d2fde", "sighting--7fb11e78-43e8-4b58-bcd2-264447c126fa", "sighting--55a06230-7e92-4168-8bc7-49f06a738c94", "sighting--8f46efbb-5bdc-4db4-b271-ba8a1db1e0fa", "sighting--eadd5379-7afe-4437-a4a4-424c2cf295f3", "sighting--0186f1e4-5dae-4dae-bece-5528cbd45060", "sighting--a3df5a0d-6321-4047-a54e-acd0dccbb602", "sighting--842d92c9-63c1-466d-9fe5-8feb1fd5be3b", "sighting--61b82190-0ea8-4df6-9e75-a79a8e80675a", "sighting--8ed51b1e-ae65-4d15-9e8f-50bc8c22401f", "sighting--ac1de16d-d94b-452f-95b7-ff9c7f8209fa", "sighting--62259764-e64e-4478-be6f-279b2ec6106a", "sighting--eebabb61-0bd7-4830-b291-62c0612eefa0", "sighting--2c8fadae-a3a7-4601-a53f-8b5a852c3d01", "sighting--26e3f3b3-9c48-420b-89f8-ff71353d0885", "sighting--b3f74b75-e4b7-4b2a-b5f6-8d594f3f52f6", "sighting--0d617c34-7c73-481d-ae42-c0dffa140f49", "sighting--3933a7cb-45c8-423e-8f41-efdfc256a4cd", "sighting--36d385b0-070c-46cc-842e-70fb4d61e77a", "sighting--f239a677-0c9a-4fd3-a795-4576294ce413", "sighting--5ef64832-5fc8-4222-bd76-862d0acf9e2e", "sighting--1d49b57e-67fc-4b1c-b7ee-1b870bc17136", "sighting--e12c5ee8-6ede-4920-8c30-4749b0c2bcaf", "sighting--4a02e7d8-bb68-4cff-92ed-febac42397ad", "sighting--f9c7a617-2082-45a9-be2e-80c7d3266c29", "sighting--3ad7def0-3e3c-4341-b700-72bd31441205", "sighting--0b2301ce-99b0-4311-ba1f-ee7f9ded70c4", "sighting--58895b62-2166-4391-8fc3-bb06ab32c986", "sighting--c4c5ed3a-b45e-49f7-85d2-a3313bb08e7b", "sighting--1b06e7c3-bf3e-4920-ae5f-f70a900a0c3b", "sighting--40d2181f-7f2f-4d9d-9280-5214acd96fd1", "sighting--9f6f87a6-2f7b-4285-a5eb-f80cceab357c", "sighting--e506d66d-504a-4af2-b932-9185b71c9660", "sighting--fd10ea7a-7268-45dd-8914-49f3e69a7858", "sighting--e32064b8-78b3-4fe3-b8e4-b29bf6bdfeee", "sighting--d8dacb57-f340-4f3c-869a-742efa86af66", "sighting--ca326f3f-3143-4a0f-9b57-dc96aaed6b92", "sighting--5032812c-9299-4dd4-964e-94d76dcaac1f", "sighting--244b17d7-f13e-4617-8395-b36cac75c3ac", "sighting--a32fd33f-86cb-4f54-8fd4-4c306891bff2", "sighting--d4226fdb-2116-4321-a45c-2ae3106a1cc5", "sighting--b84fe4c0-a86e-4ba9-945e-f612f14aad5d", "sighting--23754653-0cea-4924-9186-2d155aca3f4b", "sighting--89fb214c-9e91-464f-b15d-240b4f0b0455", "sighting--1c0ae0a1-04e4-46cf-8e89-c74d625b0fe1", "sighting--37535df6-76ca-4aa4-9f3f-3d885d35fc48", "sighting--6abdc39b-fc9c-4a45-b314-faebe8ab71d3", "sighting--3c6924f3-6549-47c1-887f-8f5c7868fe7c", "sighting--566de99b-72b3-47e3-8808-a1bf1e9b9917", "sighting--2c7cc720-35b9-49ed-9821-36339146ebe2", "sighting--c04fd357-628c-47d6-aada-9f5bbd5f6adb", "sighting--2ab2a291-682f-4e2a-8ade-4c30fecf5453", "sighting--f3f9014e-f0c8-4ceb-b39f-b2d0fef59b33", "sighting--cf42253f-4a20-4a76-b578-b0747234e292", "sighting--80867f8a-1e35-49a1-ab4b-10d4bc8f9652", "sighting--40cf46e4-ad06-4853-b019-52838f4b9a29", "sighting--9dee406d-e5fd-428e-84a1-6819e3bfe159", "sighting--c4dcdc46-1a41-49a6-99d7-0ac345e439e9", "sighting--7bf70501-7908-4fa5-82fe-6e7d93a44138", "sighting--fb03bdd0-25a7-4fb9-ad86-86ec255e7e56", "sighting--c3f03a0a-c36c-4ea0-96de-1457fd6b033d", "sighting--1752ea2e-acdd-4e1e-a79b-2800aec16595", "sighting--cc53681a-3615-4280-84f4-973d17757bae", "sighting--a2faf3b3-1f75-4e93-a01d-b9c6f99aaf89", "sighting--84992507-c643-4ae1-bac5-b04507f1ba72", "sighting--8efa9d81-c551-4be2-8b6e-b63fb82ae479", "sighting--45672985-787b-4a16-b54e-e8ed3f7ad3e5", "sighting--3f062dea-d83a-413c-94af-227b6f65356e", "sighting--50e022d7-0fd9-4b76-a54b-36e99af94a20", "sighting--985e12dc-376f-470c-8027-c0debe3f3bc1", "sighting--9fc2d490-cbad-451d-805e-2964c1bd42ae", "sighting--52676d84-1cf7-4b67-a29a-24b886a2248f", "sighting--028e7881-2b37-49e1-bef5-8243f72a79e9", "sighting--defcb7ff-51ee-49e8-a842-352f00170f4a", "sighting--a8500a4d-366c-4532-aace-41df58d90851", "sighting--1096658a-b7b7-4254-b9d1-65a89089b1cc", "sighting--43f17a99-b71a-4091-b4b1-26eee73d9576", "sighting--fcc29cb0-1fa3-46fa-bff4-6b45c60180ff", "sighting--8b08cdcc-13e7-4e6a-8793-63b9bcb5444f", "sighting--1ab69027-211f-4bdc-a346-d93db8f27a41", "sighting--28098e96-f6c1-4bea-a30e-63e03783b49f", "sighting--bac14819-020d-4a76-8753-5097f89baf7e", "sighting--13260cec-0f5c-4b09-bce4-a3a7e16a1fa2", "sighting--6b3e46a0-0e70-4e74-9017-f9988da4f314", "sighting--eccdccab-1255-4987-bccd-897fedbcb4c2", "sighting--64c844ea-acfb-4c9a-9d9c-b57427a09f4b", "sighting--856d5800-f62e-4f5a-8b71-75bb32ff908b", "sighting--7290e05e-3af6-46ec-a3da-6dbe0865dec5", "sighting--d2e1f4cf-7cf6-478d-981f-42851b34b83a", "sighting--cb5d448d-7cf9-4c0f-8a54-d409b8ef8276", "sighting--6d17f4a8-adc8-44d5-8849-624204497b8e", "sighting--0d3e8454-c67f-40bb-9fef-f3704db98eaa", "sighting--1a7aa918-f4e4-4953-8333-4095526f676b", "sighting--a4c21acb-f0cc-4d32-8e11-1372b71b24db", "sighting--25c8795e-1fbc-465a-a6d5-13afccd48bd0", "sighting--058f9509-dc78-4824-be76-a4e2d5f4e375", "sighting--19008368-6b91-4305-ae21-4c0ec8e2001d", "sighting--41025380-14f8-47a8-8f9d-a4ee64a1caf0", "sighting--8f4ddd6f-ae11-498c-a013-9e59ec21ee0d", "sighting--a4e11c40-dbcf-4d31-86ac-f352d00a44a3", "sighting--31783cbd-79d1-4aaf-9b03-18c07e07d06f", "sighting--c75532fe-119c-481c-9734-024c98c20c60", "sighting--701c689a-7cbd-4153-87f1-d3dbe12088d6", "sighting--a1b04f6b-ae45-4e64-9c7a-1e0e4e5ef0b1", "sighting--a34679af-2589-46e8-b55e-a6145c2f4176", "sighting--f462de5c-25e7-4a85-b4b1-c30f49745799", "sighting--7e1844b9-e179-4164-b18f-dc629103e645", "sighting--8c985e15-7bdd-480e-9472-6b27feca4652", "sighting--fd276f51-3d61-43a5-9b24-545508a5e866", "sighting--9518ce56-75dd-4f02-8d38-70d2aaf1f742", "sighting--3647985c-2a14-4aae-b697-1b339ff76e33", "sighting--d98acd33-893d-4b89-a5bb-a2858ce017fe", "sighting--5a4ed5a6-768b-4de5-b01d-9f1317a4dcd3", "sighting--d410bd70-9635-4613-a942-7a8be93f3ed8", "sighting--abeb85ac-5361-487b-8768-73cc5e544b9b", "sighting--48b22962-bcb8-4806-8314-3557db83a205", "sighting--751ac805-0a9b-4bca-bfa5-8c2dadf21267", "sighting--97b3337c-5f97-495a-a364-47f84996f3f1", "sighting--18fcf4ab-d2b1-4e33-a9ae-3371f118f15c", "sighting--a618bfab-b7d7-4eca-a1db-df99ecebe659", "sighting--ed1eb264-d1e7-4a5f-9b09-b4da32fab52a", "sighting--e971f8dd-3265-405f-bb21-9c74cdc42965", "sighting--0e7856ca-78e8-4c5d-9927-0d183b8a664f", "sighting--eaafceec-4a01-403d-bc4a-2874c354b109", "sighting--c83af657-5096-47a9-9c33-fd92d7e2a06b", "sighting--79297525-9324-411d-909b-dc106114a546", "sighting--bdc45be2-0447-4a7d-b21f-d7a73fe76531", "sighting--669114d0-fe6b-4773-819d-a2abf5bd134c", "sighting--8b710193-c877-47a2-afeb-6a2752f3b039", "sighting--44c0fc33-fd3f-4154-b0df-6068e8d95470", "sighting--d9d26544-e91c-4560-afc2-cf65d9c823af", "sighting--d33a1be6-5a59-4114-8ffc-2c3d0f80347d", "sighting--2918d189-3181-4c4c-b2f0-3c592fc62558", "sighting--c6d05112-ea5e-4ea6-ae34-4a8341ce8e96", "sighting--9a29679c-9a95-4e6b-a64a-cf09a20d24d0", "sighting--459c9d96-7a3d-41ed-af27-0201fdb7ee9d", "sighting--ede05a2a-e87a-40fa-8d5e-776fd03eeb75", "sighting--67faf000-449e-40c6-a3bc-f6b4e9ac2f8c", "sighting--b174bdbe-eeeb-4b35-86b9-1b175b45bea5", "sighting--eb443124-1c52-4f5d-b537-565efde238ab", "sighting--43a1038b-a384-4d39-8d2b-c105f91bb0d8", "sighting--debe4860-619d-46ef-ac0b-6cc8bb44462a", "sighting--387de782-abc9-4f8b-9733-ef7695005f54", "sighting--c7e6fd5b-b591-4043-9e32-47e6682fde15", "sighting--3a06e366-8137-4886-9f88-c21fa1fab367", "sighting--b0c4761a-b686-4c8e-9625-2e20b1d3ac0a", "sighting--d76a004d-e6d1-47aa-aab0-3850edcaada1", "sighting--f4f679ee-7157-43d1-8da9-b9136e669aa6", "sighting--180eb766-87de-4d98-a13e-e4ac73598758", "sighting--6c6813ef-822b-4507-aa77-2450232d6a79", "sighting--0853ee04-c2cb-48ec-b6ec-e189648cd360", "sighting--77a4d788-6809-48c4-b590-e40b67fc798f", "sighting--d32c07c9-2d2d-4794-bfa4-e724636804bc", "sighting--19e0ed87-9d25-404c-9ec4-cd776bed35a9", "sighting--6a1e54b6-bf08-4286-bf9c-037fdb868316", "sighting--b6230fa1-dd01-4b9e-9e3c-66c55074cb49", "sighting--a56b038d-5990-4b17-aa2b-a965b7308b75", "sighting--c7370d57-d361-412f-a204-d28b8f0855e7", "sighting--87d08e2f-a4a6-465c-9356-b82a5fdbd874", "sighting--2eb9b5a1-1030-43e3-aae9-b36180fe78ce", "sighting--4cd37d12-2b5d-446e-8dba-1c9f729cdb62", "sighting--89e833f8-c07f-4c10-9bc8-96713d3ab73c", "sighting--00d64255-6eb5-4447-a6c6-7acf7bb7933e", "sighting--79fce00b-cd21-4c98-81dc-1f4107015320", "sighting--2f04fea7-7317-4ff7-895b-6b5db11e2419", "sighting--320904b1-4a41-4088-87b6-d9e50dcd8c34", "sighting--49993cb0-1e2b-4839-8395-4771318d2df3", "sighting--155ae5bd-b72d-46a8-8802-cec3bb627ecd", "sighting--28cc9347-9394-4c62-a881-ddcbdd0ab827", "sighting--6844896e-db0e-4526-a714-a3cbca6b31f2", "sighting--75fc06ce-a80b-4a43-bbbb-9c41c7a4dff0", "sighting--1086bfd8-361d-481a-8b8b-ce4cdda413be", "sighting--312f5c18-877b-4b3b-94b8-b4c0d5e61516", "sighting--68a452af-7f01-43c6-9509-e4ec4ba2cc07", "sighting--abb04a7c-457e-434c-b204-1b375b42598c", "sighting--1a5405ec-ad95-4319-97ca-11bc944881f2", "sighting--29fcfbee-34dd-41a8-9be5-4d605851a374", "sighting--9bb5fe99-99f8-493c-b8ab-e390f2311078", "sighting--8147a750-8bc2-4ad8-88ca-f0fd90eceaa2", "sighting--9f3d3780-8132-46dd-83bb-68d05b11e6d1", "sighting--47ca58be-0879-471b-bf11-7cd58597e308", "sighting--92151e83-b862-42f4-9cca-7986dfc553ed", "sighting--9797e270-655c-418e-bd3d-5ea772760497", "sighting--d1b7e055-c08b-4909-87b8-b2ab7743950e", "sighting--0b0d61e4-c63b-467f-b80a-47d525ab695c", "sighting--5ebab931-383b-472b-9bb9-45d0ea1a9f05", "sighting--46b6a8ba-74a1-417b-ab81-38116c687901", "sighting--9299d63d-9441-47a3-a341-4f5d54f6ac16", "sighting--36259335-82f3-4d6d-85a2-a274fa584943", "sighting--102fe0a9-4b92-426f-9ded-1a384d72d094", "sighting--b99fdf8e-0df7-4e1f-bfef-7b3044fde302", "sighting--8ce056f1-8518-4255-b646-bca4546bff7a", "sighting--bb20126f-ac8b-4f73-bd02-8071959101c7", "sighting--7c1a0a66-dac3-49cd-b9a1-181ab0c3ef31", "sighting--08c899cf-6ee3-4f7a-945d-def162923a76", "sighting--9f835d99-4d9a-43c5-94e6-4f41998a307f", "sighting--460368bc-9541-4c9e-b178-41bdfd2c2d00", "sighting--0a5914ba-d18b-4d1b-adfc-a54f344ce608", "sighting--9812fd28-f123-4c0b-99af-39dd157aab2c", "sighting--3e988a44-035f-4d63-9bcb-b69bf08d01bb", "sighting--be56cb5c-6c75-4cf8-9e54-99a34e4f8aef", "sighting--fb21a0e4-8207-47d8-a71e-88a0c36f024e", "sighting--9a989f65-33f7-40e0-be39-9e7472573b58", "sighting--12b91091-c5de-45f6-a433-1e44d43882e7", "sighting--ddb40867-dfc4-4ead-be2f-527d0d7e2392", "sighting--bdda93ea-4c75-4f8f-9e8c-f4efe5eac11b", "sighting--7ce8be11-2faa-484e-b5e6-8af1d398408a", "sighting--053f3ce8-692f-4089-b205-f6393b5fd522", "sighting--36cd77f9-609f-48b9-9c0a-1c93f65f384b", "sighting--6b9d339a-cede-47f3-8fbd-f541dad74a76", "sighting--2bf77b0c-650b-407e-971c-bcf01191741a", "sighting--3b6f246d-1732-43b4-b0a0-563ff2e2b411", "sighting--5d3fa1dc-5aae-4722-b7b7-5d7a627dea0e", "sighting--0abe7fa9-5063-4637-a5f4-ead6a6319663", "sighting--1c1e7392-1d95-4e13-abba-2147ce2b9353", "sighting--53eaa078-e046-44b8-9c12-860988e7d634", "sighting--229a2a5c-c2df-4589-97cf-4c21fd69dba8", "sighting--709760eb-42da-4307-b850-74ea781a67a6", "sighting--3b36144c-e41c-4402-9aac-099d10a588b9", "sighting--2dc9dd99-64f0-4a6d-a4e1-135de2c0a9d5", "sighting--e073e3a7-8215-4493-89e9-40050c6c2012", "sighting--e5bf1572-806c-4e84-9370-91f64f9078a3", "sighting--573811d8-0fab-4d38-9459-8a76c95b08f1", "sighting--c78a6bf7-9a01-4ca5-93ab-4688bd70ec35", "sighting--2e8d42bc-3ace-416a-9e53-27744971d603", "sighting--cf2b1495-af89-4ae7-84ae-e2ca7bfb86e4", "sighting--39a93d5c-bf53-4a71-a5de-f919e42177b5", "sighting--e4080c11-a92e-4fa4-b2b4-0af32d4b204a", "sighting--ae5e48ca-ad5a-4a45-aebd-a38905f59869", "sighting--43eb9cca-528e-4a71-b204-8dc30571b6ff", "sighting--0338b9ea-6446-41e1-aa08-895012c9470f", "sighting--f379ff16-5ba1-4db1-aa0d-148bf0d4819b", "sighting--3dc7a867-97b8-4269-ae25-d65383bfac60", "sighting--2cc48533-ae89-4f2a-846a-458ec966bbe6", "sighting--4ae3982f-1225-4ddf-b2b5-484b4297e464", "sighting--7536a93a-282f-4d47-87ac-6101d1f8f409", "sighting--19ed7958-4cf2-4525-8c1c-d20bb0e2cc4c", "sighting--c2323e4f-4a35-417c-9be9-7b368b46a964", "sighting--4cf02eef-d02c-4414-8227-c533994e4b20", "sighting--3ee6daaa-51b5-41f9-8ea3-341ae6de4445", "sighting--0a053b08-04d0-4782-9620-a47ed831ad2d", "sighting--7c2470f4-0db0-434c-8b64-c3e138b7ac7d", "sighting--f1d46a6f-a326-4fdf-843e-1a1c026f8a4d", "sighting--14758298-1b5f-4dd6-b0f2-bf8212bb3a67", "sighting--7ca62e8e-aaa9-42ba-bb2a-ae9fe37195f2", "sighting--b618ec0f-8352-4daa-8b98-34dbc6b4e8d4", "sighting--c575bb71-9310-4127-8b70-ff5361a7f922", "sighting--f1e42384-2a6a-4566-b6db-3ea97dc39899", "sighting--c0adcd35-7ce3-4e7b-9b67-e95385a559ee", "sighting--ebf815b2-de94-4c3b-86da-a8c662a78a1b", "sighting--6c6001a5-29af-4bdb-bb83-b6171c1d47dc", "sighting--166cee18-bd42-4fd3-a9b3-f5675ffedd7a", "sighting--3df63875-99c9-4eab-86da-ee6da7a1af06", "sighting--a5370148-7392-4681-aff1-7d94edc6dcb5", "sighting--2629d40a-afcd-4071-8344-6d365efa01dd", "sighting--cf22ae76-f085-467e-9d68-66a964a237b9", "sighting--e34ac628-05a8-445e-8eed-89e2c1ffffc0", "sighting--5c72f711-7178-47ab-9b95-25d62ca4aa27", "sighting--e1a5be8b-69b0-496f-982b-15e05e732de7", "sighting--ea4477f5-271e-4a44-a336-9dc952cddfb2", "sighting--e40845af-bbb3-4dfc-9960-575b50c8d637", "sighting--11be4eca-d5d0-4dd3-94b9-815dae443fb3", "sighting--95b65184-c184-4a9f-b54a-92b0984ec017", "sighting--13b37d91-0bc9-4ce2-ab7a-f70e2cf28f39", "sighting--83424dde-2724-4485-bef0-1391a9b23555", "sighting--f9215b32-cec9-477d-ac45-05afecdd6c5f", "sighting--ca6d6cc2-5413-4f84-802c-2c9bf99457b2", "sighting--eca51ad1-d5cd-49c5-ac95-0789c249b268", "sighting--6ef3f5c0-a71e-4c20-8880-94591a2f343a", "sighting--1b00cd8c-9095-437f-8ac1-c648529b0c20", "sighting--9b9c4c25-e319-4a76-b3cb-09807cc798bf", "sighting--60616619-4e88-4b40-9ebf-a101d4d59434", "sighting--c96af69e-7a5a-41b9-92de-ace702530d57", "sighting--8c3baf9a-2cc3-4095-acab-c56f2aaf7452", "sighting--29dd7a31-6fd4-45e4-a39c-0ee9ad9c91c5", "sighting--a6da7f82-9e28-4ee2-82f6-05dc2691c092", "sighting--f7dd1baf-7ad4-4c4e-b562-b16c5a8bd181", "sighting--b53ac57d-3970-491e-b221-0b3e963a53e7", "sighting--460bc5fd-f6d0-4e5d-85bb-3fef0b77b8ce", "sighting--150c5976-2c1f-473c-8910-5880854ad763", "sighting--507024d1-33d3-410a-abda-303482d24770", "sighting--59484040-add0-4497-b58c-249f4d7a6e01", "sighting--85f6acb2-cdfb-4389-b283-d04f4092569d", "sighting--97fa261f-b3e4-4665-972e-4a90291dc409", "sighting--26d27858-712f-4758-9c36-abb01f59a726", "sighting--e3196ffe-deca-40d7-a2ea-26b5088103fc", "sighting--a1ed52a3-69f3-43a1-92e9-71e70d49f05a", "sighting--2aec72b5-b155-4d2a-b3bf-acc3c733aa6c", "sighting--a5fcfe31-baeb-4d39-8d90-4ff18cd45c53", "sighting--e561a0e7-e581-4500-bbcc-0929fb4661ea", "sighting--b4380e16-6915-4331-b73a-46ff974028ef", "sighting--40212a66-220b-4258-ab82-654a4392c48f", "sighting--496a71cf-e879-4b6c-97a3-9c8d538a6f76", "sighting--d1bcd6fe-210c-440b-8985-c9c43bf0fda0", "sighting--80e32d0c-74e0-4f3b-add0-d72ab5c1e294", "sighting--e122ef4d-a33f-4aa4-8a4e-585d6bf0e214", "sighting--3b2b88c0-83db-4a16-acb3-8ab13bcea98c", "sighting--7df11b09-5570-41aa-aff8-9a9b193a148b", "sighting--5c3eafe4-8e6b-4e3e-9de3-1f72c98e95f6", "sighting--6957351b-47cf-47ea-8890-90a7c9941655", "sighting--c50d1a42-7513-442e-a77f-236adcde8542", "sighting--3d13d408-28c0-483b-992a-360b05feb5f5", "sighting--fc638258-7704-4b02-8360-454290d5069b", "sighting--9daa11af-296d-4af1-91a6-d252b6ce8775", "sighting--6fa24527-75d7-4283-9e48-b84654e86fc1", "sighting--e8c824b6-05af-44fc-92c5-c6f1888ed67f", "sighting--72fe6d5c-837e-455e-b229-a9f9a0878434", "sighting--dc848a54-1c6b-4d08-a1c9-bd71414897dc", "sighting--c73b51ea-b8dc-4ed7-9069-64c6d01fa4d7", "sighting--67bd33eb-daa8-440c-9523-ba9a225bf381", "sighting--4181f532-a929-4b10-bdb5-e4228405668d", "sighting--a6e7d185-3fb5-4e43-8233-4e949892c10b", "sighting--e68db045-6d61-4ab4-927e-5010164a6ff4", "sighting--412e90bf-0605-4a6a-93a3-a180ed3e7938", "sighting--106ae7bf-3d50-43ac-99bc-8f44582ae620", "sighting--c510e6c4-b284-49ff-85f4-1df27692be55", "sighting--ef82f4e0-82ac-4e35-aaa8-94bdd5fde66f", "sighting--0bdd4b7b-efd0-4e14-ac4d-66d4c283aba5", "sighting--6fa0f4cf-0277-4519-ac87-e1d928bdc0a0", "sighting--476eba09-45a1-4913-9887-15b49647a4f9", "sighting--d41d2549-615f-4be3-9aea-6c6af4f603f9", "sighting--2fb3eb73-d070-46fe-9402-2dc4d2482694", "sighting--be33dcec-3789-4a0d-b8d4-e3ad268d15ef", "sighting--da33202d-5b94-4333-9387-0d5bff46f614", "sighting--7fd0ec89-eee4-4c87-8c15-9382a554feed", "sighting--33558e84-9c8e-442b-85e2-04d4e3cd0660", "sighting--1dad6fcd-a9e2-4272-aa2b-32407925d347", "sighting--99f7e50f-7948-4736-afa4-68ef8ded4219", "sighting--cb7be3ff-fb96-4c4c-9f1d-b739d6f9da9d", "sighting--f35d5eff-f0ab-449c-b9e2-46c668ae0a2c", "sighting--47cff67c-77fc-4213-bf6e-99f32de001d9", "sighting--8ebf3836-e3b6-4ef4-b7fb-c2bb64a19483", "sighting--c87866f1-a825-4ff0-8fac-922c18a4e5fc", "sighting--c81d3c87-e994-4ee5-8f57-7c5856f28711", "sighting--ba11f6d2-5080-4825-bb7e-8da7cb902155", "sighting--f0c189ff-3600-4f0a-9166-31855a090d04", "sighting--ef3e72d7-ae75-40ee-8ca3-412750c2e2fb", "sighting--c0985156-af1d-4885-ab94-31fa2b500047", "sighting--6e6b46da-42e4-40e8-a0e9-43cdcfed503f", "sighting--a588b315-af86-4a86-882b-454ed101d042", "sighting--4254cd20-bd55-43d3-9235-a88eab1183e9", "sighting--db944cc6-07c8-453d-a7b3-b0b581a13bc0", "sighting--155182e5-4af6-4e98-aeeb-ca8777cf709f", "sighting--df3b28d1-943f-477c-9e03-e0ba3b1df247", "sighting--9f6bf6dd-9b6e-4108-bd36-45a58d5a2f49", "sighting--e0038805-e385-4baa-8959-e999abad3cb9", "sighting--5d434486-5b54-424a-9cfe-4c312d40b73f", "sighting--9c625399-8a67-489f-b4cc-4db29c16141a", "sighting--b69256ae-343c-4b93-87b3-8b0cda9ee122", "sighting--7f8f813c-0092-4174-a435-79780ca7cec7", "sighting--5455d6fb-e6a0-4c93-9afb-c923d2902cd1", "sighting--d86f97ad-d659-4a6c-883c-d176d4a40601", "sighting--f53f2034-c5cb-4262-afa4-7eace8b20fdd", "sighting--d4ab5330-343c-4e1d-8611-b499cc415afa", "sighting--5b8cc5c4-3eb1-49b3-974f-e29d43025411", "sighting--aab0b6b6-24dc-47f7-917b-ce45a92d7bd4", "sighting--94f5a9d8-3928-41af-818f-2a48dd597b0c", "sighting--cc990cb4-6de4-47df-90a9-3f07d0352a2a", "sighting--b054f671-1469-4bd6-a6b3-5ad5a9645c1e", "sighting--411adee6-48f6-4f3e-bfb7-2a9b179b0f0a", "sighting--3a3a2bf7-6ab4-49d5-a3a9-7930df57be9d", "sighting--4c8c3a30-e994-4076-b01a-b59143b1f018", "sighting--6ab5ff7c-f3ff-406c-851d-82e088befb87", "sighting--75b3ef9e-23f0-4b4a-a55b-030d5255606b", "sighting--eb1185da-f5e8-40d2-bbbd-c84fb9148217", "sighting--6dc268c7-6c88-4d2d-a3b0-34491d45d231", "sighting--32839555-4adb-443d-abca-ae28f36e7c3d", "sighting--d71c7c56-dad1-41f8-b6b1-8427e97b4a94", "sighting--4d9f3f26-4a3c-4399-a93a-cb5906c17147", "sighting--a4d5084c-3360-4d4b-bf50-be6511a9a0f4", "sighting--acf63699-80b7-4938-8888-c90e6e16e08d", "sighting--e6bc3c8b-f5ff-422d-adcd-cf1f99331821", "sighting--36539c94-9a87-4511-ab2e-04ed770a64ac", "sighting--b99164d3-47d8-4481-a5ba-4454c279e9ee", "sighting--204c13b3-b5dd-4346-8c2b-4577953d0006", "sighting--8d83d267-13f9-4e13-bf35-4724b231a7a2", "sighting--0b450763-62aa-4055-9ba5-4d7180d77dfd", "sighting--374eb4e4-873e-4f51-b08b-4c8cba02a953", "sighting--43d5d02b-6d11-4b40-baa0-c06d48151247", "sighting--3ea783f8-d970-417a-8e89-27baa4f01aad", "sighting--448e8361-a4c5-4b4a-b892-dcefc1a93bc1", "sighting--26228bb2-3740-4781-aadf-dfa5eb552fdd", "sighting--76d4c5c4-fb40-498b-a337-ad1d9dd76b78", "sighting--d6a81dc3-a665-4a81-a417-33ca85c50670", "sighting--99c613d5-a813-4646-8fea-4fef82069298", "sighting--d56de768-c4fa-4e91-aa73-c457666ceabb", "sighting--b73294e2-f471-46f3-968d-e6fa15968fd8", "sighting--ffa7085d-5f86-40a4-ba26-80345ec3956a", "sighting--d174c01c-3d57-47aa-b644-0a57283b6c0e", "sighting--a66aac29-888f-4555-aa71-adc524e4577c", "sighting--b1327aa4-9f33-47c6-a839-887ed19b5dca", "sighting--5c92b478-e37f-4f8e-b3e6-6317b8d8cf12", "sighting--a1671b51-ec4f-4d13-8a75-968349de2768", "sighting--03de49cc-2764-4324-9738-d116c133c576", "sighting--2b6ac68b-f028-4808-8c44-19fbb9c1b063", "sighting--017ede1c-2666-48c2-a6d7-3b1191debaf4", "sighting--269fe065-707c-4d23-a124-94424bd91bc6", "sighting--e869fdb7-25e9-49eb-8645-3fd86e15b588", "sighting--7c37697d-be76-4a99-9407-80382a5006c9", "sighting--ca328209-5c69-4343-8c1e-72c425e64874", "sighting--285e67dc-c2a1-4879-8a21-cb05a5be5a9d", "sighting--71128d2b-a483-47bf-a191-ba788deb9b33", "sighting--a0f9dc31-3343-4f9d-b3b6-eb7c50d03a62", "sighting--be9e3f1d-35a9-4a09-9199-fe10579b3b8a", "sighting--b36b6b7b-2c05-4d61-8d61-527e8b700fbd", "sighting--39e92312-6feb-48f3-9236-9ba167aa0cda", "sighting--a4c39e68-d42d-4845-807c-4a9a777190ac", "sighting--50aaa67b-f837-431d-bdac-85cec5497258", "sighting--692aebfe-9695-4c3b-a75a-cbd7143eb70e", "sighting--cacd7ba5-7023-49dc-a6d5-a571f5cc6716", "sighting--5c243199-6052-42a7-8698-71fadffb863a", "sighting--aa43f31f-5078-4824-8155-6946a804122e", "sighting--dec64246-d366-42da-85ae-e08b53c99103", "sighting--b36d6252-0c0b-47fd-ada5-cdd966aaa8f6", "sighting--8c80b133-a211-4915-8f62-7f435d22198e", "sighting--ee1ecec1-9e4f-4125-ae4f-a7f6fe08dde2", "sighting--20a710e6-6800-436b-b5aa-d384381958a6", "sighting--88665615-515e-4630-85d7-c7a9a4b02d9e", "sighting--24ea1ae4-e152-4da7-bd1d-6b7d6b1f16e0", "sighting--5f049f88-f66b-4efd-a388-cc90533d7ed6", "sighting--8484b9a2-539f-499d-8ee7-3420a56eb115", "sighting--5a4857cb-d11d-4305-be77-2df26d735df1", "sighting--253082b5-e93c-446d-8dfc-844312540900", "sighting--1fe8fa7b-6b1e-43d5-8a5a-f055078bb745", "sighting--7c3eeb37-7708-4e24-90d6-e76a1b50783e", "sighting--70d95c6b-e596-4fc4-8dbe-9e4719809545", "sighting--6018c625-13d8-48f7-83c1-65c583e0b986", "sighting--4f239c24-df25-4bb0-8ddd-37bfcf2d2837", "sighting--53552241-bc1d-4a66-9612-7bbd269c1505", "sighting--0dbb5db3-2f30-4e45-86ff-b809fa18f1a2", "sighting--c7e99b32-ff80-495d-806a-bd611633f782", "sighting--923c596f-fca4-4c8f-b051-1a19a009cf1d", "sighting--5dd132c2-c922-4e68-b1a7-c678a7dcf61f", "sighting--1eb8894d-90cd-4249-b837-dc30ddc36087", "sighting--e15b7771-b3d8-4728-a90b-486fb9b36f51", "sighting--54980da5-6da9-48d1-8a01-ffff3860db92", "sighting--c3a51414-d115-49f8-8760-ab74f2d72fbc", "sighting--458e729b-a185-451e-bd9c-a9b4fe075a06", "sighting--907e01db-0399-4994-b788-fdbe78976805", "sighting--bfafe6df-09a3-4082-b57e-9d755eaa6112", "sighting--795f17a9-e50b-4496-97ab-9ece27c2f053", "sighting--16228e7d-036b-4d7b-8895-1e23db3ad3a4", "sighting--c05a2d17-a7aa-4a53-be72-137eedf77770", "sighting--62cbab9e-6e54-4c83-bd06-ae7e8e07e6dd", "sighting--c4ef80ec-c615-441a-bc8c-562425bb9136", "sighting--24373b56-fded-4358-9a4e-6c5069fa1e53", "sighting--40d3dd35-ad3c-4de5-b63c-14d77cb6f26e", "sighting--256abd40-9366-4973-933b-1c3e69cd308a", "sighting--6eefcd59-8497-4b4a-a42c-be3d3af90ef1", "sighting--15d35a05-349e-45a7-a90f-193055cf0933", "sighting--3696883b-7cea-4131-9c92-9b42231df927", "sighting--af0bb1db-fb8c-4b95-ba38-6cc1a2728f3b", "sighting--0fdf20c8-527c-4330-b94c-3abaf315075a", "sighting--7f1eb0b9-f1af-4b55-9e49-cc42d564f5d0", "sighting--d8b13a1e-ae73-49f4-b9b8-54c2ff3b1cf8", "sighting--e84ac91a-0ae5-4685-8499-322a5e82f1ec", "sighting--85178c0d-8952-498a-9d0e-c98f00b79761", "sighting--6854acfd-734c-4b20-91ac-17a158805364", "sighting--73610c33-ce47-49d6-b2db-56b37f26115f", "sighting--88be7015-dc94-4787-b2db-6023b7af26d4", "sighting--84304cee-3fc5-4a9e-b9f0-625921e53892", "sighting--a082b5dc-f8ce-4968-96dc-79cad74bb8f2", "sighting--ab44746d-f333-46d2-94d7-81d4cb157113", "sighting--05f4e8f1-f679-4414-a7b5-cf6a58ab8ac0", "sighting--c2d318bd-085d-4bea-b766-ce316eafaa8a", "sighting--ed3bbc52-6182-4d1a-856e-adc1fb597c55", "sighting--7dc36875-dd57-4ef7-9954-b23755234c63", "sighting--06605b22-a3e3-461b-bc8b-78e9c56e58b6", "sighting--5eaf0a5a-83d4-4830-bb4b-1f861c4bf593", "sighting--59e8bc04-ddad-4c81-8578-b652cc5b4e79", "sighting--a20f8259-9e13-4d9d-abaa-4e8ff5632fc2", "sighting--17a3c1c7-4cc5-409b-9996-d23c024d86b6", "sighting--af119342-c27f-4b53-af00-36958d0b507e", "sighting--a380ed48-cb92-4540-975b-805b0f6b2156", "sighting--d4e5fff5-a3ab-42b5-a82d-b1d81265cd22", "sighting--23c97542-79dc-435b-b93a-e29fba751b49", "sighting--7aa6e0db-977f-4a09-9220-a9287bc09423", "sighting--f309095e-228d-4ad2-8017-61ec7838a694", "sighting--d752d5d8-f761-4e8e-8e7c-e66861c2e132", "sighting--fb60477c-7592-4518-9999-55e92aed575f", "sighting--48340a3b-6b37-48e8-be77-7736ab6dc2f9", "sighting--13e52fd5-40ba-42f7-b8cf-8cd569a74a5c", "sighting--c631f18a-903b-4ed4-9e16-31398a12d99e", "sighting--4688ca1e-4aa4-481d-b704-de00e3dbb7a4", "sighting--0b73bfc3-e024-4827-8cd4-b15455263d91", "sighting--62333ace-9862-45bc-95a9-559d67659394", "sighting--07ccda2f-14bf-42ff-bc5a-2fa69b3de825", "sighting--e30cd08b-58f3-49af-9346-acee7a98c6b4", "sighting--e1e8af96-e9f6-414c-9746-6256993c50a7", "sighting--62de6e37-9156-4b40-9de4-7cf7ffdc1734", "sighting--ce57cb2d-7fb0-4a0e-831a-52e4f378a97d", "sighting--515ebe2d-401e-45a8-b9ee-01fc830a8965", "sighting--b729f36d-1bba-4053-a3c6-94cb38de763c", "sighting--f5b1dea2-51eb-46ed-ade4-740709b44d9b", "sighting--b5e21ce6-7b59-4b7c-a4e0-9612abbcfc63", "sighting--8dcfca81-3543-42d5-951c-5492ba564566", "sighting--e9f955a6-921e-4931-baa8-70665f799dd6", "sighting--ba0c9d15-8c8e-4c51-ae33-f6ed4bf5dbb8", "sighting--28056ccb-66c1-401b-996a-e5b110ffedb6", "sighting--64e30450-680c-44a3-b9b4-3a4ba4877618", "sighting--d9ae2a00-d69a-4b9d-afe9-44bd9d06160b", "sighting--a0b27e3d-6c8b-467b-ba4e-2ee3f80e3b27", "sighting--d39697da-3a3a-4f08-8450-a6119328464d", "sighting--c1ca94ac-60bc-4d41-b3b9-da8572ba0239", "sighting--f57749bd-fbc5-4fe8-b3a3-9d4c94ba0b74", "sighting--4bfb9cec-8fa2-4600-b4d1-8a8a3fe40919", "sighting--9bc63117-318d-4e8b-b679-9554457a4ada", "sighting--ccbb12e9-0276-48a1-b933-997a6d49ce8b", "sighting--b782aa71-1da0-4f92-a51a-619318874199", "sighting--90d411ac-cb8c-402d-a42e-97067735bf56", "sighting--e2ce552f-bbbc-4489-92da-f2c6d81e2d81", "sighting--0f529757-3633-4e9d-b459-67027dea5f82", "sighting--4506b844-6500-470b-9c3b-67461cf46b4f", "sighting--a83d5d3a-e357-4a18-9574-f7b02bea59a3", "sighting--5ffb405b-d846-441c-a824-d34fb8de2092", "sighting--0dafac02-5ce0-4dde-aa0c-55df1d19dcb9", "sighting--59c4770a-5757-4a32-87cf-c48de62ddc4a", "sighting--f937a03b-42f7-492b-be50-177ad0c96f08", "sighting--fae32047-fc3e-4809-983f-86d8cefd904e", "sighting--9506f5f5-ca0e-467b-976b-4998f7d18655", "sighting--2a952db7-6246-45f8-bd66-6282a2b48d0e", "sighting--55c69846-2c8c-4737-ae16-f9388a1dd186", "sighting--c4757788-67bc-4e55-aafd-382aca3f8a8d", "sighting--da1110de-ccad-4bdc-b389-b784dd5522bf", "sighting--f9000dfe-3deb-4549-913f-60021c512fcf", "sighting--17bcad0e-324f-4f6b-974f-4c3801a9bb71", "sighting--ce288daa-d2f6-4c61-8f6a-fdd76c5752a4", "sighting--eb56cfac-c121-4ae8-bd66-f44eff1ee7f0", "sighting--96eb4b7d-71f3-4dad-9b5f-7f627f195039", "sighting--c5ee9f17-12d4-4c7e-b584-01b184483687", "sighting--b4632d4b-5326-4b8b-a63e-e665d4379bbb", "sighting--35329654-cb00-4992-ace7-f130a6d7808c", "sighting--c42e179a-4654-4b94-b7ea-4e9e4e430366", "sighting--655179a4-dc76-4ffa-b852-b43548d0b382", "sighting--4691332b-dc68-4022-923f-98dcc2bd01cd", "sighting--03a3aab1-3d4a-4c4d-90e3-51fac84317e7", "sighting--a6004a4b-ba5c-4174-bc66-0a40270d80b3", "sighting--2b417c47-c1aa-4e54-8b85-a12b87445efc", "sighting--6ed47b51-9f60-433f-8552-447c67ca662d", "sighting--7bca1a7f-9db8-42de-89eb-e46d059ea3eb", "sighting--e422dd42-374e-472a-9795-4b1f200abdbe", "sighting--da8eb237-ed19-4b0f-85be-f0b5e7952517", "sighting--cef2ac3f-79ed-41c7-80e6-46f205f001bf", "sighting--038beff9-625d-4e99-ae4b-917744515335", "sighting--343138a5-3ecf-4632-aaa3-fcae2f41ffbe", "sighting--b8985fbc-ff7b-4fa2-8304-9ea1d6601b76", "sighting--fed8df9b-a867-4fff-92c3-c568689571c0", "sighting--ac2d6e75-193a-4c2b-b24e-408e86a99c87", "sighting--15eeacd2-d5fd-466e-9c85-d4255be78c4e", "sighting--004686b1-69af-4021-b9b6-b6d06aa2d221", "sighting--34933f3f-3404-46aa-8a10-1da81ba1cc9d", "sighting--feb20bf8-c0f5-4ef8-a08f-609779fd9721", "sighting--ebce831e-c61e-4bb4-9773-ae31e93a3416", "sighting--44fa4b47-adb9-4c0b-bac1-1fd66266625e", "sighting--dc3f8dcc-5c35-448e-ae91-ab84bba318f6", "sighting--0f44fb56-c227-40f8-9872-182cbca62231", "sighting--8d5b106a-6853-424e-b17d-e5092785e7be", "sighting--96f51340-65c8-4d44-b2ef-4770770cb4a5", "sighting--6fc88460-39f7-4dc1-ae02-ebadea4f7c8d", "sighting--3f5ed367-ac76-48ab-a934-98c8d3768ba2", "sighting--7e6d7c67-0874-4a88-8b62-410ee3c7958f", "sighting--a67d2310-76ee-4415-82cf-4be842bd9e4a", "sighting--8fe7070a-a96c-4f93-8e18-bdd200dbe859", "sighting--94454613-5184-4a65-8411-0d675b8bb692", "sighting--47db1dd9-5400-4fae-91bf-50afb00e5b56", "sighting--abec519a-27a5-4b28-a647-106aed8a043b", "sighting--7442211f-b55d-49c7-97eb-a1b4e1bfb8c2", "sighting--b3aeabe3-a6b5-476f-9632-78768258c0fd", "sighting--ba854840-fbfd-4e04-86dc-750b93fd2f1b", "sighting--0c1ee241-5715-40f0-b1b6-35c6b46963a4"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-18T11:00:01.174Z", "modified": "2026-06-18T11:00:01.174Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}